Edit tour

Windows Analysis Report
http://www.policy-violation-10094985.victoriakent.co.uk/

Overview

General Information

Sample URL:	http://www.policy-violation-10094985.victoriakent.co.uk/
Analysis ID:	1638318
Infos:

Detection

Score:	68
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

AI detected landing page (webpage, office document or email)

Creates files inside the system directory

Deletes files inside the Windows folder

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3816 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 5172 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1968,i,7055854823501348706,4026424420243952376,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2000 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6776 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.policy-violation-10094985.victoriakent.co.uk/" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://www.policy-violation-10094985.victoriakent.co.uk/

Avira URL Cloud: detection malicious, Label: phishing

Antivirus detection for URL or domain

Source: http://www.policy-violation-10094985.victoriakent.co.uk/static/media/appeal.2b97b09e886d7d7ed1ab.png	Avira URL Cloud: Label: phishing
Source: http://www.policy-violation-10094985.victoriakent.co.uk/static/media/cover.826bd4ab81f596e729c5.png	Avira URL Cloud: Label: phishing
Source: http://www.policy-violation-10094985.victoriakent.co.uk/static/js/main.007f41d7.js	Avira URL Cloud: Label: phishing
Source: http://www.policy-violation-10094985.victoriakent.co.uk/static/css/main.56bf616a.css	Avira URL Cloud: Label: phishing
Source: http://www.policy-violation-10094985.victoriakent.co.uk/favicon.png	Avira URL Cloud: Label: phishing
Source: http://www.policy-violation-10094985.victoriakent.co.uk/static/media/arlet1.44e75d617b8dff7efeb6.png	Avira URL Cloud: Label: phishing
Source: http://www.policy-violation-10094985.victoriakent.co.uk/static/media/logo.a8116f16b948114a8812.png	Avira URL Cloud: Label: phishing

Phishing

AI detected phishing page

Source: http://www.policy-violation-10094985.victoriakent.co.uk/

Joe Sandbox AI: Score: 9 Reasons: The brand 'Meta' is well-known and is associated with the legitimate domain 'meta.com'., The URL 'www.policy-violation-10094985.victoriakent.co.uk' does not match the legitimate domain for Meta., The URL contains suspicious elements such as 'policy-violation' and a numeric string, which are common in phishing attempts., The domain 'victoriakent.co.uk' is not associated with Meta, raising suspicion., The presence of input fields for phone number and email address is typical in phishing sites attempting to collect personal information. DOM: 0.1.pages.csv

AI detected landing page (webpage, office document or email)

Source: http://www.policy-violation-10094985.victoriakent.co.uk/

Joe Sandbox AI: Page contains button: 'Request review' Source: '0.0.pages.csv'

Source: unknown	HTTPS traffic detected: 142.250.186.68:443 -> 192.168.2.11:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.25.14:443 -> 192.168.2.11:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.13.205:443 -> 192.168.2.11:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.13.205:443 -> 192.168.2.11:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 47.254.130.237:443 -> 192.168.2.11:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 47.254.130.237:443 -> 192.168.2.11:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.31.228:443 -> 192.168.2.11:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.31.228:443 -> 192.168.2.11:49747 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.7
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.7
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.7
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.7
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.7
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.7
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.7
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.74.195
Source: unknown	TCP traffic detected without corresponding DNS query: 2.16.164.72
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.74.195
Source: unknown	TCP traffic detected without corresponding DNS query: 2.16.164.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.16.164.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.77.188
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/6.6.0/css/all.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveOrigin: http://www.policy-violation-10094985.victoriakent.co.uksec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CK+HywE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/6.6.0/webfonts/fa-solid-900.woff2 HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveOrigin: http://www.policy-violation-10094985.victoriakent.co.uksec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.6.0/css/all.min.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?format=text HTTP/1.1Host: api.ipify.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/plain, /sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Origin: http://www.policy-violation-10094985.victoriakent.co.ukSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: http://www.policy-violation-10094985.victoriakent.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?format=text HTTP/1.1Host: api.ipify.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sys/config/ip/get-visitor-ip?ip=8.46.123.189 HTTP/1.1Host: ip-scan.adspower.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/plain, /sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Origin: http://www.policy-violation-10094985.victoriakent.co.ukSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: http://www.policy-violation-10094985.victoriakent.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sys/config/ip/get-visitor-ip?ip=8.46.123.189 HTTP/1.1Host: ip-scan.adspower.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w320/us.png HTTP/1.1Host: flagcdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: http://www.policy-violation-10094985.victoriakent.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w320/us.png HTTP/1.1Host: flagcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.policy-violation-10094985.victoriakent.co.ukConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/main.007f41d7.js HTTP/1.1Host: www.policy-violation-10094985.victoriakent.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Referer: http://www.policy-violation-10094985.victoriakent.co.uk/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/css/main.56bf616a.css HTTP/1.1Host: www.policy-violation-10094985.victoriakent.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.policy-violation-10094985.victoriakent.co.uk/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/media/logo.a8116f16b948114a8812.png HTTP/1.1Host: www.policy-violation-10094985.victoriakent.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.policy-violation-10094985.victoriakent.co.uk/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/media/arlet1.44e75d617b8dff7efeb6.png HTTP/1.1Host: www.policy-violation-10094985.victoriakent.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.policy-violation-10094985.victoriakent.co.uk/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/media/appeal.2b97b09e886d7d7ed1ab.png HTTP/1.1Host: www.policy-violation-10094985.victoriakent.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.policy-violation-10094985.victoriakent.co.uk/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/media/cover.826bd4ab81f596e729c5.png HTTP/1.1Host: www.policy-violation-10094985.victoriakent.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.policy-violation-10094985.victoriakent.co.uk/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: www.policy-violation-10094985.victoriakent.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.policy-violation-10094985.victoriakent.co.uk/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.policy-violation-10094985.victoriakent.co.uk
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: api.ipify.org
Source: global traffic	DNS traffic detected: DNS query: ip-scan.adspower.net
Source: global traffic	DNS traffic detected: DNS query: flagcdn.com

Source: chromecache_76.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_76.2.dr	String found in binary or memory: https://fontawesome.com/license/free

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 142.250.186.68:443 -> 192.168.2.11:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.25.14:443 -> 192.168.2.11:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.13.205:443 -> 192.168.2.11:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.13.205:443 -> 192.168.2.11:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 47.254.130.237:443 -> 192.168.2.11:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 47.254.130.237:443 -> 192.168.2.11:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.31.228:443 -> 192.168.2.11:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.31.228:443 -> 192.168.2.11:49747 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir3816_985562068

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir3816_985562068

Jump to behavior

Source: classification engine

Classification label: mal68.phis.win@23/33@24/11

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1968,i,7055854823501348706,4026424420243952376,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2000 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.policy-violation-10094985.victoriakent.co.uk/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1968,i,7055854823501348706,4026424420243952376,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2000 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://www.policy-violation-10094985.victoriakent.co.uk/	100%	Avira URL Cloud	phishing

Source	Detection	Scanner	Label
http://www.policy-violation-10094985.victoriakent.co.uk/static/media/appeal.2b97b09e886d7d7ed1ab.png	100%	Avira URL Cloud	phishing
http://www.policy-violation-10094985.victoriakent.co.uk/static/media/cover.826bd4ab81f596e729c5.png	100%	Avira URL Cloud	phishing
http://www.policy-violation-10094985.victoriakent.co.uk/static/js/main.007f41d7.js	100%	Avira URL Cloud	phishing
http://www.policy-violation-10094985.victoriakent.co.uk/static/css/main.56bf616a.css	100%	Avira URL Cloud	phishing
http://www.policy-violation-10094985.victoriakent.co.uk/favicon.png	100%	Avira URL Cloud	phishing
http://www.policy-violation-10094985.victoriakent.co.uk/static/media/arlet1.44e75d617b8dff7efeb6.png	100%	Avira URL Cloud	phishing
http://www.policy-violation-10094985.victoriakent.co.uk/static/media/logo.a8116f16b948114a8812.png	100%	Avira URL Cloud	phishing

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
ip-scan-proxy.adspower.net	47.254.130.237	true	false	high
flagcdn.com	104.21.31.228	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
www.google.com	142.250.186.68	true	false	high
api.ipify.org	104.26.13.205	true	false	high
www.policy-violation-10094985.victoriakent.co.uk	172.67.212.130	true	true	unknown
ip-scan.adspower.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://www.policy-violation-10094985.victoriakent.co.uk/static/js/main.007f41d7.js	true	Avira URL Cloud: phishing	unknown
https://ip-scan.adspower.net/sys/config/ip/get-visitor-ip?ip=8.46.123.189	false		high
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.6.0/css/all.min.css	false		high
https://flagcdn.com/w320/us.png	false		high
https://api.ipify.org/?format=text	false		high
http://www.policy-violation-10094985.victoriakent.co.uk/static/media/appeal.2b97b09e886d7d7ed1ab.png	true	Avira URL Cloud: phishing	unknown
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.6.0/webfonts/fa-solid-900.woff2	false		high
http://www.policy-violation-10094985.victoriakent.co.uk/static/media/logo.a8116f16b948114a8812.png	true	Avira URL Cloud: phishing	unknown
http://www.policy-violation-10094985.victoriakent.co.uk/static/media/arlet1.44e75d617b8dff7efeb6.png	true	Avira URL Cloud: phishing	unknown
http://www.policy-violation-10094985.victoriakent.co.uk/	true		unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	false		high
http://www.policy-violation-10094985.victoriakent.co.uk/static/media/cover.826bd4ab81f596e729c5.png	true	Avira URL Cloud: phishing	unknown
http://www.policy-violation-10094985.victoriakent.co.uk/static/css/main.56bf616a.css	true	Avira URL Cloud: phishing	unknown
http://www.policy-violation-10094985.victoriakent.co.uk/favicon.png	true	Avira URL Cloud: phishing	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://fontawesome.com	chromecache_76.2.dr	false		high
https://fontawesome.com/license/free	chromecache_76.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	www.google.com	United States	15169	GOOGLEUS	false
47.254.130.237	ip-scan-proxy.adspower.net	United States	45102	CNNIC-ALIBABA-US-NET-APAlibabaUSTechnologyCoLtdC	false
104.21.31.228	flagcdn.com	United States	13335	CLOUDFLARENETUS	false
104.26.13.205	api.ipify.org	United States	13335	CLOUDFLARENETUS	false
104.21.93.168	unknown	United States	13335	CLOUDFLARENETUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
172.67.212.130	www.policy-violation-10094985.victoriakent.co.uk	United States	13335	CLOUDFLARENETUS	true

Private

IP
192.168.2.17
192.168.2.16
192.168.2.3
192.168.2.11

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1638318
Start date and time:	2025-03-14 10:38:57 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 20s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://www.policy-violation-10094985.victoriakent.co.uk/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	16
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal68.phis.win@23/33@24/11
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, sppsvc.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.23.99, 216.58.206.46, 216.58.206.78, 64.233.184.84, 142.250.185.206, 142.250.186.142, 142.250.186.46, 199.232.214.172, 142.250.184.206, 142.250.185.110, 142.250.186.42, 216.58.212.138, 142.250.185.106, 142.250.185.138, 216.58.212.170, 216.58.206.42, 172.217.18.106, 142.250.181.234, 142.250.185.74, 172.217.16.202, 142.250.186.106, 142.250.185.202, 172.217.23.106, 142.250.74.202, 142.250.185.234, 142.250.186.74, 142.250.186.99, 172.217.18.110, 142.250.184.195, 199.232.210.172, 23.199.214.10, 4.245.163.56
Excluded domains from analysis (whitelisted): fs.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, accounts.google.com, redirector.gvt1.com, content-autofill.googleapis.com, slscr.update.microsoft.com, update.googleapis.com, ctldl.windowsupdate.com, clientservices.googleapis.com, clients.l.google.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://www.policy-violation-10094985.victoriakent.co.uk/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 157192, version 774.256
Category:	downloaded
Size (bytes):	157192
Entropy (8bit):	7.996373472631987
Encrypted:	true
SSDEEP:	3072:Qeqp46DjdHdb7UT/IGFc27+78oGmfIXe0pGRDH9tQm1pbYqup:Q16n/IqpoG2IXZYTtxrbdO
MD5:	237F4A0AFBDB652FB2330EE7E1567DD3
SHA1:	69335CD6A6AC82253EA5545899CCCDE35AF39131
SHA-256:	1F0189E087FCEFBF654FAD74A3A06668B782C01353A61D5C0B7F0BF23E33C020
SHA-512:	27E8E1F91507179C207F93A19485738ED5D372A977EB27D44A4ED163013097D38B117C7A5BF4336ECC9862CA514D78FFCD2B8A07E304BBFE1B2CCE9C087BAA38
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.6.0/webfonts/fa-solid-900.woff2
Preview:	wOF2......f.......)...e..........................6.$. .`..P...f.. .T..m. %.....L......y.....SA.....PUUUU5)!.1.v.....O~.._..w..._..............S`0...0-.q.=^.....~..d....+....e...'.Xe.~a.+.....m.Hwo..^..v..B....B=..N.25.X.W.D..).I......9=....6.z.>.........='DTdd.I\|9.._+$G..'...&p#`.\U..U..7#......D..?...S.z....o....1>`......y^...)`..ZL.'S..AH.U..#...y.`...^Imj...B......a......i.#=.4VHc.p@.R. ..O V.h..x........[...u+.....].]3.kj.kvgW[.g.Z.Q\%..(#...Z..D.$....0..a.%..R....6.....3..6..0...Is..sg..S...4..4..Y..]{m.^7...`lSE...!K..J'..T..I..+...;..(.5.V..I'...?....fvfvfvgK...K.d... %J.:mI6-.*.b3.r...........:...K.....%.}=..'.......S.v.v.;+.f.e..c..Q.1.4A..H#.S...&.....Hk\.........z....~.v.N+m.....<..<.Ro.m.M./..vJ.....:.)AJ0.A0.`..`.G...`<.... . ......e.?...7..Ub..p.t~....?;.+dg...:.I7-.K...v.a..SLK....~o..=A....#.B.S..........?......{...gD...p.MA.......a%R.F:.^R........".:.}......^}.....m.;.&g'.$..!...rj}.$.#.....z.T.T..UM.....7.?.TRc......

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	438
Entropy (8bit):	5.193045421573156
Encrypted:	false
SSDEEP:	12:YGKAcdW9g49soR+YI+imYP2JSnVVHV2hn1TRB2DOexWb2RKJFtHdA:YdAcdWg42op2mYP2cVxV2hRn2DOIRwu
MD5:	8E802E8FD0A47B47BD051344AC1B5E02
SHA1:	0244E192F3650D456CBC3A4AD4DC649A7E4701DE
SHA-256:	ABF805EF54EF534433EEB6893D7F25573AE62375E36A9F7B2902676E0F767254
SHA-512:	65C69CB3C0D0A834E50282953ED74307602E60E596F4986E2235DC989FD3A4D9E32C8854389E4422E18A43539787D4A8A43BC64794BB4FE708799A7CAAB1A9FE
Malicious:	false
Reputation:	low
Preview:	{"code":0,"msg":"Success","data":{"ip":"8.46.123.189","ip_data":{"country":"us","region":"new york","city":"new york city","timezone":"America/New_York","latitude":"40.713200","longitude":"-74.006100","isp":"","zipcode":"10116","version":"3.0","ip_scan_channel":"ip2location"},"header":{},"language":"en-US,en;q=0.9","ua":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36"}}.

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	226507
Entropy (8bit):	7.959929596130891
Encrypted:	false
SSDEEP:	6144:zr7uDkcn3XUgYSYOTLYVXPp354sHugWQWp2M5oX:z/uD3pYSiVXPL4sKQG3GX
MD5:	2CCAFD289916D2A4569C1E657447333B
SHA1:	0FC988469A8777CE25D5302710AD910FC516AC79
SHA-256:	5F3DB409FDB705E00B783F36897278A551CAFAB0CDC0B41044B34A8F23549A89
SHA-512:	D099770FBC74A35700CB871134FDC04A47E4D6FED638A64B9DAF77F8BF5085CBAA12E847DB93FF70BED815E06BA35D529F1463F3CF9EBB729EB1367E5EC828DE
Malicious:	false
Reputation:	low
URL:	http://www.policy-violation-10094985.victoriakent.co.uk/static/media/appeal.2b97b09e886d7d7ed1ab.png
Preview:	.PNG........IHDR.......8........C....pHYs.................sRGB.........gAMA......a...t`IDATx...i.d.'.=.........&...N6..3.F.g`....dy.`.m....l..>h....`hd...43.hf4..4.d..n..ds.fs.}_...2.2.r.q....9.qof.E2...._..8q".......y.C.........`.k......... ........X..`.......5!........X..`.......5!........X..`.......5!........X..`.......5!........X..`.......5!........X..`.......5!........X..`.......5!........X..`.......5!........X..`.......5!........X..`.......5!........X..`.......5!........X..`.......5!........X..`.......5!........X..`.......5!........X..`.......5!........X..`.......5!........X..`.......5!........X..`.......5!........X..`.......5!........X..`.......5!........X..`.......5!........X..`.......5!........X..`.......5!........X..`.......5!........X..`.......5!........X..`.......5!........X..`.......5!........X..`.......5!........X..`.......5!........X..`.......5!........X..`.......5!........X..`.......5!........X..`.......5!........X..`.......5!........X..`.......5!........X..`

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	16099
Entropy (8bit):	7.9817202714172435
Encrypted:	false
SSDEEP:	384:xMOLcQo2hkjx7FYNBsy2TQ01kKVaWHzg9IXBioeIm6C2t:eIFhUxhMj0ESc+x8n6jt
MD5:	5C16D06D4B48457E8B6E838B4ED29696
SHA1:	B8D400CAF154787827F80EDD7BE2598718AA1D27
SHA-256:	008BEBA70DB4CC9EF1D7DC34635CEF19620822DA0722FD4670D36A1DFEE543DA
SHA-512:	A99CC696D4733D030D8F3184B31DD4367B3C1B46B6352AD479F0F28973FE4F36B99951DC570BC4CB75CA64E9EF25973C8639B4CA3E3AC720A80EF44426FB23B0
Malicious:	false
Reputation:	low
URL:	http://www.policy-violation-10094985.victoriakent.co.uk/static/media/cover.826bd4ab81f596e729c5.png
Preview:	.PNG........IHDR...x...x.....9d6.....pHYs.................sRGB.........gAMA......a...>xIDATx..}...GU..o....yIx..d!a..m"...2..~.8...,..3...T.G.1.2.C.Y....H....^.....v.s.N......./.@%.n..[U....W..r.R;.?(.........".Ay\.;.......qY.........X.o.............?.V..P..\|..lL...[y.h....`.#._.....[`U..._c...:....>...,.....8..-.AZ...;.\.<..1..}..;w..o.........(.......v\|....n\..<.qg........I....z..xz/.....{.<u..cw......B..W.......t..9....a....;a......F5..L..i....9..W.......E[f.im..%v........Cw.Y@.}.F..<...9t.[R&v...ib.:`ats."4....v..'.\|.{#.x..Ne....+.;..R.:........<Y.Y....P.....\3....odvk.......)........5.E....00......^....m5..[..#...g1..`...r).-.:...i....d.!.-vp...d..10s..:}..#w2..8v'S....(....X...j5.j...K..U-n$.-..).j6..Q.....=_@_.p.............<8.+X.V.h....M..;..bDl7Fv+...-/..h..d..4.X...d.....-..........M..&.%.....%.,&.Z.`u......P...j)Tp3u.(.\m..\..`b..K,>.p..K....e...?..Q....Bl.r..X......E..:..Zi.........>.@.AJq..m6P...gv...Rhs...l..e....p.[..).....

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 365651
Category:	downloaded
Size (bytes):	124182
Entropy (8bit):	7.9971977466903015
Encrypted:	true
SSDEEP:	3072:dBsJQ8DAgiH+rQWFgVVCc7lbGc5C3M5D2+HjFUcAwGH:dKsHKQWaVVCklN5Dvjmcq
MD5:	A891A2523153DB1DE2C40C7EDED7919F
SHA1:	7D98F9472183D0D6107DE6BA9BC158DEA5823E75
SHA-256:	9036303DF9E11B5BC8A6B8003E4E9EFF8D800AD8FDCE9050AC3AE735572A2EAD
SHA-512:	AE03CA15CCC1BA2BABEEB1EEE763EE4744CAA7D12F8577A1FC8F2D8ED4DE43F5DFBFC692C589D3DB79D37495C17FF6DFF4D752A577157458AA5D4F5BCD0A820D
Malicious:	false
Reputation:	low
URL:	http://www.policy-violation-10094985.victoriakent.co.uk/static/js/main.007f41d7.js
Preview:	............iw.8.......o.M. Y..R.y..Ig..#i\|h....B.^b....T. A.r.3s.................V.G\,.V,.iv..8.[.....\|.,.E..7....~[t_>{t...aW^.?..?.#l..<.8..}p..".L<N%..?e..DW.M<Nh.A}Ki...9.$.l.[.Cc...'.$\....O.&\|..>9>vhn}.'a.O.d.3....].....`wo.).....s.....v.........;wn..{.Og.u.....;.n?.{o...z.C'..:..s...C...._9t.\|Q.A....}<;..M `..s...c.y..8L..Y>.{.A....C'.1=g.0=..#.u...3..b...;8.........i.C1v.q..8.\|....0..l...U....c.~.B.r..P.............x...p..u.......V....x..zS....K..m...C.#+@f....z`.].......<....s.....)..e...O1..;...'I......OV..m....<....X...5.k.U..........GIx6....G.sU...........x.5j..?..l..;..t....Q{{F_.m..........J.....GB%\|.]/..y..b&..y*.......l{...;...g..SC.=...<.8._M..2.o.....7.-F....k.{FoA.J....VB%g.n1.z.?..p4..YxC.1....Z.>..{4...Q.....d4..........M3....B......I...Qw4i....u.;...h....0LQ..#,[;.[.l.h...F......xd8._/....Iy.'1Vo..94o.M....l.h{...hx...9.l]..t.....F...I0..6.0zs\..&.{..8.....M.....^.3....w....voty.3....].....&...{...%.r.=Z......y...

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 320 x 168, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1289
Entropy (8bit):	7.640302331365565
Encrypted:	false
SSDEEP:	24:7F0V/6B3J9xriLtLk15GCAlwxoCxE8WrNnL8ANo0TRoxR9/DEZf:7F0J69lGL12OC5Ri94ANo0doR9bo
MD5:	1AEC0FC461C3F62479FF81DF7E65FA38
SHA1:	447B19F7E7C7F1DC64131F3A53C889FBCEAD9865
SHA-256:	A115D94DF9E8B5C7AB6BD10A1138CCB967D1796A7FB2F581F6333FAA77B74A63
SHA-512:	DF4D87E9E4A64081D96E6B1E8FA0FB167FA8A51A2AB92E1EECBE073BCC677A15F9B341B208118C43BBAA34A3748932BFEB586BEB9CF6827E0A0636080977BDD3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@................NPLTE......A@rTS....Zgpo.<;n."4...LKz........i..$6........]]....=:l.!3........V8c....vIDATx...r.0.D[".....c...t....].....,T.....>&.:....8.\|.......,..K.i.I.qyE.s.Zk#,6.D%...`..Zs.U.D....J...(.1}2....c.;61.h....F..+..V..rp.Y..@f.......7a............\.1....kt^..X...s....@..kqy5...].k..uq...W...;.z&..`r....*wi.o..Wxo/#Vw..L...ogX........KoEy>?\..........E.N>.VU...lV.{..%..E.,.r^.....f...V....%R^....._Y...3p......N......d^'...\?^.'........rL^..c......i%..3.'..i.i.i.i.i...g.QFZ..E{.i...4....m...;.i.[x_#.....Hk.`.0#.~..N...F:"..F.^W.g.t...."F.:..r.\.h4.9.9.5S.\........;..;.f.`o...Q....D...l........oU.j.....9...U.$....C. ($.y5...).k-...4+.5`..........E;.r.......k..X.OF.8..h.aQ...3......g..+.sFZ...+..y.>....tIQ..k..RQ..._\.....M..d^.g"w.2...:.nS.....Tt.T(..&.y].+a...c.T:.".z...t...........n%..,..r%...;.8#.e..f..<. .].\|#..v......5.\..\|G#.<#..K'.....N..eQ.....eQ.....uQ.......V...5....viQ.b...2...7.

