Edit tour

Windows Analysis Report
https://usdtmen.com

Overview

General Information

Sample URL:	https://usdtmen.com
Analysis ID:	756095
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

No HTML title found

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 3188 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://usdtmen.com/ MD5: 7BC7B4AEDC055BB02BCB52710132E9E1)

chrome.exe (PID: 6160 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1768,i,5818765958052219750,8192306715576805166,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8 MD5: 7BC7B4AEDC055BB02BCB52710132E9E1)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://usdtmen.com/index/passport/login.html	HTTP Parser: HTML title missing
Source: https://usdtmen.com/index/passport/login.html	HTTP Parser: HTML title missing

Source: https://usdtmen.com/index/passport/login.html	HTTP Parser: No <meta name="author".. found
Source: https://usdtmen.com/index/passport/login.html	HTTP Parser: No <meta name="author".. found

Source: https://usdtmen.com/index/passport/login.html	HTTP Parser: No <meta name="copyright".. found
Source: https://usdtmen.com/index/passport/login.html	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\GoogleUpdater

Jump to behavior

Source: unknown	HTTPS traffic detected: 154.211.96.136:443 -> 192.168.2.3:49889 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 154.211.96.136:443 -> 192.168.2.3:49888 version: TLS 1.2

Source: unknown

DNS traffic detected: queries for: clients2.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 49695 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49697
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49696
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49695
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49694
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 49694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 49696 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=104.0.5112.102&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-104.0.5112.102Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: usdtmen.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index/passport/logout.html HTTP/1.1Host: usdtmen.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: usdtmen.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
Source: global traffic	HTTP traffic detected: GET /index/passport/logout.html HTTP/1.1Host: usdtmen.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=u&oit=1&cp=1&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=us&oit=1&cp=2&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usd&oit=1&cp=3&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usdt&oit=1&cp=4&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usdtm&oit=1&cp=5&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usdtme&oit=1&cp=6&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usdtmen&oit=1&cp=7&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usdtmen%3E&oit=4&cp=8&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usdtmen%3EC&oit=4&cp=9&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usdtmen%3ECO&oit=4&cp=10&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usdtmen%3ECOM&oit=4&cp=11&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usdtmen%3ECO&oit=4&cp=10&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usdtmen%3EC&oit=4&cp=9&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usdtmen%3E&oit=4&cp=8&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usdtmen&oit=1&cp=7&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usdtmen&oit=1&cp=7&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usdtme&oit=1&cp=6&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usdtme%3C&oit=4&cp=7&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usdtme&oit=1&cp=6&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usdtmeN&oit=1&cp=7&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=U&oit=1&cp=1&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=US&oit=1&cp=2&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=USD&oit=1&cp=3&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=USDT&oit=1&cp=4&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=USDTM&oit=1&cp=5&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=USDTME&oit=1&cp=6&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=USDTMEN&oit=1&cp=7&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=wwusdtmen.com&oit=3&cp=2&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=wusdtmen.com&oit=3&cp=1&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usdtmen.com&oit=3&cp=0&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swBSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: usdtmen.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: usdtmen.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
Source: global traffic	HTTP traffic detected: GET /index/passport/logout.html HTTP/1.1Host: usdtmen.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
Source: global traffic	HTTP traffic detected: GET /index/passport/login.html HTTP/1.1Host: usdtmen.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
Source: global traffic	HTTP traffic detected: GET /image/weui.css HTTP/1.1Host: usdtmen.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://usdtmen.com/index/passport/login.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
Source: global traffic	HTTP traffic detected: GET /image/bootstrap.min.css HTTP/1.1Host: usdtmen.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://usdtmen.com/index/passport/login.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
Source: global traffic	HTTP traffic detected: GET /image/iconfont.css HTTP/1.1Host: usdtmen.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://usdtmen.com/index/passport/login.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
Source: global traffic	HTTP traffic detected: GET /image/common.css HTTP/1.1Host: usdtmen.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://usdtmen.com/index/passport/login.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
Source: global traffic	HTTP traffic detected: GET /image/zepto.min.js HTTP/1.1Host: usdtmen.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://usdtmen.com/index/passport/login.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
Source: global traffic	HTTP traffic detected: GET /image/jquery.min.js HTTP/1.1Host: usdtmen.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://usdtmen.com/index/passport/login.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
Source: global traffic	HTTP traffic detected: GET /image/weui.min.js HTTP/1.1Host: usdtmen.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://usdtmen.com/index/passport/login.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
Source: global traffic	HTTP traffic detected: GET /layer3.1/layer.js HTTP/1.1Host: usdtmen.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://usdtmen.com/index/passport/login.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
Source: global traffic	HTTP traffic detected: GET /image/common.js HTTP/1.1Host: usdtmen.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://usdtmen.com/index/passport/login.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
Source: global traffic	HTTP traffic detected: GET /layer3.1/theme/default/layer.css?v=3.1.1 HTTP/1.1Host: usdtmen.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?1User-Agent: Mozilla/5.0 (Linux; Android 9.0; SAMSUNG SM-F900U Build/PPR1.180610.011) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Mobile Safari/537.36sec-ch-ua-platform: "Android"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://usdtmen.com/index/passport/login.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
Source: global traffic	HTTP traffic detected: GET /image/logo.cba20b1b.png HTTP/1.1Host: usdtmen.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://usdtmen.com/index/passport/login.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
Source: global traffic	HTTP traffic detected: GET /image/username_icon.png HTTP/1.1Host: usdtmen.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://usdtmen.com/index/passport/login.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
Source: global traffic	HTTP traffic detected: GET /image/password_icon.png HTTP/1.1Host: usdtmen.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://usdtmen.com/index/passport/login.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
Source: global traffic	HTTP traffic detected: GET /image/bg1.6c9f941a.png HTTP/1.1Host: usdtmen.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?1User-Agent: Mozilla/5.0 (Linux; Android 9.0; SAMSUNG SM-F900U Build/PPR1.180610.011) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Mobile Safari/537.36sec-ch-ua-platform: "Android"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://usdtmen.com/index/passport/login.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
Source: global traffic	HTTP traffic detected: GET /image/en-us.jpg HTTP/1.1Host: usdtmen.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://usdtmen.com/index/passport/login.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
Source: global traffic	HTTP traffic detected: GET /image/es-es.jpg HTTP/1.1Host: usdtmen.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://usdtmen.com/index/passport/login.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
Source: global traffic	HTTP traffic detected: GET /image/pt-pt.jpg HTTP/1.1Host: usdtmen.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://usdtmen.com/index/passport/login.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
Source: global traffic	HTTP traffic detected: GET /image/fr.jpg HTTP/1.1Host: usdtmen.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://usdtmen.com/index/passport/login.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
Source: global traffic	HTTP traffic detected: GET /image/es-es.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: usdtmen.com
Source: global traffic	HTTP traffic detected: GET /image/ar-ae.jpg HTTP/1.1Host: usdtmen.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://usdtmen.com/index/passport/login.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
Source: global traffic	HTTP traffic detected: GET /image/ko.jpg HTTP/1.1Host: usdtmen.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://usdtmen.com/index/passport/login.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
Source: global traffic	HTTP traffic detected: GET /image/en-us.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: usdtmen.com
Source: global traffic	HTTP traffic detected: GET /image/pt-pt.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: usdtmen.com
Source: global traffic	HTTP traffic detected: GET /image/fr.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: usdtmen.com
Source: global traffic	HTTP traffic detected: GET /image/ar-ae.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: usdtmen.com
Source: global traffic	HTTP traffic detected: GET /image/bootstrap.min.css.map HTTP/1.1Host: usdtmen.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
Source: global traffic	HTTP traffic detected: GET /image/ko.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: usdtmen.com
Source: global traffic	HTTP traffic detected: GET /image/logo.cba20b1b.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: usdtmen.com
Source: global traffic	HTTP traffic detected: GET /image/username_icon.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: usdtmen.com
Source: global traffic	HTTP traffic detected: GET /image/password_icon.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: usdtmen.com
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: usdtmen.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 29 Nov 2022 15:34:09 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encoding

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+620; __Secure-ENID=6.SE=cJKCBuSaL1dV3R8z2Y2al7-m2m5bGA74lqbYYkqC3uy-NtZ1f6n_bCBr25tlnnjvdmLpGQ81ZKzP3Te5vVjpSQjYWCwvlOMApK7tmZNWcORu0p4wniPJGQfTslQNnpQWhG9qkwkEgy49-6UG3UQ1eiUyFolJZWLeUM1p4KvjM9E

Source: unknown	HTTPS traffic detected: 154.211.96.136:443 -> 192.168.2.3:49889 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 154.211.96.136:443 -> 192.168.2.3:49888 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@46/0@26/12

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://usdtmen.com/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1768,i,5818765958052219750,8192306715576805166,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1768,i,5818765958052219750,8192306715576805166,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\GoogleUpdater

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\GoogleUpdater

Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	2 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	4 Non-Application Layer Protocol	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	5 Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	3 Ingress Tool Transfer	SIM Card Swap		Carrier Billing Fraud

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://usdtmen.com	1%	Virustotal		Browse
https://usdtmen.com	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
https://beacons.gcp.gvt2.com/domainreliability/upload	0%	URL Reputation	safe
https://beacons.gvt2.com/domainreliability/upload	0%	URL Reputation	safe
https://usdtmen.com/index/passport/logout.html	0%	Avira URL Cloud	safe
https://usdtmen.com/image/weui.min.js	0%	Avira URL Cloud	safe
https://usdtmen.com/image/bg1.6c9f941a.png	0%	Avira URL Cloud	safe
https://usdtmen.com/image/fr.jpg	0%	Avira URL Cloud	safe
https://usdtmen.com/layer3.1/layer.js	0%	Avira URL Cloud	safe
https://usdtmen.com/image/common.css	0%	Avira URL Cloud	safe
https://usdtmen.com/layer3.1/theme/default/layer.css?v=3.1.1	0%	Avira URL Cloud	safe
https://beacons2.gvt2.com/domainreliability/upload-nel	0%	Avira URL Cloud	safe
https://usdtmen.com/index/passport/logout.html	3%	Virustotal		Browse
https://usdtmen.com/image/zepto.min.js	0%	Avira URL Cloud	safe
https://e2c27.gcp.gvt2.com/nel/	0%	Avira URL Cloud	safe
https://usdtmen.com/image/weui.css	0%	Avira URL Cloud	safe
https://usdtmen.com/	0%	Avira URL Cloud	safe
https://usdtmen.com/image/iconfont.css	0%	Avira URL Cloud	safe
https://usdtmen.com/image/jquery.min.js	0%	Avira URL Cloud	safe
https://usdtmen.com/image/es-es.jpg	0%	Avira URL Cloud	safe
https://usdtmen.com/image/password_icon.png	0%	Avira URL Cloud	safe
https://usdtmen.com/image/bootstrap.min.css	0%	Avira URL Cloud	safe
https://usdtmen.com/image/common.js	0%	Avira URL Cloud	safe
https://usdtmen.com/image/ko.jpg	0%	Avira URL Cloud	safe
https://usdtmen.com/image/username_icon.png	0%	Avira URL Cloud	safe
https://usdtmen.com/image/bootstrap.min.css.map	0%	Avira URL Cloud	safe
https://usdtmen.com/image/logo.cba20b1b.png	0%	Avira URL Cloud	safe
https://usdtmen.com/image/ar-ae.jpg	0%	Avira URL Cloud	safe
http://usdtmen.com/	0%	Avira URL Cloud	safe
https://usdtmen.com/image/pt-pt.jpg	0%	Avira URL Cloud	safe
https://usdtmen.com/image/en-us.jpg	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
accounts.google.com	142.250.186.109	true	false	high
beacons-handoff.gcp.gvt2.com	142.251.143.67	true	false	unknown
usdtmen.com	154.211.96.136	true	false	unknown
e2c27.gcp.gvt2.com	35.227.159.135	true	false	unknown
www.google.com	142.250.186.100	true	false	high
beacons2.gvt2.com	172.217.13.227	true	false	unknown
clients.l.google.com	142.250.185.206	true	false	high
beacons.gvt2.com	216.58.212.163	true	false	unknown
clients2.google.com	unknown	unknown	false	high
www.usdtmen.com	unknown	unknown	false	unknown
beacons.gcp.gvt2.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=USDTME&oit=1&cp=6&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usd&oit=1&cp=3&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=wwusdtmen.com&oit=3&cp=2&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=USDT&oit=1&cp=4&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://usdtmen.com/layer3.1/layer.js	false	Avira URL Cloud: safe	unknown
https://beacons.gcp.gvt2.com/domainreliability/upload	false	URL Reputation: safe	unknown
https://usdtmen.com/image/fr.jpg	false	Avira URL Cloud: safe	unknown
https://usdtmen.com/image/bg1.6c9f941a.png	false	Avira URL Cloud: safe	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=USDTMEN&oit=1&cp=7&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://usdtmen.com/index/passport/logout.html	false	3%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usdtmen%3ECO&oit=4&cp=10&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://usdtmen.com/image/weui.min.js	false	Avira URL Cloud: safe	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usdtmen.com&oit=3&cp=0&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usdtmen%3E&oit=4&cp=8&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://usdtmen.com/layer3.1/theme/default/layer.css?v=3.1.1	false	Avira URL Cloud: safe	unknown
https://usdtmen.com/index/passport/login.html	false		unknown
https://usdtmen.com/image/common.css	false	Avira URL Cloud: safe	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=U&oit=1&cp=1&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://beacons2.gvt2.com/domainreliability/upload-nel	false	Avira URL Cloud: safe	unknown
https://usdtmen.com/index/passport/login.html	false		unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usdtm&oit=1&cp=5&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://usdtmen.com/image/zepto.min.js	false	Avira URL Cloud: safe	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usdtmen%3ECOM&oit=4&cp=11&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://e2c27.gcp.gvt2.com/nel/	false	Avira URL Cloud: safe	unknown
https://usdtmen.com/image/weui.css	false	Avira URL Cloud: safe	unknown
https://usdtmen.com/	false	Avira URL Cloud: safe	unknown
https://usdtmen.com/image/iconfont.css	false	Avira URL Cloud: safe	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usdt&oit=1&cp=4&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://usdtmen.com/image/jquery.min.js	false	Avira URL Cloud: safe	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usdtmen&oit=1&cp=7&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://usdtmen.com/image/es-es.jpg	false	Avira URL Cloud: safe	unknown
https://usdtmen.com/image/password_icon.png	false	Avira URL Cloud: safe	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=u&oit=1&cp=1&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard	false		high
https://usdtmen.com/image/bootstrap.min.css	false	Avira URL Cloud: safe	unknown
https://beacons.gvt2.com/domainreliability/upload	false	URL Reputation: safe	unknown
https://usdtmen.com/image/common.js	false	Avira URL Cloud: safe	unknown
https://usdtmen.com/image/ko.jpg	false	Avira URL Cloud: safe	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usdtmen%3EC&oit=4&cp=9&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=USD&oit=1&cp=3&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=us&oit=1&cp=2&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usdtme&oit=1&cp=6&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://usdtmen.com/image/username_icon.png	false	Avira URL Cloud: safe	unknown
https://usdtmen.com/image/bootstrap.min.css.map	false	Avira URL Cloud: safe	unknown
https://usdtmen.com/image/logo.cba20b1b.png	false	Avira URL Cloud: safe	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usdtmeN&oit=1&cp=7&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://usdtmen.com/image/ar-ae.jpg	false	Avira URL Cloud: safe	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=US&oit=1&cp=2&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://usdtmen.com/image/pt-pt.jpg	false	Avira URL Cloud: safe	unknown
https://usdtmen.com/image/en-us.jpg	false	Avira URL Cloud: safe	unknown
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=104.0.5112.102&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=USDTM&oit=1&cp=5&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=wusdtmen.com&oit=3&cp=1&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
http://usdtmen.com/	false	Avira URL Cloud: safe	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usdtme%3C&oit=4&cp=7&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.206	clients.l.google.com	United States	15169	GOOGLEUS	false
154.211.96.136	usdtmen.com	Seychelles	134705	ITACE-AS-APItaceInternationalLimitedHK	false
142.250.185.132	unknown	United States	15169	GOOGLEUS	false
142.250.186.109	accounts.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
35.227.159.135	e2c27.gcp.gvt2.com	United States	15169	GOOGLEUS	false
172.217.13.227	beacons2.gvt2.com	United States	15169	GOOGLEUS	false
142.251.143.67	beacons-handoff.gcp.gvt2.com	United States	15169	GOOGLEUS	false
216.58.212.163	beacons.gvt2.com	United States	15169	GOOGLEUS	false
172.217.18.100	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.1
127.0.0.1

