Edit tour

Windows Analysis Report
http://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html

Overview

General Information

Sample URL:	http://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html
Analysis ID:	1637047
Infos:

Detection

HTMLPhisher

Score:	72
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Yara detected HtmlPhish64

Creates files inside the system directory

Deletes files inside the Windows folder

Form action URLs do not match main URL

HTML body contains low number of good links

HTML title does not match URL

Invalid T&C link found

Javascript checks online IP of machine

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6824 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7048 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2044,i,2347923341624996425,12829868139032014794,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2072 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7432 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
0.1.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
0.0.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html

Avira URL Cloud: detection malicious, Label: phishing

Antivirus detection for URL or domain

Source: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/img/star.png	Avira URL Cloud: Label: phishing
Source: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/styles/bootstrap.min.css	Avira URL Cloud: Label: phishing
Source: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/styles/js	Avira URL Cloud: Label: phishing
Source: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/img/doc.png	Avira URL Cloud: Label: phishing
Source: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/styles/ico.ico	Avira URL Cloud: Label: phishing
Source: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/img/save_img.png	Avira URL Cloud: Label: phishing
Source: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/img/meta-logo-grey.png	Avira URL Cloud: Label: phishing
Source: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/img/no_avatar.png	Avira URL Cloud: Label: phishing
Source: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/img/fb_round_logo.png	Avira URL Cloud: Label: phishing
Source: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/img/phone.png	Avira URL Cloud: Label: phishing
Source: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/img/block_2.png	Avira URL Cloud: Label: phishing
Source: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/img/2FA.png	Avira URL Cloud: Label: phishing
Source: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/img/meta-logo-grey.png	Avira URL Cloud: Label: phishing
Source: https://b2-nine.vercel.app/ruu.html/hwkls.html	Avira URL Cloud: Label: malware
Source: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/img/dir.png	Avira URL Cloud: Label: phishing
Source: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/styles/jquery.min.js.download	Avira URL Cloud: Label: phishing
Source: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/styles/style.css	Avira URL Cloud: Label: phishing

Phishing

AI detected phishing page

Source: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html	Joe Sandbox AI: Score: 9 Reasons: The brand 'Meta' is well-known and is associated with the legitimate domain 'meta.com'., The URL '10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app' does not match the legitimate domain for Meta., The URL contains a random string of characters, which is a common tactic used in phishing to obscure the true nature of the site., The domain 'vercel.app' is a hosting platform and not directly associated with Meta, which raises suspicion., The presence of input fields for 'Full Name' and 'Personal Email' is typical for phishing sites attempting to collect personal information. DOM: 0.0.pages.csv
Source: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html	Joe Sandbox AI: Score: 9 Reasons: The brand 'Meta' is well-known and is associated with the legitimate domain 'meta.com'., The URL '10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app' does not match the legitimate domain for Meta., The URL contains a random string of characters, which is a common tactic used in phishing URLs to obfuscate the true nature of the site., The domain 'vercel.app' is a hosting platform and not directly associated with Meta, which raises suspicion., The presence of input fields for 'Full Name' and 'Personal Email' is typical for phishing sites attempting to collect personal information. DOM: 0.1.pages.csv

Yara detected HtmlPhish64

Source: Yara match	File source: 0.1.pages.csv, type: HTML
Source: Yara match	File source: 0.0.pages.csv, type: HTML

Source: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html	HTTP Parser: Form action: https://facebook.com/ vercel facebook
Source: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html	HTTP Parser: Form action: https://facebook.com/ vercel facebook

Source: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html

HTTP Parser: Number of links: 0

Source: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html

HTTP Parser: Title: Meta for Business - Page Appeal does not match URL

Source: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html	HTTP Parser: Invalid link: Terms of use
Source: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html	HTTP Parser: Invalid link: Privacy Policy
Source: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html	HTTP Parser: Invalid link: Terms of use
Source: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html	HTTP Parser: Invalid link: Privacy Policy
Source: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html	HTTP Parser: Invalid link: Community Payment Terms
Source: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html	HTTP Parser: Invalid link: Commercial terms
Source: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html	HTTP Parser: Invalid link: Terms of use
Source: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html	HTTP Parser: Invalid link: Privacy Policy
Source: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html	HTTP Parser: Invalid link: Terms of use
Source: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html	HTTP Parser: Invalid link: Privacy Policy
Source: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html	HTTP Parser: Invalid link: Community Payment Terms
Source: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html	HTTP Parser: Invalid link: Commercial terms

Source: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html

HTTP Parser: const sublinks = { 'policycollapse': [{ 'text': 'what is the privacy policy and what does it cover?', 'link': '', 'add_svg_link': false }, { 'text': 'what information do we collect?', 'link': '', 'add_svg_link': false }, { 'text': 'how do we use your information?', 'link': '', 'add_svg_link': false }, { 'text': 'how do we share your information on meta products or with integrated partners?', 'link': '', 'add_svg_link': false }, { 'text': 'how do we share information with third parties?', 'link': '', 'add_svg_link': false }, { 'text': 'how is the cooperation between meta companies organized?', 'link': '',...

Source: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html

HTTP Parser: <input type="password" .../> found

Source: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html	HTTP Parser: No <meta name="author".. found
Source: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html	HTTP Parser: No <meta name="author".. found

Source: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html	HTTP Parser: No <meta name="copyright".. found
Source: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html	HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 204.79.197.222:443 -> 192.168.2.4:49738 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.212.131
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.212.131
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.77.188
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /case/100081295808699.html HTTP/1.1Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.appConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /styles/bootstrap.min.css HTTP/1.1Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /styles/style.css HTTP/1.1Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /styles/jquery.min.js.download HTTP/1.1Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/fb_round_logo.png HTTP/1.1Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /case/img/block_2.png HTTP/1.1Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /case/img/meta-logo-grey.png HTTP/1.1Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/save_img.png HTTP/1.1Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /styles/js HTTP/1.1Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/doc.png HTTP/1.1Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /json HTTP/1.1Host: ipinfo.ioConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.appSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/meta-logo-grey.png HTTP/1.1Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/2FA.png HTTP/1.1Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/phone.png HTTP/1.1Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /json HTTP/1.1Host: ipinfo.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/fb_round_logo.png HTTP/1.1Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_MR52T79VEH=GS1.1.1741858159.1.0.1741858159.0.0.0; _ga=GA1.1.219411324.1741858159
Source: global traffic	HTTP traffic detected: GET /img/doc.png HTTP/1.1Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_MR52T79VEH=GS1.1.1741858159.1.0.1741858159.0.0.0; _ga=GA1.1.219411324.1741858159
Source: global traffic	HTTP traffic detected: GET /img/save_img.png HTTP/1.1Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_MR52T79VEH=GS1.1.1741858159.1.0.1741858159.0.0.0; _ga=GA1.1.219411324.1741858159
Source: global traffic	HTTP traffic detected: GET /case/img/star.png HTTP/1.1Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /case/img/dir.png HTTP/1.1Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /case/img/no_avatar.png HTTP/1.1Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/meta-logo-grey.png HTTP/1.1Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_MR52T79VEH=GS1.1.1741858159.1.0.1741858159.0.0.0; _ga=GA1.1.219411324.1741858159
Source: global traffic	HTTP traffic detected: GET /img/phone.png HTTP/1.1Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_MR52T79VEH=GS1.1.1741858159.1.0.1741858159.0.0.0; _ga=GA1.1.219411324.1741858159
Source: global traffic	HTTP traffic detected: GET /img/2FA.png HTTP/1.1Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_MR52T79VEH=GS1.1.1741858159.1.0.1741858159.0.0.0; _ga=GA1.1.219411324.1741858159
Source: global traffic	HTTP traffic detected: GET /styles/ico.ico HTTP/1.1Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_MR52T79VEH=GS1.1.1741858159.1.0.1741858159.0.0.0; _ga=GA1.1.219411324.1741858159
Source: global traffic	HTTP traffic detected: GET /styles/ico.ico HTTP/1.1Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga_MR52T79VEH=GS1.1.1741858159.1.0.1741858159.0.0.0; _ga=GA1.1.219411324.1741858159

Source: chromecache_68.2.dr	String found in binary or memory: Math.round(q);t["gtm.videoElapsedTime"]=Math.round(f);t["gtm.videoPercent"]=r;t["gtm.videoVisible"]=u;return t},Nk:function(){e=nb()},Kd:function(){d()}}};var Vb=wa(["data-gtm-yt-inspected-"]),QE=["www.youtube.com","www.youtube-nocookie.com"],RE,SE=!1; equals www.youtube.com (Youtube)
Source: chromecache_68.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=vC(a,c,e);U(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return U(122),!0;if(d&&f){for(var m=yb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},yC=function(){var a=[],b=function(c){return bb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_68.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={Kh:e,Ih:f,Jh:g,ri:k,si:m,bf:n,Mb:b},q=A.YT;if(q)return q.ready&&q.ready(d),b;var r=A.onYouTubeIframeAPIReady;A.onYouTubeIframeAPIReady=function(){r&&r();d()};H(function(){for(var u=E.getElementsByTagName("script"),v=u.length,t=0;t<v;t++){var w=u[t].getAttribute("src");if(aF(w,"iframe_api")\|\|aF(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,B=0;B<y;B++)if(!SE&&ZE(x[B],p.bf))return lc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_68.2.dr	String found in binary or memory: var cE=function(a,b,c,d,e){var f=TB("fsl",c?"nv.mwt":"mwt",0),g;g=c?TB("fsl","nv.ids",[]):TB("fsl","ids",[]);if(!g.length)return!0;var k=YB(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);U(121);if(m==="https://www.facebook.com/tr/")return U(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!DA(k,FA(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app
Source: global traffic	DNS traffic detected: DNS query: ipinfo.io

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: public, max-age=0, must-revalidateContent-Length: 79Content-Type: text/plain; charset=utf-8Date: Thu, 13 Mar 2025 09:29:18 GMTServer: VercelStrict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Vercel-Error: NOT_FOUNDX-Vercel-Id: iad1::zm4pd-1741858158714-599a8bc897d5Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: public, max-age=0, must-revalidateContent-Length: 79Content-Type: text/plain; charset=utf-8Date: Thu, 13 Mar 2025 09:29:18 GMTServer: VercelStrict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Vercel-Error: NOT_FOUNDX-Vercel-Id: iad1::jtnlc-1741858158984-45f40384bae9Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: public, max-age=0, must-revalidateContent-Length: 79Content-Type: text/plain; charset=utf-8Date: Thu, 13 Mar 2025 09:29:22 GMTServer: VercelStrict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Vercel-Error: NOT_FOUNDX-Vercel-Id: iad1::qfkw8-1741858162383-8b11b1667b32Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: public, max-age=0, must-revalidateContent-Length: 79Content-Type: text/plain; charset=utf-8Date: Thu, 13 Mar 2025 09:29:22 GMTServer: VercelStrict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Vercel-Error: NOT_FOUNDX-Vercel-Id: iad1::rz92j-1741858162442-7a749a432682Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: public, max-age=0, must-revalidateContent-Length: 79Content-Type: text/plain; charset=utf-8Date: Thu, 13 Mar 2025 09:29:22 GMTServer: VercelStrict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Vercel-Error: NOT_FOUNDX-Vercel-Id: iad1::6p6kb-1741858162457-84dee695b4e3Connection: close

Source: chromecache_82.2.dr, chromecache_78.2.dr	String found in binary or memory: http://www.gimp.org/xmp/
Source: chromecache_68.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_85.2.dr	String found in binary or memory: https://api.emailjs.com/api/v1.0/email/send
Source: chromecache_85.2.dr	String found in binary or memory: https://b2-nine.vercel.app/ruu.html/hwkls.html
Source: chromecache_68.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_73.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_73.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_85.2.dr	String found in binary or memory: https://ipinfo.io/json
Source: chromecache_59.2.dr, chromecache_63.2.dr	String found in binary or memory: https://ipinfo.io/missingauth
Source: chromecache_68.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_68.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_85.2.dr	String found in binary or memory: https://popper.js.org)
Source: chromecache_68.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_68.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_68.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_68.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_68.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_68.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_68.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

Source: unknown

HTTPS traffic detected: 204.79.197.222:443 -> 192.168.2.4:49738 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir6824_1998229035

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir6824_1998229035

Jump to behavior

Source: classification engine

Classification label: mal72.phis.win@22/46@14/7

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2044,i,2347923341624996425,12829868139032014794,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2072 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2044,i,2347923341624996425,12829868139032014794,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2072 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html	100%	Avira URL Cloud	phishing

Source	Detection	Scanner	Label
https://api.emailjs.com/api/v1.0/email/send	0%	Avira URL Cloud	safe
https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/img/star.png	100%	Avira URL Cloud	phishing
https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/styles/bootstrap.min.css	100%	Avira URL Cloud	phishing
https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/styles/js	100%	Avira URL Cloud	phishing
https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/img/doc.png	100%	Avira URL Cloud	phishing
https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/styles/ico.ico	100%	Avira URL Cloud	phishing
https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/img/save_img.png	100%	Avira URL Cloud	phishing
https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/img/meta-logo-grey.png	100%	Avira URL Cloud	phishing
https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/img/no_avatar.png	100%	Avira URL Cloud	phishing
https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/img/fb_round_logo.png	100%	Avira URL Cloud	phishing
https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/img/phone.png	100%	Avira URL Cloud	phishing
https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/img/block_2.png	100%	Avira URL Cloud	phishing
https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/img/2FA.png	100%	Avira URL Cloud	phishing
https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/img/meta-logo-grey.png	100%	Avira URL Cloud	phishing
https://b2-nine.vercel.app/ruu.html/hwkls.html	100%	Avira URL Cloud	malware
https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/img/dir.png	100%	Avira URL Cloud	phishing
https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/styles/jquery.min.js.download	100%	Avira URL Cloud	phishing
https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/styles/style.css	100%	Avira URL Cloud	phishing
https://popper.js.org)	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
ipinfo.io	34.117.59.81	true	false	high
www.google.com	142.250.186.36	true	false	high
10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app	216.198.79.129	true	true	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/styles/bootstrap.min.css	false	Avira URL Cloud: phishing	unknown
https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/styles/ico.ico	false	Avira URL Cloud: phishing	unknown
https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/styles/js	false	Avira URL Cloud: phishing	unknown
https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/img/meta-logo-grey.png	false	Avira URL Cloud: phishing	unknown
https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/img/star.png	false	Avira URL Cloud: phishing	unknown
https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/img/doc.png	false	Avira URL Cloud: phishing	unknown
https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/img/no_avatar.png	false	Avira URL Cloud: phishing	unknown
https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/img/save_img.png	false	Avira URL Cloud: phishing	unknown
https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/img/fb_round_logo.png	false	Avira URL Cloud: phishing	unknown
https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/img/phone.png	false	Avira URL Cloud: phishing	unknown
https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html	true		unknown
https://ipinfo.io/json	false		high
https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/img/block_2.png	false	Avira URL Cloud: phishing	unknown
https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/img/meta-logo-grey.png	false	Avira URL Cloud: phishing	unknown
https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/img/2FA.png	false	Avira URL Cloud: phishing	unknown
https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/styles/jquery.min.js.download	false	Avira URL Cloud: phishing	unknown
https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/img/dir.png	false	Avira URL Cloud: phishing	unknown
https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/styles/style.css	false	Avira URL Cloud: phishing	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://api.emailjs.com/api/v1.0/email/send	chromecache_85.2.dr	false	Avira URL Cloud: safe	unknown
https://ipinfo.io/missingauth	chromecache_59.2.dr, chromecache_63.2.dr	false		high
https://stats.g.doubleclick.net/g/collect	chromecache_68.2.dr	false		high
https://github.com/twbs/bootstrap/blob/main/LICENSE)	chromecache_73.2.dr	false		high
http://www.gimp.org/xmp/	chromecache_82.2.dr, chromecache_78.2.dr	false		high
https://getbootstrap.com/)	chromecache_73.2.dr	false		high
https://cct.google/taggy/agent.js	chromecache_68.2.dr	false		high
https://www.google.com	chromecache_68.2.dr	false		high
https://www.youtube.com/iframe_api	chromecache_68.2.dr	false		high
https://td.doubleclick.net	chromecache_68.2.dr	false		high
https://www.merchant-center-analytics.goog	chromecache_68.2.dr	false		high
https://b2-nine.vercel.app/ruu.html/hwkls.html	chromecache_85.2.dr	false	Avira URL Cloud: malware	unknown
https://popper.js.org)	chromecache_85.2.dr	false	Avira URL Cloud: safe	unknown
https://adservice.google.com/pagead/regclk?	chromecache_68.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
216.198.79.193	unknown	United States	11696	NBS11696US	false
142.250.186.36	www.google.com	United States	15169	GOOGLEUS	false
34.117.59.81	ipinfo.io	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
216.198.79.1	unknown	United States	11696	NBS11696US	false

Private

IP
192.168.2.7
192.168.2.4
192.168.2.23

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1637047
Start date and time:	2025-03-13 10:27:55 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 26s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	19
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal72.phis.win@22/46@14/7
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, RuntimeBroker.exe, ShellExperienceHost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.99, 216.58.206.46, 108.177.15.84, 142.250.185.206, 142.250.185.174, 142.250.184.206, 142.250.185.110, 142.250.186.110, 142.250.181.234, 172.217.23.106, 142.250.185.170, 142.250.186.170, 172.217.16.138, 142.250.185.106, 142.250.185.202, 142.250.185.74, 216.58.206.74, 216.58.212.170, 142.250.186.74, 142.250.184.202, 216.58.212.138, 142.250.186.138, 142.250.185.138, 172.217.18.106, 216.58.212.142, 142.250.74.206, 142.250.181.238, 142.250.186.78, 172.217.16.206, 142.250.186.67, 142.250.186.35, 84.201.210.23, 23.60.203.209, 20.109.210.53
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, www.google-analytics.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	335
Entropy (8bit):	4.98328737936823
Encrypted:	false
SSDEEP:	6:NgWQLXUgFF19cIxLzXeK2B/N4cB/v//fRJvIEk/LO4zW1CRW35jY:N6EALvxHXCB14cBX/XRF5QFWV5k
MD5:	9746B20A05640ACDC79886410BB862C7
SHA1:	C3F38DDD997E67E70BFDF1AD90CB27E571B43BE9
SHA-256:	1B9EC721BC65B54D22FC66D8ED3E240BFFC0A4F6B46433BA18C2E3B4F4098C75
SHA-512:	289A5CD5E41D925C33E455364B4D36D55FD89E63C6CFD167367989A0C5461BF8559D6FB832995F6ECA828AC96432E0487B698949A3D4B63749F4A48F41C429BE
Malicious:	false
Reputation:	low
URL:	https://ipinfo.io/json
Preview:	{. "ip": "73.13.135.219",. "hostname": "c-73-13-135-219.hsd1.pa.comcast.net",. "city": "Philadelphia",. "region": "Pennsylvania",. "country": "US",. "loc": "39.9524,-75.1636",. "org": "AS7922 Comcast Cable Communications, LLC",. "postal": "19099",. "timezone": "America/New_York",. "readme": "https://ipinfo.io/missingauth".}

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	79
Entropy (8bit):	4.9145578879004646
Encrypted:	false
SSDEEP:	3:ErAbcBxYAFDJvzqxg1FifftOHp3dIMRoT223zv:1wBxYA7vzqxqEtOHptIhTjv
MD5:	63CE9AAF997C452BF21FF6CEBFD08100
SHA1:	463B4ED1280702EFB609BC1CB73EE195DBAC3FDA
SHA-256:	86B6D2472262FE81CCFFF1B46232C911ABB9F21B873CDCA25C56BA1990C0C8B6
SHA-512:	DD69376988B6DAA3B11C65626C009233FAF71392F1F8D9C260A919C4B45E269ACB1661FB17A1EFC883018F00F3F86DA78CFA1541963E6193E6E39763B2740911
Malicious:	false
Reputation:	low
URL:	https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/img/no_avatar.png
Preview:	The page could not be found..NOT_FOUND..iad1::6p6kb-1741858162457-84dee695b4e3.

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	2.7252607375087954
Encrypted:	false
SSDEEP:	24:Eg5ed8vZa+/kffJTyN5J5iXSvjTxatgFFjiZq1MJMaDgD6VDcl2HPwFf5zaTrZ4l:yfqHUs6hcEI5KrZ4jaJV9HxG8Q
MD5:	6701A4BA0B931AF579BE35B93631DA04
SHA1:	C8161484ACCCDD0CAE1CD6484F56942CB7FFD7DC
SHA-256:	CE8A22ECE441CFD0F09FB0359B8D683FED0E66F8BEC0BBC067A8257C95B05FD8
SHA-512:	C09E65509B04F904BB74C8AA78C099F4D195426293711F5EB6F3C47D6C27B9C278898CFD718FAFA5418E40498B7904D818A8DD654A956694550D0B43048151C2
Malicious:	false
Reputation:	low
URL:	https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/styles/ico.ico
Preview:	............ .h...&... .... .........(....... ..... ..........................................h. .f...............f...g...d.@.........................`...e...f...f...............f...f...f...e...p...............`...f...f...f...f...............f...f...f...f...f...p...........e...f...f...f...f...............f...f...f...f...f...e.......d.@.f...f...f...f...f...............f...f...f...f...f...f...h. .e...f...f...f....U..........................y'..f...f...f...g...f...f...f...f...............................U..f...f...f...f...f...f...f...f..................................f...f...f...f...f...f...f...f...f...f...............f...f...f...f...f...f...f...f...f...f...f...f...f...............p...f...f...f...f...f...f...f...f...f...f...f...f...................d...U..f...f...f...e...h. .f...f...f...f...f....d......................f...f...f...h.@.....f...f...f...f...f...f....t.................f...f...f...........p...f...f...f...f...f...f...f...f...f...f...f...f...`...............p...f...f...f...f

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 541 x 252, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	114767
Entropy (8bit):	7.9936922187201365
Encrypted:	true
SSDEEP:	3072:SOEFifYmNYKElSiLVN6MOzKqJdnJYJe4kiUh6sq:SIZYKEzmXZdJ8eYx
MD5:	03D39D5D071182ABA1B01BA2E859DE39
SHA1:	7BA8F968B03E92FD59A6C4F6CE5C8AA36A5D2B92
SHA-256:	A7FD65363687E512751D88F7850B61969427E8D3AA9A177946BCD4BC280B71AD
SHA-512:	5BF4D0B9FF650FF11C8FF69C409C45FBFD31BC3F8C4B55F665BEA8E11A42C412B9EA25B9974908AB9B670A22E80A445692A26B98535B84CB49299C37C22E16E6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................iCCPICC profile..(.}.=H.@.._S."..3Hq.P.Z..q...B..Zu0....4$)...k........... ......"%..).......=...B..t.g....J'.R6..^.F."b.(.6.d9...u.._..<...c@....H.......M..O,.......,. .#.U..8.[,.L...Eb...j.....O.G5.\|!..y..^...=...yce..4G..". C.....A.V...i.O..#-.L..\e0r,...J..........^R8......(....u..>v....\|.......f>I.w...0..\\w4u......L.RZR..P(..g.M9`..._.zk.....PW......+R.....{..L.....r. @......bKGD..............pHYs.................tIME.....-.Pc.0....tEXtComment.Created with GIMPW..... .IDATx..i.%.q%x<"2........@...8ZF....Lw.....}k.....nY.%.".. .@.....w.....dd......y.b.n.F...?~....Y".....$ ........v.....0...A......,``!X..C.....,YH.Xr.[.d8......2..,.."....`,....f... ....w.&v.....!".../.]_.-.!...!....p.q..1..i.~...vSr.s.....f.7..j...). ......}....>....1....Wb...{......A3.7.`g>O.5..x\|...7.z..~..+.k.w._............k$..x.pN..ul.W3....[3......@.\...o...:\|...p.a}Mm....G.Z..u.x6.v.....;._#.?..=k-..H.8....,C..^..]t...A.`.Zc.{...;.C

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	335
Entropy (8bit):	4.98328737936823
Encrypted:	false
SSDEEP:	6:NgWQLXUgFF19cIxLzXeK2B/N4cB/v//fRJvIEk/LO4zW1CRW35jY:N6EALvxHXCB14cBX/XRF5QFWV5k
MD5:	9746B20A05640ACDC79886410BB862C7
SHA1:	C3F38DDD997E67E70BFDF1AD90CB27E571B43BE9
SHA-256:	1B9EC721BC65B54D22FC66D8ED3E240BFFC0A4F6B46433BA18C2E3B4F4098C75
SHA-512:	289A5CD5E41D925C33E455364B4D36D55FD89E63C6CFD167367989A0C5461BF8559D6FB832995F6ECA828AC96432E0487B698949A3D4B63749F4A48F41C429BE
Malicious:	false
Reputation:	low
Preview:	{. "ip": "73.13.135.219",. "hostname": "c-73-13-135-219.hsd1.pa.comcast.net",. "city": "Philadelphia",. "region": "Pennsylvania",. "country": "US",. "loc": "39.9524,-75.1636",. "org": "AS7922 Comcast Cable Communications, LLC",. "postal": "19099",. "timezone": "America/New_York",. "readme": "https://ipinfo.io/missingauth".}

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5723
Entropy (8bit):	7.950822106896149
Encrypted:	false
SSDEEP:	96:upH/omZ4SOy3uxD+WxV6jD9/zIvNVCvEknBgSjERtW82iAsuFQAIFbISS2V0wZ:upHRZ3qKvZzMGvBg5RuaAIFc5ohZ
MD5:	95382A6DAB40D5911185A921C53E6F6B
SHA1:	4229CB577571111D747021988AAC9DD6CD50634F
SHA-256:	E341D9055288DFCD7DD5FACAB6C915F6B7BCFFBF80F8B48468C7275B8CADA069
SHA-512:	58DFD1656F931BF14044A8D4D790CCD3369A33D42AEA35774BF4B0F2242173795C86FDE3280D74849BE492BBC50D4515F3F3985F93766559544DA37E9988BC03
Malicious:	false
Reputation:	low
URL:	https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/img/doc.png
Preview:	.PNG........IHDR...<...<.....:..r..."IDATx^.k..Wy...Zk.}..s.a....x<.B....L..j......$%U?D.zQ....$m...$R...hU.(..`..-.4$.[..M......./..9g......Gk..B...%.y.....{....y.=2...S.~..D@"H...F..ZzD"...e...%.....D...Z.8F......K...-...^(..B....+.B..<.f\|...;..PE....G.Dt..H..0...........l.!......~....6.'..%....P..".~.{......=....b.P......hA.. i................U$,#.JK$.\c.o.O..u-.\)H.h...R...A.6.kVh....QUP.\l..^.......V&...(.q.........q....7.Aq3.`p...........&....`......\.........(.Y..!.`GvO.c...".=..4."Z.."._...~.".P..../..xv.>p........L....hq.bB../M.DZ@....feb~/(".A..........G.IsAJ...B.j@0).1w0Z..m....u.......w..........<.>P...n...v.q...8t....^r\..M.....^..i.\|_.n.....X..P;.d...ph..............C?.N..y...>r0..y.A.O......4.....$YpU%P.E..>.........;h.i....X.X...z.N._.%\{..s.-..\....~=..T..=Ok.]3\%.Q3....}....T.I{.R..@..~.D.t..k?FV....'"...........r..."5.%...\p...Z....G9.......{.J....R..J.?..{_B.cn>.A"..&..\|... X:STLU.......Se'(..V..BB....Et...f\|/..RT+..!...A...

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 640 x 280, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	255341
Entropy (8bit):	7.989936339063751
Encrypted:	false
SSDEEP:	6144:T0ptcriv/k0R7NwRuB6VZfExzYwPlUTsaTq7IT8bbGvAqj:OOev/jNGuUP2hL7ITn
MD5:	3C18A93313E72AB9967152A4E92AA238
SHA1:	74671591DD7CC381C6EC6DE1137B83C0E2F4D7EC
SHA-256:	FBC7ADDDE1CD6057BD59C03941FCF38A6AC17DD90312D142EBD7520891C3656E
SHA-512:	4533459DBA5B435EB888CAA9B413A662FB111CD030D5BEFC6E9B34659FB95031F119DE6F80F08F0C8311039073CACF66D3C0BF7ACC5146579C3CA70E7F9C9905
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............G....4IDATx.}.eY..3...##".2..&....[...!.x........\|.[x.C.%.....r........9..6[..+Q.7...3.}.`.l.]........?.$.'....s.n.Q`:....>.....O........P.g.u.7..QV.f.e...g... ....=..........c..z@.^.t..X.F..t^...O{@.....>.0.v..h..;.;k...D....k.....2.L.e...l??..8a.6.^...;.Z..._....F..@.Q.....V....C........S<..9.O.1.w.=\y.f.c...NIC...:......>...$..x..U4...=b.b..6...i....q...b\..X...4c....y.l.a......z. ..t.d6.c...(Tp.........U..O!...tk...o.tI.......cp....c^..i...\|.s..tj..=....1..k....>V...=......j.......e....,s~.<...au......>L..h_t....1.+.=..x.....[.kpN.c..D....>..u....N.Z.F...c).h._....Ez.:...:....xA{.k...[C.%.dc...OJ.d\|.u_.\......26.=.:....%-d..r.{.D..&.*$.. ..P.Wi.7.._t......E.......km...r.~..)s........N'~..v...H.1....[...A+b.....).y..2].8./.5..w..1.:$.@....C...H.2{.}..~.......\.L<~..@g?.uy..h).P..+9\|.]..pz.4.x....py....+.~........Q.C........;<.s<.w.....9:...Kl.F....p..hd.?....g.#t..0Z..K.p^.w...?.....>....u...X_...{M.A.X.

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	7550
Entropy (8bit):	7.960579777190278
Encrypted:	false
SSDEEP:	192:ri4sn8ZlCLFUm5Dk3CqDEkV8YaTETosC1nEDuO0f+htV:rfsn4CBnKCqYkaUoseEDuO0C7
MD5:	8D3BCD1278891FC1E52D38E72549B3D0
SHA1:	AF1AB86B5A3993C468C3BE9C59A8ED3D9091454D
SHA-256:	8FC3F44A189200B47C93A90AD8DFFE40FCDEDA8A718E62BB4BAF98F00D536E97
SHA-512:	E8C73AB69E70BDCA02C1C7004947186455C632692311B4CA91D1BEA143CE7F0B986DC0B0623B8AE82F9561549337171B3E89A55F7BCD92964FE214DDAB1C4FEB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.............PLTE.......................W............M.............................\|k~`P..{.........mWN'.7..>..U.._9&...H .-..C..lI4...$..J#...T..E........uK.G.V5....{..T.gB.s.w.s.u.q.n....h........`........u...>...A.................:..e..F.......B..............._.....`...............{......o................................................d........5.............................A.................x..u....y..p..............`..s...................n.......i....e..N...................x........\|....k.......Y....T...........F./......m.p..J..N...@....i..........f......[.....u...........z..Q..............u......<.....f.......j....I.....^.........+.......tRNS...........#.q....(IDATx^..E.#W.......^........<.a...^[..Y..LZ.r\^y........$YY.~...>........o............f.t.g.3.Q.......V.......lSt..s..rp..4...7K;..d6)._.6r......voS.2T.

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	79
Entropy (8bit):	4.908679489840842
Encrypted:	false
SSDEEP:	3:ErAbcBxYAFDJvzqxg1Fiffpk8yuQnMhyv:1wBxYA7vzqxqEK8yuQS8
MD5:	32D5D3442E8AF37BF6DAC1F56281A6BA
SHA1:	A2340BCE7ADB12D35F4B0BF2B0C4B3B2FF80FC0C
SHA-256:	965CFDD9CEDD2A0238E40F7B731488FDFF1743EDFA781E948D098DCD7229012B
SHA-512:	B88B42D5EF11D7AEA2007E1E0E59D6BE2A631CC018C63C1669A22CA84146C77BD4AD16811254A7A9FE6B4E76E1247D0570888E98ADE893FFA9FA167ECDA9C987
Malicious:	false
Reputation:	low
URL:	https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/img/meta-logo-grey.png
Preview:	The page could not be found..NOT_FOUND..iad1::jtnlc-1741858158984-45f40384bae9.

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5960)
Category:	downloaded
Size (bytes):	335473
Entropy (8bit):	5.5791449013845655
Encrypted:	false
SSDEEP:	6144:04Em9yIJDtxa94GpUs6hNsx2wE3OPoK/UI+72jAYqmj6:dEYJZ49tANsAel+7vm2
MD5:	F320631F4C3234D1BB62E1431FE9A66A
SHA1:	CEDFAAFD5AC27CBDE6C635141062DFDE01320237
SHA-256:	CC2257FB7C656F1604AD49B49BAC4B5F40844FDA8A1AD3FB376318A4846B3C89
SHA-512:	00952BE812D5A5F5E13CEE595D5DBDD113743C1566E114558DC07BF242A0B1C9AF80CE9BF963F4AD523CA4D02F204642CB9454C4DFE9CE387AD9C1C542CDBEC6
Malicious:	false
Reputation:	low
URL:	https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/styles/js
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"google.com.sg"},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":13,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_manualEmailEnabled":false,"vtp_cityValue":"","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneValue":"","vtp_autoPhoneEnabled":false,"vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"","vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":4},{"function":"__ccd_ga_first","priority":12,"vtp_instanceDestinationId":"G-MR52T79VEH","tag_id":18},{"function":"__set_product_settings","priority":11,"vtp_instanceDestinationId":"G-MR52T79VEH","vtp_foreignTldMacroResult":["macro"

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.063721376113396
Encrypted:	false
SSDEEP:	3:nnSCnlI/iuSRKhkVqoSrwm6NCnSmiuLWEQekBthB+kfCGDNR+uZYn:nxlhPRt6rwm6QnSm9eGKFT+uZYn
MD5:	290FFA4ACC66F6D2856687030C6C787C
SHA1:	63CEE7797590B5753565006A3AA3A3F0BB00F50C
SHA-256:	FC0A5E0F4CFC1DC19D11AA89F0E61B013800C19F38E5013117A0ADDA1BD6B9FD
SHA-512:	C0F765E6F44EBFBCC2EFD08BF47D49FD8D903EED3FD510DE419C1C265B48EFB881E32060B90FC7BF5D994E24F86F9315A9D139B044AAA2AE2EBFBA5439B9C93E
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChRDaHJvbWUvMTM0LjAuNjk5OC4zNhJRCUFD5dr0rmHjEgUNHVbhFxIFDdYE7rESBQ1nx2SZEgUN7P4alBIFDS_A41kSBQ13vj5VEgUNLSJQfhIFDarpzOoSBQ0Ysa5IIfriq4a3ly69EhkJ_GfrORyzheISBQ3hMLryId7JyGO0XaFrEhkJsc6YCdaXezYSBQ1zJNRoIWAHBFSP3__KEhkJAf-j6MgpwCcSBQ2RYZVOIeIUbIGe1-nM?alt=proto
Preview:	ClEKBw0dVuEXGgAKBw3WBO6xGgAKBw1nx2SZGgAKBw3s/hqUGgAKBw0vwONZGgAKBw13vj5VGgAKBw0tIlB+GgAKBw2q6czqGgAKBw0Ysa5IGgAKCQoHDeEwuvIaAAoJCgcNcyTUaBoACgkKBw2RYZVOGgA=

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 541 x 252, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	114767
Entropy (8bit):	7.9936922187201365
Encrypted:	true
SSDEEP:	3072:SOEFifYmNYKElSiLVN6MOzKqJdnJYJe4kiUh6sq:SIZYKEzmXZdJ8eYx
MD5:	03D39D5D071182ABA1B01BA2E859DE39
SHA1:	7BA8F968B03E92FD59A6C4F6CE5C8AA36A5D2B92
SHA-256:	A7FD65363687E512751D88F7850B61969427E8D3AA9A177946BCD4BC280B71AD
SHA-512:	5BF4D0B9FF650FF11C8FF69C409C45FBFD31BC3F8C4B55F665BEA8E11A42C412B9EA25B9974908AB9B670A22E80A445692A26B98535B84CB49299C37C22E16E6
Malicious:	false
Reputation:	low
URL:	https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/img/2FA.png
Preview:	.PNG........IHDR.....................iCCPICC profile..(.}.=H.@.._S."..3Hq.P.Z..q...B..Zu0....4$)...k........... ......"%..).......=...B..t.g....J'.R6..^.F."b.(.6.d9...u.._..<...c@....H.......M..O,.......,. .#.U..8.[,.L...Eb...j.....O.G5.\|!..y..^...=...yce..4G..". C.....A.V...i.O..#-.L..\e0r,...J..........^R8......(....u..>v....\|.......f>I.w...0..\\w4u......L.RZR..P(..g.M9`..._.zk.....PW......+R.....{..L.....r. @......bKGD..............pHYs.................tIME.....-.Pc.0....tEXtComment.Created with GIMPW..... .IDATx..i.%.q%x<"2........@...8ZF....Lw.....}k.....nY.%.".. .@.....w.....dd......y.b.n.F...?~....Y".....$ ........v.....0...A......,``!X..C.....,YH.Xr.[.d8......2..,.."....`,....f... ....w.&v.....!".../.]_.-.!...!....p.q..1..i.~...vSr.s.....f.7..j...). ......}....>....1....Wb...{......A3.7.`g>O.5..x\|...7.z..~..+.k.w._............k$..x.pN..ul.W3....[3......@.\...o...:\|...p.a}Mm....G.Z..u.x6.v.....;._#.?..=k-..H.8....,C..^..]t...A.`.Zc.{...;.C

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	14424
Entropy (8bit):	4.993922249740928
Encrypted:	false
SSDEEP:	192:2Jw/i57G6rHg9CI7xJ5GPH3rnM9xPHC3XJz6IzWjolnF5WKQ+fFDPMgVQJvmQmDZ:QoqnEi1pDFcKhF5V8v0vYFs
MD5:	938FFB1F39A9C79E9D5E0F7EFCDDDFB6
SHA1:	25716CE5FE4B895828DCDCDE637805A4E26A8527
SHA-256:	2A1F8347A12C9437391FAEF8BD8F6074AD64B28D100D39D70AC3DDFF25553BE2
SHA-512:	4F4187C287C92865B1CCD60B0F4ECC9B02FB70C61EDF89B225763B8F1CB09C56C2CFBDA6F401F162EEE2DF2357DB12FF1309D400A45B3F1CF0AB671B99D1CDE6
Malicious:	false
Reputation:	low
URL:	https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/styles/style.css
Preview:	#html {. background: rgb(249, 241, 249);. background: linear-gradient(. 90deg,. rgba(249, 241, 249, 1) 0%,. rgba(234, 243, 253, 1) 35%,. rgba(237, 251, 242, 1) 100%. );.}..body {. background: inherit;. height: 100vh;. overflow: hidden;. overflow-y: scroll;.}...row {. height: 100%;.}..#left {. height: 100vh;. padding: 40px 20px 0 0;. position: sticky;. top: 0;. overflow-y: auto;.}...col-4 {. border-right: 1px solid #dee3e9;.}..#right {. padding: 40px 20px;.}..#logo {. width: 70px;.}..#utm-ticketId {. margin-bottom: 15px;.}..#show-hide-pass {. width: 28px;. right: 30px;. position: absolute;. cursor: pointer;. transform: scaleX(-1);.}..h1, h2 {. line-height: 30px;. color: rgb(28, 30, 33);. font-family: Optimistic Display Bold, Helvetica, Arial, sans-serif;. font-weight: 700;. margin: 16px 0;.}..h1 {. font-size: 24px;. display: flex;. align-items: center;.}..h2 {. font-size: 20px;.}

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 640 x 280, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	255341
Entropy (8bit):	7.989936339063751
Encrypted:	false
SSDEEP:	6144:T0ptcriv/k0R7NwRuB6VZfExzYwPlUTsaTq7IT8bbGvAqj:OOev/jNGuUP2hL7ITn
MD5:	3C18A93313E72AB9967152A4E92AA238
SHA1:	74671591DD7CC381C6EC6DE1137B83C0E2F4D7EC
SHA-256:	FBC7ADDDE1CD6057BD59C03941FCF38A6AC17DD90312D142EBD7520891C3656E
SHA-512:	4533459DBA5B435EB888CAA9B413A662FB111CD030D5BEFC6E9B34659FB95031F119DE6F80F08F0C8311039073CACF66D3C0BF7ACC5146579C3CA70E7F9C9905
Malicious:	false
Reputation:	low
URL:	https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/img/phone.png
Preview:	.PNG........IHDR...............G....4IDATx.}.eY..3...##".2..&....[...!.x........\|.[x.C.%.....r........9..6[..+Q.7...3.}.`.l.]........?.$.'....s.n.Q`:....>.....O........P.g.u.7..QV.f.e...g... ....=..........c..z@.^.t..X.F..t^...O{@.....>.0.v..h..;.;k...D....k.....2.L.e...l??..8a.6.^...;.Z..._....F..@.Q.....V....C........S<..9.O.1.w.=\y.f.c...NIC...:......>...$..x..U4...=b.b..6...i....q...b\..X...4c....y.l.a......z. ..t.d6.c...(Tp.........U..O!...tk...o.tI.......cp....c^..i...\|.s..tj..=....1..k....>V...=......j.......e....,s~.<...au......>L..h_t....1.+.=..x.....[.kpN.c..D....>..u....N.Z.F...c).h._....Ez.:...:....xA{.k...[C.%.dc...OJ.d\|.u_.\......26.=.:....%-d..r.{.D..&.*$.. ..P.Wi.7.._t......E.......km...r.~..)s........N'~..v...H.1....[...A+b.....).y..2].8./.5..w..1.:$.@....C...H.2{.}..~.......\.L<~..@g?.uy..h).P..+9\|.]..pz.4.x....py....+.~........Q.C........;<.s<.w.....9:...Kl.F....p..hd.?....g.#t..0Z..K.p^.w...?.....>....u...X_...{M.A.X.

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (334)
Category:	downloaded
Size (bytes):	185717
Entropy (8bit):	5.027165652596303
Encrypted:	false
SSDEEP:	1536:7oo0pe3VX8IFqCvnUEE9RMPenjyCFeDm9M5FKBnpNfb:7Ae3CxM5FKBnpNfb
MD5:	6636C2DAB79C70D2AF7EE3AC42212655
SHA1:	FEB8913114476BEE87F055089BAA9333760B74C9
SHA-256:	1F0B3550FD4A1380D991B3D2EF78A91CA45B8CAEF07A142A401DF48D114AAEB8
SHA-512:	4558627800306466163353911C190209D54E2ECC52B225D379C17B58BC75943592F279F8C284218ACE0F1AC7E79515AC2DF7D6F15701098C7E7857C1CCAB7F6C
Malicious:	false
Reputation:	low
URL:	https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/styles/bootstrap.min.css
Preview:	@charset "UTF-8"; /!. Bootstrap v5.0.2 (https://getbootstrap.com/). * Copyright 2011-2021 The Bootstrap Authors. * Copyright 2011-2021 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.:root {. --bs-blue: #0d6efd;. --bs-indigo: #6610f2;. --bs-purple: #6f42c1;. --bs-pink: #d63384;. --bs-red: #dc3545;. --bs-orange: #fd7e14;. --bs-yellow: #ffc107;. --bs-green: #198754;. --bs-teal: #20c997;. --bs-cyan: #0dcaf0;. --bs-white: #fff;. --bs-gray: #6c757d;. --bs-gray-dark: #343a40;. --bs-primary: #0d6efd;. --bs-secondary: #6c757d;. --bs-success: #198754;. --bs-info: #0dcaf0;. --bs-warning: #ffc107;. --bs-danger: #dc3545;. --bs-light: #f8f9fa;. --bs-dark: #212529;. --bs-font-sans-serif: system-ui, -apple-system, "Segoe UI", Roboto,. "Helvetica Neue", Arial, "Noto Sans", "Liberation Sans", sans-serif,. "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji";. --bs-font-monospace: SFMono-Regular, Menlo, Monaco, Consolas, "Liberat

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	79
Entropy (8bit):	4.8534323002636235
Encrypted:	false
SSDEEP:	3:ErAbcBxYAFDJvzqxg1FiffgtkeFdnSmvn:1wBxYA7vzqxqEgtkeFdSmv
MD5:	16FDDD1D3E72E35DC3E1F7F0D9584E0E
SHA1:	842A8DFF6DDD46C5E2D14EAF2F48023A1D6EDC74
SHA-256:	55245CA08DD8990E2C98C0F047BC21A70C2929CF3ABDA84886AEC6AC5D855810
SHA-512:	4DAF5596850384922873A634B8A268ED2A71F772D8DBD9A4872292654215BAB0F019CED1D9641ED4578245078A12F28CB484ACD6C05E36D865F2FB03A1850779
Malicious:	false
Reputation:	low
URL:	https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/img/block_2.png
Preview:	The page could not be found..NOT_FOUND..iad1::zm4pd-1741858158714-599a8bc897d5.