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 922
Category:	downloaded
Size (bytes):	570
Entropy (8bit):	7.614805453100012
Encrypted:	false
SSDEEP:	12:X4NBIVfLo/LQhHha2pVsfSASSK7UvInCDWmAZMp9dcEb:XeBcTo1isfSvSKQvwCgMKEb
MD5:	97C0842E661B81D1A9A5DE74339915BD
SHA1:	AF10B46B30175F0118808F37322B8BD3CADFFD59
SHA-256:	263A24B4C42677AD8E62C1B333F9380B419FF04A40513489AE05D16965010FD7
SHA-512:	327FB3068B266AB0993F38D882DA1628B17BF171917CC99F0B27C5BCB0E3B0D43957EACB586420E8AC7C49D46FBAD655304515B4B62CDDD826A584AE4FEBCD2F
Malicious:	false
Reputation:	low
URL:	http://www.policy-violation-10094985.victoriakent.co.uk/
Preview:	..........}SQO.0..+....-.e..H0!4.b.t....%q...6..S.....;..........XE..agN.Rr.<.*P&.j .t.".I.R.\|."...X.'...sVE($...8m\|9..d.j....kB$.t...$.YC.4.Y..!.`.%.\.Z9..7.TA......d.O......h..Cu/.GX3..LGP...h}y...JS...u..i.$.Z]%.../..w...=c+..?....`.]hM.T.T.Z....g.(..)Q;.P.X..t"4.P....F..z.2Z.%.J.'.7}zr.]]\n.?.=....h......no../nN>...l%n...sQ^.~.o....gw.i...`..-.W.....u)%g:...mi......E."..#.&8.{.}H.S.'Q+o...9..D....,Yr....].n."[...V21.f....W....9.%.H.......>.L......y&F.c.G.0..e.X...B..}._...#.......Sh..0.........r.....gTYd.i.L..3c;f..1....]..Q^....=.\#....

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1171
Entropy (8bit):	7.781720185416297
Encrypted:	false
SSDEEP:	24:VKI2BPsjd+UjT1i2ZvnocEVoC/eLJEl8V0zr6jXmqPSObz:p2BkR+6T19hxEhR8V0rDqPSObz
MD5:	68197EABE76D7CBB544C959303B3C75B
SHA1:	959271FE65419777664617F4F342916E719B43BE
SHA-256:	F11B29BFB3A1AD7279E38DF6571CDD1D0D675049611E53DEAA64EBC36DC7521C
SHA-512:	638D0ED2B4BB2D190EEF1B661EA70902F21BF87C9E63E2BAFE3A7975FBDA572363150EEBFE35093C631A62E88241165A6AC61549A9AA9C1842C40E0E632A1225
Malicious:	false
Reputation:	low
URL:	http://www.policy-violation-10094985.victoriakent.co.uk/favicon.png
Preview:	.PNG........IHDR... ... .....szz.....sRGB........MIDATXG.mL.e......<..9.<B..V.TH...t.>.f.^6...t.1..G.d:........Q.f/.5h%.....j.#.x.p.s^...n.Xtv.../.......~......./x..4@...):@...\|.J..C...kF..o...DT./ vd.u..TZ.....K..H<fBv%E.BBM...Pcjg..Z.L......p..S.3&..........v...,..(.X..j.q.....h...a"..L...1...Y.]..9.T(..i\|.....&..04~....~. ....!G...6..CD.,.............Y..^....yq..........m.E..)..P..@.e....dN,.`.6.....D.b3.......K.\|.BI.-..@.A9.p...mum._..z@./XqQ.B..([...T....}..Y..!....h.]r....o....A@.c.v..Y..#5...p.^....>........a..9..!....{....e..S9KB.r.W..f...J.'W]._$g...o..S...ut..E.D..G ..m.....sH;.)M.....1F.....7UH vc.=....H.e...M,<l3&7+.=_....2...-..Oh.....e.S.!*.B0.9U.js"P.....1.h......./..VY[...w)..GS...J.I.:.....G.."..&.c...,......@e..H..M._...f..K&{...i.p...z.T..[.......9.0.xj.Q.._..9................f...............cE..4.F.#..:.._.4K.....4.;U$...v)....\|.M..+S....n5..JKN..D......0B&.'b..8.d...nPC..2.x.9..\.......@..Z?D...'MH%..>.b{E.`..~b.f..u.v.EPe..

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 208 x 71, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13714
Entropy (8bit):	7.931444232890682
Encrypted:	false
SSDEEP:	384:Nmnw+9fYEYnaEc2id3tToLtUeK4UH8z1VvsKra:NmT4cpd3tEL5EH8zhe
MD5:	F4ACA03DED0C6A4663B04733407AC804
SHA1:	6B53376CC8BD782EA88A9DD14021CEA8D903913D
SHA-256:	CC2BFABBB2466AD7D352AB7E4F913FD1B77562461582FD84B6074B672FAB7DB3
SHA-512:	6A2B769A37BC88A073514D0E93B96730C4E0CE2D1DC54A6C011D3617AD27E901F53A6977E84C9CD6B4E121AFC0B49A2EE60DAAE505A3C4299DBAC83734E30BC6
Malicious:	false
Reputation:	low
URL:	http://www.policy-violation-10094985.victoriakent.co.uk/static/media/logo.a8116f16b948114a8812.png
Preview:	.PNG........IHDR.......G.....v......sRGB.........gAMA......a.....pHYs............e...LiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmp:CreatorTool="Adobe Photoshop 21.0 (Windows)" xmp:CreateDate="2023-07-03T17:39:36+07:00" xmp:MetadataDate="2023-07-03T17:39:36+07:00" xmp:ModifyDate="2023-07-03T17:39:36+07:00" xmpMM:InstanceID="xmp.iid:ac098970-12e1-ae42-b669-83dffa154736" xmpMM:DocumentID="adobe:docid:photoshop:9ab3e99d-59eb-4b4a-bc47-de81adff98d3" xmpMM:OriginalDocumentID="xmp.did:9d210902-801a-1349-b159-

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	438
Entropy (8bit):	5.193045421573156
Encrypted:	false
SSDEEP:	12:YGKAcdW9g49soR+YI+imYP2JSnVVHV2hn1TRB2DOexWb2RKJFtHdA:YdAcdWg42op2mYP2cVxV2hRn2DOIRwu
MD5:	8E802E8FD0A47B47BD051344AC1B5E02
SHA1:	0244E192F3650D456CBC3A4AD4DC649A7E4701DE
SHA-256:	ABF805EF54EF534433EEB6893D7F25573AE62375E36A9F7B2902676E0F767254
SHA-512:	65C69CB3C0D0A834E50282953ED74307602E60E596F4986E2235DC989FD3A4D9E32C8854389E4422E18A43539787D4A8A43BC64794BB4FE708799A7CAAB1A9FE
Malicious:	false
Reputation:	low
URL:	https://ip-scan.adspower.net/sys/config/ip/get-visitor-ip?ip=8.46.123.189
Preview:	{"code":0,"msg":"Success","data":{"ip":"8.46.123.189","ip_data":{"country":"us","region":"new york","city":"new york city","timezone":"America/New_York","latitude":"40.713200","longitude":"-74.006100","isp":"","zipcode":"10116","version":"3.0","ip_scan_channel":"ip2location"},"header":{},"language":"en-US,en;q=0.9","ua":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36"}}.

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	12
Entropy (8bit):	2.8553885422075336
Encrypted:	false
SSDEEP:	3:fuMEc:23c
MD5:	99C7886BEA2DE7A0101C2650904125B2
SHA1:	923B92CB8983479444E728E099B85F84A8DC1358
SHA-256:	FFF62C3400A9C4F4618583FD90966E4E5B1122239157CAA576BFD6A1FA71204D
SHA-512:	7FB99EB3F5DF99B330325BB84C3676ABFD4BA02A2F37C596FDBD717FEEEA84887522E4957D57FD2C77A6A73C56656D1B8A8D17BB28CE158CD474ECE6E71B5565
Malicious:	false
Reputation:	low
Preview:	8.46.123.189

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.110577243331642
Encrypted:	false
SSDEEP:	3:nkurr:k6
MD5:	12BCB719A3952C3073EC8720F453D568
SHA1:	38359A0CD38BB1CDB04652B308DB4ADBDD8B20D0
SHA-256:	A67A4459B4A53CDDB5579F37FA201203107C5367DB2F3E5CFD09F41B918C371E
SHA-512:	9C31F4005D6ECB72277445E2DE14B67C07A417B3B8AAD9A614A02FA7A84F333B74A56164A5614BF8D400789257AC4E5EA85651306DAEB70EFC2158D78B26B3C5
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChRDaHJvbWUvMTM0LjAuNjk5OC4zNhIgCRWc5t9i8JIrEgUNnroyiBIFDT0F21shtloEvl_FLrk=?alt=proto
Preview:	ChIKBw2eujKIGgAKBw09BdtbGgA=

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	12
Entropy (8bit):	2.8553885422075336
Encrypted:	false
SSDEEP:	3:fuMEc:23c
MD5:	99C7886BEA2DE7A0101C2650904125B2
SHA1:	923B92CB8983479444E728E099B85F84A8DC1358
SHA-256:	FFF62C3400A9C4F4618583FD90966E4E5B1122239157CAA576BFD6A1FA71204D
SHA-512:	7FB99EB3F5DF99B330325BB84C3676ABFD4BA02A2F37C596FDBD717FEEEA84887522E4957D57FD2C77A6A73C56656D1B8A8D17BB28CE158CD474ECE6E71B5565
Malicious:	false
Reputation:	low
URL:	https://api.ipify.org/?format=text
Preview:	8.46.123.189

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58966)
Category:	downloaded
Size (bytes):	96518
Entropy (8bit):	4.751629736723021
Encrypted:	false
SSDEEP:	1536:E6M1MvMaMfMRQk709/bQZMfjSFOlyPG9dXgRw0J:H709/UGGFwyPG9dwRw0J
MD5:	FBF1F3445F2554BCE753C92CF6851B41
SHA1:	3C73FF1CD7B97C189F139367DBAC43DCF5D2C70D
SHA-256:	E5E202E3C899507992952533F57B634722B69B34241D271963559D31AA33EF81
SHA-512:	29CDF6DEF18112ACD39A8B801029D571EC90AB2A9DB128AA2D021204BDBD6945B853F33BA523C0FE0114650AAFD5CC31E0E9D8C53C6F7B950C839193E8BE0926
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.6.0/css/all.min.css
Preview:	/!. Font Awesome Free 6.6.0 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). * Copyright 2024 Fonticons, Inc.. */..fa{font-family:var(--fa-style-family,"Font Awesome 6 Free");font-weight:var(--fa-style,900)}.fa,.fa-brands,.fa-classic,.fa-regular,.fa-sharp-solid,.fa-solid,.fab,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:var(--fa-display,inline-block);font-style:normal;font-variant:normal;line-height:1;text-rendering:auto}.fa-classic,.fa-regular,.fa-solid,.far,.fas{font-family:"Font Awesome 6 Free"}.fa-brands,.fab{font-family:"Font Awesome 6 Brands"}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-2xs{font-size:.625em;line-height:.1em;vertical-align:.225em}.fa-xs{font-size:.75em

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 320 x 168, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1289
Entropy (8bit):	7.640302331365565
Encrypted:	false
SSDEEP:	24:7F0V/6B3J9xriLtLk15GCAlwxoCxE8WrNnL8ANo0TRoxR9/DEZf:7F0J69lGL12OC5Ri94ANo0doR9bo
MD5:	1AEC0FC461C3F62479FF81DF7E65FA38
SHA1:	447B19F7E7C7F1DC64131F3A53C889FBCEAD9865
SHA-256:	A115D94DF9E8B5C7AB6BD10A1138CCB967D1796A7FB2F581F6333FAA77B74A63
SHA-512:	DF4D87E9E4A64081D96E6B1E8FA0FB167FA8A51A2AB92E1EECBE073BCC677A15F9B341B208118C43BBAA34A3748932BFEB586BEB9CF6827E0A0636080977BDD3
Malicious:	false
Reputation:	low
URL:	https://flagcdn.com/w320/us.png
Preview:	.PNG........IHDR...@................NPLTE......A@rTS....Zgpo.<;n."4...LKz........i..$6........]]....=:l.!3........V8c....vIDATx...r.0.D[".....c...t....].....,T.....>&.:....8.\|.......,..K.i.I.qyE.s.Zk#,6.D%...`..Zs.U.D....J...(.1}2....c.;61.h....F..+..V..rp.Y..@f.......7a............\.1....kt^..X...s....@..kqy5...].k..uq...W...;.z&..`r....*wi.o..Wxo/#Vw..L...ogX........KoEy>?\..........E.N>.VU...lV.{..%..E.,.r^.....f...V....%R^....._Y...3p......N......d^'...\?^.'........rL^..c......i%..3.'..i.i.i.i.i...g.QFZ..E{.i...4....m...;.i.[x_#.....Hk.`.0#.~..N...F:"..F.^W.g.t...."F.:..r.\.h4.9.9.5S.\........;..;.f.`o...Q....D...l........oU.j.....9...U.$....C. ($.y5...).k-...4+.5`..........E;.r.......k..X.OF.8..h.aQ...3......g..+.sFZ...+..y.>....tIQ..k..RQ..._\.....M..d^.g"w.2...:.nS.....Tt.T(..&.y].+a...c.T:.".z...t...........n%..,..r%...;.8#.e..f..<. .].\|#..v......5.\..\|G#.<#..K'.....N..eQ.....eQ.....uQ.......V...5....viQ.b...2...7.

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1113)
Category:	downloaded
Size (bytes):	1118
Entropy (8bit):	5.563346594898253
Encrypted:	false
SSDEEP:	24:To0ntQKovtTXYBHslgT1d1uawRo84kDPU3DX3ATFuoBN2t2t2t2t2t2t2toHfffY:dOKCdIKlgJXwRobuUbA5uSNYYYYYYYoA
MD5:	EC5CC6819C90FD8F31780B586D051A5C
SHA1:	342DDC4599F2BE7789F03D3782D4BE6671404C9C
SHA-256:	6E0382AAEFF374762454B60EBB3A8FE165A0C02F5E94F38A92E5AF992F837E5C
SHA-512:	3EB9116B4C6856E7AED3A8A4564EF3E3E6A63505D18A3A043A22F2847E9606964F6A7A2B684248BA99AB6AFDA345620A6D4487D5FDFC1EC93AA69688E4608520
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE
Preview:	)]}'.["",["selena gomez benny blanco sunset blvd","nfl free agents signings","layoffs edward jones","nintendo switch games","chicago river dyeing 2025","crossfit open 25.3 workouts","steam spring sale 2025 games","lip bu tan intel ceo"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChoIkk4SFQoRVHJlbmRpbmcgc2VhcmNoZXMoCg\u003d\u003d","google:suggestdetail":[{"google:entityinfo":"Cg0vZy8xMXgxOHFmdDhyEgtTdW5zZXQgQmx2ZDolc2VsZW5hIGdvbWV6IGJlbm55IGJsYW5jbyBzdW5zZXQgYmx2ZFJaZ3Nfc3NwPWVKemo0dFZQMXpjMHJEQzBLRXdyc1NneVlQUlNMVTdOU2MxTFZFalB6MDJ0VWtoS3pjdXJWRWpLU2N4THpsY29MczByVGkwQjhzcFNBT1ZfRXNRcAI\u003d","zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002}],"google:suggesteventid":"-4984399602203489279","google:suggestrelevance":[1257,1256,1255,1254,1253,1252,1251,1250],"google:suggestsubtypes":[[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,1

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 15033
Category:	downloaded
Size (bytes):	3980
Entropy (8bit):	7.949507065049015
Encrypted:	false
SSDEEP:	96:kDsHonwJsbnxgsYIZDkX5S56pnmvSv7YtLU4f1k974+B:hHonwJsbawpkX5VmvBtl1E7t
MD5:	2F449822689FFA564E99C96FBF7C650E
SHA1:	9DFE9A2F4B997838240CA82499157856233B6A16
SHA-256:	C84544BC1373D3898C11205D11F8C05AC5EBB025B4ACACFEEDB420B2C2CB8488
SHA-512:	542874C155AB33DBE2FFCA5C7704AD257D3477D5F4B5EF53FD0A310ACADE82D957AE00FFF35D90FEC711925B5CE729685EAF38719B40992F815720D42087360A
Malicious:	false
Reputation:	low
URL:	http://www.policy-violation-10094985.victoriakent.co.uk/static/css/main.56bf616a.css
Preview:	...........[....}..]...7.FO?d...&.......H0=8P.es........~ ..(.....w..cU}.X,....../..%OX......Rq..!....`.Q.....(?....g.B..J....s.`U.....T.'.\|......#-....(...g..4....u:.Pi.=.KQ.?.R@...?b........Y..O.<#.Sh..jdsXr...y...]tC8.Y.....Q....?............i.0b.O...hIy.S.\|.....K@L^p...[..:;...?....NQ..o.(D....4.....?\|o.0...q.r..%.,C,v-N..w(B....z.....m. ...(..x.)-.E...4.ra.EA....$$..0...".\.}.5...!....<...d?...8....Q....b.`.+.P)&.[c0z.n...X....9...%......>7??.....'..o+\|..C.i9.....#......LT..I....<"......m.... h.^p&..W..m.{xW.m`.....z.". ..j.....);.....[...e.[....G.>..1...}\.CX5.7EI^&.i.ej.YQ.Kl..-...$.$CL...)...TT.W..1...b.........j..y.....6K....~l........$D...}..:.y]i.M.~2^.}E9VNb.@.....1.S......~..P!h...P.HjA..8.K....Z...+....~T....L.c.Ij!hi..M+q`..l..J.-..!x.[z.)..K.Y..!$,....'H...%....+.m_.,..m.......qIK4q.0.....V.u..b.#...uR`.MTXU.2X.(n...L....l. ......Z.b...4.9...Bk!...Z.NYc..gHpvQ!..3....=0....@...P\.....KF...Tw.<...Z. K._....cD.}g<.y..._.4.Z.

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 234 x 234, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	29742
Entropy (8bit):	7.958289420140281
Encrypted:	false
SSDEEP:	768:WETz22TJBP2WmVDwnQJC3MNGQActG7/gqSSonlqCKAYY4w2zwlBFcG:Wo2yl2tVDwQJC7sq+FiYNPlgG
MD5:	B8A5EA4F10CCD1475CD42EC0F81E9516
SHA1:	BFAA0BC99B3F21D57D206DDC941BDCCFFEB4E33F
SHA-256:	5822EE8CE2A041FCF9A9D8315A611BB1646AD0A1035A06280D87EDC19D565173
SHA-512:	9D7DC74E3339261C8828E5DF17B7258720F5B4E635C17B8B46E29D22B4AE6902A872121F22C38410D3E6E4B6D07115B9E7FB7C161E07706EB1669F2EF865103A
Malicious:	false
Reputation:	low
URL:	http://www.policy-violation-10094985.victoriakent.co.uk/static/media/arlet1.44e75d617b8dff7efeb6.png
Preview:	.PNG........IHDR................N....pHYs..........+.....3iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 116.a6bfb84, 2023/07/17-15:51:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:tiff="http://ns.adobe.com/tiff/1.0/" xmlns:exif="http://ns.adobe.com/exif/1.0/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="adobe:docid:photoshop:63bc5576-53af-f24e-8c99-397dca4c1f5b" xmpMM:InstanceID="xmp.iid:b43589c9-4b2b-6c42-85da-15f6af244761" xmpMM:OriginalDocumentID="F429E75CE59D61E285C7127FDA15E0D9" dc:format="image/png" photoshop:ColorMode="3" tiff:ImageWi