General Information

Joe Sandbox Version:	36.0.0 Rainbow Opal
Analysis ID:	756095
Start date and time:	2022-11-29 16:31:55 +01:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 4m 6s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://usdtmen.com
Analysis system description:	Windows 10 64 bit version 1909 (MS Office 2019, IE 11, Chrome 104, Firefox 88, Adobe Reader DC 21, Java 8 u291, 7-Zip)
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@46/0@26/12
EGA Information:	Failed
HDC Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): SIHClient.exe, SgrmBroker.exe, usocoreworker.exe, svchost.exe, WindowsInternal.ComposableShell.Experiences.TextInput.InputApp.exe
Excluded IPs from analysis (whitelisted): 216.58.212.131, 34.104.35.123, 142.250.185.78, 142.250.185.227, 142.250.186.74, 142.250.181.234, 172.217.18.106, 142.250.186.138, 142.250.184.202, 172.217.23.106, 142.250.185.170, 142.250.186.106, 142.250.185.234, 172.217.16.202, 142.250.185.202, 172.217.18.10, 142.250.186.42, 142.250.186.170, 142.250.74.202, 216.58.212.138
Excluded domains from analysis (whitelisted): www.bing.com, client.wns.windows.com, fs.microsoft.com, edgedl.me.gvt1.com, content-autofill.googleapis.com, login.live.com, slscr.update.microsoft.com, encrypted-tbn0.gstatic.com, update.googleapis.com, ctldl.windowsupdate.com, clientservices.googleapis.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtWriteVirtualMemory calls found.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 29, 2022 16:32:24.708003044 CET	49694	443	192.168.2.3	142.250.185.206
Nov 29, 2022 16:32:24.708069086 CET	443	49694	142.250.185.206	192.168.2.3
Nov 29, 2022 16:32:24.708170891 CET	49694	443	192.168.2.3	142.250.185.206
Nov 29, 2022 16:32:24.709017038 CET	49695	443	192.168.2.3	142.250.186.109
Nov 29, 2022 16:32:24.709076881 CET	443	49695	142.250.186.109	192.168.2.3
Nov 29, 2022 16:32:24.709172010 CET	49695	443	192.168.2.3	142.250.186.109
Nov 29, 2022 16:32:24.710900068 CET	49694	443	192.168.2.3	142.250.185.206
Nov 29, 2022 16:32:24.710937023 CET	443	49694	142.250.185.206	192.168.2.3
Nov 29, 2022 16:32:24.711082935 CET	49695	443	192.168.2.3	142.250.186.109
Nov 29, 2022 16:32:24.711122036 CET	443	49695	142.250.186.109	192.168.2.3
Nov 29, 2022 16:32:24.807111025 CET	443	49694	142.250.185.206	192.168.2.3
Nov 29, 2022 16:32:24.807537079 CET	49694	443	192.168.2.3	142.250.185.206
Nov 29, 2022 16:32:24.807569027 CET	443	49694	142.250.185.206	192.168.2.3
Nov 29, 2022 16:32:24.808891058 CET	443	49694	142.250.185.206	192.168.2.3
Nov 29, 2022 16:32:24.809051991 CET	49694	443	192.168.2.3	142.250.185.206
Nov 29, 2022 16:32:24.811466932 CET	443	49695	142.250.186.109	192.168.2.3
Nov 29, 2022 16:32:24.812520027 CET	443	49694	142.250.185.206	192.168.2.3
Nov 29, 2022 16:32:24.812593937 CET	49694	443	192.168.2.3	142.250.185.206
Nov 29, 2022 16:32:24.812896013 CET	49695	443	192.168.2.3	142.250.186.109
Nov 29, 2022 16:32:24.812937021 CET	443	49695	142.250.186.109	192.168.2.3
Nov 29, 2022 16:32:24.814241886 CET	443	49695	142.250.186.109	192.168.2.3
Nov 29, 2022 16:32:24.814347982 CET	49695	443	192.168.2.3	142.250.186.109
Nov 29, 2022 16:32:24.864588976 CET	49696	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:32:24.864680052 CET	443	49696	154.211.96.136	192.168.2.3
Nov 29, 2022 16:32:24.864778042 CET	49696	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:32:24.868828058 CET	49696	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:32:24.868891954 CET	443	49696	154.211.96.136	192.168.2.3
Nov 29, 2022 16:32:24.869621038 CET	49697	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:32:24.869697094 CET	443	49697	154.211.96.136	192.168.2.3
Nov 29, 2022 16:32:24.869796991 CET	49697	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:32:24.870282888 CET	49697	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:32:24.870317936 CET	443	49697	154.211.96.136	192.168.2.3
Nov 29, 2022 16:32:25.112036943 CET	49695	443	192.168.2.3	142.250.186.109
Nov 29, 2022 16:32:25.112126112 CET	443	49695	142.250.186.109	192.168.2.3
Nov 29, 2022 16:32:25.112443924 CET	443	49695	142.250.186.109	192.168.2.3
Nov 29, 2022 16:32:25.112585068 CET	49694	443	192.168.2.3	142.250.185.206
Nov 29, 2022 16:32:25.112657070 CET	443	49694	142.250.185.206	192.168.2.3
Nov 29, 2022 16:32:25.112723112 CET	49695	443	192.168.2.3	142.250.186.109
Nov 29, 2022 16:32:25.112760067 CET	443	49695	142.250.186.109	192.168.2.3
Nov 29, 2022 16:32:25.112907887 CET	443	49694	142.250.185.206	192.168.2.3
Nov 29, 2022 16:32:25.113239050 CET	49694	443	192.168.2.3	142.250.185.206
Nov 29, 2022 16:32:25.113274097 CET	443	49694	142.250.185.206	192.168.2.3
Nov 29, 2022 16:32:25.141805887 CET	443	49694	142.250.185.206	192.168.2.3
Nov 29, 2022 16:32:25.142009974 CET	49694	443	192.168.2.3	142.250.185.206
Nov 29, 2022 16:32:25.142059088 CET	443	49694	142.250.185.206	192.168.2.3
Nov 29, 2022 16:32:25.142101049 CET	443	49694	142.250.185.206	192.168.2.3
Nov 29, 2022 16:32:25.142169952 CET	49694	443	192.168.2.3	142.250.185.206
Nov 29, 2022 16:32:25.153376102 CET	49695	443	192.168.2.3	142.250.186.109
Nov 29, 2022 16:32:25.155416965 CET	49694	443	192.168.2.3	142.250.185.206
Nov 29, 2022 16:32:25.155456066 CET	443	49694	142.250.185.206	192.168.2.3
Nov 29, 2022 16:32:25.162925005 CET	443	49695	142.250.186.109	192.168.2.3
Nov 29, 2022 16:32:25.163044930 CET	49695	443	192.168.2.3	142.250.186.109
Nov 29, 2022 16:32:25.163091898 CET	443	49695	142.250.186.109	192.168.2.3
Nov 29, 2022 16:32:25.163386106 CET	443	49695	142.250.186.109	192.168.2.3
Nov 29, 2022 16:32:25.163472891 CET	49695	443	192.168.2.3	142.250.186.109
Nov 29, 2022 16:32:25.164813995 CET	49695	443	192.168.2.3	142.250.186.109
Nov 29, 2022 16:32:25.164843082 CET	443	49695	142.250.186.109	192.168.2.3
Nov 29, 2022 16:32:25.611713886 CET	443	49696	154.211.96.136	192.168.2.3
Nov 29, 2022 16:32:25.612323999 CET	49696	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:32:25.612380981 CET	443	49696	154.211.96.136	192.168.2.3
Nov 29, 2022 16:32:25.613661051 CET	443	49696	154.211.96.136	192.168.2.3
Nov 29, 2022 16:32:25.613925934 CET	49696	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:32:25.625515938 CET	49696	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:32:25.625571966 CET	443	49696	154.211.96.136	192.168.2.3
Nov 29, 2022 16:32:25.625761032 CET	49696	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:32:25.625778913 CET	443	49696	154.211.96.136	192.168.2.3
Nov 29, 2022 16:32:25.625838041 CET	443	49696	154.211.96.136	192.168.2.3
Nov 29, 2022 16:32:25.666445017 CET	49696	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:32:25.666507959 CET	443	49696	154.211.96.136	192.168.2.3
Nov 29, 2022 16:32:25.766500950 CET	49696	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:32:26.333307028 CET	443	49696	154.211.96.136	192.168.2.3
Nov 29, 2022 16:32:26.333479881 CET	443	49696	154.211.96.136	192.168.2.3
Nov 29, 2022 16:32:26.333652973 CET	49696	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:32:26.334096909 CET	49696	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:32:26.334134102 CET	443	49696	154.211.96.136	192.168.2.3
Nov 29, 2022 16:32:26.625600100 CET	443	49697	154.211.96.136	192.168.2.3
Nov 29, 2022 16:32:26.637968063 CET	49697	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:32:26.638020992 CET	443	49697	154.211.96.136	192.168.2.3
Nov 29, 2022 16:32:26.640913963 CET	443	49697	154.211.96.136	192.168.2.3
Nov 29, 2022 16:32:26.641068935 CET	49697	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:32:26.651804924 CET	49697	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:32:26.651832104 CET	443	49697	154.211.96.136	192.168.2.3
Nov 29, 2022 16:32:26.652049065 CET	443	49697	154.211.96.136	192.168.2.3
Nov 29, 2022 16:32:26.652206898 CET	49697	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:32:26.652234077 CET	443	49697	154.211.96.136	192.168.2.3
Nov 29, 2022 16:32:26.767512083 CET	49697	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:32:27.743208885 CET	443	49697	154.211.96.136	192.168.2.3
Nov 29, 2022 16:32:27.743351936 CET	443	49697	154.211.96.136	192.168.2.3
Nov 29, 2022 16:32:27.743583918 CET	49697	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:32:27.799185038 CET	49697	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:32:27.799241066 CET	443	49697	154.211.96.136	192.168.2.3
Nov 29, 2022 16:32:27.803515911 CET	49699	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:32:27.803599119 CET	443	49699	154.211.96.136	192.168.2.3
Nov 29, 2022 16:32:27.803699017 CET	49699	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:32:27.804119110 CET	49699	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:32:27.804153919 CET	443	49699	154.211.96.136	192.168.2.3
Nov 29, 2022 16:32:28.408863068 CET	49703	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:28.408904076 CET	443	49703	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:28.408998013 CET	49703	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:28.409378052 CET	49703	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:28.409393072 CET	443	49703	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:28.469465971 CET	443	49703	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:28.471116066 CET	49703	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:28.471163034 CET	443	49703	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:28.472670078 CET	443	49703	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:28.472806931 CET	49703	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:28.475531101 CET	49703	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:28.475548029 CET	443	49703	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:28.475728035 CET	443	49703	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:28.572165012 CET	49703	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:28.572212934 CET	443	49703	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:28.762432098 CET	49705	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:32:28.762521982 CET	443	49705	154.211.96.136	192.168.2.3
Nov 29, 2022 16:32:28.762664080 CET	49705	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:32:28.763067007 CET	49705	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:32:28.763108015 CET	443	49705	154.211.96.136	192.168.2.3
Nov 29, 2022 16:32:28.769798040 CET	49703	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:29.024997950 CET	443	49699	154.211.96.136	192.168.2.3
Nov 29, 2022 16:32:29.051350117 CET	49699	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:32:29.051398039 CET	443	49699	154.211.96.136	192.168.2.3
Nov 29, 2022 16:32:29.053114891 CET	443	49699	154.211.96.136	192.168.2.3
Nov 29, 2022 16:32:29.056760073 CET	49699	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:32:29.056791067 CET	443	49699	154.211.96.136	192.168.2.3
Nov 29, 2022 16:32:29.057035923 CET	443	49699	154.211.96.136	192.168.2.3
Nov 29, 2022 16:32:29.057204008 CET	49699	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:32:29.057229042 CET	443	49699	154.211.96.136	192.168.2.3
Nov 29, 2022 16:32:29.493643999 CET	443	49705	154.211.96.136	192.168.2.3
Nov 29, 2022 16:32:29.504730940 CET	49705	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:32:29.504770041 CET	443	49705	154.211.96.136	192.168.2.3
Nov 29, 2022 16:32:29.505515099 CET	443	49705	154.211.96.136	192.168.2.3
Nov 29, 2022 16:32:29.511132002 CET	49705	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:32:29.511172056 CET	443	49705	154.211.96.136	192.168.2.3
Nov 29, 2022 16:32:29.511336088 CET	443	49705	154.211.96.136	192.168.2.3
Nov 29, 2022 16:32:29.570807934 CET	49705	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:32:30.204178095 CET	443	49699	154.211.96.136	192.168.2.3
Nov 29, 2022 16:32:30.204341888 CET	443	49699	154.211.96.136	192.168.2.3
Nov 29, 2022 16:32:30.204498053 CET	49699	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:32:30.205977917 CET	49699	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:32:30.206023932 CET	443	49699	154.211.96.136	192.168.2.3
Nov 29, 2022 16:32:30.268301010 CET	49705	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:32:30.268368959 CET	443	49705	154.211.96.136	192.168.2.3
Nov 29, 2022 16:32:30.398808956 CET	49705	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:32:30.398976088 CET	443	49705	154.211.96.136	192.168.2.3
Nov 29, 2022 16:32:30.399070024 CET	49705	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:32:38.451102018 CET	443	49703	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:38.451253891 CET	443	49703	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:38.451400042 CET	49703	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:53.803045034 CET	49703	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:53.803101063 CET	443	49703	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:53.805876017 CET	49728	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:53.805923939 CET	443	49728	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:53.806005001 CET	49728	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:53.817358971 CET	49728	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:53.817420959 CET	443	49728	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:53.874051094 CET	443	49728	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:53.874382019 CET	49728	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:53.874425888 CET	443	49728	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:53.875003099 CET	443	49728	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:53.875433922 CET	49728	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:53.875463009 CET	443	49728	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:53.875555992 CET	443	49728	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:53.875585079 CET	49728	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:53.875597954 CET	443	49728	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:53.915847063 CET	49728	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:53.959901094 CET	443	49728	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:53.959988117 CET	443	49728	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:53.960078001 CET	49728	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:53.960122108 CET	443	49728	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:53.965302944 CET	443	49728	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:53.965389967 CET	49728	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:53.967417002 CET	49728	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:53.967449903 CET	443	49728	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:54.296624899 CET	49732	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:54.296693087 CET	443	49732	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:54.296802998 CET	49732	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:54.297032118 CET	49732	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:54.297059059 CET	443	49732	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:54.352149963 CET	443	49732	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:54.376998901 CET	49732	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:54.377032995 CET	443	49732	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:54.378451109 CET	443	49732	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:54.378859043 CET	49732	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:54.378884077 CET	443	49732	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:54.378961086 CET	49732	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:54.378968000 CET	443	49732	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:54.379079103 CET	443	49732	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:54.420874119 CET	49732	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:54.437717915 CET	443	49732	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:54.437813997 CET	443	49732	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:54.437889099 CET	49732	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:54.437932014 CET	443	49732	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:54.442739964 CET	443	49732	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:54.442847967 CET	49732	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:54.442908049 CET	49732	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:54.442934036 CET	443	49732	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:54.642556906 CET	49736	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:54.642611027 CET	443	49736	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:54.642729998 CET	49736	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:54.643254042 CET	49736	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:54.643285990 CET	443	49736	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:54.703001976 CET	443	49736	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:54.703360081 CET	49736	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:54.703391075 CET	443	49736	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:54.704387903 CET	443	49736	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:54.704822063 CET	49736	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:54.704847097 CET	443	49736	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:54.704971075 CET	49736	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:54.704982996 CET	443	49736	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:54.705012083 CET	443	49736	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:54.745862007 CET	49736	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:54.781095982 CET	443	49736	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:54.822849989 CET	49736	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:54.822881937 CET	443	49736	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:54.862864017 CET	49736	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:55.030884027 CET	443	49736	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:55.031079054 CET	443	49736	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:55.031146049 CET	49736	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:55.031188965 CET	443	49736	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:55.031218052 CET	49736	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:55.031277895 CET	49736	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:55.414803028 CET	49737	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:55.414859056 CET	443	49737	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:55.414942026 CET	49737	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:55.415326118 CET	49737	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:55.415344000 CET	443	49737	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:55.465987921 CET	443	49737	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:55.468154907 CET	49737	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:55.468194962 CET	443	49737	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:55.469059944 CET	443	49737	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:55.469486952 CET	49737	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:55.469505072 CET	443	49737	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:55.469609976 CET	49737	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:55.469616890 CET	443	49737	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:55.469651937 CET	443	49737	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:55.509938955 CET	49737	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:55.537019014 CET	443	49737	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:55.578057051 CET	49737	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:55.578105927 CET	443	49737	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:55.618962049 CET	49737	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:55.824299097 CET	443	49737	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:55.824423075 CET	443	49737	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:55.824532032 CET	49737	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:55.824595928 CET	49737	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:55.824631929 CET	443	49737	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:56.886440992 CET	49739	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:56.886518955 CET	443	49739	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:56.886647940 CET	49739	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:56.886984110 CET	49739	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:56.887017012 CET	443	49739	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:56.941956043 CET	443	49739	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:56.942538023 CET	49739	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:56.942580938 CET	443	49739	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:56.943540096 CET	443	49739	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:56.944377899 CET	49739	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:56.944405079 CET	443	49739	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:56.944585085 CET	443	49739	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:56.944617033 CET	49739	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:56.944631100 CET	443	49739	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:56.985142946 CET	49739	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:57.004231930 CET	49739	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:57.004498005 CET	443	49739	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:57.004724979 CET	49739	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:57.010919094 CET	49740	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:57.010989904 CET	443	49740	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:57.011130095 CET	49740	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:57.011717081 CET	49740	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:57.011745930 CET	443	49740	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:57.066540956 CET	443	49740	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:57.066912889 CET	49740	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:57.066953897 CET	443	49740	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:57.069226980 CET	443	49740	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:57.069334030 CET	49740	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:57.069859982 CET	49740	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:57.069873095 CET	443	49740	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:57.070048094 CET	443	49740	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:57.070111990 CET	49740	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:57.070125103 CET	443	49740	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:57.111577988 CET	49740	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:57.111618996 CET	443	49740	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:57.150055885 CET	443	49740	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:57.150171995 CET	49740	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:57.150216103 CET	443	49740	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:57.153223038 CET	443	49740	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:57.153352976 CET	49740	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:57.181490898 CET	49740	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:57.181535006 CET	443	49740	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:57.280658007 CET	49741	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:57.280716896 CET	443	49741	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:57.280854940 CET	49741	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:57.281255960 CET	49741	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:57.281289101 CET	443	49741	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:57.329874992 CET	443	49741	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:57.330214977 CET	49741	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:57.330240965 CET	443	49741	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:57.330693007 CET	443	49741	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:57.331217051 CET	49741	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:57.331242085 CET	443	49741	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:57.331362963 CET	443	49741	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:57.331485987 CET	49741	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:57.331511021 CET	443	49741	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:57.420480013 CET	443	49741	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:57.423577070 CET	443	49741	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:57.423680067 CET	49741	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:57.426934958 CET	49741	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:57.426965952 CET	443	49741	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:57.978832006 CET	49743	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:57.978914976 CET	443	49743	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:57.979018927 CET	49743	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:57.979336023 CET	49743	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:57.979365110 CET	443	49743	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:58.033611059 CET	443	49743	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:58.034116983 CET	49743	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:58.034167051 CET	443	49743	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:58.034953117 CET	443	49743	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:58.035535097 CET	49743	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:58.035594940 CET	443	49743	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:58.035628080 CET	49743	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:58.035640955 CET	443	49743	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:58.035772085 CET	443	49743	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:58.076179981 CET	49743	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:58.142602921 CET	443	49743	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:58.146672964 CET	443	49743	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:58.146953106 CET	49743	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:58.149912119 CET	49743	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:58.149970055 CET	443	49743	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:58.236478090 CET	49744	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:58.236550093 CET	443	49744	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:58.237009048 CET	49744	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:58.237477064 CET	49744	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:58.237509966 CET	443	49744	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:58.293231010 CET	443	49744	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:58.296221972 CET	49744	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:58.296266079 CET	443	49744	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:58.296953917 CET	443	49744	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:58.297523022 CET	49744	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:58.297584057 CET	443	49744	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:58.297656059 CET	49744	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:58.297671080 CET	443	49744	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:58.297696114 CET	443	49744	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:58.338258028 CET	49744	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:58.392712116 CET	443	49744	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:58.398192883 CET	443	49744	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:58.399128914 CET	49744	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:58.409518957 CET	49744	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:58.409557104 CET	443	49744	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:58.414408922 CET	49745	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:58.414525032 CET	443	49745	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:58.414690971 CET	49745	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:58.414881945 CET	49745	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:58.414901972 CET	443	49745	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:58.470241070 CET	443	49745	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:58.471085072 CET	49745	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:58.471136093 CET	443	49745	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:58.472331047 CET	443	49745	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:58.476561069 CET	49745	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:58.476594925 CET	443	49745	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:58.476718903 CET	443	49745	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:58.476746082 CET	49745	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:58.476758957 CET	443	49745	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:58.517204046 CET	49745	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:58.570517063 CET	443	49745	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:58.573383093 CET	443	49745	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:58.575151920 CET	49745	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:58.578329086 CET	49745	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:58.578358889 CET	443	49745	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:58.614614964 CET	49746	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:58.614691973 CET	443	49746	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:58.614945889 CET	49746	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:58.615325928 CET	49746	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:58.615353107 CET	443	49746	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:58.670439959 CET	443	49746	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:58.671363115 CET	49746	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:58.671400070 CET	443	49746	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:58.672298908 CET	443	49746	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:58.675540924 CET	49746	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:58.675560951 CET	443	49746	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:58.675626040 CET	49746	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:58.675632000 CET	443	49746	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:58.675715923 CET	443	49746	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:58.716268063 CET	49746	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:58.759305954 CET	443	49746	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:58.762777090 CET	443	49746	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:58.762981892 CET	49746	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:58.764904022 CET	49746	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:58.764945030 CET	443	49746	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:59.310252905 CET	49747	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:59.310343981 CET	443	49747	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:59.310496092 CET	49747	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:59.310817003 CET	49747	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:59.310848951 CET	443	49747	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:59.369395018 CET	443	49747	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:59.369873047 CET	49747	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:59.369918108 CET	443	49747	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:59.371046066 CET	443	49747	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:59.371520996 CET	49747	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:59.371573925 CET	443	49747	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:59.371618986 CET	49747	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:59.371632099 CET	443	49747	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:59.371681929 CET	443	49747	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:59.412317038 CET	49747	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:59.441706896 CET	443	49747	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:59.444040060 CET	443	49747	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:59.444179058 CET	49747	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:59.449052095 CET	49747	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:59.449098110 CET	443	49747	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:59.468694925 CET	49748	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:59.468758106 CET	443	49748	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:59.468908072 CET	49748	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:59.469202995 CET	49748	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:59.469222069 CET	443	49748	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:59.523876905 CET	443	49748	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:59.524378061 CET	49748	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:59.524400949 CET	443	49748	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:59.524914026 CET	443	49748	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:59.525593996 CET	49748	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:59.525612116 CET	443	49748	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:59.525696039 CET	443	49748	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:59.525808096 CET	49748	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:59.525821924 CET	443	49748	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:59.596396923 CET	443	49748	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:59.599421978 CET	443	49748	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:59.599612951 CET	49748	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:59.601078033 CET	49748	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:59.601114988 CET	443	49748	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:59.634099960 CET	49750	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:59.634180069 CET	443	49750	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:59.634294033 CET	49750	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:59.635324001 CET	49750	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:59.635360956 CET	443	49750	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:59.694724083 CET	443	49750	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:59.695329905 CET	49750	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:59.695385933 CET	443	49750	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:59.696125031 CET	443	49750	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:59.696605921 CET	49750	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:59.696647882 CET	443	49750	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:59.696754932 CET	49750	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:59.696768999 CET	443	49750	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:59.696790934 CET	443	49750	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:59.737375021 CET	49750	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:59.759994030 CET	443	49750	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:59.764616966 CET	443	49750	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:59.764856100 CET	49750	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:59.766995907 CET	49750	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:59.767036915 CET	443	49750	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:59.790335894 CET	49751	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:59.790391922 CET	443	49751	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:59.790580988 CET	49751	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:59.790885925 CET	49751	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:59.790899038 CET	443	49751	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:59.852404118 CET	443	49751	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:59.853135109 CET	49751	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:59.853169918 CET	443	49751	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:59.854234934 CET	443	49751	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:59.855398893 CET	49751	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:59.855422020 CET	443	49751	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:59.855515957 CET	443	49751	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:59.855631113 CET	49751	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:59.855643988 CET	443	49751	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:59.919622898 CET	443	49751	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:59.922899008 CET	443	49751	142.250.185.132	192.168.2.3
Nov 29, 2022 16:32:59.923249006 CET	49751	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:59.928757906 CET	49751	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:32:59.928808928 CET	443	49751	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:02.148416996 CET	49753	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:02.148504972 CET	443	49753	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:02.148675919 CET	49753	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:02.159307957 CET	49753	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:02.159353971 CET	443	49753	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:02.215363026 CET	443	49753	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:02.215903044 CET	49753	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:02.215941906 CET	443	49753	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:02.217078924 CET	443	49753	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:02.217680931 CET	49753	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:02.217711926 CET	443	49753	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:02.217782974 CET	49753	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:02.217796087 CET	443	49753	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:02.217904091 CET	443	49753	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:02.258714914 CET	49753	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:02.283045053 CET	443	49753	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:02.287800074 CET	443	49753	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:02.287889957 CET	49753	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:02.289741993 CET	49753	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:02.289773941 CET	443	49753	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:04.195770979 CET	49754	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:04.195848942 CET	443	49754	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:04.195976019 CET	49754	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:04.196471930 CET	49754	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:04.196510077 CET	443	49754	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:04.255976915 CET	443	49754	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:04.256360054 CET	49754	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:04.256387949 CET	443	49754	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:04.257671118 CET	443	49754	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:04.258151054 CET	49754	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:04.258172035 CET	443	49754	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:04.258281946 CET	49754	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:04.258289099 CET	443	49754	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:04.258361101 CET	443	49754	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:04.298690081 CET	49754	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:04.324268103 CET	443	49754	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:04.327282906 CET	443	49754	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:04.327397108 CET	49754	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:04.330230951 CET	49754	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:04.330279112 CET	443	49754	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:04.815201998 CET	49756	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:04.815314054 CET	443	49756	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:04.815445900 CET	49756	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:04.815762043 CET	49756	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:04.815783978 CET	443	49756	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:04.875787973 CET	443	49756	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:04.876481056 CET	49756	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:04.876524925 CET	443	49756	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:04.877687931 CET	443	49756	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:04.878405094 CET	49756	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:04.878444910 CET	443	49756	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:04.878628016 CET	443	49756	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:04.878796101 CET	49756	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:04.878832102 CET	443	49756	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:04.962563992 CET	443	49756	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:05.003817081 CET	49756	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:05.003861904 CET	443	49756	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:05.045774937 CET	49756	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:05.105650902 CET	443	49756	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:05.105853081 CET	443	49756	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:05.105927944 CET	49756	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:05.105971098 CET	443	49756	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:05.106028080 CET	49756	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:05.106064081 CET	49756	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:05.723942995 CET	49757	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:05.724025011 CET	443	49757	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:05.724342108 CET	49757	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:05.724904060 CET	49757	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:05.724939108 CET	443	49757	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:05.780138016 CET	443	49757	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:05.785290003 CET	49757	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:05.785342932 CET	443	49757	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:05.786062002 CET	443	49757	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:05.794153929 CET	49757	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:05.794218063 CET	443	49757	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:05.794326067 CET	49757	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:05.794342041 CET	443	49757	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:05.794418097 CET	443	49757	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:05.835968018 CET	49757	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:05.853641987 CET	443	49757	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:05.858159065 CET	443	49757	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:05.863831997 CET	49757	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:05.879606009 CET	49757	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:05.879652977 CET	443	49757	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:06.932523012 CET	49759	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:06.932596922 CET	443	49759	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:06.932703972 CET	49759	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:06.937005997 CET	49759	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:06.937047005 CET	443	49759	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:06.992841959 CET	443	49759	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:06.993236065 CET	49759	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:06.993287086 CET	443	49759	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:06.994323015 CET	443	49759	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:06.994820118 CET	49759	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:06.994880915 CET	443	49759	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:06.994934082 CET	49759	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:06.994949102 CET	443	49759	