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	87533
Entropy (8bit):	5.262536918435756
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr
MD5:	2C872DBE60F4BA70FB85356113D8B35E
SHA1:	EE48592D1FFF952FCF06CE0B666ED4785493AFDC
SHA-256:	FC9A93DD241F6B045CBFF0481CF4E1901BECD0E12FB45166A8F17F95823F0B1A
SHA-512:	BF6089ED4698CB8270A8B0C8AD9508FF886A7A842278E98064D5C1790CA3A36D5D69D9F047EF196882554FC104DA2C88EB5395F1EE8CF0F3F6FF8869408350FE
Malicious:	false
Reputation:	low
URL:	https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/styles/jquery.min.js.download
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	42676
Entropy (8bit):	7.751709220078662
Encrypted:	false
SSDEEP:	768:QJ6R1m5mLWd4WdvyQqjv9YRNt2ZDmzqSqBoruj6f3drrFpY85JW81Cl1xB+aArel:QJ41emLWxdv7C8Nt2UzqSuu46v9rvY8I
MD5:	81BB5CF1E451109CF0B1868B2152914B
SHA1:	B70017639AFC079394BE1EA8625F7C4BEB44D617
SHA-256:	676C83478E410D324FE56ACA428D3305505732C648667B22E15C8222117C75E6
SHA-512:	1782966B78F57CC91392F3FF03F05D37E0A5FD8B04B0997B2EF708D13C162EA4AAD607E7705A36E0539D6A6B60337432EF271BFF062F7170018B42C9B8B81DE6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............!......iCCPICC profile..(.}.=H.P..OS."..;..f.N.DE...B..Z.U.....M....G.....b...YW.WA...quqRt...K.-b\|py..s..>@...f....n..D\.dW..+....,cV...]_..............H<...&^'.......V.U.s....$~............q.X,....hj...QU.)_.x.r....'.a8.//q.j..,`..D(.`.%...b!E.q......k....(C.......l........./..1..v.z.q....~....+../..O.M-z..l...MM...w..'C6eW.R..<.~F..zo..Uon.s.>.i.U..88...........{.1...vr.+.......bKGD..............pHYs.................tIME.....;)P..w.. .IDATx...y..u}...u..s..+;.....a........,.Vp.E....^.U..z[.V....Z{....jk.V..E..k........Ir..........e.....&.H.oN.\.>....I.$I.$I.$I.$I...@.$..4+b`.N.?#@}...p....<.Y.-n........5..;.^....]I...,.$IR.J.".j@..l.P.Lq.....x..l...u.....U:??]F-.,..-.<vV..t...V.....x...&.......;.1...JY.m.\|....Lt~..]<O.$.Y'I.....$I.3.*.......b`)e.4......jA.......W:.FDY2U:?...uN.,..~....&.......y..y....B....w~........$Is..K.$.N1...DZLY0-..`Z.....QK.U..'....e.5..{.2/Z...d.yzjk;.....[..(...vz.AY.5;.V...I....

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	42676
Entropy (8bit):	7.751709220078662
Encrypted:	false
SSDEEP:	768:QJ6R1m5mLWd4WdvyQqjv9YRNt2ZDmzqSqBoruj6f3drrFpY85JW81Cl1xB+aArel:QJ41emLWxdv7C8Nt2UzqSuu46v9rvY8I
MD5:	81BB5CF1E451109CF0B1868B2152914B
SHA1:	B70017639AFC079394BE1EA8625F7C4BEB44D617
SHA-256:	676C83478E410D324FE56ACA428D3305505732C648667B22E15C8222117C75E6
SHA-512:	1782966B78F57CC91392F3FF03F05D37E0A5FD8B04B0997B2EF708D13C162EA4AAD607E7705A36E0539D6A6B60337432EF271BFF062F7170018B42C9B8B81DE6
Malicious:	false
Reputation:	low
URL:	https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/img/fb_round_logo.png
Preview:	.PNG........IHDR..............!......iCCPICC profile..(.}.=H.P..OS."..;..f.N.DE...B..Z.U.....M....G.....b...YW.WA...quqRt...K.-b\|py..s..>@...f....n..D\.dW..+....,cV...]_..............H<...&^'.......V.U.s....$~............q.X,....hj...QU.)_.x.r....'.a8.//q.j..,`..D(.`.%...b!E.q......k....(C.......l........./..1..v.z.q....~....+../..O.M-z..l...MM...w..'C6eW.R..<.~F..zo..Uon.s.>.i.U..88...........{.1...vr.+.......bKGD..............pHYs.................tIME.....;)P..w.. .IDATx...y..u}...u..s..+;.....a........,.Vp.E....^.U..z[.V....Z{....jk.V..E..k........Ir..........e.....&.H.oN.\.>....I.$I.$I.$I.$I...@.$..4+b`.N.?#@}...p....<.Y.-n........5..;.^....]I...,.$IR.J.".j@..l.P.Lq.....x..l...u.....U:??]F-.,..-.<vV..t...V.....x...&.......;.1...JY.m.\|....Lt~..]<O.$.Y'I.....$I.3.*.......b`)e.4......jA.......W:.FDY2U:?...uN.,..~....&.......y..y....B....w~........$Is..K.$.N1...DZLY0-..`Z.....QK.U..'....e.5..{.2/Z...d.yzjk;.....[..(...vz.AY.5;.V...I....

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 900 x 240, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	105511
Entropy (8bit):	7.947376852451873
Encrypted:	false
SSDEEP:	1536:VudXKa4pprle5L3Ve48HXzXl4F4fTy9AeC9hhxVK0cYUFLWyMjmy/Yu:/xe5UHDaCTy9bmPJURWBjma
MD5:	FFBA640622DD859D554EE43A03D53769
SHA1:	C91A100DB7BFC04DF9A5F3223D5B6F17536BF5EE
SHA-256:	139D38D0FBFED2FD9F2B782AF9B3EB08005B9BC75FAAA31FE29720CC64BCAB0F
SHA-512:	70C7C4DF14A22E00A0CAF1DAF001E608454604FA0B4C13583EFAC7A8CAFF6C726D62C024F9E0626760B524F7D08184E4E30CF4A49BE505ACB1F9D29CFCE35993
Malicious:	false
Reputation:	low
URL:	https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/img/meta-logo-grey.png
Preview:	.PNG........IHDR.............X..q....zTXtRaw profile type exif..x..i......c.^..a9..pN....wAJ....].L%I.....w@.;......#._]...Q..G.q...c....{~..}.~....~..tH..P?......~......~.~.b........%iFzo..w..?_....,_Go.\.:.W.....uz...i.....Y.:).B.<...@.ori.E........c.' ......`k../..%+?........=[9~.I....\|...](.}.~^?.r..}....v.....}..k..5...+...E.X.{.q.K...1.....!....t.zS.._..0B$]7.`a...{.a3......cz.vr7.&.!e...[..R'...=..s..]v....:W...10XxE.7...=.^..../.....l......H......?.?..D.......v}.X%....Kt.....B...L.K.&... k!.P.o1...d'A...."...hL2...Q.....D>v\|....B.5r3.$Y9...N..J....J/..j....@q..k...Zo..z...z...G.4...>..kNF..=9`..WZy...j....\|v.e..v.cO.....j...'.J..SN=..3...M..[n...;....oZ...7...Y./S:.......c. 8)......2...:g....2........dQ.,(cd0....?r..'....+o.._.....sJ......WY3..~..t.........8..d.,=..l...c.7s......G<...4....W_a.[W...\|...U@.+.Uz.5.i...2+...S....[...2.2...gX[..P.NX......l..b....M.....~.f#.....jy... yl./.....l..,.3........G:..H.G..x....v...4

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	2.7252607375087954
Encrypted:	false
SSDEEP:	24:Eg5ed8vZa+/kffJTyN5J5iXSvjTxatgFFjiZq1MJMaDgD6VDcl2HPwFf5zaTrZ4l:yfqHUs6hcEI5KrZ4jaJV9HxG8Q
MD5:	6701A4BA0B931AF579BE35B93631DA04
SHA1:	C8161484ACCCDD0CAE1CD6484F56942CB7FFD7DC
SHA-256:	CE8A22ECE441CFD0F09FB0359B8D683FED0E66F8BEC0BBC067A8257C95B05FD8
SHA-512:	C09E65509B04F904BB74C8AA78C099F4D195426293711F5EB6F3C47D6C27B9C278898CFD718FAFA5418E40498B7904D818A8DD654A956694550D0B43048151C2
Malicious:	false
Reputation:	low
Preview:	............ .h...&... .... .........(....... ..... ..........................................h. .f...............f...g...d.@.........................`...e...f...f...............f...f...f...e...p...............`...f...f...f...f...............f...f...f...f...f...p...........e...f...f...f...f...............f...f...f...f...f...e.......d.@.f...f...f...f...f...............f...f...f...f...f...f...h. .e...f...f...f....U..........................y'..f...f...f...g...f...f...f...f...............................U..f...f...f...f...f...f...f...f..................................f...f...f...f...f...f...f...f...f...f...............f...f...f...f...f...f...f...f...f...f...f...f...f...............p...f...f...f...f...f...f...f...f...f...f...f...f...................d...U..f...f...f...e...h. .f...f...f...f...f....d......................f...f...f...h.@.....f...f...f...f...f...f....t.................f...f...f...........p...f...f...f...f...f...f...f...f...f...f...f...f...`...............p...f...f...f...f

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5723
Entropy (8bit):	7.950822106896149
Encrypted:	false
SSDEEP:	96:upH/omZ4SOy3uxD+WxV6jD9/zIvNVCvEknBgSjERtW82iAsuFQAIFbISS2V0wZ:upHRZ3qKvZzMGvBg5RuaAIFc5ohZ
MD5:	95382A6DAB40D5911185A921C53E6F6B
SHA1:	4229CB577571111D747021988AAC9DD6CD50634F
SHA-256:	E341D9055288DFCD7DD5FACAB6C915F6B7BCFFBF80F8B48468C7275B8CADA069
SHA-512:	58DFD1656F931BF14044A8D4D790CCD3369A33D42AEA35774BF4B0F2242173795C86FDE3280D74849BE492BBC50D4515F3F3985F93766559544DA37E9988BC03
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<...<.....:..r..."IDATx^.k..Wy...Zk.}..s.a....x<.B....L..j......$%U?D.zQ....$m...$R...hU.(..`..-.4$.[..M......./..9g......Gk..B...%.y.....{....y.=2...S.~..D@"H...F..ZzD"...e...%.....D...Z.8F......K...-...^(..B....+.B..<.f\|...;..PE....G.Dt..H..0...........l.!......~....6.'..%....P..".~.{......=....b.P......hA.. i................U$,#.JK$.\c.o.O..u-.\)H.h...R...A.6.kVh....QUP.\l..^.......V&...(.q.........q....7.Aq3.`p...........&....`......\.........(.Y..!.`GvO.c...".=..4."Z.."._...~.".P..../..xv.>p........L....hq.bB../M.DZ@....feb~/(".A..........G.IsAJ...B.j@0).1w0Z..m....u.......w..........<.>P...n...v.q...8t....^r\..M.....^..i.\|_.n.....X..P;.d...ph..............C?.N..y...>r0..y.A.O......4.....$YpU%P.E..>.........;h.i....X.X...z.N._.%\{..s.-..\....~=..T..=Ok.]3\%.Q3....}....T.I{.R..@..~.D.t..k?FV....'"...........r..."5.%...\p...Z....G9.......{.J....R..J.?..{_B.cn>.A"..&..\|... X:STLU.......Se'(..V..BB....Et...f\|/..RT+..!...A...

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	79
Entropy (8bit):	4.98462885692945
Encrypted:	false
SSDEEP:	3:ErAbcBxYAFDJvzqxg1FiffPFBMRxM5:1wBxYA7vzqxqEv+M5
MD5:	66C9CB254444B06CC60C77DECEE68AB1
SHA1:	EB6DD637A9D6262FE6D8DE4BAEB3C57131A4D4A1
SHA-256:	456BD9403F3BF5804F5D98C12022D435191F692E97A09AC32720991B66C098F6
SHA-512:	DE4AB3FA333FE39F271D5DFFD01653D07263150E0F1A63BC669D75E6D3EE55B6EDED4C9578AA52036BEA9CA056A2C2BF0D67F06B534DDB2023523606E1BF9737
Malicious:	false
Reputation:	low
URL:	https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/img/dir.png
Preview:	The page could not be found..NOT_FOUND..iad1::rz92j-1741858162442-7a749a432682.

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 900 x 240, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	105511
Entropy (8bit):	7.947376852451873
Encrypted:	false
SSDEEP:	1536:VudXKa4pprle5L3Ve48HXzXl4F4fTy9AeC9hhxVK0cYUFLWyMjmy/Yu:/xe5UHDaCTy9bmPJURWBjma
MD5:	FFBA640622DD859D554EE43A03D53769
SHA1:	C91A100DB7BFC04DF9A5F3223D5B6F17536BF5EE
SHA-256:	139D38D0FBFED2FD9F2B782AF9B3EB08005B9BC75FAAA31FE29720CC64BCAB0F
SHA-512:	70C7C4DF14A22E00A0CAF1DAF001E608454604FA0B4C13583EFAC7A8CAFF6C726D62C024F9E0626760B524F7D08184E4E30CF4A49BE505ACB1F9D29CFCE35993
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............X..q....zTXtRaw profile type exif..x..i......c.^..a9..pN....wAJ....].L%I.....w@.;......#._]...Q..G.q...c....{~..}.~....~..tH..P?......~......~.~.b........%iFzo..w..?_....,_Go.\.:.W.....uz...i.....Y.:).B.<...@.ori.E........c.' ......`k../..%+?........=[9~.I....\|...](.}.~^?.r..}....v.....}..k..5...+...E.X.{.q.K...1.....!....t.zS.._..0B$]7.`a...{.a3......cz.vr7.&.!e...[..R'...=..s..]v....:W...10XxE.7...=.^..../.....l......H......?.?..D.......v}.X%....Kt.....B...L.K.&... k!.P.o1...d'A...."...hL2...Q.....D>v\|....B.5r3.$Y9...N..J....J/..j....@q..k...Zo..z...z...G.4...>..kNF..=9`..WZy...j....\|v.e..v.cO.....j...'.J..SN=..3...M..[n...;....oZ...7...Y./S:.......c. 8)......2...:g....2........dQ.,(cd0....?r..'....+o.._.....sJ......WY3..~..t.........8..d.,=..l...c.7s......G<...4....W_a.[W...\|...U@.+.Uz.5.i...2+...S....[...2.2...gX[..P.NX......l..b....M.....~.f#.....jy... yl./.....l..,.3........G:..H.G..x....v...4

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	79
Entropy (8bit):	4.933466274904559
Encrypted:	false
SSDEEP:	3:ErAbcBxYAFDJvzqxg1FiffFuADMWdWI80W/:1wBxYA7vzqxqEAADXdP806
MD5:	E9DEAF464512BB4134423C33F5B1D5F2
SHA1:	2534F0B4F80569614F7F79247DD0393A38D9F04A
SHA-256:	D1548C20C6DF05C1A284913281EC2CD3FD8AE7E611BC5E208D74356069E9D71B
SHA-512:	16E74C9DC8A8F43D995CECBE0E661FF9206A683C32720F875AC22BD97F408D780304CADD23130D322AE129BA789E5BFC1A58B2CD020C7849F88209AECFA1D356
Malicious:	false
Reputation:	low
URL:	https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/img/star.png
Preview:	The page could not be found..NOT_FOUND..iad1::qfkw8-1741858162383-8b11b1667b32.

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	7550
Entropy (8bit):	7.960579777190278
Encrypted:	false
SSDEEP:	192:ri4sn8ZlCLFUm5Dk3CqDEkV8YaTETosC1nEDuO0f+htV:rfsn4CBnKCqYkaUoseEDuO0C7
MD5:	8D3BCD1278891FC1E52D38E72549B3D0
SHA1:	AF1AB86B5A3993C468C3BE9C59A8ED3D9091454D
SHA-256:	8FC3F44A189200B47C93A90AD8DFFE40FCDEDA8A718E62BB4BAF98F00D536E97
SHA-512:	E8C73AB69E70BDCA02C1C7004947186455C632692311B4CA91D1BEA143CE7F0B986DC0B0623B8AE82F9561549337171B3E89A55F7BCD92964FE214DDAB1C4FEB
Malicious:	false
Reputation:	low
URL:	https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/img/save_img.png
Preview:	.PNG........IHDR...x...x.............PLTE.......................W............M.............................\|k~`P..{.........mWN'.7..>..U.._9&...H .-..C..lI4...$..J#...T..E........uK.G.V5....{..T.gB.s.w.s.u.q.n....h........`........u...>...A.................:..e..F.......B..............._.....`...............{......o................................................d........5.............................A.................x..u....y..p..............`..s...................n.......i....e..N...................x........\|....k.......Y....T...........F./......m.p..J..N...@....i..........f......[.....u...........z..Q..............u......<.....f.......j....I.....^.........+.......tRNS...........#.q....(IDATx^..E.#W.......^........<.a...^[..Y..LZ.r\^y........$YY.~...>........o............f.t.g.3.Q.......V.......lSt..s..rp..4...7K;..d6)._.6r......voS.2T.

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (617)
Category:	downloaded
Size (bytes):	302495
Entropy (8bit):	4.2517894188224945
Encrypted:	false
SSDEEP:	6144:AUq1d0IC7HQBEUSFKyIodwj8+kBfTAlv4lK+I70f:Bq1d0UTSFKyFR
MD5:	8CAC28F3021CB9A88E15F535DDE7510B
SHA1:	FEC4BF6787C2661A33DE75AA41DCCAEDAB3B8D76
SHA-256:	7E46E2C4EE220FC07C3BAB7F1FFBE4DD18E1A17175356193C67AEC5ED9BF2233
SHA-512:	DC5C4D0B279BFC0616298E5D9EF260DBCA16B599FDB47D38387BD1BEDA2EB2C03D7A17E3E153E352CEB686907E878AA0030722F66196547E0B9EB64FB695139F
Malicious:	false
Reputation:	low
URL:	https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html
Preview:	<!DOCTYPE html>. saved from url=(0046)https://b2-nine.vercel.app/ruu.html/hwkls.html -->.<html lang="en" id="html"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8">. . <meta name="viewport" content="width=device-width, initial-scale=1.0">. <title>Meta for Business - Page Appeal</title>. <link rel="stylesheet" href="../styles/bootstrap.min.css">. . <script src="../styles/jquery.min.js.download"></script>. <link rel="stylesheet" href="../styles/style.css">. <link rel="shortcut icon" href="../styles/ico.ico" type="image/x-icon">. Google tag (gtag.js) -->.<script async="" src="../styles/js"></script>.<script>. window.dataLayer = window.dataLayer \|\| [];. function gtag(){dataLayer.push(arguments);}. gtag('js', new Date());.. gtag('config', 'G-MR52T79VEH');.</script>..</head>..<body>. <script>. ! function (t, e) {. "object" == typeof exports && "undefined" != typeof module ? module.exports = e() : "functi