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 14, 2025 10:40:02.166153908 CET	49671	443	192.168.2.11	204.79.197.203
Mar 14, 2025 10:40:02.493875027 CET	49671	443	192.168.2.11	204.79.197.203
Mar 14, 2025 10:40:03.103193045 CET	49671	443	192.168.2.11	204.79.197.203
Mar 14, 2025 10:40:04.306632042 CET	49671	443	192.168.2.11	204.79.197.203
Mar 14, 2025 10:40:05.174619913 CET	49715	443	192.168.2.11	142.250.186.68
Mar 14, 2025 10:40:05.174664974 CET	443	49715	142.250.186.68	192.168.2.11
Mar 14, 2025 10:40:05.175228119 CET	49715	443	192.168.2.11	142.250.186.68
Mar 14, 2025 10:40:05.175228119 CET	49715	443	192.168.2.11	142.250.186.68
Mar 14, 2025 10:40:05.175261974 CET	443	49715	142.250.186.68	192.168.2.11
Mar 14, 2025 10:40:05.829708099 CET	443	49715	142.250.186.68	192.168.2.11
Mar 14, 2025 10:40:05.829804897 CET	49715	443	192.168.2.11	142.250.186.68
Mar 14, 2025 10:40:05.831300020 CET	49715	443	192.168.2.11	142.250.186.68
Mar 14, 2025 10:40:05.831315041 CET	443	49715	142.250.186.68	192.168.2.11
Mar 14, 2025 10:40:05.831603050 CET	443	49715	142.250.186.68	192.168.2.11
Mar 14, 2025 10:40:05.883936882 CET	49715	443	192.168.2.11	142.250.186.68
Mar 14, 2025 10:40:06.712120056 CET	49671	443	192.168.2.11	204.79.197.203
Mar 14, 2025 10:40:06.911468983 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:06.911851883 CET	49718	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:06.916260004 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:06.916347027 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:06.916600943 CET	80	49718	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:06.916913033 CET	49718	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:06.917712927 CET	49719	443	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:06.917754889 CET	443	49719	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:06.917814016 CET	49719	443	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:06.918039083 CET	49719	443	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:06.918047905 CET	443	49719	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:07.835513115 CET	443	49719	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:07.835872889 CET	49719	443	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:07.836011887 CET	443	49719	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:07.836093903 CET	49719	443	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:07.836503029 CET	49720	443	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:07.836549997 CET	443	49720	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:07.836694956 CET	49720	443	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:07.836941957 CET	49720	443	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:07.836960077 CET	443	49720	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:08.753915071 CET	443	49720	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:08.754966974 CET	443	49720	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:08.755109072 CET	49720	443	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:08.755503893 CET	49720	443	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:08.755526066 CET	443	49720	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:08.760015965 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:08.764718056 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.220808983 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.220827103 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.220844030 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.220905066 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.220949888 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.269800901 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.270221949 CET	49718	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.274450064 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.275058985 CET	80	49718	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.285610914 CET	49722	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:09.285656929 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:09.285732031 CET	49722	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:09.285887957 CET	49722	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:09.285901070 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:09.646162987 CET	80	49718	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.646207094 CET	80	49718	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.646219969 CET	80	49718	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.646251917 CET	49718	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.646290064 CET	80	49718	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.646332026 CET	80	49718	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.646606922 CET	49718	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.660280943 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.660295963 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.660319090 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.660332918 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.660352945 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.660366058 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.660382986 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.660398006 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.660398006 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.660439014 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.660681963 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.660693884 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.660727024 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.660947084 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.660959959 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.660973072 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.660983086 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.661014080 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.665132046 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.665146112 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.665158033 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.665170908 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.665194035 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.665216923 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.697837114 CET	49718	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.744507074 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:09.744581938 CET	49722	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:09.747155905 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.747181892 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.747196913 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.747209072 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.747217894 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.747235060 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.747289896 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.747416973 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.747430086 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.747493029 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.747595072 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.747608900 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.747621059 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.747633934 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.747662067 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.747845888 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.747865915 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.747889042 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.747900009 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.747908115 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.747912884 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.747936010 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.748912096 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.748925924 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.748939991 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.748950958 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.748960018 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.748965025 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.748975039 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.748980045 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.749000072 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.749007940 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.749016047 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.749047041 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.749382019 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.749418974 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.749432087 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.749445915 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.749459028 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.749475956 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.753808022 CET	49722	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:09.753818035 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:09.754239082 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:09.754553080 CET	49722	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:09.791577101 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.800323009 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:09.834034920 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.834063053 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.834075928 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.834089994 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.834127903 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.834148884 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.834166050 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.834180117 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.834192038 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.834203959 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.834217072 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.834218979 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.834229946 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.834239006 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.834244013 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.834255934 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.834269047 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.834276915 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.834307909 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.835047007 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.835062027 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.835074902 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.835086107 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.835088015 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.835098028 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.835108995 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.835117102 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.835124016 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.835136890 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.835144043 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.835150957 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.835163116 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.835164070 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.835191011 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.835796118 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.835845947 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.835867882 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.835880995 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.835894108 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.835906982 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.835923910 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.835944891 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.836297989 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.836323023 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.836343050 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.836354971 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.836366892 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.836374044 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.836380005 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.836393118 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.836402893 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.836405039 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.836420059 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.836461067 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.837097883 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.837111950 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.837124109 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.837146044 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.837146044 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.837161064 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.837167978 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.837177992 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.837192059 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.837202072 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.837207079 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.837217093 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.837222099 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.837230921 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.837275982 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.837996006 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.838011026 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.838052988 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.885330915 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:09.885381937 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:09.885407925 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:09.885432959 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.885436058 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:09.885462046 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:09.885471106 CET	49722	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:09.885483027 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:09.885504007 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:09.885519028 CET	49722	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:09.885519028 CET	49722	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:09.885551929 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:09.885586977 CET	49722	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:09.885596991 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:09.889900923 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:09.889935970 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:09.889955997 CET	49722	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:09.889966011 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:09.889977932 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:09.890001059 CET	49722	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:09.920797110 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.920830011 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.920841932 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.920847893 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.920852900 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.920857906 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.920865059 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.920870066 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.920886040 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.920905113 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.920917988 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.920929909 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.920943975 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.920995951 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.921241999 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.921255112 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.921267986 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.921278954 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.921289921 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.921318054 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.921422005 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.921444893 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.921456099 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.921458960 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.921469927 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.921483040 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:09.921497107 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.921541929 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:09.934462070 CET	49722	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:09.972047091 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:09.972107887 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:09.972141981 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:09.972170115 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:09.972171068 CET	49722	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:09.972201109 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:09.972219944 CET	49722	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:09.972711086 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:09.972743988 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:09.972752094 CET	49722	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:09.972759962 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:09.972804070 CET	49722	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:09.972810984 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:09.973205090 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:09.973253965 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:09.973284006 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:09.973310947 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:09.973313093 CET	49722	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:09.973324060 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:09.973334074 CET	49722	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:09.973362923 CET	49722	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:09.973370075 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:09.974255085 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:09.974288940 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:09.974303007 CET	49722	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:09.974311113 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:09.974347115 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:09.974353075 CET	49722	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:09.974361897 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:09.974404097 CET	49722	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:09.974410057 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:09.975203037 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:09.975249052 CET	49722	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:09.975255966 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:10.026675940 CET	49722	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:10.026709080 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:10.058794022 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:10.058836937 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:10.058861017 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:10.058885098 CET	49722	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:10.058897018 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:10.058916092 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:10.058933973 CET	49722	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:10.058958054 CET	49722	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:10.059007883 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:10.059015989 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:10.059058905 CET	49722	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:10.059195995 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:10.059252024 CET	49722	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:10.059257984 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:10.059295893 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:10.059333086 CET	49722	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:10.059335947 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:10.059349060 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:10.059386015 CET	49722	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:10.059968948 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:10.060020924 CET	49722	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:10.060022116 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:10.060034037 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:10.060065985 CET	49722	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:10.060066938 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:10.060103893 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:10.060106993 CET	49722	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:10.060113907 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:10.060147047 CET	49722	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:10.060652018 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:10.060691118 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:10.060699940 CET	49722	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:10.060708046 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:10.060745955 CET	49722	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:10.060751915 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:10.060806990 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:10.060849905 CET	49722	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:10.087014914 CET	49722	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:10.087037086 CET	443	49722	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:10.188630104 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:10.188944101 CET	49718	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:10.189802885 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:10.190707922 CET	49725	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:10.193420887 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.193592072 CET	80	49718	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.194916010 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.194984913 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:10.195182085 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:10.195558071 CET	80	49725	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.195609093 CET	49725	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:10.195780993 CET	49725	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:10.199835062 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.200442076 CET	80	49725	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.380633116 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:10.380676031 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:10.380734921 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:10.380990028 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:10.381004095 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:10.381496906 CET	49715	443	192.168.2.11	142.250.186.68
Mar 14, 2025 10:40:10.390162945 CET	49727	443	192.168.2.11	104.26.13.205
Mar 14, 2025 10:40:10.390198946 CET	443	49727	104.26.13.205	192.168.2.11
Mar 14, 2025 10:40:10.390531063 CET	49727	443	192.168.2.11	104.26.13.205
Mar 14, 2025 10:40:10.390531063 CET	49727	443	192.168.2.11	104.26.13.205
Mar 14, 2025 10:40:10.390567064 CET	443	49727	104.26.13.205	192.168.2.11
Mar 14, 2025 10:40:10.424321890 CET	443	49715	142.250.186.68	192.168.2.11
Mar 14, 2025 10:40:10.586886883 CET	80	49718	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.586905956 CET	80	49718	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.586916924 CET	80	49718	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.586927891 CET	80	49718	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.586940050 CET	80	49718	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.586966991 CET	49718	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:10.586999893 CET	49718	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:10.587307930 CET	80	49718	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.587321043 CET	80	49718	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.587333918 CET	80	49718	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.587344885 CET	80	49718	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.587389946 CET	49718	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:10.587481022 CET	49718	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:10.588053942 CET	80	49718	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.588068962 CET	80	49718	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.588080883 CET	80	49718	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.588090897 CET	80	49718	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.588103056 CET	80	49718	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.588176012 CET	49718	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:10.588176012 CET	49718	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:10.588653088 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.588666916 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.588680029 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.588711977 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:10.588722944 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.588747025 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.588766098 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.588785887 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.588799000 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.588809967 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.588816881 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:10.588823080 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.588835955 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.588849068 CET	80	49718	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.588850975 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:10.588866949 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:10.589221954 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.589236021 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.589282990 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:10.590596914 CET	443	49715	142.250.186.68	192.168.2.11
Mar 14, 2025 10:40:10.590643883 CET	443	49715	142.250.186.68	192.168.2.11
Mar 14, 2025 10:40:10.590719938 CET	49715	443	192.168.2.11	142.250.186.68
Mar 14, 2025 10:40:10.590738058 CET	443	49715	142.250.186.68	192.168.2.11
Mar 14, 2025 10:40:10.593103886 CET	80	49718	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.593127012 CET	80	49718	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.593216896 CET	49718	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:10.594001055 CET	443	49715	142.250.186.68	192.168.2.11
Mar 14, 2025 10:40:10.594053030 CET	49715	443	192.168.2.11	142.250.186.68
Mar 14, 2025 10:40:10.602511883 CET	49715	443	192.168.2.11	142.250.186.68
Mar 14, 2025 10:40:10.602530003 CET	443	49715	142.250.186.68	192.168.2.11
Mar 14, 2025 10:40:10.634999037 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:10.635013103 CET	49718	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:10.637667894 CET	49678	443	192.168.2.11	20.189.173.7
Mar 14, 2025 10:40:10.673871040 CET	80	49718	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.673899889 CET	80	49718	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.673913002 CET	80	49718	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.673923969 CET	80	49718	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.673938990 CET	80	49718	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.673949003 CET	49718	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:10.673998117 CET	49718	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:10.674302101 CET	80	49718	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.674321890 CET	80	49718	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.674333096 CET	80	49718	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.674340010 CET	49718	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:10.674345016 CET	80	49718	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.674357891 CET	80	49718	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.674384117 CET	49718	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:10.674472094 CET	49718	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:10.715066910 CET	49729	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:10.715106010 CET	443	49729	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:10.715141058 CET	49730	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:10.715181112 CET	443	49730	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:10.715188026 CET	49729	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:10.715265036 CET	49730	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:10.715413094 CET	49729	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:10.715428114 CET	443	49729	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:10.715538025 CET	49730	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:10.715548992 CET	443	49730	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:10.835205078 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:10.835709095 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:10.835726976 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:10.835933924 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:10.835939884 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:10.857258081 CET	443	49727	104.26.13.205	192.168.2.11
Mar 14, 2025 10:40:10.857335091 CET	49727	443	192.168.2.11	104.26.13.205
Mar 14, 2025 10:40:10.858721018 CET	49727	443	192.168.2.11	104.26.13.205
Mar 14, 2025 10:40:10.858727932 CET	443	49727	104.26.13.205	192.168.2.11
Mar 14, 2025 10:40:10.858997107 CET	443	49727	104.26.13.205	192.168.2.11
Mar 14, 2025 10:40:10.859321117 CET	49727	443	192.168.2.11	104.26.13.205
Mar 14, 2025 10:40:10.900320053 CET	443	49727	104.26.13.205	192.168.2.11
Mar 14, 2025 10:40:10.935372114 CET	80	49725	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.935398102 CET	80	49725	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.935415983 CET	80	49725	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.935427904 CET	80	49725	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.935447931 CET	80	49725	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.935457945 CET	80	49725	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.935472012 CET	80	49725	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.935487032 CET	49725	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:10.935508966 CET	80	49725	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.935522079 CET	80	49725	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.935534000 CET	80	49725	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.935550928 CET	49725	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:10.935595989 CET	49725	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:10.937815905 CET	49678	443	192.168.2.11	20.189.173.7
Mar 14, 2025 10:40:10.941423893 CET	80	49725	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.941440105 CET	80	49725	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.941490889 CET	49725	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:10.959367990 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:10.959413052 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:10.959484100 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:10.959487915 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:10.959511042 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:10.959537983 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:10.959888935 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:10.959935904 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:10.959944010 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:10.960817099 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:10.960845947 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:10.960891962 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:10.960900068 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:10.960946083 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:10.964401007 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:10.964451075 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:10.970192909 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.970364094 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.970387936 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.970398903 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.970412016 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.970422983 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.970429897 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:10.970438957 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.970446110 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.970453978 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.970463991 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:10.970469952 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.970496893 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:10.970535040 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:10.975337029 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.975353003 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.975364923 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:10.975400925 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:10.988491058 CET	443	49727	104.26.13.205	192.168.2.11
Mar 14, 2025 10:40:10.988543987 CET	443	49727	104.26.13.205	192.168.2.11
Mar 14, 2025 10:40:10.988981009 CET	49727	443	192.168.2.11	104.26.13.205
Mar 14, 2025 10:40:11.000956059 CET	49727	443	192.168.2.11	104.26.13.205
Mar 14, 2025 10:40:11.000974894 CET	443	49727	104.26.13.205	192.168.2.11
Mar 14, 2025 10:40:11.017635107 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:11.022989035 CET	80	49725	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.023009062 CET	80	49725	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.023022890 CET	80	49725	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.023071051 CET	80	49725	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.023075104 CET	49725	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:11.023111105 CET	49725	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:11.024327040 CET	49731	443	192.168.2.11	47.254.130.237
Mar 14, 2025 10:40:11.024358034 CET	443	49731	47.254.130.237	192.168.2.11
Mar 14, 2025 10:40:11.024597883 CET	49731	443	192.168.2.11	47.254.130.237
Mar 14, 2025 10:40:11.024597883 CET	49731	443	192.168.2.11	47.254.130.237
Mar 14, 2025 10:40:11.024630070 CET	443	49731	47.254.130.237	192.168.2.11
Mar 14, 2025 10:40:11.046046019 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.046133995 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.046169043 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.046210051 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.046221972 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:11.046241999 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.046268940 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:11.046509027 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.046542883 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.046552896 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:11.046560049 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.046602964 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.046624899 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:11.046632051 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.046678066 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:11.046685934 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.047317028 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.047358036 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.047363043 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:11.047369957 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.047414064 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:11.047420025 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.047431946 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.047489882 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.047494888 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:11.047502995 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.047528982 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:11.048185110 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.048264027 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.048294067 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.048321009 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:11.048330069 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.048475027 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:11.062767029 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.062781096 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.062834024 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:11.090379000 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.113907099 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.113930941 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.113944054 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.113955975 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.113969088 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.114018917 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:11.114079952 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:11.114300966 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.114309072 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.114320993 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.114331961 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.114356995 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:11.114376068 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:11.132818937 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.132862091 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.132893085 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.132915974 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.132939100 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:11.132941008 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.132952929 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.132997990 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:11.133008957 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.133060932 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.133110046 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:11.133122921 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.133416891 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.133460045 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:11.133469105 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.133511066 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:11.133527994 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.133815050 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.133867025 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:11.133874893 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.133920908 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.133922100 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:11.133933067 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.133970022 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.133972883 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:11.133980036 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.134139061 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:11.134139061 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:11.134952068 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.135023117 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:11.135026932 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.135039091 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.135118961 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:11.135767937 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.135824919 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:11.135828972 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.135839939 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.135907888 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:11.136606932 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.136643887 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.136677980 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:11.136698961 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.136729956 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:11.148896933 CET	49732	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:11.148920059 CET	443	49732	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:11.149054050 CET	49732	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:11.149322033 CET	49732	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:11.149334908 CET	443	49732	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:11.154190063 CET	49733	443	192.168.2.11	104.26.13.205
Mar 14, 2025 10:40:11.154226065 CET	443	49733	104.26.13.205	192.168.2.11
Mar 14, 2025 10:40:11.154333115 CET	49733	443	192.168.2.11	104.26.13.205
Mar 14, 2025 10:40:11.154572964 CET	49733	443	192.168.2.11	104.26.13.205
Mar 14, 2025 10:40:11.154581070 CET	443	49733	104.26.13.205	192.168.2.11
Mar 14, 2025 10:40:11.176934004 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.176994085 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:11.177011967 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.177062035 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:11.229105949 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.229151964 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.229170084 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:11.229182959 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.229197025 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.229229927 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:11.229231119 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.229266882 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:11.229266882 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:11.229269981 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.229280949 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.229407072 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:11.229715109 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.229752064 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.229765892 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:11.229778051 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.229819059 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:11.229841948 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.229873896 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.229902983 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:11.229918957 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.229945898 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:11.230525017 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.230559111 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.230593920 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.230621099 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:11.230628967 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.230644941 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:11.230658054 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:11.230683088 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.230725050 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:11.236218929 CET	49726	443	192.168.2.11	104.17.25.14
Mar 14, 2025 10:40:11.236244917 CET	443	49726	104.17.25.14	192.168.2.11
Mar 14, 2025 10:40:11.397413969 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.397452116 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.397464991 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.397478104 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.397550106 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:11.397550106 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:11.397752047 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.397818089 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.397830009 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.397842884 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.397854090 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.397881985 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:11.397911072 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:11.398575068 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.398586988 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.398600101 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.398612976 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.398626089 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.398633003 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:11.398797989 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:11.399343967 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.399364948 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.399379015 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.399391890 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.399405956 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.399442911 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:11.399442911 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:11.400238037 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.400257111 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.400269985 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.400281906 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.400288105 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:11.400295019 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.400336981 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:11.400336981 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:11.401110888 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.401123047 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.401145935 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.401158094 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.401170015 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.401174068 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:11.401432037 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:11.401993036 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.402050018 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.402101994 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:11.521954060 CET	49671	443	192.168.2.11	204.79.197.203
Mar 14, 2025 10:40:11.539133072 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.539160013 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.539171934 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.539199114 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.539211035 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.539226055 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.539280891 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:11.539280891 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:11.539292097 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.539436102 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.539485931 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:11.539488077 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.539506912 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.539531946 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.539544106 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.539554119 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.539566994 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.539596081 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:11.539596081 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:11.539665937 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:11.542851925 CET	49678	443	192.168.2.11	20.189.173.7
Mar 14, 2025 10:40:11.609589100 CET	443	49733	104.26.13.205	192.168.2.11
Mar 14, 2025 10:40:11.609668970 CET	49733	443	192.168.2.11	104.26.13.205
Mar 14, 2025 10:40:11.610749960 CET	49733	443	192.168.2.11	104.26.13.205
Mar 14, 2025 10:40:11.610759020 CET	443	49733	104.26.13.205	192.168.2.11
Mar 14, 2025 10:40:11.610979080 CET	443	49733	104.26.13.205	192.168.2.11
Mar 14, 2025 10:40:11.611480951 CET	49733	443	192.168.2.11	104.26.13.205
Mar 14, 2025 10:40:11.633595943 CET	443	49729	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:11.634155989 CET	443	49729	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:11.634808064 CET	49729	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:11.652317047 CET	443	49733	104.26.13.205	192.168.2.11
Mar 14, 2025 10:40:11.654130936 CET	443	49730	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:11.654897928 CET	443	49730	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:11.654946089 CET	49730	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:11.680989027 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.681021929 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.681035995 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.681058884 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.681072950 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.681118965 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:11.681118965 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:11.681309938 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.681337118 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.681349039 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.681360006 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.681372881 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.681379080 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:11.681379080 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:11.681431055 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:11.681730986 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.681776047 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.681787968 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.681799889 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.681819916 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.681833982 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.681849957 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:11.681849957 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:11.681880951 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:11.753495932 CET	443	49733	104.26.13.205	192.168.2.11
Mar 14, 2025 10:40:11.753556967 CET	443	49733	104.26.13.205	192.168.2.11
Mar 14, 2025 10:40:11.753617048 CET	49733	443	192.168.2.11	104.26.13.205
Mar 14, 2025 10:40:11.823355913 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.823374033 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.823386908 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.823398113 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.823414087 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.823420048 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.823434114 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.823446035 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.823457956 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.823483944 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:11.823518038 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:11.823678017 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.823754072 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:11.823771000 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.823786020 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.823801041 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.823812962 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.823823929 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.823870897 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:11.823870897 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:11.848731041 CET	443	49731	47.254.130.237	192.168.2.11
Mar 14, 2025 10:40:11.848860979 CET	49731	443	192.168.2.11	47.254.130.237
Mar 14, 2025 10:40:11.906886101 CET	49730	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:11.906907082 CET	443	49730	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:11.907509089 CET	49734	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:11.907532930 CET	443	49734	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:11.907592058 CET	49734	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:11.907845974 CET	49729	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:11.907864094 CET	443	49729	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:11.908154011 CET	49735	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:11.908195972 CET	443	49735	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:11.908247948 CET	49735	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:11.909811974 CET	49734	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:11.909826994 CET	443	49734	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:11.909960032 CET	49735	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:11.909984112 CET	443	49735	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:11.910572052 CET	49731	443	192.168.2.11	47.254.130.237
Mar 14, 2025 10:40:11.910588026 CET	443	49731	47.254.130.237	192.168.2.11
Mar 14, 2025 10:40:11.910882950 CET	443	49731	47.254.130.237	192.168.2.11
Mar 14, 2025 10:40:11.912523985 CET	49731	443	192.168.2.11	47.254.130.237
Mar 14, 2025 10:40:11.915324926 CET	49733	443	192.168.2.11	104.26.13.205
Mar 14, 2025 10:40:11.915332079 CET	443	49733	104.26.13.205	192.168.2.11
Mar 14, 2025 10:40:11.956320047 CET	443	49731	47.254.130.237	192.168.2.11
Mar 14, 2025 10:40:11.964807987 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.964835882 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.964849949 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.964862108 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.964879036 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.964898109 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.964910984 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.964920044 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.964982986 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:11.964982986 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:11.964982986 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:11.965224028 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.965235949 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.965248108 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.965259075 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.965276957 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.965302944 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:11.965634108 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.965646982 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.965662003 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.965672970 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.965686083 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:11.965708971 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:11.965708971 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:11.965751886 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:12.049702883 CET	443	49732	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:12.049968958 CET	49732	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:12.050076008 CET	443	49732	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:12.050131083 CET	49732	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:12.050568104 CET	49737	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:12.050616980 CET	443	49737	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:12.050699949 CET	49737	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:12.050873995 CET	49737	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:12.050888062 CET	443	49737	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:12.096091986 CET	443	49731	47.254.130.237	192.168.2.11
Mar 14, 2025 10:40:12.097932100 CET	443	49731	47.254.130.237	192.168.2.11
Mar 14, 2025 10:40:12.098010063 CET	49731	443	192.168.2.11	47.254.130.237
Mar 14, 2025 10:40:12.098417044 CET	49731	443	192.168.2.11	47.254.130.237
Mar 14, 2025 10:40:12.098433971 CET	443	49731	47.254.130.237	192.168.2.11
Mar 14, 2025 10:40:12.108676910 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.108691931 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.108704090 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.108791113 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.108808994 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.108820915 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.108833075 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.108834028 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:12.108834028 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:12.108844995 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.108884096 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:12.108884096 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:12.109261990 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.109287024 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.109303951 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.109316111 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.109329939 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.109374046 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:12.109374046 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:12.109801054 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.109817982 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.109824896 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.109827042 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.109920979 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:12.122270107 CET	49738	443	192.168.2.11	47.254.130.237
Mar 14, 2025 10:40:12.122293949 CET	443	49738	47.254.130.237	192.168.2.11
Mar 14, 2025 10:40:12.122368097 CET	49738	443	192.168.2.11	47.254.130.237
Mar 14, 2025 10:40:12.122529984 CET	49738	443	192.168.2.11	47.254.130.237
Mar 14, 2025 10:40:12.122540951 CET	443	49738	47.254.130.237	192.168.2.11
Mar 14, 2025 10:40:12.251281977 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.251300097 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.251312971 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.251324892 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.251336098 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.251348019 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.251358986 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.251375914 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.251386881 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.251385927 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:12.251396894 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.251409054 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.251425982 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:12.251425982 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:12.251441002 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:12.252109051 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.252123117 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.252140045 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.252151012 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.252161980 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.252172947 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.252180099 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:12.252180099 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:12.252183914 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.252197027 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:12.252228975 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:12.394845009 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.394860029 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.394898891 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.394912958 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.394921064 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.394943953 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:12.394951105 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.394958019 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.394969940 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.394978046 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.394987106 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.394993067 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.395014048 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:12.395158052 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:12.395876884 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.395889997 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.395901918 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.395920038 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.395927906 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:12.395978928 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:12.396143913 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.396192074 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.396203995 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.396213055 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:12.396214962 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.396250010 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:12.447915077 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:12.536803007 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.536827087 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.536839008 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.537019968 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:12.537066936 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.537101984 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.537132025 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.537144899 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.537154913 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.537167072 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.537173986 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:12.537173986 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:12.537179947 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.537233114 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:12.537233114 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:12.537621021 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.537642002 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.537659883 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.537672997 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.537689924 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.537714958 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:12.537714958 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:12.538130045 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.538161039 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.538172960 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.538183928 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.538211107 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:12.538211107 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:12.579372883 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:12.680079937 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.680099010 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.680119038 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.680131912 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.680145025 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.680222988 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:12.680222988 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:12.680354118 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.680366039 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.680377960 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.680387974 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.680430889 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:12.680430889 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:12.680696964 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.680715084 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.680732965 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.680744886 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.680748940 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:12.680757999 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.680773973 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.680783033 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:12.680836916 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:12.726361036 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:12.731115103 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:12.748039961 CET	49678	443	192.168.2.11	20.189.173.7
Mar 14, 2025 10:40:12.749897003 CET	443	49738	47.254.130.237	192.168.2.11
Mar 14, 2025 10:40:12.749994993 CET	49738	443	192.168.2.11	47.254.130.237
Mar 14, 2025 10:40:12.752904892 CET	49738	443	192.168.2.11	47.254.130.237
Mar 14, 2025 10:40:12.752918959 CET	443	49738	47.254.130.237	192.168.2.11
Mar 14, 2025 10:40:12.753181934 CET	443	49738	47.254.130.237	192.168.2.11
Mar 14, 2025 10:40:12.753557920 CET	49738	443	192.168.2.11	47.254.130.237
Mar 14, 2025 10:40:12.757685900 CET	49740	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:12.757744074 CET	443	49740	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:12.757914066 CET	49740	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:12.757973909 CET	49740	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:12.757985115 CET	443	49740	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:12.796335936 CET	443	49738	47.254.130.237	192.168.2.11
Mar 14, 2025 10:40:12.987252951 CET	443	49734	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:12.987282991 CET	443	49734	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:12.987341881 CET	49734	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:12.987622023 CET	49734	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:12.987641096 CET	443	49734	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:12.987752914 CET	443	49735	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:12.987777948 CET	443	49735	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:12.987831116 CET	49735	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:12.988159895 CET	443	49737	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:12.988190889 CET	443	49737	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:12.988226891 CET	49737	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:12.988405943 CET	49735	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:12.988425970 CET	443	49735	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:12.988643885 CET	49737	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:12.988658905 CET	443	49737	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:13.054148912 CET	443	49738	47.254.130.237	192.168.2.11
Mar 14, 2025 10:40:13.056060076 CET	443	49738	47.254.130.237	192.168.2.11
Mar 14, 2025 10:40:13.056127071 CET	49738	443	192.168.2.11	47.254.130.237
Mar 14, 2025 10:40:13.056756020 CET	49738	443	192.168.2.11	47.254.130.237
Mar 14, 2025 10:40:13.056773901 CET	443	49738	47.254.130.237	192.168.2.11
Mar 14, 2025 10:40:13.112864971 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:13.112884998 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:13.112986088 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:13.120898962 CET	49741	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:13.120950937 CET	443	49741	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:13.121020079 CET	49741	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:13.121193886 CET	49741	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:13.121206045 CET	443	49741	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:13.690284014 CET	443	49740	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:13.690973043 CET	49740	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:13.691095114 CET	443	49740	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:13.691148996 CET	49740	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:13.691446066 CET	49743	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:13.691479921 CET	443	49743	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:13.691539049 CET	49743	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:13.691900969 CET	49743	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:13.691915989 CET	443	49743	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:14.042094946 CET	443	49741	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:14.042398930 CET	49741	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:14.042541981 CET	443	49741	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:14.042640924 CET	49741	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:14.043054104 CET	49744	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:14.043100119 CET	443	49744	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:14.043365955 CET	49744	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:14.043551922 CET	49744	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:14.043565035 CET	443	49744	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:14.605158091 CET	443	49743	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:14.605478048 CET	49743	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:14.605487108 CET	443	49743	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:14.605504036 CET	443	49743	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:14.816319942 CET	443	49743	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:14.816389084 CET	49743	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:14.975871086 CET	443	49744	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:14.976226091 CET	443	49744	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:14.976243973 CET	49744	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:14.976264954 CET	443	49744	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:15.149272919 CET	49678	443	192.168.2.11	20.189.173.7
Mar 14, 2025 10:40:15.184324980 CET	443	49744	104.21.93.168	192.168.2.11
Mar 14, 2025 10:40:15.184387922 CET	49744	443	192.168.2.11	104.21.93.168
Mar 14, 2025 10:40:19.962198019 CET	49678	443	192.168.2.11	20.189.173.7
Mar 14, 2025 10:40:21.122246981 CET	49671	443	192.168.2.11	204.79.197.203
Mar 14, 2025 10:40:22.439589977 CET	49745	443	192.168.2.11	104.21.31.228
Mar 14, 2025 10:40:22.439644098 CET	443	49745	104.21.31.228	192.168.2.11
Mar 14, 2025 10:40:22.439740896 CET	49745	443	192.168.2.11	104.21.31.228
Mar 14, 2025 10:40:22.440037966 CET	49745	443	192.168.2.11	104.21.31.228
Mar 14, 2025 10:40:22.440052986 CET	443	49745	104.21.31.228	192.168.2.11
Mar 14, 2025 10:40:22.907102108 CET	443	49745	104.21.31.228	192.168.2.11
Mar 14, 2025 10:40:22.907223940 CET	49745	443	192.168.2.11	104.21.31.228
Mar 14, 2025 10:40:22.933617115 CET	49745	443	192.168.2.11	104.21.31.228
Mar 14, 2025 10:40:22.933644056 CET	443	49745	104.21.31.228	192.168.2.11
Mar 14, 2025 10:40:22.934027910 CET	443	49745	104.21.31.228	192.168.2.11
Mar 14, 2025 10:40:22.934402943 CET	49745	443	192.168.2.11	104.21.31.228
Mar 14, 2025 10:40:22.980326891 CET	443	49745	104.21.31.228	192.168.2.11
Mar 14, 2025 10:40:23.035924911 CET	443	49745	104.21.31.228	192.168.2.11
Mar 14, 2025 10:40:23.036019087 CET	443	49745	104.21.31.228	192.168.2.11
Mar 14, 2025 10:40:23.036111116 CET	49745	443	192.168.2.11	104.21.31.228
Mar 14, 2025 10:40:23.277103901 CET	49745	443	192.168.2.11	104.21.31.228
Mar 14, 2025 10:40:23.277137995 CET	443	49745	104.21.31.228	192.168.2.11
Mar 14, 2025 10:40:23.308598995 CET	49747	443	192.168.2.11	104.21.31.228
Mar 14, 2025 10:40:23.308633089 CET	443	49747	104.21.31.228	192.168.2.11
Mar 14, 2025 10:40:23.308706999 CET	49747	443	192.168.2.11	104.21.31.228
Mar 14, 2025 10:40:23.308887005 CET	49747	443	192.168.2.11	104.21.31.228
Mar 14, 2025 10:40:23.308897018 CET	443	49747	104.21.31.228	192.168.2.11
Mar 14, 2025 10:40:23.764785051 CET	443	49747	104.21.31.228	192.168.2.11
Mar 14, 2025 10:40:23.764919996 CET	49747	443	192.168.2.11	104.21.31.228
Mar 14, 2025 10:40:23.765655041 CET	49747	443	192.168.2.11	104.21.31.228
Mar 14, 2025 10:40:23.765665054 CET	443	49747	104.21.31.228	192.168.2.11
Mar 14, 2025 10:40:23.765918016 CET	443	49747	104.21.31.228	192.168.2.11
Mar 14, 2025 10:40:23.766288042 CET	49747	443	192.168.2.11	104.21.31.228
Mar 14, 2025 10:40:23.808340073 CET	443	49747	104.21.31.228	192.168.2.11
Mar 14, 2025 10:40:23.893927097 CET	443	49747	104.21.31.228	192.168.2.11
Mar 14, 2025 10:40:23.894042015 CET	443	49747	104.21.31.228	192.168.2.11
Mar 14, 2025 10:40:23.894117117 CET	49747	443	192.168.2.11	104.21.31.228
Mar 14, 2025 10:40:23.895610094 CET	49747	443	192.168.2.11	104.21.31.228
Mar 14, 2025 10:40:23.895637035 CET	443	49747	104.21.31.228	192.168.2.11
Mar 14, 2025 10:40:29.571554899 CET	49678	443	192.168.2.11	20.189.173.7
Mar 14, 2025 10:40:43.481693029 CET	49702	80	192.168.2.11	142.250.74.195
Mar 14, 2025 10:40:43.481832027 CET	49704	80	192.168.2.11	2.16.164.72
Mar 14, 2025 10:40:43.486541986 CET	80	49702	142.250.74.195	192.168.2.11
Mar 14, 2025 10:40:43.486619949 CET	49702	80	192.168.2.11	142.250.74.195
Mar 14, 2025 10:40:43.486761093 CET	80	49704	2.16.164.72	192.168.2.11
Mar 14, 2025 10:40:43.486819029 CET	49704	80	192.168.2.11	2.16.164.72
Mar 14, 2025 10:40:44.849168062 CET	49703	443	192.168.2.11	2.23.227.208
Mar 14, 2025 10:40:44.849347115 CET	49705	80	192.168.2.11	2.16.164.72
Mar 14, 2025 10:40:44.849505901 CET	49706	80	192.168.2.11	2.23.77.188
Mar 14, 2025 10:40:55.603445053 CET	49717	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:55.608139992 CET	80	49717	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:55.681660891 CET	49718	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:55.686450005 CET	80	49718	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:56.025445938 CET	49725	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:56.030385971 CET	80	49725	172.67.212.130	192.168.2.11
Mar 14, 2025 10:40:58.118602037 CET	49724	80	192.168.2.11	172.67.212.130
Mar 14, 2025 10:40:58.123584032 CET	80	49724	172.67.212.130	192.168.2.11
Mar 14, 2025 10:41:05.266904116 CET	49753	443	192.168.2.11	142.250.186.68
Mar 14, 2025 10:41:05.266976118 CET	443	49753	142.250.186.68	192.168.2.11
Mar 14, 2025 10:41:05.267071009 CET	49753	443	192.168.2.11	142.250.186.68
Mar 14, 2025 10:41:05.267268896 CET	49753	443	192.168.2.11	142.250.186.68
Mar 14, 2025 10:41:05.267285109 CET	443	49753	142.250.186.68	192.168.2.11
Mar 14, 2025 10:41:05.895864964 CET	443	49753	142.250.186.68	192.168.2.11
Mar 14, 2025 10:41:05.896352053 CET	49753	443	192.168.2.11	142.250.186.68
Mar 14, 2025 10:41:05.896383047 CET	443	49753	142.250.186.68	192.168.2.11
Mar 14, 2025 10:41:15.800914049 CET	443	49753	142.250.186.68	192.168.2.11
Mar 14, 2025 10:41:15.800992012 CET	443	49753	142.250.186.68	192.168.2.11
Mar 14, 2025 10:41:15.801126957 CET	49753	443	192.168.2.11	142.250.186.68
Mar 14, 2025 10:41:17.244995117 CET	49753	443	192.168.2.11	142.250.186.68
Mar 14, 2025 10:41:17.245033026 CET	443	49753	142.250.186.68	192.168.2.11