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:06.994990110 CET	443	49759	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:07.035871029 CET	49759	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:07.053293943 CET	443	49759	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:07.056669950 CET	443	49759	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:07.056760073 CET	49759	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:07.062325954 CET	49759	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:07.062385082 CET	443	49759	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:15.867480993 CET	49779	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:15.867549896 CET	443	49779	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:15.867738008 CET	49779	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:15.868086100 CET	49779	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:15.868115902 CET	443	49779	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:15.923476934 CET	443	49779	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:15.934218884 CET	49779	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:15.934261084 CET	443	49779	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:15.935358047 CET	443	49779	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:15.935981035 CET	49779	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:15.936037064 CET	443	49779	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:15.936151028 CET	49779	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:15.936166048 CET	443	49779	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:15.936254978 CET	443	49779	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:15.976672888 CET	49779	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:15.981235027 CET	443	49779	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:15.986084938 CET	443	49779	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:15.986608028 CET	49779	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:15.988696098 CET	49779	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:15.988732100 CET	443	49779	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:17.541069984 CET	49781	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:17.541132927 CET	443	49781	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:17.541234970 CET	49781	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:17.541475058 CET	49781	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:17.541496992 CET	443	49781	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:17.599967957 CET	443	49781	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:17.600486040 CET	49781	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:17.600524902 CET	443	49781	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:17.601656914 CET	443	49781	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:17.602464914 CET	49781	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:17.602493048 CET	443	49781	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:17.602698088 CET	49781	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:17.602710962 CET	443	49781	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:17.602801085 CET	443	49781	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:17.642730951 CET	49781	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:17.659280062 CET	443	49781	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:17.663731098 CET	443	49781	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:17.663849115 CET	49781	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:17.670068026 CET	49781	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:17.670109987 CET	443	49781	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:20.259330988 CET	49788	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:20.259419918 CET	443	49788	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:20.259543896 CET	49788	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:20.259902000 CET	49788	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:20.259936094 CET	443	49788	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:20.320180893 CET	443	49788	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:20.327939034 CET	49788	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:20.327987909 CET	443	49788	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:20.328946114 CET	443	49788	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:20.333555937 CET	49788	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:20.333604097 CET	443	49788	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:20.333858013 CET	443	49788	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:20.335560083 CET	49788	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:20.335603952 CET	443	49788	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:20.374511003 CET	49788	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:20.374722004 CET	443	49788	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:20.374835968 CET	49788	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:20.375955105 CET	49789	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:20.376032114 CET	443	49789	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:20.376142025 CET	49789	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:20.376396894 CET	49789	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:20.376431942 CET	443	49789	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:20.431922913 CET	443	49789	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:20.435524940 CET	49789	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:20.435573101 CET	443	49789	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:20.437452078 CET	443	49789	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:20.437778950 CET	49789	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:20.438086033 CET	49789	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:20.438107967 CET	443	49789	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:20.438242912 CET	443	49789	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:20.438257933 CET	49789	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:20.438271999 CET	443	49789	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:20.479063034 CET	49789	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:20.479124069 CET	443	49789	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:20.519831896 CET	443	49789	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:20.520102978 CET	49789	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:20.520153046 CET	443	49789	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:20.522371054 CET	49789	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:20.524828911 CET	443	49789	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:20.524926901 CET	443	49789	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:20.525041103 CET	49789	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:20.525067091 CET	443	49789	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:20.525085926 CET	49789	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:20.528007030 CET	49789	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:20.679707050 CET	49790	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:20.679775953 CET	443	49790	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:20.679943085 CET	49790	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:20.680608034 CET	49790	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:20.680638075 CET	443	49790	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:20.739639044 CET	443	49790	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:20.741704941 CET	49790	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:20.741750002 CET	443	49790	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:20.742619038 CET	443	49790	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:20.744806051 CET	49790	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:20.744843006 CET	443	49790	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:20.745064020 CET	443	49790	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:20.745136023 CET	49790	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:20.745151043 CET	443	49790	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:20.785088062 CET	49790	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:20.813922882 CET	443	49790	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:20.817862034 CET	443	49790	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:20.818909883 CET	49790	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:20.821297884 CET	49790	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:20.821343899 CET	443	49790	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:20.909702063 CET	49791	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:20.909755945 CET	443	49791	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:20.909869909 CET	49791	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:20.910196066 CET	49791	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:20.910222054 CET	443	49791	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:20.969862938 CET	443	49791	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:20.971395016 CET	49791	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:20.971425056 CET	443	49791	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:20.972243071 CET	443	49791	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:20.977477074 CET	49791	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:20.977536917 CET	443	49791	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:20.977673054 CET	49791	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:20.977682114 CET	443	49791	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:20.977705956 CET	443	49791	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:21.018205881 CET	49791	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:21.042495966 CET	443	49791	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:21.046519995 CET	443	49791	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:21.046668053 CET	49791	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:21.050327063 CET	49791	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:21.050363064 CET	443	49791	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:21.977976084 CET	49792	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:21.978045940 CET	443	49792	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:21.978147030 CET	49792	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:21.978518963 CET	49792	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:21.978538990 CET	443	49792	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:22.030917883 CET	443	49792	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:22.031490088 CET	49792	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:22.031517029 CET	443	49792	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:22.032140017 CET	443	49792	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:22.032727957 CET	49792	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:22.032747984 CET	443	49792	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:22.032860994 CET	443	49792	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:22.032927990 CET	49792	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:22.032937050 CET	443	49792	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:22.073240042 CET	49792	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:22.076797962 CET	49792	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:22.076930046 CET	443	49792	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:22.077012062 CET	49792	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:22.080120087 CET	49793	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:22.080183029 CET	443	49793	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:22.080306053 CET	49793	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:22.080679893 CET	49793	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:22.080713034 CET	443	49793	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:22.127624035 CET	443	49793	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:22.128086090 CET	49793	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:22.128114939 CET	443	49793	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:22.129333019 CET	443	49793	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:22.129426003 CET	49793	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:22.130053997 CET	49793	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:22.130062103 CET	443	49793	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:22.130156040 CET	443	49793	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:22.130337000 CET	49793	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:22.130343914 CET	443	49793	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:22.171138048 CET	49793	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:22.198776960 CET	443	49793	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:22.204209089 CET	443	49793	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:22.204302073 CET	49793	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:22.206283092 CET	49793	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:22.206309080 CET	443	49793	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:22.284996986 CET	49794	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:22.285056114 CET	443	49794	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:22.285207033 CET	49794	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:22.285563946 CET	49794	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:22.285586119 CET	443	49794	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:22.333059072 CET	443	49794	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:22.333514929 CET	49794	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:22.333559036 CET	443	49794	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:22.334027052 CET	443	49794	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:22.334724903 CET	49794	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:22.334785938 CET	443	49794	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:22.334871054 CET	49794	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:22.334872007 CET	443	49794	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:22.334884882 CET	443	49794	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:22.375216007 CET	49794	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:22.396708012 CET	443	49794	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:22.400229931 CET	443	49794	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:22.400377989 CET	49794	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:22.402697086 CET	49794	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:22.402743101 CET	443	49794	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:25.507116079 CET	49807	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:25.507180929 CET	443	49807	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:25.507318974 CET	49807	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:25.507702112 CET	49807	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:25.507734060 CET	443	49807	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:25.559056997 CET	443	49807	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:25.559561014 CET	49807	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:25.559603930 CET	443	49807	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:25.560097933 CET	443	49807	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:25.560765982 CET	49807	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:25.560801029 CET	443	49807	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:25.560889959 CET	443	49807	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:25.561242104 CET	49807	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:25.561266899 CET	443	49807	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:25.626183987 CET	443	49807	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:25.631851912 CET	443	49807	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:25.632006884 CET	49807	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:25.635174990 CET	49807	443	192.168.2.3	142.250.185.132
Nov 29, 2022 16:33:25.635216951 CET	443	49807	142.250.185.132	192.168.2.3
Nov 29, 2022 16:33:28.444932938 CET	49809	443	192.168.2.3	172.217.18.100
Nov 29, 2022 16:33:28.445008993 CET	443	49809	172.217.18.100	192.168.2.3
Nov 29, 2022 16:33:28.445179939 CET	49809	443	192.168.2.3	172.217.18.100
Nov 29, 2022 16:33:28.445591927 CET	49809	443	192.168.2.3	172.217.18.100
Nov 29, 2022 16:33:28.445632935 CET	443	49809	172.217.18.100	192.168.2.3
Nov 29, 2022 16:33:28.494918108 CET	443	49809	172.217.18.100	192.168.2.3
Nov 29, 2022 16:33:28.495471954 CET	49809	443	192.168.2.3	172.217.18.100
Nov 29, 2022 16:33:28.495515108 CET	443	49809	172.217.18.100	192.168.2.3
Nov 29, 2022 16:33:28.496038914 CET	443	49809	172.217.18.100	192.168.2.3
Nov 29, 2022 16:33:28.496551037 CET	49809	443	192.168.2.3	172.217.18.100
Nov 29, 2022 16:33:28.496587038 CET	443	49809	172.217.18.100	192.168.2.3
Nov 29, 2022 16:33:28.496692896 CET	443	49809	172.217.18.100	192.168.2.3
Nov 29, 2022 16:33:28.536763906 CET	49809	443	192.168.2.3	172.217.18.100
Nov 29, 2022 16:33:32.289645910 CET	49809	443	192.168.2.3	172.217.18.100
Nov 29, 2022 16:33:32.289714098 CET	443	49809	172.217.18.100	192.168.2.3
Nov 29, 2022 16:33:32.349350929 CET	443	49809	172.217.18.100	192.168.2.3
Nov 29, 2022 16:33:32.352360964 CET	443	49809	172.217.18.100	192.168.2.3
Nov 29, 2022 16:33:32.352533102 CET	49809	443	192.168.2.3	172.217.18.100
Nov 29, 2022 16:33:32.354820967 CET	49809	443	192.168.2.3	172.217.18.100
Nov 29, 2022 16:33:32.354870081 CET	443	49809	172.217.18.100	192.168.2.3
Nov 29, 2022 16:33:32.703392982 CET	49816	443	192.168.2.3	172.217.18.100
Nov 29, 2022 16:33:32.703480959 CET	443	49816	172.217.18.100	192.168.2.3
Nov 29, 2022 16:33:32.703602076 CET	49816	443	192.168.2.3	172.217.18.100
Nov 29, 2022 16:33:32.703955889 CET	49816	443	192.168.2.3	172.217.18.100
Nov 29, 2022 16:33:32.703993082 CET	443	49816	172.217.18.100	192.168.2.3
Nov 29, 2022 16:33:32.759232044 CET	443	49816	172.217.18.100	192.168.2.3
Nov 29, 2022 16:33:32.759831905 CET	49816	443	192.168.2.3	172.217.18.100
Nov 29, 2022 16:33:32.759882927 CET	443	49816	172.217.18.100	192.168.2.3
Nov 29, 2022 16:33:32.760595083 CET	443	49816	172.217.18.100	192.168.2.3
Nov 29, 2022 16:33:32.761120081 CET	49816	443	192.168.2.3	172.217.18.100
Nov 29, 2022 16:33:32.761153936 CET	443	49816	172.217.18.100	192.168.2.3
Nov 29, 2022 16:33:32.761271000 CET	443	49816	172.217.18.100	192.168.2.3
Nov 29, 2022 16:33:32.761295080 CET	49816	443	192.168.2.3	172.217.18.100
Nov 29, 2022 16:33:32.761308908 CET	443	49816	172.217.18.100	192.168.2.3
Nov 29, 2022 16:33:32.802068949 CET	49816	443	192.168.2.3	172.217.18.100
Nov 29, 2022 16:33:32.832927942 CET	443	49816	172.217.18.100	192.168.2.3
Nov 29, 2022 16:33:32.836687088 CET	443	49816	172.217.18.100	192.168.2.3
Nov 29, 2022 16:33:32.836893082 CET	49816	443	192.168.2.3	172.217.18.100
Nov 29, 2022 16:33:32.842925072 CET	49816	443	192.168.2.3	172.217.18.100
Nov 29, 2022 16:33:32.842972994 CET	443	49816	172.217.18.100	192.168.2.3
Nov 29, 2022 16:33:32.888981104 CET	49818	443	192.168.2.3	172.217.18.100
Nov 29, 2022 16:33:32.889048100 CET	443	49818	172.217.18.100	192.168.2.3
Nov 29, 2022 16:33:32.889168978 CET	49818	443	192.168.2.3	172.217.18.100
Nov 29, 2022 16:33:32.889439106 CET	49818	443	192.168.2.3	172.217.18.100
Nov 29, 2022 16:33:32.889472961 CET	443	49818	172.217.18.100	192.168.2.3
Nov 29, 2022 16:33:32.950380087 CET	443	49818	172.217.18.100	192.168.2.3
Nov 29, 2022 16:33:32.951014996 CET	49818	443	192.168.2.3	172.217.18.100
Nov 29, 2022 16:33:32.951050997 CET	443	49818	172.217.18.100	192.168.2.3
Nov 29, 2022 16:33:32.951675892 CET	443	49818	172.217.18.100	192.168.2.3
Nov 29, 2022 16:33:32.952500105 CET	49818	443	192.168.2.3	172.217.18.100
Nov 29, 2022 16:33:32.952532053 CET	443	49818	172.217.18.100	192.168.2.3
Nov 29, 2022 16:33:32.952639103 CET	443	49818	172.217.18.100	192.168.2.3
Nov 29, 2022 16:33:32.952754974 CET	49818	443	192.168.2.3	172.217.18.100
Nov 29, 2022 16:33:32.952780962 CET	443	49818	172.217.18.100	192.168.2.3
Nov 29, 2022 16:33:33.030050993 CET	443	49818	172.217.18.100	192.168.2.3
Nov 29, 2022 16:33:33.034099102 CET	443	49818	172.217.18.100	192.168.2.3
Nov 29, 2022 16:33:33.034214973 CET	49818	443	192.168.2.3	172.217.18.100
Nov 29, 2022 16:33:33.036490917 CET	49818	443	192.168.2.3	172.217.18.100
Nov 29, 2022 16:33:33.036534071 CET	443	49818	172.217.18.100	192.168.2.3
Nov 29, 2022 16:33:34.342034101 CET	49823	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:34.342097998 CET	443	49823	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:34.342308998 CET	49823	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:34.343828917 CET	49824	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:34.343910933 CET	443	49824	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:34.344043016 CET	49824	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:34.344228029 CET	49823	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:34.344259024 CET	443	49823	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:34.344460011 CET	49824	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:34.344496012 CET	443	49824	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:35.471434116 CET	443	49823	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:35.472048044 CET	49823	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:35.472094059 CET	443	49823	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:35.475277901 CET	443	49823	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:35.475469112 CET	49823	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:35.475930929 CET	49823	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:35.475951910 CET	443	49823	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:35.476197004 CET	443	49823	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:35.476408958 CET	49823	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:35.476428032 CET	443	49823	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:35.517304897 CET	49823	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:36.713958025 CET	443	49823	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:36.714165926 CET	443	49823	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:36.714317083 CET	49823	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:36.715837002 CET	49823	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:36.715837002 CET	49823	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:36.715884924 CET	443	49823	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:36.715975046 CET	49823	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:37.095366955 CET	49829	80	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:37.095880032 CET	49830	80	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:37.138233900 CET	49831	80	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:37.448304892 CET	80	49830	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:37.449374914 CET	49830	80	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:37.449374914 CET	49830	80	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:37.493165016 CET	80	49831	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:37.493515015 CET	49831	80	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:37.801976919 CET	80	49830	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:37.802022934 CET	80	49830	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:37.811635017 CET	49834	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:37.811709881 CET	443	49834	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:37.811844110 CET	49834	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:37.812091112 CET	49834	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:37.812113047 CET	443	49834	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:37.842547894 CET	49830	80	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:38.095315933 CET	49829	80	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:38.444355965 CET	80	49829	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:38.444679976 CET	49829	80	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:38.519493103 CET	443	49834	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:38.519932985 CET	49834	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:38.519979000 CET	443	49834	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:38.520498991 CET	443	49834	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:38.520997047 CET	49834	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:38.521028996 CET	443	49834	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:38.521152020 CET	443	49834	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:38.521341085 CET	49834	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:38.521368980 CET	443	49834	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:38.620253086 CET	443	49824	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:38.620639086 CET	49824	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:38.620681047 CET	443	49824	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:38.621445894 CET	443	49824	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:38.622359991 CET	49824	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:38.622391939 CET	443	49824	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:38.622487068 CET	443	49824	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:38.662534952 CET	49824	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:39.252186060 CET	443	49834	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:39.260082960 CET	49834	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:39.260152102 CET	443	49834	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:39.260277033 CET	49834	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:39.264338017 CET	49824	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:39.264394999 CET	443	49824	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:39.661576986 CET	443	49824	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:39.661745071 CET	443	49824	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:39.661843061 CET	49824	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:39.726828098 CET	49824	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:39.726895094 CET	443	49824	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:39.730766058 CET	49836	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:39.730844975 CET	443	49836	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:39.730978012 CET	49836	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:39.731301069 CET	49836	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:39.731326103 CET	443	49836	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:40.824390888 CET	443	49836	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:40.825391054 CET	49836	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:40.825421095 CET	443	49836	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:40.826167107 CET	443	49836	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:40.826622963 CET	49836	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:40.826646090 CET	443	49836	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:40.826767921 CET	443	49836	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:40.829668045 CET	49836	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:40.829699993 CET	443	49836	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:41.942562103 CET	443	49836	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:41.942657948 CET	443	49836	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:41.942748070 CET	49836	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:41.942785978 CET	443	49836	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:41.942816019 CET	443	49836	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:41.942878962 CET	49836	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:41.949328899 CET	49836	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:41.949376106 CET	443	49836	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:42.021564960 CET	49838	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:42.021631002 CET	443	49838	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:42.021754026 CET	49838	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:42.022234917 CET	49839	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:42.022299051 CET	443	49839	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:42.022393942 CET	49839	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:42.022804022 CET	49840	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:42.022862911 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:42.022944927 CET	49840	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:42.023500919 CET	49841	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:42.023562908 CET	443	49841	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:42.023643970 CET	49841	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:42.024036884 CET	49842	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:42.024064064 CET	443	49842	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:42.024152994 CET	49842	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:42.024687052 CET	49843	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:42.024715900 CET	443	49843	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:42.025628090 CET	49843	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:42.025744915 CET	49838	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:42.025774002 CET	443	49838	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:42.026050091 CET	49839	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:42.026088953 CET	443	49839	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:42.026199102 CET	49840	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:42.026252031 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:42.032267094 CET	49841	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:42.032308102 CET	443	49841	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:42.032520056 CET	49842	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:42.032541037 CET	443	49842	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:42.033421993 CET	49843	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:42.033447981 CET	443	49843	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:42.832393885 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:42.833594084 CET	49840	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:42.833626032 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:42.836919069 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:42.837044001 CET	49840	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:42.837723017 CET	49840	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:42.837738037 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:42.837872982 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:42.838032007 CET	49840	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:42.838047028 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:42.878889084 CET	49840	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:43.175085068 CET	443	49843	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:43.175501108 CET	49843	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:43.175545931 CET	443	49843	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:43.178827047 CET	443	49843	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:43.178916931 CET	49843	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:43.179574013 CET	49843	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:43.179610014 CET	443	49843	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:43.179919958 CET	443	49843	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:43.180138111 CET	49843	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:43.180154085 CET	443	49843	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:43.220984936 CET	49843	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:43.221028090 CET	443	49843	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:43.264596939 CET	443	49841	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:43.264609098 CET	49843	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:43.274308920 CET	49841	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:43.274363995 CET	443	49841	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:43.277414083 CET	443	49841	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:43.277621031 CET	49841	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:43.283010006 CET	49841	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:43.283055067 CET	443	49841	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:43.283409119 CET	443	49841	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:43.283468008 CET	49841	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:43.283485889 CET	443	49841	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:43.319590092 CET	443	49838	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:43.321724892 CET	49838	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:43.321770906 CET	443	49838	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:43.322463989 CET	443	49838	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:43.322918892 CET	49838	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:43.322979927 CET	443	49838	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:43.323085070 CET	443	49838	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:43.323276997 CET	49838	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:43.323293924 CET	443	49838	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:43.323925018 CET	49841	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:43.323971033 CET	443	49841	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:43.363962889 CET	49841	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:43.365448952 CET	49838	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:43.818557024 CET	443	49839	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:43.818963051 CET	49839	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:43.819008112 CET	443	49839	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:43.822746992 CET	443	49839	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:43.822927952 CET	49839	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:43.824351072 CET	49839	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:43.824388027 CET	443	49839	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:43.824628115 CET	443	49839	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:43.824888945 CET	49839	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:43.824912071 CET	443	49839	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:43.866031885 CET	49839	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:43.880567074 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:43.880649090 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:43.880671978 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:43.880728006 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:43.880733013 CET	49840	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:43.880759954 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:43.880773067 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:43.880780935 CET	49840	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:43.880820990 CET	49840	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:43.880846977 CET	49840	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:44.257258892 CET	443	49842	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:44.257859945 CET	49842	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:44.257904053 CET	443	49842	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:44.259804964 CET	443	49842	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:44.260050058 CET	49842	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:44.260412931 CET	49842	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:44.260435104 CET	443	49842	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:44.260682106 CET	443	49842	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:44.260876894 CET	49842	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:44.260895967 CET	443	49842	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:44.300798893 CET	49842	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:44.417577982 CET	443	49838	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:44.417668104 CET	443	49838	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:44.417743921 CET	443	49838	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:44.417838097 CET	443	49838	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:44.417843103 CET	49838	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:44.417902946 CET	49838	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:44.422372103 CET	49838	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:44.422419071 CET	443	49838	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:44.423150063 CET	49845	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:44.423218012 CET	443	49845	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:44.423310041 CET	49845	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:44.424006939 CET	49845	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:44.424037933 CET	443	49845	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:44.560812950 CET	443	49843	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:44.560869932 CET	443	49843	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:44.560885906 CET	443	49843	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:44.560986042 CET	49843	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:44.561032057 CET	443	49843	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:44.561063051 CET	443	49843	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:44.561080933 CET	443	49843	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:44.561113119 CET	49843	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:44.561113119 CET	49843	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:44.561126947 CET	443	49843	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:44.561151981 CET	49843	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:44.561201096 CET	49843	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:44.580641985 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:44.580681086 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:44.580799103 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:44.580914021 CET	49840	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:44.580948114 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:44.580987930 CET	49840	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:44.581007957 CET	49840	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:44.656810999 CET	443	49841	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:44.656877041 CET	443	49841	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:44.656893969 CET	443	49841	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:44.656946898 CET	443	49841	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:44.656976938 CET	443	49841	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:44.656990051 CET	49841	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:44.656995058 CET	443	49841	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:44.657049894 CET	443	49841	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:44.657067060 CET	49841	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:44.657140017 CET	49841	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:45.135406017 CET	443	49845	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:45.136614084 CET	49845	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:45.136643887 CET	443	49845	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:45.137618065 CET	443	49845	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:45.138242960 CET	49845	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:45.138278961 CET	443	49845	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:45.138449907 CET	443	49845	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:45.138499022 CET	49845	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:45.138514042 CET	443	49845	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:45.179218054 CET	49845	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:45.206991911 CET	443	49839	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:45.207056046 CET	443	49839	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:45.207072973 CET	443	49839	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:45.207159042 CET	443	49839	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:45.207233906 CET	49839	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:45.207241058 CET	443	49839	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:45.207284927 CET	443	49839	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:45.207333088 CET	49839	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:45.207333088 CET	49839	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:45.207369089 CET	49839	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:45.353502035 CET	443	49841	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:45.353569984 CET	443	49841	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:45.353629112 CET	49841	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:45.353678942 CET	49841	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:45.353709936 CET	443	49841	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:45.353763103 CET	49841	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:45.354820013 CET	49841	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:45.354846001 CET	443	49841	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:45.355736017 CET	49848	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:45.355794907 CET	443	49848	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:45.355922937 CET	49848	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:45.365655899 CET	49848	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:45.365708113 CET	443	49848	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:45.612374067 CET	443	49843	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:45.612407923 CET	443	49843	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:45.612523079 CET	443	49843	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:45.612561941 CET	49843	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:45.612592936 CET	443	49843	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:45.612615108 CET	49843	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:45.612652063 CET	49843	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:45.919672012 CET	443	49839	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:45.919697046 CET	443	49839	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:45.919832945 CET	49839	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:45.919871092 CET	443	49839	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:45.919924021 CET	443	49839	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:45.919965982 CET	443	49839	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:45.919970036 CET	49839	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:45.919970036 CET	49839	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:45.920030117 CET	49839	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:45.921783924 CET	49839	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:45.921828985 CET	443	49839	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:45.922379971 CET	49849	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:45.922466040 CET	443	49849	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:45.922585964 CET	49849	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:45.923182964 CET	49849	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:45.923216105 CET	443	49849	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:46.330821991 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:46.330853939 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:46.330899000 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:46.330940008 CET	49840	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:46.330971956 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:46.331001997 CET	49840	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:46.331052065 CET	49840	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:46.465584993 CET	443	49842	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:46.465657949 CET	443	49842	