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 13, 2025 10:28:53.021691084 CET	49671	443	192.168.2.4	204.79.197.203
Mar 13, 2025 10:28:53.333951950 CET	49671	443	192.168.2.4	204.79.197.203
Mar 13, 2025 10:28:53.943248034 CET	49671	443	192.168.2.4	204.79.197.203
Mar 13, 2025 10:28:55.146440029 CET	49671	443	192.168.2.4	204.79.197.203
Mar 13, 2025 10:28:57.552619934 CET	49671	443	192.168.2.4	204.79.197.203
Mar 13, 2025 10:29:02.201884985 CET	49678	443	192.168.2.4	20.189.173.27
Mar 13, 2025 10:29:02.373702049 CET	49671	443	192.168.2.4	204.79.197.203
Mar 13, 2025 10:29:02.505759954 CET	49678	443	192.168.2.4	20.189.173.27
Mar 13, 2025 10:29:03.115221977 CET	49678	443	192.168.2.4	20.189.173.27
Mar 13, 2025 10:29:04.318362951 CET	49678	443	192.168.2.4	20.189.173.27
Mar 13, 2025 10:29:06.001240969 CET	49727	443	192.168.2.4	142.250.186.36
Mar 13, 2025 10:29:06.001271963 CET	443	49727	142.250.186.36	192.168.2.4
Mar 13, 2025 10:29:06.001317024 CET	49727	443	192.168.2.4	142.250.186.36
Mar 13, 2025 10:29:06.002398014 CET	49727	443	192.168.2.4	142.250.186.36
Mar 13, 2025 10:29:06.002408981 CET	443	49727	142.250.186.36	192.168.2.4
Mar 13, 2025 10:29:06.605525017 CET	49727	443	192.168.2.4	142.250.186.36
Mar 13, 2025 10:29:06.648320913 CET	443	49727	142.250.186.36	192.168.2.4
Mar 13, 2025 10:29:06.817600965 CET	49678	443	192.168.2.4	20.189.173.27
Mar 13, 2025 10:29:09.082463980 CET	443	49727	142.250.186.36	192.168.2.4
Mar 13, 2025 10:29:09.082578897 CET	49727	443	192.168.2.4	142.250.186.36
Mar 13, 2025 10:29:11.292432070 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:11.292474031 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:11.300899982 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:11.301301956 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:11.301321983 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:11.313308954 CET	49735	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:11.313359976 CET	443	49735	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:11.313426971 CET	49736	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:11.313452959 CET	443	49736	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:11.313530922 CET	49735	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:11.313637972 CET	49736	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:11.313949108 CET	49736	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:11.313961983 CET	443	49736	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:11.314197063 CET	49735	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:11.314210892 CET	443	49735	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:11.621119976 CET	49678	443	192.168.2.4	20.189.173.27
Mar 13, 2025 10:29:11.975281954 CET	49671	443	192.168.2.4	204.79.197.203
Mar 13, 2025 10:29:12.364738941 CET	49709	443	192.168.2.4	131.253.33.254
Mar 13, 2025 10:29:12.369503975 CET	443	49709	131.253.33.254	192.168.2.4
Mar 13, 2025 10:29:12.467618942 CET	443	49709	131.253.33.254	192.168.2.4
Mar 13, 2025 10:29:12.467633963 CET	443	49709	131.253.33.254	192.168.2.4
Mar 13, 2025 10:29:12.467657089 CET	443	49709	131.253.33.254	192.168.2.4
Mar 13, 2025 10:29:12.467672110 CET	443	49709	131.253.33.254	192.168.2.4
Mar 13, 2025 10:29:12.467685938 CET	443	49709	131.253.33.254	192.168.2.4
Mar 13, 2025 10:29:12.467698097 CET	443	49709	131.253.33.254	192.168.2.4
Mar 13, 2025 10:29:12.467698097 CET	49709	443	192.168.2.4	131.253.33.254
Mar 13, 2025 10:29:12.467744112 CET	49709	443	192.168.2.4	131.253.33.254
Mar 13, 2025 10:29:12.480539083 CET	49709	443	192.168.2.4	131.253.33.254
Mar 13, 2025 10:29:12.481479883 CET	49709	443	192.168.2.4	131.253.33.254
Mar 13, 2025 10:29:12.481518030 CET	49709	443	192.168.2.4	131.253.33.254
Mar 13, 2025 10:29:12.485203981 CET	443	49709	131.253.33.254	192.168.2.4
Mar 13, 2025 10:29:12.486187935 CET	443	49709	131.253.33.254	192.168.2.4
Mar 13, 2025 10:29:12.486222029 CET	443	49709	131.253.33.254	192.168.2.4
Mar 13, 2025 10:29:12.581120014 CET	443	49709	131.253.33.254	192.168.2.4
Mar 13, 2025 10:29:12.583017111 CET	49709	443	192.168.2.4	131.253.33.254
Mar 13, 2025 10:29:12.596822977 CET	49709	443	192.168.2.4	131.253.33.254
Mar 13, 2025 10:29:12.601485968 CET	443	49709	131.253.33.254	192.168.2.4
Mar 13, 2025 10:29:12.688245058 CET	443	49709	131.253.33.254	192.168.2.4
Mar 13, 2025 10:29:12.688328028 CET	49709	443	192.168.2.4	131.253.33.254
Mar 13, 2025 10:29:12.700555086 CET	49709	443	192.168.2.4	131.253.33.254
Mar 13, 2025 10:29:12.705248117 CET	443	49709	131.253.33.254	192.168.2.4
Mar 13, 2025 10:29:12.805727959 CET	443	49709	131.253.33.254	192.168.2.4
Mar 13, 2025 10:29:12.805793047 CET	49709	443	192.168.2.4	131.253.33.254
Mar 13, 2025 10:29:12.809653997 CET	49680	443	192.168.2.4	204.79.197.222
Mar 13, 2025 10:29:12.809988976 CET	49738	443	192.168.2.4	204.79.197.222
Mar 13, 2025 10:29:12.810030937 CET	443	49738	204.79.197.222	192.168.2.4
Mar 13, 2025 10:29:12.810096025 CET	49738	443	192.168.2.4	204.79.197.222
Mar 13, 2025 10:29:12.810697079 CET	49738	443	192.168.2.4	204.79.197.222
Mar 13, 2025 10:29:12.810714006 CET	443	49738	204.79.197.222	192.168.2.4
Mar 13, 2025 10:29:13.117892981 CET	49680	443	192.168.2.4	204.79.197.222
Mar 13, 2025 10:29:13.266016006 CET	443	49735	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.266446114 CET	49735	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:13.266460896 CET	443	49735	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.267518044 CET	443	49735	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.267642021 CET	49735	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:13.268620014 CET	49735	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:13.268676996 CET	443	49735	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.269077063 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.269402981 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:13.269421101 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.270452023 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.270462990 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.270600080 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:13.271174908 CET	443	49736	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.271961927 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:13.271961927 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:13.272016048 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.272330046 CET	49736	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:13.272346973 CET	443	49736	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.273401976 CET	443	49736	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.273472071 CET	49736	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:13.274280071 CET	49736	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:13.274338007 CET	443	49736	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.316272974 CET	49735	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:13.316297054 CET	443	49735	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.316323042 CET	49736	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:13.316323042 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:13.316332102 CET	443	49736	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.316339970 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.362469912 CET	49735	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:13.362484932 CET	49736	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:13.362490892 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:13.726870060 CET	49680	443	192.168.2.4	204.79.197.222
Mar 13, 2025 10:29:13.728863955 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.745296955 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.745332003 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.746377945 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:13.746397972 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.760484934 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:13.760934114 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.760951042 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.763413906 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:13.784368992 CET	49739	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:13.784411907 CET	443	49739	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.784840107 CET	49740	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:13.784878969 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.785248995 CET	49741	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:13.785293102 CET	443	49741	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.785337925 CET	49739	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:13.785717964 CET	49740	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:13.785928011 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.785943985 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.785963058 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.786216021 CET	49740	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:13.786230087 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.786468983 CET	49739	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:13.786483049 CET	443	49739	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.790103912 CET	49741	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:13.790405035 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:13.792049885 CET	49741	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:13.792067051 CET	443	49741	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.837894917 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.837909937 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.837929964 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.838140965 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:13.838152885 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:13.854952097 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.854965925 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.854984045 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.855042934 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:13.875813961 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.875832081 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.875948906 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:13.897077084 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.897094011 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.897116899 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.899229050 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:13.899247885 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.924751043 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.924798965 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.924813986 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.924834967 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:13.924845934 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.925117016 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:13.945507050 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.945525885 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.945550919 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.945663929 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:13.945673943 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.945871115 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:13.966175079 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.966222048 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.966259003 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:13.966265917 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.966439962 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:13.986455917 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.986501932 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.986531973 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:13.986542940 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.986695051 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:13.990118980 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:13.990184069 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:14.011296034 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:14.011322021 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:14.011380911 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:14.011394978 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:14.011562109 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:14.028300047 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:14.028336048 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:14.028383017 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:14.028398037 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:14.028542042 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:14.041553974 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:14.041601896 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:14.041717052 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:14.041731119 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:14.052746058 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:14.052771091 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:14.052870989 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:14.052882910 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:14.053021908 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:14.059149981 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:14.059226036 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:14.059251070 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:14.059355974 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:14.065272093 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:14.065351963 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:14.065370083 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:14.076980114 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:14.077003002 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:14.077044010 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:14.077055931 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:14.077105045 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:14.086447954 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:14.086509943 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:14.086545944 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:14.086556911 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:14.086601973 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:14.096929073 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:14.096955061 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:14.096998930 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:14.097007990 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:14.097070932 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:14.100239038 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:14.100380898 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:14.100394964 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:14.100522995 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:14.110533953 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:14.110563993 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:14.110609055 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:14.110616922 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:14.110754013 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:14.121339083 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:14.121366978 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:14.121407032 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:14.121419907 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:14.121561050 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:14.130841017 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:14.130867004 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:14.131023884 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:14.131036043 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:14.131191015 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:14.141846895 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:14.141880989 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:14.141949892 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:14.141962051 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:14.142009974 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:14.142011881 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:14.142066002 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:14.142425060 CET	49734	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:14.142441988 CET	443	49734	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:14.928329945 CET	49680	443	192.168.2.4	204.79.197.222
Mar 13, 2025 10:29:15.351914883 CET	443	49738	204.79.197.222	192.168.2.4
Mar 13, 2025 10:29:15.352184057 CET	49738	443	192.168.2.4	204.79.197.222
Mar 13, 2025 10:29:15.785788059 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:15.786103964 CET	49740	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:15.786139011 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:15.786515951 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:15.787138939 CET	49740	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:15.787375927 CET	49740	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:15.787777901 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:15.834717989 CET	443	49741	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:15.834810019 CET	49740	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:15.835299969 CET	49741	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:15.835325956 CET	443	49741	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:15.836443901 CET	443	49741	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:15.836515903 CET	49741	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:15.836863041 CET	49741	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:15.836930037 CET	443	49741	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:15.837030888 CET	49741	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:15.837044001 CET	443	49741	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:15.872854948 CET	443	49739	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:15.873163939 CET	49739	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:15.873183012 CET	443	49739	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:15.873557091 CET	443	49739	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:15.874008894 CET	49739	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:15.874104023 CET	443	49739	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:15.874193907 CET	49739	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:15.883220911 CET	49741	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:15.914500952 CET	49739	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:15.914520979 CET	443	49739	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.324343920 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.340267897 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.340316057 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.340336084 CET	49740	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.340373039 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.340482950 CET	49740	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.353079081 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.353090048 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.353147984 CET	49740	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.361598969 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.361609936 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.361666918 CET	49740	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.378405094 CET	443	49741	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.378456116 CET	443	49741	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.378480911 CET	443	49741	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.378684044 CET	49741	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.378715992 CET	443	49741	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.378855944 CET	49741	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.390667915 CET	443	49741	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.390680075 CET	443	49741	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.391215086 CET	49741	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.415299892 CET	443	49741	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.415339947 CET	443	49741	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.415397882 CET	49741	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.415431023 CET	49741	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.415446997 CET	443	49741	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.415565014 CET	49741	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.415577888 CET	443	49741	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.415647030 CET	443	49741	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.415867090 CET	49741	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.416017056 CET	49741	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.416033983 CET	443	49741	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.416042089 CET	49741	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.416192055 CET	49741	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.417830944 CET	49743	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.417879105 CET	443	49743	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.418006897 CET	49743	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.418220997 CET	49744	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.418267965 CET	443	49744	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.418531895 CET	49743	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.418550968 CET	443	49743	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.418617964 CET	49744	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.418905020 CET	49744	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.418921947 CET	443	49744	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.419984102 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.420000076 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.420056105 CET	49740	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.439610004 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.439631939 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.439692974 CET	49740	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.439871073 CET	49740	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.439883947 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.439953089 CET	49740	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.452877998 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.452970028 CET	49740	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.462502003 CET	443	49739	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.479439974 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.479501963 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.479528904 CET	49740	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.479564905 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.479722977 CET	49740	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.505857944 CET	49739	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.506859064 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.506918907 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.508028984 CET	49740	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.508063078 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.521567106 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.521622896 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.521779060 CET	49740	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.521796942 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.540811062 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.540874004 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.540894032 CET	49740	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.540910006 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.541029930 CET	49740	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.546331882 CET	443	49739	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.546427011 CET	49739	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.546447039 CET	443	49739	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.563287973 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.563348055 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.563379049 CET	49740	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.563397884 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.563565969 CET	49740	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.563815117 CET	443	49739	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.563824892 CET	443	49739	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.564716101 CET	49739	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.564739943 CET	443	49739	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.569196939 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.570139885 CET	49740	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.576415062 CET	443	49739	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.576426029 CET	443	49739	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.576487064 CET	49739	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.576512098 CET	443	49739	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.576556921 CET	49739	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.605416059 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.605448008 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.605500937 CET	49740	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.605520964 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.605681896 CET	49740	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.606751919 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.606770039 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.606822968 CET	49740	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.606832027 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.606944084 CET	49740	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.618715048 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.618738890 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.618793964 CET	49740	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.618805885 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.618844986 CET	49740	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.631869078 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.631890059 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.631954908 CET	49740	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.631967068 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.632055998 CET	49740	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.633224010 CET	443	49739	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.633239985 CET	443	49739	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.633263111 CET	443	49739	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.633285999 CET	49739	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.643654108 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.643682003 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.643722057 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.643748999 CET	49740	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.643760920 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.643805981 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.643934011 CET	49740	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.644303083 CET	443	49739	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.644321918 CET	443	49739	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.644448996 CET	49739	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.644468069 CET	443	49739	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.644478083 CET	443	49739	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.644576073 CET	49740	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.644593954 CET	443	49740	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.644705057 CET	49739	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.664876938 CET	443	49739	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.664890051 CET	443	49739	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.664918900 CET	443	49739	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.664993048 CET	49739	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.664993048 CET	49739	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.685502052 CET	443	49739	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.685514927 CET	443	49739	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.685545921 CET	443	49739	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.685592890 CET	49739	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.685610056 CET	443	49739	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.685733080 CET	49739	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.697947025 CET	443	49739	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.698004961 CET	49739	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.729320049 CET	443	49739	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.729377031 CET	443	49739	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.729477882 CET	49739	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.729492903 CET	443	49739	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.751230955 CET	443	49739	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.751267910 CET	443	49739	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.751312971 CET	49739	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.751326084 CET	443	49739	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.751353025 CET	49739	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.762736082 CET	443	49739	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.762797117 CET	443	49739	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.762837887 CET	49739	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.762851000 CET	443	49739	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.762901068 CET	49739	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.763034105 CET	49739	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.763407946 CET	49739	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.763427019 CET	443	49739	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.763485909 CET	49739	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.763801098 CET	49739	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.794677019 CET	49745	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.794758081 CET	443	49745	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.795236111 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.795289040 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.795749903 CET	49747	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.795795918 CET	443	49747	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.796425104 CET	49748	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.796482086 CET	443	49748	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.796663046 CET	49745	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.796679974 CET	49748	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.796690941 CET	49747	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.796694994 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.797307968 CET	49748	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.797329903 CET	443	49748	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.797674894 CET	49747	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.797688961 CET	443	49747	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.798058987 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.798075914 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:16.798422098 CET	49745	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:16.798446894 CET	443	49745	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:17.019422054 CET	49750	443	192.168.2.4	34.117.59.81
Mar 13, 2025 10:29:17.019479036 CET	443	49750	34.117.59.81	192.168.2.4
Mar 13, 2025 10:29:17.020008087 CET	49750	443	192.168.2.4	34.117.59.81
Mar 13, 2025 10:29:17.020684004 CET	49750	443	192.168.2.4	34.117.59.81
Mar 13, 2025 10:29:17.020704031 CET	443	49750	34.117.59.81	192.168.2.4
Mar 13, 2025 10:29:17.332715034 CET	49680	443	192.168.2.4	204.79.197.222
Mar 13, 2025 10:29:18.407880068 CET	443	49743	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:18.408179045 CET	49743	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:18.408205032 CET	443	49743	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:18.408556938 CET	443	49743	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:18.409019947 CET	49743	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:18.409070015 CET	443	49743	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:18.409194946 CET	49743	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:18.429459095 CET	443	49744	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:18.429811001 CET	49744	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:18.429827929 CET	443	49744	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:18.430154085 CET	443	49744	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:18.430638075 CET	49744	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:18.430692911 CET	443	49744	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:18.430855989 CET	49744	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:18.452320099 CET	443	49743	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:18.458901882 CET	49743	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:18.474653959 CET	49744	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:18.474672079 CET	443	49744	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:18.669584036 CET	443	49745	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:18.669864893 CET	49745	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:18.669881105 CET	443	49745	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:18.670984030 CET	443	49745	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:18.671062946 CET	49745	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:18.671396971 CET	49745	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:18.671468019 CET	443	49745	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:18.671750069 CET	49745	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:18.704859018 CET	443	49747	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:18.705259085 CET	49747	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:18.705276966 CET	443	49747	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:18.706367016 CET	443	49747	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:18.706474066 CET	49747	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:18.707052946 CET	49747	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:18.707123041 CET	443	49747	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:18.707258940 CET	49747	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:18.710527897 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:18.710834026 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:18.710869074 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:18.711971998 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:18.712044001 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:18.712392092 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:18.712481022 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:18.712543964 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:18.712559938 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:18.716332912 CET	443	49745	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:18.724495888 CET	49745	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:18.724514961 CET	443	49745	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:18.725727081 CET	443	49748	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:18.726872921 CET	49748	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:18.726912975 CET	443	49748	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:18.728032112 CET	443	49748	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:18.728105068 CET	49748	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:18.728455067 CET	49748	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:18.728528976 CET	443	49748	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:18.728602886 CET	49748	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:18.752321005 CET	443	49747	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:18.755511999 CET	49747	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:18.755521059 CET	443	49747	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:18.755551100 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:18.771982908 CET	49745	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:18.772044897 CET	49748	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:18.772061110 CET	443	49748	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:18.802551985 CET	49747	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:18.819576025 CET	49748	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:18.879646063 CET	443	49743	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:18.885199070 CET	443	49750	34.117.59.81	192.168.2.4
Mar 13, 2025 10:29:18.885632038 CET	49750	443	192.168.2.4	34.117.59.81
Mar 13, 2025 10:29:18.885654926 CET	443	49750	34.117.59.81	192.168.2.4
Mar 13, 2025 10:29:18.886626959 CET	443	49743	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:18.886667013 CET	443	49743	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:18.886693001 CET	49743	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:18.886715889 CET	443	49743	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:18.886836052 CET	49743	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:18.886848927 CET	443	49750	34.117.59.81	192.168.2.4
Mar 13, 2025 10:29:18.887027025 CET	49750	443	192.168.2.4	34.117.59.81
Mar 13, 2025 10:29:18.889866114 CET	49750	443	192.168.2.4	34.117.59.81
Mar 13, 2025 10:29:18.889957905 CET	49750	443	192.168.2.4	34.117.59.81
Mar 13, 2025 10:29:18.890008926 CET	443	49750	34.117.59.81	192.168.2.4
Mar 13, 2025 10:29:18.935529947 CET	49750	443	192.168.2.4	34.117.59.81
Mar 13, 2025 10:29:18.935566902 CET	443	49750	34.117.59.81	192.168.2.4
Mar 13, 2025 10:29:18.947191000 CET	443	49743	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:18.947207928 CET	443	49743	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:18.947307110 CET	49743	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:18.957393885 CET	443	49743	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:18.957407951 CET	443	49743	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:18.957993031 CET	49743	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:18.976198912 CET	443	49743	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:18.976214886 CET	443	49743	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:18.976269960 CET	49743	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:18.990678072 CET	49750	443	192.168.2.4	34.117.59.81
Mar 13, 2025 10:29:19.001642942 CET	443	49743	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.001658916 CET	443	49743	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.006213903 CET	49743	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.006239891 CET	443	49743	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.011045933 CET	443	49744	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.011152029 CET	443	49744	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.011235952 CET	49744	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.011825085 CET	49744	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.011848927 CET	443	49744	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.035578012 CET	443	49743	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.035643101 CET	49743	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.035660982 CET	443	49743	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.035698891 CET	49743	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.205485106 CET	443	49743	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.205497980 CET	443	49743	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.205579042 CET	443	49743	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.206028938 CET	49743	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.207032919 CET	49743	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.207052946 CET	443	49743	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.232064009 CET	49753	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.232119083 CET	443	49753	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.232352972 CET	49753	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.232742071 CET	49753	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.232755899 CET	443	49753	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.290982008 CET	443	49745	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.291121006 CET	443	49745	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.291318893 CET	49745	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.294092894 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.294133902 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.294172049 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.294651031 CET	443	49747	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.294697046 CET	443	49747	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.294733047 CET	443	49747	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.297840118 CET	443	49748	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.301295996 CET	443	49748	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.301342010 CET	443	49748	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.306453943 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.306454897 CET	49747	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.306459904 CET	49748	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.306473017 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.306485891 CET	443	49747	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.306498051 CET	443	49748	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.307435036 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.307452917 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.307672977 CET	443	49747	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.307765007 CET	443	49747	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.308075905 CET	443	49748	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.308167934 CET	443	49748	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.321003914 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.321021080 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.321438074 CET	49747	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.321435928 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.321463108 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.321525097 CET	49748	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.330208063 CET	49747	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.332218885 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.332221031 CET	49748	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.380738020 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.380759954 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.386147022 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.400747061 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.400769949 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.401145935 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.401177883 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.414321899 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.416662931 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.416692972 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.440403938 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.440469980 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.440489054 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.452919006 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.452953100 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.466809034 CET	443	49750	34.117.59.81	192.168.2.4
Mar 13, 2025 10:29:19.467677116 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.467694044 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.467735052 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.467958927 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.468012094 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.469974041 CET	443	49750	34.117.59.81	192.168.2.4
Mar 13, 2025 10:29:19.475908995 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.476264000 CET	49750	443	192.168.2.4	34.117.59.81
Mar 13, 2025 10:29:19.482460022 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.482475996 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.482518911 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.491316080 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.491329908 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.496382952 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.504738092 CET	49745	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.504779100 CET	443	49745	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.506653070 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.506686926 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.506726027 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.509497881 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.509505987 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.528357983 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.528373003 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.528419971 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.528429031 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.538288116 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.538316965 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.542321920 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.553143978 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.553162098 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.553217888 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.553250074 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.562082052 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.562110901 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.567390919 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.571506023 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.571522951 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.571578026 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.571605921 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.582256079 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.582288980 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.582674980 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.587265015 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.588545084 CET	49754	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.588594913 CET	443	49754	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.588726997 CET	49748	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.588768005 CET	443	49748	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.589544058 CET	49747	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.589570045 CET	443	49747	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.597131014 CET	49750	443	192.168.2.4	34.117.59.81
Mar 13, 2025 10:29:19.597142935 CET	443	49750	34.117.59.81	192.168.2.4
Mar 13, 2025 10:29:19.599601030 CET	49754	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.602477074 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.602494001 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.602539062 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.602555037 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.604804039 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.604818106 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.604844093 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.604854107 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.612493992 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.612514973 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.614561081 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.614588022 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.614634991 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.624082088 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.624115944 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.629540920 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.633294106 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.633318901 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.635870934 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.640846968 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.640877008 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.642827988 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.644011974 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.644038916 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.644222975 CET	49755	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.644256115 CET	443	49755	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.648073912 CET	49754	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.648099899 CET	443	49754	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.650127888 CET	49756	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.650160074 CET	443	49756	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.654309988 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.654337883 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.656255960 CET	49757	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.656311989 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.657983065 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.658000946 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.662277937 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.662301064 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.666678905 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.676637888 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.676701069 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.679415941 CET	49754	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.679442883 CET	443	49754	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.679445028 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.679495096 CET	49755	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.680124998 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.680131912 CET	49756	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.680131912 CET	49756	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.680186033 CET	443	49756	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.680354118 CET	49755	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.680381060 CET	443	49755	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.680926085 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.680969954 CET	49757	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.681126118 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.681126118 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.681138039 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.681189060 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.681380987 CET	49757	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.681400061 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.681545973 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.681566000 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.687166929 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.687231064 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.687339067 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.688383102 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.688411951 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.688419104 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.689379930 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.691917896 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.697539091 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.697601080 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.697844028 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.697854996 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.697928905 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.703238964 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.704205036 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.714840889 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.714909077 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.714987040 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.715020895 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.715219021 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.715780973 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.716384888 CET	49746	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.716412067 CET	443	49746	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.757280111 CET	49758	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.757333040 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.757425070 CET	49758	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.757775068 CET	49758	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:19.757788897 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:19.796724081 CET	49760	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:19.796762943 CET	443	49760	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:19.796849966 CET	49761	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:19.796912909 CET	443	49761	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:19.796983004 CET	49762	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:19.797022104 CET	443	49762	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:19.798017979 CET	49760	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:19.798085928 CET	49762	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:19.798094988 CET	49761	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:19.798448086 CET	49762	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:19.798468113 CET	443	49762	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:19.798676968 CET	49761	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:19.798696995 CET	443	49761	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:19.798898935 CET	49760	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:19.798918009 CET	443	49760	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:19.803925991 CET	49763	443	192.168.2.4	34.117.59.81
Mar 13, 2025 10:29:19.803975105 CET	443	49763	34.117.59.81	192.168.2.4
Mar 13, 2025 10:29:19.804054976 CET	49763	443	192.168.2.4	34.117.59.81
Mar 13, 2025 10:29:19.804404974 CET	49763	443	192.168.2.4	34.117.59.81
Mar 13, 2025 10:29:19.804425001 CET	443	49763	34.117.59.81	192.168.2.4
Mar 13, 2025 10:29:21.223716974 CET	49678	443	192.168.2.4	20.189.173.27
Mar 13, 2025 10:29:21.343734026 CET	443	49753	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:21.346679926 CET	49753	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:21.346707106 CET	443	49753	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:21.347167015 CET	443	49753	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:21.347565889 CET	49753	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:21.347649097 CET	443	49753	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:21.347661018 CET	49753	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:21.387862921 CET	49753	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:21.387895107 CET	443	49753	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:21.759999037 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:21.761224985 CET	49757	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:21.761251926 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:21.762332916 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:21.762346029 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:21.764189959 CET	49757	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:21.764739037 CET	49757	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:21.764811993 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:21.764931917 CET	49757	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:21.779980898 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:21.780802965 CET	49758	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:21.780823946 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:21.781888962 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:21.782015085 CET	49758	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:21.782645941 CET	49758	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:21.782715082 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:21.782835960 CET	49758	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:21.794531107 CET	443	49763	34.117.59.81	192.168.2.4
Mar 13, 2025 10:29:21.803409100 CET	49763	443	192.168.2.4	34.117.59.81
Mar 13, 2025 10:29:21.803421974 CET	443	49763	34.117.59.81	192.168.2.4
Mar 13, 2025 10:29:21.804760933 CET	443	49763	34.117.59.81	192.168.2.4
Mar 13, 2025 10:29:21.808327913 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:21.814171076 CET	443	49753	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:21.816330910 CET	443	49763	34.117.59.81	192.168.2.4
Mar 13, 2025 10:29:21.817408085 CET	49757	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:21.817435980 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:21.817476988 CET	49763	443	192.168.2.4	34.117.59.81
Mar 13, 2025 10:29:21.817869902 CET	49763	443	192.168.2.4	34.117.59.81
Mar 13, 2025 10:29:21.818036079 CET	443	49763	34.117.59.81	192.168.2.4
Mar 13, 2025 10:29:21.818109989 CET	49763	443	192.168.2.4	34.117.59.81
Mar 13, 2025 10:29:21.822097063 CET	443	49753	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:21.822146893 CET	443	49753	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:21.822184086 CET	49753	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:21.822211027 CET	443	49753	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:21.822376013 CET	49753	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:21.824331999 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:21.836992979 CET	443	49753	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:21.837004900 CET	443	49753	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:21.837073088 CET	49753	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:21.838805914 CET	49758	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:21.838839054 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:21.850292921 CET	443	49753	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:21.850305080 CET	443	49753	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:21.850827932 CET	49753	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:21.864324093 CET	443	49763	34.117.59.81	192.168.2.4
Mar 13, 2025 10:29:21.870946884 CET	49757	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:21.871049881 CET	49763	443	192.168.2.4	34.117.59.81
Mar 13, 2025 10:29:21.871077061 CET	443	49763	34.117.59.81	192.168.2.4
Mar 13, 2025 10:29:21.879961967 CET	49758	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:21.912995100 CET	49763	443	192.168.2.4	34.117.59.81
Mar 13, 2025 10:29:21.918576956 CET	443	49753	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:21.918593884 CET	443	49753	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:21.918664932 CET	49753	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:21.934971094 CET	443	49753	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:21.934988022 CET	443	49753	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:21.936580896 CET	443	49760	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:21.936955929 CET	49753	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:21.936981916 CET	443	49753	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:21.937122107 CET	49753	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:21.937350988 CET	49760	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:21.937367916 CET	443	49760	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:21.938498974 CET	443	49760	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:21.940200090 CET	49760	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:21.941740036 CET	49760	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:21.941807985 CET	443	49760	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:21.942518950 CET	49760	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:21.949203014 CET	443	49753	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:21.952100039 CET	49753	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:21.968883038 CET	443	49753	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:21.968930006 CET	443	49753	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:21.969091892 CET	49753	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:21.969105005 CET	443	49753	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:21.977062941 CET	443	49761	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:21.978806019 CET	49761	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:21.978828907 CET	443	49761	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:21.980402946 CET	443	49761	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:21.986968994 CET	443	49756	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:21.988327980 CET	443	49760	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:21.992335081 CET	443	49761	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:21.993614912 CET	49760	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:21.993629932 CET	443	49760	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:21.993722916 CET	49761	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:22.007447958 CET	443	49753	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.007497072 CET	443	49753	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.008744001 CET	49753	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.008761883 CET	443	49753	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.023915052 CET	443	49753	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.023964882 CET	443	49753	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.023979902 CET	443	49753	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.030769110 CET	443	49762	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.034466028 CET	443	49753	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.038644075 CET	49753	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.038666010 CET	443	49753	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.038723946 CET	49756	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.053673029 CET	49753	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.053675890 CET	49760	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:22.059533119 CET	443	49753	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.059551001 CET	443	49753	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.062396049 CET	49753	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.062412024 CET	443	49753	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.063529968 CET	49753	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.065226078 CET	49762	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:22.065259933 CET	443	49762	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.065634966 CET	49756	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.065668106 CET	443	49756	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.065913916 CET	49761	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:22.066051006 CET	49761	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:22.066078901 CET	443	49761	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.066524029 CET	443	49762	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.066756010 CET	49762	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:22.066884995 CET	443	49756	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.066900015 CET	443	49756	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.069386005 CET	49756	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.070296049 CET	49762	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:22.070363045 CET	443	49762	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.070585966 CET	49756	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.070666075 CET	443	49756	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.071639061 CET	49762	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:22.071688890 CET	49756	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.071820974 CET	443	49753	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.071897030 CET	443	49753	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.084141016 CET	49753	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.095119953 CET	49753	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.112344980 CET	443	49762	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.114456892 CET	49761	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:22.114497900 CET	443	49761	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.116333961 CET	443	49756	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.132061005 CET	49762	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:22.132082939 CET	443	49762	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.132128000 CET	49756	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.132148027 CET	443	49756	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.134795904 CET	49680	443	192.168.2.4	204.79.197.222
Mar 13, 2025 10:29:22.153793097 CET	443	49754	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.167982101 CET	49761	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:22.172971010 CET	443	49755	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.182581902 CET	49762	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:22.184214115 CET	49756	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.188855886 CET	49753	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.188888073 CET	443	49753	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.210093021 CET	49754	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.215079069 CET	49755	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.215102911 CET	443	49755	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.216335058 CET	443	49755	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.216352940 CET	443	49755	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.218879938 CET	49754	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.218899012 CET	443	49754	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.219444990 CET	443	49754	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.224812984 CET	49755	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.244556904 CET	49754	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.244749069 CET	443	49754	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.244779110 CET	49755	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.244929075 CET	49754	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.244952917 CET	443	49755	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.244988918 CET	49755	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.246228933 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.263190031 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.263237000 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.267461061 CET	49758	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.267476082 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.270364046 CET	49758	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.284867048 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.284883022 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.289721012 CET	49758	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.289721012 CET	49754	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.289735079 CET	443	49754	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.289762974 CET	49755	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.289771080 CET	443	49755	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.290576935 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.290611029 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.293329954 CET	443	49763	34.117.59.81	192.168.2.4
Mar 13, 2025 10:29:22.293421984 CET	443	49763	34.117.59.81	192.168.2.4
Mar 13, 2025 10:29:22.298270941 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.298294067 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.298315048 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.304217100 CET	49757	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.304248095 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.304328918 CET	49763	443	192.168.2.4	34.117.59.81
Mar 13, 2025 10:29:22.308998108 CET	49758	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.316724062 CET	49763	443	192.168.2.4	34.117.59.81
Mar 13, 2025 10:29:22.316741943 CET	443	49763	34.117.59.81	192.168.2.4
Mar 13, 2025 10:29:22.334431887 CET	49755	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.349493027 CET	49757	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.349529028 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.355678082 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.355700016 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.355730057 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.360593081 CET	49758	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.377273083 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.377293110 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.377321005 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.378839970 CET	49758	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.388972044 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.388988972 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.389183998 CET	49758	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.396931887 CET	49757	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.401757956 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.401767969 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.401937008 CET	49757	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.407866955 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.407886982 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.407947063 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.408802032 CET	49758	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.408840895 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.409059048 CET	49758	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.420207977 CET	49764	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:22.420253992 CET	443	49764	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.421418905 CET	49764	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:22.421891928 CET	49764	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:22.421906948 CET	443	49764	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.430356979 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.430367947 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.430396080 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.430419922 CET	49757	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.443958998 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.443968058 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.448290110 CET	49757	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.448337078 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.448471069 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.448488951 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.448514938 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.448956013 CET	49758	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.448997021 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.449034929 CET	49757	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.461307049 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.461359024 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.463927031 CET	49758	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.463943958 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.479310036 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.479376078 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.479388952 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.482758045 CET	49758	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.482774973 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.483087063 CET	49758	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.497425079 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.497488022 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.497523069 CET	49758	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.497533083 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.497853041 CET	49758	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.502711058 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.502720118 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.502754927 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.502793074 CET	49757	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.502919912 CET	49757	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.522931099 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.522945881 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.522974014 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.523889065 CET	49757	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.531184912 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.531219006 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.531264067 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.531285048 CET	49758	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.531311989 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.531424046 CET	49758	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.543399096 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.543411970 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.543447971 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.543458939 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.543524027 CET	49757	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.547133923 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.547163010 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.547225952 CET	49758	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.547236919 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.547343969 CET	49758	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.558085918 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.558106899 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.558161974 CET	49758	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.558182001 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.558322906 CET	49758	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.561984062 CET	443	49761	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.565521002 CET	443	49756	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.567665100 CET	443	49761	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.567728043 CET	49761	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:22.567750931 CET	443	49761	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.568963051 CET	443	49756	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.569026947 CET	49756	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.569258928 CET	49756	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.569279909 CET	443	49756	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.569433928 CET	443	49761	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.569541931 CET	49761	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:22.569564104 CET	443	49761	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.569598913 CET	443	49761	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.570199966 CET	49761	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:22.571527004 CET	49761	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:22.571547031 CET	443	49761	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.571647882 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.571671963 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.572199106 CET	49758	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.572207928 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.572312117 CET	49758	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.577588081 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.577595949 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.577630043 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.577678919 CET	49757	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.577692032 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.578174114 CET	49757	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.579081059 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.579111099 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.579153061 CET	49758	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.579163074 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.579277039 CET	49758	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.598576069 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.598591089 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.598651886 CET	49757	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.599116087 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.599181890 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.599494934 CET	49758	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.599509001 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.599576950 CET	49758	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.600683928 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.600755930 CET	49758	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.600766897 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.607280016 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.607320070 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.607357979 CET	49758	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.607369900 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.607477903 CET	49758	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.609961033 CET	443	49762	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.611062050 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.611069918 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.611113071 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.611268997 CET	49757	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.611305952 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.611443043 CET	49757	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.617405891 CET	443	49762	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.617491007 CET	49762	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:22.617518902 CET	443	49762	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.629013062 CET	443	49760	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.629057884 CET	443	49754	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.629173994 CET	443	49754	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.629276037 CET	49754	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.630147934 CET	49754	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.630162954 CET	443	49754	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.632174969 CET	443	49762	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.632194996 CET	443	49762	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.632278919 CET	443	49762	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.632502079 CET	49762	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:22.633408070 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.633435011 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.633511066 CET	49758	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.633521080 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.633667946 CET	49758	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.633816957 CET	49762	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:22.633836985 CET	443	49762	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.635303020 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.635334015 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.635365963 CET	49757	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.635395050 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.635466099 CET	49757	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.635936022 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.635957956 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.635997057 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.636042118 CET	49758	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.636049032 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.636066914 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.636169910 CET	49758	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.638263941 CET	49758	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.638278961 CET	443	49758	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.639355898 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.639671087 CET	49757	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.641280890 CET	443	49760	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.641315937 CET	443	49760	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.641578913 CET	49760	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:22.641594887 CET	443	49760	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.641751051 CET	49760	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:22.652379990 CET	49766	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:22.652430058 CET	443	49766	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.657819033 CET	49766	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:22.658902884 CET	49766	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:22.658924103 CET	443	49766	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.659053087 CET	443	49760	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.659068108 CET	443	49760	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.659178972 CET	49760	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:22.659285069 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.659306049 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.659435987 CET	49757	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.659461021 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.659940004 CET	49757	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.663049936 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.663119078 CET	49757	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.663125992 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.663140059 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.663383007 CET	49757	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.663391113 CET	443	49757	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.664736032 CET	49757	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.664751053 CET	49757	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.664767981 CET	49757	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.665843964 CET	443	49760	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.665854931 CET	443	49760	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.665888071 CET	443	49760	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.666013956 CET	49760	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:22.671339035 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:22.671380997 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.671525955 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:22.671921968 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:22.671933889 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.679287910 CET	443	49755	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.679439068 CET	443	49755	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.679636002 CET	49755	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.684469938 CET	49755	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.684484959 CET	443	49755	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.706213951 CET	49768	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.706257105 CET	443	49768	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.709537029 CET	49768	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.710235119 CET	49768	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:22.710252047 CET	443	49768	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:22.728009939 CET	443	49760	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.728020906 CET	443	49760	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.728051901 CET	443	49760	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.741414070 CET	49760	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:22.741868973 CET	443	49760	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.741882086 CET	443	49760	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.741908073 CET	443	49760	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.742408037 CET	49760	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:22.755553961 CET	443	49760	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.755564928 CET	443	49760	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.756100893 CET	49760	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:22.769299030 CET	443	49760	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.769309044 CET	443	49760	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.769381046 CET	443	49760	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.769381046 CET	49760	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:22.769593954 CET	49760	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:22.769660950 CET	49760	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:22.769660950 CET	49760	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:22.769685030 CET	443	49760	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:22.769769907 CET	49760	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:24.457926035 CET	443	49764	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:24.458690882 CET	49764	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:24.458708048 CET	443	49764	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:24.459053993 CET	443	49764	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:24.459423065 CET	49764	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:24.459470987 CET	443	49764	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:24.459770918 CET	49764	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:24.500319004 CET	443	49764	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:24.600241899 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:24.601056099 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:24.601085901 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:24.602226973 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:24.602576971 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:24.603312016 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:24.603410006 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:24.603602886 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:24.603621960 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:24.645930052 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:24.691771030 CET	443	49766	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:24.692097902 CET	49766	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:24.692127943 CET	443	49766	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:24.692483902 CET	443	49766	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:24.693084955 CET	49766	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:24.693145037 CET	443	49766	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:24.693341970 CET	49766	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:24.736332893 CET	443	49766	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:24.760943890 CET	443	49768	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:24.761240959 CET	49768	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:24.761262894 CET	443	49768	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:24.761639118 CET	443	49768	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:24.761979103 CET	49768	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:24.762041092 CET	443	49768	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:24.762312889 CET	49768	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:24.804322958 CET	443	49768	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:24.911573887 CET	443	49764	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:24.932626963 CET	443	49764	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:24.932710886 CET	49764	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:24.932743073 CET	443	49764	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:24.953991890 CET	443	49764	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:24.954061985 CET	49764	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:24.954070091 CET	443	49764	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:24.967565060 CET	443	49764	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:24.967609882 CET	443	49764	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:24.967629910 CET	49764	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:24.967638969 CET	443	49764	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:24.967689037 CET	49764	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.029066086 CET	443	49764	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.029078007 CET	443	49764	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.029150963 CET	49764	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.047508955 CET	443	49764	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.047521114 CET	443	49764	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.047581911 CET	49764	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.047604084 CET	443	49764	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.047666073 CET	49764	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.053436041 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.060863018 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.060895920 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.060923100 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.060940981 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.060993910 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.064454079 CET	443	49764	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.064533949 CET	49764	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.071929932 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.071940899 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.072187901 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.085593939 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.085611105 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.085804939 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.101061106 CET	443	49764	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.101111889 CET	443	49764	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.101141930 CET	49764	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.101159096 CET	443	49764	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.101182938 CET	49764	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.111854076 CET	443	49764	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.111901999 CET	443	49764	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.111927986 CET	49764	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.111946106 CET	443	49764	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.111978054 CET	49764	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.111993074 CET	49764	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.134423018 CET	443	49764	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.134469986 CET	443	49764	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.134502888 CET	49764	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.134515047 CET	443	49764	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.134553909 CET	49764	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.155905008 CET	443	49764	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.155951023 CET	443	49764	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.155998945 CET	49764	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.156012058 CET	443	49764	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.156052113 CET	49764	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.158272028 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.158281088 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.158415079 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.168467999 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.168478966 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.168658972 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.168677092 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.168723106 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.176116943 CET	443	49764	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.176156998 CET	443	49764	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.176229000 CET	49764	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.176235914 CET	443	49764	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.176279068 CET	49764	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.180087090 CET	443	49764	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.180150986 CET	49764	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.188117981 CET	443	49764	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.188191891 CET	49764	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.188199043 CET	443	49764	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.188211918 CET	443	49764	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.188317060 CET	49764	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.188549042 CET	49764	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.188570976 CET	443	49764	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.188889027 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.188965082 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.208966970 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.209039927 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.209053040 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.209109068 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.235165119 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.235290051 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.235306978 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.235358953 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.242804050 CET	443	49766	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.242854118 CET	443	49766	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.242889881 CET	443	49766	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.242973089 CET	49766	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.243006945 CET	443	49766	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.243055105 CET	49766	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.251980066 CET	443	49766	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.252094984 CET	49766	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.258037090 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.258106947 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.258126020 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.258131981 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.258222103 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.265340090 CET	443	49766	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.265419960 CET	49766	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.279416084 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.279479027 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.279515028 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.279522896 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.279555082 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.300786018 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.300823927 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.300865889 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.300884962 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.300916910 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.300959110 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.305119991 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.305202961 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.329235077 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.329255104 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.329319000 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.329332113 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.338674068 CET	443	49766	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.338758945 CET	49766	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.347335100 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.347363949 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.347413063 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.347421885 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.347450972 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.348718882 CET	443	49766	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.348732948 CET	443	49766	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.348814011 CET	49766	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.348829031 CET	443	49766	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.349025011 CET	49766	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.362294912 CET	443	49768	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:25.363013983 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.363037109 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.363089085 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.363101959 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.363142967 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.365248919 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.365326881 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.368824005 CET	443	49766	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.368897915 CET	49766	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.370415926 CET	443	49768	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:25.370451927 CET	443	49768	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:25.370475054 CET	49768	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:25.370496035 CET	443	49768	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:25.370667934 CET	49768	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:25.373898983 CET	443	49768	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:25.373954058 CET	49768	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:25.373960972 CET	443	49768	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:25.373974085 CET	443	49768	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:25.374025106 CET	49768	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:25.374429941 CET	49768	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:25.374442101 CET	443	49768	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:25.377779007 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.377800941 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.377931118 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.377931118 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.377959967 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.382781982 CET	49771	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.382834911 CET	443	49771	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.382952929 CET	49771	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.383485079 CET	49771	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.383497953 CET	443	49771	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.387015104 CET	443	49766	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.387049913 CET	443	49766	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.387088060 CET	49766	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.387096882 CET	443	49766	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.387124062 CET	49766	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.387715101 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.387737989 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.387789965 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.387798071 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.387823105 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.399086952 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.399102926 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.399163961 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.399172068 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.399210930 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.408046961 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.408072948 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.408113003 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.408118010 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.408170938 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.418550014 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.418572903 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.418924093 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.418941975 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.419776917 CET	443	49766	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.419819117 CET	443	49766	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.419852018 CET	49766	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.419863939 CET	443	49766	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.419891119 CET	49766	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.419902086 CET	49766	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.428339958 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.428369045 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.428469896 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.428469896 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.428479910 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.430046082 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.430104971 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.430109978 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.430126905 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.430151939 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.430303097 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.434541941 CET	443	49766	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.434575081 CET	443	49766	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.434617996 CET	49766	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.434624910 CET	443	49766	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.434668064 CET	49766	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.452442884 CET	443	49766	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.452477932 CET	443	49766	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.452595949 CET	49766	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.452603102 CET	443	49766	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.452655077 CET	49766	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.456686020 CET	49767	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.456705093 CET	443	49767	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.479969025 CET	443	49766	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.480005980 CET	443	49766	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.480046034 CET	49766	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.480051994 CET	443	49766	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.480097055 CET	49766	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.500885010 CET	443	49766	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.500914097 CET	443	49766	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.500960112 CET	49766	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.500965118 CET	443	49766	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.501008034 CET	49766	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.505799055 CET	443	49766	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.505855083 CET	49766	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.505858898 CET	443	49766	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.505919933 CET	443	49766	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.506175041 CET	49766	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:25.506181955 CET	443	49766	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:25.506196022 CET	49766	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:27.414714098 CET	443	49771	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:27.415070057 CET	49771	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:27.415137053 CET	443	49771	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:27.415498018 CET	443	49771	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:27.415889978 CET	49771	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:27.415963888 CET	443	49771	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:27.416095018 CET	49771	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:27.460325003 CET	443	49771	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:27.995590925 CET	443	49771	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:28.015721083 CET	443	49771	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:28.015780926 CET	443	49771	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:28.015799999 CET	49771	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:28.015820980 CET	443	49771	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:28.015870094 CET	443	49771	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:28.015940905 CET	49771	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:28.015960932 CET	443	49771	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:28.015985012 CET	443	49771	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:28.016041040 CET	49771	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:28.016199112 CET	49771	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:28.016239882 CET	443	49771	216.198.79.1	192.168.2.4
Mar 13, 2025 10:29:28.016266108 CET	49771	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:28.016298056 CET	49771	443	192.168.2.4	216.198.79.1
Mar 13, 2025 10:29:31.739758015 CET	49680	443	192.168.2.4	204.79.197.222
Mar 13, 2025 10:29:35.622351885 CET	443	49735	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:35.622366905 CET	443	49736	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:35.622410059 CET	443	49738	204.79.197.222	192.168.2.4
Mar 13, 2025 10:29:35.622435093 CET	443	49735	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:35.622458935 CET	443	49736	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:35.622497082 CET	49738	443	192.168.2.4	204.79.197.222
Mar 13, 2025 10:29:35.622515917 CET	49736	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:35.624217033 CET	49735	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:35.944394112 CET	49735	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:35.944423914 CET	443	49735	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:35.944466114 CET	49736	443	192.168.2.4	216.198.79.193
Mar 13, 2025 10:29:35.944504976 CET	443	49736	216.198.79.193	192.168.2.4
Mar 13, 2025 10:29:48.521068096 CET	49713	80	192.168.2.4	216.58.212.131
Mar 13, 2025 10:29:48.521472931 CET	49717	80	192.168.2.4	199.232.214.172
Mar 13, 2025 10:29:48.521486044 CET	49715	80	192.168.2.4	199.232.214.172
Mar 13, 2025 10:29:48.525938034 CET	80	49713	216.58.212.131	192.168.2.4
Mar 13, 2025 10:29:48.525991917 CET	49713	80	192.168.2.4	216.58.212.131
Mar 13, 2025 10:29:48.526277065 CET	80	49717	199.232.214.172	192.168.2.4
Mar 13, 2025 10:29:48.526331902 CET	49717	80	192.168.2.4	199.232.214.172
Mar 13, 2025 10:29:48.526725054 CET	80	49715	199.232.214.172	192.168.2.4
Mar 13, 2025 10:29:48.526873112 CET	49715	80	192.168.2.4	199.232.214.172
Mar 13, 2025 10:29:49.367867947 CET	49714	443	192.168.2.4	2.19.122.27
Mar 13, 2025 10:29:49.368026018 CET	49718	80	192.168.2.4	2.23.77.188
Mar 13, 2025 10:29:49.368199110 CET	49716	80	192.168.2.4	199.232.214.172
Mar 13, 2025 10:30:05.365165949 CET	49776	443	192.168.2.4	142.250.186.36
Mar 13, 2025 10:30:05.365211010 CET	443	49776	142.250.186.36	192.168.2.4
Mar 13, 2025 10:30:05.365358114 CET	49776	443	192.168.2.4	142.250.186.36
Mar 13, 2025 10:30:05.365675926 CET	49776	443	192.168.2.4	142.250.186.36
Mar 13, 2025 10:30:05.365690947 CET	443	49776	142.250.186.36	192.168.2.4
Mar 13, 2025 10:30:07.343761921 CET	443	49776	142.250.186.36	192.168.2.4
Mar 13, 2025 10:30:07.344130993 CET	49776	443	192.168.2.4	142.250.186.36
Mar 13, 2025 10:30:07.344147921 CET	443	49776	142.250.186.36	192.168.2.4
Mar 13, 2025 10:30:07.345357895 CET	443	49776	142.250.186.36	192.168.2.4
Mar 13, 2025 10:30:07.345416069 CET	49776	443	192.168.2.4	142.250.186.36
Mar 13, 2025 10:30:07.346735001 CET	49776	443	192.168.2.4	142.250.186.36
Mar 13, 2025 10:30:07.346868992 CET	443	49776	142.250.186.36	192.168.2.4
Mar 13, 2025 10:30:07.396044970 CET	49776	443	192.168.2.4	142.250.186.36
Mar 13, 2025 10:30:07.396056890 CET	443	49776	142.250.186.36	192.168.2.4
Mar 13, 2025 10:30:07.442943096 CET	49776	443	192.168.2.4	142.250.186.36
Mar 13, 2025 10:30:18.001569033 CET	443	49776	142.250.186.36	192.168.2.4
Mar 13, 2025 10:30:18.001651049 CET	443	49776	142.250.186.36	192.168.2.4
Mar 13, 2025 10:30:18.001739025 CET	49776	443	192.168.2.4	142.250.186.36
Mar 13, 2025 10:30:19.945509911 CET	49776	443	192.168.2.4	142.250.186.36
Mar 13, 2025 10:30:19.945533037 CET	443	49776	142.250.186.36	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 13, 2025 10:29:05.956717968 CET	53	64257	1.1.1.1	192.168.2.4
Mar 13, 2025 10:29:05.992866039 CET	53010	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:29:05.993180037 CET	53176	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:29:05.996568918 CET	53	51904	1.1.1.1	192.168.2.4
Mar 13, 2025 10:29:05.999766111 CET	53	53176	1.1.1.1	192.168.2.4
Mar 13, 2025 10:29:05.999806881 CET	53	53010	1.1.1.1	192.168.2.4
Mar 13, 2025 10:29:10.349797964 CET	53	53574	1.1.1.1	192.168.2.4
Mar 13, 2025 10:29:10.564697981 CET	53	49213	1.1.1.1	192.168.2.4
Mar 13, 2025 10:29:11.269730091 CET	49292	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:29:11.269917011 CET	54471	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:29:11.281295061 CET	57433	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:29:11.281443119 CET	60423	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:29:11.288151979 CET	53	49292	1.1.1.1	192.168.2.4
Mar 13, 2025 10:29:11.289935112 CET	53	54471	1.1.1.1	192.168.2.4
Mar 13, 2025 10:29:11.290033102 CET	53	57433	1.1.1.1	192.168.2.4
Mar 13, 2025 10:29:11.290251017 CET	53	60423	1.1.1.1	192.168.2.4
Mar 13, 2025 10:29:11.293216944 CET	64195	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:29:11.293353081 CET	63907	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:29:11.302828074 CET	53	64195	1.1.1.1	192.168.2.4
Mar 13, 2025 10:29:11.311136007 CET	53	63907	1.1.1.1	192.168.2.4
Mar 13, 2025 10:29:16.977961063 CET	61345	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:29:16.978101969 CET	51543	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:29:16.984563112 CET	53	61345	1.1.1.1	192.168.2.4
Mar 13, 2025 10:29:16.985747099 CET	53	51543	1.1.1.1	192.168.2.4
Mar 13, 2025 10:29:17.026926994 CET	53	62596	1.1.1.1	192.168.2.4
Mar 13, 2025 10:29:19.777525902 CET	53	51567	1.1.1.1	192.168.2.4
Mar 13, 2025 10:29:19.777878046 CET	60214	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:29:19.778021097 CET	51109	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:29:19.793699980 CET	53	51109	1.1.1.1	192.168.2.4
Mar 13, 2025 10:29:19.794645071 CET	49248	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:29:19.794840097 CET	64128	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:29:19.795716047 CET	53	60214	1.1.1.1	192.168.2.4
Mar 13, 2025 10:29:19.801619053 CET	53	49248	1.1.1.1	192.168.2.4
Mar 13, 2025 10:29:19.802022934 CET	53	64128	1.1.1.1	192.168.2.4
Mar 13, 2025 10:29:27.474673033 CET	53	61291	1.1.1.1	192.168.2.4
Mar 13, 2025 10:29:46.403757095 CET	53	55668	1.1.1.1	192.168.2.4
Mar 13, 2025 10:30:01.496593952 CET	138	138	192.168.2.4	192.168.2.255
Mar 13, 2025 10:30:05.311516047 CET	53	53124	1.1.1.1	192.168.2.4
Mar 13, 2025 10:30:06.122474909 CET	53	62238	1.1.1.1	192.168.2.4
Mar 13, 2025 10:30:08.827764034 CET	53	52846	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 13, 2025 10:29:05.992866039 CET	192.168.2.4	1.1.1.1	0x85ca	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:29:05.993180037 CET	192.168.2.4	1.1.1.1	0x8301	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 13, 2025 10:29:11.269730091 CET	192.168.2.4	1.1.1.1	0x3abd	Standard query (0)	10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:29:11.269917011 CET	192.168.2.4	1.1.1.1	0x6758	Standard query (0)	10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app	65	IN (0x0001)	false
Mar 13, 2025 10:29:11.281295061 CET	192.168.2.4	1.1.1.1	0xf349	Standard query (0)	10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:29:11.281443119 CET	192.168.2.4	1.1.1.1	0x5655	Standard query (0)	10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app	65	IN (0x0001)	false
Mar 13, 2025 10:29:11.293216944 CET	192.168.2.4	1.1.1.1	0x62e0	Standard query (0)	10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:29:11.293353081 CET	192.168.2.4	1.1.1.1	0x3218	Standard query (0)	10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app	65	IN (0x0001)	false
Mar 13, 2025 10:29:16.977961063 CET	192.168.2.4	1.1.1.1	0xa15f	Standard query (0)	ipinfo.io	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:29:16.978101969 CET	192.168.2.4	1.1.1.1	0xb7fa	Standard query (0)	ipinfo.io	65	IN (0x0001)	false
Mar 13, 2025 10:29:19.777878046 CET	192.168.2.4	1.1.1.1	0xb160	Standard query (0)	10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:29:19.778021097 CET	192.168.2.4	1.1.1.1	0xed88	Standard query (0)	10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app	65	IN (0x0001)	false
Mar 13, 2025 10:29:19.794645071 CET	192.168.2.4	1.1.1.1	0x5f3a	Standard query (0)	ipinfo.io	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:29:19.794840097 CET	192.168.2.4	1.1.1.1	0x3abd	Standard query (0)	ipinfo.io	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Mar 13, 2025 10:29:05.999766111 CET	1.1.1.1	192.168.2.4	0x8301	No error (0)	www.google.com		65	IN (0x0001)	false
Mar 13, 2025 10:29:05.999806881 CET	1.1.1.1	192.168.2.4	0x85ca	No error (0)	www.google.com	142.250.186.36	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:29:11.288151979 CET	1.1.1.1	192.168.2.4	0x3abd	No error (0)	10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app	216.198.79.129	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:29:11.288151979 CET	1.1.1.1	192.168.2.4	0x3abd	No error (0)	10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app	64.29.17.129	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:29:11.290033102 CET	1.1.1.1	192.168.2.4	0xf349	No error (0)	10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app	216.198.79.193	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:29:11.290033102 CET	1.1.1.1	192.168.2.4	0xf349	No error (0)	10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app	64.29.17.193	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:29:11.302828074 CET	1.1.1.1	192.168.2.4	0x62e0	No error (0)	10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app	216.198.79.193	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:29:11.302828074 CET	1.1.1.1	192.168.2.4	0x62e0	No error (0)	10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app	64.29.17.193	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:29:16.984563112 CET	1.1.1.1	192.168.2.4	0xa15f	No error (0)	ipinfo.io	34.117.59.81	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:29:19.795716047 CET	1.1.1.1	192.168.2.4	0xb160	No error (0)	10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app	216.198.79.1	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:29:19.795716047 CET	1.1.1.1	192.168.2.4	0xb160	No error (0)	10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app	64.29.17.1	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:29:19.801619053 CET	1.1.1.1	192.168.2.4	0x5f3a	No error (0)	ipinfo.io	34.117.59.81	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app