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 14, 2025 10:40:01.105603933 CET	53	51322	1.1.1.1	192.168.2.11
Mar 14, 2025 10:40:01.124701023 CET	53	57122	1.1.1.1	192.168.2.11
Mar 14, 2025 10:40:02.102787971 CET	53	60328	1.1.1.1	192.168.2.11
Mar 14, 2025 10:40:02.227004051 CET	53	49160	1.1.1.1	192.168.2.11
Mar 14, 2025 10:40:05.166546106 CET	53270	53	192.168.2.11	1.1.1.1
Mar 14, 2025 10:40:05.166754961 CET	52061	53	192.168.2.11	1.1.1.1
Mar 14, 2025 10:40:05.173062086 CET	53	53270	1.1.1.1	192.168.2.11
Mar 14, 2025 10:40:05.173774958 CET	53	52061	1.1.1.1	192.168.2.11
Mar 14, 2025 10:40:06.882534981 CET	63792	53	192.168.2.11	1.1.1.1
Mar 14, 2025 10:40:06.883135080 CET	49241	53	192.168.2.11	1.1.1.1
Mar 14, 2025 10:40:06.898787022 CET	53	63792	1.1.1.1	192.168.2.11
Mar 14, 2025 10:40:06.898936987 CET	57733	53	192.168.2.11	1.1.1.1
Mar 14, 2025 10:40:06.899235010 CET	63386	53	192.168.2.11	1.1.1.1
Mar 14, 2025 10:40:06.910177946 CET	53	49241	1.1.1.1	192.168.2.11
Mar 14, 2025 10:40:06.912271976 CET	53	57733	1.1.1.1	192.168.2.11
Mar 14, 2025 10:40:06.916935921 CET	53	63386	1.1.1.1	192.168.2.11
Mar 14, 2025 10:40:09.269061089 CET	58603	53	192.168.2.11	1.1.1.1
Mar 14, 2025 10:40:09.269320011 CET	54676	53	192.168.2.11	1.1.1.1
Mar 14, 2025 10:40:09.276154041 CET	53	58603	1.1.1.1	192.168.2.11
Mar 14, 2025 10:40:09.276324987 CET	53	54676	1.1.1.1	192.168.2.11
Mar 14, 2025 10:40:10.382294893 CET	57126	53	192.168.2.11	1.1.1.1
Mar 14, 2025 10:40:10.382469893 CET	64795	53	192.168.2.11	1.1.1.1
Mar 14, 2025 10:40:10.389132977 CET	53	57126	1.1.1.1	192.168.2.11
Mar 14, 2025 10:40:10.389151096 CET	53	64795	1.1.1.1	192.168.2.11
Mar 14, 2025 10:40:10.664800882 CET	49180	53	192.168.2.11	1.1.1.1
Mar 14, 2025 10:40:10.664973021 CET	54229	53	192.168.2.11	1.1.1.1
Mar 14, 2025 10:40:10.679730892 CET	53	49180	1.1.1.1	192.168.2.11
Mar 14, 2025 10:40:10.682204962 CET	53	54229	1.1.1.1	192.168.2.11
Mar 14, 2025 10:40:10.688960075 CET	51753	53	192.168.2.11	1.1.1.1
Mar 14, 2025 10:40:10.689301014 CET	52615	53	192.168.2.11	1.1.1.1
Mar 14, 2025 10:40:10.704073906 CET	53	51753	1.1.1.1	192.168.2.11
Mar 14, 2025 10:40:10.749340057 CET	53	52615	1.1.1.1	192.168.2.11
Mar 14, 2025 10:40:11.009310961 CET	56107	53	192.168.2.11	1.1.1.1
Mar 14, 2025 10:40:11.009473085 CET	51522	53	192.168.2.11	1.1.1.1
Mar 14, 2025 10:40:11.016784906 CET	53	56107	1.1.1.1	192.168.2.11
Mar 14, 2025 10:40:11.057219982 CET	53	51522	1.1.1.1	192.168.2.11
Mar 14, 2025 10:40:11.146531105 CET	57842	53	192.168.2.11	1.1.1.1
Mar 14, 2025 10:40:11.146909952 CET	64762	53	192.168.2.11	1.1.1.1
Mar 14, 2025 10:40:11.153450966 CET	53	57842	1.1.1.1	192.168.2.11
Mar 14, 2025 10:40:11.153701067 CET	53	64762	1.1.1.1	192.168.2.11
Mar 14, 2025 10:40:12.110410929 CET	55664	53	192.168.2.11	1.1.1.1
Mar 14, 2025 10:40:12.110559940 CET	64243	53	192.168.2.11	1.1.1.1
Mar 14, 2025 10:40:12.117271900 CET	53	55664	1.1.1.1	192.168.2.11
Mar 14, 2025 10:40:12.121685028 CET	53	64243	1.1.1.1	192.168.2.11
Mar 14, 2025 10:40:19.271958113 CET	53	53316	1.1.1.1	192.168.2.11
Mar 14, 2025 10:40:22.420579910 CET	56777	53	192.168.2.11	1.1.1.1
Mar 14, 2025 10:40:22.421991110 CET	54287	53	192.168.2.11	1.1.1.1
Mar 14, 2025 10:40:22.428244114 CET	53	56777	1.1.1.1	192.168.2.11
Mar 14, 2025 10:40:22.428915024 CET	53	54287	1.1.1.1	192.168.2.11
Mar 14, 2025 10:40:22.575347900 CET	53	61919	1.1.1.1	192.168.2.11
Mar 14, 2025 10:40:23.299302101 CET	56021	53	192.168.2.11	1.1.1.1
Mar 14, 2025 10:40:23.299463034 CET	62976	53	192.168.2.11	1.1.1.1
Mar 14, 2025 10:40:23.306858063 CET	53	56021	1.1.1.1	192.168.2.11
Mar 14, 2025 10:40:23.308006048 CET	53	62976	1.1.1.1	192.168.2.11
Mar 14, 2025 10:40:38.315288067 CET	53	64787	1.1.1.1	192.168.2.11
Mar 14, 2025 10:41:00.553421974 CET	53	51598	1.1.1.1	192.168.2.11
Mar 14, 2025 10:41:00.736937046 CET	53	55809	1.1.1.1	192.168.2.11
Mar 14, 2025 10:41:03.474188089 CET	53	59179	1.1.1.1	192.168.2.11
Mar 14, 2025 10:41:11.610372066 CET	138	138	192.168.2.11	192.168.2.255

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 14, 2025 10:40:10.749413013 CET	192.168.2.11	1.1.1.1	c2a1	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 14, 2025 10:40:05.166546106 CET	192.168.2.11	1.1.1.1	0x39e8	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:40:05.166754961 CET	192.168.2.11	1.1.1.1	0xcc7	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 14, 2025 10:40:06.882534981 CET	192.168.2.11	1.1.1.1	0xddfe	Standard query (0)	www.policy-violation-10094985.victoriakent.co.uk	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:40:06.883135080 CET	192.168.2.11	1.1.1.1	0xc314	Standard query (0)	www.policy-violation-10094985.victoriakent.co.uk	65	IN (0x0001)	false
Mar 14, 2025 10:40:06.898936987 CET	192.168.2.11	1.1.1.1	0x58cc	Standard query (0)	www.policy-violation-10094985.victoriakent.co.uk	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:40:06.899235010 CET	192.168.2.11	1.1.1.1	0x5d43	Standard query (0)	www.policy-violation-10094985.victoriakent.co.uk	65	IN (0x0001)	false
Mar 14, 2025 10:40:09.269061089 CET	192.168.2.11	1.1.1.1	0x874f	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:40:09.269320011 CET	192.168.2.11	1.1.1.1	0x8d3f	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Mar 14, 2025 10:40:10.382294893 CET	192.168.2.11	1.1.1.1	0xe940	Standard query (0)	api.ipify.org	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:40:10.382469893 CET	192.168.2.11	1.1.1.1	0xc0a8	Standard query (0)	api.ipify.org	65	IN (0x0001)	false
Mar 14, 2025 10:40:10.664800882 CET	192.168.2.11	1.1.1.1	0x50af	Standard query (0)	www.policy-violation-10094985.victoriakent.co.uk	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:40:10.664973021 CET	192.168.2.11	1.1.1.1	0x7f23	Standard query (0)	www.policy-violation-10094985.victoriakent.co.uk	65	IN (0x0001)	false
Mar 14, 2025 10:40:10.688960075 CET	192.168.2.11	1.1.1.1	0xa52c	Standard query (0)	www.policy-violation-10094985.victoriakent.co.uk	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:40:10.689301014 CET	192.168.2.11	1.1.1.1	0x86c9	Standard query (0)	www.policy-violation-10094985.victoriakent.co.uk	65	IN (0x0001)	false
Mar 14, 2025 10:40:11.009310961 CET	192.168.2.11	1.1.1.1	0x7f2b	Standard query (0)	ip-scan.adspower.net	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:40:11.009473085 CET	192.168.2.11	1.1.1.1	0xf755	Standard query (0)	ip-scan.adspower.net	65	IN (0x0001)	false
Mar 14, 2025 10:40:11.146531105 CET	192.168.2.11	1.1.1.1	0x6a03	Standard query (0)	api.ipify.org	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:40:11.146909952 CET	192.168.2.11	1.1.1.1	0x1d3	Standard query (0)	api.ipify.org	65	IN (0x0001)	false
Mar 14, 2025 10:40:12.110410929 CET	192.168.2.11	1.1.1.1	0x20fe	Standard query (0)	ip-scan.adspower.net	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:40:12.110559940 CET	192.168.2.11	1.1.1.1	0xe9cf	Standard query (0)	ip-scan.adspower.net	65	IN (0x0001)	false
Mar 14, 2025 10:40:22.420579910 CET	192.168.2.11	1.1.1.1	0xe6d9	Standard query (0)	flagcdn.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:40:22.421991110 CET	192.168.2.11	1.1.1.1	0x62c2	Standard query (0)	flagcdn.com	65	IN (0x0001)	false
Mar 14, 2025 10:40:23.299302101 CET	192.168.2.11	1.1.1.1	0x7ec2	Standard query (0)	flagcdn.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:40:23.299463034 CET	192.168.2.11	1.1.1.1	0x8590	Standard query (0)	flagcdn.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 14, 2025 10:40:05.173062086 CET	1.1.1.1	192.168.2.11	0x39e8	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:40:05.173774958 CET	1.1.1.1	192.168.2.11	0xcc7	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 14, 2025 10:40:06.898787022 CET	1.1.1.1	192.168.2.11	0xddfe	No error (0)	www.policy-violation-10094985.victoriakent.co.uk		172.67.212.130	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:40:06.898787022 CET	1.1.1.1	192.168.2.11	0xddfe	No error (0)	www.policy-violation-10094985.victoriakent.co.uk		104.21.93.168	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:40:06.910177946 CET	1.1.1.1	192.168.2.11	0xc314	No error (0)	www.policy-violation-10094985.victoriakent.co.uk			65	IN (0x0001)	false
Mar 14, 2025 10:40:06.912271976 CET	1.1.1.1	192.168.2.11	0x58cc	No error (0)	www.policy-violation-10094985.victoriakent.co.uk		172.67.212.130	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:40:06.912271976 CET	1.1.1.1	192.168.2.11	0x58cc	No error (0)	www.policy-violation-10094985.victoriakent.co.uk		104.21.93.168	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:40:06.916935921 CET	1.1.1.1	192.168.2.11	0x5d43	No error (0)	www.policy-violation-10094985.victoriakent.co.uk			65	IN (0x0001)	false
Mar 14, 2025 10:40:09.276154041 CET	1.1.1.1	192.168.2.11	0x874f	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:40:09.276154041 CET	1.1.1.1	192.168.2.11	0x874f	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:40:09.276324987 CET	1.1.1.1	192.168.2.11	0x8d3f	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Mar 14, 2025 10:40:10.389132977 CET	1.1.1.1	192.168.2.11	0xe940	No error (0)	api.ipify.org		104.26.13.205	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:40:10.389132977 CET	1.1.1.1	192.168.2.11	0xe940	No error (0)	api.ipify.org		104.26.12.205	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:40:10.389132977 CET	1.1.1.1	192.168.2.11	0xe940	No error (0)	api.ipify.org		172.67.74.152	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:40:10.389151096 CET	1.1.1.1	192.168.2.11	0xc0a8	No error (0)	api.ipify.org			65	IN (0x0001)	false
Mar 14, 2025 10:40:10.679730892 CET	1.1.1.1	192.168.2.11	0x50af	No error (0)	www.policy-violation-10094985.victoriakent.co.uk		172.67.212.130	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:40:10.679730892 CET	1.1.1.1	192.168.2.11	0x50af	No error (0)	www.policy-violation-10094985.victoriakent.co.uk		104.21.93.168	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:40:10.682204962 CET	1.1.1.1	192.168.2.11	0x7f23	No error (0)	www.policy-violation-10094985.victoriakent.co.uk			65	IN (0x0001)	false
Mar 14, 2025 10:40:10.704073906 CET	1.1.1.1	192.168.2.11	0xa52c	No error (0)	www.policy-violation-10094985.victoriakent.co.uk		104.21.93.168	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:40:10.704073906 CET	1.1.1.1	192.168.2.11	0xa52c	No error (0)	www.policy-violation-10094985.victoriakent.co.uk		172.67.212.130	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:40:10.749340057 CET	1.1.1.1	192.168.2.11	0x86c9	No error (0)	www.policy-violation-10094985.victoriakent.co.uk			65	IN (0x0001)	false
Mar 14, 2025 10:40:11.016784906 CET	1.1.1.1	192.168.2.11	0x7f2b	No error (0)	ip-scan.adspower.net	ip-scan-proxy.adspower.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:40:11.016784906 CET	1.1.1.1	192.168.2.11	0x7f2b	No error (0)	ip-scan-proxy.adspower.net		47.254.130.237	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:40:11.057219982 CET	1.1.1.1	192.168.2.11	0xf755	No error (0)	ip-scan.adspower.net	ip-scan-proxy.adspower.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:40:11.153450966 CET	1.1.1.1	192.168.2.11	0x6a03	No error (0)	api.ipify.org		104.26.13.205	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:40:11.153450966 CET	1.1.1.1	192.168.2.11	0x6a03	No error (0)	api.ipify.org		104.26.12.205	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:40:11.153450966 CET	1.1.1.1	192.168.2.11	0x6a03	No error (0)	api.ipify.org		172.67.74.152	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:40:11.153701067 CET	1.1.1.1	192.168.2.11	0x1d3	No error (0)	api.ipify.org			65	IN (0x0001)	false
Mar 14, 2025 10:40:12.117271900 CET	1.1.1.1	192.168.2.11	0x20fe	No error (0)	ip-scan.adspower.net	ip-scan-proxy.adspower.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:40:12.117271900 CET	1.1.1.1	192.168.2.11	0x20fe	No error (0)	ip-scan-proxy.adspower.net		47.254.130.237	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:40:12.121685028 CET	1.1.1.1	192.168.2.11	0xe9cf	No error (0)	ip-scan.adspower.net	ip-scan-proxy.adspower.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:40:22.428244114 CET	1.1.1.1	192.168.2.11	0xe6d9	No error (0)	flagcdn.com		104.21.31.228	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:40:22.428244114 CET	1.1.1.1	192.168.2.11	0xe6d9	No error (0)	flagcdn.com		172.67.180.104	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:40:22.428915024 CET	1.1.1.1	192.168.2.11	0x62c2	No error (0)	flagcdn.com			65	IN (0x0001)	false
Mar 14, 2025 10:40:23.306858063 CET	1.1.1.1	192.168.2.11	0x7ec2	No error (0)	flagcdn.com		104.21.31.228	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:40:23.306858063 CET	1.1.1.1	192.168.2.11	0x7ec2	No error (0)	flagcdn.com		172.67.180.104	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:40:23.308006048 CET	1.1.1.1	192.168.2.11	0x8590	No error (0)	flagcdn.com			65	IN (0x0001)	false