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:46.465676069 CET	443	49842	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:46.465714931 CET	443	49842	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:46.465792894 CET	443	49842	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:46.465825081 CET	49842	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:46.465825081 CET	49842	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:46.465873957 CET	443	49842	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:46.465946913 CET	49842	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:46.465946913 CET	49842	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:46.527467966 CET	443	49845	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:46.527532101 CET	443	49845	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:46.527548075 CET	443	49845	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:46.527590990 CET	443	49845	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:46.527617931 CET	49845	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:46.527638912 CET	443	49845	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:46.527687073 CET	443	49845	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:46.527715921 CET	49845	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:46.527715921 CET	49845	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:46.527740955 CET	49845	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:46.666156054 CET	443	49849	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:46.675344944 CET	49849	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:46.675404072 CET	443	49849	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:46.676554918 CET	443	49849	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:46.677289009 CET	49849	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:46.677324057 CET	443	49849	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:46.677582979 CET	443	49849	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:46.677787066 CET	49849	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:46.677813053 CET	443	49849	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:47.031492949 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:47.031522036 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:47.031563997 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:47.031630039 CET	49840	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:47.031673908 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:47.031707048 CET	49840	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:47.031730890 CET	49840	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:47.433909893 CET	443	49843	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:47.433932066 CET	443	49843	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:47.434030056 CET	49843	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:47.434073925 CET	443	49843	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:47.434175014 CET	49843	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:47.601416111 CET	443	49848	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:47.602969885 CET	49848	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:47.603027105 CET	443	49848	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:47.603899002 CET	443	49848	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:47.604372025 CET	49848	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:47.604406118 CET	443	49848	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:47.604543924 CET	443	49848	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:47.604613066 CET	49848	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:47.604630947 CET	443	49848	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:47.644800901 CET	49848	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:48.117571115 CET	443	49849	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:48.117621899 CET	443	49849	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:48.117804050 CET	443	49849	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:48.117836952 CET	49849	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:48.117867947 CET	443	49849	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:48.117891073 CET	49849	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:48.119304895 CET	49849	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:48.431993008 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:48.432010889 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:48.432187080 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:48.432220936 CET	49840	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:48.432255030 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:48.432286978 CET	49840	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:48.432337046 CET	49840	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:48.572419882 CET	443	49849	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:48.572660923 CET	443	49849	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:48.572685003 CET	49849	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:48.572737932 CET	49849	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:48.574322939 CET	49849	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:48.574361086 CET	443	49849	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:48.706154108 CET	443	49848	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:48.706206083 CET	443	49848	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:48.706332922 CET	443	49848	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:48.706417084 CET	49848	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:48.707187891 CET	49848	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:48.729003906 CET	49848	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:48.729063034 CET	443	49848	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:48.889570951 CET	443	49843	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:48.889599085 CET	443	49843	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:48.889694929 CET	443	49843	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:48.889823914 CET	49843	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:48.889852047 CET	443	49843	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:48.889893055 CET	49843	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:48.889908075 CET	49843	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:48.996869087 CET	443	49845	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:48.996902943 CET	443	49845	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:48.996967077 CET	443	49845	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:48.997076988 CET	49845	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:48.997077942 CET	49845	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:48.997129917 CET	443	49845	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:48.997167110 CET	443	49845	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:48.997235060 CET	49845	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:49.345107079 CET	443	49845	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:49.345305920 CET	443	49845	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:49.345383883 CET	49845	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:49.345438004 CET	49845	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:49.346600056 CET	49845	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:49.346642971 CET	443	49845	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:49.346666098 CET	49845	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:49.346729040 CET	49845	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:50.130825043 CET	443	49842	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:50.130856037 CET	443	49842	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:50.131026983 CET	443	49842	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:50.131077051 CET	49842	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:50.131130934 CET	443	49842	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:50.131196022 CET	49842	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:50.131196976 CET	49842	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:50.131215096 CET	443	49842	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:50.131299973 CET	49842	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:50.182511091 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:50.182610989 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:50.182687044 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:50.182801962 CET	49840	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:50.182858944 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:50.182905912 CET	49840	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:50.182920933 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:50.182972908 CET	49840	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:50.883900881 CET	443	49843	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:50.883933067 CET	443	49843	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:50.884037971 CET	443	49843	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:50.884094954 CET	49843	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:50.884119987 CET	443	49843	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:50.884147882 CET	49843	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:50.884179115 CET	49843	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:52.210084915 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:52.210119963 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:52.210279942 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:52.210341930 CET	49840	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:52.210372925 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:52.210405111 CET	49840	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:52.210436106 CET	49840	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:52.685914040 CET	443	49843	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:52.685945034 CET	443	49843	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:52.686055899 CET	443	49843	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:52.686085939 CET	49843	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:52.686114073 CET	443	49843	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:52.686147928 CET	49843	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:52.686187029 CET	49843	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:52.708266973 CET	443	49842	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:52.708296061 CET	443	49842	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:52.708539963 CET	443	49842	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:52.708578110 CET	49842	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:52.708623886 CET	443	49842	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:52.708688974 CET	49842	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:52.708725929 CET	49842	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:54.082196951 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:54.082230091 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:54.082274914 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:54.082319021 CET	49840	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:54.082349062 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:54.082380056 CET	49840	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:54.082413912 CET	49840	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:54.153259993 CET	443	49843	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:54.153290987 CET	443	49843	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:54.153377056 CET	49843	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:54.153419971 CET	443	49843	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:54.153511047 CET	49843	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:54.791445971 CET	443	49842	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:54.791474104 CET	443	49842	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:54.791655064 CET	49842	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:54.791655064 CET	49842	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:54.791667938 CET	443	49842	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:54.791728020 CET	443	49842	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:54.791764975 CET	443	49842	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:54.791825056 CET	49842	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:54.791825056 CET	49842	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:55.201193094 CET	49858	443	192.168.2.3	142.251.143.67
Nov 29, 2022 16:33:55.201263905 CET	443	49858	142.251.143.67	192.168.2.3
Nov 29, 2022 16:33:55.201366901 CET	49858	443	192.168.2.3	142.251.143.67
Nov 29, 2022 16:33:55.202100039 CET	49858	443	192.168.2.3	142.251.143.67
Nov 29, 2022 16:33:55.202130079 CET	443	49858	142.251.143.67	192.168.2.3
Nov 29, 2022 16:33:55.216733932 CET	443	49843	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:55.216878891 CET	49843	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:55.216901064 CET	443	49843	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:55.216969967 CET	49843	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:55.219616890 CET	49843	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:55.219651937 CET	443	49843	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:55.281183004 CET	443	49858	142.251.143.67	192.168.2.3
Nov 29, 2022 16:33:55.281680107 CET	49858	443	192.168.2.3	142.251.143.67
Nov 29, 2022 16:33:55.281699896 CET	443	49858	142.251.143.67	192.168.2.3
Nov 29, 2022 16:33:55.284265995 CET	443	49858	142.251.143.67	192.168.2.3
Nov 29, 2022 16:33:55.284389019 CET	49858	443	192.168.2.3	142.251.143.67
Nov 29, 2022 16:33:55.292041063 CET	49858	443	192.168.2.3	142.251.143.67
Nov 29, 2022 16:33:55.292088985 CET	443	49858	142.251.143.67	192.168.2.3
Nov 29, 2022 16:33:55.292217016 CET	49858	443	192.168.2.3	142.251.143.67
Nov 29, 2022 16:33:55.292232990 CET	443	49858	142.251.143.67	192.168.2.3
Nov 29, 2022 16:33:55.292362928 CET	443	49858	142.251.143.67	192.168.2.3
Nov 29, 2022 16:33:55.346939087 CET	443	49858	142.251.143.67	192.168.2.3
Nov 29, 2022 16:33:55.347071886 CET	443	49858	142.251.143.67	192.168.2.3
Nov 29, 2022 16:33:55.347114086 CET	49858	443	192.168.2.3	142.251.143.67
Nov 29, 2022 16:33:55.347145081 CET	49858	443	192.168.2.3	142.251.143.67
Nov 29, 2022 16:33:55.348849058 CET	49858	443	192.168.2.3	142.251.143.67
Nov 29, 2022 16:33:55.348882914 CET	443	49858	142.251.143.67	192.168.2.3
Nov 29, 2022 16:33:55.373986959 CET	49859	443	192.168.2.3	35.227.159.135
Nov 29, 2022 16:33:55.374067068 CET	443	49859	35.227.159.135	192.168.2.3
Nov 29, 2022 16:33:55.374166965 CET	49859	443	192.168.2.3	35.227.159.135
Nov 29, 2022 16:33:55.374644041 CET	49859	443	192.168.2.3	35.227.159.135
Nov 29, 2022 16:33:55.374677896 CET	443	49859	35.227.159.135	192.168.2.3
Nov 29, 2022 16:33:55.380084991 CET	49860	443	192.168.2.3	172.217.13.227
Nov 29, 2022 16:33:55.380146980 CET	443	49860	172.217.13.227	192.168.2.3
Nov 29, 2022 16:33:55.380481958 CET	49860	443	192.168.2.3	172.217.13.227
Nov 29, 2022 16:33:55.380944014 CET	49860	443	192.168.2.3	172.217.13.227
Nov 29, 2022 16:33:55.380980015 CET	443	49860	172.217.13.227	192.168.2.3
Nov 29, 2022 16:33:55.660218000 CET	443	49860	172.217.13.227	192.168.2.3
Nov 29, 2022 16:33:55.666836023 CET	49860	443	192.168.2.3	172.217.13.227
Nov 29, 2022 16:33:55.666877031 CET	443	49860	172.217.13.227	192.168.2.3
Nov 29, 2022 16:33:55.668368101 CET	443	49860	172.217.13.227	192.168.2.3
Nov 29, 2022 16:33:55.668515921 CET	49860	443	192.168.2.3	172.217.13.227
Nov 29, 2022 16:33:55.674089909 CET	49860	443	192.168.2.3	172.217.13.227
Nov 29, 2022 16:33:55.674125910 CET	443	49860	172.217.13.227	192.168.2.3
Nov 29, 2022 16:33:55.674299955 CET	443	49860	172.217.13.227	192.168.2.3
Nov 29, 2022 16:33:55.674393892 CET	49860	443	192.168.2.3	172.217.13.227
Nov 29, 2022 16:33:55.674413919 CET	443	49860	172.217.13.227	192.168.2.3
Nov 29, 2022 16:33:55.745057106 CET	49860	443	192.168.2.3	172.217.13.227
Nov 29, 2022 16:33:55.745098114 CET	443	49860	172.217.13.227	192.168.2.3
Nov 29, 2022 16:33:55.794961929 CET	443	49859	35.227.159.135	192.168.2.3
Nov 29, 2022 16:33:55.798789024 CET	49859	443	192.168.2.3	35.227.159.135
Nov 29, 2022 16:33:55.798846006 CET	443	49859	35.227.159.135	192.168.2.3
Nov 29, 2022 16:33:55.800270081 CET	443	49859	35.227.159.135	192.168.2.3
Nov 29, 2022 16:33:55.800431013 CET	49859	443	192.168.2.3	35.227.159.135
Nov 29, 2022 16:33:55.802747011 CET	49859	443	192.168.2.3	35.227.159.135
Nov 29, 2022 16:33:55.802783966 CET	443	49859	35.227.159.135	192.168.2.3
Nov 29, 2022 16:33:55.803008080 CET	443	49859	35.227.159.135	192.168.2.3
Nov 29, 2022 16:33:55.803080082 CET	49859	443	192.168.2.3	35.227.159.135
Nov 29, 2022 16:33:55.803096056 CET	443	49859	35.227.159.135	192.168.2.3
Nov 29, 2022 16:33:55.846060991 CET	49860	443	192.168.2.3	172.217.13.227
Nov 29, 2022 16:33:55.846976995 CET	49859	443	192.168.2.3	35.227.159.135
Nov 29, 2022 16:33:55.847027063 CET	443	49859	35.227.159.135	192.168.2.3
Nov 29, 2022 16:33:55.943808079 CET	443	49860	172.217.13.227	192.168.2.3
Nov 29, 2022 16:33:55.943969011 CET	443	49860	172.217.13.227	192.168.2.3
Nov 29, 2022 16:33:55.944184065 CET	49860	443	192.168.2.3	172.217.13.227
Nov 29, 2022 16:33:55.945161104 CET	49860	443	192.168.2.3	172.217.13.227
Nov 29, 2022 16:33:55.945204973 CET	443	49860	172.217.13.227	192.168.2.3
Nov 29, 2022 16:33:55.946495056 CET	49862	443	192.168.2.3	172.217.13.227
Nov 29, 2022 16:33:55.946564913 CET	443	49862	172.217.13.227	192.168.2.3
Nov 29, 2022 16:33:55.946954012 CET	49862	443	192.168.2.3	172.217.13.227
Nov 29, 2022 16:33:55.947253942 CET	49862	443	192.168.2.3	172.217.13.227
Nov 29, 2022 16:33:55.947293043 CET	443	49862	172.217.13.227	192.168.2.3
Nov 29, 2022 16:33:55.963707924 CET	49859	443	192.168.2.3	35.227.159.135
Nov 29, 2022 16:33:56.180815935 CET	443	49859	35.227.159.135	192.168.2.3
Nov 29, 2022 16:33:56.180918932 CET	443	49859	35.227.159.135	192.168.2.3
Nov 29, 2022 16:33:56.180999041 CET	49859	443	192.168.2.3	35.227.159.135
Nov 29, 2022 16:33:56.181727886 CET	49859	443	192.168.2.3	35.227.159.135
Nov 29, 2022 16:33:56.181765079 CET	443	49859	35.227.159.135	192.168.2.3
Nov 29, 2022 16:33:56.234472036 CET	443	49862	172.217.13.227	192.168.2.3
Nov 29, 2022 16:33:56.235023975 CET	49862	443	192.168.2.3	172.217.13.227
Nov 29, 2022 16:33:56.235069990 CET	443	49862	172.217.13.227	192.168.2.3
Nov 29, 2022 16:33:56.236182928 CET	443	49862	172.217.13.227	192.168.2.3
Nov 29, 2022 16:33:56.236824036 CET	49862	443	192.168.2.3	172.217.13.227
Nov 29, 2022 16:33:56.236854076 CET	443	49862	172.217.13.227	192.168.2.3
Nov 29, 2022 16:33:56.236943007 CET	49862	443	192.168.2.3	172.217.13.227
Nov 29, 2022 16:33:56.236954927 CET	443	49862	172.217.13.227	192.168.2.3
Nov 29, 2022 16:33:56.237051010 CET	443	49862	172.217.13.227	192.168.2.3
Nov 29, 2022 16:33:56.356182098 CET	49862	443	192.168.2.3	172.217.13.227
Nov 29, 2022 16:33:56.516483068 CET	443	49862	172.217.13.227	192.168.2.3
Nov 29, 2022 16:33:56.516669989 CET	443	49862	172.217.13.227	192.168.2.3
Nov 29, 2022 16:33:56.516796112 CET	49862	443	192.168.2.3	172.217.13.227
Nov 29, 2022 16:33:56.517237902 CET	49862	443	192.168.2.3	172.217.13.227
Nov 29, 2022 16:33:56.517271042 CET	443	49862	172.217.13.227	192.168.2.3
Nov 29, 2022 16:33:56.538925886 CET	49863	443	192.168.2.3	216.58.212.163
Nov 29, 2022 16:33:56.538985968 CET	443	49863	216.58.212.163	192.168.2.3
Nov 29, 2022 16:33:56.539112091 CET	49863	443	192.168.2.3	216.58.212.163
Nov 29, 2022 16:33:56.539311886 CET	49863	443	192.168.2.3	216.58.212.163
Nov 29, 2022 16:33:56.539335966 CET	443	49863	216.58.212.163	192.168.2.3
Nov 29, 2022 16:33:56.604723930 CET	443	49863	216.58.212.163	192.168.2.3
Nov 29, 2022 16:33:56.609688997 CET	49863	443	192.168.2.3	216.58.212.163
Nov 29, 2022 16:33:56.609730005 CET	443	49863	216.58.212.163	192.168.2.3
Nov 29, 2022 16:33:56.612924099 CET	443	49863	216.58.212.163	192.168.2.3
Nov 29, 2022 16:33:56.613049984 CET	49863	443	192.168.2.3	216.58.212.163
Nov 29, 2022 16:33:56.615456104 CET	49863	443	192.168.2.3	216.58.212.163
Nov 29, 2022 16:33:56.615474939 CET	443	49863	216.58.212.163	192.168.2.3
Nov 29, 2022 16:33:56.615645885 CET	443	49863	216.58.212.163	192.168.2.3
Nov 29, 2022 16:33:56.615662098 CET	49863	443	192.168.2.3	216.58.212.163
Nov 29, 2022 16:33:56.615674973 CET	443	49863	216.58.212.163	192.168.2.3
Nov 29, 2022 16:33:56.650139093 CET	443	49863	216.58.212.163	192.168.2.3
Nov 29, 2022 16:33:56.650362015 CET	49863	443	192.168.2.3	216.58.212.163
Nov 29, 2022 16:33:56.650932074 CET	49863	443	192.168.2.3	216.58.212.163
Nov 29, 2022 16:33:56.650964975 CET	443	49863	216.58.212.163	192.168.2.3
Nov 29, 2022 16:33:56.652463913 CET	443	49842	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:56.652493000 CET	443	49842	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:56.652571917 CET	443	49842	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:56.652673960 CET	49842	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:56.652673960 CET	49842	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:56.652721882 CET	443	49842	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:56.652791023 CET	49842	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:57.478410006 CET	49867	443	192.168.2.3	142.251.143.67
Nov 29, 2022 16:33:57.478480101 CET	443	49867	142.251.143.67	192.168.2.3
Nov 29, 2022 16:33:57.478576899 CET	49867	443	192.168.2.3	142.251.143.67
Nov 29, 2022 16:33:57.478982925 CET	49867	443	192.168.2.3	142.251.143.67
Nov 29, 2022 16:33:57.479010105 CET	443	49867	142.251.143.67	192.168.2.3
Nov 29, 2022 16:33:57.553626060 CET	443	49867	142.251.143.67	192.168.2.3
Nov 29, 2022 16:33:57.554073095 CET	49867	443	192.168.2.3	142.251.143.67
Nov 29, 2022 16:33:57.554092884 CET	443	49867	142.251.143.67	192.168.2.3
Nov 29, 2022 16:33:57.554522991 CET	443	49867	142.251.143.67	192.168.2.3
Nov 29, 2022 16:33:57.554990053 CET	49867	443	192.168.2.3	142.251.143.67
Nov 29, 2022 16:33:57.555006981 CET	443	49867	142.251.143.67	192.168.2.3
Nov 29, 2022 16:33:57.555087090 CET	443	49867	142.251.143.67	192.168.2.3
Nov 29, 2022 16:33:57.555138111 CET	49867	443	192.168.2.3	142.251.143.67
Nov 29, 2022 16:33:57.555145025 CET	443	49867	142.251.143.67	192.168.2.3
Nov 29, 2022 16:33:57.555201054 CET	49867	443	192.168.2.3	142.251.143.67
Nov 29, 2022 16:33:57.555211067 CET	443	49867	142.251.143.67	192.168.2.3
Nov 29, 2022 16:33:57.633219957 CET	443	49867	142.251.143.67	192.168.2.3
Nov 29, 2022 16:33:57.633326054 CET	443	49867	142.251.143.67	192.168.2.3
Nov 29, 2022 16:33:57.633384943 CET	49867	443	192.168.2.3	142.251.143.67
Nov 29, 2022 16:33:57.639285088 CET	49867	443	192.168.2.3	142.251.143.67
Nov 29, 2022 16:33:57.639313936 CET	443	49867	142.251.143.67	192.168.2.3
Nov 29, 2022 16:33:58.466073036 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:58.466110945 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:58.466173887 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:58.466304064 CET	49840	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:58.466331959 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:58.466430902 CET	49840	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:59.444690943 CET	443	49842	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:59.444724083 CET	443	49842	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:59.444854021 CET	443	49842	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:59.444905996 CET	443	49842	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:59.445053101 CET	49842	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:59.445053101 CET	49842	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:59.445053101 CET	49842	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:59.448010921 CET	49842	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:59.448057890 CET	443	49842	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:59.455437899 CET	49870	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:59.455522060 CET	443	49870	154.211.96.136	192.168.2.3
Nov 29, 2022 16:33:59.455661058 CET	49870	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:59.455955029 CET	49870	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:33:59.455979109 CET	443	49870	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:00.418368101 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:00.418400049 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:00.418473959 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:00.418535948 CET	49840	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:00.418556929 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:00.418622971 CET	49840	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:00.418632984 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:00.418699980 CET	49840	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:00.419301033 CET	49840	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:00.419329882 CET	443	49840	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:00.427851915 CET	49871	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:00.427932024 CET	443	49871	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:00.428122044 CET	49871	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:00.428499937 CET	49871	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:00.428531885 CET	443	49871	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:00.541155100 CET	49872	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:00.541218042 CET	443	49872	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:00.541368008 CET	49872	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:00.542562962 CET	49872	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:00.542623043 CET	443	49872	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:00.556413889 CET	443	49870	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:00.562952042 CET	49870	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:00.563000917 CET	443	49870	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:00.563810110 CET	443	49870	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:00.604381084 CET	49870	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:00.607116938 CET	49870	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:00.607136011 CET	443	49870	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:00.607558012 CET	443	49870	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:00.609167099 CET	49870	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:00.609229088 CET	443	49870	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:00.650347948 CET	49873	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:00.650407076 CET	443	49873	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:00.650537014 CET	49873	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:00.651103973 CET	49874	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:00.651184082 CET	443	49874	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:00.651293039 CET	49874	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:00.651648045 CET	49875	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:00.651705027 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:00.651810884 CET	49875	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:00.652797937 CET	49873	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:00.652802944 CET	49874	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:00.652854919 CET	443	49873	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:00.652868986 CET	443	49874	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:00.653031111 CET	49875	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:00.653062105 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:01.162671089 CET	443	49871	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:01.163260937 CET	49871	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:01.163284063 CET	443	49871	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:01.164120913 CET	443	49871	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:01.164832115 CET	49871	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:01.164846897 CET	443	49871	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:01.164983988 CET	443	49871	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:01.165088892 CET	49871	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:01.165102959 CET	443	49871	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:01.405307055 CET	443	49874	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:01.409879923 CET	49874	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:01.409938097 CET	443	49874	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:01.412874937 CET	443	49874	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:01.412998915 CET	49874	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:01.422733068 CET	443	49873	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:01.433285952 CET	49874	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:01.433366060 CET	443	49874	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:01.433670998 CET	443	49874	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:01.436243057 CET	49873	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:01.436284065 CET	443	49873	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:01.437520981 CET	443	49873	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:01.450047970 CET	49873	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:01.450107098 CET	443	49873	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:01.450203896 CET	49874	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:01.450288057 CET	443	49874	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:01.450413942 CET	443	49873	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:01.450459957 CET	49873	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:01.450476885 CET	443	49873	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:01.490499973 CET	49873	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:01.492543936 CET	49874	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:01.963347912 CET	443	49870	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:01.963423014 CET	443	49870	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:01.963447094 CET	443	49870	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:01.963496923 CET	443	49870	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:01.963579893 CET	443	49870	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:01.963629961 CET	49870	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:01.963629961 CET	49870	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:01.963629961 CET	49870	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:01.963637114 CET	443	49870	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:01.963745117 CET	49870	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:01.978018999 CET	49870	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:01.978085041 CET	443	49870	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:01.978758097 CET	49882	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:01.978832960 CET	443	49882	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:01.978943110 CET	49882	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:01.979674101 CET	49882	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:01.979710102 CET	443	49882	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:02.106025934 CET	443	49874	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:02.106174946 CET	443	49874	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:02.106333017 CET	49874	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:02.126955986 CET	49874	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:02.127007008 CET	443	49874	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:02.127660036 CET	49883	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:02.127737999 CET	443	49883	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:02.127840042 CET	49883	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:02.128597021 CET	49883	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:02.128628016 CET	443	49883	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:02.133980036 CET	443	49873	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:02.134074926 CET	443	49873	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:02.134206057 CET	443	49873	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:02.134213924 CET	49873	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:02.134274960 CET	49873	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:02.136111021 CET	49873	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:02.136157036 CET	443	49873	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:02.136605978 CET	49884	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:02.136660099 CET	443	49884	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:02.136759996 CET	49884	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:02.137423992 CET	49884	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:02.137445927 CET	443	49884	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:02.216172934 CET	443	49871	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:02.216234922 CET	443	49871	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:02.216274977 CET	443	49871	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:02.216339111 CET	49871	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:02.216362953 CET	443	49871	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:02.216382980 CET	49871	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:02.216424942 CET	49871	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:02.860970974 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:02.861351967 CET	49875	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:02.861383915 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:02.863652945 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:02.863748074 CET	49875	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:02.864252090 CET	49875	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:02.864268064 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:02.864388943 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:02.864768982 CET	49875	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:02.864788055 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:02.869703054 CET	443	49883	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:02.869990110 CET	49883	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:02.870028973 CET	443	49883	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:02.871110916 CET	443	49883	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:02.871520996 CET	49883	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:02.871551991 CET	443	49883	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:02.871728897 CET	443	49883	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:02.871984005 CET	49883	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:02.872009993 CET	443	49883	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:02.905550957 CET	49875	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:03.142960072 CET	443	49882	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:03.145088911 CET	49882	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:03.145114899 CET	443	49882	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:03.145718098 CET	443	49882	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:03.146629095 CET	49882	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:03.146650076 CET	443	49882	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:03.146756887 CET	443	49882	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:03.146830082 CET	49882	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:03.146845102 CET	443	49882	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:03.485151052 CET	49888	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:03.485209942 CET	443	49888	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:03.485332012 CET	49888	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:03.485546112 CET	49889	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:03.485598087 CET	443	49889	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:03.485692978 CET	49889	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:03.489026070 CET	49888	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:03.489063978 CET	443	49888	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:03.489125013 CET	49889	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:03.489161015 CET	443	49889	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:03.612874031 CET	443	49883	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:03.612926006 CET	443	49883	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:03.613042116 CET	443	49883	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:03.613080025 CET	49883	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:03.613137960 CET	49883	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:03.638751030 CET	49883	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:03.638811111 CET	443	49883	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:03.639498949 CET	49890	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:03.639569998 CET	443	49890	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:03.639707088 CET	49890	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:03.640711069 CET	49890	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:03.640742064 CET	443	49890	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:03.659658909 CET	443	49871	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:03.659698963 CET	443	49871	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:03.659766912 CET	49871	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:03.659806967 CET	443	49871	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:03.659836054 CET	49871	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:03.659849882 CET	443	49871	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:03.659904957 CET	49871	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:03.659921885 CET	49871	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:03.862205982 CET	443	49884	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:03.863805056 CET	49884	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:03.863837004 CET	443	49884	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:03.866909981 CET	443	49884	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:03.867080927 CET	49884	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:03.867572069 CET	49884	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:03.867594004 CET	443	49884	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:03.867939949 CET	49884	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:03.867940903 CET	443	49884	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:03.867973089 CET	443	49884	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:03.908689022 CET	49884	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:03.908720970 CET	443	49884	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:03.950740099 CET	49884	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:04.002370119 CET	443	49871	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:04.002403021 CET	443	49871	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:04.002551079 CET	443	49871	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:04.002605915 CET	49871	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:04.002661943 CET	443	49871	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:04.002706051 CET	49871	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:04.002744913 CET	49871	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:04.080460072 CET	443	49872	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:04.081161976 CET	49872	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:04.081204891 CET	443	49872	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:04.082482100 CET	443	49872	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:04.082792997 CET	49872	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:04.083457947 CET	49872	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:04.083492994 CET	443	49872	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:04.083641052 CET	443	49872	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:04.083811045 CET	49872	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:04.083833933 CET	443	49872	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:04.124811888 CET	49872	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:04.222206116 CET	443	49889	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:04.222563982 CET	49889	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:04.268198967 CET	49889	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:04.268238068 CET	443	49889	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:04.269011974 CET	443	49889	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:04.269179106 CET	49889	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:04.270303965 CET	49889	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:04.270325899 CET	443	49889	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:04.340863943 CET	443	49890	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:04.341344118 CET	49890	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:04.341398001 CET	443	49890	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:04.342179060 CET	443	49890	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:04.342910051 CET	49890	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:04.342972040 CET	443	49890	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:04.343080044 CET	49890	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:04.343096972 CET	443	49890	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:04.343144894 CET	443	49890	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:04.383774996 CET	49890	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:04.764728069 CET	443	49872	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:04.764785051 CET	443	49872	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:04.764867067 CET	49872	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:04.764910936 CET	443	49872	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:04.767713070 CET	49872	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:04.767849922 CET	443	49872	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:04.767937899 CET	49872	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:04.768423080 CET	49892	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:04.768481970 CET	443	49892	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:04.768595934 CET	49892	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:04.769527912 CET	49892	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:04.769561052 CET	443	49892	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:04.886193037 CET	443	49882	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:04.886250973 CET	443	49882	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:04.886291981 CET	443	49882	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:04.886368036 CET	49882	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:04.886394978 CET	443	49882	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:04.886425018 CET	49882	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:04.886456013 CET	49882	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:04.953309059 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:04.953377008 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:04.953398943 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:04.953434944 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:04.953567982 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:04.953576088 CET	49875	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:04.953577042 CET	49875	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:04.953629017 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:04.953685045 CET	49875	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:04.953726053 CET	49875	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:05.538132906 CET	443	49892	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:05.538451910 CET	49892	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:05.538475037 CET	443	49892	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:05.539545059 CET	443	49892	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:05.539987087 CET	49892	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:05.540002108 CET	443	49892	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:05.540100098 CET	443	49892	