ipinfo.io

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49734	216.198.79.193	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:29:13 UTC	719	OUT	GET /case/100081295808699.html HTTP/1.1 Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:29:13 UTC	570	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 244094 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline; filename="100081295808699.html" Content-Length: 302495 Content-Type: text/html; charset=utf-8 Date: Thu, 13 Mar 2025 09:29:13 GMT Etag: "8cac28f3021cb9a88e15f535dde7510b" Last-Modified: Mon, 10 Mar 2025 13:40:58 GMT Server: Vercel Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Vercel-Cache: HIT X-Vercel-Id: iad1::4czh7-1741858153541-5d443014eed5 Connection: close
2025-03-13 09:29:13 UTC	2372	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 20 73 61 76 65 64 20 66 72 6f 6d 20 75 72 6c 3d 28 30 30 34 36 29 68 74 74 70 73 3a 2f 2f 62 32 2d 6e 69 6e 65 2e 76 65 72 63 65 6c 2e 61 70 70 2f 72 75 75 2e 68 74 6d 6c 2f 68 77 6b 6c 73 2e 68 74 6d 6c 20 2d 2d 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 69 64 3d 22 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e Data Ascii: <!DOCTYPE html>... saved from url=(0046)https://b2-nine.vercel.app/ruu.html/hwkls.html --><html lang="en" id="html"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta name="viewport" content="width=device-width, in
2025-03-13 09:29:13 UTC	985	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 20 3d 20 74 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 20 2b 3d 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 31 65 36 20 2a 20 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 77 68 69 6c 65 20 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 Data Ascii: } }, e = t => { do { t += Math.floor(1e6 * Math.random()) } while (document.getElementById(t)); return t },
2025-03-13 09:29:13 UTC	4744	IN	Data Raw: 65 72 79 53 65 6c 65 63 74 6f 72 28 65 29 20 3a 20 6e 75 6c 6c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 20 3d 20 74 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 45 76 65 6e 74 28 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 29 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 20 3d 20 74 20 3d 3e 20 21 28 21 74 20 7c 7c 20 22 6f 62 6a 65 63 74 22 20 21 3d 20 74 79 70 65 6f 66 20 74 29 20 26 26 20 28 76 6f 69 64 20 30 20 21 3d 3d 20 74 2e 6a 71 75 65 72 79 20 26 26 20 28 74 20 3d 20 74 5b 30 5d 29 2c 20 76 6f 69 64 20 30 20 21 3d 3d Data Ascii: erySelector(e) : null }, o = t => { t.dispatchEvent(new Event("transitionend")) }, r = t => !(!t \|\| "object" != typeof t) && (void 0 !== t.jquery && (t = t[0]), void 0 !==
2025-03-13 09:29:13 UTC	5930	IN	Data Raw: 75 63 68 6d 6f 76 65 22 2c 20 22 74 6f 75 63 68 65 6e 64 22 2c 20 22 74 6f 75 63 68 63 61 6e 63 65 6c 22 2c 20 22 70 6f 69 6e 74 65 72 64 6f 77 6e 22 2c 20 22 70 6f 69 6e 74 65 72 6d 6f 76 65 22 2c 20 22 70 6f 69 6e 74 65 72 75 70 22 2c 20 22 70 6f 69 6e 74 65 72 6c 65 61 76 65 22 2c 20 22 70 6f 69 6e 74 65 72 63 61 6e 63 65 6c 22 2c 20 22 67 65 73 74 75 72 65 73 74 61 72 74 22 2c 20 22 67 65 73 74 75 72 65 63 68 61 6e 67 65 22 2c 20 22 67 65 73 74 75 72 65 65 6e 64 22 2c 20 22 66 6f 63 75 73 22 2c 20 22 62 6c 75 72 22 2c 20 22 63 68 61 6e 67 65 22 2c 20 22 72 65 73 65 74 22 2c 20 22 73 65 6c 65 63 74 22 2c 20 22 73 75 62 6d 69 74 22 2c 20 22 66 6f 63 75 73 69 6e 22 2c 20 22 66 6f 63 75 73 6f 75 74 22 2c 20 22 6c 6f 61 64 22 2c 20 22 75 6e 6c 6f 61 64 22 Data Ascii: uchmove", "touchend", "touchcancel", "pointerdown", "pointermove", "pointerup", "pointerleave", "pointercancel", "gesturestart", "gesturechange", "gestureend", "focus", "blur", "change", "reset", "select", "submit", "focusin", "focusout", "load", "unload"
2025-03-13 09:29:13 UTC	7116	IN	Data Raw: 20 64 6f 65 73 6e 27 74 20 61 6c 6c 6f 77 20 6d 6f 72 65 20 74 68 61 6e 20 6f 6e 65 20 69 6e 73 74 61 6e 63 65 20 70 65 72 20 65 6c 65 6d 65 6e 74 2e 20 42 6f 75 6e 64 20 69 6e 73 74 61 6e 63 65 3a 20 24 7b 41 72 72 61 79 2e 66 72 6f 6d 28 6e 2e 6b 65 79 73 28 29 29 5b 30 5d 7d 2e 60 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 67 65 74 3a 20 28 74 2c 20 65 29 20 3d 3e 20 48 2e 68 61 73 28 74 29 20 26 26 20 48 2e 67 65 74 28 74 29 2e 67 65 74 28 65 29 20 7c 7c 20 6e 75 6c 6c 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 6d 6f 76 65 28 74 2c 20 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 48 2e 68 61 73 28 74 29 29 20 72 65 74 75 72 Data Ascii: doesn't allow more than one instance per element. Bound instance: ${Array.from(n.keys())[0]}.`) }, get: (t, e) => H.has(t) && H.get(t).get(e) \|\| null, remove(t, e) { if (!H.has(t)) retur
2025-03-13 09:29:13 UTC	8302	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 20 26 26 20 63 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 20 26 26 20 74 68 69 73 2e 6e 65 78 74 28 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 72 65 76 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 5f 73 6c 69 64 65 28 58 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 75 73 65 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 20 7c 7c 20 28 74 Data Ascii: nextWhenVisible() { !document.hidden && c(this._element) && this.next() } prev() { this._slide(X) } pause(e) { e \|\| (t
2025-03-13 09:29:13 UTC	6676	IN	Data Raw: 20 59 20 3a 20 51 20 3a 20 74 20 3d 3d 3d 20 58 20 3f 20 51 20 3a 20 59 20 3a 20 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 74 61 74 69 63 20 63 61 72 6f 75 73 65 6c 49 6e 74 65 72 66 61 63 65 28 74 2c 20 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 69 20 3d 20 5a 2e 67 65 74 4f 72 43 72 65 61 74 65 49 6e 73 74 61 6e 63 65 28 74 2c 20 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5f 63 6f 6e 66 69 67 3a 20 6e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 3d 20 69 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: Y : Q : t === X ? Q : Y : t } static carouselInterface(t, e) { const i = Z.getOrCreateInstance(t, e); let { _config: n } = i;
2025-03-13 09:29:13 UTC	10674	IN	Data Raw: 20 74 20 3d 20 30 3b 20 74 20 3c 20 65 3b 20 74 2b 2b 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 65 20 3d 20 74 68 69 73 2e 5f 74 72 69 67 67 65 72 41 72 72 61 79 5b 74 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 20 3d 20 73 28 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 20 26 26 20 21 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 73 68 6f 77 22 29 20 26 26 20 28 65 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 63 6f 6c 6c 61 70 73 65 64 22 29 2c 20 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 2c 20 21 Data Ascii: t = 0; t < e; t++) { const e = this._triggerArray[t], i = s(e); i && !i.classList.contains("show") && (e.classList.add("collapsed"), e.setAttribute("aria-expanded", !
2025-03-13 09:29:13 UTC	11860	IN	Data Raw: 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 4e 74 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 61 6d 65 3a 20 22 61 72 72 6f 77 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6e 61 62 6c 65 64 3a 20 21 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 68 61 73 65 3a 20 22 6d 61 69 6e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6e 3a 20 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 65 2c 20 69 20 3d 20 74 2e 73 74 61 74 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 20 3d 20 74 2e 6e 61 6d 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: } var Nt = { name: "arrow", enabled: !0, phase: "main", fn: function (t) { var e, i = t.state, n = t.name,
2025-03-13 09:29:13 UTC	10234	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 65 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 78 3a 20 61 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 79 3a 20 69 2e 79 20 2b 20 69 2e 68 65 69 67 68 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 73 74 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 78 3a 20 69 2e 78 20 2b 20 69 2e Data Ascii: e = { x: a, y: i.y + i.height }; break; case st: e = { x: i.x + i.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49740	216.198.79.193	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:29:15 UTC	643	OUT	GET /styles/bootstrap.min.css HTTP/1.1 Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:29:16 UTC	566	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 244097 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline; filename="bootstrap.min.css" Content-Length: 185717 Content-Type: text/css; charset=utf-8 Date: Thu, 13 Mar 2025 09:29:16 GMT Etag: "6636c2dab79c70d2af7ee3ac42212655" Last-Modified: Mon, 10 Mar 2025 13:40:59 GMT Server: Vercel Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Vercel-Cache: HIT X-Vercel-Id: iad1::f5j2v-1741858156133-37e17737bcad Connection: close
2025-03-13 09:29:16 UTC	2372	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 20 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 30 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 0a 3a 72 6f 6f 74 20 7b 0a 20 2d 2d 62 73 2d 62 6c 75 65 3a 20 23 30 64 Data Ascii: @charset "UTF-8"; /! Bootstrap v5.0.2 (https://getbootstrap.com/) * Copyright 2011-2021 The Bootstrap Authors * Copyright 2011-2021 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root { --bs-blue: #0d
2025-03-13 09:29:16 UTC	989	IN	Data Raw: 6c 2d 74 69 74 6c 65 5d 2c 0a 61 62 62 72 5b 74 69 74 6c 65 5d 20 7b 0a 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 0a 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 0a 20 63 75 72 73 6f 72 3a 20 68 65 6c 70 3b 0a 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 73 6b 69 70 2d 69 6e 6b 3a 20 6e 6f 6e 65 3b 0a 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 73 6b 69 70 2d 69 6e 6b 3a 20 6e 6f 6e 65 3b 0a 7d 0a 61 64 64 72 65 73 73 20 7b 0a 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 72 65 6d 3b 0a 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 6c 69 6e 65 2d 68 Data Ascii: l-title],abbr[title] { -webkit-text-decoration: underline dotted; text-decoration: underline dotted; cursor: help; -webkit-text-decoration-skip-ink: none; text-decoration-skip-ink: none;}address { margin-bottom: 1rem; font-style: normal; line-h
2025-03-13 09:29:16 UTC	4744	IN	Data Raw: 2c 0a 6b 62 64 2c 0a 70 72 65 2c 0a 73 61 6d 70 20 7b 0a 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 61 72 28 2d 2d 62 73 2d 66 6f 6e 74 2d 6d 6f 6e 6f 73 70 61 63 65 29 3b 0a 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 65 6d 3b 0a 20 64 69 72 65 63 74 69 6f 6e 3a 20 6c 74 72 3b 0a 20 75 6e 69 63 6f 64 65 2d 62 69 64 69 3a 20 62 69 64 69 2d 6f 76 65 72 72 69 64 65 3b 0a 7d 0a 70 72 65 20 7b 0a 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b 0a 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 72 65 6d 3b 0a 20 6f 76 65 72 66 6c 6f 77 3a 20 61 75 74 6f 3b 0a 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 38 37 35 65 6d 3b 0a 7d 0a 70 72 65 20 63 6f 64 65 20 7b 0a 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 69 6e 68 65 72 69 Data Ascii: ,kbd,pre,samp { font-family: var(--bs-font-monospace); font-size: 1em; direction: ltr; unicode-bidi: bidi-override;}pre { display: block; margin-top: 0; margin-bottom: 1rem; overflow: auto; font-size: 0.875em;}pre code { font-size: inheri
2025-03-13 09:29:16 UTC	5930	IN	Data Raw: 74 61 69 6e 65 72 2d 6c 67 2c 0a 2e 63 6f 6e 74 61 69 6e 65 72 2d 6d 64 2c 0a 2e 63 6f 6e 74 61 69 6e 65 72 2d 73 6d 2c 0a 2e 63 6f 6e 74 61 69 6e 65 72 2d 78 6c 2c 0a 2e 63 6f 6e 74 61 69 6e 65 72 2d 78 78 6c 20 7b 0a 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 76 61 72 28 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 2c 20 30 2e 37 35 72 65 6d 29 3b 0a 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 76 61 72 28 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 2c 20 30 2e 37 35 72 65 6d 29 3b 0a 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 35 37 36 70 78 29 20 7b 0a 20 2e 63 6f 6e 74 61 69 Data Ascii: tainer-lg,.container-md,.container-sm,.container-xl,.container-xxl { width: 100%; padding-right: var(--bs-gutter-x, 0.75rem); padding-left: var(--bs-gutter-x, 0.75rem); margin-right: auto; margin-left: auto;}@media (min-width: 576px) { .contai
2025-03-13 09:29:16 UTC	7116	IN	Data Raw: 2d 36 20 7b 0a 20 20 66 6c 65 78 3a 20 30 20 30 20 61 75 74 6f 3b 0a 20 20 77 69 64 74 68 3a 20 35 30 25 3b 0a 20 7d 0a 20 2e 63 6f 6c 2d 73 6d 2d 37 20 7b 0a 20 20 66 6c 65 78 3a 20 30 20 30 20 61 75 74 6f 3b 0a 20 20 77 69 64 74 68 3a 20 35 38 2e 33 33 33 33 33 33 33 33 25 3b 0a 20 7d 0a 20 2e 63 6f 6c 2d 73 6d 2d 38 20 7b 0a 20 20 66 6c 65 78 3a 20 30 20 30 20 61 75 74 6f 3b 0a 20 20 77 69 64 74 68 3a 20 36 36 2e 36 36 36 36 36 36 36 37 25 3b 0a 20 7d 0a 20 2e 63 6f 6c 2d 73 6d 2d 39 20 7b 0a 20 20 66 6c 65 78 3a 20 30 20 30 20 61 75 74 6f 3b 0a 20 20 77 69 64 74 68 3a 20 37 35 25 3b 0a 20 7d 0a 20 2e 63 6f 6c 2d 73 6d 2d 31 30 20 7b 0a 20 20 66 6c 65 78 3a 20 30 20 30 20 61 75 74 6f 3b 0a 20 20 77 69 64 74 68 3a 20 38 33 2e 33 33 33 33 33 33 33 33 25 Data Ascii: -6 { flex: 0 0 auto; width: 50%; } .col-sm-7 { flex: 0 0 auto; width: 58.33333333%; } .col-sm-8 { flex: 0 0 auto; width: 66.66666667%; } .col-sm-9 { flex: 0 0 auto; width: 75%; } .col-sm-10 { flex: 0 0 auto; width: 83.33333333%
2025-03-13 09:29:16 UTC	8302	IN	Data Raw: 30 20 30 20 61 75 74 6f 3b 0a 20 20 77 69 64 74 68 3a 20 61 75 74 6f 3b 0a 20 7d 0a 20 2e 63 6f 6c 2d 78 78 6c 2d 31 20 7b 0a 20 20 66 6c 65 78 3a 20 30 20 30 20 61 75 74 6f 3b 0a 20 20 77 69 64 74 68 3a 20 38 2e 33 33 33 33 33 33 33 33 25 3b 0a 20 7d 0a 20 2e 63 6f 6c 2d 78 78 6c 2d 32 20 7b 0a 20 20 66 6c 65 78 3a 20 30 20 30 20 61 75 74 6f 3b 0a 20 20 77 69 64 74 68 3a 20 31 36 2e 36 36 36 36 36 36 36 37 25 3b 0a 20 7d 0a 20 2e 63 6f 6c 2d 78 78 6c 2d 33 20 7b 0a 20 20 66 6c 65 78 3a 20 30 20 30 20 61 75 74 6f 3b 0a 20 20 77 69 64 74 68 3a 20 32 35 25 3b 0a 20 7d 0a 20 2e 63 6f 6c 2d 78 78 6c 2d 34 20 7b 0a 20 20 66 6c 65 78 3a 20 30 20 30 20 61 75 74 6f 3b 0a 20 20 77 69 64 74 68 3a 20 33 33 2e 33 33 33 33 33 33 33 33 25 3b 0a 20 7d 0a 20 2e 63 6f 6c Data Ascii: 0 0 auto; width: auto; } .col-xxl-1 { flex: 0 0 auto; width: 8.33333333%; } .col-xxl-2 { flex: 0 0 auto; width: 16.66666667%; } .col-xxl-3 { flex: 0 0 auto; width: 25%; } .col-xxl-4 { flex: 0 0 auto; width: 33.33333333%; } .col
2025-03-13 09:29:16 UTC	6676	IN	Data Raw: 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 5b 72 65 61 64 6f 6e 6c 79 5d 29 3a 3a 66 69 6c 65 2d 73 65 6c 65 63 74 6f 72 2d 62 75 74 74 6f 6e 20 7b 0a 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 64 64 65 30 65 33 3b 0a 7d 0a 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 3a 2d 77 65 62 6b 69 74 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 62 75 74 74 6f 6e 20 7b 0a 20 70 61 64 64 69 6e 67 3a 20 30 2e 33 37 35 72 65 6d 20 30 2e 37 35 72 65 6d 3b 0a 20 6d 61 72 67 69 6e 3a 20 2d 30 2e 33 37 35 72 65 6d 20 2d 30 2e 37 35 72 65 6d 3b 0a 20 2d 77 65 62 6b 69 74 2d 6d 61 72 67 69 6e 2d 65 6e 64 3a 20 30 2e 37 35 72 65 6d 3b 0a 20 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 65 6e 64 3a 20 30 2e 37 35 72 65 6d 3b 0a 20 63 6f 6c 6f 72 3a 20 23 32 Data Ascii: not(:disabled):not([readonly])::file-selector-button { background-color: #dde0e3;}.form-control::-webkit-file-upload-button { padding: 0.375rem 0.75rem; margin: -0.375rem -0.75rem; -webkit-margin-end: 0.75rem; margin-inline-end: 0.75rem; color: #2
2025-03-13 09:29:16 UTC	10674	IN	Data Raw: 76 67 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 27 20 76 69 65 77 42 6f 78 3d 27 2d 34 20 2d 34 20 38 20 38 27 25 33 65 25 33 63 63 69 72 63 6c 65 20 72 3d 27 33 27 20 66 69 6c 6c 3d 27 25 32 33 38 36 62 37 66 65 27 2f 25 33 65 25 33 63 2f 73 76 67 25 33 65 22 29 3b 0a 7d 0a 2e 66 6f 72 6d 2d 73 77 69 74 63 68 20 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 20 7b 0a 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 72 69 67 68 74 20 63 65 6e 74 65 72 3b 0a 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 22 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 2c 25 33 63 73 76 67 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 Data Ascii: vg xmlns='http://www.w3.org/2000/svg' viewBox='-4 -4 8 8'%3e%3ccircle r='3' fill='%2386b7fe'/%3e%3c/svg%3e");}.form-switch .form-check-input:checked { background-position: right center; background-image: url("data:image/svg+xml,%3csvg xmlns='http://ww
2025-03-13 09:29:16 UTC	11860	IN	Data Raw: 20 76 69 65 77 42 6f 78 3d 27 30 20 30 20 31 32 20 31 32 27 20 77 69 64 74 68 3d 27 31 32 27 20 68 65 69 67 68 74 3d 27 31 32 27 20 66 69 6c 6c 3d 27 6e 6f 6e 65 27 20 73 74 72 6f 6b 65 3d 27 25 32 33 64 63 33 35 34 35 27 25 33 65 25 33 63 63 69 72 63 6c 65 20 63 78 3d 27 36 27 20 63 79 3d 27 36 27 20 72 3d 27 34 2e 35 27 2f 25 33 65 25 33 63 70 61 74 68 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 27 72 6f 75 6e 64 27 20 64 3d 27 4d 35 2e 38 20 33 2e 36 68 2e 34 4c 36 20 36 2e 35 7a 27 2f 25 33 65 25 33 63 63 69 72 63 6c 65 20 63 78 3d 27 36 27 20 63 79 3d 27 38 2e 32 27 20 72 3d 27 2e 36 27 20 66 69 6c 6c 3d 27 25 32 33 64 63 33 35 34 35 27 20 73 74 72 6f 6b 65 3d 27 6e 6f 6e 65 27 2f 25 33 65 25 33 63 2f 73 76 67 25 33 65 22 29 3b 0a 20 62 61 63 Data Ascii: viewBox='0 0 12 12' width='12' height='12' fill='none' stroke='%23dc3545'%3e%3ccircle cx='6' cy='6' r='4.5'/%3e%3cpath stroke-linejoin='round' d='M5.8 3.6h.4L6 6.5z'/%3e%3ccircle cx='6' cy='8.2' r='.6' fill='%23dc3545' stroke='none'/%3e%3c/svg%3e"); bac
2025-03-13 09:29:16 UTC	10234	IN	Data Raw: 64 20 7b 0a 20 63 6f 6c 6f 72 3a 20 23 30 64 36 65 66 64 3b 0a 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 7d 0a 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 73 65 63 6f 6e 64 61 72 79 20 7b 0a 20 63 6f 6c 6f 72 3a 20 23 36 63 37 35 37 64 3b 0a 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 36 63 37 35 37 64 3b 0a 7d 0a 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 73 65 63 6f 6e 64 61 72 79 3a 68 6f 76 65 72 20 7b 0a 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 36 63 37 35 37 64 3b 0a 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 36 63 37 35 37 64 3b 0a 7d 0a 2e 62 74 6e 2d 63 68 65 63 6b 3a 66 6f 63 75 73 20 2b 20 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 73 Data Ascii: d { color: #0d6efd; background-color: transparent;}.btn-outline-secondary { color: #6c757d; border-color: #6c757d;}.btn-outline-secondary:hover { color: #fff; background-color: #6c757d; border-color: #6c757d;}.btn-check:focus + .btn-outline-s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49741	216.198.79.193	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:29:15 UTC	635	OUT	GET /styles/style.css HTTP/1.1 Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:29:16 UTC	557	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 244097 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline; filename="style.css" Content-Length: 14424 Content-Type: text/css; charset=utf-8 Date: Thu, 13 Mar 2025 09:29:16 GMT Etag: "938ffb1f39a9c79e9d5e0f7efcdddfb6" Last-Modified: Mon, 10 Mar 2025 13:40:59 GMT Server: Vercel Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Vercel-Cache: HIT X-Vercel-Id: iad1::wmlq2-1741858156141-bd9cc230c3fe Connection: close
2025-03-13 09:29:16 UTC	2372	IN	Data Raw: 23 68 74 6d 6c 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 28 32 34 39 2c 20 32 34 31 2c 20 32 34 39 29 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 0a 20 20 20 20 20 39 30 64 65 67 2c 0a 20 20 20 20 20 72 67 62 61 28 32 34 39 2c 20 32 34 31 2c 20 32 34 39 2c 20 31 29 20 30 25 2c 0a 20 20 20 20 20 72 67 62 61 28 32 33 34 2c 20 32 34 33 2c 20 32 35 33 2c 20 31 29 20 33 35 25 2c 0a 20 20 20 20 20 72 67 62 61 28 32 33 37 2c 20 32 35 31 2c 20 32 34 32 2c 20 31 29 20 31 30 30 25 0a 20 20 20 20 29 3b 0a 7d 0a 0a 62 6f 64 79 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 76 68 3b 0a 20 20 20 20 6f 76 65 Data Ascii: #html { background: rgb(249, 241, 249); background: linear-gradient( 90deg, rgba(249, 241, 249, 1) 0%, rgba(234, 243, 253, 1) 35%, rgba(237, 251, 242, 1) 100% );}body { background: inherit; height: 100vh; ove
2025-03-13 09:29:16 UTC	1003	IN	Data Raw: 20 35 30 30 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 30 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 4f 70 74 69 6d 69 73 74 69 63 20 54 65 78 74 20 4d 65 64 69 75 6d 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 2e 61 63 74 69 6f 6e 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 33 65 38 65 66 3b 0a 7d 0a 0a 2e 61 63 74 69 6f 6e 2d 62 75 74 74 6f 6e 2e 6d 61 69 6e 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 28 35 32 2c 20 37 32 2c 20 38 34 29 3b 0a 7d 0a 0a 2e 61 63 74 69 6f 6e 2d 62 75 74 74 6f Data Ascii: 500; line-height: 20px; font-family: Optimistic Text Medium, Helvetica, Arial, sans-serif;}.action-button:hover { background-color: #e3e8ef;}.action-button.main { color: white; background-color: rgb(52, 72, 84);}.action-butto
2025-03-13 09:29:16 UTC	4744	IN	Data Raw: 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 72 6f 74 61 74 65 3a 20 31 38 30 64 65 67 3b 0a 7d 0a 0a 2e 62 6f 78 73 68 61 64 6f 77 20 7b 0a 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 29 20 31 70 78 20 33 70 78 20 38 70 78 20 33 70 78 3b 0a 7d 0a 0a 23 6d 61 69 6e 20 7b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 31 30 30 70 78 3b 0a 7d 0a 0a 2f 2a 20 43 41 52 44 20 2a 2f 0a 23 63 61 72 64 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 30 70 78 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f Data Ascii: { display: block; rotate: 180deg;}.boxshadow { box-shadow: rgba(0, 0, 0, 0.1) 1px 3px 8px 3px;}#main { max-width: 1100px;}/* CARD */#card { display: flex; flex-direction: column; border-radius: 20px; background-co
2025-03-13 09:29:16 UTC	5930	IN	Data Raw: 0a 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 62 74 6e 2d 63 6c 6f 73 65 3a 68 6f 76 65 72 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 32 65 61 66 32 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 7d 0a 0a 2e 66 6f 72 6d 2d 62 74 6e 2d 77 72 61 70 70 65 72 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 35 70 78 20 30 3b 0a 7d 0a 0a 2e 66 6f 72 6d 2d 62 74 6e 2d 77 72 61 70 70 65 72 20 2e 62 74 6e 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b Data Ascii: border-top: none;}.btn-close:hover { background-color: #e2eaf2; border-radius: 50%;}.form-btn-wrapper { display: flex; justify-content: center; padding: 15px 0;}.form-btn-wrapper .btn { width: 100%; display: flex;
2025-03-13 09:29:16 UTC	375	IN	Data Raw: 68 c3 aa 6d 20 6b 68 6f e1 ba a3 6e 67 20 63 c3 a1 63 68 20 70 68 c3 ad 61 20 64 c6 b0 e1 bb 9b 69 20 c4 91 c6 b0 e1 bb 9d 6e 67 20 63 68 69 61 20 2a 2f 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 20 2f 2a 20 54 e1 ba a1 6f 20 6b 68 6f e1 ba a3 6e 67 20 63 c3 a1 63 68 20 67 69 e1 bb af 61 20 c4 91 c6 b0 e1 bb 9d 6e 67 20 63 68 69 61 20 76 c3 a0 20 70 68 e1 ba a7 6e 20 6d 6f 64 61 6c 20 74 69 e1 ba bf 70 20 74 68 65 6f 20 2a 2f 0a 7d 0a 2e 61 70 70 65 61 6c 2d 74 65 78 74 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 30 70 78 3b 20 2f 2a 20 54 c4 83 6e 67 20 6b 68 6f e1 ba a3 6e 67 20 63 c3 a1 63 68 20 74 e1 bb ab 20 6c e1 bb 81 20 74 72 c3 a1 69 20 2a 2f 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a Data Ascii: hm khong cch pha di ng chia / margin-bottom: 20px; / To khong cch gia ng chia v phn modal tip theo /}.appeal-text { margin-left: 20px; / Tng khong cch t l tri */ padding-left:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49739	216.198.79.193	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:29:15 UTC	634	OUT	GET /styles/jquery.min.js.download HTTP/1.1 Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:29:16 UTC	571	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 244097 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline; filename="jquery.min.js.download" Content-Length: 87533 Content-Type: application/octet-stream Date: Thu, 13 Mar 2025 09:29:16 GMT Etag: "2c872dbe60f4ba70fb85356113d8b35e" Last-Modified: Mon, 10 Mar 2025 13:40:59 GMT Server: Vercel Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Vercel-Cache: HIT X-Vercel-Id: iad1::r2rxs-1741858156222-e43e2e5a22a1 Connection: close
2025-03-13 09:29:16 UTC	2372	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-03-13 09:29:16 UTC	984	IN	Data Raw: 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 28 6c 3d 61 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 73 5d 7c 7c 7b 7d 2c 73 2b 2b 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 76 28 61 29 7c 7c 28 61 3d 7b 7d 29 2c 73 3d 3d 3d 75 26 26 28 61 3d 74 68 69 73 2c 73 2d 2d 29 3b 73 3c 75 3b 73 2b 2b 29 69 66 28 6e 75 6c 6c 21 3d 28 65 3d 61 72 67 75 6d 65 6e 74 73 5b 73 5d 29 29 66 6f 72 28 74 20 69 6e 20 65 29 72 3d 65 5b 74 5d 2c 22 5f 5f 70 72 6f 74 6f 5f 5f 22 21 3d 3d 74 26 26 61 21 3d 3d 72 26 26 28 6c 26 26 72 26 26 28 63 65 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 72 29 7c 7c 28 69 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 29 29 29 3f 28 6e 3d 61 5b 74 5d 2c 6f 3d 69 26 26 21 41 72 72 61 79 Data Ascii: 1;for("boolean"==typeof a&&(l=a,a=arguments[s]\|\|{},s++),"object"==typeof a\|\|v(a)\|\|(a={}),s===u&&(a=this,s--);s<u;s++)if(null!=(e=arguments[s]))for(t in e)r=e[t],"__proto__"!==t&&a!==r&&(l&&r&&(ce.isPlainObject(r)\|\|(i=Array.isArray(r)))?(n=a[t],o=i&&!Array
2025-03-13 09:29:16 UTC	4744	IN	Data Raw: 65 28 74 3d 65 5b 72 2b 2b 5d 29 6e 2b 3d 63 65 2e 74 65 78 74 28 74 29 3b 72 65 74 75 72 6e 20 31 3d 3d 3d 69 7c 7c 31 31 3d 3d 3d 69 3f 65 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3a 39 3d 3d 3d 69 3f 65 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3a 33 3d 3d 3d 69 7c 7c 34 3d 3d 3d 69 3f 65 2e 6e 6f 64 65 56 61 6c 75 65 3a 6e 7d 2c 6d 61 6b 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 28 63 28 4f 62 6a 65 63 74 28 65 29 29 3f 63 65 2e 6d 65 72 67 65 28 6e 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 5b 65 5d 3a 65 29 3a 73 2e 63 61 6c 6c 28 6e 2c 65 29 29 2c 6e 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 Data Ascii: e(t=e[r++])n+=ce.text(t);return 1===i\|\|11===i?e.textContent:9===i?e.documentElement.textContent:3===i\|\|4===i?e.nodeValue:n},makeArray:function(e,t){var n=t\|\|[];return null!=e&&(c(Object(e))?ce.merge(n,"string"==typeof e?[e]:e):s.call(n,e)),n},inArray:func
2025-03-13 09:29:16 UTC	5930	IN	Data Raw: 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 65 3f 65 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 21 31 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 3f 22 6c 61 62 65 6c 22 69 6e 20 65 3f 22 6c 61 62 65 6c 22 69 6e 20 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3f 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 74 3a 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 74 3a 65 2e 69 73 44 69 73 61 62 6c 65 64 3d 3d 3d 74 7c 7c 65 2e 69 73 44 69 73 61 62 6c 65 64 21 3d 3d 21 74 26 26 52 28 65 29 3d 3d 3d 74 3a 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 74 3a 22 6c 61 62 65 6c 22 69 6e 20 65 26 26 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 58 28 61 29 7b 72 65 74 75 72 6e 20 46 28 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 Data Ascii: on(e){return"form"in e?e.parentNode&&!1===e.disabled?"label"in e?"label"in e.parentNode?e.parentNode.disabled===t:e.disabled===t:e.isDisabled===t\|\|e.isDisabled!==!t&&R(e)===t:e.disabled===t:"label"in e&&e.disabled===t}}function X(a){return F(function(o){r