HTTP Request Dependency Graph

cdnjs.cloudflare.com

www.google.com

www.policy-violation-10094985.victoriakent.co.uk

api.ipify.org

ip-scan.adspower.net

flagcdn.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.11	49717	172.67.212.130	80	5172	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 14, 2025 10:40:08.760015965 CET	463	OUT	GET / HTTP/1.1 Host: www.policy-violation-10094985.victoriakent.co.uk Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 14, 2025 10:40:09.220808983 CET	1236	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:40:09 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Tue, 11 Mar 2025 17:45:10 GMT cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xYqieE3I6v8oVKdS2HVVQC7LZ%2BO912S7P8rmDSy1Vl%2BV%2BmoOKPbeP83m4njY3e2vpUJKxv9JF4QSs6yTvdsuKSPru4vceR7mMcXAx%2BmNao9A8x2DT%2BsrrgbJhiH7aaCoamjMYa0HbgyQQMX2j84RHuCKYjrN9DoH385i0b1I4xOSIzc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202ced31e2b7d20-EWR Content-Encoding: gzip alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1867&min_rtt=1867&rtt_var=933&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=463&delivery_rate=0&cwnd=175&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 32 33 61 0d 0a 1f 8b 08 00 00 00 00 00 00 03 7d 53 51 4f db 30 10 fe 2b 9e f7 ba c4 2d b4 65 9b e2 48 30 21 34 06 62 a8 74 88 bd b9 f6 25 71 e7 d8 a9 ef 92 36 fb f5 53 9a c2 06 0f f3 83 a5 3b 7f df e7 bb fb ec ec 9d 09 9a fa 06 58 45 b5 cb b3 61 67 4e f9 52 72 f0 3c cf 2a 50 26 cf 6a 20 c5 74 a5 22 02 49 de 52 91 7c e4 22 cf 9c f5 bf 58 04 27 b9 d5 c1 73 56 45 28 24 17 85 ea 86 38 6d 7c 39 a0 0e 64 af 6a 90 bc b3 b0 6b 42 24 ce 74 f0 04 9e 24 df 59 43 95 34 d0 59 0d c9 21 f8 60 bd 25 ab 5c 82 5a 39 90 d3 37 1a 54 41 0d 89 0e 2e c4 7f 64 de 4f 0e eb 0d d6 00 ea 68 1b b2 43 75 2f d8 47 58 33 b4 04 4c 47 50 04 86 b5 68 7d 79 8c 92 08 4a 53 a2 9a e6 75 87 aa 69 1c 24 14 5a 5d 25 ff eb f6 2f 03 a9 77 80 15 00 3d 63 2b a2 06 3f 0b a1 8d df 60 aa 5d 68 4d e1 54 84 54 87 5a a8 8d da 0b 67 d7 28 8a e0 29 51 3b c0 50 83 58 a4 8b 74 22 34 a2 50 ce a5 b5 f5 a9 46 e4 cc 7a 82 32 5a ea 25 c7 4a cd a7 27 c9 37 7d 7a 72 da 5d 5d 5c 6e 7f 3f d4 a1 3d bf fc e2 7f 68 e8 ef b7 fd d6 e0 d2 6e 6f ee bf 2e 2f 6e 4e 3e a9 [TRUNCATED] Data Ascii: 23a}SQO0+-eH0!4bt%q6S;XEagNRr<*P&j t"IR\|"X'sVE($8m\|9djkB$t$YC4Y!`%\Z97TA.dOhCu/GX3LGPh}yJSui$Z]%/w=c+?`]hMTTZg()Q;PXt"4PFz2Z%J'7}zr]]\n?=hno./nN>l%nsQ^~
Mar 14, 2025 10:40:09.220827103 CET	230	IN	Data Raw: de 6f bb a9 de ed 67 77 fe 69 ff b0 ef 60 be ba 2d e7 57 0f 8b 9b d9 f5 75 29 25 67 3a 06 c4 10 6d 69 bd e4 ca 07 df d7 a1 45 ce 22 14 10 23 c4 26 38 ab 7b c9 7d 48 9e 53 af 27 51 2b 6f 0b c0 97 39 88 e7 44 ba c1 e0 07 2c 59 72 90 df 0e ce 5d 0c Data Ascii: ogwi`-Wu)%g:miE"#&8{}HS'Q+o9D,Yr]n"[V21fW9%H>Ly&FcG0eXB}_#Sh0rgTYdiL3c;f1]Q^=\#0
Mar 14, 2025 10:40:09.220844030 CET	230	IN	Data Raw: de 6f bb a9 de ed 67 77 fe 69 ff b0 ef 60 be ba 2d e7 57 0f 8b 9b d9 f5 75 29 25 67 3a 06 c4 10 6d 69 bd e4 ca 07 df d7 a1 45 ce 22 14 10 23 c4 26 38 ab 7b c9 7d 48 9e 53 af 27 51 2b 6f 0b c0 97 39 88 e7 44 ba c1 e0 07 2c 59 72 90 df 0e ce 5d 0c Data Ascii: ogwi`-Wu)%g:miE"#&8{}HS'Q+o9D,Yr]n"[V21fW9%H>Ly&FcG0eXB}_#Sh0rgTYdiL3c;f1]Q^=\#0
Mar 14, 2025 10:40:09.269800901 CET	394	OUT	GET /static/js/main.007f41d7.js HTTP/1.1 Host: www.policy-violation-10094985.victoriakent.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Referer: http://www.policy-violation-10094985.victoriakent.co.uk/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 14, 2025 10:40:09.660280943 CET	1236	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:40:09 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Tue, 11 Mar 2025 17:45:10 GMT ETag: W/"59453-63014a6758a65" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OGODD1Q1E94%2Bf8xx72UnjT3%2BLhnMUi3c5mugutOwVaayQhUsRMoW8zuPfUdPiHRmYh06BvCQTWgV%2FSE5Qew6QpzoT6%2FpaTgLCmuRlZrMoUp2Yz4p%2ByXJk4yCAztt4Cc9XRCWXY3MrkDONXvUureRio150t6jRpGfMWiSe8TbR1v9q3U%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 9202ced64fc77d20-EWR Content-Encoding: gzip alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1870&min_rtt=1834&rtt_var=707&sent=5&recv=5&lost=0&retrans=0&sent_bytes=1466&recv_bytes=857&delivery_rate=2312565&cwnd=178&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 35 30 30 61 0d 0a 1f 8b 08 00 00 00 00 00 00 03 bc bd 69 77 db 38 12 2e fc fd fd 15 16 6f 86 4d b4 20 59 b2 b3 52 86 79 9c c4 49 67 df 9c a5 23 69 7c 68 0a 92 99 d0 a0 42 81 5e 62 ea fe f6 f7 54 01 20 41 89 72 d2 33 73 ee 17 09 00 b1 af 85 aa a7 0a db 7f b6 b6 9e a4 d9 56 12 47 5c 2c f8 56 2c a6 69 76 16 ca 38 15 5b f3 84 87 0b be b5 e0 7c eb 2c 8c 45 b7 d7 bb 37 bd dd 9f dc eb 7e 5b 74 5f 3e 7b 74 f8 fa c3 61 57 5e ca ad 3f b7 ff 3f cf 23 6c ff fa 3c cc b6 38 bb de 7d 70 cf 9f e6 22 82 4c 3c 4e 25 15 04 3f 65 03 ce 44 57 9c 4d 3c 4e 68 19 41 7d 4b 69 c8 9c c3 cb 39 8f 24 9f 6c 85 5b e6 b3 43 63 e6 1c 1f 27 e9 24 5c 9c 1e 9f c2 4f 2e 26 7c 1a 0b 3e 39 3e 76 68 6e 7d 9d 27 61 c4 4f d3 64 c2 33 f8 94 b0 fe 5d 1a b1 dd 1d ba 60 77 6f d3 29 Data Ascii: 500aiw8.oM YRyIg#i\|hB^bT Ar3sVG\,V,iv8[\|,E7~[t_>{taW^??#l<8}p"L<N%?eDWM<NhA}Ki9$l[Cc'$\O.&\|>9>vhn}'aOd3]`wo)
Mar 14, 2025 10:40:09.660295963 CET	224	IN	Data Raw: eb ef dc a7 13 b6 73 e7 2e 9d b3 fe 76 8f 9e b2 07 bd de bd fe 83 07 3b 77 6e df bb dd 7b f0 a0 4f 67 ec 75 f8 9a 9e b1 db 3b 0f 6e 3f b8 7b 6f e7 c1 1d 7a c5 86 43 27 cc ae 1c 3a 1d d3 a1 73 12 8b 89 43 fb c6 f9 82 5f 39 74 07 7c 51 9e 41 a4 fb Data Ascii: s.v;wn{Ogu;n?{ozC':sC_9t\|QA}<;M `scy8LY>{AC'1=g0=#u3.b;8iC1vq8\|0lUc~BrPxpuV
Mar 14, 2025 10:40:09.660319090 CET	1236	IN	Data Raw: d2 b3 78 01 b5 7a 53 05 be e7 b3 c3 4b c8 f0 6d 15 f6 81 43 ca 23 2b 40 66 b1 98 8d 1d 7a 60 85 5d 9d 9d a4 c9 d8 a1 ef ab b0 cf 3c fc ae aa f7 73 a5 c7 1e e6 d3 29 d6 f1 65 ad 8b c2 4f 31 bf 18 3b f4 99 d5 27 49 1a ca dd 1d d3 cf 4f 56 be dc bd Data Ascii: xzSKmC#+@fz`]<s)eO1;'IOVm<X5kUGIx6GsUx5j?l;tQ{{F_mJGB%\|]/yb&y*l{;gSC=.<8_M2o
Mar 14, 2025 10:40:09.660332918 CET	224	IN	Data Raw: d1 f0 3d a7 3f 38 75 6e 39 ab b5 78 a7 62 3e af c7 6c ff d5 18 59 e7 fe 97 c9 1d 03 30 35 85 d9 0d 9b 74 ff c3 51 b1 f3 fa 71 b1 fb fe 71 e1 05 ad 61 7f 67 77 4c 46 a3 c9 d1 5f c4 0b d8 68 74 52 0c c3 ce cf e3 31 71 aa 24 0b 59 ec 88 49 b1 9b 4d Data Ascii: =?8un9xb>lY05tQqqagwLF_htR1q$YIMjIio#U08C!4lC6cl\|N187bouli,ArP9C$j:)@DT_suPGSuT8"~
Mar 14, 2025 10:40:09.660366058 CET	1236	IN	Data Raw: 14 af 43 9d a3 ab 39 37 75 ab 68 46 e3 b1 09 45 1d 56 55 c4 22 09 1d ea 68 7a d9 a1 ce b1 43 9d 28 e1 61 76 14 9f f1 34 87 72 e3 c5 93 58 c4 d8 11 f3 30 5b f0 67 02 42 17 5c 9a 28 63 9a 4b d6 e9 d3 44 b2 eb e5 20 91 c3 67 63 96 c8 e1 13 fc 7d 85 Data Ascii: C97uhFEVU"hzC(av4rX0[gB\(cKD gc}1>?YG9<G}{k}oY?f!6Daaa>Uk#lI-Z.$vF#;0F;0
Mar 14, 2025 10:40:09.660382986 CET	1236	IN	Data Raw: 3d 97 de b5 03 0c 3a c7 77 0e 80 86 bf 8c fa 95 73 a7 72 ee 56 ce db 95 f3 4e e9 e4 90 43 a8 9c fd ca b9 53 39 77 2b e7 ed ca 79 a7 74 46 f7 1c df 79 a4 42 c1 19 a1 73 02 f9 3e 46 e7 14 9c 13 15 17 ee 1d 87 ca f9 a0 72 86 95 f3 a4 74 72 88 cb 95 Data Ascii: =:wsrVNCS9w+ytFyBs>FrtrA+I"w)r9-9rNKjE\.';osrw*ytN!T9w+yrKrrFs;+IJo+sGrONUtpK@73<;)"xv
Mar 14, 2025 10:40:09.660398006 CET	448	IN	Data Raw: b1 35 4d 33 80 e1 a8 80 31 a0 9d 9c 5b fd ee 9f 01 48 9c 6f 39 04 20 0a e7 32 90 5d 25 07 f1 53 c0 22 c8 ae 6a 0b 20 11 64 b7 12 65 02 18 e1 33 0f 3e f3 6e 98 24 69 f4 51 2c c2 29 f7 53 00 23 2c 84 f7 88 77 67 5c be 35 43 f4 66 4a a1 7d 2f 70 e0 Data Ascii: 5M31[Ho9 2]%S"j de3>n$iQ,)S#,wg\5CfJ}/py]1U~8Z[lx(Q(?3N @ PadQ4G:jMzI^/+$!2C\zYW*6,$@L+T!CxwIf Sc
Mar 14, 2025 10:40:09.660681963 CET	1236	IN	Data Raw: 9f 62 f5 ef 01 d0 7b 21 43 11 81 e0 f6 93 20 18 ab 16 f8 43 18 06 2e 1f c4 53 ef a5 de 1a 38 75 8e 8f 35 6e f0 f8 d8 29 b9 bc 1f 43 af 12 b1 41 db 7f 40 d9 78 b8 3c 14 f6 4a b0 ce 07 72 bd 6c e0 02 82 f8 8a e7 5e c9 40 be 5e 42 f9 2f b8 29 e9 05 Data Ascii: b{!C C.S8u5n)CA@x<Jrl^@^B/),ch^1EPEHTugdTV:(c641kP8>f=,'V$Yxq"9:L6y=Gi.1;+Z=1`}7iE
Mar 14, 2025 10:40:09.660693884 CET	224	IN	Data Raw: d5 86 6f d0 49 19 d2 45 c0 88 c0 aa c0 f1 89 89 42 26 86 d9 98 c6 4c 02 08 28 67 80 05 1a e0 06 a2 4f fc d0 1c d0 ad d8 cb 2b 0c df 72 1d c3 b7 28 6b 13 4f 3d a7 d4 9b 6d 95 bb 27 91 a7 59 7a 81 b3 e1 0d f7 c2 b2 47 8e 42 ab 9f c9 b5 c1 60 a6 40 Data Ascii: oIEB&L(gO+r(kO=m'YzGB`@QqF{Ic@0#B<r3U0!/d?1>M}IZ(/M^{tO:G8W,+^E{4v)clZ&F$\-txS
Mar 14, 2025 10:40:10.188630104 CET	471	OUT	GET /static/media/logo.a8116f16b948114a8812.png HTTP/1.1 Host: www.policy-violation-10094985.victoriakent.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.policy-violation-10094985.victoriakent.co.uk/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 14, 2025 10:40:10.588653088 CET	1236	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:40:10 GMT Content-Type: image/png Content-Length: 13714 Connection: keep-alive Last-Modified: Tue, 11 Mar 2025 17:45:10 GMT ETag: "3592-63014a6758a65" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3erdZJEfS5c%2Facm%2FqPugvP1A7BQb8r27gnY%2F%2BGU%2BjOv%2F0ztJorJFIkish2Go0%2BLRe0j%2Buyzkxfiqkv7XYTTtZTJRuf4XN5uQv1uRZAJvXEDlAUkdilPHgNk6JH6949iYGtwVz%2BCwOlvpqMNyN7g0dGMwerohI0TVwsrgRSSUwotSPDw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 9202cedc0a667d20-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1977&min_rtt=1827&rtt_var=242&sent=95&recv=13&lost=0&retrans=0&sent_bytes=126688&recv_bytes=1328&delivery_rate=25391304&cwnd=209&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d0 00 00 00 47 08 06 00 00 00 76 c7 c9 8f 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 1d 87 00 00 1d 87 01 8f e5 f1 65 00 00 06 4c 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 33 36 2c 20 32 30 31 39 Data Ascii: PNGIHDRGvsRGBgAMAapHYseLiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.11	49718	172.67.212.130	80	5172	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 14, 2025 10:40:09.270221949 CET	411	OUT	GET /static/css/main.56bf616a.css HTTP/1.1 Host: www.policy-violation-10094985.victoriakent.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.policy-violation-10094985.victoriakent.co.uk/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 14, 2025 10:40:09.646162987 CET	1236	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:40:09 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Tue, 11 Mar 2025 17:45:10 GMT ETag: W/"3ab9-63014a6758a65" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aVNYO7tRmKVeOU5n3yMwQYn%2FfNsg5E7uxOfGhBARrqUBkk2T1uRBTGyewMr3jhxzhYGT9tBqCc%2BncA3zNP9iyuFn2jW97L1xVZbRGlC6LI8NEbhUKPqoOWHtI%2F09uGqD8BXAaZRboFVdg9VtPlMn4N%2FiU7EWuloBW0kwlbLtVVv4fio%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 9202ced64c9d18c8-EWR Content-Encoding: gzip alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1763&min_rtt=1763&rtt_var=881&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=411&delivery_rate=0&cwnd=146&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 66 38 63 0d 0a 1f 8b 08 00 00 00 00 00 00 03 d5 5b fb 8f e3 b8 91 fe 7d ff 0a 5d 06 03 b4 37 a2 46 4f 3f 64 1c 90 cd 26 83 04 c8 ec 01 99 04 48 30 3d 38 50 12 65 73 9b 12 15 92 ea b6 c7 d1 ff 7e 20 f5 a2 28 b9 ed c6 ed 02 77 8b 04 63 55 7d fc 58 2c 92 c5 e2 a3 13 9a 9d 2f e0 05 25 4f 58 80 9c 96 02 f0 82 52 71 c4 e5 21 86 a5 c0 90 60 c8 51 b6 07 05 fd 06 28 3f 99 98 03 83 67 9e 42 82 f6 4a 91 c3 02 93 73 0c 60 55 11 04 f8 99 0b 54 d8 bf 27 b8 7c fa 04 d3 cf ea f3 23 2d 85 fd 19 1d 28 b2 fe fe 67 fb af 34 a1 82 da ff 75 3a 1f 50 69 ff 3d a9 4b 51 db 3f c2 52 40 86 08 b1 3f 62 06 ad cf b0 e4 f6 1f 18 c5 59 fb f3 4f 88 3c 23 81 53 68 fd 84 6a 64 73 58 72 c0 11 c3 79 93 d2 0c 5d 74 43 38 ad 59 8a 80 94 83 8a 51 fb 13 2a 09 b5 3f d1 12 a6 d4 fe 91 96 9c 12 c8 ed 1f 69 cd 30 62 d6 4f e8 c5 2e 68 49 Data Ascii: f8c[}]7FO?d&H0=8Pes~ (wcU}X,/%OXRq!`Q(?gBJs`UT'\|#-(g4u:Pi=KQ?R@?bYO<#ShjdsXry]tC8YQ*?i0bO.hI
Mar 14, 2025 10:40:09.646207094 CET	1236	IN	Data Raw: 79 05 53 d4 7c f7 dd 87 ef bf fb 0f 4b 40 4c 5e 70 99 a5 9c 5b cf 81 13 3a 3b eb df d6 a7 3f ff cd fa 0b 4e 51 c9 91 f5 6f eb 28 44 c5 e3 0f 1f 34 a8 93 d2 e2 bb ef 3f 7c 6f c7 30 17 88 d9 71 82 72 ca d0 25 a1 2c 43 2c 76 2d 4e 09 ce ac 77 28 42 Data Ascii: yS\|K@L^p[:;?NQo(D4?\|o0qr%,C,v-Nw(Bzm (x)-E4raEA$$0"\}5!<d?8Qb`+P)&[c0znX9%>7??'o+\|Ci9#LT
Mar 14, 2025 10:40:09.646219969 CET	448	IN	Data Raw: 21 e7 45 6f 74 6f 42 37 5d a6 76 0d c2 99 81 83 ca b4 74 50 cc 4c 1e 34 73 db 07 d5 b4 11 83 b8 8f 52 a6 dc 6c e5 a8 d0 9b 2b 4d 84 b8 6c 73 12 43 46 e0 99 d6 c2 94 56 10 97 33 61 1b a9 ad c6 e1 02 0a 9c 5e 86 d9 d0 7e 37 4e 8e 4f 28 1b c5 ea b3 Data Ascii: !EotoB7]vtPL4sRl+MlsCFV3a^~7NO(q`)q2KGw^q6AOpUz}x7bhDn@~RSIA4B7'`oz`4:*DLhmg.rKgth`340
Mar 14, 2025 10:40:09.646290064 CET	1236	IN	Data Raw: 71 d4 61 fd b0 13 ac 3b 41 d0 7d f7 e6 be 80 e0 f1 43 0f da 44 8a 45 99 a9 e5 6c 4e 81 4b f0 02 1e bf f8 6b b7 1d b4 f2 5b e9 95 a4 b5 f7 05 ac 5d f7 32 a6 7b 6b 57 53 ed d6 76 f7 8b 17 1a a6 6b 93 ec 06 e0 5d e4 3f b1 67 79 8d a3 e7 6f ad 39 b3 Data Ascii: qa;A}CDElNKk[]2{kWSvk]?gyo9K=+{Az^v%36}4Hz654513mt9P[&5x[RSJ1C\^dcRJT3ym1RU7q+jy3[wL
Mar 14, 2025 10:40:09.646332026 CET	804	IN	Data Raw: 52 dd 96 8d cf 7a 2e 9a 30 ab bb 57 69 8e 17 f1 bd a6 a8 18 ad 10 13 e7 78 28 a6 6b 05 2e a4 05 79 5d 76 87 92 75 82 53 90 a0 6f 18 b1 07 27 b4 5d db f1 6d 6f d5 38 3d bf 3a 9e 58 ac 37 e0 8d 73 94 47 80 8f b1 b6 21 8c 95 e8 17 db 16 1a 15 6c df Data Ascii: Rz.0Wix(k.y]vuSo']mo8=:X7sG!lZ=XAU\|cno*7Wq{U1.FO\0wq^;%ob%Y=UgVcQS+_{0yeZq+u2alVc_JbP0pyC\|M
Mar 14, 2025 10:40:10.188944101 CET	473	OUT	GET /static/media/arlet1.44e75d617b8dff7efeb6.png HTTP/1.1 Host: www.policy-violation-10094985.victoriakent.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.policy-violation-10094985.victoriakent.co.uk/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 14, 2025 10:40:10.586886883 CET	1236	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:40:10 GMT Content-Type: image/png Content-Length: 29742 Connection: keep-alive Last-Modified: Tue, 11 Mar 2025 17:45:10 GMT ETag: "742e-63014a6758681" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Cv5Eyy2I6a0DQciOkc63qnsixrFyfdP7hWBHOQfJyNzYPzxxO5FnINZwXR%2FFRyvu5hYGyIZtdNBus050AH%2F%2BMVz%2BEcaDKqR0LAfjgrmfxYtxKtKOL%2Bwo8oj4wGGdHJSSHn7CDeYbYelSTCzAz0AW6zM78c5D14viCLi6XiNtBbSUZJI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 9202cedc0e7b18c8-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1762&min_rtt=1689&rtt_var=662&sent=7&recv=5&lost=0&retrans=0&sent_bytes=4960&recv_bytes=884&delivery_rate=4147727&cwnd=151&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 ea 00 00 00 ea 08 06 00 00 00 ac 94 d9 4e 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 09 33 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 31 31 36 2e 61 36 62 66 62 38 34 2c 20 32 30 32 33 2f 30 37 2f 31 37 2d 31 35 3a 35 31 3a 30 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a Data Ascii: PNGIHDRNpHYs+3iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 116.a6bfb84, 2023/07/17-15:51:01 "> <rdf:RDF xmlns:
Mar 14, 2025 10:40:10.586905956 CET	1236	IN	Data Raw: 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 Data Ascii: rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/Resour