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:05.540386915 CET	49892	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:05.540405035 CET	443	49892	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:05.602354050 CET	443	49884	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:05.602385998 CET	443	49884	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:05.602394104 CET	443	49884	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:05.602473974 CET	49884	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:05.602490902 CET	443	49884	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:05.602531910 CET	443	49884	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:05.602550983 CET	443	49884	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:05.602575064 CET	443	49884	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:05.602590084 CET	49884	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:05.602590084 CET	49884	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:05.602602959 CET	49884	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:05.602633953 CET	49884	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:05.644587994 CET	443	49888	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:05.644787073 CET	49888	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:05.648498058 CET	49888	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:05.648525953 CET	443	49888	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:05.648837090 CET	443	49888	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:05.648938894 CET	49888	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:05.649333954 CET	49888	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:05.649344921 CET	443	49888	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:05.991466999 CET	443	49889	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:05.991527081 CET	443	49889	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:05.991566896 CET	443	49889	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:05.991636992 CET	49889	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:05.991693974 CET	49889	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:05.991693974 CET	49889	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:05.991719007 CET	443	49889	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:05.991799116 CET	49889	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:06.327919006 CET	443	49882	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:06.327950954 CET	443	49882	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:06.328058958 CET	49882	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:06.328123093 CET	443	49882	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:06.328166962 CET	443	49882	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:06.328218937 CET	49882	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:06.328244925 CET	49882	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:06.330887079 CET	443	49890	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:06.330943108 CET	443	49890	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:06.330960989 CET	443	49890	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:06.330996037 CET	443	49890	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:06.331058025 CET	443	49890	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:06.331062078 CET	49890	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:06.331123114 CET	443	49890	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:06.331162930 CET	49890	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:06.331162930 CET	49890	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:06.331198931 CET	49890	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:06.349848032 CET	443	49889	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:06.349875927 CET	443	49889	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:06.349992990 CET	443	49889	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:06.350003004 CET	49889	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:06.350045919 CET	443	49889	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:06.350081921 CET	49889	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:06.350121021 CET	49889	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:06.690505981 CET	443	49889	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:06.690535069 CET	443	49889	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:06.690598011 CET	443	49889	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:06.690692902 CET	49889	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:06.690706015 CET	443	49889	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:06.690746069 CET	49889	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:06.690804005 CET	49889	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:06.693572998 CET	49889	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:06.693608046 CET	443	49889	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:06.695347071 CET	49898	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:06.695425034 CET	443	49898	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:06.695569038 CET	49898	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:06.696332932 CET	49898	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:06.696373940 CET	443	49898	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:06.742194891 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:06.742216110 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:06.742258072 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:06.742352009 CET	49875	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:06.742398977 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:06.742430925 CET	49875	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:06.742491961 CET	49875	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:06.749106884 CET	443	49888	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:06.749170065 CET	443	49888	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:06.749259949 CET	49888	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:06.749284983 CET	443	49888	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:06.749305010 CET	49888	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:06.749629021 CET	49888	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:06.752979994 CET	49888	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:06.753019094 CET	443	49888	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:06.753434896 CET	49899	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:06.753493071 CET	443	49899	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:06.753612041 CET	49899	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:06.753850937 CET	49899	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:06.753884077 CET	443	49899	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:06.995898008 CET	443	49884	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:06.995928049 CET	443	49884	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:06.996056080 CET	443	49884	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:06.996150970 CET	49884	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:06.996151924 CET	49884	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:06.996198893 CET	443	49884	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:06.996289968 CET	49884	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:07.012042999 CET	443	49882	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:07.012110949 CET	443	49882	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:07.012181044 CET	49882	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:07.012200117 CET	443	49882	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:07.012320042 CET	49882	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:07.012339115 CET	443	49882	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:07.012422085 CET	443	49882	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:07.012478113 CET	49882	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:07.012578964 CET	49882	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:07.015574932 CET	49882	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:07.015611887 CET	443	49882	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:07.016823053 CET	49900	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:07.016880035 CET	443	49900	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:07.017071962 CET	49900	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:07.022664070 CET	49900	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:07.022727966 CET	443	49900	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:07.181519985 CET	443	49871	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:07.181540966 CET	443	49871	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:07.181663036 CET	443	49871	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:07.181669950 CET	49871	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:07.181723118 CET	443	49871	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:07.181770086 CET	49871	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:07.181807041 CET	49871	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:07.402060032 CET	443	49898	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:07.402220964 CET	49898	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:07.403068066 CET	49898	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:07.403084040 CET	443	49898	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:07.405616999 CET	49898	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:07.405627012 CET	443	49898	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:07.488615036 CET	443	49899	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:07.488943100 CET	49899	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:07.489465952 CET	49899	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:07.489495993 CET	443	49899	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:07.491336107 CET	49899	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:07.491355896 CET	443	49899	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:07.731013060 CET	443	49890	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:07.731038094 CET	443	49890	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:07.731203079 CET	443	49890	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:07.731311083 CET	49890	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:07.731311083 CET	49890	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:07.731363058 CET	443	49890	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:07.731436014 CET	49890	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:08.122884035 CET	443	49892	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:08.122975111 CET	443	49892	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:08.123087883 CET	443	49892	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:08.123297930 CET	49892	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:08.123349905 CET	443	49892	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:08.123385906 CET	49892	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:08.123475075 CET	49892	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:08.231138945 CET	443	49899	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:08.231200933 CET	443	49899	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:08.231326103 CET	443	49899	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:08.231393099 CET	49899	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:08.231539965 CET	49899	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:08.241662979 CET	49899	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:08.241727114 CET	443	49899	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:08.243012905 CET	49902	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:08.243062019 CET	443	49902	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:08.243194103 CET	49902	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:08.260360956 CET	49902	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:08.260412931 CET	443	49902	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:08.466320992 CET	443	49890	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:08.466350079 CET	443	49890	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:08.466494083 CET	443	49890	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:08.466573000 CET	49890	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:08.466629982 CET	443	49890	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:08.466666937 CET	49890	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:08.466711998 CET	49890	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:08.794619083 CET	443	49898	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:08.794687033 CET	443	49898	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:08.794790030 CET	443	49898	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:08.794970989 CET	49898	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:08.795057058 CET	49898	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:08.795084000 CET	443	49898	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:08.795203924 CET	49898	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:08.849440098 CET	443	49871	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:08.849471092 CET	443	49871	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:08.849565029 CET	443	49871	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:08.849695921 CET	49871	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:08.849749088 CET	443	49871	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:08.849831104 CET	49871	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:08.849832058 CET	49871	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:08.871630907 CET	443	49892	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:08.871659040 CET	443	49892	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:08.871747971 CET	443	49892	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:08.871778965 CET	49892	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:08.871826887 CET	443	49892	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:08.871866941 CET	49892	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:08.871901035 CET	49892	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:08.968270063 CET	443	49902	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:08.968414068 CET	49902	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:08.969098091 CET	49902	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:08.969137907 CET	443	49902	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:08.972090006 CET	49902	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:08.972105980 CET	443	49902	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:09.196783066 CET	443	49900	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:09.197257996 CET	49900	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:09.197303057 CET	443	49900	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:09.198014021 CET	443	49900	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:09.198533058 CET	49900	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:09.198594093 CET	443	49900	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:09.198683977 CET	49900	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:09.198698044 CET	443	49900	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:09.198721886 CET	443	49900	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:09.240170002 CET	49900	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:09.458904028 CET	443	49890	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:09.458957911 CET	443	49890	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:09.459003925 CET	443	49890	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:09.459095001 CET	49890	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:09.459150076 CET	443	49890	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:09.459182978 CET	443	49890	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:09.459208012 CET	49890	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:09.459249973 CET	49890	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:09.459970951 CET	49890	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:09.460004091 CET	443	49890	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:09.490875006 CET	443	49898	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:09.490909100 CET	443	49898	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:09.490956068 CET	443	49898	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:09.490976095 CET	49898	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:09.491014004 CET	443	49898	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:09.491034031 CET	49898	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:09.491043091 CET	443	49898	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:09.491070986 CET	49898	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:09.491094112 CET	49898	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:09.588807106 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:09.588829041 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:09.588866949 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:09.588898897 CET	49875	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:09.588929892 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:09.588944912 CET	49875	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:09.588996887 CET	49875	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:09.615417957 CET	443	49892	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:09.615438938 CET	443	49892	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:09.615539074 CET	443	49892	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:09.615583897 CET	49892	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:09.615612030 CET	443	49892	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:09.615638971 CET	49892	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:09.615683079 CET	49892	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:09.782718897 CET	443	49884	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:09.782748938 CET	443	49884	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:09.782830954 CET	49884	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:09.782866955 CET	443	49884	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:09.782895088 CET	49884	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:09.782910109 CET	443	49884	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:09.782934904 CET	49884	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:09.782984972 CET	49884	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:09.992624998 CET	443	49902	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:09.992697954 CET	443	49902	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:09.992759943 CET	443	49902	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:09.992943048 CET	49902	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:09.992943048 CET	49902	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:09.992981911 CET	443	49902	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:09.993053913 CET	49902	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:10.340621948 CET	443	49902	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:10.340651989 CET	443	49902	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:10.340691090 CET	443	49902	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:10.340764046 CET	49902	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:10.340802908 CET	443	49902	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:10.340821028 CET	49902	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:10.340863943 CET	49902	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:10.714459896 CET	443	49892	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:10.714495897 CET	443	49892	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:10.714607954 CET	443	49892	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:10.714739084 CET	49892	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:10.714771032 CET	443	49892	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:10.714793921 CET	49892	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:10.714802980 CET	443	49892	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:10.714869022 CET	49892	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:10.714936018 CET	49892	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:10.716136932 CET	49892	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:10.716161966 CET	443	49892	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:10.781692982 CET	443	49871	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:10.781723022 CET	443	49871	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:10.781861067 CET	49871	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:10.781886101 CET	443	49871	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:10.781989098 CET	443	49871	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:10.782035112 CET	49871	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:10.782092094 CET	49871	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:10.828519106 CET	443	49884	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:10.828551054 CET	443	49884	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:10.828721046 CET	443	49884	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:10.828783989 CET	49884	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:10.828783989 CET	49884	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:10.828833103 CET	49884	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:10.830140114 CET	49884	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:10.830173969 CET	443	49884	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:10.961647034 CET	443	49900	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:10.961780071 CET	443	49900	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:10.961839914 CET	443	49900	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:10.961929083 CET	49900	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:10.961935997 CET	443	49900	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:10.961967945 CET	49900	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:10.962006092 CET	443	49900	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:10.962018967 CET	443	49900	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:10.962126970 CET	49900	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:10.962157011 CET	443	49900	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:10.962376118 CET	49900	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:10.962379932 CET	443	49900	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:10.962475061 CET	49900	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:10.965918064 CET	49900	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:10.965955973 CET	443	49900	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:10.965982914 CET	49900	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:10.969086885 CET	49900	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:11.276263952 CET	443	49898	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:11.276295900 CET	443	49898	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:11.276395082 CET	443	49898	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:11.276566982 CET	49898	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:11.276624918 CET	443	49898	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:11.276686907 CET	49898	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:11.276709080 CET	49898	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:11.400465012 CET	443	49902	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:11.400492907 CET	443	49902	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:11.400612116 CET	443	49902	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:11.400729895 CET	49902	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:11.400785923 CET	443	49902	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:11.400816917 CET	49902	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:11.400861979 CET	49902	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:12.045547009 CET	443	49871	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:12.045567989 CET	443	49871	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:12.045737982 CET	443	49871	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:12.045815945 CET	49871	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:12.045876026 CET	443	49871	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:12.045958042 CET	49871	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:12.045958042 CET	49871	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:12.102948904 CET	443	49898	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:12.102979898 CET	443	49898	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:12.103064060 CET	443	49898	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:12.103146076 CET	49898	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:12.103146076 CET	49898	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:12.103187084 CET	443	49898	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:12.103216887 CET	49898	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:12.103235960 CET	443	49898	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:12.103254080 CET	49898	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:12.103363991 CET	49898	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:12.104624987 CET	49898	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:12.104650021 CET	443	49898	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:12.105386972 CET	49909	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:12.105449915 CET	443	49909	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:12.105564117 CET	49909	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:12.106245995 CET	49909	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:12.106277943 CET	443	49909	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:12.388895988 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:12.388926029 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:12.388995886 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:12.389183998 CET	49875	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:12.389218092 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:12.389250040 CET	49875	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:12.389331102 CET	49875	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:12.818434954 CET	443	49902	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:12.818464994 CET	443	49902	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:12.818511963 CET	443	49902	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:12.818648100 CET	443	49902	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:12.818676949 CET	49902	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:12.818777084 CET	49902	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:12.821180105 CET	49902	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:12.821216106 CET	443	49902	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:12.825617075 CET	49910	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:12.825685978 CET	443	49910	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:12.825855970 CET	49910	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:12.839781046 CET	49910	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:12.839819908 CET	443	49910	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:13.124371052 CET	443	49871	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:13.124396086 CET	443	49871	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:13.124478102 CET	443	49871	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:13.124489069 CET	49871	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:13.124521017 CET	443	49871	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:13.124556065 CET	49871	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:13.124567032 CET	49871	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:13.281436920 CET	443	49909	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:13.281761885 CET	49909	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:13.282200098 CET	49909	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:13.282226086 CET	443	49909	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:13.283983946 CET	49909	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:13.283998013 CET	443	49909	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:14.038661957 CET	443	49910	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:14.041450024 CET	49910	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:14.060673952 CET	443	49871	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:14.060872078 CET	443	49871	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:14.060921907 CET	49871	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:14.060983896 CET	49871	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:14.073112965 CET	49910	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:14.073157072 CET	443	49910	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:14.074909925 CET	49910	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:14.074934959 CET	443	49910	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:14.075498104 CET	49871	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:14.075534105 CET	443	49871	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:14.373389959 CET	443	49909	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:14.373450041 CET	443	49909	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:14.373538017 CET	443	49909	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:14.373569965 CET	49909	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:14.373636961 CET	49909	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:14.373660088 CET	443	49909	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:14.373723984 CET	49909	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:14.373744965 CET	49909	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:15.598079920 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:15.598109961 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:15.598155022 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:15.598232985 CET	49875	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:15.598233938 CET	49875	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:15.598278999 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:15.598310947 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:15.598359108 CET	49875	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:16.146509886 CET	443	49909	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:16.146541119 CET	443	49909	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:16.146615028 CET	443	49909	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:16.146701097 CET	49909	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:16.146754026 CET	443	49909	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:16.146812916 CET	49909	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:16.146827936 CET	443	49909	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:16.146853924 CET	49909	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:16.146903038 CET	49909	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:16.169352055 CET	443	49910	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:16.169411898 CET	443	49910	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:16.169480085 CET	49910	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:16.169506073 CET	443	49910	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:16.169528008 CET	443	49910	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:16.169564962 CET	49910	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:16.169579983 CET	443	49910	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:16.169629097 CET	49910	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:16.169666052 CET	49910	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:18.176263094 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:18.176291943 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:18.176390886 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:18.176465988 CET	49875	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:18.176502943 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:18.176543951 CET	49875	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:18.176590919 CET	49875	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:18.381648064 CET	443	49909	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:18.381675005 CET	443	49909	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:18.381766081 CET	443	49909	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:18.381846905 CET	49909	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:18.381886959 CET	443	49909	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:18.381942034 CET	49909	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:18.381942034 CET	49909	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:19.102899075 CET	443	49910	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:19.102927923 CET	443	49910	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:19.103080034 CET	443	49910	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:19.103107929 CET	49910	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:19.103141069 CET	443	49910	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:19.103199959 CET	49910	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:19.103245974 CET	49910	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:20.075066090 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:20.075093985 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:20.075134993 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:20.075182915 CET	49875	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:20.075222969 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:20.075242043 CET	49875	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:20.075279951 CET	49875	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:20.160499096 CET	443	49909	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:20.160614014 CET	49909	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:20.160629988 CET	443	49909	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:20.160682917 CET	49909	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:20.168765068 CET	49909	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:20.168765068 CET	49909	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:20.168792963 CET	443	49909	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:20.168853998 CET	49909	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:20.169504881 CET	49923	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:20.169575930 CET	443	49923	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:20.169687986 CET	49923	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:20.170073986 CET	49923	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:20.170105934 CET	443	49923	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:21.471271992 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:21.471287966 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:21.471337080 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:21.471457005 CET	49875	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:21.471457005 CET	49875	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:21.471483946 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:21.471797943 CET	49875	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:21.974314928 CET	443	49923	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:21.978780031 CET	49923	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:21.978780985 CET	49923	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:21.978838921 CET	443	49923	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:21.981991053 CET	49923	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:21.982029915 CET	443	49923	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:22.005836010 CET	443	49910	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:22.005860090 CET	443	49910	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:22.005991936 CET	443	49910	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:22.006071091 CET	49910	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:22.006095886 CET	443	49910	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:22.006202936 CET	49910	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:22.009980917 CET	49910	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:22.497380018 CET	49831	80	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:22.806313992 CET	49830	80	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:22.866055012 CET	80	49831	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:23.066482067 CET	443	49923	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:23.066639900 CET	49923	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:23.066646099 CET	443	49923	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:23.067065001 CET	49923	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:23.070348978 CET	49923	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:23.070385933 CET	443	49923	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:23.071088076 CET	49930	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:23.071146011 CET	443	49930	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:23.071294069 CET	49930	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:23.076597929 CET	49930	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:23.076630116 CET	443	49930	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:23.172169924 CET	80	49830	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:23.447518110 CET	443	49910	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:23.447546959 CET	443	49910	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:23.447650909 CET	49910	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:23.447650909 CET	49910	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:23.447680950 CET	443	49910	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:23.447705984 CET	443	49910	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:23.447745085 CET	49910	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:23.447767973 CET	49910	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:23.448261023 CET	49829	80	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:23.797312975 CET	80	49829	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:23.916510105 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:23.916532040 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:23.916615963 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:23.916851044 CET	49875	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:23.916851044 CET	49875	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:23.916887999 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:23.916976929 CET	49875	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:25.186086893 CET	443	49910	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:25.186120987 CET	443	49910	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:25.186361074 CET	443	49910	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:25.186387062 CET	49910	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:25.186423063 CET	443	49910	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:25.186470032 CET	49910	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:25.186511040 CET	49910	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:25.235619068 CET	443	49930	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:25.235868931 CET	49930	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:25.236394882 CET	49930	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:25.236412048 CET	443	49930	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:25.238709927 CET	49930	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:25.238749027 CET	443	49930	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:26.345758915 CET	443	49930	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:26.345813036 CET	443	49930	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:26.345890045 CET	49930	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:26.345890045 CET	49930	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:26.345921040 CET	443	49930	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:26.346015930 CET	49930	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:26.346030951 CET	443	49930	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:26.346081018 CET	49930	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:26.346143961 CET	443	49930	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:26.346203089 CET	49930	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:26.350028038 CET	49930	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:26.350059986 CET	443	49930	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:26.475564957 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:26.475594044 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:26.475636959 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:26.475689888 CET	49875	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:26.475724936 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:26.475759029 CET	49875	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:26.475841999 CET	49875	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:28.463069916 CET	443	49910	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:28.463099957 CET	443	49910	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:28.463219881 CET	49910	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:28.463239908 CET	443	49910	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:28.463284016 CET	443	49910	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:28.463360071 CET	49910	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:28.463406086 CET	49910	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:28.650778055 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:28.650805950 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:28.650850058 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:28.650981903 CET	49875	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:28.651021004 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:28.651083946 CET	49875	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:28.651132107 CET	49875	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:29.921336889 CET	443	49910	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:29.921365023 CET	443	49910	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:29.921473026 CET	49910	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:29.921504974 CET	443	49910	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:29.921586037 CET	443	49910	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:29.921643972 CET	49910	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:29.921703100 CET	49910	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:31.040889025 CET	443	49910	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:31.040913105 CET	443	49910	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:31.041011095 CET	443	49910	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:31.041053057 CET	49910	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:31.041078091 CET	443	49910	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:31.041130066 CET	49910	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:31.041182041 CET	49910	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:31.041196108 CET	443	49910	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:31.041296005 CET	443	49910	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:31.041384935 CET	49910	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:31.043979883 CET	49910	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:31.044013977 CET	443	49910	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:31.949644089 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:31.949678898 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:31.949786901 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:31.949831009 CET	49875	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:31.949862957 CET	443	49875	154.211.96.136	192.168.2.3
Nov 29, 2022 16:34:31.950014114 CET	49875	443	192.168.2.3	154.211.96.136
Nov 29, 2022 16:34:31.950014114 CET	49875	443	192.168.2.3	154.211.96.136