2025-03-13 09:29:16 UTC	7116	IN	Data Raw: 7d 69 66 28 73 3d 5b 79 3f 6c 2e 66 69 72 73 74 43 68 69 6c 64 3a 6c 2e 6c 61 73 74 43 68 69 6c 64 5d 2c 79 26 26 66 29 7b 70 3d 28 61 3d 28 72 3d 28 69 3d 6c 5b 53 5d 7c 7c 28 6c 5b 53 5d 3d 7b 7d 29 29 5b 64 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 45 26 26 72 5b 31 5d 29 26 26 72 5b 32 5d 2c 6f 3d 61 26 26 6c 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 61 5d 3b 77 68 69 6c 65 28 6f 3d 2b 2b 61 26 26 6f 26 26 6f 5b 75 5d 7c 7c 28 70 3d 61 3d 30 29 7c 7c 73 2e 70 6f 70 28 29 29 69 66 28 31 3d 3d 3d 6f 2e 6e 6f 64 65 54 79 70 65 26 26 2b 2b 70 26 26 6f 3d 3d 3d 65 29 7b 69 5b 64 5d 3d 5b 45 2c 61 2c 70 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 66 26 26 28 70 3d 61 3d 28 72 3d 28 69 3d 65 5b 53 5d 7c 7c 28 65 5b 53 5d 3d 7b 7d 29 29 5b 64 5d 7c 7c 5b 5d 29 5b Data Ascii: }if(s=[y?l.firstChild:l.lastChild],y&&f){p=(a=(r=(i=l[S]\|\|(l[S]={}))[d]\|\|[])[0]===E&&r[1])&&r[2],o=a&&l.childNodes[a];while(o=++a&&o&&o[u]\|\|(p=a=0)\|\|s.pop())if(1===o.nodeType&&++p&&o===e){i[d]=[E,a,p];break}}else if(f&&(p=a=(r=(i=e[S]\|\|(e[S]={}))[d]\|\|[])[
2025-03-13 09:29:16 UTC	8302	IN	Data Raw: 2c 69 3d 76 6f 69 64 20 30 21 3d 3d 6e 3b 77 68 69 6c 65 28 28 65 3d 65 5b 74 5d 29 26 26 39 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 69 66 28 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 7b 69 66 28 69 26 26 63 65 28 65 29 2e 69 73 28 6e 29 29 62 72 65 61 6b 3b 72 2e 70 75 73 68 28 65 29 7d 72 65 74 75 72 6e 20 72 7d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 5b 5d 3b 65 3b 65 3d 65 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 65 21 3d 3d 74 26 26 6e 2e 70 75 73 68 28 65 29 3b 72 65 74 75 72 6e 20 6e 7d 2c 62 3d 63 65 2e 65 78 70 72 2e 6d 61 74 63 68 2e 6e 65 65 64 73 43 6f 6e 74 65 78 74 2c 77 3d 2f 5e 3c 28 5b 61 2d 7a 5d 5b 5e 5c 2f 5c 30 3e 3a 5c 78 32 30 5c 74 5c 72 5c Data Ascii: ,i=void 0!==n;while((e=e[t])&&9!==e.nodeType)if(1===e.nodeType){if(i&&ce(e).is(n))break;r.push(e)}return r},h=function(e,t){for(var n=[];e;e=e.nextSibling)1===e.nodeType&&e!==t&&n.push(e);return n},b=ce.expr.match.needsContext,w=/^<([a-z][^\/\0>:\x20\t\r\
2025-03-13 09:29:16 UTC	6676	IN	Data Raw: 2c 61 29 7b 76 61 72 20 73 3d 30 2c 75 3d 65 2e 6c 65 6e 67 74 68 2c 6c 3d 6e 75 6c 6c 3d 3d 6e 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 78 28 6e 29 29 66 6f 72 28 73 20 69 6e 20 69 3d 21 30 2c 6e 29 4d 28 65 2c 74 2c 73 2c 6e 5b 73 5d 2c 21 30 2c 6f 2c 61 29 3b 65 6c 73 65 20 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 26 26 28 69 3d 21 30 2c 76 28 72 29 7c 7c 28 61 3d 21 30 29 2c 6c 26 26 28 61 3f 28 74 2e 63 61 6c 6c 28 65 2c 72 29 2c 74 3d 6e 75 6c 6c 29 3a 28 6c 3d 74 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6c 2e 63 61 6c 6c 28 63 65 28 65 29 2c 6e 29 7d 29 29 2c 74 29 29 66 6f 72 28 3b 73 3c 75 3b 73 2b 2b 29 74 28 65 5b 73 5d 2c 6e 2c 61 3f 72 3a 72 2e 63 61 6c 6c 28 65 5b 73 5d 2c 73 2c 74 28 65 5b 73 5d 2c 6e Data Ascii: ,a){var s=0,u=e.length,l=null==n;if("object"===x(n))for(s in i=!0,n)M(e,t,s,n[s],!0,o,a);else if(void 0!==r&&(i=!0,v(r)\|\|(a=!0),l&&(a?(t.call(e,r),t=null):(l=t,t=function(e,t,n){return l.call(ce(e),n)})),t))for(;s<u;s++)t(e[s],n,a?r:r.call(e[s],s,t(e[s],n
2025-03-13 09:29:16 UTC	10674	IN	Data Raw: 3d 74 2e 63 72 65 61 74 65 44 6f 63 75 6d 65 6e 74 46 72 61 67 6d 65 6e 74 28 29 2c 70 3d 5b 5d 2c 64 3d 30 2c 68 3d 65 2e 6c 65 6e 67 74 68 3b 64 3c 68 3b 64 2b 2b 29 69 66 28 28 6f 3d 65 5b 64 5d 29 7c 7c 30 3d 3d 3d 6f 29 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 78 28 6f 29 29 63 65 2e 6d 65 72 67 65 28 70 2c 6f 2e 6e 6f 64 65 54 79 70 65 3f 5b 6f 5d 3a 6f 29 3b 65 6c 73 65 20 69 66 28 6a 65 2e 74 65 73 74 28 6f 29 29 7b 61 3d 61 7c 7c 66 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 29 2c 73 3d 28 54 65 2e 65 78 65 63 28 6f 29 7c 7c 5b 22 22 2c 22 22 5d 29 5b 31 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 75 3d 6b 65 5b 73 5d 7c 7c 6b 65 2e 5f 64 65 66 61 75 6c 74 2c 61 2e 69 6e 6e 65 72 Data Ascii: =t.createDocumentFragment(),p=[],d=0,h=e.length;d<h;d++)if((o=e[d])\|\|0===o)if("object"===x(o))ce.merge(p,o.nodeType?[o]:o);else if(je.test(o)){a=a\|\|f.appendChild(t.createElement("div")),s=(Te.exec(o)\|\|["",""])[1].toLowerCase(),u=ke[s]\|\|ke._default,a.inner
2025-03-13 09:29:16 UTC	3733	IN	Data Raw: 72 3d 30 2c 69 3d 28 6f 3d 53 65 28 65 29 29 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 73 3d 6f 5b 72 5d 2c 75 3d 61 5b 72 5d 2c 76 6f 69 64 20 30 2c 22 69 6e 70 75 74 22 3d 3d 3d 28 6c 3d 75 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 26 26 77 65 2e 74 65 73 74 28 73 2e 74 79 70 65 29 3f 75 2e 63 68 65 63 6b 65 64 3d 73 2e 63 68 65 63 6b 65 64 3a 22 69 6e 70 75 74 22 21 3d 3d 6c 26 26 22 74 65 78 74 61 72 65 61 22 21 3d 3d 6c 7c 7c 28 75 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 73 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 3b 69 66 28 74 29 69 66 28 6e 29 66 6f 72 28 6f 3d 6f 7c 7c 53 65 28 65 29 2c 61 3d 61 7c 7c 53 65 28 63 29 2c 72 3d 30 2c 69 3d 6f 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 46 65 28 6f 5b 72 5d Data Ascii: r=0,i=(o=Se(e)).length;r<i;r++)s=o[r],u=a[r],void 0,"input"===(l=u.nodeName.toLowerCase())&&we.test(s.type)?u.checked=s.checked:"input"!==l&&"textarea"!==l\|\|(u.defaultValue=s.defaultValue);if(t)if(n)for(o=o\|\|Se(e),a=a\|\|Se(c),r=0,i=o.length;r<i;r++)Fe(o[r]
2025-03-13 09:29:16 UTC	13046	IN	Data Raw: 74 65 22 2c 69 3d 31 32 3d 3d 3d 74 28 6c 2e 6f 66 66 73 65 74 57 69 64 74 68 2f 33 29 2c 4a 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 75 29 2c 6c 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 6f 75 6e 64 28 70 61 72 73 65 46 6c 6f 61 74 28 65 29 29 7d 76 61 72 20 6e 2c 72 2c 69 2c 6f 2c 61 2c 73 2c 75 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 6c 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 6c 2e 73 74 79 6c 65 26 26 28 6c 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6c 69 70 3d 22 63 6f 6e 74 65 6e 74 2d 62 6f 78 22 2c 6c 2e 63 6c 6f 6e 65 4e 6f 64 65 28 21 30 29 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6c 69 70 3d 22 22 2c Data Ascii: te",i=12===t(l.offsetWidth/3),J.removeChild(u),l=null}}function t(e){return Math.round(parseFloat(e))}var n,r,i,o,a,s,u=C.createElement("div"),l=C.createElement("div");l.style&&(l.style.backgroundClip="content-box",l.cloneNode(!0).style.backgroundClip="",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49743	216.198.79.193	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:29:18 UTC	686	OUT	GET /img/fb_round_logo.png HTTP/1.1 Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:29:18 UTC	551	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 244099 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline; filename="fb_round_logo.png" Content-Length: 42676 Content-Type: image/png Date: Thu, 13 Mar 2025 09:29:18 GMT Etag: "81bb5cf1e451109cf0b1868b2152914b" Last-Modified: Mon, 10 Mar 2025 13:40:59 GMT Server: Vercel Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Vercel-Cache: HIT X-Vercel-Id: iad1::wddrx-1741858158695-b96000dd0c63 Connection: close
2025-03-13 09:29:18 UTC	2372	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 b0 00 00 04 b0 08 06 00 00 00 eb 21 b3 cf 00 00 01 85 69 43 43 50 49 43 43 20 70 72 6f 66 69 6c 65 00 00 28 91 7d 91 3d 48 c3 50 14 85 4f 53 b5 22 15 07 3b 88 08 66 a8 4e 16 44 45 04 17 ad 42 11 2a 84 5a a1 55 07 93 97 fe 08 4d 1a 92 14 17 47 c1 b5 e0 e0 cf 62 d5 c1 c5 59 57 07 57 41 10 fc 01 71 75 71 52 74 91 12 ef 4b 0a 2d 62 7c 70 79 1f e7 bd 73 b8 ef 3e 40 a8 95 98 66 b5 8d 02 9a 6e 9b a9 44 5c cc 64 57 c4 d0 2b c2 e8 a0 9a c6 a0 cc 2c 63 56 92 92 f0 5d 5f f7 08 f0 fd 2e c6 b3 fc ef fd b9 ba d5 9c c5 80 80 48 3c c3 0c d3 26 5e 27 9e dc b4 0d ce fb c4 11 56 94 55 e2 73 e2 11 93 1a 24 7e e4 ba e2 f1 1b e7 82 cb 02 cf 8c 98 e9 d4 1c 71 84 58 2c b4 b0 d2 c2 ac 68 6a c4 13 c4 51 55 d3 29 5f c8 78 ac Data Ascii: PNGIHDR!iCCPICC profile(}=HPOS";fNDEB*ZUMGbYWWAquqRtK-b\|pys>@fnD\dW+,cV]_.H<&^'VUs$~qX,hjQU)_x
2025-03-13 09:29:18 UTC	1004	IN	Data Raw: ae 1e 4c b9 cf 4a 92 d4 bd c6 81 9f 02 df 05 fe 89 72 19 fc 4d 79 23 99 34 1a 49 d2 5c b0 c0 92 24 cd aa 34 2b aa 94 93 56 27 02 a7 03 8f 02 0e a1 dc 67 e5 12 76 49 ea 3d e3 c0 6f 80 6f b0 e3 a8 e1 2d 96 59 92 a4 d9 64 81 25 49 9a 71 69 56 c4 c0 7e 94 fb ac 4e a3 2c ae 0e 06 16 99 8e 24 f5 95 6d c0 6f 29 cb ac 7f 02 fe 15 f8 5d de 48 5a 46 23 49 9a 49 16 58 92 a4 19 93 66 c5 4a e0 04 ca 25 ec a7 01 eb b1 b4 92 a4 41 b1 1d b8 81 72 67 d6 97 81 ef 03 bf 75 67 96 24 69 26 58 60 49 92 f6 5a 67 11 fb 32 e0 58 e0 4c ca e3 81 47 02 89 e9 48 d2 40 9b 00 7e 09 7c 1d f8 12 e5 02 f8 9b bc 9b a1 24 69 6f 59 60 49 92 f6 48 a7 b4 4a 28 ef 1e f8 58 ca d2 ea 21 38 69 25 49 da b5 e9 05 f0 ff 08 7c 85 b2 cc ba d3 c9 2c 49 d2 9e b0 c0 92 24 ed 96 34 2b 46 28 8f 04 3e b6 f3 Data Ascii: LJrMy#4I\$4+V'gvI=oo-Yd%IqiV~N,$mo)]HZF#IIXfJ%Argug$i&X`IZg2XLGH@~\|$ioY`IHJ(X!8i%I\|,I$4+F(>
2025-03-13 09:29:18 UTC	4744	IN	Data Raw: 6f 24 77 1a 89 24 cd 3d df 28 49 d2 1c 4b b3 62 09 f0 18 e0 22 e0 34 dc 6f 25 49 52 2f 18 03 be 43 59 64 7d 09 b8 c5 3d 59 92 34 77 2c b0 24 69 8e a4 59 91 52 de 49 f0 42 e0 14 60 d4 54 24 49 ea 39 e3 c0 4f 28 8b ac bf 05 6e c8 1b 49 db 58 24 69 76 59 60 49 d2 2c 4a b3 22 02 0e 00 9e 02 3c 0d 38 06 a8 9b 8c 24 49 3d af 05 5c 0f 7c b6 f3 f8 b9 0b df 25 69 f6 58 60 49 d2 2c 48 b3 a2 02 6c a0 bc 9b e0 05 94 4b da 5d cc 2e 49 52 ff 09 c0 8d 94 d3 58 7f 01 fc 24 6f 24 13 c6 22 49 33 cb 02 4b 92 66 50 9a 15 35 e0 68 ca 89 ab a7 00 eb b1 b8 92 24 69 10 04 e0 77 94 fb b1 3e 09 5c 97 37 92 71 63 91 a4 99 61 81 25 49 33 20 cd 8a 2a f0 60 e0 99 94 c5 d5 fe 40 6c 32 92 24 0d 9c 00 dc 0a 7c 01 f8 0c f0 ad bc 91 6c 33 16 49 da 37 16 58 92 b4 0f d2 ac a8 03 27 51 ee b7 Data Ascii: o$w$=(IKb"4o%IR/CYd}=Y4w,$iYRIB`T$I9O(nIX$ivY`I,J"<8$I=\\|%iX`I,HlK].IRX$o$"I3KfP5h$iw>\7qca%I3 *`@l2$\|l3I7X'Q
2025-03-13 09:29:18 UTC	5930	IN	Data Raw: 77 a7 59 71 aa 51 68 2e 58 60 69 d6 a5 59 b1 16 78 3b f0 18 d3 90 24 49 92 a4 be 71 38 f0 9e 34 2b 8e 31 0a cd 36 0b 2c cd aa 34 2b 96 02 6f 04 9e 64 1a 92 24 49 92 d4 77 36 02 ef 4c b3 e2 60 a3 d0 6c b2 c0 d2 ac 49 b3 62 01 f0 1a e0 59 7e ae 49 92 24 49 52 5f 8a 80 c7 02 6f 4b b3 22 35 0e cd 16 4b 05 cd 8a 34 2b aa c0 15 c0 65 40 cd 44 24 49 92 24 a9 af 3d 05 78 6d 9a 15 8b 8d 42 b3 c1 02 4b 33 2e cd 8a 18 78 3a 90 01 0b 4d 44 92 24 49 92 fa 5e 0c 5c 0a 5c 95 66 45 dd 38 34 1b 9f 60 d2 8c 49 b3 22 02 ce 02 de 0c 2c 33 11 49 92 24 49 1a 18 43 c0 35 c0 a5 69 56 54 8c 43 33 c9 02 4b 33 ed 14 e0 5a 60 9d 51 48 92 24 49 d2 c0 49 80 d7 02 4f ed 0c 38 48 33 c2 02 4b 33 26 cd 8a 23 81 77 01 47 98 86 24 49 92 24 0d ac 55 c0 5b 81 47 1a 85 66 8a 05 96 66 44 9a 15 Data Ascii: wYqQh.X`iYx;$Iq84+16,4+od$Iw6L`lIbY~I$IR_oK"5K4+e@D$I$=xmBK3.x:MD$I^\\fE84`I",3I$IC5iVTC3K3Z`QH$IIO8H3K3&#wG$I$U[GffD
2025-03-13 09:29:18 UTC	7116	IN	Data Raw: 73 3e 9b e4 33 ca 00 00 1b e3 8b 4f cf d4 7f f6 e3 b3 9d b9 19 e1 15 00 b0 a9 bc 2f c9 1f ef f6 fa ae 61 d6 49 80 b5 4e dd 5e bf 9b e4 4f 27 d9 a3 1a 00 30 5e 75 49 3e fa 60 bb ee 3d 3f 5b ed df 59 b9 7e 01 00 36 9b 4e 92 9f 4d f2 b4 52 ac 8f 0b c0 f5 fb c9 24 1f 54 06 00 18 af ba 24 8f 77 5b 83 ff f8 fb 77 0c ee 3c d0 72 ed 02 00 6c 56 0f 26 f9 f9 6e af bf 43 29 d6 ce 45 e0 3a 74 7b fd 87 93 fc 7c 92 19 d5 00 80 f1 a9 4b 72 c7 fe aa fe 8f 3e bb a3 7e e2 8e b6 bf 77 01 80 cd ee 47 a3 19 66 5d 04 58 6b b4 bc 5e f5 67 93 3c a1 1a 00 30 3e a5 24 bb 67 53 fe 9d ef 9b 1d 7e fc 91 ce 4c 62 c7 41 00 60 d3 3b 92 d1 40 77 e3 88 d6 48 80 b5 76 ef 4d f2 c7 95 01 00 c6 7c 91 d2 4a f9 99 ef 99 5d fc a9 67 67 5b ad 4a 78 05 00 6c 19 9f 89 0d e1 d6 7e 6d a8 04 ab d7 ed Data Ascii: s>3O/aIN^O'0^uI>`=?[Y~6NMR$T$w[w<rlV&nC)E:t{\|Kr>~wGf]Xk^g<0>$gS~LbA`;@wHvM\|J]gg[Jxl~m
2025-03-13 09:29:18 UTC	8302	IN	Data Raw: 85 d2 b2 84 10 00 a6 c2 e3 49 8e 34 f1 40 4d 05 58 47 92 3c e6 b8 00 00 30 41 f5 cb 27 cb 70 61 29 e2 2b 00 98 0e 47 92 3c d2 c4 03 35 15 60 99 7f 05 00 c0 44 2d 0c 32 7c e3 6c bd a8 fb 0a 00 a6 c6 ce 24 ef 6b e2 81 9a 0a b0 9e 4e 32 e7 b8 00 c0 74 69 b7 bc 93 67 fb 38 7b a9 74 5e 39 55 cf 09 b0 00 60 6a 54 49 9e e8 f6 fa 33 37 fb 40 37 1d 60 75 7b fd 9d 49 de e5 98 00 c0 f4 99 b1 17 1b db c8 d9 4b a5 7e fd 74 69 0b b0 00 60 aa 3c 92 e4 f6 9b 7d 90 26 3a b0 6e 4f f2 a0 e3 01 00 d3 67 7e a9 28 02 db c6 c9 0b e5 e2 a5 a5 d4 f2 2b 00 98 2a f7 27 b9 f3 66 1f a4 89 00 eb 8e 24 f7 39 1e 00 00 4c d2 b7 4f d7 d5 a0 16 da 02 c0 94 d9 93 06 56 ee 35 11 60 3d 9d 64 97 e3 01 00 c0 24 bd 72 aa de 3d 18 36 36 e3 15 00 68 46 2b c9 7b 9b 78 90 75 eb f6 fa d5 f2 8b d0 a9 Data Ascii: I4@MXG<0A'pa)+G<5`D-2\|l$kN2tig8{t^9U`jTI37@7`u{IK~ti`<}&:nOg~(+*'f$9LOV5`=d$r=66hF+{xu
2025-03-13 09:29:19 UTC	6676	IN	Data Raw: a5 f4 91 69 1c ee da cf 0b 38 b0 04 21 7c ac fa aa 67 01 00 00 00 60 e9 dc d1 6c f1 d1 be 5a 86 02 eb b6 f6 f1 18 46 00 00 00 00 1e d2 e7 e6 7f f6 d5 be 17 58 d3 38 1c af 3e 94 d3 08 01 00 00 00 96 cd f9 d3 38 dc bb df 17 71 60 49 c2 f8 64 f5 65 cf 04 00 00 00 c0 d2 b8 a3 ba 78 19 2e 64 59 0a ac 9b ab 8f 7b 2e 00 00 00 00 96 c6 e7 9a 9d 40 b8 ef 96 a2 c0 9a c6 e1 54 75 5e 75 dc b3 01 00 00 00 b0 14 3e 30 8d c3 fd cb 70 21 07 96 28 94 4f 57 d7 79 36 00 00 00 00 f6 dd 1d d5 05 cb 72 31 4b 53 60 4d e3 70 43 75 a1 e7 03 00 00 00 60 df 7d a6 ba 72 59 2e e6 c0 92 85 73 5e 4e 23 04 00 00 00 d8 4f db cd 4e 1f 3c bc 2c 17 b4 6c 05 d6 e5 cd 06 84 01 00 00 00 b0 3f 96 6a fb 60 2d 59 81 35 8d c3 cd d5 87 3c 27 00 00 00 00 fb e6 e3 2d d9 9c f2 03 4b 18 d2 07 ab 2d cf Data Ascii: i8!\|g`lZFX8>8q`Idex.dY{.@Tu^u>0p!(OWy6r1KS`MpCu`}rY.s^N#ON<,l?j`-Y5<'-K-
2025-03-13 09:29:19 UTC	6532	IN	Data Raw: 56 62 bd bf d9 40 46 00 00 80 aa cf 54 8f ab de 30 ff 02 1c 38 43 0a 2c 58 80 69 1c ae ae 1e 5f bd 26 27 14 02 00 c0 a6 db ae 3e 50 3d 76 1a 87 8f 4c e3 b0 2d 12 38 3b 0a 2c 58 90 69 1c 6e ae 9e 5c fd 71 b3 01 8d 00 00 c0 e6 39 51 bd be 7a fc 34 0e 57 8a 03 16 43 81 05 0b 34 8d c3 5d d5 33 ab 5f cb 09 85 00 00 b0 69 0e 37 fb 42 fb 49 d3 38 dc 28 0e 58 1c 05 16 2c d8 34 0e 0f 56 2f ae 9e 50 5d 23 11 00 00 d8 8c ff 0a 54 bf 5e 3d 63 1a 87 3b c4 01 8b a5 c0 82 dd f8 cd 35 0e a7 a6 71 78 4b f5 13 d5 45 39 a1 10 00 00 d6 d9 b5 d5 cf 56 2f 9c 7f a1 0d 2c 98 02 0b 76 d1 34 0e 97 35 3b 75 e4 dc 66 7b e1 01 00 80 f5 b1 d3 ec 0b eb 9f 9c c6 e1 ed d3 38 38 95 1c 76 89 02 0b 76 d9 34 0e d7 57 bf 50 fd 59 86 bb 03 00 c0 ba 38 d1 ec 8b ea c7 4d e3 70 89 38 60 77 29 b0 Data Ascii: Vb@FT08C,Xi_&'>P=vL-8;,Xin\q9Qz4WC4]3_i7BI8(X,4V/P]#T^=c;5qxKE9V/,v45;uf{88vv4WPY8Mp8`w)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49744	216.198.79.193	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:29:18 UTC	685	OUT	GET /case/img/block_2.png HTTP/1.1 Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:29:19 UTC	363	IN	HTTP/1.1 404 Not Found Cache-Control: public, max-age=0, must-revalidate Content-Length: 79 Content-Type: text/plain; charset=utf-8 Date: Thu, 13 Mar 2025 09:29:18 GMT Server: Vercel Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Vercel-Error: NOT_FOUND X-Vercel-Id: iad1::zm4pd-1741858158714-599a8bc897d5 Connection: close
2025-03-13 09:29:19 UTC	79	IN	Data Raw: 54 68 65 20 70 61 67 65 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 66 6f 75 6e 64 0a 0a 4e 4f 54 5f 46 4f 55 4e 44 0a 0a 69 61 64 31 3a 3a 7a 6d 34 70 64 2d 31 37 34 31 38 35 38 31 35 38 37 31 34 2d 35 39 39 61 38 62 63 38 39 37 64 35 0a Data Ascii: The page could not be foundNOT_FOUNDiad1::zm4pd-1741858158714-599a8bc897d5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49745	216.198.79.193	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:29:18 UTC	692	OUT	GET /case/img/meta-logo-grey.png HTTP/1.1 Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:29:19 UTC	363	IN	HTTP/1.1 404 Not Found Cache-Control: public, max-age=0, must-revalidate Content-Length: 79 Content-Type: text/plain; charset=utf-8 Date: Thu, 13 Mar 2025 09:29:18 GMT Server: Vercel Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Vercel-Error: NOT_FOUND X-Vercel-Id: iad1::jtnlc-1741858158984-45f40384bae9 Connection: close
2025-03-13 09:29:19 UTC	79	IN	Data Raw: 54 68 65 20 70 61 67 65 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 66 6f 75 6e 64 0a 0a 4e 4f 54 5f 46 4f 55 4e 44 0a 0a 69 61 64 31 3a 3a 6a 74 6e 6c 63 2d 31 37 34 31 38 35 38 31 35 38 39 38 34 2d 34 35 66 34 30 33 38 34 62 61 65 39 0a Data Ascii: The page could not be foundNOT_FOUNDiad1::jtnlc-1741858158984-45f40384bae9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49747	216.198.79.193	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:29:18 UTC	681	OUT	GET /img/save_img.png HTTP/1.1 Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:29:19 UTC	545	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 113751 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline; filename="save_img.png" Content-Length: 7550 Content-Type: image/png Date: Thu, 13 Mar 2025 09:29:19 GMT Etag: "8d3bcd1278891fc1e52d38e72549b3d0" Last-Modified: Wed, 12 Mar 2025 01:53:27 GMT Server: Vercel Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Vercel-Cache: HIT X-Vercel-Id: iad1::cbmdh-1741858159022-9f2ee441a465 Connection: close
2025-03-13 09:29:19 UTC	2372	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 03 00 00 00 0e ba c6 e0 00 00 02 fa 50 4c 54 45 c3 e2 c9 b5 dc bb b0 da b8 a9 d6 b2 a6 d4 ae a2 d2 aa 9d d0 a6 9a cf a4 98 ce a3 c3 e1 c9 99 cf a2 ef bc 57 fc f2 df fc f4 e3 fc f2 e1 fb ec d0 ac 4d 00 fc f1 dc ff f5 df ff f9 e4 fa e6 bf ff ff ef ff ff f7 ff fd ea f8 e2 b7 eb dc c6 c3 af 9a 96 7c 6b 7e 60 50 a8 8f 7b ce c0 aa fd f1 dd e1 d3 be 8c 6d 57 4e 27 15 37 0f 03 3e 16 07 55 2e 18 5f 39 26 fc f1 da 48 20 10 2d 07 00 43 1b 0a 6c 49 34 ff f4 da 24 01 00 4a 23 12 f8 c9 54 d9 ca b3 45 1f 0f af 99 87 f7 ed da a0 75 4b ea b9 47 7f 56 35 f2 c1 7f eb bb 7b ac 87 54 91 67 42 de ae 73 e3 b4 77 de af 73 de b0 75 d9 ab 71 de ad 6e be e0 c4 e2 ac 68 b2 f0 d9 bb de c1 b8 dd bf b2 60 16 b6 Data Ascii: PNGIHDRxxPLTEWM\|k~`P{mWN'7>U._9&H -ClI4$J#TEuKGV5{TgBswsuqnh`
2025-03-13 09:29:19 UTC	1010	IN	Data Raw: 61 35 af c4 58 76 bb 60 63 ae 69 77 38 5b 14 d5 e3 86 dc 76 70 f9 8a 8b aa fa 1e 77 39 60 88 29 89 42 dd bd 59 80 97 12 28 ae 95 77 96 e7 51 d5 d5 2a 4e 5a 33 da 48 d7 64 6c 82 05 6e 2d 36 ea 5e 37 ec b5 88 e4 37 d3 bd 6a b3 e4 94 44 b3 a4 09 a5 c2 6d 70 01 36 c8 ea 6a 8a 8b fb 98 07 08 8c e6 46 da 29 80 4b 61 93 1b 3b 15 b7 9b 59 54 57 de 00 ca 8b bf a8 81 96 27 5d d4 69 76 54 d8 8d bf e3 0c 61 c4 61 35 2b fe 63 95 56 57 d6 a2 91 ad 11 f2 95 b1 e1 92 3d 7e 8f c5 65 b9 01 9f bb 93 52 0d ba e2 db 27 a3 b8 34 bb a0 d9 ea 2e e1 f4 41 6b 31 15 bf 3c 7f eb bd 2a f6 31 81 3f c1 e4 a2 73 4f 76 a9 3e 2f 58 5c 87 dc e2 55 dd 81 0a 17 fe 76 dd f4 7a e1 3a 19 ae 7a 0e ba 1c 1a cf 30 31 53 93 4d 51 8a 8d 64 72 11 8a ab ab ea 65 02 53 33 a5 0f b1 60 1a 10 b2 cd a7 83 Data Ascii: a5Xv`ciw8[vpw9`)BY(wQNZ3Hdln-6^77jDmp6jF)Ka;YTW']ivTaa5+cVW=~eR'4.Ak1<1?sOv>/X\Uvz:z01SMQdreS3`
2025-03-13 09:29:19 UTC	4168	IN	Data Raw: 01 24 b1 a0 ef 0a fe ec 59 80 f9 5c 0d c5 19 1b 81 c5 52 09 8a 9f f4 b5 eb 87 b7 c3 15 8f ad 56 c6 15 97 ed c3 7e d5 27 b9 44 bb 5d b4 c0 4b 31 58 0d c5 00 1f 1b 67 91 24 77 8c e1 88 87 82 cf bf 05 30 f5 31 fe e6 f4 9a 90 b7 36 0e ae 2e 5b b3 d2 a9 76 05 c3 0f 9a 3d 10 0c b6 e9 4a 73 de 25 a1 08 19 bc 15 27 bf 78 64 de 3a 36 4e 79 1d 43 44 21 96 ef 76 01 7f e7 ee 33 1f 2e 5f 4b 19 88 dc a6 00 c5 08 2e d6 62 8b ee 56 d4 10 c8 21 0a 96 4b 37 c1 01 b7 ea 51 9a 9c 0e 3a 74 21 c4 cc a1 1c b8 64 f5 22 81 c7 2c f0 c4 04 24 13 7a f8 61 c5 85 60 30 3d a6 d2 c8 2c 65 a0 b7 c2 76 36 78 d5 76 e5 6e 0f ad 07 86 5a 4e 87 7b 7a 75 8f c7 df 58 34 b5 52 89 bb c9 be 9e 4d 2c d0 5a 9c 5f bc 35 77 ec 38 98 78 45 27 26 a3 48 32 72 3c 3c bc ab 62 14 97 75 f4 49 63 49 48 90 cb Data Ascii: $Y\RV~'D]K1Xg$w016.[v=Js%'xd:6NyCD!v3._K.bV!K7Q:t!d",$za`0=,ev6xvnZN{zuX4RM,Z_5w8xE'&H2r<<buIcIH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49746	216.198.79.193	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:29:18 UTC	614	OUT	GET /styles/js HTTP/1.1 Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:29:19 UTC	552	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 244099 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline; filename="js" Content-Length: 335473 Content-Type: application/octet-stream Date: Thu, 13 Mar 2025 09:29:19 GMT Etag: "f320631f4c3234d1bb62e1431fe9a66a" Last-Modified: Mon, 10 Mar 2025 13:40:59 GMT Server: Vercel Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Vercel-Cache: HIT X-Vercel-Id: iad1::s6qqk-1741858159027-7180ce4959f2 Connection: close
2025-03-13 09:29:19 UTC	2372	IN	Data Raw: 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 47 6f 6f 67 6c 65 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 0a 76 61 72 20 64 61 74 61 20 3d 20 7b 0a 22 72 65 73 6f 75 72 63 65 22 3a 20 7b 0a 20 20 22 76 65 72 73 69 6f 6e 22 3a 22 31 22 2c 0a 20 20 0a 20 20 22 6d 61 63 72 6f 73 22 3a 5b 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 65 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 63 22 2c 22 76 74 70 5f 76 61 6c 75 65 22 3a 22 67 6f 6f 67 6c 65 2e 63 6f 6d 2e 73 67 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 63 22 2c 22 76 74 70 5f 76 61 6c 75 65 22 3a 30 7d 5d 2c 0a 20 20 22 74 61 67 73 22 3a 5b 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 6f 67 Data Ascii: // Copyright 2012 Google Inc. All rights reserved. (function(){var data = {"resource": { "version":"1", "macros":[{"function":"__e"},{"function":"__c","vtp_value":"google.com.sg"},{"function":"__c","vtp_value":0}], "tags":[{"function":"__og
2025-03-13 09:29:19 UTC	1003	IN	Data Raw: 6b 69 6e 67 22 2c 22 70 72 69 6f 72 69 74 79 22 3a 32 2c 22 76 74 70 5f 63 6f 6e 76 65 72 73 69 6f 6e 52 75 6c 65 73 22 3a 5b 22 6c 69 73 74 22 2c 5b 22 6d 61 70 22 2c 22 6d 61 74 63 68 69 6e 67 52 75 6c 65 73 22 2c 22 7b 5c 22 74 79 70 65 5c 22 3a 35 2c 5c 22 61 72 67 73 5c 22 3a 5b 7b 5c 22 73 74 72 69 6e 67 56 61 6c 75 65 5c 22 3a 5c 22 70 75 72 63 68 61 73 65 5c 22 7d 2c 7b 5c 22 63 6f 6e 74 65 78 74 56 61 6c 75 65 5c 22 3a 7b 5c 22 6e 61 6d 65 73 70 61 63 65 54 79 70 65 5c 22 3a 31 2c 5c 22 6b 65 79 50 61 72 74 73 5c 22 3a 5b 5c 22 65 76 65 6e 74 4e 61 6d 65 5c 22 5d 7d 7d 5d 7d 22 5d 5d 2c 22 76 74 70 5f 69 6e 73 74 61 6e 63 65 44 65 73 74 69 6e 61 74 69 6f 6e 49 64 22 3a 22 47 2d 4d 52 35 32 54 37 39 56 45 48 22 2c 22 74 61 67 5f 69 64 22 3a 38 7d Data Ascii: king","priority":2,"vtp_conversionRules":["list",["map","matchingRules","{\"type\":5,\"args\":[{\"stringValue\":\"purchase\"},{\"contextValue\":{\"namespaceType\":1,\"keyParts\":[\"eventName\"]}}]}"]],"vtp_instanceDestinationId":"G-MR52T79VEH","tag_id":8}
2025-03-13 09:29:19 UTC	4744	IN	Data Raw: 35 32 2c 22 62 6d 22 2c 5b 37 5d 5d 2c 5b 36 35 2c 22 62 6e 22 2c 5b 32 2c 5b 31 35 2c 22 62 6c 22 5d 2c 22 73 70 6c 69 74 22 2c 5b 37 2c 22 22 5d 5d 2c 5b 34 36 2c 5b 35 33 2c 5b 35 32 2c 22 62 6f 22 2c 5b 37 2c 5b 22 76 22 2c 5b 31 35 2c 22 62 6e 22 5d 5d 5d 5d 2c 5b 35 32 2c 22 62 70 22 2c 5b 22 64 22 2c 5b 31 35 2c 22 62 6e 22 5d 5d 5d 2c 5b 32 32 2c 5b 31 32 2c 5b 31 35 2c 22 62 70 22 5d 2c 5b 34 35 5d 5d 2c 5b 34 36 2c 5b 33 36 2c 5b 22 64 22 2c 5b 22 76 22 2c 5b 31 35 2c 22 62 6b 22 5d 5d 5d 5d 5d 5d 2c 5b 32 32 2c 5b 32 31 2c 5b 31 35 2c 22 62 70 22 5d 2c 5b 31 35 2c 22 62 6e 22 5d 5d 2c 5b 34 36 2c 5b 32 2c 5b 31 35 2c 22 62 6f 22 5d 2c 22 70 75 73 68 22 2c 5b 37 2c 5b 31 35 2c 22 62 70 22 5d 5d 5d 2c 5b 32 32 2c 5b 32 31 2c 5b 31 35 2c 22 62 6e Data Ascii: 52,"bm",[7]],[65,"bn",[2,[15,"bl"],"split",[7,""]],[46,[53,[52,"bo",[7,["v",[15,"bn"]]]],[52,"bp",["d",[15,"bn"]]],[22,[12,[15,"bp"],[45]],[46,[36,["d",["v",[15,"bk"]]]]]],[22,[21,[15,"bp"],[15,"bn"]],[46,[2,[15,"bo"],"push",[7,[15,"bp"]]],[22,[21,[15,"bn
2025-03-13 09:29:19 UTC	5930	IN	Data Raw: 2c 22 67 22 5d 5d 2c 5b 35 32 2c 22 79 22 2c 22 68 74 74 70 3a 2f 2f 2e 22 5d 2c 5b 35 32 2c 22 62 65 22 2c 31 35 5d 2c 5b 35 32 2c 22 62 66 22 2c 31 36 5d 2c 5b 35 32 2c 22 62 67 22 2c 32 33 5d 2c 5b 35 32 2c 22 62 68 22 2c 32 34 5d 2c 5b 35 32 2c 22 62 69 22 2c 22 65 76 65 6e 74 5f 75 73 61 67 65 22 5d 2c 5b 22 68 22 2c 5b 31 35 2c 22 69 22 5d 2c 5b 35 31 2c 22 22 2c 5b 37 2c 22 62 6b 22 5d 2c 5b 32 32 2c 5b 31 35 2c 22 6a 22 5d 2c 5b 34 36 2c 5b 35 33 2c 5b 35 32 2c 22 62 6c 22 2c 5b 32 2c 5b 31 35 2c 22 62 6b 22 5d 2c 22 67 65 74 48 69 74 4b 65 79 73 22 2c 5b 37 5d 5d 5d 2c 5b 36 35 2c 22 62 6d 22 2c 5b 31 35 2c 22 62 6c 22 5d 2c 5b 34 36 2c 5b 35 33 2c 5b 32 32 2c 5b 32 30 2c 5b 31 35 2c 22 62 6d 22 5d 2c 22 5f 73 73 74 5f 70 61 72 61 6d 65 74 65 72 Data Ascii: ,"g"]],[52,"y","http://."],[52,"be",15],[52,"bf",16],[52,"bg",23],[52,"bh",24],[52,"bi","event_usage"],["h",[15,"i"],[51,"",[7,"bk"],[22,[15,"j"],[46,[53,[52,"bl",[2,[15,"bk"],"getHitKeys",[7]]],[65,"bm",[15,"bl"],[46,[53,[22,[20,[15,"bm"],"_sst_parameter
2025-03-13 09:29:19 UTC	7116	IN	Data Raw: 31 2c 22 22 2c 5b 37 2c 22 62 66 22 5d 2c 5b 33 36 2c 5b 32 31 2c 5b 32 2c 5b 31 35 2c 22 62 66 22 5d 2c 22 69 6e 64 65 78 4f 66 22 2c 5b 37 2c 22 41 57 2d 22 5d 5d 2c 30 5d 5d 5d 5d 5d 5d 2c 5b 32 32 2c 5b 31 38 2c 5b 31 37 2c 5b 31 35 2c 22 62 65 22 5d 2c 22 6c 65 6e 67 74 68 22 5d 2c 30 5d 2c 5b 34 36 2c 5b 32 32 2c 5b 31 36 2c 5b 31 35 2c 22 62 22 5d 2c 22 65 6e 61 62 6c 65 44 65 66 65 72 41 6c 6c 45 6e 68 61 6e 63 65 64 4d 65 61 73 75 72 65 6d 65 6e 74 22 5d 2c 5b 34 36 2c 5b 34 33 2c 5b 31 35 2c 22 62 63 22 5d 2c 22 64 65 66 65 72 72 61 62 6c 65 22 2c 74 72 75 65 5d 5d 5d 2c 5b 22 73 22 2c 5b 31 35 2c 22 62 65 22 5d 2c 5b 31 35 2c 22 62 61 22 5d 2c 5b 31 35 2c 22 62 62 22 5d 2c 5b 31 35 2c 22 62 63 22 5d 5d 5d 5d 5d 2c 5b 35 32 2c 22 62 22 2c 5b 31 Data Ascii: 1,"",[7,"bf"],[36,[21,[2,[15,"bf"],"indexOf",[7,"AW-"]],0]]]]]],[22,[18,[17,[15,"be"],"length"],0],[46,[22,[16,[15,"b"],"enableDeferAllEnhancedMeasurement"],[46,[43,[15,"bc"],"deferrable",true]]],["s",[15,"be"],[15,"ba"],[15,"bb"],[15,"bc"]]]]],[52,"b",[1
2025-03-13 09:29:19 UTC	8302	IN	Data Raw: 5d 5d 2c 5b 32 32 2c 5b 22 63 22 2c 5b 31 35 2c 22 6c 22 5d 2c 5b 31 35 2c 22 68 22 5d 5d 2c 5b 34 36 2c 5b 32 2c 5b 31 35 2c 22 61 22 5d 2c 22 67 74 6d 4f 6e 53 75 63 63 65 73 73 22 2c 5b 37 5d 5d 2c 5b 33 36 5d 5d 5d 2c 5b 32 2c 5b 31 35 2c 22 66 22 5d 2c 22 72 65 67 69 73 74 65 72 50 61 67 65 56 69 65 77 41 63 74 69 76 69 74 79 43 61 6c 6c 62 61 63 6b 22 2c 5b 37 2c 5b 31 35 2c 22 6c 22 5d 5d 5d 2c 5b 32 32 2c 5b 32 2c 5b 31 35 2c 22 65 22 5d 2c 22 67 65 74 49 74 65 6d 22 2c 5b 37 2c 5b 31 35 2c 22 6a 22 5d 5d 5d 2c 5b 34 36 2c 5b 32 2c 5b 31 35 2c 22 61 22 5d 2c 22 67 74 6d 4f 6e 53 75 63 63 65 73 73 22 2c 5b 37 5d 5d 2c 5b 33 36 5d 5d 5d 2c 5b 35 32 2c 22 6d 22 2c 5b 22 72 65 71 75 69 72 65 22 2c 22 69 6e 74 65 72 6e 61 6c 2e 61 64 64 44 61 74 61 4c Data Ascii: ]],[22,["c",[15,"l"],[15,"h"]],[46,[2,[15,"a"],"gtmOnSuccess",[7]],[36]]],[2,[15,"f"],"registerPageViewActivityCallback",[7,[15,"l"]]],[22,[2,[15,"e"],"getItem",[7,[15,"j"]]],[46,[2,[15,"a"],"gtmOnSuccess",[7]],[36]]],[52,"m",["require","internal.addDataL