Mar 14, 2025 10:40:10.586916924 CET	1236	IN	Data Raw: 64 31 2d 39 35 33 66 64 62 65 66 66 37 32 37 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 32 34 2d 31 30 2d 30 33 54 31 37 3a 34 31 3a 34 32 2b 30 37 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 Data Ascii: d1-953fdbeff727" stEvt:when="2024-10-03T17:41:42+07:00" stEvt:softwareAgent="Adobe Photoshop 24.7 (Windows)" stEvt:changed="/"/> <rdf:li stEvt:action="converted" stEvt:parameters="from image/jpeg to image/png"/> <rdf:li stEvt:action="derived"
Mar 14, 2025 10:40:10.586927891 CET	1236	IN	Data Raw: 80 42 3c 3c 01 2d 7a 73 7f 8f 4b 19 74 1e 88 7a 26 e4 3c 53 02 9f ea b5 63 62 5b ef 04 80 78 f2 d5 33 52 bd 40 a0 04 60 0a cf cf 60 29 52 82 f7 c8 11 41 a9 92 a8 de 0b 32 9f c3 39 07 61 01 33 43 69 80 ac 07 6c 41 4a 00 25 1e e4 84 9c 2f 18 85 23 Data Ascii: B<<-zsKtz&<Scb[x3R@``)RA29a3CilAJ%/#S.#Z^^2y#/;<}(;L)9]x'=<Df(OU0RE`5aos;9'gfoMLV;'&H1Ty2/<+xPYfF-
Mar 14, 2025 10:40:10.586940050 CET	1236	IN	Data Raw: 9d e4 a4 c8 23 4f 46 08 ac 25 14 8e 50 08 23 cf 03 8c f2 1e 06 83 db b1 dc ff ef 0e 7d f9 de ef 3d f0 fc 4b 66 ff 2b 2f 91 1f a6 d4 09 02 c4 50 a0 3c 03 65 09 42 52 68 33 23 50 0c 16 0b 29 72 f8 ac 80 f7 e5 da b2 3d d9 81 f7 1e de 39 48 6e 01 57 Data Ascii: #OF%P#}=Kf+/P<eBRh3#P)r=9HnW+@)ZkcR9px\|ZSQ&--$@*mZr)$EN=lyLtRa^=]F]@rM6=%QLCT341^!)
Mar 14, 2025 10:40:10.587307930 CET	1236	IN	Data Raw: 1e d9 7d cb 4d 7f 6d 72 e7 ae 07 b8 d7 9b a7 30 ce 72 56 de 32 84 4d 04 cf 04 e7 1d ba fc f6 08 f3 9c 4b a2 9e 8d 35 3e 5b a2 9e 72 fa 6b a9 1c e8 5a 56 27 7c 75 38 42 44 30 4c 87 08 42 85 58 31 69 71 8c d1 88 91 66 84 ac 08 30 18 f6 b0 b2 f0 fe Data Ascii: }Mmr0rV2MK5>[rkZV'\|u8BD0LBX1iqf0C>>p;9tEzR$FJN]`u$5XwwF}d~''ra~N87GyIT_~<(CAD(@`X"x"QE`y 7w~\|0{u)&
Mar 14, 2025 10:40:10.587321043 CET	1236	IN	Data Raw: 15 28 21 31 ac 90 26 09 60 04 c2 04 0e 03 64 36 43 87 a2 4a 91 56 1e c1 5a a2 02 00 81 c6 59 58 ec 05 10 86 aa 86 73 95 25 78 d1 11 f5 8d 78 83 09 2e e7 5a 6c ea 21 e2 88 4b 55 3d ab 5a ad 0b 11 21 c0 43 83 88 48 c0 20 12 6f e1 9c 23 18 66 0f af Data Ascii: (!1&`d6CJVZYXs%xx.Zl!KU=Z!CH o#ft*$,kqwO>$#BXHFrP;)H+dBXR+:7i;==Z{JH)@hRp-eP,d8];G/$XK7:T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.11	49724	172.67.212.130	80	5172	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 14, 2025 10:40:10.195182085 CET	473	OUT	GET /static/media/appeal.2b97b09e886d7d7ed1ab.png HTTP/1.1 Host: www.policy-violation-10094985.victoriakent.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.policy-violation-10094985.victoriakent.co.uk/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 14, 2025 10:40:10.970192909 CET	958	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:40:10 GMT Content-Type: image/png Content-Length: 226507 Connection: keep-alive Last-Modified: Tue, 11 Mar 2025 17:45:10 GMT ETag: "374cb-63014a6758a65" Accept-Ranges: bytes Cache-Control: max-age=14400 cf-cache-status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WKm08FYDz%2FAjQJ96xxGNUbiJufxUI6awgQKSBd3LSNgNzSZVHXuXs33OAExoWcr%2F656qlDRLu9ZThHZ1ReutdcjNPln7LkIAbssg9NgYC9GmTIqIXs9pK%2B%2F3qV7%2Fy7zTj3%2BH99LgQdxl2T9EZaN6Bn2KnbyLnj2jK2G62pF2h6EsZKg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 9202cede6b967611-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1640&min_rtt=1640&rtt_var=820&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=473&delivery_rate=0&cwnd=70&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
Mar 14, 2025 10:40:10.970364094 CET	1236	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 80 00 00 04 38 08 06 00 00 00 e8 d3 c1 43 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 Data Ascii: PNGIHDR8CpHYssRGBgAMAat`IDATxid'=&N63Fg`dy`ml>h`hd43hf44dndsfs}_22rq9qofE2_8q"yC`k
Mar 14, 2025 10:40:10.970387936 CET	224	IN	Data Raw: 00 80 35 21 00 06 00 00 00 00 00 00 58 13 02 60 00 00 00 00 00 00 80 35 21 00 06 00 00 00 00 00 00 58 13 02 60 00 00 00 00 00 00 80 35 21 00 06 00 00 00 00 00 00 58 13 02 60 00 00 00 00 00 00 80 35 21 00 06 00 00 00 00 00 00 58 13 02 60 00 00 00 Data Ascii: 5!X`5!X`5!X`5!X`5!X`5!X`5!X`5!X`5!X`5!X`5!X
Mar 14, 2025 10:40:10.970398903 CET	1236	IN	Data Raw: 02 60 00 00 00 00 00 00 80 35 21 00 06 00 00 00 00 00 00 58 13 02 60 00 00 00 00 00 00 80 35 21 00 06 00 00 00 00 00 00 58 13 02 60 00 00 00 00 00 00 80 35 21 00 06 00 00 00 00 00 00 58 13 02 60 00 00 00 00 00 00 80 35 21 00 06 00 00 00 00 00 00 Data Ascii: `5!X`5!X`5!X`5!X`5!X`5!X`5!X`5!X`5!X`5!X`5!X`5!
Mar 14, 2025 10:40:10.970412016 CET	1236	IN	Data Raw: 5d 04 c0 00 00 00 ec 08 b9 c2 b6 df 96 97 96 00 35 b5 8b 16 cc 93 1c b0 1e 3e d1 c6 d7 1f ed e2 4b 8f f4 f1 dc f1 7e 0c 78 f3 9f b8 cb c0 b7 54 f4 e6 7f 4b 52 db 44 db f7 25 e0 cd e7 7f f3 9e ab e3 ee 77 b4 e5 7d 94 c0 77 ac e6 6d d2 18 2e af 68 Data Ascii: ]5>K~xTKRD%w}wm.hgMy]nk1fQni[``vFNj7OM\|.L'F)^[cj\i_{`/+xI%NmrC\[>mTo0;B
Mar 14, 2025 10:40:10.970422983 CET	1236	IN	Data Raw: 69 e1 2f 00 00 00 bf 08 01 30 00 00 00 57 4c 99 6c 3b 86 9e 9b f3 3e 9e 38 d2 c4 e7 ef 9f c7 77 9e ea e3 c4 d9 a6 06 af 39 e4 6d c7 16 cf 39 e4 2d d1 68 9d f3 3b 16 ff 8e 95 ba 6d 09 50 73 98 da c6 95 29 01 9e ee 2f bd 69 a9 6a fd dc fa 94 c6 a0 Data Ascii: i/0WLl;>8w9m9-h;mPs)/ijn+z7g_k6n:n[.JAtI7~0WH)R\|>}5EO=27H/qjKRAoV@Mpi6.Y*LemCf8=z&Y
Mar 14, 2025 10:40:10.970438957 CET	1236	IN	Data Raw: 58 96 60 38 d5 77 f6 76 b7 80 de f9 96 41 ef 42 bf b5 1a 78 fa 3e 94 fd 16 ad 9c 6b df e8 a9 da f7 c4 99 14 df f9 e9 46 fc f0 f9 8d 78 cf 4d f3 f8 d4 1d 6d bc ef 96 3e 36 66 cb d0 bf cb b7 6b a7 03 00 f2 f6 b7 77 3e 33 00 00 00 57 8e 00 18 00 00 Data Ascii: X`8wvABx>kFxMm>6fkw>3W`JWS\|?x_Iq~>9c;Sl6KR_)Tl-mjpn]C>r&J[f7zy9UM^y%mSqw@R9W{i0u6}]
Mar 14, 2025 10:40:10.970446110 CET	1236	IN	Data Raw: df ed 1d 8b 4a ef 7e 79 20 40 2e fb 4d 97 db 6f 6a f3 3c 6e eb 86 db 3c f7 5a 0c 6f 1b 71 dd 55 51 2a 82 3f 7d 57 1a ce 77 f9 87 b0 0e a2 ce 07 18 34 97 b6 13 6f 57 e6 57 0b 8c 01 00 00 de 3c 66 00 03 00 00 5c 41 db 67 a2 5e 6e 6e ef 96 90 37 66 Data Ascii: J~y @.Moj<n<ZoqUQ*?}Ww4oWW<f\Ag^nn7f1b[zm.>>>Tye~8w+TU5om7ow8d6p~wo^F0=Zusm.w[\|n'-,_wYk6 8xo?
Mar 14, 2025 10:40:10.970453978 CET	552	IN	Data Raw: c9 e9 0b 11 3f 3a 1c 71 ff 0b fb e2 5d 37 6d c4 67 ee 9e c7 af dd d4 c5 55 fb d2 96 8a e0 d5 0a fd c5 ef 6b 6c ad c6 5f 06 c3 e3 fd 07 00 00 c0 de 20 00 06 00 00 18 4d d5 82 ed a2 a8 77 6b 64 d4 97 ea d1 5c b6 d8 c7 a2 71 f3 90 2e 1d 3e d5 c4 97 Data Ascii: ?:q]7mgUkl_ Mwkd\q.>>W1jzm=lc%pgo+<S<J;OGjVWF`iT^S8)Zg}joyk1[67u
Mar 14, 2025 10:40:10.970469952 CET	1236	IN	Data Raw: 13 47 9b f8 e2 7d 5d 7c eb a9 88 93 17 6a 78 55 42 de 52 9d 58 67 02 a7 9a 54 d5 60 ab 6d 6a c5 6f 53 2b 19 53 b3 6c fb ac d5 f0 db 4b 0b e8 b7 d9 d8 02 3a c6 d9 da f5 77 69 6b 4b e8 a9 8a 77 51 85 bf f8 de 2c 86 f9 16 cb db d4 ed 57 ef 6f e2 23 Data Ascii: G}]\|jxUBRXgT`mjoS+SlK:wikKwQ,Wo#nxi}W``l6,wu'"')xN7rEo3v/kp7!=7ee3n46R4kyyof{6.3G
Mar 14, 2025 10:40:10.975337029 CET	1236	IN	Data Raw: 9e e2 99 63 11 9b 7d 0e 80 f2 9d d6 b9 be 93 b6 cc 03 06 b8 bc da 0d a0 1e 38 d2 0f 8f 23 e7 2e a6 78 e4 48 13 8f bd b2 2f ee b8 b6 8d 8f dd 39 8f 0f df d2 c5 75 07 86 c7 9f 95 aa e0 72 3a dc a0 cf 8f 4f 79 7b ee 1e d0 37 a5 23 c1 f4 98 55 5a c9 Data Ascii: c}8#.xH/9ur:Oy{7#UZx$qn0w8^&^.s2>\<$bgq1-s_kY3CHk)^<;>>~fu}m]z@z\kxLYV[DefC:mi#
Mar 14, 2025 10:40:12.726361036 CET	440	OUT	GET /favicon.png HTTP/1.1 Host: www.policy-violation-10094985.victoriakent.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.policy-violation-10094985.victoriakent.co.uk/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 14, 2025 10:40:13.112864971 CET	1236	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:40:13 GMT Content-Type: image/png Content-Length: 1171 Connection: keep-alive Last-Modified: Sat, 14 Sep 2024 03:15:19 GMT ETag: "493-6220bbfda3fc0" Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wmBe5nLiY%2FzHuTSsmy6oMlPr7NR69O2XAVim9Rb534Ona7CAklWt038TkLsQbWCZ%2F50rcnGD79ltsCa1uz7rJ93S%2BonbJSXQhFcRTzEyJJsQj22I2LcM0wKFsUEYUzcDKdIUKKkaZhM1a41DWqBBBjMeGWkVWw22hVqsJg0GMveZ0oY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 9202ceebda427611-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1823&min_rtt=1640&rtt_var=82&sent=162&recv=22&lost=0&retrans=0&sent_bytes=227465&recv_bytes=913&delivery_rate=18391472&cwnd=204&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 04 4d 49 44 41 54 58 47 ed 95 6d 4c 95 65 18 c7 ef 97 e7 f5 bc 3c 9c c3 39 c0 3c 42 c0 8c 56 91 54 48 9a 2e d7 74 e8 b4 3e d0 66 b4 5e 36 a4 0c d2 74 ab 31 8b c4 a0 47 10 64 3a 96 b6 89 83 1a 96 8e 0f 51 d9 66 2f a6 35 68 25 cd ca 0d ab d1 6a da b4 23 10 78 e0 70 ce 73 5e 9f b7 fb 6e d0 58 74 76 c0 f3 a1 cd 2f e7 fe f8 dc d7 ff ba 7e cf ff be af eb 86 e0 16 2f 78 8b eb 83 34 40 da 81 b4 03 29 3a 40 a1 bb ea 7c 91 4a b0 9b 43 e0 cf a9 13 6b 46 93 b5 6f 9e ec f5 44 54 92 2f 20 76 64 ac 75 e9 f5 54 5a fc a6 00 96 aa 4b f7 1b 48 3c 66 42 76 25 45 10 42 42 4d 0e c4 cf 50 63 6a 67 fc e4 5a ef 4c 91 db e5 cb d2 18 70 be a5 53 cb 33 26 c2 0c 04 d4 e4 0d f5 8c a0 86 76 f8 0f Data Ascii: PNGIHDR szzsRGBMIDATXGmLe<9<BVTH.t>f^6t1Gd:Qf/5h%j#xps^nXtv/~/x4@):@\|JCkFoDT/ vduTZKH<fBv%EBBMPcjgZLpS3&v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.11	49725	172.67.212.130	80	5172	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 14, 2025 10:40:10.195780993 CET	472	OUT	GET /static/media/cover.826bd4ab81f596e729c5.png HTTP/1.1 Host: www.policy-violation-10094985.victoriakent.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.policy-violation-10094985.victoriakent.co.uk/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 14, 2025 10:40:10.935372114 CET	1236	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:40:10 GMT Content-Type: image/png Content-Length: 16099 Connection: keep-alive Last-Modified: Tue, 11 Mar 2025 17:45:10 GMT ETag: "3ee3-63014a6758681" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZJIZqu5CS9Trb3Prwp6GzTPI7TEDhGWFcyRakn5vmyYvQCr%2F9B6DGw06BpaOH9MpZiKawkW0ByosCM7Xgca4LWT76pxE%2B2bRvk3Z6vMWmltH2DRZSWUpiGYbB%2FnetEwV7uH1Z7Am4yzx706T0IeJPVyVP1SpliAjsM7NljugA9Qsp5I%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 9202cede4c9742aa-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1707&min_rtt=1707&rtt_var=853&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=472&delivery_rate=0&cwnd=244&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 3e 78 49 44 41 54 78 01 ed 7d 09 bc 2e 47 55 e7 a9 ee 6f bd fb f2 96 e4 ad 79 49 78 81 ac 64 21 61 09 84 6d 22 0c ab 08 32 1a 15 7e 2e 38 88 83 88 2c ee a0 80 e2 a8 33 2a 0e 83 19 54 04 47 86 31 c8 32 fa 43 01 59 c2 12 12 b2 48 12 92 f0 f2 5e f2 f6 ed ee eb b7 76 d7 9c 73 aa 4e f5 e9 fe be fb 92 f0 bb 2f 86 40 25 fd 6e f7 d7 5b 55 fd eb ec a7 aa cd 57 0e de 72 04 52 3b 0c 3f 28 8f bf 12 99 a5 92 01 bb 05 22 f8 41 79 5c 16 3b 1c d9 14 96 e0 07 e5 71 59 08 db 1f d0 ee e3 bc 94 e0 fb aa 58 b5 6f e0 fb a1 fc 80 82 1f e7 e5 fb 8c 82 bf 3f a8 56 97 1f 50 f0 e3 bc 7c df 00 6c 4c Data Ascii: PNGIHDRxx9d6pHYssRGBgAMAa>xIDATx}.GUoyIxd!am"2~.8,3*TG12CYH^vsN/@%n[UWrR;?("Ay\;qYXo?VP\|lL
Mar 14, 2025 10:40:10.935398102 CET	1236	IN	Data Raw: c4 db f7 5b 79 dc b2 68 1b 97 01 ca 83 60 eb 23 b8 5f 01 93 b4 c1 b6 5b 60 2a 55 e8 da 0a 5f 63 92 0e 94 3a 0b 00 9d 15 3e 8e d2 04 2c da 16 8f a7 f2 38 01 d8 82 2d 0f 41 5a 19 02 a8 3b a7 5c b4 3c 0d b6 31 03 b5 7d 9f 07 3b 77 08 ca 87 6f e7 df Data Ascii: [yh`#_[`U_c:>,8-AZ;\<1};wo(v\|n\<qgIzxz/{<ucwBWt9a;aF5Li9WE[fim%vCwY@}F<
Mar 14, 2025 10:40:10.935415983 CET	1236	IN	Data Raw: b9 a9 f5 d4 dd ca d7 c7 28 ea 24 b0 63 ac 1f dd db a2 81 88 14 be 3a 1f c3 e2 8c 61 36 4e 94 5d c6 ba d6 06 9d dc 8e 4b 96 37 a1 70 ab 4c 31 a2 ea 03 17 fc 3a cb 6a 7e 4f d2 81 f5 28 eb 0e b0 ad 8d b1 7b b0 fb 8e ab a1 be 90 c2 f0 79 a5 1e 96 2b Data Ascii: ($c:a6N]K7pL1:j~O({y+MBTJJ<ba`"0H2&5(5(P%=nX~/Mg`S(jD&`0%GYw3)F`PCPUde+8I~juQ3YI"Qy((Vh
Mar 14, 2025 10:40:10.935427904 CET	1236	IN	Data Raw: 87 77 01 5c f8 66 a6 70 73 e8 1f a1 74 f4 7f 41 fb e8 97 5c 25 ca 62 ff 72 35 02 b8 45 7f 36 3f 57 79 da b8 4d aa 61 dd 96 6b 78 4c f6 93 6f 65 97 f8 39 ac af 16 7d 5a 45 7c 5c 08 f1 05 fb b6 9f fc ed c3 ae b5 cc 62 cf d6 a2 0b aa 13 b0 d5 9d ff Data Ascii: w\fpstA\%br5E6?WyMakxLoe9}ZE\|\bA>EFZBbDilv\duSWBj0Cg;5L8/~#y\|"L(R\|fmL +U{{rszR<lo}ww-8~
Mar 14, 2025 10:40:10.935447931 CET	1236	IN	Data Raw: f5 05 58 51 b0 2e 39 0a b6 ce 6c e8 09 fa 58 e7 4b ae 5d f8 6a a8 9c fb 9a 60 06 ad 55 a2 32 1a 18 03 3b e1 ab 9f fc 08 bc e7 57 df 03 43 43 55 18 1b 1f 81 a5 c5 26 53 2f b1 dd 58 05 96 05 5c fa 4d a8 37 59 c3 ad 46 20 97 cb 31 cb e5 4f 7e e8 ef Data Ascii: XQ.9lXK]j`U2;WCCU&S/X\M7YF 1O~V5Eh6XIQX5.QE<uW,<=".o\|l/q<{ )Z]]Xl_rXHrWn9{!4P&"Ioy>M0
Mar 14, 2025 10:40:10.935457945 CET	1236	IN	Data Raw: c1 b3 9f 75 16 5c 73 c5 79 30 34 52 83 83 0f 4e 67 ef 15 bf 21 be bf 8c 03 e2 d8 c9 45 98 18 1b 80 df fa b5 57 c0 ae 9d 9b e0 1f 3e 7d 0b 3c b8 7f 8a 23 50 af 78 d9 53 60 66 c9 b2 eb 92 1c 29 64 5e 4d 9f 9c 41 ad bf cd 14 98 70 9b 88 46 3a 90 a3 Data Ascii: u\sy04RNg!EW>}<#PxS`f)d^MApF:-70Y(QkIa@+.;h"4luWQE4o_,Kd+#~fQe7yD_ <kz\)~?\|Pi~WM!q
Mar 14, 2025 10:40:10.935472012 CET	776	IN	Data Raw: ca b8 25 24 87 91 72 3b 08 58 c7 83 56 04 56 40 4d fb 0c de f5 f7 64 e1 cb 9a c3 9b 73 3f e5 fc ad 05 b9 97 52 12 56 da cc 58 34 14 aa a7 e7 76 4a 75 ab ce 9c 68 2b 45 87 e5 57 3f d6 ac df 59 48 40 cf fd 66 0b bf d1 65 43 a3 b0 b0 d8 60 e5 8a d8 Data Ascii: %$r;XVV@Mds?RVX4vJuh+EW?YH@feC`3E?%U(o)gV)U,eaLTJH-j56/cQwRIJVk>i95J1rb)X_W2w=p;`RB4e=P/:2
Mar 14, 2025 10:40:10.935508966 CET	1236	IN	Data Raw: 3d 53 ec 16 fd dd eb 3f 80 21 c3 ad d9 34 53 2a a9 d7 f4 d9 8c cb f2 b4 a8 34 8e 7d 0d 75 0b c8 2f d5 d0 07 68 29 dd a1 11 e8 d2 02 d5 be 08 a0 25 76 43 3a b6 1c 81 50 65 1e 36 01 d5 fd 4d 78 6b a7 1d 55 9b 75 2a 6b 65 22 f4 8d 88 79 b6 c5 e9 2b Data Ascii: =S?!4S4}u/h)%vC:Pe6MxkUuke"y+sU[44oc$SE\|I\hE\|{`@'aOw#7@v=)\|ZOP5E(s{9%d<*b_<3r%uZtm
Mar 14, 2025 10:40:10.935522079 CET	1236	IN	Data Raw: 29 ad 23 46 0a 09 f1 43 2f c4 65 9f 8a 80 4c b6 16 c9 88 a2 17 85 2b ec 65 83 76 b5 c5 4d 37 8b 3d 4d fa 09 df c2 a1 57 48 88 c5 d1 1a 58 34 89 8b 97 48 e2 75 7f bd 1d cc 5e a1 7c 78 8e 09 c9 d2 a2 66 65 b8 7d 69 02 ee c2 d7 ef 3e 72 0c ce 89 da Data Ascii: )#FC/eL+evM7=MWHX4Hu^\|xfe}i>r.j"LBK}TkOEcs\l ]!9-0r_H3q-%sJaeLOf<=;2Tn{L44yPY 7=NF?e M#pC
Mar 14, 2025 10:40:10.935534000 CET	1236	IN	Data Raw: bd b0 54 1a 86 a8 d5 66 85 a7 94 52 3d 29 2b b5 0a 43 51 0b 28 81 64 d9 38 45 ab 8c ec f9 c4 d8 a5 30 3f f0 24 18 5b bd 17 b6 2d ec c5 70 dc 14 0c ce 3b 56 5f 6f ce 30 bf 9c de f0 5c 38 3c 7a 2e 4c 0f 5d 02 09 3a 47 aa ed fe 53 68 ba e8 3c 69 54 Data Ascii: TfR=)+CQ(d8E0?$[-p;V_o0\8<z.L]:GSh<iT#1s\ysqx(`oR_D*R9QXa%:C1>fM5-(r<YV9#D'lZtpaj 1#Hy1'v@s4h
Mar 14, 2025 10:40:10.941423893 CET	1236	IN	Data Raw: 4a a5 82 1b 2c 97 4d af 12 c6 44 2e 13 35 17 a9 78 66 8a 82 db 68 80 23 15 97 eb 49 00 a9 af 1d a9 f6 b5 8c ee 2b 9e f0 7c 4a 5a 2a 89 51 4f 25 e4 aa 2e 37 0e f2 3e 81 9e f8 d6 d2 8a ff e0 27 d3 13 a8 6d 7f 7d a3 6e c2 f7 92 4c 90 85 6e 59 42 2b Data Ascii: J,MD.5xfh#I+\|JZQO%.7>'m}nLnYB+5"fH[,~uLU+NrUJ;0,YuRj[2qzW$GDDU<]O?^M`z!sw,dSM}VV>9Tp]*A9