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 29, 2022 16:32:24.675823927 CET	62586	53	192.168.2.3	1.1.1.1
Nov 29, 2022 16:32:24.676929951 CET	64208	53	192.168.2.3	1.1.1.1
Nov 29, 2022 16:32:24.677033901 CET	49405	53	192.168.2.3	1.1.1.1
Nov 29, 2022 16:32:24.694432974 CET	53	62586	1.1.1.1	192.168.2.3
Nov 29, 2022 16:32:24.695607901 CET	53	49405	1.1.1.1	192.168.2.3
Nov 29, 2022 16:32:24.850765944 CET	53	64208	1.1.1.1	192.168.2.3
Nov 29, 2022 16:32:28.347985029 CET	58968	53	192.168.2.3	1.1.1.1
Nov 29, 2022 16:32:28.365712881 CET	53	58968	1.1.1.1	192.168.2.3
Nov 29, 2022 16:32:28.383533955 CET	60752	53	192.168.2.3	1.1.1.1
Nov 29, 2022 16:32:28.401398897 CET	53	60752	1.1.1.1	192.168.2.3
Nov 29, 2022 16:33:07.758765936 CET	49753	53	192.168.2.3	1.1.1.1
Nov 29, 2022 16:33:08.083023071 CET	53	49753	1.1.1.1	192.168.2.3
Nov 29, 2022 16:33:08.126359940 CET	53744	53	192.168.2.3	1.1.1.1
Nov 29, 2022 16:33:08.147835970 CET	53	53744	1.1.1.1	192.168.2.3
Nov 29, 2022 16:33:09.346384048 CET	54957	53	192.168.2.3	1.1.1.1
Nov 29, 2022 16:33:09.405230045 CET	53	54957	1.1.1.1	192.168.2.3
Nov 29, 2022 16:33:11.070312023 CET	62677	53	192.168.2.3	1.1.1.1
Nov 29, 2022 16:33:11.638418913 CET	53	62677	1.1.1.1	192.168.2.3
Nov 29, 2022 16:33:14.836524010 CET	62507	53	192.168.2.3	1.1.1.1
Nov 29, 2022 16:33:14.893490076 CET	53	62507	1.1.1.1	192.168.2.3
Nov 29, 2022 16:33:19.956929922 CET	57517	53	192.168.2.3	1.1.1.1
Nov 29, 2022 16:33:20.132723093 CET	53	57517	1.1.1.1	192.168.2.3
Nov 29, 2022 16:33:23.238204956 CET	64040	53	192.168.2.3	1.1.1.1
Nov 29, 2022 16:33:23.407876968 CET	53	64040	1.1.1.1	192.168.2.3
Nov 29, 2022 16:33:23.476464033 CET	55241	53	192.168.2.3	1.1.1.1
Nov 29, 2022 16:33:23.646177053 CET	53	55241	1.1.1.1	192.168.2.3
Nov 29, 2022 16:33:24.804167032 CET	52387	53	192.168.2.3	1.1.1.1
Nov 29, 2022 16:33:24.834027052 CET	53	52387	1.1.1.1	192.168.2.3
Nov 29, 2022 16:33:28.402385950 CET	51807	53	192.168.2.3	1.1.1.1
Nov 29, 2022 16:33:28.420521021 CET	53	51807	1.1.1.1	192.168.2.3
Nov 29, 2022 16:33:28.424760103 CET	60310	53	192.168.2.3	1.1.1.1
Nov 29, 2022 16:33:28.442527056 CET	53	60310	1.1.1.1	192.168.2.3
Nov 29, 2022 16:33:29.899596930 CET	57646	53	192.168.2.3	1.1.1.1
Nov 29, 2022 16:33:29.962117910 CET	53	57646	1.1.1.1	192.168.2.3
Nov 29, 2022 16:33:33.938812017 CET	54880	53	192.168.2.3	1.1.1.1
Nov 29, 2022 16:33:34.335639954 CET	53	54880	1.1.1.1	192.168.2.3
Nov 29, 2022 16:33:36.911083937 CET	62304	53	192.168.2.3	1.1.1.1
Nov 29, 2022 16:33:37.082370996 CET	53	62304	1.1.1.1	192.168.2.3
Nov 29, 2022 16:33:50.214030027 CET	61115	53	192.168.2.3	1.1.1.1
Nov 29, 2022 16:33:50.270365000 CET	53	61115	1.1.1.1	192.168.2.3
Nov 29, 2022 16:33:55.175709009 CET	49243	53	192.168.2.3	1.1.1.1
Nov 29, 2022 16:33:55.193550110 CET	53	49243	1.1.1.1	192.168.2.3
Nov 29, 2022 16:33:55.353043079 CET	59424	53	192.168.2.3	1.1.1.1
Nov 29, 2022 16:33:55.353043079 CET	63769	53	192.168.2.3	1.1.1.1
Nov 29, 2022 16:33:55.372543097 CET	53	59424	1.1.1.1	192.168.2.3
Nov 29, 2022 16:33:55.372581959 CET	53	63769	1.1.1.1	192.168.2.3
Nov 29, 2022 16:33:56.519668102 CET	63858	53	192.168.2.3	1.1.1.1
Nov 29, 2022 16:33:56.537300110 CET	53	63858	1.1.1.1	192.168.2.3
Nov 29, 2022 16:34:00.010442972 CET	60408	53	192.168.2.3	1.1.1.1
Nov 29, 2022 16:34:00.185385942 CET	53	60408	1.1.1.1	192.168.2.3
Nov 29, 2022 16:34:03.454722881 CET	50401	53	192.168.2.3	1.1.1.1
Nov 29, 2022 16:34:03.479424953 CET	53	50401	1.1.1.1	192.168.2.3