2025-03-13 09:29:19 UTC	6676	IN	Data Raw: 22 76 22 2c 30 5d 2c 5b 36 33 2c 5b 37 2c 22 76 22 5d 2c 5b 32 33 2c 5b 31 35 2c 22 76 22 5d 2c 5b 31 37 2c 5b 31 37 2c 5b 31 35 2c 22 61 22 5d 2c 22 61 75 74 6f 43 6f 6c 6c 65 63 74 45 78 63 6c 75 73 69 6f 6e 53 65 6c 65 63 74 6f 72 73 22 5d 2c 22 6c 65 6e 67 74 68 22 5d 5d 2c 5b 33 33 2c 5b 31 35 2c 22 76 22 5d 2c 5b 33 2c 22 76 22 2c 5b 30 2c 5b 31 35 2c 22 76 22 5d 2c 31 5d 5d 5d 2c 5b 34 36 2c 5b 35 33 2c 5b 35 32 2c 22 77 22 2c 5b 31 37 2c 5b 31 36 2c 5b 31 37 2c 5b 31 35 2c 22 61 22 5d 2c 22 61 75 74 6f 43 6f 6c 6c 65 63 74 45 78 63 6c 75 73 69 6f 6e 53 65 6c 65 63 74 6f 72 73 22 5d 2c 5b 31 35 2c 22 76 22 5d 5d 2c 22 65 78 63 6c 75 73 69 6f 6e 53 65 6c 65 63 74 6f 72 22 5d 5d 2c 5b 32 32 2c 5b 31 35 2c 22 77 22 5d 2c 5b 34 36 2c 5b 32 2c 5b 31 35 Data Ascii: "v",0],[63,[7,"v"],[23,[15,"v"],[17,[17,[15,"a"],"autoCollectExclusionSelectors"],"length"]],[33,[15,"v"],[3,"v",[0,[15,"v"],1]]],[46,[53,[52,"w",[17,[16,[17,[15,"a"],"autoCollectExclusionSelectors"],[15,"v"]],"exclusionSelector"]],[22,[15,"w"],[46,[2,[15
2025-03-13 09:29:19 UTC	10674	IN	Data Raw: 71 75 69 72 65 22 2c 22 69 6e 74 65 72 6e 61 6c 2e 72 65 67 69 73 74 65 72 43 63 64 43 61 6c 6c 62 61 63 6b 22 5d 5d 2c 5b 35 32 2c 22 64 22 2c 22 73 70 65 63 75 6c 61 74 69 76 65 22 5d 2c 5b 35 32 2c 22 65 22 2c 22 61 65 5f 62 6c 6f 63 6b 5f 6f 75 74 62 6f 75 6e 64 5f 63 6c 69 63 6b 22 5d 2c 5b 35 32 2c 22 66 22 2c 22 63 6c 69 63 6b 22 5d 2c 5b 35 32 2c 22 67 22 2c 22 65 6d 5f 65 76 65 6e 74 22 5d 2c 5b 33 36 2c 5b 38 2c 22 72 65 67 69 73 74 65 72 4f 75 74 62 61 63 6b 43 6c 69 63 6b 41 63 74 69 76 69 74 79 43 61 6c 6c 62 61 63 6b 22 2c 5b 31 35 2c 22 68 22 5d 5d 5d 5d 2c 5b 33 36 2c 5b 22 61 22 5d 5d 5d 5d 2c 5b 22 24 30 22 5d 5d 5d 0a 20 2c 5b 35 32 2c 22 5f 5f 6d 6f 64 75 6c 65 5f 63 63 64 45 6d 50 61 67 65 56 69 65 77 41 63 74 69 76 69 74 79 22 2c 5b Data Ascii: quire","internal.registerCcdCallback"]],[52,"d","speculative"],[52,"e","ae_block_outbound_click"],[52,"f","click"],[52,"g","em_event"],[36,[8,"registerOutbackClickActivityCallback",[15,"h"]]]],[36,["a"]]]],["$0"]]] ,[52,"__module_ccdEmPageViewActivity",[
2025-03-13 09:29:19 UTC	11860	IN	Data Raw: 76 61 6c 75 65 3a 67 7d 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6a 7d 3b 76 61 72 20 63 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 64 3d 30 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 28 63 2b 28 66 7c 7c 22 22 29 2b 22 5f 22 2b 64 2b 2b 2c 66 29 7d 3b 72 65 74 75 72 6e 20 65 7d 29 3b 76 61 72 20 69 61 3d 74 79 70 Data Ascii: value:g})};b.prototype.toString=function(){return this.j};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=function(f){if(this instanceof e)throw new TypeError("Symbol is not a constructor");return new b(c+(f\|\|"")+"_"+d++,f)};return e});var ia=typ
2025-03-13 09:29:19 UTC	10234	IN	Data Raw: 62 63 3d 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 2c 45 3d 64 6f 63 75 6d 65 6e 74 2c 63 63 3d 6e 61 76 69 67 61 74 6f 72 3b 66 75 6e 63 74 69 6f 6e 20 64 63 28 29 7b 76 61 72 20 61 3b 74 72 79 7b 61 3d 63 63 2e 73 65 72 76 69 63 65 57 6f 72 6b 65 72 7d 63 61 74 63 68 28 62 29 7b 72 65 74 75 72 6e 7d 72 65 74 75 72 6e 20 61 7d 76 61 72 20 65 63 3d 45 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 2c 66 63 3d 65 63 26 26 65 63 2e 73 72 63 3b 66 75 6e 63 74 69 6f 6e 20 67 63 28 61 2c 62 29 7b 76 61 72 20 63 3d 41 5b 61 5d 3b 41 5b 61 5d 3d 63 3d 3d 3d 76 6f 69 64 20 30 3f 62 3a 63 3b 72 65 74 75 72 6e 20 41 5b 61 5d 7d 66 75 6e 63 74 69 6f 6e 20 68 63 28 61 29 7b 72 65 74 75 72 6e 28 63 63 2e 75 73 65 72 41 67 65 6e 74 7c 7c 22 22 29 2e 69 6e 64 65 78 4f 66 28 Data Ascii: bc=window.history,E=document,cc=navigator;function dc(){var a;try{a=cc.serviceWorker}catch(b){return}return a}var ec=E.currentScript,fc=ec&&ec.src;function gc(a,b){var c=A[a];A[a]=c===void 0?b:c;return A[a]}function hc(a){return(cc.userAgent\|\|"").indexOf(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49748	216.198.79.193	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:29:18 UTC	676	OUT	GET /img/doc.png HTTP/1.1 Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:29:19 UTC	540	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 244099 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline; filename="doc.png" Content-Length: 5723 Content-Type: image/png Date: Thu, 13 Mar 2025 09:29:19 GMT Etag: "95382a6dab40d5911185a921c53e6f6b" Last-Modified: Mon, 10 Mar 2025 13:40:59 GMT Server: Vercel Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Vercel-Cache: HIT X-Vercel-Id: iad1::6p6kb-1741858159051-b16ac9f54898 Connection: close
2025-03-13 09:29:19 UTC	2372	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 00 00 16 22 49 44 41 54 78 5e c5 9b 6b ac a5 57 79 df 7f cf 5a 6b ef 7d f6 99 73 9d 61 2e 1e cf d8 78 3c b6 42 cc a5 83 12 15 4c 88 1c 6a 0a 84 02 09 90 96 24 25 55 3f 44 91 7a 51 0b 91 10 97 24 6d 2a 12 a2 88 24 52 a9 d2 2a 10 68 55 11 28 a9 d3 a2 60 e3 d4 2d c1 34 24 84 5b a8 cd 4d b1 0d b6 c7 e3 f1 dc 2f e7 cc 39 67 bf ef bb d6 13 b1 9f 47 6b e9 c8 42 11 02 d4 25 ed 79 df f3 ee f7 dd 7b fd 9f eb ff 79 9e 3d 32 dc f7 f6 53 e4 7e 19 14 44 40 22 48 00 cd 10 46 88 08 5a 7a 44 22 00 84 04 65 80 b4 00 25 a3 b9 03 01 10 44 02 a8 a2 5a 90 38 46 f3 0c b4 80 2a c4 91 9d 4b b0 f7 fa 2d bb 2e c1 5e 28 e4 01 42 b4 fb 8a 9f 2b 10 42 fb ce 3c 80 66 7c b5 fb 11 3b cf bd Data Ascii: PNGIHDR<<:r"IDATx^kWyZk}sa.x<BLj$%U?DzQ$m$RhU(`-4$[M/9gGkB%y{y=2S~D@"HFZzD"e%DZ8F*K-.^(B+B<f\|;
2025-03-13 09:29:19 UTC	1015	IN	Data Raw: c9 81 c0 ac 9b f1 d8 a9 33 cc ba 8e 56 1e 55 da d8 58 94 d4 8a 69 0e a4 51 4d 2a 33 13 cb bd 35 f2 ef 5d 5b e1 86 c3 07 48 31 78 d0 c3 fd 3d 22 25 f8 00 20 54 90 95 5b 34 6c 76 44 08 f8 a0 49 dc 57 01 f3 0b b1 42 c1 7d a1 95 87 98 f4 83 28 0a f4 b9 a0 40 0c c6 84 50 d7 62 c3 8c ba 69 7b 10 72 f9 59 04 ce b9 b8 2c d5 d2 90 56 b0 35 19 2c 4c c6 c4 20 76 0d 65 50 28 44 63 57 b9 03 5c 11 9a 6b ff aa 59 a6 f8 df 23 08 81 e4 4e ed 6f fa 31 2d 00 4a 9b 1e b4 36 8a a4 09 94 81 7e 18 1c a8 45 dc d1 28 71 db 2d cf 74 8b 32 13 35 22 11 2a cd 14 81 92 4d 50 8a d6 c2 c1 e9 a8 b9 06 90 82 ab 11 69 2f 32 51 0a 11 18 9c 23 8b 4f 14 55 62 dd 67 73 3f 9f 68 b8 30 05 6b f7 24 fa 2d c0 9b ef 8c 6a 63 5b 6a 5d 59 bc 96 b4 49 a1 0e 33 1f 5f 28 01 dc fc 8a cb 27 78 3e 34 bf 0e Data Ascii: 3VUXiQM35][H1x="% T[4lvDIWB}(@Pbi{rY,V5,L veP(DcW\kY#No1-J6~E(q-t25"MPi/2Q#OUbgs?h0k$-jc[j]YI3_('x>4
2025-03-13 09:29:19 UTC	2336	IN	Data Raw: 02 90 55 4d c3 b9 f0 c4 53 e7 e7 3d 2d 05 42 65 56 ea 56 10 e7 11 5a b4 b0 be 58 78 eb ff dd cb 13 9b 53 6e db 97 39 bb 09 ff e4 76 e1 25 47 84 ff f2 ff 94 bf 7c 54 39 b0 04 5d 36 5f de d8 56 fe db 5f 15 fe e9 73 12 ff e9 f3 99 df fe 44 61 ef a2 00 70 a9 13 f6 87 8c f4 81 77 5f 7a 05 af 5b f9 24 61 d4 93 cb 94 36 80 17 3b 2f 81 54 67 32 32 f6 69 43 07 c1 53 52 18 b5 29 3d 42 6b 7f f6 64 27 1e c1 49 fe e6 4e c7 e3 a7 ce cc fd 39 78 13 af cd ba da 47 ec 9d 64 1e 7e 72 cc fd a7 0e 70 78 19 1e 3a 0f ff f2 c7 84 77 be 30 90 10 56 f7 29 bf f0 c1 cc d5 19 5c b8 06 7b 57 98 6b f0 dc 06 bc fe 23 03 97 af c1 24 09 8f 9c 87 e7 3f 13 de f9 92 c8 bd 8f 16 3e f0 17 85 cf cb 0a 7f bc 75 07 af da 77 1f 32 5b 45 5b 2d e6 e5 ae 90 6c 06 5c fb 54 06 b6 fd 0c c9 83 55 a6 4d Data Ascii: UMS=-BeVVZXxSn9v%G\|T9]6_V_sDapw_z[$a6;/Tg22iCSR)=Bkd'IN9xGd~rpx:w0V)\{Wk#$?>uw2[E[-l\TUM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49750	34.117.59.81	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:29:18 UTC	606	OUT	GET /json HTTP/1.1 Host: ipinfo.io Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:29:19 UTC	345	IN	HTTP/1.1 200 OK access-control-allow-origin: * Content-Length: 335 content-type: application/json; charset=utf-8 date: Thu, 13 Mar 2025 09:29:19 GMT x-content-type-options: nosniff via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-13 09:29:19 UTC	335	IN	Data Raw: 7b 0a 20 20 22 69 70 22 3a 20 22 37 33 2e 31 33 2e 31 33 35 2e 32 31 39 22 2c 0a 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 63 2d 37 33 2d 31 33 2d 31 33 35 2d 32 31 39 2e 68 73 64 31 2e 70 61 2e 63 6f 6d 63 61 73 74 2e 6e 65 74 22 2c 0a 20 20 22 63 69 74 79 22 3a 20 22 50 68 69 6c 61 64 65 6c 70 68 69 61 22 2c 0a 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 50 65 6e 6e 73 79 6c 76 61 6e 69 61 22 2c 0a 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 22 6c 6f 63 22 3a 20 22 33 39 2e 39 35 32 34 2c 2d 37 35 2e 31 36 33 36 22 2c 0a 20 20 22 6f 72 67 22 3a 20 22 41 53 37 39 32 32 20 43 6f 6d 63 61 73 74 20 43 61 62 6c 65 20 43 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 73 2c 20 4c 4c 43 22 2c 0a 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 31 39 30 39 39 22 2c Data Ascii: { "ip": "73.13.135.219", "hostname": "c-73-13-135-219.hsd1.pa.comcast.net", "city": "Philadelphia", "region": "Pennsylvania", "country": "US", "loc": "39.9524,-75.1636", "org": "AS7922 Comcast Cable Communications, LLC", "postal": "19099",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49753	216.198.79.193	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:29:21 UTC	687	OUT	GET /img/meta-logo-grey.png HTTP/1.1 Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:29:21 UTC	553	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 113753 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline; filename="meta-logo-grey.png" Content-Length: 105511 Content-Type: image/png Date: Thu, 13 Mar 2025 09:29:21 GMT Etag: "ffba640622dd859d554ee43a03d53769" Last-Modified: Wed, 12 Mar 2025 01:53:27 GMT Server: Vercel Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Vercel-Cache: HIT X-Vercel-Id: iad1::xb2mz-1741858161625-e2457c8f1268 Connection: close
2025-03-13 09:29:21 UTC	2372	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 84 00 00 00 f0 08 06 00 00 00 58 15 aa 71 00 00 14 a9 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 65 78 69 66 00 00 78 da a5 9a 69 96 1b b9 95 85 ff 63 15 5e 02 e6 61 39 00 1e 70 4e ef c0 cb f7 77 41 4a 2e a9 ca c7 5d dd 4c 25 49 91 11 08 e0 0d 77 40 a4 3b ff fc 9f eb fe c1 23 0f 5f 5d 2e ad d7 51 ab e7 91 47 1e 71 f2 a6 fb cf 63 be e7 e0 f3 7b 7e 8f 9e 7d fa 7e fa cb e7 ee 7e cf f1 91 8f 74 48 fa 9e 50 3f af e1 c7 e7 df 13 7e bc 86 c9 bb f2 87 81 fa fe 7e b1 7e fd 62 e4 ef f8 fd b7 81 e2 e7 25 69 46 7a 6f df 81 c6 77 a0 14 3f 5f 84 ef 00 f3 b3 2c 5f 47 6f 7f 5c c2 3a 9f 57 fb b1 92 fe f9 75 7a ca fd d7 69 ff e9 ff 8d e8 59 e1 3a 29 c6 93 42 f2 3c a7 f4 9d 40 d2 6f 72 69 f2 45 e4 Data Ascii: PNGIHDRXqzTXtRaw profile type exifxic^a9pNwAJ.]L%Iw@;#_].QGqc{~}~~tHP?~~~b%iFzow?_,_Go\:WuziY:)B<@oriE
2025-03-13 09:29:21 UTC	1002	IN	Data Raw: 96 27 c6 1c 8c d9 d0 0f 85 db 12 29 82 75 81 18 04 39 5d 03 ef 72 05 a0 1a 9c 26 58 34 ea 80 d9 f1 c0 84 53 f2 e4 a0 e9 97 75 17 99 b6 c5 3d e8 dc 88 40 90 d2 9d f0 3b c3 8e c7 10 28 23 c0 fe bd 23 23 7a 5d 52 45 92 cb 38 c2 33 a9 5c 0c 7e 6d ae a2 8f f6 46 02 61 1b 82 24 2d ac 14 19 69 40 21 84 5b 4d 5c 7a 98 30 c1 1d 54 fb 93 59 00 d1 e7 1b d6 8e 74 00 fe e7 76 bd bf 89 42 59 14 78 7c 7d aa 8a 05 c6 c0 2b 9a 00 d1 4a 52 9e 23 ad 88 3f 60 43 43 c0 85 48 bf 85 be ac 38 15 59 18 57 55 b6 07 19 56 fa 50 81 41 3a f0 12 30 4b 51 64 50 33 ed 32 52 40 05 d1 f0 1d ed 40 0e 91 6b 7e 62 91 70 18 1c 2c f0 61 89 f0 5a 26 25 50 43 86 5b 47 60 9a 56 7d de e8 7a 2e d0 11 14 18 87 0a 97 4d 3e 0a 2c 16 0b d1 e9 bb 2b 4c bf d4 09 94 5e a1 8c 86 3c de 9b b6 14 34 63 b3 81 Data Ascii: ')u9]r&X4Su=@;(###z]RE83\~mFa$-i@![M\z0TYtvBYx\|}+JR#?`CCH8YWUVPA:0KQdP32R@@k~bp,aZ&%PC[G`V}z.M>,+L^<4c
2025-03-13 09:29:21 UTC	4744	IN	Data Raw: 21 b1 30 9f f1 2c 25 2d 08 1f 01 65 dd a8 16 94 13 65 70 37 20 aa cd 2d 72 8f 9d ca 05 25 84 49 2f 8e 1c c9 24 cc b0 e1 dd 63 e0 56 c0 fb e1 af 18 f6 16 aa ac 23 ed f1 97 fb 74 ab 37 e0 79 9b e4 42 4b 68 43 1e 48 04 d3 56 ca d6 ce e8 c2 c2 a3 06 8e 0a b4 c8 ca 69 d7 5a 6f ea 40 23 c3 69 06 86 43 9c 63 6f b4 ec a4 db 2b d2 85 b6 4f ac 10 1e 83 a9 e3 70 58 69 54 a8 b4 36 a5 8d 2b ab 17 41 cc ea c8 1c 3e a4 15 58 10 4c 0b d3 d3 01 44 dd 87 5b 6e 91 53 e5 5b 84 09 6c 82 7d 21 b1 0c 74 51 c8 5b b0 7b a0 ec 0b 02 e0 31 8e b6 af da 1f 4a 82 9e f2 74 a1 ea 9a 02 f2 9c 32 f0 38 e5 14 24 5a 82 ef 3d 98 2d a3 84 c3 53 9f 21 92 59 3d c4 19 d0 a9 69 10 1e 84 3d 01 cf f4 25 e9 6a 68 4d 84 21 8a e9 26 51 3a 61 dd da de 12 8e 3a 92 d1 81 48 b4 13 a1 08 ac 5a 86 7f 2b 02 Data Ascii: !0,%-eep7 -r%I/$cV#t7yBKhCHViZo@#iCco+OpXiT6+A>XLD[nS[l}!tQ[{1Jt28$Z=-S!Y=i=%jhM!&Q:a:HZ+
2025-03-13 09:29:21 UTC	5930	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2025-03-13 09:29:21 UTC	7116	IN	Data Raw: 08 82 20 42 57 b9 1b 59 62 01 26 44 41 04 00 48 e3 24 8f fa 28 df ab 00 e8 48 0d a3 49 5d c8 2d a1 61 0f df dc 83 d5 34 51 38 15 97 0b bb ce 57 9f 4c 09 a2 fc f5 a7 d7 1b 76 4a 12 02 ac 05 72 87 4b c7 ec fb 22 32 c3 a6 16 2a 8a e0 98 41 26 00 b3 43 ad 91 c0 04 51 bf cb 82 cb 1e 79 f4 c9 be 91 c1 a1 05 ab 9f de 7d d3 c5 67 2f dc 3d 53 c7 ef be fb 9e 98 fd 9f ff e2 af ae 6e 36 b3 5f 9b 3d 6f e0 82 46 23 ed b6 59 d3 1b e9 90 83 63 46 10 04 b9 70 f7 ce 9f 46 fb 14 5f 6e 15 df b4 16 e6 44 68 f5 0e 77 cc de 21 16 ce b7 0b 51 ec eb 7a 8e 42 ac 03 80 46 ee 08 c9 b9 90 6c 45 1f 5d 2b ef 85 00 02 d2 34 cd c5 63 04 30 e0 7d 48 bc 20 4d 13 0b 68 03 45 3e ca 49 ad b6 22 50 88 c2 00 4c 28 96 a2 de d3 6c a3 d9 7d d3 0d 37 f7 fe eb 8a 3b fe f2 33 1f fe c0 3a 99 d6 5e 93 Data Ascii: BWYb&DAH$(HI]-a4Q8WLvJrK"2*A&CQy}g/=Sn6_=oF#YcFpF_nDhw!QzBFlE]+4c0}H MhE>I"PL(l}7;3:^
2025-03-13 09:29:21 UTC	8302	IN	Data Raw: 91 e4 45 93 8f 62 55 7a bb ec f0 fe 83 bb 0b 06 1b 66 cf 1a b8 65 f9 b2 a5 f7 9d f3 de cb f7 9c 3f bf 7b e8 e5 be af dc e1 72 28 7f 6c 64 e6 fb 6e bf fd de 81 ad 2f ec 5f bc 76 dd 53 1f 1b 3b 78 f0 c2 52 a9 74 da ac de be 9e 46 9c 9a 91 e1 61 18 13 a0 d2 d3 8d 24 89 e1 5c 86 20 37 63 51 da f7 e4 6b 36 13 94 cb e5 c9 d4 d3 96 08 e4 56 5b 03 e7 27 58 37 d9 9b 50 2b 02 d8 c2 65 b6 dd cc 5e 29 85 62 54 84 73 0e 8d 46 03 a9 cb 50 28 14 c0 cc 0b eb b5 c6 55 b7 dc 7e e7 ae bd 7b 27 be 75 c2 09 5d 07 8e f4 1e 9f d8 bb 77 f6 f7 bf fe 9d cf 24 49 7c 55 6f 6f cf bc 89 6a 0d 2a 30 d0 4a c3 59 87 38 f5 62 50 91 69 a7 c8 b5 16 c2 00 60 33 d7 6e c1 a1 88 db 66 0e 3a 6f f5 61 02 72 b6 d1 dc 96 d9 e4 e6 cb 2f 7f f7 37 3e fb 89 ab 9f fb 8f bf f7 99 19 75 fe 5e 73 c5 15 63 Data Ascii: EbUzfe?{r(ldn/_vS;xRtFa$\ 7cQk6V['X7P+e^)bTsFP(U~{'u]w$I\|Uooj*0JY8bPi`3nf:oar/7>u^sc
2025-03-13 09:29:21 UTC	6676	IN	Data Raw: 4c 4a 24 4b 09 25 42 50 69 20 19 74 d2 26 42 90 16 09 85 d6 8a 52 dd 72 dd 2a 46 0b c0 e9 ef 35 e3 e9 a2 48 6c bf 1e d0 93 2a 67 74 7d f6 b3 97 1d d3 20 95 99 2b 8f 3c b2 7a d2 f3 eb 57 9d fd e5 bf f9 ce a5 06 76 6e 21 28 4d 13 50 33 b4 a5 76 25 fc 12 04 07 20 09 c3 16 6c 19 c4 04 41 3e 98 18 96 05 90 a7 3c 58 30 13 98 05 88 a4 20 72 76 a0 bb d7 9c ab cb 90 9c 06 16 88 8c d6 ca 0b a2 7a 12 0d 6c da b1 ed 26 b9 ed ed 2d 6b 5e 93 6f fd f9 5f 7f e7 e5 49 13 27 3c 7d c3 95 f3 77 9c 7a ea a9 bb 0f e7 df ba 78 31 fb c5 e2 d2 d6 3d 7e 5c 0c fa e3 02 5b 51 d0 88 7d 0f 4a 1a 61 48 27 89 14 be af 00 c0 18 df 06 32 66 8e 63 91 24 ec 19 e5 7c b2 44 64 3d e1 db 04 ca 08 5b d3 ca f3 e3 48 9b 6a db 84 96 ed 9f fd d0 87 de d3 da e6 47 35 20 5c be a5 b7 f3 47 df fe db 5f Data Ascii: LJ$K%BPi t&BRrF5Hlgt} +<zWvn!(MP3v% lA><X0 rvzl&-k^o_I'<}wzx1=~\[Q}JaH'2fc$\|Dd=[HjG5 \G_
2025-03-13 09:29:21 UTC	10674	IN	Data Raw: 80 0a 41 69 fa c4 ce c9 57 6f dd bd fb bf dd 77 d7 6d 5f 78 64 d9 6b d3 df cd b9 d8 d7 53 b4 82 38 61 66 9b 8f b3 e0 26 40 d5 44 c3 15 c3 7f e7 a1 3d 8d d8 66 e7 4f f6 3b b2 3e 02 38 18 a9 8f ba fe b3 f1 4d df 27 52 d5 ed fc 75 31 f2 f7 15 cd 7f 4f 36 97 29 df a2 f9 f7 91 7e ce a3 ce c8 c0 80 fb 9b 2c cc 20 20 c0 cc 50 42 40 28 32 c6 54 de f3 bd f9 cb e5 ab ce be ff f6 87 fe ff 0d 6f bc f9 87 90 ea 52 19 f8 15 4e 81 13 a8 c1 36 69 ee da ba 34 12 9b 8a 0a 41 70 53 24 be 01 74 de 69 1f 1a 91 1f da b3 7b 6c a4 bd e7 ee 2f 9d 02 d3 86 03 27 73 76 42 10 a4 e7 a3 a5 d2 86 fe fe 2a 94 1f cc ac 94 5a 3f fe b3 5f dc f1 a7 8b ef ff e5 88 77 9d 01 c0 c6 b2 e7 79 8d 33 a6 c9 31 90 31 09 9a d7 53 c6 38 20 34 af 6b 9b de 11 0d 46 82 10 82 89 69 f8 55 7d 22 03 42 66 2e Data Ascii: AiWowm_xdkS8af&@D=fO;>8M'Ru1O6)~, PB@(2ToRN6i4ApS$ti{l/'svB*Z?_wy311S8 4kFiU}"Bf.
2025-03-13 09:29:22 UTC	11860	IN	Data Raw: 91 4e 67 51 2e f9 51 91 04 84 c0 d7 23 04 d3 35 61 35 1d 3b b0 11 42 40 20 ee ab 8b d7 65 94 9c 50 bd e5 a0 ff 9d 30 a0 17 5a 9a 5b 57 5d 79 dd fc 0d f7 df 7e 7b c7 99 da 77 37 45 1c 21 5d 6b 99 df d9 f8 8b 65 2f 6c dd ba 6d d1 d1 ae de 0f 19 e6 c5 ae 50 93 8d b5 69 21 24 48 09 94 4b 41 64 cf 95 1b 05 7a 14 c9 8f 24 53 92 04 7f 42 c9 a8 52 68 86 2f 88 54 b8 33 12 1e 93 a4 57 32 69 c9 19 06 de 1e c5 de 0c 12 82 68 1c c8 4e 9c d5 80 b0 77 7b 47 8b d5 66 ba 85 4d 1b 54 d9 42 c7 02 4f cb cc 10 52 40 12 10 04 3e 48 ca 9e 09 0d 2d 1b 1b 2e bf fc 02 5c f4 38 63 ed da 4d 93 7e f6 f8 53 bf 2d 5c f7 1a 51 0e b2 49 a6 44 29 01 29 65 85 86 9e 70 fa b5 08 a3 b5 40 71 03 3e 57 7a 9f 4c 9c 1d 65 0b f8 91 c0 67 bb e7 a5 6f 7a ed b9 15 2f 33 f3 af c6 63 b5 e2 6c 8f a6 f6 Data Ascii: NgQ.Q#5a5;B@ eP0Z[W]y~{w7E!]ke/lmPi!$HKAdz$SBRh/T3W2ihNw{GfMTBOR@>H-.\8cM~S-\QID))ep@q>WzLegoz/3cl
2025-03-13 09:29:22 UTC	10234	IN	Data Raw: 19 30 6c 21 2b 79 1b 51 d9 9b 95 9f 89 4d 19 f6 c9 47 27 b9 54 4e 2e 5f 38 7a c9 be 7d fb ea 00 9c d5 80 d0 3a 65 16 c2 b2 b1 c7 17 a4 7f af 3b de a7 3a 7a 8e 1e 6e 2f 14 fa 67 3a a9 2c 85 a6 36 19 c0 20 c1 b1 1f 7c 6a 73 63 83 b0 27 93 4e bd f1 c1 a5 bf d1 f5 1e 9e aa 0f 03 78 09 c0 29 d9 8c 69 75 13 7c c7 91 3d da 5a ad 24 54 ad 9f 34 18 ba 5c 41 7d f2 e8 8f 6e 2b 04 29 e2 b3 be 98 cf 28 a9 4c ef a1 de 2c 0b 6e 20 19 b3 8b 0e c1 34 88 93 ce ea 0c 68 a4 36 5c 76 bd 74 df 9c 39 53 cf fb 80 70 db b6 6d ed eb b7 bc f3 19 6b b1 30 55 97 f5 f2 c5 32 b2 75 f5 55 5a f9 a1 4b 73 80 c8 b6 8c f5 c6 12 06 c2 84 54 46 09 89 42 7f 1e 2d 4d 4d d0 41 d8 9f ef cf 6f 58 70 c5 a2 9f 2f 9c 3d 7b d4 b4 c4 77 2f bd be 63 e6 cc 39 3f cd 17 fa d7 11 a1 2c 18 c8 a4 3c 84 da 87 Data Ascii: 0l!+yQMG'TN._8z}:e;:zn/g:,6 \|jsc'Nx)iu\|=Z$T4\A}n+)(L,n 4h6\vt9Spmk0U2uUZKsTFB-MMAoXp/={w/c9?,<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49757	216.198.79.193	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:29:21 UTC	676	OUT	GET /img/2FA.png HTTP/1.1 Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:29:22 UTC	541	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 62408 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline; filename="2FA.png" Content-Length: 114767 Content-Type: image/png Date: Thu, 13 Mar 2025 09:29:22 GMT Etag: "03d39d5d071182aba1b01ba2e859de39" Last-Modified: Wed, 12 Mar 2025 16:09:13 GMT Server: Vercel Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Vercel-Cache: HIT X-Vercel-Id: iad1::xpxw2-1741858162105-8598b387f313 Connection: close
2025-03-13 09:29:22 UTC	2372	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 1d 00 00 00 fc 08 06 00 00 00 d3 e7 16 e9 00 00 01 83 69 43 43 50 49 43 43 20 70 72 6f 66 69 6c 65 00 00 28 91 7d 91 3d 48 c3 40 1c c5 5f 53 a5 22 15 07 33 48 71 c8 50 9d 5a 10 15 71 d4 2a 14 a1 42 a8 15 5a 75 30 b9 f4 0b 9a 34 24 29 2e 8e 82 6b c1 c1 8f c5 aa 83 8b b3 ae 0e ae 82 20 f8 01 e2 ea e2 a4 e8 22 25 fe af 29 b4 88 f1 e0 b8 1f ef ee 3d ee de 01 42 a3 c2 74 bb 67 1c d0 0d c7 4a 27 13 52 36 b7 2a 85 5e 11 46 08 22 62 88 28 cc 36 e7 64 39 05 df f1 75 8f 00 5f ef e2 3c cb ff dc 9f 63 40 cb db 0c 08 48 c4 b3 cc b4 1c e2 0d e2 e9 4d c7 e4 bc 4f 2c b2 92 a2 11 9f 13 c7 2c ba 20 f1 23 d7 55 8f df 38 17 5b 2c f0 4c d1 ca a4 e7 89 45 62 a9 d8 c5 6a 17 b3 92 a5 13 4f 11 47 35 dd a0 7c 21 eb b1 c6 79 Data Ascii: PNGIHDRiCCPICC profile(}=H@_S"3HqPZqBZu04$).k "%)=BtgJ'R6^F"b(6d9u_<c@HMO,, #U8[,LEbjOG5\|!y
2025-03-13 09:29:22 UTC	1014	IN	Data Raw: f4 11 1b d9 a9 f4 0b 1f a0 2f e9 fe 84 9c 36 16 25 78 6b 2a 7a cd cf 37 38 05 39 d2 93 3a 1d 53 d1 71 f8 3c 3f 26 27 8b de d4 f9 95 1c 8d 21 9f eb a3 fc ec b8 e9 f9 a7 8e 57 fe 5c ac 05 c8 83 75 1c c9 21 e1 7c 19 a0 02 d2 c4 e9 b3 90 b0 9a 47 cf a5 74 8f f2 f7 c7 48 96 9c 85 27 83 c3 99 a2 6e 25 54 26 45 c6 4a 69 99 52 9a ec ae 4e 47 8e 68 59 e3 9d ab 0a c2 36 0d 5f 33 ac d5 0e 91 0a e3 21 f2 76 86 eb 15 42 40 90 72 fb 0f 8e 2f 04 48 b8 28 2a 67 0a a5 e7 11 e6 6f 1a 0c 84 31 61 8c 71 73 78 c6 40 4e ad 1f 24 d4 64 3a 32 7f ee f9 3d 27 9e 4e 03 cc a5 17 e6 d2 03 53 29 0d b7 06 f1 e4 b3 2f 1d 7f 34 9e fc 73 9a 9a a7 53 ef 93 78 4b 52 c1 1d c6 6b 0d 2d ae dd 9b 39 a4 39 a4 18 e6 d2 2b 53 69 51 21 c4 68 4e e7 c1 71 6d 2d 89 46 96 c4 d1 cf ba 36 4e 8f 19 5f 35 Data Ascii: /6%xkz789:Sq<?&'!W\u!\|GtH'n%T&EJiRNGhY6_3!vB@r/H(go1aqsx@N$d:2='NS)/4sSxKRk-99+SiQ!hNqm-F6N_5
2025-03-13 09:29:22 UTC	4744	IN	Data Raw: 65 04 fc 7a 19 e6 75 df f7 b8 ed 35 5e bd 3e c7 d9 ea 04 f7 4e 4f d1 2a 01 01 01 f6 b6 54 51 a3 a0 05 f0 fa 76 83 6f 5f bf c6 e5 6e 83 5e 4a 40 49 90 74 a5 b2 ec a3 bf 18 fd 4a 01 c3 16 c2 0f ec dc b1 0c 93 d6 1e 51 70 39 b5 30 1b 66 08 f2 a8 00 d8 bd f6 ce 8f 12 02 cc 00 09 c4 9b 63 03 e2 91 44 dc c8 8d 42 92 ab 9d 42 18 e2 fe 44 40 03 fc f7 3c 72 60 d8 a3 3d 6c e3 79 82 28 1a 49 cb a6 42 ee f3 51 9e 14 99 07 49 31 8a af 79 ec 61 21 22 00 56 73 95 60 cb 98 af fe 88 17 55 f9 8c 48 38 ee 41 e0 1c 78 0e 02 85 c1 cc 1c 73 d2 d6 97 d0 59 f2 a9 a9 70 2e 96 fd 7d 4b 88 be 94 20 4c 42 94 f3 cd 42 40 47 a7 63 c0 69 dc ef c2 22 a0 bc e1 c8 a3 03 31 6c 13 e8 6b f8 dc 45 fe d6 ba 3c 6c 23 9b 81 90 6c 3d 19 5a 29 18 db cf 2c 8a 04 31 e2 c2 70 bc 6e 21 08 64 d5 41 c9 Data Ascii: ezu5^>NO*TQvo_n^J@ItJQp90fcDBBD@<r`=ly(IBQI1ya!"Vs`UH8AxsYp.}K LBB@Gci"1lkE<l#l=Z),1pn!dA
2025-03-13 09:29:22 UTC	5930	IN	Data Raw: 3e f8 e0 03 3c 7a 70 7f c4 ab 99 43 b8 a6 9a ed 05 a7 25 e7 bf 94 52 72 b9 f4 7f 0d 16 3f 26 fd 52 22 35 e6 9c a3 dc 88 d5 8c 6a 89 13 50 8a 92 73 22 f5 1c 21 33 27 18 a6 4e d9 28 3d 62 8f 4b 4b d4 ee d9 31 ad 1c 26 05 ca fc f5 d6 1a a5 d5 aa 9a c2 67 b9 ce 4a cd 81 2a 5d c7 1c 61 36 75 d8 a7 82 a2 94 80 de f7 3d ac b5 91 0b 96 3b 8e a5 b1 3a 45 a2 ad c9 ec e7 ce 46 5e 9d 95 3a c4 53 29 c6 fc 1e e7 29 1a a5 d4 01 b7 2c 5c b7 0d 12 e7 7c 98 b1 a0 82 d3 91 5e 9b f1 d8 90 0d 8e 97 70 9d a7 41 26 ae b9 4a 91 23 8d 74 9d 83 47 09 00 1b 0b 88 a1 8f 03 ac db 51 8a 20 e4 e2 23 48 90 ca 00 ff 4f 71 30 90 a4 07 72 6e 46 aa a6 78 6c 34 31 9a f0 81 a3 40 98 6c fc 55 db af 60 c0 58 1b af 71 6a 00 d5 f2 a3 54 59 38 8e 65 07 bf 89 51 ca 17 3c eb 05 c4 46 5b 1e 1c c4 12 Data Ascii: ><zpC%Rr?&R"5jPs"!3'N(=bKK1&gJ*]a6u=;:EF^:S)),\\|^pA&J#tGQ #HOq0rnFxl41@lU`XqjTY8eQ<F[
2025-03-13 09:29:22 UTC	7116	IN	Data Raw: ad 73 ce 18 66 64 00 99 4d d4 45 20 1e f3 53 52 dd 25 aa a5 bb 50 e7 ec 8d 46 00 89 32 79 91 32 22 53 2d bd 65 a6 a5 c2 0f cb 30 ef 66 80 23 2f 04 e3 2e c0 f1 7f 3c 54 99 20 4f a1 08 8a 9c a4 9a fd 99 13 d7 42 25 1d 1e db 1b 24 4d 11 4b a8 d3 31 1c 8d 29 52 eb 14 4a 3d 7b ee 33 f4 86 a9 2e da 94 74 0c af 05 c0 6a 9a c8 74 5c 4e ff f0 c8 6f e7 29 cf 11 5c e6 1c 8f 52 4e b8 26 96 32 67 7c e7 ce b9 7a 2e 13 8e cb 94 17 9f a6 af 6a 86 bf d4 b3 e2 98 6b 98 ea ec 7b 8c 17 7b 2c 3c 7a 97 48 a7 e8 94 b1 83 8d 2d b9 32 cd 60 80 ac d3 1f 77 11 3f 5b ec 99 61 fb 1b e8 ed 1e af 88 00 ab 21 2d 40 4a 82 9a 16 3d 1b 74 5a 63 67 7a 68 63 9c ee 07 bc 2a ab 10 49 b3 22 80 3d 01 95 d8 c9 c7 1b d3 7b ad 03 1a 39 1c be e7 21 c8 38 01 a9 7d 6f b0 eb 34 b6 fd 1e 06 80 b0 c6 d5 Data Ascii: sfdME SR%PF2y2"S-e0f#/.<T OB%$MK1)RJ={3.tjt\No)\RN&2g\|z.jk{{,<zH-2`w?[a!-@J=tZcgzhc*I"={9!8}o4
2025-03-13 09:29:22 UTC	8302	IN	Data Raw: 71 f6 86 0a c8 75 fc cf 72 88 91 20 22 48 d5 17 66 29 8a 02 b2 31 5a 01 f1 c5 9a 62 32 c7 55 b0 52 e6 84 8f cd 6b c2 93 d2 8d f1 e5 a0 f9 1c 4b 39 d7 67 4a 29 92 a6 32 e5 75 c9 50 61 cf 3b ac 06 53 e4 cd 5c 45 e4 20 6b a5 8c 45 b9 73 16 0c 0f 78 2a 60 ba e7 dd 42 e7 2a 3d b7 fd f1 09 11 07 0c c6 98 27 17 ac 23 f2 92 3a 49 52 0e 88 fd 45 a1 7d 2d 05 d5 54 25 93 af 22 14 98 50 00 d5 50 4a 43 2b 01 46 23 70 36 06 74 0d 34 33 28 79 8c f3 d9 7d cc 2f bf 86 e0 cf 30 d6 35 f4 5c 43 35 c0 a8 00 30 af b1 55 02 5a 68 9c b7 2f 71 76 f2 18 d5 e9 33 ec 6e dc 01 15 c6 f7 e4 d1 93 17 78 f2 e4 09 16 8b 4b 40 29 48 d9 98 49 07 c1 b1 a8 95 31 72 bb bc b4 32 d3 2a cb 20 8f 03 22 07 a1 58 21 03 ed 8e b1 3b d7 fa 8b aa 42 21 80 a6 a9 a1 b5 c6 d6 74 03 57 af 1d e1 e8 e8 08 85 Data Ascii: qur "Hf)1Zb2URkK9gJ)2uPa;S\E kEsx`B='#:IRE}-T%"PPJC+F#p6t43(y}/05\C50UZh/qv3nxK@)HI1r2* "X!;B!tW
2025-03-13 09:29:22 UTC	6676	IN	Data Raw: c2 b4 95 38 a7 a8 ac d6 3d 68 7c 36 9b 19 53 3b e2 56 e9 14 38 dc db c1 b5 bd 6d dc b9 75 13 8c 09 6c 6c 6d 5b 2e 4a eb 5b 4e 9c 73 30 ee 55 58 ba 04 c0 a1 55 ce e2 fd ff bf fd a4 f6 8a 5f f4 12 9e 25 40 df 29 36 96 02 8f 5d 64 87 0c bf f2 f1 59 af 6c 67 0f a6 84 41 d1 15 2b a3 c6 22 62 71 7b 3c 25 be 35 34 35 13 fb d2 e4 90 f8 ac ae 54 8a 53 97 11 7f cc 29 50 c7 48 45 2e eb 0e c5 c5 96 4c 56 5f 63 c2 70 48 d4 2d f6 d8 0a db e6 0e e1 ac eb 3a bf fe b9 54 2d 83 7a 09 ce b9 21 94 04 b0 0c e7 1c d2 b2 56 e3 9d 18 5b e4 c6 70 97 d3 b0 08 e7 88 5d 72 80 a0 85 13 8a 47 c5 27 8f 94 d2 8f 21 c5 ca 71 4d d3 98 f9 df b2 f4 df 15 93 a4 34 59 6b 6c 46 49 8b e7 70 d6 39 ce f8 dd b6 ba f7 85 ce 8a a1 ce 45 d3 34 3d 0d 93 f0 79 21 44 5f 08 20 3a 30 6e df a4 5a 2f ee b9 Data Ascii: 8=h\|6S;V8mullm[.J[Ns0UXU_%@)6]dYlgA+"bq{<%545TS)PHE.LV_cpH-:T-z!V[p]rG'!qM4YklFIp9E4=y!D_ :0nZ/
2025-03-13 09:29:22 UTC	10674	IN	Data Raw: 7f 9c 49 9b 5e 91 f8 be f9 b7 4e dd d0 f5 b2 1d ff cf 2d b6 0c 35 d0 be c2 fc ec 19 e6 af 9e a3 22 60 dc 5e 82 97 63 bb a0 bd b9 73 14 1b 1b 1b 28 cb d2 a3 1e e7 e7 33 e8 66 0e 75 79 8e b6 6d f1 fc f4 1c c4 c4 d2 28 79 f8 cf c9 a8 87 fe 4a 52 1a 4e 10 2f c6 50 d0 c9 b6 a6 f3 0e 71 be 21 e1 c4 94 d1 0b 31 81 53 43 82 c0 c1 05 81 b3 02 1a 12 6d a3 d0 b4 0b 70 56 80 71 80 b3 02 c4 ba d1 5c d9 6a ff 3e 56 30 14 45 05 c6 60 5b 21 4d 6f 9a c6 e9 86 84 6d 16 a5 00 b2 10 3d 23 ed bf 07 9a f5 3e 5f 49 f8 76 0c e3 30 9e 3f 90 d8 dc d8 c6 d5 a3 03 4c 27 63 88 e5 b0 eb af e7 55 76 06 8c 98 3d d7 68 89 7c 18 aa 36 6b 4b f6 73 8b a4 54 da 4e 1c 24 2c 2d ac 02 25 65 5c 4e 43 55 68 16 5c c3 4e a0 cf cd 6e 68 f7 f9 41 db 83 a1 ef 5f a2 5a d9 4f a2 10 64 6f 14 13 58 13 85 Data Ascii: I^N-5"`^cs(3fuym(yJRN/Pq!1SCmpVq\j>V0E`[!Mom=#>_Iv0?L'cUv=h\|6kKsTN$,-%e\NCUh\NnhA_ZOdoX
2025-03-13 09:29:22 UTC	11860	IN	Data Raw: 10 a7 60 c3 c8 18 b0 b3 05 2b 12 11 46 71 87 83 21 c1 73 94 06 7c ce b6 35 c4 00 f9 9b 46 c3 0d 27 b1 c2 4a 5e 29 14 04 ec c7 61 26 5f cc c1 6f c6 8d 03 9c 86 4c 2e fb 8f 38 b4 82 86 67 69 4d 4a c9 85 b3 0b d9 9f 78 ab ed 30 b8 e3 71 88 38 10 31 88 4d 92 46 9e 6e 68 5d 94 5b 9f 0d 20 9e 07 92 4e dc 74 7d d2 80 91 64 24 45 e1 18 06 37 ce 50 a7 dc d0 8a 88 12 12 24 22 69 3b f9 7e e4 d9 ec 61 00 06 0c a2 18 9c 83 13 81 0b d7 40 b2 16 2c 7f 9e 62 81 7f 8e 82 7c 37 05 a6 77 79 08 68 1c 00 66 88 e1 a0 60 a9 80 8c 50 de 81 55 a0 7a 06 de 7c 86 1b fc 0c dd bd cf f0 cd eb ff 17 4f e4 1b 50 6f fc 84 a3 8a 64 98 4d 92 7c 20 fc ca 8a e0 35 12 8b c7 02 25 09 d0 bd f8 20 11 7c 44 a0 b2 5e eb 0e a1 66 c8 9c 4d 68 7d 13 6c 6d 87 2e c8 9c 8f 4e 71 35 0c b0 9d c2 18 c6 e8 Data Ascii: `+Fq!s\|5F'J^)a&_oL.8giMJx0q81MFnh][ Nt}d$E7P$"i;~a@,b\|7wyhf`PUz\|OPodM\| 5% \|D^fMh}lm.Nq5
2025-03-13 09:29:22 UTC	5989	IN	Data Raw: f1 7a b9 5f 12 c4 b7 96 a2 c8 63 91 9b 96 90 ce db fa a2 2c 2d ea 6b 8a 79 77 41 2a 96 6e ee bb 7e c7 31 fb d5 3a 0f 4b 3d f5 75 a4 4a a7 00 ee 2d 91 b7 f7 31 d0 b8 53 f9 62 04 98 4f 80 f3 cf 70 f2 e9 ff 8c 7b 97 7f c0 f5 7e 87 ab 9b 5b c8 b3 df a3 7f f0 0f 38 85 01 ee 03 d0 f3 b0 68 9e 79 fd 9b 1f 80 48 ca d5 ee a2 ef e6 1a 45 8d 0e 0e 28 47 6c 99 35 91 33 a1 1d 20 04 b6 27 d8 eb 80 1b eb 70 fa f8 17 e8 1e fd 35 2e 5f bf c2 ab dd 35 4e 4f 6e 60 69 0f a6 01 aa 8c 51 f6 80 73 20 4b 60 6b b0 39 d9 00 4c 18 86 01 a3 13 10 7a f4 c6 c2 50 07 a1 1e af af 09 af f7 27 d8 99 33 d8 8b 5f 00 67 9f e3 86 ee e1 7a 34 18 42 92 c0 2a d1 2b 3e 0b 93 73 ad e6 1f ef e1 9c 03 5b 33 57 f7 bc 03 72 b8 a6 94 bc 96 78 56 79 16 45 52 72 d4 5c b0 52 26 2e 8f 2b 57 57 6d ed 53 1e Data Ascii: z_c,-kywAn~1:K=uJ-1SbOp{~[8hyHE(Gl53 'p5._5NOn`iQs K`k9LzP'3_gz4B+>s[3WrxVyERr\R&.+WWmS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49758	216.198.79.193	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:29:21 UTC	678	OUT	GET /img/phone.png HTTP/1.1 Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:29:22 UTC	543	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 62408 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline; filename="phone.png" Content-Length: 255341 Content-Type: image/png Date: Thu, 13 Mar 2025 09:29:22 GMT Etag: "3c18a93313e72ab9967152a4e92aa238" Last-Modified: Wed, 12 Mar 2025 16:09:13 GMT Server: Vercel Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Vercel-Cache: HIT X-Vercel-Id: iad1::qr2p6-1741858162057-fc6304fb8818 Connection: close