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.11	49722	104.17.25.14	443	5172	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:40:09 UTC	611	OUT	GET /ajax/libs/font-awesome/6.6.0/css/all.min.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive Origin: http://www.policy-violation-10094985.victoriakent.co.uk sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:40:09 UTC	943	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:40:09 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"6696a8d8-546c" Last-Modified: Tue, 16 Jul 2024 17:07:36 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 48587 Expires: Wed, 04 Mar 2026 09:40:09 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7jbax127GJ23EhMyZ2JWT14zFA58N7NFzfDs20dmlcvSESGe%2BcM0S5cl%2FwuxBtjzT4ejPWHZgdIQZ2zrmQsv7mSwYKI8qtcxlBw4sgXSNCzHCrElNuItM8epTFG%2BsisvgO5ZcShb"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 9202ced97998c331-EWR alt-svc: h3=":443"; ma=86400
2025-03-14 09:40:09 UTC	426	IN	Data Raw: 37 63 30 31 0d 0a 2f 2a 21 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 46 72 65 65 20 36 2e 36 2e 30 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 66 72 65 65 20 28 49 63 6f 6e 73 3a 20 43 43 20 42 59 20 34 2e 30 2c 20 46 6f 6e 74 73 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 6f 64 65 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 46 6f 6e 74 69 63 6f 6e 73 2c 20 49 6e 63 2e 0a 20 2a 2f 0a 2e 66 61 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 66 61 2d 73 74 79 6c 65 Data Ascii: 7c01/! Font Awesome Free 6.6.0 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) * Copyright 2024 Fonticons, Inc. */.fa{font-family:var(--fa-style
2025-03-14 09:40:09 UTC	1369	IN	Data Raw: 73 63 61 6c 65 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 64 69 73 70 6c 61 79 3a 76 61 72 28 2d 2d 66 61 2d 64 69 73 70 6c 61 79 2c 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 29 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 61 75 74 6f 7d 2e 66 61 2d 63 6c 61 73 73 69 63 2c 2e 66 61 2d 72 65 67 75 6c 61 72 2c 2e 66 61 2d 73 6f 6c 69 64 2c 2e 66 61 72 2c 2e 66 61 73 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 36 20 46 72 65 65 22 7d 2e 66 61 2d 62 72 61 6e 64 73 2c 2e 66 61 62 7b 66 6f 6e 74 2d 66 61 6d 69 Data Ascii: scale;-webkit-font-smoothing:antialiased;display:var(--fa-display,inline-block);font-style:normal;font-variant:normal;line-height:1;text-rendering:auto}.fa-classic,.fa-regular,.fa-solid,.far,.fas{font-family:"Font Awesome 6 Free"}.fa-brands,.fab{font-fami
2025-03-14 09:40:09 UTC	1369	IN	Data Raw: 2d 70 75 6c 6c 2d 6c 65 66 74 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 76 61 72 28 2d 2d 66 61 2d 70 75 6c 6c 2d 6d 61 72 67 69 6e 2c 2e 33 65 6d 29 7d 2e 66 61 2d 70 75 6c 6c 2d 72 69 67 68 74 7b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 76 61 72 28 2d 2d 66 61 2d 70 75 6c 6c 2d 6d 61 72 67 69 6e 2c 2e 33 65 6d 29 7d 2e 66 61 2d 62 65 61 74 7b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 2d 62 65 61 74 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 2c 30 73 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 2c 6e Data Ascii: -pull-left{float:left;margin-right:var(--fa-pull-margin,.3em)}.fa-pull-right{float:right;margin-left:var(--fa-pull-margin,.3em)}.fa-beat{animation-name:fa-beat;animation-delay:var(--fa-animation-delay,0s);animation-direction:var(--fa-animation-direction,n
2025-03-14 09:40:09 UTC	1369	IN	Data Raw: 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 2c 30 73 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 2c 6e 6f 72 6d 61 6c 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 2c 31 73 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 2c 69 6e 66 69 6e 69 74 65 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 76 61 72 28 2d 2d Data Ascii: nimation-delay:var(--fa-animation-delay,0s);animation-direction:var(--fa-animation-direction,normal);animation-duration:var(--fa-animation-duration,1s);animation-iteration-count:var(--fa-animation-iteration-count,infinite);animation-timing-function:var(--
2025-03-14 09:40:09 UTC	1369	IN	Data Raw: 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 31 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 30 73 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 30 73 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 62 65 61 74 7b 30 25 2c 39 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 7d 34 35 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 76 61 72 28 2d 2d 66 61 2d 62 65 61 74 2d 73 63 61 6c 65 2c 31 2e 32 35 29 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 62 6f 75 6e 63 65 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 31 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 76 61 72 28 2d 2d 66 61 2d 62 6f 75 6e 63 65 2d 73 74 61 72 74 2d 73 63 61 Data Ascii: eration-count:1;transition-delay:0s;transition-duration:0s}}@keyframes fa-beat{0%,90%{transform:scale(1)}45%{transform:scale(var(--fa-beat-scale,1.25))}}@keyframes fa-bounce{0%{transform:scale(1) translateY(0)}10%{transform:scale(var(--fa-bounce-start-sca
2025-03-14 09:40:09 UTC	1369	IN	Data Raw: 72 6d 3a 72 6f 74 61 74 65 28 31 74 75 72 6e 29 7d 7d 2e 66 61 2d 72 6f 74 61 74 65 2d 39 30 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 39 30 64 65 67 29 7d 2e 66 61 2d 72 6f 74 61 74 65 2d 31 38 30 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 7d 2e 66 61 2d 72 6f 74 61 74 65 2d 32 37 30 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 32 37 30 64 65 67 29 7d 2e 66 61 2d 66 6c 69 70 2d 68 6f 72 69 7a 6f 6e 74 61 6c 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 2d 31 29 7d 2e 66 61 2d 66 6c 69 70 2d 76 65 72 74 69 63 61 6c 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 59 28 2d 31 29 7d 2e 66 61 2d 66 6c 69 70 2d 62 6f 74 68 2c 2e 66 61 2d 66 6c 69 70 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2e 66 61 2d 66 6c Data Ascii: rm:rotate(1turn)}}.fa-rotate-90{transform:rotate(90deg)}.fa-rotate-180{transform:rotate(180deg)}.fa-rotate-270{transform:rotate(270deg)}.fa-flip-horizontal{transform:scaleX(-1)}.fa-flip-vertical{transform:scaleY(-1)}.fa-flip-both,.fa-flip-horizontal.fa-fl
2025-03-14 09:40:09 UTC	1369	IN	Data Raw: 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 37 61 22 7d 2e 66 61 2d 69 6e 66 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 32 39 22 7d 2e 66 61 2d 63 6f 6d 70 72 65 73 73 2d 61 6c 74 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 64 6f 77 6e 2d 6c 65 66 74 2d 61 6e 64 2d 75 70 2d 72 69 67 68 74 2d 74 6f 2d 63 65 6e 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 32 32 22 7d 2e 66 61 2d 65 78 70 6c 6f 73 69 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 34 65 39 22 7d 2e 66 61 2d 66 69 6c 65 2d 61 6c 74 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 66 69 6c 65 2d 6c 69 6e 65 73 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 66 69 6c 65 2d 74 65 78 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 63 22 7d 2e 66 61 2d 77 Data Ascii: e{content:"\f27a"}.fa-info:before{content:"\f129"}.fa-compress-alt:before,.fa-down-left-and-up-right-to-center:before{content:"\f422"}.fa-explosion:before{content:"\e4e9"}.fa-file-alt:before,.fa-file-lines:before,.fa-file-text:before{content:"\f15c"}.fa-w
2025-03-14 09:40:09 UTC	1369	IN	Data Raw: 66 61 2d 66 6f 72 77 61 72 64 2d 73 74 65 70 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 73 74 65 70 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 31 22 7d 2e 66 61 2d 66 61 63 65 2d 73 6d 69 6c 65 2d 62 65 61 6d 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 73 6d 69 6c 65 2d 62 65 61 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 62 38 22 7d 2e 66 61 2d 66 6c 61 67 2d 63 68 65 63 6b 65 72 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 31 65 22 7d 2e 66 61 2d 66 6f 6f 74 62 61 6c 6c 2d 62 61 6c 6c 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 66 6f 6f 74 62 61 6c 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 34 65 22 7d 2e 66 61 2d 73 63 68 6f 6f 6c 2d 63 69 72 63 6c 65 2d 65 78 63 6c 61 6d Data Ascii: fa-forward-step:before,.fa-step-forward:before{content:"\f051"}.fa-face-smile-beam:before,.fa-smile-beam:before{content:"\f5b8"}.fa-flag-checkered:before{content:"\f11e"}.fa-football-ball:before,.fa-football:before{content:"\f44e"}.fa-school-circle-exclam
2025-03-14 09:40:09 UTC	1369	IN	Data Raw: 63 6c 65 2d 65 78 63 6c 61 6d 61 74 69 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 34 65 62 22 7d 2e 66 61 2d 63 69 72 63 6c 65 2d 68 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 68 6f 73 70 69 74 61 6c 2d 73 79 6d 62 6f 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 37 65 22 7d 2e 66 61 2d 70 61 67 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 31 35 22 7d 2e 66 61 2d 61 64 64 72 65 73 73 2d 62 6f 6f 6b 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 63 6f 6e 74 61 63 74 2d 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 62 39 22 7d 2e 66 61 2d 73 74 72 69 6b 65 74 68 72 6f 75 67 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 63 22 7d 2e 66 61 2d 6b 3a 62 65 66 6f 72 65 7b 63 6f Data Ascii: cle-exclamation:before{content:"\e4eb"}.fa-circle-h:before,.fa-hospital-symbol:before{content:"\f47e"}.fa-pager:before{content:"\f815"}.fa-address-book:before,.fa-contact-book:before{content:"\f2b9"}.fa-strikethrough:before{content:"\f0cc"}.fa-k:before{co
2025-03-14 09:40:09 UTC	1369	IN	Data Raw: 2d 73 71 75 69 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 38 61 22 7d 2e 66 61 2d 73 70 72 61 79 2d 63 61 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 62 64 22 7d 2e 66 61 2d 74 72 75 63 6b 2d 6d 6f 6e 73 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 33 62 22 7d 2e 66 61 2d 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 35 37 22 7d 2e 66 61 2d 65 61 72 74 68 2d 61 66 72 69 63 61 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 67 6c 6f 62 65 2d 61 66 72 69 63 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 37 63 22 7d 2e 66 61 2d 72 61 69 6e 62 6f 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 35 62 22 7d 2e 66 61 2d 63 69 72 63 6c 65 2d 6e 6f 74 63 68 3a 62 65 66 Data Ascii: -squint:before{content:"\f58a"}.fa-spray-can:before{content:"\f5bd"}.fa-truck-monster:before{content:"\f63b"}.fa-w:before{content:"\57"}.fa-earth-africa:before,.fa-globe-africa:before{content:"\f57c"}.fa-rainbow:before{content:"\f75b"}.fa-circle-notch:bef

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.11	49715	142.250.186.68	443	5172	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:40:10 UTC	487	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CK+HywE= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:40:10 UTC	1303	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:40:10 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-8OhdFwOMhoH_V07GPjBjUA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-14 09:40:10 UTC	87	IN	Data Raw: 34 35 65 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 73 65 6c 65 6e 61 20 67 6f 6d 65 7a 20 62 65 6e 6e 79 20 62 6c 61 6e 63 6f 20 73 75 6e 73 65 74 20 62 6c 76 64 22 2c 22 6e 66 6c 20 66 72 65 65 20 61 67 65 6e 74 73 20 73 69 67 6e 69 6e 67 73 22 2c 22 6c 61 79 6f Data Ascii: 45e)]}'["",["selena gomez benny blanco sunset blvd","nfl free agents signings","layo
2025-03-14 09:40:10 UTC	1038	IN	Data Raw: 66 66 73 20 65 64 77 61 72 64 20 6a 6f 6e 65 73 22 2c 22 6e 69 6e 74 65 6e 64 6f 20 73 77 69 74 63 68 20 67 61 6d 65 73 22 2c 22 63 68 69 63 61 67 6f 20 72 69 76 65 72 20 64 79 65 69 6e 67 20 32 30 32 35 22 2c 22 63 72 6f 73 73 66 69 74 20 6f 70 65 6e 20 32 35 2e 33 20 77 6f 72 6b 6f 75 74 73 22 2c 22 73 74 65 61 6d 20 73 70 72 69 6e 67 20 73 61 6c 65 20 32 30 32 35 20 67 61 6d 65 73 22 2c 22 6c 69 70 20 62 75 20 74 61 6e 20 69 6e 74 65 6c 20 63 65 6f 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 70 73 69 6e 66 6f 22 3a 22 43 68 6f Data Ascii: ffs edward jones","nintendo switch games","chicago river dyeing 2025","crossfit open 25.3 workouts","steam spring sale 2025 games","lip bu tan intel ceo"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"Cho
2025-03-14 09:40:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.11	49726	104.17.25.14	443	5172	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:40:10 UTC	691	OUT	GET /ajax/libs/font-awesome/6.6.0/webfonts/fa-solid-900.woff2 HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive Origin: http://www.policy-violation-10094985.victoriakent.co.uk sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.6.0/css/all.min.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:40:10 UTC	982	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:40:10 GMT Content-Type: application/octet-stream; charset=utf-8 Content-Length: 157192 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: "6696a8d8-26608" Last-Modified: Tue, 16 Jul 2024 17:07:36 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 31131 Expires: Wed, 04 Mar 2026 09:40:10 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RW%2BBnrqgHOqXB2qz0P4X8mri0OZnxBBkqW0sz2MOkbtfSdUcSQG%2F%2FmV2D%2B%2FZd3eW5qEJqhbuTTCNPmv8ptdsFregVWALugrT8bToDwORJPcfGjixWj%2Bg3SMRNdoo5njwPrL96Frc"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 9202cee02a398c89-EWR alt-svc: h3=":443"; ma=86400
2025-03-14 09:40:10 UTC	387	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 02 66 08 00 0a 00 00 00 06 29 11 00 02 65 bc 03 06 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 36 02 24 04 20 06 60 03 ab 50 00 81 91 66 ca 96 df 20 cb ab 54 05 87 6d 07 20 25 88 14 93 94 01 4c 98 1e 00 00 aa f9 79 18 91 a2 d9 c3 53 41 f4 a4 f5 e2 01 50 55 55 55 55 35 29 21 e0 31 db 76 00 aa aa 2a f8 d1 4f 7e f6 8b 5f fd e6 77 7f f8 d3 5f fe e6 ef fe e1 9f fe e5 df fe e3 bf fe e7 ff fe 53 60 30 ee fe 81 30 2d db 71 b9 3d 5e 9f df f0 ef ff 7e 9f fb 64 88 de 94 f0 96 85 e7 8c 2a 2b 94 ad ea f2 65 99 82 1b 27 aa 58 65 d5 7e 61 aa 2b 14 e0 fb 14 0b 6d e9 48 77 6f 00 94 5e 7f b3 76 c2 1d 42 05 cc 0e 91 42 3d 02 b4 4e 97 32 35 00 58 18 57 e1 44 f0 09 29 9d 49 16 ac ea 13 16 e9 aa 39 3d 01 ae e6 c1 36 0d 7a b6 Data Ascii: wOF2f)e6$ `Pf Tm %LySAPUUUU5)!1vO~_w_S`00-q=^~d+e'Xe~a+mHwo^vBB=N25XWD)I9=6z
2025-03-14 09:40:10 UTC	1369	IN	Data Raw: dd bc e1 ff ff df 69 ee 23 3d db a3 34 56 48 63 0d 70 40 05 52 c0 2a 20 c5 c5 4f 20 56 11 68 f0 af 04 78 b3 de e0 cf 93 95 f3 ff 9e 5b e1 d6 ad ba 75 2b a4 0e d3 dd d5 5d d3 5d 33 b9 6b 6a ba 6b 76 67 57 5b 9b 67 b5 5a a9 51 5c 25 d4 0a 28 23 06 a5 80 5a 08 81 44 1c 24 82 c0 18 1a 30 d6 0a 61 bf 25 0b 04 52 13 0c c2 81 b7 36 b6 c1 d8 0f 8f 33 c6 ef bd bf 36 cf 1f 30 a6 e6 e7 49 73 fe df 73 67 e6 de b9 53 ee dc d1 34 a9 8f 34 aa db ac 59 95 d9 5d 7b 6d d9 5e 37 1c f0 da 60 6c 53 45 c0 06 02 21 4b 0d e9 4a 27 0d 96 54 92 f7 49 94 c7 2b 90 fc e4 3b ad 90 28 a4 35 bf 56 a3 d7 49 27 af 91 df b4 3f 91 aa f6 f3 66 76 66 76 66 76 67 4b 03 fa 02 4b 00 64 07 08 02 20 25 4a 82 3a 6d 49 36 2d d9 2a b6 62 33 ae 72 9c a2 e4 12 97 16 b8 a4 b4 8b d2 3a d3 ba d2 9a 83 4b Data Ascii: i#=4VHcp@R* O Vhx[u+]]3kjkvgW[gZQ\%(#ZD$0a%R6360IssgS44Y]{m^7`lSE!KJ'TI+;(5VI'?fvfvfvgKKd %J:mI6-*b3r:K
2025-03-14 09:40:10 UTC	1369	IN	Data Raw: 65 d5 7c 98 b7 66 f2 a8 1c fd c7 d7 4c ee b9 38 6c c0 1f d4 3e ba 77 2f 7c 64 ee 73 ab dc 80 a1 16 c4 39 18 f1 5d a0 6a 6d 0a 59 1d 0d b2 59 1c 3f 39 35 e6 db 3c b7 1a e7 cf 86 f3 5a 03 df 4a 5e a5 60 dd 74 f5 78 c3 ca 9f 84 9e c6 7c 44 f3 a5 9c 5d ca 71 af 63 bb ed d5 9d ad 55 ab ba 98 4e 7a 2e db 8f 17 d7 4b 9f bf 21 87 c2 7a 3c 4e 6a 97 ad 85 5c 9d 25 e1 6f 30 e8 94 f5 5b 69 53 a3 93 d2 6b fb dc ee ab 26 9c cb 95 d5 e7 4d e9 7b f7 09 06 59 a2 b8 48 64 eb eb ce 56 aa 45 17 56 6f 73 b3 83 e0 f8 5a a5 b5 6f b2 99 7f 65 7f c6 6b 5c eb 12 a8 f1 70 dd d4 9c 5d 3a f9 3b 31 f6 43 ad cc ef 60 ff 94 af f2 b6 73 89 1e f7 01 8a ec d5 90 8f c6 e5 c0 1d 7e bc 52 c9 ac 6d 74 ef 4d 2e 1b c8 ee 0d f3 a9 f6 21 c5 a8 b5 12 bb 97 5a af 3c 36 8b 8e 46 76 30 67 72 af 8d a7 Data Ascii: e\|fL8l>w/\|ds9]jmYY?95<ZJ^`tx\|D]qcUNz.K!z<Nj\%o0[iSk&M{YHdVEVosZoek\p]:;1C`s~RmtM.!Z<6Fv0gr
2025-03-14 09:40:10 UTC	1369	IN	Data Raw: 87 78 98 47 78 94 c7 78 9c 27 78 92 a7 78 91 77 78 97 8f f9 84 4f f9 82 2f f9 8a df f9 8b 7f 05 a2 25 94 98 a4 4a 9a a4 4b 86 64 4b ae e4 49 be 14 48 a1 14 49 a5 58 69 2e 5d a4 9b 74 97 9e d2 4f fa cb 00 19 24 e3 65 8b 6c 95 6d b5 78 28 5f a4 42 b1 14 c5 b2 15 cb 5e 2c 7f b1 d6 26 a1 49 61 d2 9a 3a 66 a2 59 68 36 9b ad e6 88 39 6e ce 9b 4b e6 9a 79 6c de 98 cf c6 49 19 a9 2e b5 a5 ad f4 93 21 32 42 a6 c9 02 59 25 db e4 b0 9c 96 eb 72 43 ee c8 73 79 29 af 25 46 be c8 77 f9 6f 93 d8 bc b6 84 ad 61 97 d8 ed f6 92 bd 66 6f da 7b f6 91 0d b5 51 81 9c 81 53 81 b3 81 6f ae ba 6b e0 1a bb e1 6e 9c 9b e4 a6 b9 d5 6e bd 3b e0 4e b8 d3 ee 9c 7b e0 3e b9 50 17 e5 62 5c ac 8f e7 0b f8 52 be 95 ef ec 47 f9 f1 7e 91 5f e5 b7 fa 1d 7e 8f 3f ea 4f f9 f3 a1 93 43 a7 86 ce Data Ascii: xGxx'xxwxO/%JKdKIHIXi.]tO$elmx(_B^,&Ia:fYh69nKylI.!2BY%rCsy)%Fwoafo{QSoknn;N{>Pb\RG~_~?OC
2025-03-14 09:40:10 UTC	1369	IN	Data Raw: 5e c7 db 34 7a a6 d7 cd 5d 3f b3 6f 97 3f ac 8e c4 b1 92 50 92 48 aa 83 e7 93 82 52 44 2a 7e 9c e6 d2 46 3a 48 17 e9 2f 03 65 a8 8c 90 49 32 4d 66 ca 1c 59 24 2b f5 f6 b7 ca 0e d9 25 78 d8 14 b6 85 7d e1 50 38 16 4e 84 d3 e1 6c b8 14 ae 6a d7 07 e1 6d e7 f7 3e 29 71 62 9c b5 9b 3f 2e 10 17 3e fa 0a dd f1 f1 d4 78 46 8f 93 7f 57 93 f9 32 f3 45 e6 93 cc 07 99 f7 f0 63 87 a8 64 95 92 e5 4a 96 f2 ff fc 73 7f d3 9f f4 27 fc 2e bf c3 6f f4 eb fd 1a c0 cf f6 53 fd 24 5f cd 57 f1 15 7d 51 9f dd 27 5a a6 fd b6 cf f6 ca 1e d8 15 3b 6b 87 6c b7 ed b0 75 b6 d6 d6 d8 22 9b 6b b3 6d 8a 8d b2 1e d6 c5 9a 46 a9 d1 a7 e8 46 74 35 3a 13 9d 88 8e 45 eb a3 d5 d1 10 f7 d2 bd 70 cb 5c 37 d7 ce b5 75 55 5c 39 57 c6 95 72 79 5d 2e 4d d1 58 83 fe d3 bf fa 47 7f eb 2f fd 09 e8 0f Data Ascii: ^4z]?o?PHRD*~F:H/eI2MfY$+%x}P8Nljm>)qb?.>xFW2EcdJs'.oS$_W}Q'Z;klu"kmFFt5:Ep\7uU\9Wry].MXG/
2025-03-14 09:40:10 UTC	1369	IN	Data Raw: 38 4b df ce c5 dc 4c 69 ed e4 af 6b 43 38 81 84 22 14 50 9e 0a 54 a4 12 95 a9 42 55 aa 51 9d 1a d4 a4 16 b5 a9 43 4a 8e 42 32 ea 92 27 52 8f fa 34 a0 21 8d 68 4c 13 9a d2 8c 2b b8 dd 2e b7 2b ec 4a bb ce ae b7 9b ec 16 bb d5 ee b2 fb ec 09 7b d2 9e b2 b7 ec 7d fb c0 3e b4 8f ec 63 fb c4 3e b5 cf ed 0b fb d2 be b1 6f ed 3b fb c9 7e b6 5f ec 57 fb d3 36 d9 36 db 63 7b ed 88 1d 55 a2 52 aa ae 9a 4a 55 5f 2d d5 4a 6d d4 51 9d d4 59 dd d5 53 fd 35 40 03 35 44 43 35 4c c3 35 5a 63 34 4e 13 34 59 4b b4 4a 6b b4 5e 67 eb 02 5d a8 8b 74 b1 2e d1 a5 ba 4c 97 eb 3a 5d af db 74 bb ee d5 23 7a 52 6f ea 1d 7d a8 2f f4 95 7e d3 9f fa 5f 9b b4 59 5b b4 55 db b4 5d 3b b4 53 bb b4 5b 7b 5c 1e bc a8 17 f3 12 5e d6 cb 79 81 97 f7 ea 5e d3 6b 79 43 6f ec 4d bc a9 37 f3 16 de Data Ascii: 8KLikC8"PTBUQCJB2'R4!hL+.+J{}>c>o;~_W66c{URJU_-JmQYS5@5DC5L5Zc4N4YKJk^g]t.L:]t#zRo}/~_Y[U];S[{\^y^kyCoM7
2025-03-14 09:40:10 UTC	1369	IN	Data Raw: 31 38 88 f2 39 38 98 f2 25 38 84 f2 5d 38 94 f2 7d 38 8c f2 43 38 9c f2 07 38 82 f2 17 38 92 f2 77 38 8a f2 7f 38 9a 76 df b5 38 86 f6 54 da 33 fc 7f e6 a4 f6 5c c0 f1 b4 97 82 13 68 9f 06 27 d2 be 0c 4e a2 fd 20 9c 4c fb 51 38 85 f6 f3 70 2a ed 57 de 81 d3 68 bf 4e fb 0d 9c 4e bb 23 38 93 f6 77 70 16 dd 93 e0 6c ba ef 7c 07 ba e8 be 9b ee 7b 30 8d ee df 04 e7 50 2d 09 e7 52 ad f4 0e 9c 47 b5 0a d5 aa 38 9f 6a 4f c1 85 54 07 7c 42 17 51 1d 4c 75 08 2e a6 3a 9c ea 08 5c 4a 35 4d 70 39 d5 79 70 05 d5 f5 9f d0 95 54 37 51 dd 8e ab a8 ee a4 ba 0b 37 50 dd ab 75 b8 89 ea 7e aa d7 c6 ba df 50 f5 06 d5 17 78 9a aa a0 ea e0 1d aa af a9 be c3 c7 54 3f 00 9f 53 fd 28 eb de 01 fc 89 3a c7 17 d4 bd a9 67 c6 2f d4 2d ea 79 48 c3 a8 e7 a7 5e 87 34 9e 7a 3d ea 4d 49 8b Data Ascii: 1898%8]8}8C888w88v8T3\h'N LQ8p*WhNN#8wpl\|{0P-RG8jOT\|BQLu.:\J5Mp9ypT7Q7Pu~PxT?S(:g/-yH^4z=MI
2025-03-14 09:40:10 UTC	1369	IN	Data Raw: 5b 10 1b 51 0f 93 a4 05 a8 87 47 a4 05 a9 47 53 8f 21 36 a1 9e 2a 89 cd a8 57 15 c4 e6 d4 87 a9 8f cc e5 f2 fa 18 12 5b 51 9f 92 d8 9a fa 5c 44 6c 43 7d 89 fa 0a b1 2d f5 35 49 ec 40 fd 48 62 47 ea a7 12 3b 51 bf 92 d8 99 fa 53 44 ec 42 fd 8b fa 37 b1 2b f5 5f 49 ef 3c ea ff 12 bb d3 fa 49 ec 41 1b 21 b1 27 6d 72 89 bd 68 53 4a ec 4d 9b 2a 22 a6 a7 cd 4e 9b 93 d8 87 36 b7 22 62 7f da 7c b4 f9 89 03 68 0b 4a e2 20 da 22 12 07 d3 16 93 38 84 b6 84 c4 a1 b4 a5 24 0e a3 2d 23 71 38 6d 05 89 23 68 2b 4b 1c 49 5b 55 e2 28 da 1a 12 47 d3 d6 2d 88 63 68 1b d2 36 9a 27 e7 6d 13 22 e2 78 da 66 b4 cd 89 13 68 5b ab 64 9c 44 db 96 b6 13 71 32 6d 57 da ee c4 99 b4 3d 15 11 e7 d0 f6 a1 ed 47 9c 4b 3b 48 05 69 71 da c1 b4 43 ce 4b 96 68 87 d1 0e 27 2e a2 1d 49 3b 86 b8 Data Ascii: [QGGS!6W[Q\DlC}-5I@HbG;QSDB7+_I<IA!'mrhSJM"N6"b\|hJ "8$-#q8m#h+KI[U(G-ch6'm"xfh[dDq2mW=GK;HiqCKh'.I;
2025-03-14 09:40:10 UTC	1369	IN	Data Raw: 26 ee 12 94 3a 13 3f 0c a5 1e 24 fc 8b 52 4f 12 fe 46 a9 37 89 75 50 ea 43 62 5d 94 fa 93 38 1f a5 c1 c4 3f 8a d2 10 e2 ee 44 69 04 89 8b 51 9a 4b 9c 50 5a 40 c2 91 28 2d 74 7b d8 0e 12 17 a0 b4 03 09 9d 51 da 8b f8 c9 28 ed 4b fc 33 28 ed 47 c2 68 94 0e 27 fa 02 a5 23 88 7b 0b a5 33 89 bb 0e a5 73 89 7f 18 a5 f3 89 df 16 a5 4b 88 4e 47 e9 52 e2 0e 44 e9 5a a2 6b 50 ba 8e f8 ff 50 ba 99 84 4b 50 ba 83 f8 af 50 ba 9b e8 24 94 1e 23 7e 7f 94 1e 27 6e 3d 4a 4f 90 38 02 a5 27 49 f8 19 a5 a7 49 d8 80 d2 33 44 ff a3 f4 1c f1 47 a1 f4 02 09 fb a3 f4 32 71 5f a2 f4 1a f1 27 a0 f4 26 f1 c7 a3 f4 16 09 df a3 f4 0e 09 87 a0 f4 3e 09 d7 a0 f4 21 09 f7 a0 f4 19 d1 45 28 7d 41 dc 8d 28 7d 4d dc 14 94 be 23 61 31 4a 3f 92 50 13 a5 4c 74 35 4a 55 a2 9b 50 0e 24 bc 83 72 Data Ascii: &:?$ROF7uPCb]8?DiQKPZ@(-t{Q(K3(Gh'#{3sKNGRDZkPPKPP$#~'n=JO8'II3DG2q_'&>!E(}A(}M#a1J?PLt5JUP$r
2025-03-14 09:40:10 UTC	1369	IN	Data Raw: fc 52 e2 84 16 9e 40 c2 8b d0 c2 13 49 b0 1e 5a 78 39 71 ef a2 85 37 12 37 0e 2d 7c 86 84 7f a0 85 73 fe 93 e2 ae a0 02 cb 66 eb 74 cd a6 4a 9d 84 c9 8c 40 51 d4 8a 2c ef 4a 87 7a 87 b2 bc 56 a4 59 da 95 d7 8a de a1 de 34 2f fa 9b 45 9e 37 8b 99 79 23 6d a4 5d 79 b5 56 ad cd cc 07 b2 81 ac 6b 83 56 ab d5 ca 9e 7c f2 c9 d6 e8 e9 a3 a3 a3 a3 43 4f 3e f9 e4 68 6b e9 0f aa c7 89 66 24 71 5d aa c7 c9 d2 af 92 b8 ae b5 ca b2 2c 97 fe b7 56 59 ce 2e cb 52 ed e5 ec b2 ec 4c e2 ba 54 8f 93 a5 fb 25 71 5d aa c7 89 6e 03 08 e8 59 f6 15 87 e8 36 c6 33 0b 7a 86 b3 3c 1f e8 9d 55 ab 8e ef ca 93 b4 31 34 58 34 47 ba c2 66 d1 cc 06 b2 6a ad 9a 36 d2 fd a2 28 8e a3 28 8a e2 38 8a 66 a4 ed 6d 6d ed 69 da de d6 d6 9e ea f4 38 8a a2 28 5e 46 1c 45 51 14 8b a5 fb a9 27 49 7a Data Ascii: R@IZx9q77-\|sftJ@Q,JzVY4/E7y#m]yVkV\|CO>hkf$q],VY.RLT%q]nY63z<U14X4Gfj6((8fmmi8(^FEQ'Iz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.11	49727	104.26.13.205	443	5172	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:40:10 UTC	654	OUT	GET /?format=text HTTP/1.1 Host: api.ipify.org Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/plain, / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Origin: http://www.policy-violation-10094985.victoriakent.co.uk Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://www.policy-violation-10094985.victoriakent.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:40:10 UTC	457	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:40:10 GMT Content-Type: text/plain Content-Length: 12 Connection: close Access-Control-Allow-Origin: * Vary: Origin cf-cache-status: DYNAMIC Server: cloudflare CF-RAY: 9202cee05966424f-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1539&min_rtt=1532&rtt_var=590&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2816&recv_bytes=1226&delivery_rate=1830721&cwnd=209&unsent_bytes=0&cid=5fcc004b4e5e4cae&ts=141&x=0"
2025-03-14 09:40:10 UTC	12	IN	Data Raw: 38 2e 34 36 2e 31 32 33 2e 31 38 39 Data Ascii: 8.46.123.189