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 29, 2022 16:32:24.675823927 CET	192.168.2.3	1.1.1.1	0x1946	Standard query (0)	clients2.google.com	A (IP address)	IN (0x0001)	false
Nov 29, 2022 16:32:24.676929951 CET	192.168.2.3	1.1.1.1	0x308e	Standard query (0)	usdtmen.com	A (IP address)	IN (0x0001)	false
Nov 29, 2022 16:32:24.677033901 CET	192.168.2.3	1.1.1.1	0x1a2e	Standard query (0)	accounts.google.com	A (IP address)	IN (0x0001)	false
Nov 29, 2022 16:32:28.347985029 CET	192.168.2.3	1.1.1.1	0xd789	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 29, 2022 16:32:28.383533955 CET	192.168.2.3	1.1.1.1	0x9f1	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 29, 2022 16:33:07.758765936 CET	192.168.2.3	1.1.1.1	0x3fc2	Standard query (0)	www.usdtmen.com	A (IP address)	IN (0x0001)	false
Nov 29, 2022 16:33:08.126359940 CET	192.168.2.3	1.1.1.1	0xce86	Standard query (0)	www.usdtmen.com	A (IP address)	IN (0x0001)	false
Nov 29, 2022 16:33:09.346384048 CET	192.168.2.3	1.1.1.1	0x6284	Standard query (0)	www.usdtmen.com	A (IP address)	IN (0x0001)	false
Nov 29, 2022 16:33:11.070312023 CET	192.168.2.3	1.1.1.1	0xda2d	Standard query (0)	www.usdtmen.com	A (IP address)	IN (0x0001)	false
Nov 29, 2022 16:33:14.836524010 CET	192.168.2.3	1.1.1.1	0x3a39	Standard query (0)	www.usdtmen.com	A (IP address)	IN (0x0001)	false
Nov 29, 2022 16:33:19.956929922 CET	192.168.2.3	1.1.1.1	0xf446	Standard query (0)	www.usdtmen.com	A (IP address)	IN (0x0001)	false
Nov 29, 2022 16:33:23.238204956 CET	192.168.2.3	1.1.1.1	0x2445	Standard query (0)	www.usdtmen.com	A (IP address)	IN (0x0001)	false
Nov 29, 2022 16:33:23.476464033 CET	192.168.2.3	1.1.1.1	0xd13	Standard query (0)	www.usdtmen.com	A (IP address)	IN (0x0001)	false
Nov 29, 2022 16:33:24.804167032 CET	192.168.2.3	1.1.1.1	0x6d02	Standard query (0)	www.usdtmen.com	A (IP address)	IN (0x0001)	false
Nov 29, 2022 16:33:28.402385950 CET	192.168.2.3	1.1.1.1	0xab35	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 29, 2022 16:33:28.424760103 CET	192.168.2.3	1.1.1.1	0xc80a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 29, 2022 16:33:29.899596930 CET	192.168.2.3	1.1.1.1	0x2ce1	Standard query (0)	www.usdtmen.com	A (IP address)	IN (0x0001)	false
Nov 29, 2022 16:33:33.938812017 CET	192.168.2.3	1.1.1.1	0x380d	Standard query (0)	usdtmen.com	A (IP address)	IN (0x0001)	false
Nov 29, 2022 16:33:36.911083937 CET	192.168.2.3	1.1.1.1	0xae51	Standard query (0)	usdtmen.com	A (IP address)	IN (0x0001)	false
Nov 29, 2022 16:33:50.214030027 CET	192.168.2.3	1.1.1.1	0xce88	Standard query (0)	www.usdtmen.com	A (IP address)	IN (0x0001)	false
Nov 29, 2022 16:33:55.175709009 CET	192.168.2.3	1.1.1.1	0x6e2f	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Nov 29, 2022 16:33:55.353043079 CET	192.168.2.3	1.1.1.1	0x3170	Standard query (0)	e2c27.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Nov 29, 2022 16:33:55.353043079 CET	192.168.2.3	1.1.1.1	0x279b	Standard query (0)	beacons2.gvt2.com	A (IP address)	IN (0x0001)	false
Nov 29, 2022 16:33:56.519668102 CET	192.168.2.3	1.1.1.1	0xb794	Standard query (0)	beacons.gvt2.com	A (IP address)	IN (0x0001)	false
Nov 29, 2022 16:34:00.010442972 CET	192.168.2.3	1.1.1.1	0xc869	Standard query (0)	www.usdtmen.com	A (IP address)	IN (0x0001)	false
Nov 29, 2022 16:34:03.454722881 CET	192.168.2.3	1.1.1.1	0x81d6	Standard query (0)	usdtmen.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 29, 2022 16:32:24.694432974 CET	1.1.1.1	192.168.2.3	0x1946	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 29, 2022 16:32:24.694432974 CET	1.1.1.1	192.168.2.3	0x1946	No error (0)	clients.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Nov 29, 2022 16:32:24.695607901 CET	1.1.1.1	192.168.2.3	0x1a2e	No error (0)	accounts.google.com		142.250.186.109	A (IP address)	IN (0x0001)	false
Nov 29, 2022 16:32:24.850765944 CET	1.1.1.1	192.168.2.3	0x308e	No error (0)	usdtmen.com		154.211.96.136	A (IP address)	IN (0x0001)	false
Nov 29, 2022 16:32:28.365712881 CET	1.1.1.1	192.168.2.3	0xd789	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Nov 29, 2022 16:32:28.401398897 CET	1.1.1.1	192.168.2.3	0x9f1	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Nov 29, 2022 16:33:28.420521021 CET	1.1.1.1	192.168.2.3	0xab35	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Nov 29, 2022 16:33:28.442527056 CET	1.1.1.1	192.168.2.3	0xc80a	No error (0)	www.google.com		172.217.18.100	A (IP address)	IN (0x0001)	false
Nov 29, 2022 16:33:34.335639954 CET	1.1.1.1	192.168.2.3	0x380d	No error (0)	usdtmen.com		154.211.96.136	A (IP address)	IN (0x0001)	false
Nov 29, 2022 16:33:37.082370996 CET	1.1.1.1	192.168.2.3	0xae51	No error (0)	usdtmen.com		154.211.96.136	A (IP address)	IN (0x0001)	false
Nov 29, 2022 16:33:55.193550110 CET	1.1.1.1	192.168.2.3	0x6e2f	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 29, 2022 16:33:55.193550110 CET	1.1.1.1	192.168.2.3	0x6e2f	No error (0)	beacons-handoff.gcp.gvt2.com		142.251.143.67	A (IP address)	IN (0x0001)	false
Nov 29, 2022 16:33:55.372543097 CET	1.1.1.1	192.168.2.3	0x3170	No error (0)	e2c27.gcp.gvt2.com		35.227.159.135	A (IP address)	IN (0x0001)	false
Nov 29, 2022 16:33:55.372581959 CET	1.1.1.1	192.168.2.3	0x279b	No error (0)	beacons2.gvt2.com		172.217.13.227	A (IP address)	IN (0x0001)	false
Nov 29, 2022 16:33:56.537300110 CET	1.1.1.1	192.168.2.3	0xb794	No error (0)	beacons.gvt2.com		216.58.212.163	A (IP address)	IN (0x0001)	false
Nov 29, 2022 16:34:03.479424953 CET	1.1.1.1	192.168.2.3	0x81d6	No error (0)	usdtmen.com		154.211.96.136	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