2025-03-13 09:29:22 UTC	2372	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 80 00 00 01 18 08 06 00 00 00 cc 10 47 90 00 03 e5 34 49 44 41 54 78 da ac 7d d9 8e 65 59 92 d5 b2 33 dc d9 c3 23 23 22 b3 32 aa ba 26 c8 ae 12 ad a6 5b aa 06 1a 21 90 78 84 1f e0 03 e0 0f 80 97 7c e3 5b 78 e5 43 e0 a5 25 ba 2a bb 86 cc ca b1 72 8c c9 c3 c3 fd fa 9d ce 39 86 db 36 5b b2 ad 2b 51 8c 37 e2 e8 de 33 ec 7d f6 60 db 6c d9 b4 5d f4 cb 7f f7 15 80 0b fc 3f 7f 24 be 27 00 0a a0 89 73 fe 6e 01 51 60 3a 01 cd c2 af e9 3e ca f1 19 f5 f2 ac 4f fa f8 d9 fa b9 1e e3 99 0e 50 ab 67 e5 75 8d 37 80 0e 51 56 80 66 e9 65 d4 eb f2 67 ae bd ac 2a 20 12 ed e9 01 3d 00 cd 06 90 0e 98 b6 d1 8e c9 ef 63 8a ba 7a 40 e6 5e e7 74 0b ff 58 db 46 7f 87 74 5e 0f e0 cf 4f 7b 40 ed de de db d9 3e 04 30 d8 b3 76 ee Data Ascii: PNGIHDRG4IDATx}eY3##"2&[!x\|[xC%r96[+Q73}`l]?$'snQ`:>OPgu7QVfeg =cz@^tXFt^O{@>0v
2025-03-13 09:29:22 UTC	1012	IN	Data Raw: d1 57 89 fb 6e 79 96 d3 b3 ca ba d3 04 b0 44 28 4b 2b 2b 1f ca 17 fc 9e 74 b1 96 00 6a ee 42 0d 7c bc 2e c2 97 40 48 74 72 e6 3f 1d 0b 20 02 46 5a f5 bc bd ed 45 05 38 e6 20 78 51 57 f8 5c 70 b7 9b 54 28 da fb 32 50 07 88 04 c7 18 02 4c 2a 79 10 95 6a 6f 4f 63 34 b9 0c 1e b0 0f 1a 5e 95 f3 b4 2e c0 2d 7f a6 d0 20 f8 d1 b8 25 88 2a 6d d3 e9 18 ef da 97 f7 4b 39 57 a3 85 00 45 04 78 b0 f3 18 2b 8e 37 f9 d6 08 e1 3a 26 ef a7 a5 43 2a 6b d7 34 d4 c2 2a 2d 3f c9 bf 2a 41 89 b4 ea d6 c2 0f 29 c4 9d 3f a8 cd 4d 79 bf 70 cd fa 0d e7 c5 d3 ad d3 76 fb 30 95 31 3d 85 b2 b1 60 7f 53 e1 b1 73 ae 81 72 67 e6 80 51 07 08 79 1f 60 6b 29 c0 82 ba 40 6f 82 ff 90 ce 30 f9 78 f3 93 80 95 02 dc 15 aa f1 ca 41 e9 f2 cf 21 c3 6b bb 6f 96 da 18 f7 a2 8c 3a c0 b3 7b 76 1e f3 64 Data Ascii: WnyD(K++tjB\|.@Htr? FZE8 xQW\pT(2PLyjoOc4^.- %mK9WEx+7:&Ck4-?*A)?Mypv01=`SsrgQy`k)@o0xA!ko:{vd
2025-03-13 09:29:22 UTC	4744	IN	Data Raw: 75 99 e5 f9 d1 63 4d 27 4e 63 18 03 04 72 0e e7 76 8d 16 4f 1f 03 90 f7 d8 73 ea e3 4e a5 a1 e9 b3 9f 12 2e fb 62 7d b1 39 99 9c 26 18 82 62 ee 47 20 fb ad 3b 6f 0b 41 3f f9 2b c3 22 84 bc cb fb 9b eb 66 95 3c a1 d9 a4 cb bf 7b ec ae fb c9 80 db df 0f de b0 f4 7b 34 18 d0 00 d1 3f 31 d7 a3 83 92 c5 4f 0b 6d 08 43 05 ec 5b 7a a7 8b 76 e9 0a 5f ff d4 9f 19 af 20 f3 25 70 12 3c fb f0 1f e1 5a 9f e2 b2 79 85 bd 2c 0b d0 9b e3 58 40 de ee fe fc 4e 36 98 e3 80 09 ad ab 30 02 ec cd 0a 28 1d 46 d8 d1 86 ea a7 68 44 0d fc 95 6b 0f db d7 b8 da 3f 46 db 5d e1 d1 0f 3e 05 ee ee 00 03 a9 f3 9f 7a df ad 8f 65 1d 3d 08 39 bc 4a 05 5b 1a 53 36 63 4c 47 f7 ee 38 e8 25 cd 07 bf ee d3 d3 32 6d ed 3b c0 de 98 bc 5c 1c 23 50 7e 53 d6 a6 77 8d 1e 8b 3e e8 6d 9b b2 b9 f0 9f 21 Data Ascii: ucM'NcrvOsN.b}9&bG ;oA?+"f<{{4?1OmC[zv_ %p<Zy,X@N60(FhDk?F]>ze=9J[S6cLG8%2m;\#P~Sw>m!
2025-03-13 09:29:22 UTC	5930	IN	Data Raw: 4b 60 33 a4 0e 43 3d c8 9e 3f b6 9e 3c 32 57 e8 e1 04 39 5c 01 73 63 7a 8b 8c 29 55 30 21 2a 12 14 92 99 95 ec 49 ce 93 01 11 44 50 7f 66 60 66 ec 6d db 46 d8 c5 c2 36 9e f5 b9 1e 5e 52 63 8e 71 6a 59 97 95 8d 79 9a b9 40 45 17 e0 e8 05 a4 bd b4 6b 5e a6 7b 64 cf 99 bb d5 2c 24 f1 4c 1b 3c ea 2a 00 cd 2a ea b2 5b 23 c4 80 dc 62 03 b4 f6 8e 0e ba 3f 42 af 9f 79 a2 f1 dd 08 39 dd 41 87 11 fa ea 8d 77 75 fd 00 b2 7f 0e 7d fe 59 b1 c8 c2 70 e3 f7 7f 0a 88 df 6b 2e 2f 80 cd 03 c8 ba 07 36 97 2e 3f 8e 21 9c f4 02 aa 0b 5a f9 72 af c1 66 19 d7 c4 b6 7e 89 8c da 60 c0 cd 45 24 85 c4 1c 82 8a 12 e2 3b 95 30 ba 8a 95 ee 30 88 01 42 07 1a 3a c5 9c ed 6c 9f c1 48 c8 98 d9 b5 88 97 7a e0 ee 74 bc 21 df ce 0d b5 67 0b 07 71 c3 de b7 16 21 70 b3 3a 52 e9 8f 3d fe e6 01 Data Ascii: K`3C=?<2W9\scz)U0!IDPf`fmF6^RcqjYy@Ek^{d,$L<*[#b?By9Awu}Ypk./6.?!Zrf~`E$;00B:lHzt!gq!p:R=
2025-03-13 09:29:22 UTC	7116	IN	Data Raw: a0 3f e8 3a a9 bb 94 a6 8f 38 27 18 f8 34 df c1 64 5c 5c 03 93 55 a8 8a 34 f3 0f f1 fa e5 5f e3 f2 ab 7f 86 fc 6c 0f ec 72 ec 54 37 20 b5 07 ab 49 73 47 39 1a 08 e1 91 53 8f 4a ed dc 32 ea 91 69 86 39 13 e9 76 55 d0 08 56 d8 06 3c b0 09 c6 2f a3 a0 01 3c 80 94 ae 67 74 00 3b 97 3c f2 b0 9d 47 16 f6 3d c2 05 c6 bc 86 23 c6 9a 26 e0 b2 87 6f 0b 9c 5f fc 3d 9c 9f fe 14 f3 f3 0f e0 ba 02 93 9d 4b d0 ee 56 7e 43 3f 8a 63 2c b7 03 1b 15 d8 f9 23 9a 5b ed f8 b5 6a 62 d4 e8 8f 6d c3 c1 38 df da 7c 1f 89 1a 70 ea 7d 6c 79 f0 f6 5e e9 f5 67 44 91 69 f6 2c 20 c0 88 8e 41 b5 a5 8d 15 37 fd 8c c6 68 db 1c 6a cd 50 94 15 a0 72 24 4f cd 4e c0 2f be 14 e0 37 7b 1a 98 5d 5e 33 78 5b c2 4d 19 34 71 e0 b9 6a 3d ab 0c e8 95 90 c8 49 dc 42 1c c1 ed 74 a0 09 8b 4c c5 8f 6e 7c Data Ascii: ?:8'4d\\U4_lrT7 IsG9SJ2i9vUV</<gt;<G=#&o_=KV~C?c,#[jbm8\|p}ly^gDi, A7hjPr$ON/7{]^3x[M4qj=IBtLn\|
2025-03-13 09:29:22 UTC	8302	IN	Data Raw: 2c b9 56 55 d6 da b5 36 03 1a c1 03 6f 88 7f c0 1b 74 bd b2 48 20 10 48 48 0c f5 9f 78 83 07 78 42 20 21 e8 61 98 66 ba a7 6b 7a ba ba 6b af ac cc 8c cc 8c c5 23 dc dd b6 fb 41 7d 8b ae c9 a5 41 5d 3d 3d 54 b9 14 f2 70 77 33 73 f3 70 8b 7b cf 3d df f9 ce 51 db 21 3e bf 00 7f 63 3c fd d1 cf c1 5f 7c 0c 7e fc 15 30 32 c2 d1 12 b4 6c 94 f5 1a 94 39 67 6f 06 ca a6 f2 19 a4 71 82 df f6 4b b5 53 3f d3 3c 69 4e c7 ab bc 6f b6 93 c9 b1 8d 3e 51 4d bb fa b3 04 25 f9 39 a9 bd 0d a9 0f dc d4 48 da 9b fc dc 01 82 90 54 03 98 ae 94 b9 f3 b1 da ad c0 90 dc 1c d8 ca c8 c7 ae bf b3 0c 55 97 c1 d4 99 bd 2c ef 6a 95 23 b5 d6 3c 18 34 c2 cd c7 be d2 ca c4 66 83 84 f6 33 70 f5 a2 b0 81 0a fe a0 8b e2 ea 81 96 7d 87 c7 e0 f2 3e 08 d9 15 21 67 e6 17 b6 0f e9 4f dd 89 ff dd e3 Data Ascii: ,VU6otH HHxxB !afkzk#A}A]==Tpw3sp{=Q!>c<_\|~02l9goqKS?<iNo>QM%9HTU,j#<4f3p}>!gO
2025-03-13 09:29:22 UTC	6676	IN	Data Raw: 3b 39 d7 f8 f2 1d c4 37 ee 20 be f3 92 74 ee d2 bd 43 50 15 81 be 05 5a 2b eb 26 c6 77 76 cb 00 30 ff 6f fc 55 df 9c 1d 1c 60 dd c5 fa ff 12 4f 80 ea f5 88 f9 3b 11 87 ef cd b0 78 e7 04 e5 fd 19 78 5e 62 b7 29 b1 39 2f 70 fd a8 c7 76 9d c4 6a 86 62 40 51 10 a2 27 52 4d 9b 61 98 33 20 8c d1 01 61 06 88 44 bf f9 b9 c6 c2 f5 9a 7a ac ba 16 56 50 41 7e 8b f4 e5 e7 e0 9f ff 04 fc c9 47 e0 dd 16 74 74 0b 74 7c 07 28 2a 60 ec 64 bf 1c 8d 95 03 f5 3d 03 38 2f 90 3d 39 c9 b6 17 5f cf 73 2d 85 16 b7 04 60 c9 62 8f b7 e2 ef 49 41 65 3c ee e1 ca 71 69 89 41 3b fb 7d a3 99 bf a0 ec bf aa 63 a9 96 7a 87 a7 96 2a 72 ae 09 44 52 36 ae 54 b3 5c ac 80 ee 0b 79 4c dd c7 40 3c 15 7f 52 da fe a9 82 ce fa 55 79 2f 4b 09 b2 12 f5 4d 5e 80 5b 64 1d 0d 8f f4 98 ee 5e 90 d6 3a 96 Data Ascii: ;97 tCPZ+&wv0oU`O;xx^b)9/pvjb@Q'RMa3 aDzVPA~Gttt\|(`d=8/=9_s-`bIAe<qiA;}czrDR6T\yL@<RUy/KM^[d^:
2025-03-13 09:29:22 UTC	10674	IN	Data Raw: a0 96 2e e3 52 a2 d3 58 a8 98 80 24 d7 4c 24 38 40 49 a1 42 31 02 ab fd 4b 2f 80 1f 58 b7 87 b8 dc 5d c7 f4 e8 21 de 7f e7 3f e1 fa fb 7f 86 fa c6 af a4 4b 80 bb 63 cd b8 05 c6 71 83 5e ad 32 8b 20 8f 72 d5 4d 3c 60 41 ee ca 6b 58 ea 94 85 1c e4 ae 5f 97 27 f4 39 66 70 5c 7d 8b 73 fd be 1f dd 53 79 44 11 f2 74 4d 18 a5 70 04 10 48 4b bf 65 52 1d 9f c5 ba 71 a2 5c 0a 8e 2c 80 8f 57 b5 6e 9b 08 b4 6c b5 34 dc 15 1e 1f a7 cc 20 94 41 44 6b 78 60 d2 cb 7e 98 f4 6e 17 a3 c7 2d 58 cb c8 65 52 00 68 f6 32 60 6a e3 1f fe c1 bf fa b4 44 27 00 f0 9c 0e 31 d7 52 aa b5 71 0f 38 c3 23 39 41 56 b4 c0 60 1e 7e de c0 d1 a2 40 49 83 7a 00 62 2d 08 1d a4 f1 30 6e 26 59 51 ab 96 2e 54 60 c9 17 20 4b 07 69 a9 54 47 3f 2a a4 3b 29 51 30 b0 1a dc 4c 5a 3d fb 88 e4 24 16 ff 1f Data Ascii: .RX$L$8@IB1K/X]!?Kcq^2 rM<`AkX_'9fp\}sSyDtMpHKeRq\,Wnl4 ADkx`~n-XeRh2`jD'1Rq8#9AV`~@Izb-0n&YQ.T` KiTG?*;)Q0LZ=$
2025-03-13 09:29:22 UTC	11860	IN	Data Raw: c0 5d 1b 13 de a1 35 90 db 0a fb a7 7f af 40 3a da 43 7a fc 96 ea f8 50 5b f3 05 0b d8 31 dd 9d 4f da e4 4e bc 06 b5 6f 88 96 57 73 b9 ef cb b8 48 bc 33 ff ce 7d 61 df 64 b2 9c e6 6a d2 ee 89 49 e5 91 4a 42 cc a1 20 4c e6 97 da 15 3c 7d 06 04 08 90 74 8f bd f0 81 f3 2c df 89 00 44 4c ff 4c 8c cd a2 db de 98 de 4f 1b cc a8 7b 53 c1 6c 75 cb ba 95 1f 32 0f c0 03 eb 54 3e 95 75 8d f9 37 29 48 e7 b9 c5 66 49 b3 d4 e5 a8 0c 07 85 62 66 c7 0c 46 da b8 5d fc 8f 62 ac d7 ed 52 0a b6 31 d5 a3 c6 9f d0 b0 c5 64 a8 13 70 5c 57 1d f2 e9 11 8a 96 30 14 49 ae 85 fb 38 57 00 88 8d 48 a4 16 e6 d9 db 53 6d d5 bc 12 b5 59 c1 b5 8a 09 64 bd 12 1d 7a f3 90 2d 90 05 23 48 e7 30 2e c5 0f f8 72 73 03 f5 f1 29 6e 3e f5 3b 40 3f 07 60 a0 96 82 34 21 bf 4e c9 6b 78 33 a2 2d 13 12 Data Ascii: ]5@:CzP[1ONoWsH3}adjIJB L<}t,DLLO{Slu2T>u7)HfIbfF]bR1dp\W0I8WHSmYdz-#H0.rs)n>;@?`4!Nkx3-
2025-03-13 09:29:22 UTC	10234	IN	Data Raw: 26 e7 ce ac 78 c3 88 9a 47 13 ab 7e ca 4a b4 91 b3 9a ad 1c 7c 0d 2c ff 2d b0 f8 37 c0 f0 8d 95 35 97 31 93 42 56 c0 c5 5b b7 45 f1 d8 36 8b c5 7b 25 51 4a 34 ff 31 68 f1 af 81 f6 87 e0 7c af 33 f7 ee 47 40 fe 08 14 8f 4b ca d1 0d 4c 95 6e cb 67 80 ec ac 9b fc ed f4 bb f2 c6 cb 63 5e d6 88 dc df 72 0d 86 67 47 96 d8 5f 86 81 97 1e ac e5 12 67 03 cd 02 61 af 25 da e6 b3 28 17 8f 37 e1 cb 55 2d c3 5a 23 19 cb 38 bc 73 4b 99 00 74 69 29 eb 8a d8 a9 e2 ec a5 2e 93 77 26 52 7f aa af ab a5 75 40 8e a1 81 cc 61 6f 02 65 a2 dc 30 38 ba 45 dd c7 2e 17 29 01 23 d1 6f 11 fc 65 05 c6 ea 7f e5 f1 52 ae f7 33 ee 72 98 34 4b f8 00 5a 70 bb 19 85 a5 aa eb 84 aa 0a 80 06 b0 77 d4 06 db 46 3e b8 72 94 a1 b4 dc 1b 1a 35 0e e6 ca cb ad 0c 0e 40 6d d1 6c ac 4d 43 b6 cc 51 75 Data Ascii: &xG~J\|,-751BV[E6{%QJ41h\|3G@KLngc^rgG_ga%(7U-Z#8sKti).w&Ru@aoe08E.)#oeR3r4KZpwF>r5@mlMCQu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49763	34.117.59.81	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:29:21 UTC	377	OUT	GET /json HTTP/1.1 Host: ipinfo.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:29:22 UTC	345	IN	HTTP/1.1 200 OK access-control-allow-origin: * Content-Length: 335 content-type: application/json; charset=utf-8 date: Thu, 13 Mar 2025 09:29:22 GMT x-content-type-options: nosniff via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-13 09:29:22 UTC	335	IN	Data Raw: 7b 0a 20 20 22 69 70 22 3a 20 22 37 33 2e 31 33 2e 31 33 35 2e 32 31 39 22 2c 0a 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 63 2d 37 33 2d 31 33 2d 31 33 35 2d 32 31 39 2e 68 73 64 31 2e 70 61 2e 63 6f 6d 63 61 73 74 2e 6e 65 74 22 2c 0a 20 20 22 63 69 74 79 22 3a 20 22 50 68 69 6c 61 64 65 6c 70 68 69 61 22 2c 0a 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 50 65 6e 6e 73 79 6c 76 61 6e 69 61 22 2c 0a 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 22 6c 6f 63 22 3a 20 22 33 39 2e 39 35 32 34 2c 2d 37 35 2e 31 36 33 36 22 2c 0a 20 20 22 6f 72 67 22 3a 20 22 41 53 37 39 32 32 20 43 6f 6d 63 61 73 74 20 43 61 62 6c 65 20 43 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 73 2c 20 4c 4c 43 22 2c 0a 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 31 39 30 39 39 22 2c Data Ascii: { "ip": "73.13.135.219", "hostname": "c-73-13-135-219.hsd1.pa.comcast.net", "city": "Philadelphia", "region": "Pennsylvania", "country": "US", "loc": "39.9524,-75.1636", "org": "AS7922 Comcast Cable Communications, LLC", "postal": "19099",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49760	216.198.79.1	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:29:21 UTC	523	OUT	GET /img/fb_round_logo.png HTTP/1.1 Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _ga_MR52T79VEH=GS1.1.1741858159.1.0.1741858159.0.0.0; _ga=GA1.1.219411324.1741858159
2025-03-13 09:29:22 UTC	551	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 244103 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline; filename="fb_round_logo.png" Content-Length: 42676 Content-Type: image/png Date: Thu, 13 Mar 2025 09:29:22 GMT Etag: "81bb5cf1e451109cf0b1868b2152914b" Last-Modified: Mon, 10 Mar 2025 13:40:59 GMT Server: Vercel Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Vercel-Cache: HIT X-Vercel-Id: iad1::vszzb-1741858162407-f96995a5fec4 Connection: close
2025-03-13 09:29:22 UTC	2372	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 b0 00 00 04 b0 08 06 00 00 00 eb 21 b3 cf 00 00 01 85 69 43 43 50 49 43 43 20 70 72 6f 66 69 6c 65 00 00 28 91 7d 91 3d 48 c3 50 14 85 4f 53 b5 22 15 07 3b 88 08 66 a8 4e 16 44 45 04 17 ad 42 11 2a 84 5a a1 55 07 93 97 fe 08 4d 1a 92 14 17 47 c1 b5 e0 e0 cf 62 d5 c1 c5 59 57 07 57 41 10 fc 01 71 75 71 52 74 91 12 ef 4b 0a 2d 62 7c 70 79 1f e7 bd 73 b8 ef 3e 40 a8 95 98 66 b5 8d 02 9a 6e 9b a9 44 5c cc 64 57 c4 d0 2b c2 e8 a0 9a c6 a0 cc 2c 63 56 92 92 f0 5d 5f f7 08 f0 fd 2e c6 b3 fc ef fd b9 ba d5 9c c5 80 80 48 3c c3 0c d3 26 5e 27 9e dc b4 0d ce fb c4 11 56 94 55 e2 73 e2 11 93 1a 24 7e e4 ba e2 f1 1b e7 82 cb 02 cf 8c 98 e9 d4 1c 71 84 58 2c b4 b0 d2 c2 ac 68 6a c4 13 c4 51 55 d3 29 5f c8 78 ac Data Ascii: PNGIHDR!iCCPICC profile(}=HPOS";fNDEB*ZUMGbYWWAquqRtK-b\|pys>@fnD\dW+,cV]_.H<&^'VUs$~qX,hjQU)_x
2025-03-13 09:29:22 UTC	1004	IN	Data Raw: ae 1e 4c b9 cf 4a 92 d4 bd c6 81 9f 02 df 05 fe 89 72 19 fc 4d 79 23 99 34 1a 49 d2 5c b0 c0 92 24 cd aa 34 2b aa 94 93 56 27 02 a7 03 8f 02 0e a1 dc 67 e5 12 76 49 ea 3d e3 c0 6f 80 6f b0 e3 a8 e1 2d 96 59 92 a4 d9 64 81 25 49 9a 71 69 56 c4 c0 7e 94 fb ac 4e a3 2c ae 0e 06 16 99 8e 24 f5 95 6d c0 6f 29 cb ac 7f 02 fe 15 f8 5d de 48 5a 46 23 49 9a 49 16 58 92 a4 19 93 66 c5 4a e0 04 ca 25 ec a7 01 eb b1 b4 92 a4 41 b1 1d b8 81 72 67 d6 97 81 ef 03 bf 75 67 96 24 69 26 58 60 49 92 f6 5a 67 11 fb 32 e0 58 e0 4c ca e3 81 47 02 89 e9 48 d2 40 9b 00 7e 09 7c 1d f8 12 e5 02 f8 9b bc 9b a1 24 69 6f 59 60 49 92 f6 48 a7 b4 4a 28 ef 1e f8 58 ca d2 ea 21 38 69 25 49 da b5 e9 05 f0 ff 08 7c 85 b2 cc ba d3 c9 2c 49 d2 9e b0 c0 92 24 ed 96 34 2b 46 28 8f 04 3e b6 f3 Data Ascii: LJrMy#4I\$4+V'gvI=oo-Yd%IqiV~N,$mo)]HZF#IIXfJ%Argug$i&X`IZg2XLGH@~\|$ioY`IHJ(X!8i%I\|,I$4+F(>
2025-03-13 09:29:22 UTC	4744	IN	Data Raw: 6f 24 77 1a 89 24 cd 3d df 28 49 d2 1c 4b b3 62 09 f0 18 e0 22 e0 34 dc 6f 25 49 52 2f 18 03 be 43 59 64 7d 09 b8 c5 3d 59 92 34 77 2c b0 24 69 8e a4 59 91 52 de 49 f0 42 e0 14 60 d4 54 24 49 ea 39 e3 c0 4f 28 8b ac bf 05 6e c8 1b 49 db 58 24 69 76 59 60 49 d2 2c 4a b3 22 02 0e 00 9e 02 3c 0d 38 06 a8 9b 8c 24 49 3d af 05 5c 0f 7c b6 f3 f8 b9 0b df 25 69 f6 58 60 49 d2 2c 48 b3 a2 02 6c a0 bc 9b e0 05 94 4b da 5d cc 2e 49 52 ff 09 c0 8d 94 d3 58 7f 01 fc 24 6f 24 13 c6 22 49 33 cb 02 4b 92 66 50 9a 15 35 e0 68 ca 89 ab a7 00 eb b1 b8 92 24 69 10 04 e0 77 94 fb b1 3e 09 5c 97 37 92 71 63 91 a4 99 61 81 25 49 33 20 cd 8a 2a f0 60 e0 99 94 c5 d5 fe 40 6c 32 92 24 0d 9c 00 dc 0a 7c 01 f8 0c f0 ad bc 91 6c 33 16 49 da 37 16 58 92 b4 0f d2 ac a8 03 27 51 ee b7 Data Ascii: o$w$=(IKb"4o%IR/CYd}=Y4w,$iYRIB`T$I9O(nIX$ivY`I,J"<8$I=\\|%iX`I,HlK].IRX$o$"I3KfP5h$iw>\7qca%I3 *`@l2$\|l3I7X'Q
2025-03-13 09:29:22 UTC	5930	IN	Data Raw: 77 a7 59 71 aa 51 68 2e 58 60 69 d6 a5 59 b1 16 78 3b f0 18 d3 90 24 49 92 a4 be 71 38 f0 9e 34 2b 8e 31 0a cd 36 0b 2c cd aa 34 2b 96 02 6f 04 9e 64 1a 92 24 49 92 d4 77 36 02 ef 4c b3 e2 60 a3 d0 6c b2 c0 d2 ac 49 b3 62 01 f0 1a e0 59 7e ae 49 92 24 49 52 5f 8a 80 c7 02 6f 4b b3 22 35 0e cd 16 4b 05 cd 8a 34 2b aa c0 15 c0 65 40 cd 44 24 49 92 24 a9 af 3d 05 78 6d 9a 15 8b 8d 42 b3 c1 02 4b 33 2e cd 8a 18 78 3a 90 01 0b 4d 44 92 24 49 92 fa 5e 0c 5c 0a 5c 95 66 45 dd 38 34 1b 9f 60 d2 8c 49 b3 22 02 ce 02 de 0c 2c 33 11 49 92 24 49 1a 18 43 c0 35 c0 a5 69 56 54 8c 43 33 c9 02 4b 33 ed 14 e0 5a 60 9d 51 48 92 24 49 d2 c0 49 80 d7 02 4f ed 0c 38 48 33 c2 02 4b 33 26 cd 8a 23 81 77 01 47 98 86 24 49 92 24 0d ac 55 c0 5b 81 47 1a 85 66 8a 05 96 66 44 9a 15 Data Ascii: wYqQh.X`iYx;$Iq84+16,4+od$Iw6L`lIbY~I$IR_oK"5K4+e@D$I$=xmBK3.x:MD$I^\\fE84`I",3I$IC5iVTC3K3Z`QH$IIO8H3K3&#wG$I$U[GffD
2025-03-13 09:29:22 UTC	7116	IN	Data Raw: 73 3e 9b e4 33 ca 00 00 1b e3 8b 4f cf d4 7f f6 e3 b3 9d b9 19 e1 15 00 b0 a9 bc 2f c9 1f ef f6 fa ae 61 d6 49 80 b5 4e dd 5e bf 9b e4 4f 27 d9 a3 1a 00 30 5e 75 49 3e fa 60 bb ee 3d 3f 5b ed df 59 b9 7e 01 00 36 9b 4e 92 9f 4d f2 b4 52 ac 8f 0b c0 f5 fb c9 24 1f 54 06 00 18 af ba 24 8f 77 5b 83 ff f8 fb 77 0c ee 3c d0 72 ed 02 00 6c 56 0f 26 f9 f9 6e af bf 43 29 d6 ce 45 e0 3a 74 7b fd 87 93 fc 7c 92 19 d5 00 80 f1 a9 4b 72 c7 fe aa fe 8f 3e bb a3 7e e2 8e b6 bf 77 01 80 cd ee 47 a3 19 66 5d 04 58 6b b4 bc 5e f5 67 93 3c a1 1a 00 30 3e a5 24 bb 67 53 fe 9d ef 9b 1d 7e fc 91 ce 4c 62 c7 41 00 60 d3 3b 92 d1 40 77 e3 88 d6 48 80 b5 76 ef 4d f2 c7 95 01 00 c6 7c 91 d2 4a f9 99 ef 99 5d fc a9 67 67 5b ad 4a 78 05 00 6c 19 9f 89 0d e1 d6 7e 6d a8 04 ab d7 ed Data Ascii: s>3O/aIN^O'0^uI>`=?[Y~6NMR$T$w[w<rlV&nC)E:t{\|Kr>~wGf]Xk^g<0>$gS~LbA`;@wHvM\|J]gg[Jxl~m
2025-03-13 09:29:22 UTC	8302	IN	Data Raw: 85 d2 b2 84 10 00 a6 c2 e3 49 8e 34 f1 40 4d 05 58 47 92 3c e6 b8 00 00 30 41 f5 cb 27 cb 70 61 29 e2 2b 00 98 0e 47 92 3c d2 c4 03 35 15 60 99 7f 05 00 c0 44 2d 0c 32 7c e3 6c bd a8 fb 0a 00 a6 c6 ce 24 ef 6b e2 81 9a 0a b0 9e 4e 32 e7 b8 00 c0 74 69 b7 bc 93 67 fb 38 7b a9 74 5e 39 55 cf 09 b0 00 60 6a 54 49 9e e8 f6 fa 33 37 fb 40 37 1d 60 75 7b fd 9d 49 de e5 98 00 c0 f4 99 b1 17 1b db c8 d9 4b a5 7e fd 74 69 0b b0 00 60 aa 3c 92 e4 f6 9b 7d 90 26 3a b0 6e 4f f2 a0 e3 01 00 d3 67 7e a9 28 02 db c6 c9 0b e5 e2 a5 a5 d4 f2 2b 00 98 2a f7 27 b9 f3 66 1f a4 89 00 eb 8e 24 f7 39 1e 00 00 4c d2 b7 4f d7 d5 a0 16 da 02 c0 94 d9 93 06 56 ee 35 11 60 3d 9d 64 97 e3 01 00 c0 24 bd 72 aa de 3d 18 36 36 e3 15 00 68 46 2b c9 7b 9b 78 90 75 eb f6 fa d5 f2 8b d0 a9 Data Ascii: I4@MXG<0A'pa)+G<5`D-2\|l$kN2tig8{t^9U`jTI37@7`u{IK~ti`<}&:nOg~(+*'f$9LOV5`=d$r=66hF+{xu
2025-03-13 09:29:22 UTC	6676	IN	Data Raw: a5 f4 91 69 1c ee da cf 0b 38 b0 04 21 7c ac fa aa 67 01 00 00 00 60 e9 dc d1 6c f1 d1 be 5a 86 02 eb b6 f6 f1 18 46 00 00 00 00 1e d2 e7 e6 7f f6 d5 be 17 58 d3 38 1c af 3e 94 d3 08 01 00 00 00 96 cd f9 d3 38 dc bb df 17 71 60 49 c2 f8 64 f5 65 cf 04 00 00 00 c0 d2 b8 a3 ba 78 19 2e 64 59 0a ac 9b ab 8f 7b 2e 00 00 00 00 96 c6 e7 9a 9d 40 b8 ef 96 a2 c0 9a c6 e1 54 75 5e 75 dc b3 01 00 00 00 b0 14 3e 30 8d c3 fd cb 70 21 07 96 28 94 4f 57 d7 79 36 00 00 00 00 f6 dd 1d d5 05 cb 72 31 4b 53 60 4d e3 70 43 75 a1 e7 03 00 00 00 60 df 7d a6 ba 72 59 2e e6 c0 92 85 73 5e 4e 23 04 00 00 00 d8 4f db cd 4e 1f 3c bc 2c 17 b4 6c 05 d6 e5 cd 06 84 01 00 00 00 b0 3f 96 6a fb 60 2d 59 81 35 8d c3 cd d5 87 3c 27 00 00 00 00 fb e6 e3 2d d9 9c f2 03 4b 18 d2 07 ab 2d cf Data Ascii: i8!\|g`lZFX8>8q`Idex.dY{.@Tu^u>0p!(OWy6r1KS`MpCu`}rY.s^N#ON<,l?j`-Y5<'-K-
2025-03-13 09:29:22 UTC	6532	IN	Data Raw: 56 62 bd bf d9 40 46 00 00 80 aa cf 54 8f ab de 30 ff 02 1c 38 43 0a 2c 58 80 69 1c ae ae 1e 5f bd 26 27 14 02 00 c0 a6 db ae 3e 50 3d 76 1a 87 8f 4c e3 b0 2d 12 38 3b 0a 2c 58 90 69 1c 6e ae 9e 5c fd 71 b3 01 8d 00 00 c0 e6 39 51 bd be 7a fc 34 0e 57 8a 03 16 43 81 05 0b 34 8d c3 5d d5 33 ab 5f cb 09 85 00 00 b0 69 0e 37 fb 42 fb 49 d3 38 dc 28 0e 58 1c 05 16 2c d8 34 0e 0f 56 2f ae 9e 50 5d 23 11 00 00 d8 8c ff 0a 54 bf 5e 3d 63 1a 87 3b c4 01 8b a5 c0 82 dd f8 cd 35 0e a7 a6 71 78 4b f5 13 d5 45 39 a1 10 00 00 d6 d9 b5 d5 cf 56 2f 9c 7f a1 0d 2c 98 02 0b 76 d1 34 0e 97 35 3b 75 e4 dc 66 7b e1 01 00 80 f5 b1 d3 ec 0b eb 9f 9c c6 e1 ed d3 38 38 95 1c 76 89 02 0b 76 d9 34 0e d7 57 bf 50 fd 59 86 bb 03 00 c0 ba 38 d1 ec 8b ea c7 4d e3 70 89 38 60 77 29 b0 Data Ascii: Vb@FT08C,Xi_&'>P=vL-8;,Xin\q9Qz4WC4]3_i7BI8(X,4V/P]#T^=c;5qxKE9V/,v45;uf{88vv4WPY8Mp8`w)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49761	216.198.79.1	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:29:22 UTC	513	OUT	GET /img/doc.png HTTP/1.1 Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _ga_MR52T79VEH=GS1.1.1741858159.1.0.1741858159.0.0.0; _ga=GA1.1.219411324.1741858159
2025-03-13 09:29:22 UTC	540	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 244103 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline; filename="doc.png" Content-Length: 5723 Content-Type: image/png Date: Thu, 13 Mar 2025 09:29:22 GMT Etag: "95382a6dab40d5911185a921c53e6f6b" Last-Modified: Mon, 10 Mar 2025 13:40:59 GMT Server: Vercel Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Vercel-Cache: HIT X-Vercel-Id: iad1::qkn6r-1741858162383-fcaf26b73977 Connection: close
2025-03-13 09:29:22 UTC	2372	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 00 00 16 22 49 44 41 54 78 5e c5 9b 6b ac a5 57 79 df 7f cf 5a 6b ef 7d f6 99 73 9d 61 2e 1e cf d8 78 3c b6 42 cc a5 83 12 15 4c 88 1c 6a 0a 84 02 09 90 96 24 25 55 3f 44 91 7a 51 0b 91 10 97 24 6d 2a 12 a2 88 24 52 a9 d2 2a 10 68 55 11 28 a9 d3 a2 60 e3 d4 2d c1 34 24 84 5b a8 cd 4d b1 0d b6 c7 e3 f1 dc 2f e7 cc 39 67 bf ef bb d6 13 b1 9f 47 6b e9 c8 42 11 02 d4 25 ed 79 df f3 ee f7 dd 7b fd 9f eb ff 79 9e 3d 32 dc f7 f6 53 e4 7e 19 14 44 40 22 48 00 cd 10 46 88 08 5a 7a 44 22 00 84 04 65 80 b4 00 25 a3 b9 03 01 10 44 02 a8 a2 5a 90 38 46 f3 0c b4 80 2a c4 91 9d 4b b0 f7 fa 2d bb 2e c1 5e 28 e4 01 42 b4 fb 8a 9f 2b 10 42 fb ce 3c 80 66 7c b5 fb 11 3b cf bd Data Ascii: PNGIHDR<<:r"IDATx^kWyZk}sa.x<BLj$%U?DzQ$m$RhU(`-4$[M/9gGkB%y{y=2S~D@"HFZzD"e%DZ8F*K-.^(B+B<f\|;
2025-03-13 09:29:22 UTC	1015	IN	Data Raw: c9 81 c0 ac 9b f1 d8 a9 33 cc ba 8e 56 1e 55 da d8 58 94 d4 8a 69 0e a4 51 4d 2a 33 13 cb bd 35 f2 ef 5d 5b e1 86 c3 07 48 31 78 d0 c3 fd 3d 22 25 f8 00 20 54 90 95 5b 34 6c 76 44 08 f8 a0 49 dc 57 01 f3 0b b1 42 c1 7d a1 95 87 98 f4 83 28 0a f4 b9 a0 40 0c c6 84 50 d7 62 c3 8c ba 69 7b 10 72 f9 59 04 ce b9 b8 2c d5 d2 90 56 b0 35 19 2c 4c c6 c4 20 76 0d 65 50 28 44 63 57 b9 03 5c 11 9a 6b ff aa 59 a6 f8 df 23 08 81 e4 4e ed 6f fa 31 2d 00 4a 9b 1e b4 36 8a a4 09 94 81 7e 18 1c a8 45 dc d1 28 71 db 2d cf 74 8b 32 13 35 22 11 2a cd 14 81 92 4d 50 8a d6 c2 c1 e9 a8 b9 06 90 82 ab 11 69 2f 32 51 0a 11 18 9c 23 8b 4f 14 55 62 dd 67 73 3f 9f 68 b8 30 05 6b f7 24 fa 2d c0 9b ef 8c 6a 63 5b 6a 5d 59 bc 96 b4 49 a1 0e 33 1f 5f 28 01 dc fc 8a cb 27 78 3e 34 bf 0e Data Ascii: 3VUXiQM35][H1x="% T[4lvDIWB}(@Pbi{rY,V5,L veP(DcW\kY#No1-J6~E(q-t25"MPi/2Q#OUbgs?h0k$-jc[j]YI3_('x>4
2025-03-13 09:29:22 UTC	2336	IN	Data Raw: 02 90 55 4d c3 b9 f0 c4 53 e7 e7 3d 2d 05 42 65 56 ea 56 10 e7 11 5a b4 b0 be 58 78 eb ff dd cb 13 9b 53 6e db 97 39 bb 09 ff e4 76 e1 25 47 84 ff f2 ff 94 bf 7c 54 39 b0 04 5d 36 5f de d8 56 fe db 5f 15 fe e9 73 12 ff e9 f3 99 df fe 44 61 ef a2 00 70 a9 13 f6 87 8c f4 81 77 5f 7a 05 af 5b f9 24 61 d4 93 cb 94 36 80 17 3b 2f 81 54 67 32 32 f6 69 43 07 c1 53 52 18 b5 29 3d 42 6b 7f f6 64 27 1e c1 49 fe e6 4e c7 e3 a7 ce cc fd 39 78 13 af cd ba da 47 ec 9d 64 1e 7e 72 cc fd a7 0e 70 78 19 1e 3a 0f ff f2 c7 84 77 be 30 90 10 56 f7 29 bf f0 c1 cc d5 19 5c b8 06 7b 57 98 6b f0 dc 06 bc fe 23 03 97 af c1 24 09 8f 9c 87 e7 3f 13 de f9 92 c8 bd 8f 16 3e f0 17 85 cf cb 0a 7f bc 75 07 af da 77 1f 32 5b 45 5b 2d e6 e5 ae 90 6c 06 5c fb 54 06 b6 fd 0c c9 83 55 a6 4d Data Ascii: UMS=-BeVVZXxSn9v%G\|T9]6_V_sDapw_z[$a6;/Tg22iCSR)=Bkd'IN9xGd~rpx:w0V)\{Wk#$?>uw2[E[-l\TUM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49762	216.198.79.1	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:29:22 UTC	518	OUT	GET /img/save_img.png HTTP/1.1 Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _ga_MR52T79VEH=GS1.1.1741858159.1.0.1741858159.0.0.0; _ga=GA1.1.219411324.1741858159
2025-03-13 09:29:22 UTC	545	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 113754 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline; filename="save_img.png" Content-Length: 7550 Content-Type: image/png Date: Thu, 13 Mar 2025 09:29:22 GMT Etag: "8d3bcd1278891fc1e52d38e72549b3d0" Last-Modified: Wed, 12 Mar 2025 01:53:27 GMT Server: Vercel Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Vercel-Cache: HIT X-Vercel-Id: iad1::7khjg-1741858162433-f95fd5c3a504 Connection: close
2025-03-13 09:29:22 UTC	2372	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 03 00 00 00 0e ba c6 e0 00 00 02 fa 50 4c 54 45 c3 e2 c9 b5 dc bb b0 da b8 a9 d6 b2 a6 d4 ae a2 d2 aa 9d d0 a6 9a cf a4 98 ce a3 c3 e1 c9 99 cf a2 ef bc 57 fc f2 df fc f4 e3 fc f2 e1 fb ec d0 ac 4d 00 fc f1 dc ff f5 df ff f9 e4 fa e6 bf ff ff ef ff ff f7 ff fd ea f8 e2 b7 eb dc c6 c3 af 9a 96 7c 6b 7e 60 50 a8 8f 7b ce c0 aa fd f1 dd e1 d3 be 8c 6d 57 4e 27 15 37 0f 03 3e 16 07 55 2e 18 5f 39 26 fc f1 da 48 20 10 2d 07 00 43 1b 0a 6c 49 34 ff f4 da 24 01 00 4a 23 12 f8 c9 54 d9 ca b3 45 1f 0f af 99 87 f7 ed da a0 75 4b ea b9 47 7f 56 35 f2 c1 7f eb bb 7b ac 87 54 91 67 42 de ae 73 e3 b4 77 de af 73 de b0 75 d9 ab 71 de ad 6e be e0 c4 e2 ac 68 b2 f0 d9 bb de c1 b8 dd bf b2 60 16 b6 Data Ascii: PNGIHDRxxPLTEWM\|k~`P{mWN'7>U._9&H -ClI4$J#TEuKGV5{TgBswsuqnh`
2025-03-13 09:29:22 UTC	1010	IN	Data Raw: 61 35 af c4 58 76 bb 60 63 ae 69 77 38 5b 14 d5 e3 86 dc 76 70 f9 8a 8b aa fa 1e 77 39 60 88 29 89 42 dd bd 59 80 97 12 28 ae 95 77 96 e7 51 d5 d5 2a 4e 5a 33 da 48 d7 64 6c 82 05 6e 2d 36 ea 5e 37 ec b5 88 e4 37 d3 bd 6a b3 e4 94 44 b3 a4 09 a5 c2 6d 70 01 36 c8 ea 6a 8a 8b fb 98 07 08 8c e6 46 da 29 80 4b 61 93 1b 3b 15 b7 9b 59 54 57 de 00 ca 8b bf a8 81 96 27 5d d4 69 76 54 d8 8d bf e3 0c 61 c4 61 35 2b fe 63 95 56 57 d6 a2 91 ad 11 f2 95 b1 e1 92 3d 7e 8f c5 65 b9 01 9f bb 93 52 0d ba e2 db 27 a3 b8 34 bb a0 d9 ea 2e e1 f4 41 6b 31 15 bf 3c 7f eb bd 2a f6 31 81 3f c1 e4 a2 73 4f 76 a9 3e 2f 58 5c 87 dc e2 55 dd 81 0a 17 fe 76 dd f4 7a e1 3a 19 ae 7a 0e ba 1c 1a cf 30 31 53 93 4d 51 8a 8d 64 72 11 8a ab ab ea 65 02 53 33 a5 0f b1 60 1a 10 b2 cd a7 83 Data Ascii: a5Xv`ciw8[vpw9`)BY(wQNZ3Hdln-6^77jDmp6jF)Ka;YTW']ivTaa5+cVW=~eR'4.Ak1<1?sOv>/X\Uvz:z01SMQdreS3`
2025-03-13 09:29:22 UTC	4168	IN	Data Raw: 01 24 b1 a0 ef 0a fe ec 59 80 f9 5c 0d c5 19 1b 81 c5 52 09 8a 9f f4 b5 eb 87 b7 c3 15 8f ad 56 c6 15 97 ed c3 7e d5 27 b9 44 bb 5d b4 c0 4b 31 58 0d c5 00 1f 1b 67 91 24 77 8c e1 88 87 82 cf bf 05 30 f5 31 fe e6 f4 9a 90 b7 36 0e ae 2e 5b b3 d2 a9 76 05 c3 0f 9a 3d 10 0c b6 e9 4a 73 de 25 a1 08 19 bc 15 27 bf 78 64 de 3a 36 4e 79 1d 43 44 21 96 ef 76 01 7f e7 ee 33 1f 2e 5f 4b 19 88 dc a6 00 c5 08 2e d6 62 8b ee 56 d4 10 c8 21 0a 96 4b 37 c1 01 b7 ea 51 9a 9c 0e 3a 74 21 c4 cc a1 1c b8 64 f5 22 81 c7 2c f0 c4 04 24 13 7a f8 61 c5 85 60 30 3d a6 d2 c8 2c 65 a0 b7 c2 76 36 78 d5 76 e5 6e 0f ad 07 86 5a 4e 87 7b 7a 75 8f c7 df 58 34 b5 52 89 bb c9 be 9e 4d 2c d0 5a 9c 5f bc 35 77 ec 38 98 78 45 27 26 a3 48 32 72 3c 3c bc ab 62 14 97 75 f4 49 63 49 48 90 cb Data Ascii: $Y\RV~'D]K1Xg$w016.[v=Js%'xd:6NyCD!v3._K.bV!K7Q:t!d",$za`0=,ev6xvnZN{zuX4RM,Z_5w8xE'&H2r<<buIcIH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49756	216.198.79.193	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:29:22 UTC	682	OUT	GET /case/img/star.png HTTP/1.1 Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:29:22 UTC	363	IN	HTTP/1.1 404 Not Found Cache-Control: public, max-age=0, must-revalidate Content-Length: 79 Content-Type: text/plain; charset=utf-8 Date: Thu, 13 Mar 2025 09:29:22 GMT Server: Vercel Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Vercel-Error: NOT_FOUND X-Vercel-Id: iad1::qfkw8-1741858162383-8b11b1667b32 Connection: close
2025-03-13 09:29:22 UTC	79	IN	Data Raw: 54 68 65 20 70 61 67 65 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 66 6f 75 6e 64 0a 0a 4e 4f 54 5f 46 4f 55 4e 44 0a 0a 69 61 64 31 3a 3a 71 66 6b 77 38 2d 31 37 34 31 38 35 38 31 36 32 33 38 33 2d 38 62 31 31 62 31 36 36 37 62 33 32 0a Data Ascii: The page could not be foundNOT_FOUNDiad1::qfkw8-1741858162383-8b11b1667b32