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.11	49733	104.26.13.205	443	5172	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:40:11 UTC	389	OUT	GET /?format=text HTTP/1.1 Host: api.ipify.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:40:11 UTC	423	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:40:11 GMT Content-Type: text/plain Content-Length: 12 Connection: close Vary: Origin cf-cache-status: DYNAMIC Server: cloudflare CF-RAY: 9202cee52cefc5dc-EWR server-timing: cfL4;desc="?proto=TCP&rtt=2417&min_rtt=2403&rtt_var=929&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2815&recv_bytes=961&delivery_rate=1160111&cwnd=81&unsent_bytes=0&cid=a9cabdb4f9df5493&ts=147&x=0"
2025-03-14 09:40:11 UTC	12	IN	Data Raw: 38 2e 34 36 2e 31 32 33 2e 31 38 39 Data Ascii: 8.46.123.189

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.11	49731	47.254.130.237	443	5172	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:40:11 UTC	693	OUT	GET /sys/config/ip/get-visitor-ip?ip=8.46.123.189 HTTP/1.1 Host: ip-scan.adspower.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/plain, / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Origin: http://www.policy-violation-10094985.victoriakent.co.uk Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://www.policy-violation-10094985.victoriakent.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:40:12 UTC	433	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:40:12 GMT Content-Type: application/json; charset=utf-8 Content-Length: 438 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Cpl, Accept Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: http://www.policy-violation-10094985.victoriakent.co.uk Access-Control-Max-Age: 86400
2025-03-14 09:40:12 UTC	438	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 30 2c 22 6d 73 67 22 3a 22 53 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 7b 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 22 69 70 5f 64 61 74 61 22 3a 7b 22 63 6f 75 6e 74 72 79 22 3a 22 75 73 22 2c 22 72 65 67 69 6f 6e 22 3a 22 6e 65 77 20 79 6f 72 6b 22 2c 22 63 69 74 79 22 3a 22 6e 65 77 20 79 6f 72 6b 20 63 69 74 79 22 2c 22 74 69 6d 65 7a 6f 6e 65 22 3a 22 41 6d 65 72 69 63 61 2f 4e 65 77 5f 59 6f 72 6b 22 2c 22 6c 61 74 69 74 75 64 65 22 3a 22 34 30 2e 37 31 33 32 30 30 22 2c 22 6c 6f 6e 67 69 74 75 64 65 22 3a 22 2d 37 34 2e 30 30 36 31 30 30 22 2c 22 69 73 70 22 3a 22 22 2c 22 7a 69 70 63 6f 64 65 22 3a 22 31 30 31 31 36 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 22 2c 22 69 70 5f 73 63 61 6e 5f 63 68 Data Ascii: {"code":0,"msg":"Success","data":{"ip":"8.46.123.189","ip_data":{"country":"us","region":"new york","city":"new york city","timezone":"America/New_York","latitude":"40.713200","longitude":"-74.006100","isp":"","zipcode":"10116","version":"3.0","ip_scan_ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.11	49738	47.254.130.237	443	5172	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:40:12 UTC	428	OUT	GET /sys/config/ip/get-visitor-ip?ip=8.46.123.189 HTTP/1.1 Host: ip-scan.adspower.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:40:13 UTC	347	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:40:12 GMT Content-Type: application/json; charset=utf-8 Content-Length: 438 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Cpl, Accept Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400
2025-03-14 09:40:13 UTC	438	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 30 2c 22 6d 73 67 22 3a 22 53 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 7b 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 22 69 70 5f 64 61 74 61 22 3a 7b 22 63 6f 75 6e 74 72 79 22 3a 22 75 73 22 2c 22 72 65 67 69 6f 6e 22 3a 22 6e 65 77 20 79 6f 72 6b 22 2c 22 63 69 74 79 22 3a 22 6e 65 77 20 79 6f 72 6b 20 63 69 74 79 22 2c 22 74 69 6d 65 7a 6f 6e 65 22 3a 22 41 6d 65 72 69 63 61 2f 4e 65 77 5f 59 6f 72 6b 22 2c 22 6c 61 74 69 74 75 64 65 22 3a 22 34 30 2e 37 31 33 32 30 30 22 2c 22 6c 6f 6e 67 69 74 75 64 65 22 3a 22 2d 37 34 2e 30 30 36 31 30 30 22 2c 22 69 73 70 22 3a 22 22 2c 22 7a 69 70 63 6f 64 65 22 3a 22 31 30 31 31 36 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 33 2e 30 22 2c 22 69 70 5f 73 63 61 6e 5f 63 68 Data Ascii: {"code":0,"msg":"Success","data":{"ip":"8.46.123.189","ip_data":{"country":"us","region":"new york","city":"new york city","timezone":"America/New_York","latitude":"40.713200","longitude":"-74.006100","isp":"","zipcode":"10116","version":"3.0","ip_scan_ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.11	49745	104.21.31.228	443	5172	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:40:22 UTC	654	OUT	GET /w320/us.png HTTP/1.1 Host: flagcdn.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: http://www.policy-violation-10094985.victoriakent.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:40:23 UTC	1034	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:40:22 GMT Content-Type: image/png Content-Length: 1289 Connection: close last-modified: Wed, 03 Jan 2024 11:10:29 GMT etag: "659540a5-509" access-control-allow-origin: * Cache-Control: public, max-age=2678400, s-maxage=2678400 CF-Cache-Status: HIT Age: 1977422 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UTG%2FxmtoFSv3GaeuMidlz6%2FiL0iGXV%2B06jibN3w%2FAvPFVYoNd%2Facx6bE8or9oHFRqHnED4mFwoFg3idGGlnxoJUNqinHlXTfwILf1CDpvA9Yw6vCFbutw%2BSB22lznA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 9202cf2bac44c42a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1582&min_rtt=1577&rtt_var=602&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1226&delivery_rate=1803582&cwnd=212&unsent_bytes=0&cid=0dfaf00b8a6cdc91&ts=143&x=0"
2025-03-14 09:40:23 UTC	335	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 40 00 00 00 a8 08 03 00 00 00 a6 2e c7 c3 00 00 00 4e 50 4c 54 45 ff ff ff a1 a0 b9 41 40 72 54 53 80 d8 91 9a c6 5a 67 70 6f 95 3c 3b 6e b2 22 34 ec c8 cd 4c 4b 7a fe fd fe da da e4 88 88 a7 8f 69 86 b2 24 36 ea ea f0 cd cd da 96 96 b1 5d 5d 87 c2 c2 d2 3d 3a 6c b1 21 33 b6 b6 c9 f9 f9 fb d8 90 99 56 38 63 e5 00 00 04 76 49 44 41 54 78 da ed 9d cb 72 a3 30 14 44 5b 22 91 12 1e 13 9e 63 e7 ff 7f 74 16 13 a7 00 5d 03 16 18 8a eb be 8b 2c 54 ee 05 a7 90 d2 3e 26 0e 3a 7f ec fc fd 38 f5 7c 81 00 09 90 00 95 00 2c a4 eb 4b 1a 69 d5 49 8b 71 79 45 00 73 e9 5a 6b 23 2c 36 b9 44 25 2e af 07 60 02 e9 5a 73 89 55 8d 44 b8 d7 e2 f2 4a 00 d6 c6 b4 28 8d 31 7d 32 ce 18 03 18 63 fa 3b 36 31 c6 94 68 8d a9 ed e0 Data Ascii: PNGIHDR@.NPLTEA@rTSZgpo<;n"4LKzi$6]]=:l!3V8cvIDATxr0D["ct],T>&:8\|,KiIqyEsZk#,6D%.`ZsUDJ(1}2c;61h
2025-03-14 09:40:23 UTC	954	IN	Data Raw: ad 03 2a 17 57 06 ac f2 3b f9 7a 26 af 05 60 72 b1 de 17 e3 2a 77 69 bc 6f 2e e3 be 57 78 6f 2f 23 56 77 f3 dd 4c fe f4 00 6f 67 58 ef a7 b7 ae bf fa b3 d8 15 d2 4b 6f 45 79 3e 3f 5c bc ad fa 0c a7 9e 0c e2 db 87 95 45 f9 4e 3e 91 56 55 02 ac d1 6c 56 94 7b f9 fa 25 00 8a 45 d9 ae 2c da 72 5e e9 1d f8 bf e8 66 c3 0d 97 56 00 b2 e8 a2 dd 25 52 5e eb 16 16 8b b2 5f 59 b4 e5 bc d2 33 70 d3 a2 fc bb 89 a5 bc 4e 80 09 da 0d 8b f2 64 5e 27 c0 89 a2 5c 3f 5e 94 27 8b b6 2e 80 cb 8b b2 97 8a 72 4c 5e 17 c0 63 8c b4 1e 80 07 19 69 25 00 8f 33 d2 9f 27 1f 1a 69 1a 69 1a 69 1a 69 1a 69 1a e9 f5 67 e0 51 46 5a e5 c3 45 7b 1a 69 95 00 f7 34 d2 ea 00 ee 6d a4 f5 dd 81 3b 1b 69 85 5b 78 5f 23 ad f1 0c dc d5 48 6b f9 60 fd 30 23 fd 7e f2 a1 91 de 4e a8 ba 95 46 3a 22 ff Data Ascii: W;z&`rwio.Wxo/#VwLogXKoEy>?\EN>VUlV{%E,r^fV%R^_Y3pNd^'\?^'.rL^ci%3'iiiiigQFZE{i4m;i[x_#Hk`0#~NF:"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.11	49747	104.21.31.228	443	5172	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:40:23 UTC	386	OUT	GET /w320/us.png HTTP/1.1 Host: flagcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:40:23 UTC	1029	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:40:23 GMT Content-Type: image/png Content-Length: 1289 Connection: close last-modified: Wed, 03 Jan 2024 11:10:29 GMT etag: "659540a5-509" access-control-allow-origin: * Cache-Control: public, max-age=2678400, s-maxage=2678400 CF-Cache-Status: HIT Age: 1977423 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QGrAOgDHQ9qPlgXrG%2BCxn3qyDwcanzejdb0RjeE49Gd1YDtIY57mMAROKMCwU4p0MvGVUr%2BXAomITAhqFBopp1LT%2FnYx9AXB4%2FaqiWkFnPplzsPDAvcJoSITK0vPMw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 9202cf310f257291-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2016&min_rtt=2009&rtt_var=768&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2822&recv_bytes=958&delivery_rate=1410628&cwnd=218&unsent_bytes=0&cid=ab81ec6e45ae33ca&ts=135&x=0"
2025-03-14 09:40:23 UTC	340	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 40 00 00 00 a8 08 03 00 00 00 a6 2e c7 c3 00 00 00 4e 50 4c 54 45 ff ff ff a1 a0 b9 41 40 72 54 53 80 d8 91 9a c6 5a 67 70 6f 95 3c 3b 6e b2 22 34 ec c8 cd 4c 4b 7a fe fd fe da da e4 88 88 a7 8f 69 86 b2 24 36 ea ea f0 cd cd da 96 96 b1 5d 5d 87 c2 c2 d2 3d 3a 6c b1 21 33 b6 b6 c9 f9 f9 fb d8 90 99 56 38 63 e5 00 00 04 76 49 44 41 54 78 da ed 9d cb 72 a3 30 14 44 5b 22 91 12 1e 13 9e 63 e7 ff 7f 74 16 13 a7 00 5d 03 16 18 8a eb be 8b 2c 54 ee 05 a7 90 d2 3e 26 0e 3a 7f ec fc fd 38 f5 7c 81 00 09 90 00 95 00 2c a4 eb 4b 1a 69 d5 49 8b 71 79 45 00 73 e9 5a 6b 23 2c 36 b9 44 25 2e af 07 60 02 e9 5a 73 89 55 8d 44 b8 d7 e2 f2 4a 00 d6 c6 b4 28 8d 31 7d 32 ce 18 03 18 63 fa 3b 36 31 c6 94 68 8d a9 ed e0 Data Ascii: PNGIHDR@.NPLTEA@rTSZgpo<;n"4LKzi$6]]=:l!3V8cvIDATxr0D["ct],T>&:8\|,KiIqyEsZk#,6D%.`ZsUDJ(1}2c;61h
2025-03-14 09:40:23 UTC	949	IN	Data Raw: 06 ac f2 3b f9 7a 26 af 05 60 72 b1 de 17 e3 2a 77 69 bc 6f 2e e3 be 57 78 6f 2f 23 56 77 f3 dd 4c fe f4 00 6f 67 58 ef a7 b7 ae bf fa b3 d8 15 d2 4b 6f 45 79 3e 3f 5c bc ad fa 0c a7 9e 0c e2 db 87 95 45 f9 4e 3e 91 56 55 02 ac d1 6c 56 94 7b f9 fa 25 00 8a 45 d9 ae 2c da 72 5e e9 1d f8 bf e8 66 c3 0d 97 56 00 b2 e8 a2 dd 25 52 5e eb 16 16 8b b2 5f 59 b4 e5 bc d2 33 70 d3 a2 fc bb 89 a5 bc 4e 80 09 da 0d 8b f2 64 5e 27 c0 89 a2 5c 3f 5e 94 27 8b b6 2e 80 cb 8b b2 97 8a 72 4c 5e 17 c0 63 8c b4 1e 80 07 19 69 25 00 8f 33 d2 9f 27 1f 1a 69 1a 69 1a 69 1a 69 1a 69 1a e9 f5 67 e0 51 46 5a e5 c3 45 7b 1a 69 95 00 f7 34 d2 ea 00 ee 6d a4 f5 dd 81 3b 1b 69 85 5b 78 5f 23 ad f1 0c dc d5 48 6b f9 60 fd 30 23 fd 7e f2 a1 91 de 4e a8 ba 95 46 3a 22 ff 0a 46 ba 5e 57 Data Ascii: ;z&`r*wio.Wxo/#VwLogXKoEy>?\EN>VUlV{%E,r^fV%R^_Y3pNd^'\?^'.rL^ci%3'iiiiigQFZE{i4m;i[x_#Hk`0#~NF:"F^W

Target ID:	1
Start time:	05:39:55
Start date:	14/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff694fa0000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	05:39:59
Start date:	14/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1968,i,7055854823501348706,4026424420243952376,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2000 /prefetch:3
Imagebase:	0x7ff694fa0000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	05:40:05
Start date:	14/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.policy-violation-10094985.victoriakent.co.uk/"
Imagebase:	0x7ff694fa0000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://www.policy-violation-10094985.victoriakent.co.uk/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

Windows Analysis Report
http://www.policy-violation-10094985.victoriakent.co.uk/