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49754	216.198.79.193	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:29:22 UTC	681	OUT	GET /case/img/dir.png HTTP/1.1 Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:29:22 UTC	363	IN	HTTP/1.1 404 Not Found Cache-Control: public, max-age=0, must-revalidate Content-Length: 79 Content-Type: text/plain; charset=utf-8 Date: Thu, 13 Mar 2025 09:29:22 GMT Server: Vercel Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Vercel-Error: NOT_FOUND X-Vercel-Id: iad1::rz92j-1741858162442-7a749a432682 Connection: close
2025-03-13 09:29:22 UTC	79	IN	Data Raw: 54 68 65 20 70 61 67 65 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 66 6f 75 6e 64 0a 0a 4e 4f 54 5f 46 4f 55 4e 44 0a 0a 69 61 64 31 3a 3a 72 7a 39 32 6a 2d 31 37 34 31 38 35 38 31 36 32 34 34 32 2d 37 61 37 34 39 61 34 33 32 36 38 32 0a Data Ascii: The page could not be foundNOT_FOUNDiad1::rz92j-1741858162442-7a749a432682

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49755	216.198.79.193	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:29:22 UTC	687	OUT	GET /case/img/no_avatar.png HTTP/1.1 Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:29:22 UTC	363	IN	HTTP/1.1 404 Not Found Cache-Control: public, max-age=0, must-revalidate Content-Length: 79 Content-Type: text/plain; charset=utf-8 Date: Thu, 13 Mar 2025 09:29:22 GMT Server: Vercel Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Vercel-Error: NOT_FOUND X-Vercel-Id: iad1::6p6kb-1741858162457-84dee695b4e3 Connection: close
2025-03-13 09:29:22 UTC	79	IN	Data Raw: 54 68 65 20 70 61 67 65 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 66 6f 75 6e 64 0a 0a 4e 4f 54 5f 46 4f 55 4e 44 0a 0a 69 61 64 31 3a 3a 36 70 36 6b 62 2d 31 37 34 31 38 35 38 31 36 32 34 35 37 2d 38 34 64 65 65 36 39 35 62 34 65 33 0a Data Ascii: The page could not be foundNOT_FOUNDiad1::6p6kb-1741858162457-84dee695b4e3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49764	216.198.79.1	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:29:24 UTC	524	OUT	GET /img/meta-logo-grey.png HTTP/1.1 Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _ga_MR52T79VEH=GS1.1.1741858159.1.0.1741858159.0.0.0; _ga=GA1.1.219411324.1741858159
2025-03-13 09:29:24 UTC	553	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 113756 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline; filename="meta-logo-grey.png" Content-Length: 105511 Content-Type: image/png Date: Thu, 13 Mar 2025 09:29:24 GMT Etag: "ffba640622dd859d554ee43a03d53769" Last-Modified: Wed, 12 Mar 2025 01:53:27 GMT Server: Vercel Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Vercel-Cache: HIT X-Vercel-Id: iad1::vwhmc-1741858164738-bdd5bb95cc20 Connection: close
2025-03-13 09:29:24 UTC	2372	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 84 00 00 00 f0 08 06 00 00 00 58 15 aa 71 00 00 14 a9 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 65 78 69 66 00 00 78 da a5 9a 69 96 1b b9 95 85 ff 63 15 5e 02 e6 61 39 00 1e 70 4e ef c0 cb f7 77 41 4a 2e a9 ca c7 5d dd 4c 25 49 91 11 08 e0 0d 77 40 a4 3b ff fc 9f eb fe c1 23 0f 5f 5d 2e ad d7 51 ab e7 91 47 1e 71 f2 a6 fb cf 63 be e7 e0 f3 7b 7e 8f 9e 7d fa 7e fa cb e7 ee 7e cf f1 91 8f 74 48 fa 9e 50 3f af e1 c7 e7 df 13 7e bc 86 c9 bb f2 87 81 fa fe 7e b1 7e fd 62 e4 ef f8 fd b7 81 e2 e7 25 69 46 7a 6f df 81 c6 77 a0 14 3f 5f 84 ef 00 f3 b3 2c 5f 47 6f 7f 5c c2 3a 9f 57 fb b1 92 fe f9 75 7a ca fd d7 69 ff e9 ff 8d e8 59 e1 3a 29 c6 93 42 f2 3c a7 f4 9d 40 d2 6f 72 69 f2 45 e4 Data Ascii: PNGIHDRXqzTXtRaw profile type exifxic^a9pNwAJ.]L%Iw@;#_].QGqc{~}~~tHP?~~~b%iFzow?_,_Go\:WuziY:)B<@oriE
2025-03-13 09:29:24 UTC	1002	IN	Data Raw: 96 27 c6 1c 8c d9 d0 0f 85 db 12 29 82 75 81 18 04 39 5d 03 ef 72 05 a0 1a 9c 26 58 34 ea 80 d9 f1 c0 84 53 f2 e4 a0 e9 97 75 17 99 b6 c5 3d e8 dc 88 40 90 d2 9d f0 3b c3 8e c7 10 28 23 c0 fe bd 23 23 7a 5d 52 45 92 cb 38 c2 33 a9 5c 0c 7e 6d ae a2 8f f6 46 02 61 1b 82 24 2d ac 14 19 69 40 21 84 5b 4d 5c 7a 98 30 c1 1d 54 fb 93 59 00 d1 e7 1b d6 8e 74 00 fe e7 76 bd bf 89 42 59 14 78 7c 7d aa 8a 05 c6 c0 2b 9a 00 d1 4a 52 9e 23 ad 88 3f 60 43 43 c0 85 48 bf 85 be ac 38 15 59 18 57 55 b6 07 19 56 fa 50 81 41 3a f0 12 30 4b 51 64 50 33 ed 32 52 40 05 d1 f0 1d ed 40 0e 91 6b 7e 62 91 70 18 1c 2c f0 61 89 f0 5a 26 25 50 43 86 5b 47 60 9a 56 7d de e8 7a 2e d0 11 14 18 87 0a 97 4d 3e 0a 2c 16 0b d1 e9 bb 2b 4c bf d4 09 94 5e a1 8c 86 3c de 9b b6 14 34 63 b3 81 Data Ascii: ')u9]r&X4Su=@;(###z]RE83\~mFa$-i@![M\z0TYtvBYx\|}+JR#?`CCH8YWUVPA:0KQdP32R@@k~bp,aZ&%PC[G`V}z.M>,+L^<4c
2025-03-13 09:29:24 UTC	4744	IN	Data Raw: 21 b1 30 9f f1 2c 25 2d 08 1f 01 65 dd a8 16 94 13 65 70 37 20 aa cd 2d 72 8f 9d ca 05 25 84 49 2f 8e 1c c9 24 cc b0 e1 dd 63 e0 56 c0 fb e1 af 18 f6 16 aa ac 23 ed f1 97 fb 74 ab 37 e0 79 9b e4 42 4b 68 43 1e 48 04 d3 56 ca d6 ce e8 c2 c2 a3 06 8e 0a b4 c8 ca 69 d7 5a 6f ea 40 23 c3 69 06 86 43 9c 63 6f b4 ec a4 db 2b d2 85 b6 4f ac 10 1e 83 a9 e3 70 58 69 54 a8 b4 36 a5 8d 2b ab 17 41 cc ea c8 1c 3e a4 15 58 10 4c 0b d3 d3 01 44 dd 87 5b 6e 91 53 e5 5b 84 09 6c 82 7d 21 b1 0c 74 51 c8 5b b0 7b a0 ec 0b 02 e0 31 8e b6 af da 1f 4a 82 9e f2 74 a1 ea 9a 02 f2 9c 32 f0 38 e5 14 24 5a 82 ef 3d 98 2d a3 84 c3 53 9f 21 92 59 3d c4 19 d0 a9 69 10 1e 84 3d 01 cf f4 25 e9 6a 68 4d 84 21 8a e9 26 51 3a 61 dd da de 12 8e 3a 92 d1 81 48 b4 13 a1 08 ac 5a 86 7f 2b 02 Data Ascii: !0,%-eep7 -r%I/$cV#t7yBKhCHViZo@#iCco+OpXiT6+A>XLD[nS[l}!tQ[{1Jt28$Z=-S!Y=i=%jhM!&Q:a:HZ+
2025-03-13 09:29:24 UTC	5930	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2025-03-13 09:29:25 UTC	7116	IN	Data Raw: 08 82 20 42 57 b9 1b 59 62 01 26 44 41 04 00 48 e3 24 8f fa 28 df ab 00 e8 48 0d a3 49 5d c8 2d a1 61 0f df dc 83 d5 34 51 38 15 97 0b bb ce 57 9f 4c 09 a2 fc f5 a7 d7 1b 76 4a 12 02 ac 05 72 87 4b c7 ec fb 22 32 c3 a6 16 2a 8a e0 98 41 26 00 b3 43 ad 91 c0 04 51 bf cb 82 cb 1e 79 f4 c9 be 91 c1 a1 05 ab 9f de 7d d3 c5 67 2f dc 3d 53 c7 ef be fb 9e 98 fd 9f ff e2 af ae 6e 36 b3 5f 9b 3d 6f e0 82 46 23 ed b6 59 d3 1b e9 90 83 63 46 10 04 b9 70 f7 ce 9f 46 fb 14 5f 6e 15 df b4 16 e6 44 68 f5 0e 77 cc de 21 16 ce b7 0b 51 ec eb 7a 8e 42 ac 03 80 46 ee 08 c9 b9 90 6c 45 1f 5d 2b ef 85 00 02 d2 34 cd c5 63 04 30 e0 7d 48 bc 20 4d 13 0b 68 03 45 3e ca 49 ad b6 22 50 88 c2 00 4c 28 96 a2 de d3 6c a3 d9 7d d3 0d 37 f7 fe eb 8a 3b fe f2 33 1f fe c0 3a 99 d6 5e 93 Data Ascii: BWYb&DAH$(HI]-a4Q8WLvJrK"2*A&CQy}g/=Sn6_=oF#YcFpF_nDhw!QzBFlE]+4c0}H MhE>I"PL(l}7;3:^
2025-03-13 09:29:25 UTC	8302	IN	Data Raw: 91 e4 45 93 8f 62 55 7a bb ec f0 fe 83 bb 0b 06 1b 66 cf 1a b8 65 f9 b2 a5 f7 9d f3 de cb f7 9c 3f bf 7b e8 e5 be af dc e1 72 28 7f 6c 64 e6 fb 6e bf fd de 81 ad 2f ec 5f bc 76 dd 53 1f 1b 3b 78 f0 c2 52 a9 74 da ac de be 9e 46 9c 9a 91 e1 61 18 13 a0 d2 d3 8d 24 89 e1 5c 86 20 37 63 51 da f7 e4 6b 36 13 94 cb e5 c9 d4 d3 96 08 e4 56 5b 03 e7 27 58 37 d9 9b 50 2b 02 d8 c2 65 b6 dd cc 5e 29 85 62 54 84 73 0e 8d 46 03 a9 cb 50 28 14 c0 cc 0b eb b5 c6 55 b7 dc 7e e7 ae bd 7b 27 be 75 c2 09 5d 07 8e f4 1e 9f d8 bb 77 f6 f7 bf fe 9d cf 24 49 7c 55 6f 6f cf bc 89 6a 0d 2a 30 d0 4a c3 59 87 38 f5 62 50 91 69 a7 c8 b5 16 c2 00 60 33 d7 6e c1 a1 88 db 66 0e 3a 6f f5 61 02 72 b6 d1 dc 96 d9 e4 e6 cb 2f 7f f7 37 3e fb 89 ab 9f fb 8f bf f7 99 19 75 fe 5e 73 c5 15 63 Data Ascii: EbUzfe?{r(ldn/_vS;xRtFa$\ 7cQk6V['X7P+e^)bTsFP(U~{'u]w$I\|Uooj*0JY8bPi`3nf:oar/7>u^sc
2025-03-13 09:29:25 UTC	6676	IN	Data Raw: 4c 4a 24 4b 09 25 42 50 69 20 19 74 d2 26 42 90 16 09 85 d6 8a 52 dd 72 dd 2a 46 0b c0 e9 ef 35 e3 e9 a2 48 6c bf 1e d0 93 2a 67 74 7d f6 b3 97 1d d3 20 95 99 2b 8f 3c b2 7a d2 f3 eb 57 9d fd e5 bf f9 ce a5 06 76 6e 21 28 4d 13 50 33 b4 a5 76 25 fc 12 04 07 20 09 c3 16 6c 19 c4 04 41 3e 98 18 96 05 90 a7 3c 58 30 13 98 05 88 a4 20 72 76 a0 bb d7 9c ab cb 90 9c 06 16 88 8c d6 ca 0b a2 7a 12 0d 6c da b1 ed 26 b9 ed ed 2d 6b 5e 93 6f fd f9 5f 7f e7 e5 49 13 27 3c 7d c3 95 f3 77 9c 7a ea a9 bb 0f e7 df ba 78 31 fb c5 e2 d2 d6 3d 7e 5c 0c fa e3 02 5b 51 d0 88 7d 0f 4a 1a 61 48 27 89 14 be af 00 c0 18 df 06 32 66 8e 63 91 24 ec 19 e5 7c b2 44 64 3d e1 db 04 ca 08 5b d3 ca f3 e3 48 9b 6a db 84 96 ed 9f fd d0 87 de d3 da e6 47 35 20 5c be a5 b7 f3 47 df fe db 5f Data Ascii: LJ$K%BPi t&BRrF5Hlgt} +<zWvn!(MP3v% lA><X0 rvzl&-k^o_I'<}wzx1=~\[Q}JaH'2fc$\|Dd=[HjG5 \G_
2025-03-13 09:29:25 UTC	10674	IN	Data Raw: 80 0a 41 69 fa c4 ce c9 57 6f dd bd fb bf dd 77 d7 6d 5f 78 64 d9 6b d3 df cd b9 d8 d7 53 b4 82 38 61 66 9b 8f b3 e0 26 40 d5 44 c3 15 c3 7f e7 a1 3d 8d d8 66 e7 4f f6 3b b2 3e 02 38 18 a9 8f ba fe b3 f1 4d df 27 52 d5 ed fc 75 31 f2 f7 15 cd 7f 4f 36 97 29 df a2 f9 f7 91 7e ce a3 ce c8 c0 80 fb 9b 2c cc 20 20 c0 cc 50 42 40 28 32 c6 54 de f3 bd f9 cb e5 ab ce be ff f6 87 fe ff 0d 6f bc f9 87 90 ea 52 19 f8 15 4e 81 13 a8 c1 36 69 ee da ba 34 12 9b 8a 0a 41 70 53 24 be 01 74 de 69 1f 1a 91 1f da b3 7b 6c a4 bd e7 ee 2f 9d 02 d3 86 03 27 73 76 42 10 a4 e7 a3 a5 d2 86 fe fe 2a 94 1f cc ac 94 5a 3f fe b3 5f dc f1 a7 8b ef ff e5 88 77 9d 01 c0 c6 b2 e7 79 8d 33 a6 c9 31 90 31 09 9a d7 53 c6 38 20 34 af 6b 9b de 11 0d 46 82 10 82 89 69 f8 55 7d 22 03 42 66 2e Data Ascii: AiWowm_xdkS8af&@D=fO;>8M'Ru1O6)~, PB@(2ToRN6i4ApS$ti{l/'svB*Z?_wy311S8 4kFiU}"Bf.
2025-03-13 09:29:25 UTC	11860	IN	Data Raw: 91 4e 67 51 2e f9 51 91 04 84 c0 d7 23 04 d3 35 61 35 1d 3b b0 11 42 40 20 ee ab 8b d7 65 94 9c 50 bd e5 a0 ff 9d 30 a0 17 5a 9a 5b 57 5d 79 dd fc 0d f7 df 7e 7b c7 99 da 77 37 45 1c 21 5d 6b 99 df d9 f8 8b 65 2f 6c dd ba 6d d1 d1 ae de 0f 19 e6 c5 ae 50 93 8d b5 69 21 24 48 09 94 4b 41 64 cf 95 1b 05 7a 14 c9 8f 24 53 92 04 7f 42 c9 a8 52 68 86 2f 88 54 b8 33 12 1e 93 a4 57 32 69 c9 19 06 de 1e c5 de 0c 12 82 68 1c c8 4e 9c d5 80 b0 77 7b 47 8b d5 66 ba 85 4d 1b 54 d9 42 c7 02 4f cb cc 10 52 40 12 10 04 3e 48 ca 9e 09 0d 2d 1b 1b 2e bf fc 02 5c f4 38 63 ed da 4d 93 7e f6 f8 53 bf 2d 5c f7 1a 51 0e b2 49 a6 44 29 01 29 65 85 86 9e 70 fa b5 08 a3 b5 40 71 03 3e 57 7a 9f 4c 9c 1d 65 0b f8 91 c0 67 bb e7 a5 6f 7a ed b9 15 2f 33 f3 af c6 63 b5 e2 6c 8f a6 f6 Data Ascii: NgQ.Q#5a5;B@ eP0Z[W]y~{w7E!]ke/lmPi!$HKAdz$SBRh/T3W2ihNw{GfMTBOR@>H-.\8cM~S-\QID))ep@q>WzLegoz/3cl
2025-03-13 09:29:25 UTC	10234	IN	Data Raw: 19 30 6c 21 2b 79 1b 51 d9 9b 95 9f 89 4d 19 f6 c9 47 27 b9 54 4e 2e 5f 38 7a c9 be 7d fb ea 00 9c d5 80 d0 3a 65 16 c2 b2 b1 c7 17 a4 7f af 3b de a7 3a 7a 8e 1e 6e 2f 14 fa 67 3a a9 2c 85 a6 36 19 c0 20 c1 b1 1f 7c 6a 73 63 83 b0 27 93 4e bd f1 c1 a5 bf d1 f5 1e 9e aa 0f 03 78 09 c0 29 d9 8c 69 75 13 7c c7 91 3d da 5a ad 24 54 ad 9f 34 18 ba 5c 41 7d f2 e8 8f 6e 2b 04 29 e2 b3 be 98 cf 28 a9 4c ef a1 de 2c 0b 6e 20 19 b3 8b 0e c1 34 88 93 ce ea 0c 68 a4 36 5c 76 bd 74 df 9c 39 53 cf fb 80 70 db b6 6d ed eb b7 bc f3 19 6b b1 30 55 97 f5 f2 c5 32 b2 75 f5 55 5a f9 a1 4b 73 80 c8 b6 8c f5 c6 12 06 c2 84 54 46 09 89 42 7f 1e 2d 4d 4d d0 41 d8 9f ef cf 6f 58 70 c5 a2 9f 2f 9c 3d 7b d4 b4 c4 77 2f bd be 63 e6 cc 39 3f cd 17 fa d7 11 a1 2c 18 c8 a4 3c 84 da 87 Data Ascii: 0l!+yQMG'TN._8z}:e;:zn/g:,6 \|jsc'Nx)iu\|=Z$T4\A}n+)(L,n 4h6\vt9Spmk0U2uUZKsTFB-MMAoXp/={w/c9?,<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49767	216.198.79.1	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:29:24 UTC	515	OUT	GET /img/phone.png HTTP/1.1 Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _ga_MR52T79VEH=GS1.1.1741858159.1.0.1741858159.0.0.0; _ga=GA1.1.219411324.1741858159
2025-03-13 09:29:25 UTC	543	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 62411 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline; filename="phone.png" Content-Length: 255341 Content-Type: image/png Date: Thu, 13 Mar 2025 09:29:24 GMT Etag: "3c18a93313e72ab9967152a4e92aa238" Last-Modified: Wed, 12 Mar 2025 16:09:13 GMT Server: Vercel Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Vercel-Cache: HIT X-Vercel-Id: iad1::scfqk-1741858164879-c27aa068a266 Connection: close
2025-03-13 09:29:25 UTC	2372	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 80 00 00 01 18 08 06 00 00 00 cc 10 47 90 00 03 e5 34 49 44 41 54 78 da ac 7d d9 8e 65 59 92 d5 b2 33 dc d9 c3 23 23 22 b3 32 aa ba 26 c8 ae 12 ad a6 5b aa 06 1a 21 90 78 84 1f e0 03 e0 0f 80 97 7c e3 5b 78 e5 43 e0 a5 25 ba 2a bb 86 cc ca b1 72 8c c9 c3 c3 fd fa 9d ce 39 86 db 36 5b b2 ad 2b 51 8c 37 e2 e8 de 33 ec 7d f6 60 db 6c d9 b4 5d f4 cb 7f f7 15 80 0b fc 3f 7f 24 be 27 00 0a a0 89 73 fe 6e 01 51 60 3a 01 cd c2 af e9 3e ca f1 19 f5 f2 ac 4f fa f8 d9 fa b9 1e e3 99 0e 50 ab 67 e5 75 8d 37 80 0e 51 56 80 66 e9 65 d4 eb f2 67 ae bd ac 2a 20 12 ed e9 01 3d 00 cd 06 90 0e 98 b6 d1 8e c9 ef 63 8a ba 7a 40 e6 5e e7 74 0b ff 58 db 46 7f 87 74 5e 0f e0 cf 4f 7b 40 ed de de db d9 3e 04 30 d8 b3 76 ee Data Ascii: PNGIHDRG4IDATx}eY3##"2&[!x\|[xC%r96[+Q73}`l]?$'snQ`:>OPgu7QVfeg =cz@^tXFt^O{@>0v
2025-03-13 09:29:25 UTC	1012	IN	Data Raw: d1 57 89 fb 6e 79 96 d3 b3 ca ba d3 04 b0 44 28 4b 2b 2b 1f ca 17 fc 9e 74 b1 96 00 6a ee 42 0d 7c bc 2e c2 97 40 48 74 72 e6 3f 1d 0b 20 02 46 5a f5 bc bd ed 45 05 38 e6 20 78 51 57 f8 5c 70 b7 9b 54 28 da fb 32 50 07 88 04 c7 18 02 4c 2a 79 10 95 6a 6f 4f 63 34 b9 0c 1e b0 0f 1a 5e 95 f3 b4 2e c0 2d 7f a6 d0 20 f8 d1 b8 25 88 2a 6d d3 e9 18 ef da 97 f7 4b 39 57 a3 85 00 45 04 78 b0 f3 18 2b 8e 37 f9 d6 08 e1 3a 26 ef a7 a5 43 2a 6b d7 34 d4 c2 2a 2d 3f c9 bf 2a 41 89 b4 ea d6 c2 0f 29 c4 9d 3f a8 cd 4d 79 bf 70 cd fa 0d e7 c5 d3 ad d3 76 fb 30 95 31 3d 85 b2 b1 60 7f 53 e1 b1 73 ae 81 72 67 e6 80 51 07 08 79 1f 60 6b 29 c0 82 ba 40 6f 82 ff 90 ce 30 f9 78 f3 93 80 95 02 dc 15 aa f1 ca 41 e9 f2 cf 21 c3 6b bb 6f 96 da 18 f7 a2 8c 3a c0 b3 7b 76 1e f3 64 Data Ascii: WnyD(K++tjB\|.@Htr? FZE8 xQW\pT(2PLyjoOc4^.- %mK9WEx+7:&Ck4-?*A)?Mypv01=`SsrgQy`k)@o0xA!ko:{vd
2025-03-13 09:29:25 UTC	4744	IN	Data Raw: 75 99 e5 f9 d1 63 4d 27 4e 63 18 03 04 72 0e e7 76 8d 16 4f 1f 03 90 f7 d8 73 ea e3 4e a5 a1 e9 b3 9f 12 2e fb 62 7d b1 39 99 9c 26 18 82 62 ee 47 20 fb ad 3b 6f 0b 41 3f f9 2b c3 22 84 bc cb fb 9b eb 66 95 3c a1 d9 a4 cb bf 7b ec ae fb c9 80 db df 0f de b0 f4 7b 34 18 d0 00 d1 3f 31 d7 a3 83 92 c5 4f 0b 6d 08 43 05 ec 5b 7a a7 8b 76 e9 0a 5f ff d4 9f 19 af 20 f3 25 70 12 3c fb f0 1f e1 5a 9f e2 b2 79 85 bd 2c 0b d0 9b e3 58 40 de ee fe fc 4e 36 98 e3 80 09 ad ab 30 02 ec cd 0a 28 1d 46 d8 d1 86 ea a7 68 44 0d fc 95 6b 0f db d7 b8 da 3f 46 db 5d e1 d1 0f 3e 05 ee ee 00 03 a9 f3 9f 7a df ad 8f 65 1d 3d 08 39 bc 4a 05 5b 1a 53 36 63 4c 47 f7 ee 38 e8 25 cd 07 bf ee d3 d3 32 6d ed 3b c0 de 98 bc 5c 1c 23 50 7e 53 d6 a6 77 8d 1e 8b 3e e8 6d 9b b2 b9 f0 9f 21 Data Ascii: ucM'NcrvOsN.b}9&bG ;oA?+"f<{{4?1OmC[zv_ %p<Zy,X@N60(FhDk?F]>ze=9J[S6cLG8%2m;\#P~Sw>m!
2025-03-13 09:29:25 UTC	5930	IN	Data Raw: 4b 60 33 a4 0e 43 3d c8 9e 3f b6 9e 3c 32 57 e8 e1 04 39 5c 01 73 63 7a 8b 8c 29 55 30 21 2a 12 14 92 99 95 ec 49 ce 93 01 11 44 50 7f 66 60 66 ec 6d db 46 d8 c5 c2 36 9e f5 b9 1e 5e 52 63 8e 71 6a 59 97 95 8d 79 9a b9 40 45 17 e0 e8 05 a4 bd b4 6b 5e a6 7b 64 cf 99 bb d5 2c 24 f1 4c 1b 3c ea 2a 00 cd 2a ea b2 5b 23 c4 80 dc 62 03 b4 f6 8e 0e ba 3f 42 af 9f 79 a2 f1 dd 08 39 dd 41 87 11 fa ea 8d 77 75 fd 00 b2 7f 0e 7d fe 59 b1 c8 c2 70 e3 f7 7f 0a 88 df 6b 2e 2f 80 cd 03 c8 ba 07 36 97 2e 3f 8e 21 9c f4 02 aa 0b 5a f9 72 af c1 66 19 d7 c4 b6 7e 89 8c da 60 c0 cd 45 24 85 c4 1c 82 8a 12 e2 3b 95 30 ba 8a 95 ee 30 88 01 42 07 1a 3a c5 9c ed 6c 9f c1 48 c8 98 d9 b5 88 97 7a e0 ee 74 bc 21 df ce 0d b5 67 0b 07 71 c3 de b7 16 21 70 b3 3a 52 e9 8f 3d fe e6 01 Data Ascii: K`3C=?<2W9\scz)U0!IDPf`fmF6^RcqjYy@Ek^{d,$L<*[#b?By9Awu}Ypk./6.?!Zrf~`E$;00B:lHzt!gq!p:R=
2025-03-13 09:29:25 UTC	7116	IN	Data Raw: a0 3f e8 3a a9 bb 94 a6 8f 38 27 18 f8 34 df c1 64 5c 5c 03 93 55 a8 8a 34 f3 0f f1 fa e5 5f e3 f2 ab 7f 86 fc 6c 0f ec 72 ec 54 37 20 b5 07 ab 49 73 47 39 1a 08 e1 91 53 8f 4a ed dc 32 ea 91 69 86 39 13 e9 76 55 d0 08 56 d8 06 3c b0 09 c6 2f a3 a0 01 3c 80 94 ae 67 74 00 3b 97 3c f2 b0 9d 47 16 f6 3d c2 05 c6 bc 86 23 c6 9a 26 e0 b2 87 6f 0b 9c 5f fc 3d 9c 9f fe 14 f3 f3 0f e0 ba 02 93 9d 4b d0 ee 56 7e 43 3f 8a 63 2c b7 03 1b 15 d8 f9 23 9a 5b ed f8 b5 6a 62 d4 e8 8f 6d c3 c1 38 df da 7c 1f 89 1a 70 ea 7d 6c 79 f0 f6 5e e9 f5 67 44 91 69 f6 2c 20 c0 88 8e 41 b5 a5 8d 15 37 fd 8c c6 68 db 1c 6a cd 50 94 15 a0 72 24 4f cd 4e c0 2f be 14 e0 37 7b 1a 98 5d 5e 33 78 5b c2 4d 19 34 71 e0 b9 6a 3d ab 0c e8 95 90 c8 49 dc 42 1c c1 ed 74 a0 09 8b 4c c5 8f 6e 7c Data Ascii: ?:8'4d\\U4_lrT7 IsG9SJ2i9vUV</<gt;<G=#&o_=KV~C?c,#[jbm8\|p}ly^gDi, A7hjPr$ON/7{]^3x[M4qj=IBtLn\|
2025-03-13 09:29:25 UTC	8302	IN	Data Raw: 2c b9 56 55 d6 da b5 36 03 1a c1 03 6f 88 7f c0 1b 74 bd b2 48 20 10 48 48 0c f5 9f 78 83 07 78 42 20 21 e8 61 98 66 ba a7 6b 7a ba ba 6b af ac cc 8c cc 8c c5 23 dc dd b6 fb 41 7d 8b ae c9 a5 41 5d 3d 3d 54 b9 14 f2 70 77 33 73 f3 70 8b 7b cf 3d df f9 ce 51 db 21 3e bf 00 7f 63 3c fd d1 cf c1 5f 7c 0c 7e fc 15 30 32 c2 d1 12 b4 6c 94 f5 1a 94 39 67 6f 06 ca a6 f2 19 a4 71 82 df f6 4b b5 53 3f d3 3c 69 4e c7 ab bc 6f b6 93 c9 b1 8d 3e 51 4d bb fa b3 04 25 f9 39 a9 bd 0d a9 0f dc d4 48 da 9b fc dc 01 82 90 54 03 98 ae 94 b9 f3 b1 da ad c0 90 dc 1c d8 ca c8 c7 ae bf b3 0c 55 97 c1 d4 99 bd 2c ef 6a 95 23 b5 d6 3c 18 34 c2 cd c7 be d2 ca c4 66 83 84 f6 33 70 f5 a2 b0 81 0a fe a0 8b e2 ea 81 96 7d 87 c7 e0 f2 3e 08 d9 15 21 67 e6 17 b6 0f e9 4f dd 89 ff dd e3 Data Ascii: ,VU6otH HHxxB !afkzk#A}A]==Tpw3sp{=Q!>c<_\|~02l9goqKS?<iNo>QM%9HTU,j#<4f3p}>!gO
2025-03-13 09:29:25 UTC	6676	IN	Data Raw: 3b 39 d7 f8 f2 1d c4 37 ee 20 be f3 92 74 ee d2 bd 43 50 15 81 be 05 5a 2b eb 26 c6 77 76 cb 00 30 ff 6f fc 55 df 9c 1d 1c 60 dd c5 fa ff 12 4f 80 ea f5 88 f9 3b 11 87 ef cd b0 78 e7 04 e5 fd 19 78 5e 62 b7 29 b1 39 2f 70 fd a8 c7 76 9d c4 6a 86 62 40 51 10 a2 27 52 4d 9b 61 98 33 20 8c d1 01 61 06 88 44 bf f9 b9 c6 c2 f5 9a 7a ac ba 16 56 50 41 7e 8b f4 e5 e7 e0 9f ff 04 fc c9 47 e0 dd 16 74 74 0b 74 7c 07 28 2a 60 ec 64 bf 1c 8d 95 03 f5 3d 03 38 2f 90 3d 39 c9 b6 17 5f cf 73 2d 85 16 b7 04 60 c9 62 8f b7 e2 ef 49 41 65 3c ee e1 ca 71 69 89 41 3b fb 7d a3 99 bf a0 ec bf aa 63 a9 96 7a 87 a7 96 2a 72 ae 09 44 52 36 ae 54 b3 5c ac 80 ee 0b 79 4c dd c7 40 3c 15 7f 52 da fe a9 82 ce fa 55 79 2f 4b 09 b2 12 f5 4d 5e 80 5b 64 1d 0d 8f f4 98 ee 5e 90 d6 3a 96 Data Ascii: ;97 tCPZ+&wv0oU`O;xx^b)9/pvjb@Q'RMa3 aDzVPA~Gttt\|(`d=8/=9_s-`bIAe<qiA;}czrDR6T\yL@<RUy/KM^[d^:
2025-03-13 09:29:25 UTC	10674	IN	Data Raw: a0 96 2e e3 52 a2 d3 58 a8 98 80 24 d7 4c 24 38 40 49 a1 42 31 02 ab fd 4b 2f 80 1f 58 b7 87 b8 dc 5d c7 f4 e8 21 de 7f e7 3f e1 fa fb 7f 86 fa c6 af a4 4b 80 bb 63 cd b8 05 c6 71 83 5e ad 32 8b 20 8f 72 d5 4d 3c 60 41 ee ca 6b 58 ea 94 85 1c e4 ae 5f 97 27 f4 39 66 70 5c 7d 8b 73 fd be 1f dd 53 79 44 11 f2 74 4d 18 a5 70 04 10 48 4b bf 65 52 1d 9f c5 ba 71 a2 5c 0a 8e 2c 80 8f 57 b5 6e 9b 08 b4 6c b5 34 dc 15 1e 1f a7 cc 20 94 41 44 6b 78 60 d2 cb 7e 98 f4 6e 17 a3 c7 2d 58 cb c8 65 52 00 68 f6 32 60 6a e3 1f fe c1 bf fa b4 44 27 00 f0 9c 0e 31 d7 52 aa b5 71 0f 38 c3 23 39 41 56 b4 c0 60 1e 7e de c0 d1 a2 40 49 83 7a 00 62 2d 08 1d a4 f1 30 6e 26 59 51 ab 96 2e 54 60 c9 17 20 4b 07 69 a9 54 47 3f 2a a4 3b 29 51 30 b0 1a dc 4c 5a 3d fb 88 e4 24 16 ff 1f Data Ascii: .RX$L$8@IB1K/X]!?Kcq^2 rM<`AkX_'9fp\}sSyDtMpHKeRq\,Wnl4 ADkx`~n-XeRh2`jD'1Rq8#9AV`~@Izb-0n&YQ.T` KiTG?*;)Q0LZ=$
2025-03-13 09:29:25 UTC	11860	IN	Data Raw: c0 5d 1b 13 de a1 35 90 db 0a fb a7 7f af 40 3a da 43 7a fc 96 ea f8 50 5b f3 05 0b d8 31 dd 9d 4f da e4 4e bc 06 b5 6f 88 96 57 73 b9 ef cb b8 48 bc 33 ff ce 7d 61 df 64 b2 9c e6 6a d2 ee 89 49 e5 91 4a 42 cc a1 20 4c e6 97 da 15 3c 7d 06 04 08 90 74 8f bd f0 81 f3 2c df 89 00 44 4c ff 4c 8c cd a2 db de 98 de 4f 1b cc a8 7b 53 c1 6c 75 cb ba 95 1f 32 0f c0 03 eb 54 3e 95 75 8d f9 37 29 48 e7 b9 c5 66 49 b3 d4 e5 a8 0c 07 85 62 66 c7 0c 46 da b8 5d fc 8f 62 ac d7 ed 52 0a b6 31 d5 a3 c6 9f d0 b0 c5 64 a8 13 70 5c 57 1d f2 e9 11 8a 96 30 14 49 ae 85 fb 38 57 00 88 8d 48 a4 16 e6 d9 db 53 6d d5 bc 12 b5 59 c1 b5 8a 09 64 bd 12 1d 7a f3 90 2d 90 05 23 48 e7 30 2e c5 0f f8 72 73 03 f5 f1 29 6e 3e f5 3b 40 3f 07 60 a0 96 82 34 21 bf 4e c9 6b 78 33 a2 2d 13 12 Data Ascii: ]5@:CzP[1ONoWsH3}adjIJB L<}t,DLLO{Slu2T>u7)HfIbfF]bR1dp\W0I8WHSmYdz-#H0.rs)n>;@?`4!Nkx3-
2025-03-13 09:29:25 UTC	10234	IN	Data Raw: 26 e7 ce ac 78 c3 88 9a 47 13 ab 7e ca 4a b4 91 b3 9a ad 1c 7c 0d 2c ff 2d b0 f8 37 c0 f0 8d 95 35 97 31 93 42 56 c0 c5 5b b7 45 f1 d8 36 8b c5 7b 25 51 4a 34 ff 31 68 f1 af 81 f6 87 e0 7c af 33 f7 ee 47 40 fe 08 14 8f 4b ca d1 0d 4c 95 6e cb 67 80 ec ac 9b fc ed f4 bb f2 c6 cb 63 5e d6 88 dc df 72 0d 86 67 47 96 d8 5f 86 81 97 1e ac e5 12 67 03 cd 02 61 af 25 da e6 b3 28 17 8f 37 e1 cb 55 2d c3 5a 23 19 cb 38 bc 73 4b 99 00 74 69 29 eb 8a d8 a9 e2 ec a5 2e 93 77 26 52 7f aa af ab a5 75 40 8e a1 81 cc 61 6f 02 65 a2 dc 30 38 ba 45 dd c7 2e 17 29 01 23 d1 6f 11 fc 65 05 c6 ea 7f e5 f1 52 ae f7 33 ee 72 98 34 4b f8 00 5a 70 bb 19 85 a5 aa eb 84 aa 0a 80 06 b0 77 d4 06 db 46 3e b8 72 94 a1 b4 dc 1b 1a 35 0e e6 ca cb ad 0c 0e 40 6d d1 6c ac 4d 43 b6 cc 51 75 Data Ascii: &xG~J\|,-751BV[E6{%QJ41h\|3G@KLngc^rgG_ga%(7U-Z#8sKti).w&Ru@aoe08E.)#oeR3r4KZpwF>r5@mlMCQu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49766	216.198.79.1	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:29:24 UTC	513	OUT	GET /img/2FA.png HTTP/1.1 Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _ga_MR52T79VEH=GS1.1.1741858159.1.0.1741858159.0.0.0; _ga=GA1.1.219411324.1741858159
2025-03-13 09:29:25 UTC	541	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 62411 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline; filename="2FA.png" Content-Length: 114767 Content-Type: image/png Date: Thu, 13 Mar 2025 09:29:24 GMT Etag: "03d39d5d071182aba1b01ba2e859de39" Last-Modified: Wed, 12 Mar 2025 16:09:13 GMT Server: Vercel Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Vercel-Cache: HIT X-Vercel-Id: iad1::6lzt2-1741858164966-33bd071bc173 Connection: close
2025-03-13 09:29:25 UTC	2372	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 1d 00 00 00 fc 08 06 00 00 00 d3 e7 16 e9 00 00 01 83 69 43 43 50 49 43 43 20 70 72 6f 66 69 6c 65 00 00 28 91 7d 91 3d 48 c3 40 1c c5 5f 53 a5 22 15 07 33 48 71 c8 50 9d 5a 10 15 71 d4 2a 14 a1 42 a8 15 5a 75 30 b9 f4 0b 9a 34 24 29 2e 8e 82 6b c1 c1 8f c5 aa 83 8b b3 ae 0e ae 82 20 f8 01 e2 ea e2 a4 e8 22 25 fe af 29 b4 88 f1 e0 b8 1f ef ee 3d ee de 01 42 a3 c2 74 bb 67 1c d0 0d c7 4a 27 13 52 36 b7 2a 85 5e 11 46 08 22 62 88 28 cc 36 e7 64 39 05 df f1 75 8f 00 5f ef e2 3c cb ff dc 9f 63 40 cb db 0c 08 48 c4 b3 cc b4 1c e2 0d e2 e9 4d c7 e4 bc 4f 2c b2 92 a2 11 9f 13 c7 2c ba 20 f1 23 d7 55 8f df 38 17 5b 2c f0 4c d1 ca a4 e7 89 45 62 a9 d8 c5 6a 17 b3 92 a5 13 4f 11 47 35 dd a0 7c 21 eb b1 c6 79 Data Ascii: PNGIHDRiCCPICC profile(}=H@_S"3HqPZqBZu04$).k "%)=BtgJ'R6^F"b(6d9u_<c@HMO,, #U8[,LEbjOG5\|!y
2025-03-13 09:29:25 UTC	1014	IN	Data Raw: f4 11 1b d9 a9 f4 0b 1f a0 2f e9 fe 84 9c 36 16 25 78 6b 2a 7a cd cf 37 38 05 39 d2 93 3a 1d 53 d1 71 f8 3c 3f 26 27 8b de d4 f9 95 1c 8d 21 9f eb a3 fc ec b8 e9 f9 a7 8e 57 fe 5c ac 05 c8 83 75 1c c9 21 e1 7c 19 a0 02 d2 c4 e9 b3 90 b0 9a 47 cf a5 74 8f f2 f7 c7 48 96 9c 85 27 83 c3 99 a2 6e 25 54 26 45 c6 4a 69 99 52 9a ec ae 4e 47 8e 68 59 e3 9d ab 0a c2 36 0d 5f 33 ac d5 0e 91 0a e3 21 f2 76 86 eb 15 42 40 90 72 fb 0f 8e 2f 04 48 b8 28 2a 67 0a a5 e7 11 e6 6f 1a 0c 84 31 61 8c 71 73 78 c6 40 4e ad 1f 24 d4 64 3a 32 7f ee f9 3d 27 9e 4e 03 cc a5 17 e6 d2 03 53 29 0d b7 06 f1 e4 b3 2f 1d 7f 34 9e fc 73 9a 9a a7 53 ef 93 78 4b 52 c1 1d c6 6b 0d 2d ae dd 9b 39 a4 39 a4 18 e6 d2 2b 53 69 51 21 c4 68 4e e7 c1 71 6d 2d 89 46 96 c4 d1 cf ba 36 4e 8f 19 5f 35 Data Ascii: /6%xkz789:Sq<?&'!W\u!\|GtH'n%T&EJiRNGhY6_3!vB@r/H(go1aqsx@N$d:2='NS)/4sSxKRk-99+SiQ!hNqm-F6N_5
2025-03-13 09:29:25 UTC	4744	IN	Data Raw: 65 04 fc 7a 19 e6 75 df f7 b8 ed 35 5e bd 3e c7 d9 ea 04 f7 4e 4f d1 2a 01 01 01 f6 b6 54 51 a3 a0 05 f0 fa 76 83 6f 5f bf c6 e5 6e 83 5e 4a 40 49 90 74 a5 b2 ec a3 bf 18 fd 4a 01 c3 16 c2 0f ec dc b1 0c 93 d6 1e 51 70 39 b5 30 1b 66 08 f2 a8 00 d8 bd f6 ce 8f 12 02 cc 00 09 c4 9b 63 03 e2 91 44 dc c8 8d 42 92 ab 9d 42 18 e2 fe 44 40 03 fc f7 3c 72 60 d8 a3 3d 6c e3 79 82 28 1a 49 cb a6 42 ee f3 51 9e 14 99 07 49 31 8a af 79 ec 61 21 22 00 56 73 95 60 cb 98 af fe 88 17 55 f9 8c 48 38 ee 41 e0 1c 78 0e 02 85 c1 cc 1c 73 d2 d6 97 d0 59 f2 a9 a9 70 2e 96 fd 7d 4b 88 be 94 20 4c 42 94 f3 cd 42 40 47 a7 63 c0 69 dc ef c2 22 a0 bc e1 c8 a3 03 31 6c 13 e8 6b f8 dc 45 fe d6 ba 3c 6c 23 9b 81 90 6c 3d 19 5a 29 18 db cf 2c 8a 04 31 e2 c2 70 bc 6e 21 08 64 d5 41 c9 Data Ascii: ezu5^>NO*TQvo_n^J@ItJQp90fcDBBD@<r`=ly(IBQI1ya!"Vs`UH8AxsYp.}K LBB@Gci"1lkE<l#l=Z),1pn!dA
2025-03-13 09:29:25 UTC	5930	IN	Data Raw: 3e f8 e0 03 3c 7a 70 7f c4 ab 99 43 b8 a6 9a ed 05 a7 25 e7 bf 94 52 72 b9 f4 7f 0d 16 3f 26 fd 52 22 35 e6 9c a3 dc 88 d5 8c 6a 89 13 50 8a 92 73 22 f5 1c 21 33 27 18 a6 4e d9 28 3d 62 8f 4b 4b d4 ee d9 31 ad 1c 26 05 ca fc f5 d6 1a a5 d5 aa 9a c2 67 b9 ce 4a cd 81 2a 5d c7 1c 61 36 75 d8 a7 82 a2 94 80 de f7 3d ac b5 91 0b 96 3b 8e a5 b1 3a 45 a2 ad c9 ec e7 ce 46 5e 9d 95 3a c4 53 29 c6 fc 1e e7 29 1a a5 d4 01 b7 2c 5c b7 0d 12 e7 7c 98 b1 a0 82 d3 91 5e 9b f1 d8 90 0d 8e 97 70 9d a7 41 26 ae b9 4a 91 23 8d 74 9d 83 47 09 00 1b 0b 88 a1 8f 03 ac db 51 8a 20 e4 e2 23 48 90 ca 00 ff 4f 71 30 90 a4 07 72 6e 46 aa a6 78 6c 34 31 9a f0 81 a3 40 98 6c fc 55 db af 60 c0 58 1b af 71 6a 00 d5 f2 a3 54 59 38 8e 65 07 bf 89 51 ca 17 3c eb 05 c4 46 5b 1e 1c c4 12 Data Ascii: ><zpC%Rr?&R"5jPs"!3'N(=bKK1&gJ*]a6u=;:EF^:S)),\\|^pA&J#tGQ #HOq0rnFxl41@lU`XqjTY8eQ<F[
2025-03-13 09:29:25 UTC	7116	IN	Data Raw: ad 73 ce 18 66 64 00 99 4d d4 45 20 1e f3 53 52 dd 25 aa a5 bb 50 e7 ec 8d 46 00 89 32 79 91 32 22 53 2d bd 65 a6 a5 c2 0f cb 30 ef 66 80 23 2f 04 e3 2e c0 f1 7f 3c 54 99 20 4f a1 08 8a 9c a4 9a fd 99 13 d7 42 25 1d 1e db 1b 24 4d 11 4b a8 d3 31 1c 8d 29 52 eb 14 4a 3d 7b ee 33 f4 86 a9 2e da 94 74 0c af 05 c0 6a 9a c8 74 5c 4e ff f0 c8 6f e7 29 cf 11 5c e6 1c 8f 52 4e b8 26 96 32 67 7c e7 ce b9 7a 2e 13 8e cb 94 17 9f a6 af 6a 86 bf d4 b3 e2 98 6b 98 ea ec 7b 8c 17 7b 2c 3c 7a 97 48 a7 e8 94 b1 83 8d 2d b9 32 cd 60 80 ac d3 1f 77 11 3f 5b ec 99 61 fb 1b e8 ed 1e af 88 00 ab 21 2d 40 4a 82 9a 16 3d 1b 74 5a 63 67 7a 68 63 9c ee 07 bc 2a ab 10 49 b3 22 80 3d 01 95 d8 c9 c7 1b d3 7b ad 03 1a 39 1c be e7 21 c8 38 01 a9 7d 6f b0 eb 34 b6 fd 1e 06 80 b0 c6 d5 Data Ascii: sfdME SR%PF2y2"S-e0f#/.<T OB%$MK1)RJ={3.tjt\No)\RN&2g\|z.jk{{,<zH-2`w?[a!-@J=tZcgzhc*I"={9!8}o4
2025-03-13 09:29:25 UTC	8302	IN	Data Raw: 71 f6 86 0a c8 75 fc cf 72 88 91 20 22 48 d5 17 66 29 8a 02 b2 31 5a 01 f1 c5 9a 62 32 c7 55 b0 52 e6 84 8f cd 6b c2 93 d2 8d f1 e5 a0 f9 1c 4b 39 d7 67 4a 29 92 a6 32 e5 75 c9 50 61 cf 3b ac 06 53 e4 cd 5c 45 e4 20 6b a5 8c 45 b9 73 16 0c 0f 78 2a 60 ba e7 dd 42 e7 2a 3d b7 fd f1 09 11 07 0c c6 98 27 17 ac 23 f2 92 3a 49 52 0e 88 fd 45 a1 7d 2d 05 d5 54 25 93 af 22 14 98 50 00 d5 50 4a 43 2b 01 46 23 70 36 06 74 0d 34 33 28 79 8c f3 d9 7d cc 2f bf 86 e0 cf 30 d6 35 f4 5c 43 35 c0 a8 00 30 af b1 55 02 5a 68 9c b7 2f 71 76 f2 18 d5 e9 33 ec 6e dc 01 15 c6 f7 e4 d1 93 17 78 f2 e4 09 16 8b 4b 40 29 48 d9 98 49 07 c1 b1 a8 95 31 72 bb bc b4 32 d3 2a cb 20 8f 03 22 07 a1 58 21 03 ed 8e b1 3b d7 fa 8b aa 42 21 80 a6 a9 a1 b5 c6 d6 74 03 57 af 1d e1 e8 e8 08 85 Data Ascii: qur "Hf)1Zb2URkK9gJ)2uPa;S\E kEsx`B='#:IRE}-T%"PPJC+F#p6t43(y}/05\C50UZh/qv3nxK@)HI1r2* "X!;B!tW
2025-03-13 09:29:25 UTC	6676	IN	Data Raw: c2 b4 95 38 a7 a8 ac d6 3d 68 7c 36 9b 19 53 3b e2 56 e9 14 38 dc db c1 b5 bd 6d dc b9 75 13 8c 09 6c 6c 6d 5b 2e 4a eb 5b 4e 9c 73 30 ee 55 58 ba 04 c0 a1 55 ce e2 fd ff bf fd a4 f6 8a 5f f4 12 9e 25 40 df 29 36 96 02 8f 5d 64 87 0c bf f2 f1 59 af 6c 67 0f a6 84 41 d1 15 2b a3 c6 22 62 71 7b 3c 25 be 35 34 35 13 fb d2 e4 90 f8 ac ae 54 8a 53 97 11 7f cc 29 50 c7 48 45 2e eb 0e c5 c5 96 4c 56 5f 63 c2 70 48 d4 2d f6 d8 0a db e6 0e e1 ac eb 3a bf fe b9 54 2d 83 7a 09 ce b9 21 94 04 b0 0c e7 1c d2 b2 56 e3 9d 18 5b e4 c6 70 97 d3 b0 08 e7 88 5d 72 80 a0 85 13 8a 47 c5 27 8f 94 d2 8f 21 c5 ca 71 4d d3 98 f9 df b2 f4 df 15 93 a4 34 59 6b 6c 46 49 8b e7 70 d6 39 ce f8 dd b6 ba f7 85 ce 8a a1 ce 45 d3 34 3d 0d 93 f0 79 21 44 5f 08 20 3a 30 6e df a4 5a 2f ee b9 Data Ascii: 8=h\|6S;V8mullm[.J[Ns0UXU_%@)6]dYlgA+"bq{<%545TS)PHE.LV_cpH-:T-z!V[p]rG'!qM4YklFIp9E4=y!D_ :0nZ/
2025-03-13 09:29:25 UTC	10674	IN	Data Raw: 7f 9c 49 9b 5e 91 f8 be f9 b7 4e dd d0 f5 b2 1d ff cf 2d b6 0c 35 d0 be c2 fc ec 19 e6 af 9e a3 22 60 dc 5e 82 97 63 bb a0 bd b9 73 14 1b 1b 1b 28 cb d2 a3 1e e7 e7 33 e8 66 0e 75 79 8e b6 6d f1 fc f4 1c c4 c4 d2 28 79 f8 cf c9 a8 87 fe 4a 52 1a 4e 10 2f c6 50 d0 c9 b6 a6 f3 0e 71 be 21 e1 c4 94 d1 0b 31 81 53 43 82 c0 c1 05 81 b3 02 1a 12 6d a3 d0 b4 0b 70 56 80 71 80 b3 02 c4 ba d1 5c d9 6a ff 3e 56 30 14 45 05 c6 60 5b 21 4d 6f 9a c6 e9 86 84 6d 16 a5 00 b2 10 3d 23 ed bf 07 9a f5 3e 5f 49 f8 76 0c e3 30 9e 3f 90 d8 dc d8 c6 d5 a3 03 4c 27 63 88 e5 b0 eb af e7 55 76 06 8c 98 3d d7 68 89 7c 18 aa 36 6b 4b f6 73 8b a4 54 da 4e 1c 24 2c 2d ac 02 25 65 5c 4e 43 55 68 16 5c c3 4e a0 cf cd 6e 68 f7 f9 41 db 83 a1 ef 5f a2 5a d9 4f a2 10 64 6f 14 13 58 13 85 Data Ascii: I^N-5"`^cs(3fuym(yJRN/Pq!1SCmpVq\j>V0E`[!Mom=#>_Iv0?L'cUv=h\|6kKsTN$,-%e\NCUh\NnhA_ZOdoX
2025-03-13 09:29:25 UTC	11860	IN	Data Raw: 10 a7 60 c3 c8 18 b0 b3 05 2b 12 11 46 71 87 83 21 c1 73 94 06 7c ce b6 35 c4 00 f9 9b 46 c3 0d 27 b1 c2 4a 5e 29 14 04 ec c7 61 26 5f cc c1 6f c6 8d 03 9c 86 4c 2e fb 8f 38 b4 82 86 67 69 4d 4a c9 85 b3 0b d9 9f 78 ab ed 30 b8 e3 71 88 38 10 31 88 4d 92 46 9e 6e 68 5d 94 5b 9f 0d 20 9e 07 92 4e dc 74 7d d2 80 91 64 24 45 e1 18 06 37 ce 50 a7 dc d0 8a 88 12 12 24 22 69 3b f9 7e e4 d9 ec 61 00 06 0c a2 18 9c 83 13 81 0b d7 40 b2 16 2c 7f 9e 62 81 7f 8e 82 7c 37 05 a6 77 79 08 68 1c 00 66 88 e1 a0 60 a9 80 8c 50 de 81 55 a0 7a 06 de 7c 86 1b fc 0c dd bd cf f0 cd eb ff 17 4f e4 1b 50 6f fc 84 a3 8a 64 98 4d 92 7c 20 fc ca 8a e0 35 12 8b c7 02 25 09 d0 bd f8 20 11 7c 44 a0 b2 5e eb 0e a1 66 c8 9c 4d 68 7d 13 6c 6d 87 2e c8 9c 8f 4e 71 35 0c b0 9d c2 18 c6 e8 Data Ascii: `+Fq!s\|5F'J^)a&_oL.8giMJx0q81MFnh][ Nt}d$E7P$"i;~a@,b\|7wyhf`PUz\|OPodM\| 5% \|D^fMh}lm.Nq5
2025-03-13 09:29:25 UTC	10234	IN	Data Raw: f1 7a b9 5f 12 c4 b7 96 a2 c8 63 91 9b 96 90 ce db fa a2 2c 2d ea 6b 8a 79 77 41 2a 96 6e ee bb 7e c7 31 fb d5 3a 0f 4b 3d f5 75 a4 4a a7 00 ee 2d 91 b7 f7 31 d0 b8 53 f9 62 04 98 4f 80 f3 cf 70 f2 e9 ff 8c 7b 97 7f c0 f5 7e 87 ab 9b 5b c8 b3 df a3 7f f0 0f 38 85 01 ee 03 d0 f3 b0 68 9e 79 fd 9b 1f 80 48 ca d5 ee a2 ef e6 1a 45 8d 0e 0e 28 47 6c 99 35 91 33 a1 1d 20 04 b6 27 d8 eb 80 1b eb 70 fa f8 17 e8 1e fd 35 2e 5f bf c2 ab dd 35 4e 4f 6e 60 69 0f a6 01 aa 8c 51 f6 80 73 20 4b 60 6b b0 39 d9 00 4c 18 86 01 a3 13 10 7a f4 c6 c2 50 07 a1 1e af af 09 af f7 27 d8 99 33 d8 8b 5f 00 67 9f e3 86 ee e1 7a 34 18 42 92 c0 2a d1 2b 3e 0b 93 73 ad e6 1f ef e1 9c 03 5b 33 57 f7 bc 03 72 b8 a6 94 bc 96 78 56 79 16 45 52 72 d4 5c b0 52 26 2e 8f 2b 57 57 6d ed 53 1e Data Ascii: z_c,-kywAn~1:K=uJ-1SbOp{~[8hyHE(Gl53 'p5._5NOn`iQs K`k9LzP'3_gz4B+>s[3WrxVyERr\R&.+WWmS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49768	216.198.79.193	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:29:24 UTC	773	OUT	GET /styles/ico.ico HTTP/1.1 Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _ga_MR52T79VEH=GS1.1.1741858159.1.0.1741858159.0.0.0; _ga=GA1.1.219411324.1741858159
2025-03-13 09:29:25 UTC	555	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 244101 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline; filename="ico.ico" Content-Length: 5430 Content-Type: image/vnd.microsoft.icon Date: Thu, 13 Mar 2025 09:29:25 GMT Etag: "6701a4ba0b931af579be35b93631da04" Last-Modified: Mon, 10 Mar 2025 13:41:04 GMT Server: Vercel Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Vercel-Cache: HIT X-Vercel-Id: iad1::ltwz7-1741858165052-25c96a2a4cfb Connection: close
2025-03-13 09:29:25 UTC	2372	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 68 08 20 ff 66 08 a0 ff f3 ec cf ff ff ff ff ff ff ff ff ff 66 08 df ff 67 09 90 ff 64 08 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 60 00 10 ff 65 07 90 ff 66 08 ff ff 66 08 ff ff eb e0 ff ff ff ff ff ff ff ff ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 65 09 90 ff 70 10 10 00 00 00 00 00 00 00 00 00 00 00 00 ff 60 00 10 ff 66 07 cf ff 66 08 ff ff 66 08 ff ff 66 08 ff ff eb e0 ff ff ff ff ff ff ff ff ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff Data Ascii: h& ( h ffgd@`efffffep`fffffff
2025-03-13 09:29:25 UTC	1000	IN	Data Raw: 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff eb e0 ff ff ff ff ff e6 e6 e6 ff e6 e6 e6 ff ff ff ff ff ff ec e0 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 67 08 9f 00 00 00 00 ff 60 00 10 ff 65 07 ef ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff eb e0 ff ff ff ff ff e6 e6 e6 ff e6 e6 e6 ff ff ff ff ff ff ec e0 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 60 10 10 ff 65 08 60 ff 66 08 ff ff 66 08 ff ff Data Ascii: ffffffffffffffffffffg`efffffffffffffffffffffff`e`ff
2025-03-13 09:29:25 UTC	2058	IN	Data Raw: 08 ff ff 66 08 ff ff 66 08 ff ff 65 07 ef ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff eb e0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ec e0 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 07 ef ff 66 07 cf ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff eb e0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff Data Ascii: ffeffffffffffffffffffffffffffffffffffffffffffffffff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49771	216.198.79.1	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:29:27 UTC	516	OUT	GET /styles/ico.ico HTTP/1.1 Host: 10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _ga_MR52T79VEH=GS1.1.1741858159.1.0.1741858159.0.0.0; _ga=GA1.1.219411324.1741858159
2025-03-13 09:29:27 UTC	555	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 244103 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline; filename="ico.ico" Content-Length: 5430 Content-Type: image/vnd.microsoft.icon Date: Thu, 13 Mar 2025 09:29:27 GMT Etag: "6701a4ba0b931af579be35b93631da04" Last-Modified: Mon, 10 Mar 2025 13:41:04 GMT Server: Vercel Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Vercel-Cache: HIT X-Vercel-Id: iad1::xk4cm-1741858167817-13f992d1bf18 Connection: close
2025-03-13 09:29:28 UTC	2372	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 68 08 20 ff 66 08 a0 ff f3 ec cf ff ff ff ff ff ff ff ff ff 66 08 df ff 67 09 90 ff 64 08 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 60 00 10 ff 65 07 90 ff 66 08 ff ff 66 08 ff ff eb e0 ff ff ff ff ff ff ff ff ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 65 09 90 ff 70 10 10 00 00 00 00 00 00 00 00 00 00 00 00 ff 60 00 10 ff 66 07 cf ff 66 08 ff ff 66 08 ff ff 66 08 ff ff eb e0 ff ff ff ff ff ff ff ff ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff Data Ascii: h& ( h ffgd@`efffffep`fffffff
2025-03-13 09:29:28 UTC	1000	IN	Data Raw: 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff eb e0 ff ff ff ff ff e6 e6 e6 ff e6 e6 e6 ff ff ff ff ff ff ec e0 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 67 08 9f 00 00 00 00 ff 60 00 10 ff 65 07 ef ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff eb e0 ff ff ff ff ff e6 e6 e6 ff e6 e6 e6 ff ff ff ff ff ff ec e0 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 60 10 10 ff 65 08 60 ff 66 08 ff ff 66 08 ff ff Data Ascii: ffffffffffffffffffffg`efffffffffffffffffffffff`e`ff
2025-03-13 09:29:28 UTC	2058	IN	Data Raw: 08 ff ff 66 08 ff ff 66 08 ff ff 65 07 ef ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff eb e0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ec e0 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 07 ef ff 66 07 cf ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff eb e0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff Data Ascii: ffeffffffffffffffffffffffffffffffffffffffffffffffff

Target ID:	1
Start time:	05:28:58
Start date:	13/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	05:29:01
Start date:	13/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2044,i,2347923341624996425,12829868139032014794,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2072 /prefetch:3
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	13
Start time:	05:29:10
Start date:	13/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html"
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Windows Analysis Report
http://10h-ebhgsyyftygwehbsf78weuygiukhj.vercel.app/case/100081295808699.html