accounts.google.com

clients2.google.com

usdtmen.com

www.google.com

https:

beacons.gcp.gvt2.com

e2c27.gcp.gvt2.com

beacons2.gvt2.com

beacons.gvt2.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.3	49695	142.250.186.109	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.3	49694	142.250.185.206	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
10	192.168.2.3	49739	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
11	192.168.2.3	49740	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
12	192.168.2.3	49741	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
13	192.168.2.3	49743	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
14	192.168.2.3	49744	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
15	192.168.2.3	49745	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
16	192.168.2.3	49746	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
17	192.168.2.3	49747	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
18	192.168.2.3	49748	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
19	192.168.2.3	49750	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.2.3	49696	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
20	192.168.2.3	49751	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
21	192.168.2.3	49753	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
22	192.168.2.3	49754	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
23	192.168.2.3	49756	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
24	192.168.2.3	49757	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
25	192.168.2.3	49759	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
26	192.168.2.3	49779	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
27	192.168.2.3	49781	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
28	192.168.2.3	49788	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
29	192.168.2.3	49789	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	192.168.2.3	49697	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
30	192.168.2.3	49790	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
31	192.168.2.3	49791	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
32	192.168.2.3	49792	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
33	192.168.2.3	49793	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
34	192.168.2.3	49794	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
35	192.168.2.3	49807	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
36	192.168.2.3	49809	172.217.18.100	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
37	192.168.2.3	49816	172.217.18.100	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
38	192.168.2.3	49818	172.217.18.100	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
39	192.168.2.3	49823	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.2.3	49699	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
40	192.168.2.3	49834	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
41	192.168.2.3	49824	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
42	192.168.2.3	49836	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
43	192.168.2.3	49840	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
44	192.168.2.3	49843	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
45	192.168.2.3	49841	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
46	192.168.2.3	49838	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
47	192.168.2.3	49839	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
48	192.168.2.3	49842	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
49	192.168.2.3	49845	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
5	192.168.2.3	49705	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
50	192.168.2.3	49849	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
51	192.168.2.3	49848	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
52	192.168.2.3	49858	142.251.143.67	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
53	192.168.2.3	49860	172.217.13.227	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
54	192.168.2.3	49859	35.227.159.135	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
55	192.168.2.3	49862	172.217.13.227	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
56	192.168.2.3	49863	216.58.212.163	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
57	192.168.2.3	49867	142.251.143.67	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
58	192.168.2.3	49870	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
59	192.168.2.3	49871	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
6	192.168.2.3	49728	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
60	192.168.2.3	49874	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
61	192.168.2.3	49873	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
62	192.168.2.3	49875	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
63	192.168.2.3	49883	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
64	192.168.2.3	49882	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
65	192.168.2.3	49884	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
66	192.168.2.3	49872	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
67	192.168.2.3	49889	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
68	192.168.2.3	49890	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
69	192.168.2.3	49892	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
7	192.168.2.3	49732	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
70	192.168.2.3	49888	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
71	192.168.2.3	49898	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
72	192.168.2.3	49899	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
73	192.168.2.3	49902	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
74	192.168.2.3	49900	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
75	192.168.2.3	49909	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
76	192.168.2.3	49910	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
77	192.168.2.3	49923	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
78	192.168.2.3	49930	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
79	192.168.2.3	49830	154.211.96.136	80	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
Nov 29, 2022 16:33:37.449374914 CET	908	OUT	GET / HTTP/1.1 Host: usdtmen.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
Nov 29, 2022 16:33:37.802022934 CET	958	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Tue, 29 Nov 2022 15:33:37 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Location: https://usdtmen.com/ Strict-Transport-Security: max-age=31536000 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Nov 29, 2022 16:34:22.806313992 CET	9745	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
8	192.168.2.3	49736	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
80	192.168.2.3	49831	154.211.96.136	80	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
Nov 29, 2022 16:34:22.497380018 CET	9745	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
81	192.168.2.3	49829	154.211.96.136	80	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
Nov 29, 2022 16:34:23.448261023 CET	9764	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
9	192.168.2.3	49737	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.3	49695	142.250.186.109	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:32:25 UTC	0	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+620; __Secure-ENID=6.SE=cJKCBuSaL1dV3R8z2Y2al7-m2m5bGA74lqbYYkqC3uy-NtZ1f6n_bCBr25tlnnjvdmLpGQ81ZKzP3Te5vVjpSQjYWCwvlOMApK7tmZNWcORu0p4wniPJGQfTslQNnpQWhG9qkwkEgy49-6UG3UQ1eiUyFolJZWLeUM1p4KvjM9E
2022-11-29 15:32:25 UTC	0	OUT	Data Raw: 20 Data Ascii:
2022-11-29 15:32:25 UTC	2	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: https://www.google.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 29 Nov 2022 15:32:25 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-5l4T5QzseOCGM_r7Ix3SNQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdentityListAccountsHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdentityListAccountsHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/IdentityListAccountsHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-platform=, ch-ua-platform-version= Cross-Origin-Opener-Policy: same-origin Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-11-29 15:32:25 UTC	4	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2022-11-29 15:32:25 UTC	4	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.3	49694	142.250.185.206	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:32:25 UTC	0	OUT	GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=104.0.5112.102&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1 Host: clients2.google.com Connection: keep-alive X-Goog-Update-Interactivity: fg X-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda X-Goog-Update-Updater: chromecrx-104.0.5112.102 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-11-29 15:32:25 UTC	1	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-cD-x_y-54PAO80P4sOMHvg' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 29 Nov 2022 15:32:25 GMT Content-Type: text/xml; charset=UTF-8 X-Daynum: 5811 X-Daystart: 27145 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-11-29 15:32:25 UTC	2	IN	Data Raw: 32 63 39 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 35 38 31 31 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 32 37 31 34 35 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 Data Ascii: 2c9<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="5811" elapsed_seconds="27145"/><app appid="nmmhkkegccagdldgiimedpiccmgmieda" cohort="1::" cohortname=""
2022-11-29 15:32:25 UTC	2	IN	Data Raw: 6d 78 76 59 6e 4d 76 4e 7a 49 30 51 55 46 58 4e 56 39 7a 54 32 52 76 64 55 77 79 4d 45 52 45 53 45 5a 47 56 6d 4a 6e 51 51 2f 31 2e 30 2e 30 2e 36 5f 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 2e 63 72 78 22 20 66 70 3d 22 31 2e 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 Data Ascii: mxvYnMvNzI0QUFXNV9zT2RvdUwyMERESEZGVmJnQQ/1.0.0.6_nmmhkkegccagdldgiimedpiccmgmieda.crx" fp="1.81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" hash_sha256="81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" protected="0" si
2022-11-29 15:32:25 UTC	2	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
10	192.168.2.3	49739	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:32:56 UTC	20	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usdtm&oit=1&cp=5&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swB Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
11	192.168.2.3	49740	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:32:57 UTC	21	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usdtme&oit=1&cp=6&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swB Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-11-29 15:32:57 UTC	21	IN	HTTP/1.1 200 OK Date: Tue, 29 Nov 2022 15:32:57 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-XpZJp3jBawF_SJFdf5oBMg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 BFCache-Opt-In: unload Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: CONSENT=PENDING+644; expires=Thu, 28-Nov-2024 15:32:57 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-11-29 15:32:57 UTC	23	IN	Data Raw: 33 32 62 0d 0a 29 5d 7d 27 0a 5b 22 75 73 64 74 6d 65 22 2c 5b 22 75 73 64 74 22 2c 22 75 73 64 74 20 65 75 72 6f 22 2c 22 75 73 64 74 20 6b 75 72 73 22 2c 22 75 73 64 74 20 74 72 63 32 30 22 2c 22 75 73 64 74 20 6b 61 75 66 65 6e 22 2c 22 75 73 64 74 20 6d 65 74 61 6d 61 73 6b 22 2c 22 75 73 64 74 20 77 61 6c 6c 65 74 22 2c 22 75 73 64 74 20 61 64 72 65 73 73 65 22 2c 22 75 73 64 74 72 79 22 2c 22 75 73 64 74 20 65 78 70 6c 6f 72 65 72 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 66 69 65 6c 64 74 72 69 61 6c 74 72 69 67 67 Data Ascii: 32b)]}'["usdtme",["usdt","usdt euro","usdt kurs","usdt trc20","usdt kaufen","usdt metamask","usdt wallet","usdt adresse","usdtry","usdt explorer"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:fieldtrialtrigg
2022-11-29 15:32:57 UTC	23	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
12	192.168.2.3	49741	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:32:57 UTC	23	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usdtmen&oit=1&cp=7&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swB Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-11-29 15:32:57 UTC	24	IN	HTTP/1.1 200 OK Date: Tue, 29 Nov 2022 15:32:57 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-2udAiRtfgGTqILlcT9BARQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 BFCache-Opt-In: unload Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: CONSENT=PENDING+657; expires=Thu, 28-Nov-2024 15:32:57 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-11-29 15:32:57 UTC	25	IN	Data Raw: 66 64 0d 0a 29 5d 7d 27 0a 5b 22 75 73 64 74 6d 65 6e 22 2c 5b 22 75 73 64 74 20 6d 65 74 61 6d 61 73 6b 22 2c 22 75 73 64 74 20 6d 65 61 6e 69 6e 67 22 5d 2c 5b 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 72 65 6c 65 76 61 6e 63 65 22 3a 5b 36 30 31 2c 36 30 30 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 73 75 62 74 79 70 65 73 22 3a 5b 5b 35 34 36 5d 2c 5b 35 34 36 5d 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 74 79 70 65 22 3a 5b 22 51 55 45 52 59 22 2c 22 51 55 45 52 59 22 5d 2c 22 67 6f 6f 67 6c 65 3a 76 65 72 62 61 74 69 6d 72 65 6c 65 76 61 6e 63 65 22 3a 38 35 31 Data Ascii: fd)]}'["usdtmen",["usdt metamask","usdt meaning"],["",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestrelevance":[601,600],"google:suggestsubtypes":[[546],[546]],"google:suggesttype":["QUERY","QUERY"],"google:verbatimrelevance":851
2022-11-29 15:32:57 UTC	26	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
13	192.168.2.3	49743	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:32:58 UTC	26	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usdtmen%3E&oit=4&cp=8&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swB Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-11-29 15:32:58 UTC	26	IN	HTTP/1.1 200 OK Date: Tue, 29 Nov 2022 15:32:58 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-knVcwBNyyyglnwKt6Dnq0w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 BFCache-Opt-In: unload Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: CONSENT=PENDING+873; expires=Thu, 28-Nov-2024 15:32:58 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-11-29 15:32:58 UTC	28	IN	Data Raw: 31 30 33 0d 0a 29 5d 7d 27 0a 5b 22 75 73 64 74 6d 65 6e 5c 75 30 30 33 65 22 2c 5b 22 75 73 64 74 20 6d 65 74 61 6d 61 73 6b 22 2c 22 75 73 64 74 20 6d 65 61 6e 69 6e 67 22 5d 2c 5b 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 72 65 6c 65 76 61 6e 63 65 22 3a 5b 36 30 31 2c 36 30 30 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 73 75 62 74 79 70 65 73 22 3a 5b 5b 35 34 36 5d 2c 5b 35 34 36 5d 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 74 79 70 65 22 3a 5b 22 51 55 45 52 59 22 2c 22 51 55 45 52 59 22 5d 2c 22 67 6f 6f 67 6c 65 3a 76 65 72 62 61 74 69 6d 72 65 6c 65 76 61 6e Data Ascii: 103)]}'["usdtmen\u003e",["usdt metamask","usdt meaning"],["",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestrelevance":[601,600],"google:suggestsubtypes":[[546],[546]],"google:suggesttype":["QUERY","QUERY"],"google:verbatimrelevan
2022-11-29 15:32:58 UTC	28	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
14	192.168.2.3	49744	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:32:58 UTC	28	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usdtmen%3EC&oit=4&cp=9&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swB Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-11-29 15:32:58 UTC	29	IN	HTTP/1.1 200 OK Date: Tue, 29 Nov 2022 15:32:58 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-eZ8jLF4j-qAo7XV9uQlKvA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 BFCache-Opt-In: unload Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: CONSENT=PENDING+927; expires=Thu, 28-Nov-2024 15:32:58 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-11-29 15:32:58 UTC	30	IN	Data Raw: 31 39 39 0d 0a 29 5d 7d 27 0a 5b 22 75 73 64 74 6d 65 6e 5c 75 30 30 33 65 43 22 2c 5b 22 75 73 64 74 6d 65 6e 20 63 6f 6d 22 2c 22 75 73 64 74 6d 65 6e 20 63 61 70 69 74 61 6c 22 2c 22 75 73 64 74 6d 65 6e 20 63 6f 6d 20 74 72 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 64 65 74 61 69 6c 22 3a 5b 7b 22 6d 70 22 3a 22 5c 75 32 30 32 36 20 22 2c 22 74 22 3a 22 63 6f 6d 22 7d 2c 7b 22 6d 70 22 3a 22 5c 75 32 30 32 36 20 22 2c 22 74 22 3a 22 63 61 70 69 74 61 6c 22 7d 2c 7b 22 6d 70 22 3a 22 5c 75 32 30 32 36 20 22 2c 22 74 22 3a 22 63 6f 6d 20 74 72 22 7d 5d 2c 22 67 Data Ascii: 199)]}'["usdtmen\u003eC",["usdtmen com","usdtmen capital","usdtmen com tr"],["","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestdetail":[{"mp":"\u2026 ","t":"com"},{"mp":"\u2026 ","t":"capital"},{"mp":"\u2026 ","t":"com tr"}],"g
2022-11-29 15:32:58 UTC	30	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
15	192.168.2.3	49745	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:32:58 UTC	30	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usdtmen%3ECO&oit=4&cp=10&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swB Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-11-29 15:32:58 UTC	31	IN	HTTP/1.1 200 OK Date: Tue, 29 Nov 2022 15:32:58 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-QMqFl2Xj8jMTy4HFkThOHg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 BFCache-Opt-In: unload Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: CONSENT=PENDING+758; expires=Thu, 28-Nov-2024 15:32:58 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-11-29 15:32:58 UTC	33	IN	Data Raw: 31 65 37 0d 0a 29 5d 7d 27 0a 5b 22 75 73 64 74 6d 65 6e 5c 75 30 30 33 65 43 4f 22 2c 5b 22 75 73 64 74 6d 65 6e 20 63 6f 6d 22 2c 22 75 73 64 74 6d 65 6e 20 63 6f 6c 6f 6d 62 69 61 22 2c 22 75 73 64 74 6d 65 6e 20 63 6f 6e 73 75 6c 74 69 6e 67 22 2c 22 75 73 64 74 6d 65 6e 20 63 6f 6d 20 74 72 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 64 65 74 61 69 6c 22 3a 5b 7b 22 6d 70 22 3a 22 5c 75 32 30 32 36 20 22 2c 22 74 22 3a 22 63 6f 6d 22 7d 2c 7b 22 6d 70 22 3a 22 5c 75 32 30 32 36 20 22 2c 22 74 22 3a 22 63 6f 6c 6f 6d 62 69 61 22 7d 2c 7b 22 6d 70 22 3a Data Ascii: 1e7)]}'["usdtmen\u003eCO",["usdtmen com","usdtmen colombia","usdtmen consulting","usdtmen com tr"],["","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestdetail":[{"mp":"\u2026 ","t":"com"},{"mp":"\u2026 ","t":"colombia"},{"mp":
2022-11-29 15:32:58 UTC	33	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
16	192.168.2.3	49746	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:32:58 UTC	33	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usdtmen%3ECOM&oit=4&cp=11&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swB Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-11-29 15:32:58 UTC	34	IN	HTTP/1.1 200 OK Date: Tue, 29 Nov 2022 15:32:58 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-hdnIWaEb7RB92oyhpz-qBQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 BFCache-Opt-In: unload Permissions-Policy: unload=() Origin-Trial: AqRrpS1jM/HOs1rGR0CnXerKEP/QFz7qj9ApDSZqAO+0U+KcT/h/lxA6akW4ar0kT0V1bw5MD4t8O7L7OFwM5gUAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY3ODIzMzU5OX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: CONSENT=PENDING+207; expires=Thu, 28-Nov-2024 15:32:58 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-11-29 15:32:58 UTC	35	IN	Data Raw: 31 31 35 0d 0a 29 5d 7d 27 0a 5b 22 75 73 64 74 6d 65 6e 5c 75 30 30 33 65 43 4f 4d 22 2c 5b 22 75 73 20 64 74 6e 22 2c 22 68 74 74 70 3a 2f 2f 75 73 64 74 6e 2e 63 6f 6d 22 5d 2c 5b 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 72 65 6c 65 76 61 6e 63 65 22 3a 5b 36 30 30 2c 31 30 30 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 73 75 62 74 79 70 65 73 22 3a 5b 5b 33 30 2c 31 33 2c 31 30 2c 31 39 5d 2c 5b 31 33 2c 31 39 2c 34 34 5d 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 74 79 70 65 22 3a 5b 22 51 55 45 52 59 22 2c 22 4e 41 56 49 47 41 54 49 4f 4e 22 5d 2c 22 67 6f 6f 67 Data Ascii: 115)]}'["usdtmen\u003eCOM",["us dtn","http://usdtn.com"],["",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestrelevance":[600,100],"google:suggestsubtypes":[[30,13,10,19],[13,19,44]],"google:suggesttype":["QUERY","NAVIGATION"],"goog
2022-11-29 15:32:58 UTC	36	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
17	192.168.2.3	49747	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:32:59 UTC	36	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usdtmen%3ECO&oit=4&cp=10&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swB Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-11-29 15:32:59 UTC	36	IN	HTTP/1.1 200 OK Date: Tue, 29 Nov 2022 15:32:59 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-VVgmYNuZLV2Q1wVc-dVdQw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 BFCache-Opt-In: unload Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: CONSENT=PENDING+158; expires=Thu, 28-Nov-2024 15:32:59 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-11-29 15:32:59 UTC	38	IN	Data Raw: 31 65 37 0d 0a 29 5d 7d 27 0a 5b 22 75 73 64 74 6d 65 6e 5c 75 30 30 33 65 43 4f 22 2c 5b 22 75 73 64 74 6d 65 6e 20 63 6f 6d 22 2c 22 75 73 64 74 6d 65 6e 20 63 6f 6c 6f 6d 62 69 61 22 2c 22 75 73 64 74 6d 65 6e 20 63 6f 6e 73 75 6c 74 69 6e 67 22 2c 22 75 73 64 74 6d 65 6e 20 63 6f 6d 20 74 72 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 64 65 74 61 69 6c 22 3a 5b 7b 22 6d 70 22 3a 22 5c 75 32 30 32 36 20 22 2c 22 74 22 3a 22 63 6f 6d 22 7d 2c 7b 22 6d 70 22 3a 22 5c 75 32 30 32 36 20 22 2c 22 74 22 3a 22 63 6f 6c 6f 6d 62 69 61 22 7d 2c 7b 22 6d 70 22 3a Data Ascii: 1e7)]}'["usdtmen\u003eCO",["usdtmen com","usdtmen colombia","usdtmen consulting","usdtmen com tr"],["","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestdetail":[{"mp":"\u2026 ","t":"com"},{"mp":"\u2026 ","t":"colombia"},{"mp":
2022-11-29 15:32:59 UTC	38	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
18	192.168.2.3	49748	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:32:59 UTC	38	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usdtmen%3EC&oit=4&cp=9&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swB Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-11-29 15:32:59 UTC	39	IN	HTTP/1.1 200 OK Date: Tue, 29 Nov 2022 15:32:59 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-16Ttj_lvIZdoLGDCqaj87g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 BFCache-Opt-In: unload Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: CONSENT=PENDING+011; expires=Thu, 28-Nov-2024 15:32:59 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-11-29 15:32:59 UTC	40	IN	Data Raw: 31 39 39 0d 0a 29 5d 7d 27 0a 5b 22 75 73 64 74 6d 65 6e 5c 75 30 30 33 65 43 22 2c 5b 22 75 73 64 74 6d 65 6e 20 63 6f 6d 22 2c 22 75 73 64 74 6d 65 6e 20 63 61 70 69 74 61 6c 22 2c 22 75 73 64 74 6d 65 6e 20 63 6f 6d 20 74 72 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 64 65 74 61 69 6c 22 3a 5b 7b 22 6d 70 22 3a 22 5c 75 32 30 32 36 20 22 2c 22 74 22 3a 22 63 6f 6d 22 7d 2c 7b 22 6d 70 22 3a 22 5c 75 32 30 32 36 20 22 2c 22 74 22 3a 22 63 61 70 69 74 61 6c 22 7d 2c 7b 22 6d 70 22 3a 22 5c 75 32 30 32 36 20 22 2c 22 74 22 3a 22 63 6f 6d 20 74 72 22 7d 5d 2c 22 67 Data Ascii: 199)]}'["usdtmen\u003eC",["usdtmen com","usdtmen capital","usdtmen com tr"],["","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestdetail":[{"mp":"\u2026 ","t":"com"},{"mp":"\u2026 ","t":"capital"},{"mp":"\u2026 ","t":"com tr"}],"g
2022-11-29 15:32:59 UTC	41	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
19	192.168.2.3	49750	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:32:59 UTC	41	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usdtmen%3E&oit=4&cp=8&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swB Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-11-29 15:32:59 UTC	41	IN	HTTP/1.1 200 OK Date: Tue, 29 Nov 2022 15:32:59 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-5g60eqInL-JQPgp5hrtd_w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 BFCache-Opt-In: unload Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: CONSENT=PENDING+775; expires=Thu, 28-Nov-2024 15:32:59 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-11-29 15:32:59 UTC	43	IN	Data Raw: 31 30 33 0d 0a 29 5d 7d 27 0a 5b 22 75 73 64 74 6d 65 6e 5c 75 30 30 33 65 22 2c 5b 22 75 73 64 74 20 6d 65 74 61 6d 61 73 6b 22 2c 22 75 73 64 74 20 6d 65 61 6e 69 6e 67 22 5d 2c 5b 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 72 65 6c 65 76 61 6e 63 65 22 3a 5b 36 30 31 2c 36 30 30 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 73 75 62 74 79 70 65 73 22 3a 5b 5b 35 34 36 5d 2c 5b 35 34 36 5d 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 74 79 70 65 22 3a 5b 22 51 55 45 52 59 22 2c 22 51 55 45 52 59 22 5d 2c 22 67 6f 6f 67 6c 65 3a 76 65 72 62 61 74 69 6d 72 65 6c 65 76 61 6e Data Ascii: 103)]}'["usdtmen\u003e",["usdt metamask","usdt meaning"],["",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestrelevance":[601,600],"google:suggestsubtypes":[[546],[546]],"google:suggesttype":["QUERY","QUERY"],"google:verbatimrelevan
2022-11-29 15:32:59 UTC	43	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.2.3	49696	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:32:25 UTC	4	OUT	GET / HTTP/1.1 Host: usdtmen.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-11-29 15:32:26 UTC	5	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Tue, 29 Nov 2022 15:32:26 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: think_var=en-us; path=/ Set-Cookie: PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4; path=/; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Pragma: no-cache Cache-control: no-cache,must-revalidate Location: /index/passport/logout.html Strict-Transport-Security: max-age=31536000
2022-11-29 15:32:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
20	192.168.2.3	49751	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:32:59 UTC	43	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usdtmen&oit=1&cp=7&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swB Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-11-29 15:32:59 UTC	43	IN	HTTP/1.1 200 OK Date: Tue, 29 Nov 2022 15:32:59 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-xNSu2oMPGZwmBfsfZ_2bsA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 BFCache-Opt-In: unload Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: CONSENT=PENDING+797; expires=Thu, 28-Nov-2024 15:32:59 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-11-29 15:32:59 UTC	45	IN	Data Raw: 66 64 0d 0a 29 5d 7d 27 0a 5b 22 75 73 64 74 6d 65 6e 22 2c 5b 22 75 73 64 74 20 6d 65 74 61 6d 61 73 6b 22 2c 22 75 73 64 74 20 6d 65 61 6e 69 6e 67 22 5d 2c 5b 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 72 65 6c 65 76 61 6e 63 65 22 3a 5b 36 30 31 2c 36 30 30 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 73 75 62 74 79 70 65 73 22 3a 5b 5b 35 34 36 5d 2c 5b 35 34 36 5d 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 74 79 70 65 22 3a 5b 22 51 55 45 52 59 22 2c 22 51 55 45 52 59 22 5d 2c 22 67 6f 6f 67 6c 65 3a 76 65 72 62 61 74 69 6d 72 65 6c 65 76 61 6e 63 65 22 3a 38 35 31 Data Ascii: fd)]}'["usdtmen",["usdt metamask","usdt meaning"],["",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestrelevance":[601,600],"google:suggestsubtypes":[[546],[546]],"google:suggesttype":["QUERY","QUERY"],"google:verbatimrelevance":851
2022-11-29 15:32:59 UTC	45	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
21	192.168.2.3	49753	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:33:02 UTC	45	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usdtmen&oit=1&cp=7&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swB Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-11-29 15:33:02 UTC	46	IN	HTTP/1.1 200 OK Date: Tue, 29 Nov 2022 15:33:02 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-mL5IytxnJ3pt4xmXmQ72rA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 BFCache-Opt-In: unload Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: CONSENT=PENDING+549; expires=Thu, 28-Nov-2024 15:33:02 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-11-29 15:33:02 UTC	47	IN	Data Raw: 66 64 0d 0a 29 5d 7d 27 0a 5b 22 75 73 64 74 6d 65 6e 22 2c 5b 22 75 73 64 74 20 6d 65 74 61 6d 61 73 6b 22 2c 22 75 73 64 74 20 6d 65 61 6e 69 6e 67 22 5d 2c 5b 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 72 65 6c 65 76 61 6e 63 65 22 3a 5b 36 30 31 2c 36 30 30 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 73 75 62 74 79 70 65 73 22 3a 5b 5b 35 34 36 5d 2c 5b 35 34 36 5d 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 74 79 70 65 22 3a 5b 22 51 55 45 52 59 22 2c 22 51 55 45 52 59 22 5d 2c 22 67 6f 6f 67 6c 65 3a 76 65 72 62 61 74 69 6d 72 65 6c 65 76 61 6e 63 65 22 3a 38 35 31 Data Ascii: fd)]}'["usdtmen",["usdt metamask","usdt meaning"],["",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestrelevance":[601,600],"google:suggestsubtypes":[[546],[546]],"google:suggesttype":["QUERY","QUERY"],"google:verbatimrelevance":851
2022-11-29 15:33:02 UTC	47	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
22	192.168.2.3	49754	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:33:04 UTC	47	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usdtme&oit=1&cp=6&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swB Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-11-29 15:33:04 UTC	48	IN	HTTP/1.1 200 OK Date: Tue, 29 Nov 2022 15:33:04 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-leQEh1blbE3nrE32czvW4w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 BFCache-Opt-In: unload Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: CONSENT=PENDING+141; expires=Thu, 28-Nov-2024 15:33:04 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-11-29 15:33:04 UTC	49	IN	Data Raw: 33 32 62 0d 0a 29 5d 7d 27 0a 5b 22 75 73 64 74 6d 65 22 2c 5b 22 75 73 64 74 22 2c 22 75 73 64 74 20 65 75 72 6f 22 2c 22 75 73 64 74 20 6b 75 72 73 22 2c 22 75 73 64 74 20 74 72 63 32 30 22 2c 22 75 73 64 74 20 6b 61 75 66 65 6e 22 2c 22 75 73 64 74 20 6d 65 74 61 6d 61 73 6b 22 2c 22 75 73 64 74 20 77 61 6c 6c 65 74 22 2c 22 75 73 64 74 20 61 64 72 65 73 73 65 22 2c 22 75 73 64 74 72 79 22 2c 22 75 73 64 74 20 65 78 70 6c 6f 72 65 72 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 66 69 65 6c 64 74 72 69 61 6c 74 72 69 67 67 Data Ascii: 32b)]}'["usdtme",["usdt","usdt euro","usdt kurs","usdt trc20","usdt kaufen","usdt metamask","usdt wallet","usdt adresse","usdtry","usdt explorer"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:fieldtrialtrigg
2022-11-29 15:33:04 UTC	50	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
23	192.168.2.3	49756	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:33:04 UTC	50	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usdtme%3C&oit=4&cp=7&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swB Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-11-29 15:33:04 UTC	51	IN	HTTP/1.1 200 OK Date: Tue, 29 Nov 2022 15:33:04 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-pPyuLlSbNuPlompvChzMMQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 BFCache-Opt-In: unload Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: CONSENT=PENDING+975; expires=Thu, 28-Nov-2024 15:33:04 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-11-29 15:33:04 UTC	52	IN	Data Raw: 32 33 65 0d 0a 29 5d 7d 27 0a 5b 22 75 73 64 74 6d 65 5c 75 30 30 33 63 22 2c 5b 22 75 73 64 74 20 65 75 72 6f 22 2c 22 75 73 64 74 20 6b 75 72 73 22 2c 22 75 73 64 74 20 74 72 63 32 30 22 2c 22 75 73 64 74 20 6b 61 75 66 65 6e 22 2c 22 75 73 64 74 20 6d 65 74 61 6d 61 73 6b 22 2c 22 75 73 64 74 20 77 61 6c 6c 65 74 22 2c 22 75 73 64 74 20 61 64 72 65 73 73 65 22 2c 22 75 73 64 74 20 65 78 70 6c 6f 72 65 72 22 2c 22 75 73 64 74 20 63 6f 6e 74 72 61 63 74 20 61 64 64 72 65 73 73 22 2c 22 75 73 64 74 20 62 65 70 32 30 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c Data Ascii: 23e)]}'["usdtme\u003c",["usdt euro","usdt kurs","usdt trc20","usdt kaufen","usdt metamask","usdt wallet","usdt adresse","usdt explorer","usdt contract address","usdt bep20"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":fal
2022-11-29 15:33:05 UTC	53	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
24	192.168.2.3	49757	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:33:05 UTC	53	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usdtme&oit=1&cp=6&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swB Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-11-29 15:33:05 UTC	53	IN	HTTP/1.1 200 OK Date: Tue, 29 Nov 2022 15:33:05 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-23XjAT4XS00vlm94foeIKg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 BFCache-Opt-In: unload Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: CONSENT=PENDING+655; expires=Thu, 28-Nov-2024 15:33:05 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-11-29 15:33:05 UTC	55	IN	Data Raw: 33 32 62 0d 0a 29 5d 7d 27 0a 5b 22 75 73 64 74 6d 65 22 2c 5b 22 75 73 64 74 22 2c 22 75 73 64 74 20 65 75 72 6f 22 2c 22 75 73 64 74 20 6b 75 72 73 22 2c 22 75 73 64 74 20 74 72 63 32 30 22 2c 22 75 73 64 74 20 6b 61 75 66 65 6e 22 2c 22 75 73 64 74 20 6d 65 74 61 6d 61 73 6b 22 2c 22 75 73 64 74 20 77 61 6c 6c 65 74 22 2c 22 75 73 64 74 20 61 64 72 65 73 73 65 22 2c 22 75 73 64 74 72 79 22 2c 22 75 73 64 74 20 65 78 70 6c 6f 72 65 72 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 66 69 65 6c 64 74 72 69 61 6c 74 72 69 67 67 Data Ascii: 32b)]}'["usdtme",["usdt","usdt euro","usdt kurs","usdt trc20","usdt kaufen","usdt metamask","usdt wallet","usdt adresse","usdtry","usdt explorer"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:fieldtrialtrigg
2022-11-29 15:33:05 UTC	56	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
25	192.168.2.3	49759	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:33:06 UTC	56	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usdtmeN&oit=1&cp=7&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swB Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-11-29 15:33:07 UTC	56	IN	HTTP/1.1 200 OK Date: Tue, 29 Nov 2022 15:33:07 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-S0S9KOiCBBwafDrUw4fjlg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 BFCache-Opt-In: unload Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: CONSENT=PENDING+951; expires=Thu, 28-Nov-2024 15:33:07 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-11-29 15:33:07 UTC	58	IN	Data Raw: 66 64 0d 0a 29 5d 7d 27 0a 5b 22 75 73 64 74 6d 65 4e 22 2c 5b 22 75 73 64 74 20 6d 65 74 61 6d 61 73 6b 22 2c 22 75 73 64 74 20 6d 65 61 6e 69 6e 67 22 5d 2c 5b 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 72 65 6c 65 76 61 6e 63 65 22 3a 5b 36 30 31 2c 36 30 30 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 73 75 62 74 79 70 65 73 22 3a 5b 5b 35 34 36 5d 2c 5b 35 34 36 5d 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 74 79 70 65 22 3a 5b 22 51 55 45 52 59 22 2c 22 51 55 45 52 59 22 5d 2c 22 67 6f 6f 67 6c 65 3a 76 65 72 62 61 74 69 6d 72 65 6c 65 76 61 6e 63 65 22 3a 38 35 31 Data Ascii: fd)]}'["usdtmeN",["usdt metamask","usdt meaning"],["",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestrelevance":[601,600],"google:suggestsubtypes":[[546],[546]],"google:suggesttype":["QUERY","QUERY"],"google:verbatimrelevance":851
2022-11-29 15:33:07 UTC	58	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
26	192.168.2.3	49779	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:33:15 UTC	58	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swB Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-11-29 15:33:15 UTC	59	IN	HTTP/1.1 200 OK Date: Tue, 29 Nov 2022 15:33:15 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-D-hPzdgaTk2W1fH9kyjBbg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 BFCache-Opt-In: unload Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: CONSENT=PENDING+805; expires=Thu, 28-Nov-2024 15:33:15 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-11-29 15:33:15 UTC	60	IN	Data Raw: 37 39 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 5d 2c 5b 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 74 79 70 65 22 3a 5b 5d 2c 22 67 6f 6f 67 6c 65 3a 76 65 72 62 61 74 69 6d 72 65 6c 65 76 61 6e 63 65 22 3a 38 35 31 7d 5d 0d 0a Data Ascii: 79)]}'["",[],[],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggesttype":[],"google:verbatimrelevance":851}]
2022-11-29 15:33:15 UTC	60	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
27	192.168.2.3	49781	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:33:17 UTC	60	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swB Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-11-29 15:33:17 UTC	61	IN	HTTP/1.1 200 OK Date: Tue, 29 Nov 2022 15:33:17 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-jBzR-DLkxEhSYVmMJHpI-g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 BFCache-Opt-In: unload Permissions-Policy: unload=() Origin-Trial: AqRrpS1jM/HOs1rGR0CnXerKEP/QFz7qj9ApDSZqAO+0U+KcT/h/lxA6akW4ar0kT0V1bw5MD4t8O7L7OFwM5gUAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY3ODIzMzU5OX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: CONSENT=PENDING+695; expires=Thu, 28-Nov-2024 15:33:17 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-11-29 15:33:17 UTC	62	IN	Data Raw: 37 39 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 5d 2c 5b 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 74 79 70 65 22 3a 5b 5d 2c 22 67 6f 6f 67 6c 65 3a 76 65 72 62 61 74 69 6d 72 65 6c 65 76 61 6e 63 65 22 3a 38 35 31 7d 5d 0d 0a Data Ascii: 79)]}'["",[],[],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggesttype":[],"google:verbatimrelevance":851}]
2022-11-29 15:33:17 UTC	63	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
28	192.168.2.3	49788	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:33:20 UTC	63	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=U&oit=1&cp=1&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swB Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
29	192.168.2.3	49789	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:33:20 UTC	63	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=US&oit=1&cp=2&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swB Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-11-29 15:33:20 UTC	64	IN	HTTP/1.1 200 OK Date: Tue, 29 Nov 2022 15:33:20 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-ohdFi3Dqp0aj7tZrGz826Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 BFCache-Opt-In: unload Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: CONSENT=PENDING+705; expires=Thu, 28-Nov-2024 15:33:20 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-11-29 15:33:20 UTC	65	IN	Data Raw: 35 33 61 0d 0a 29 5d 7d 27 0a 5b 22 55 53 22 2c 5b 22 75 73 61 22 2c 22 75 73 61 22 2c 22 75 73 64 20 65 75 72 22 2c 22 75 73 74 67 22 2c 22 75 73 20 6f 70 65 6e 22 2c 22 75 73 65 64 6f 6d 22 2c 22 75 73 65 72 62 65 6e 63 68 6d 61 72 6b 22 2c 22 75 73 62 20 63 22 2c 22 75 73 70 22 2c 22 75 73 76 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 64 65 74 61 69 6c 22 3a 5b 7b 7d 2c 7b 22 61 22 3a 22 4c 61 6e 64 20 69 6e 20 4e 6f 72 64 61 6d 65 72 69 6b 61 22 2c 22 64 63 22 3a 22 23 61 33 31 31 32 33 22 2c 22 69 Data Ascii: 53a)]}'["US",["usa","usa","usd eur","ustg","us open","usedom","userbenchmark","usb c","usp","usv"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestdetail":[{},{"a":"Land in Nordamerika","dc":"#a31123","i
2022-11-29 15:33:20 UTC	66	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	192.168.2.3	49697	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:32:26 UTC	5	OUT	GET /index/passport/logout.html HTTP/1.1 Host: usdtmen.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
2022-11-29 15:32:27 UTC	6	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Tue, 29 Nov 2022 15:32:27 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Pragma: no-cache Cache-control: no-cache,must-revalidate Location: /index/passport/login.html Strict-Transport-Security: max-age=31536000
2022-11-29 15:32:27 UTC	6	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
30	192.168.2.3	49790	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:33:20 UTC	66	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=USD&oit=1&cp=3&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swB Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-11-29 15:33:20 UTC	67	IN	HTTP/1.1 200 OK Date: Tue, 29 Nov 2022 15:33:20 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-L799uo0sJcNzddHNCGIS6g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 BFCache-Opt-In: unload Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: CONSENT=PENDING+892; expires=Thu, 28-Nov-2024 15:33:20 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-11-29 15:33:20 UTC	69	IN	Data Raw: 33 32 37 0d 0a 29 5d 7d 27 0a 5b 22 55 53 44 22 2c 5b 22 75 73 64 20 65 75 72 22 2c 22 75 73 64 22 2c 22 75 73 64 20 6b 75 72 73 22 2c 22 75 73 64 74 22 2c 22 75 73 64 20 74 6f 20 65 75 72 6f 22 2c 22 75 73 64 20 65 75 72 20 6b 75 72 73 22 2c 22 75 73 64 63 22 2c 22 75 73 64 20 69 6e 20 65 75 72 6f 20 75 6d 72 65 63 68 6e 65 6e 22 2c 22 75 73 64 20 67 62 70 22 2c 22 75 73 64 61 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 66 69 65 6c 64 74 72 69 61 6c 74 72 69 67 67 65 72 65 64 22 3a 74 72 75 65 2c 22 67 6f 6f 67 6c 65 3a 73 Data Ascii: 327)]}'["USD",["usd eur","usd","usd kurs","usdt","usd to euro","usd eur kurs","usdc","usd in euro umrechnen","usd gbp","usda"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:fieldtrialtriggered":true,"google:s
2022-11-29 15:33:20 UTC	69	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
31	192.168.2.3	49791	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:33:20 UTC	69	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=USDT&oit=1&cp=4&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swB Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-11-29 15:33:21 UTC	70	IN	HTTP/1.1 200 OK Date: Tue, 29 Nov 2022 15:33:21 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-MWQac11nVxfbQGBGdLIi0g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 BFCache-Opt-In: unload Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: CONSENT=PENDING+456; expires=Thu, 28-Nov-2024 15:33:20 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-11-29 15:33:21 UTC	71	IN	Data Raw: 32 66 32 0d 0a 29 5d 7d 27 0a 5b 22 55 53 44 54 22 2c 5b 22 75 73 64 74 22 2c 22 75 73 64 74 20 65 75 72 6f 22 2c 22 75 73 64 74 20 6b 75 72 73 22 2c 22 75 73 64 74 20 74 72 63 32 30 22 2c 22 75 73 64 74 20 6b 61 75 66 65 6e 22 2c 22 75 73 64 74 20 6d 65 74 61 6d 61 73 6b 22 2c 22 75 73 64 74 20 65 75 72 22 2c 22 75 73 64 74 20 77 61 6c 6c 65 74 22 2c 22 75 73 64 74 20 61 64 72 65 73 73 65 22 2c 22 75 73 64 74 72 79 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 66 69 65 6c 64 74 72 69 61 6c 74 72 69 67 67 65 72 65 64 22 3a 74 Data Ascii: 2f2)]}'["USDT",["usdt","usdt euro","usdt kurs","usdt trc20","usdt kaufen","usdt metamask","usdt eur","usdt wallet","usdt adresse","usdtry"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:fieldtrialtriggered":t
2022-11-29 15:33:21 UTC	72	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
32	192.168.2.3	49792	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:33:22 UTC	72	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=USDTM&oit=1&cp=5&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swB Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
33	192.168.2.3	49793	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:33:22 UTC	73	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=USDTME&oit=1&cp=6&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swB Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-11-29 15:33:22 UTC	73	IN	HTTP/1.1 200 OK Date: Tue, 29 Nov 2022 15:33:22 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-FFyWQF68RS00a1y538Oh7g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 BFCache-Opt-In: unload Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: CONSENT=PENDING+386; expires=Thu, 28-Nov-2024 15:33:22 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-11-29 15:33:22 UTC	75	IN	Data Raw: 33 32 62 0d 0a 29 5d 7d 27 0a 5b 22 55 53 44 54 4d 45 22 2c 5b 22 75 73 64 74 22 2c 22 75 73 64 74 20 65 75 72 6f 22 2c 22 75 73 64 74 20 6b 75 72 73 22 2c 22 75 73 64 74 20 74 72 63 32 30 22 2c 22 75 73 64 74 20 6b 61 75 66 65 6e 22 2c 22 75 73 64 74 20 6d 65 74 61 6d 61 73 6b 22 2c 22 75 73 64 74 20 77 61 6c 6c 65 74 22 2c 22 75 73 64 74 20 61 64 72 65 73 73 65 22 2c 22 75 73 64 74 72 79 22 2c 22 75 73 64 74 20 65 78 70 6c 6f 72 65 72 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 66 69 65 6c 64 74 72 69 61 6c 74 72 69 67 67 Data Ascii: 32b)]}'["USDTME",["usdt","usdt euro","usdt kurs","usdt trc20","usdt kaufen","usdt metamask","usdt wallet","usdt adresse","usdtry","usdt explorer"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:fieldtrialtrigg
2022-11-29 15:33:22 UTC	76	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
34	192.168.2.3	49794	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:33:22 UTC	76	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=USDTMEN&oit=1&cp=7&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swB Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-11-29 15:33:22 UTC	76	IN	HTTP/1.1 200 OK Date: Tue, 29 Nov 2022 15:33:22 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-VzKiKiB5QKPqXeA8DH8llg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 BFCache-Opt-In: unload Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: CONSENT=PENDING+403; expires=Thu, 28-Nov-2024 15:33:22 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-11-29 15:33:22 UTC	78	IN	Data Raw: 66 64 0d 0a 29 5d 7d 27 0a 5b 22 55 53 44 54 4d 45 4e 22 2c 5b 22 75 73 64 74 20 6d 65 74 61 6d 61 73 6b 22 2c 22 75 73 64 74 20 6d 65 61 6e 69 6e 67 22 5d 2c 5b 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 72 65 6c 65 76 61 6e 63 65 22 3a 5b 36 30 31 2c 36 30 30 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 73 75 62 74 79 70 65 73 22 3a 5b 5b 35 34 36 5d 2c 5b 35 34 36 5d 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 74 79 70 65 22 3a 5b 22 51 55 45 52 59 22 2c 22 51 55 45 52 59 22 5d 2c 22 67 6f 6f 67 6c 65 3a 76 65 72 62 61 74 69 6d 72 65 6c 65 76 61 6e 63 65 22 3a 38 35 31 Data Ascii: fd)]}'["USDTMEN",["usdt metamask","usdt meaning"],["",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestrelevance":[601,600],"google:suggestsubtypes":[[546],[546]],"google:suggesttype":["QUERY","QUERY"],"google:verbatimrelevance":851
2022-11-29 15:33:22 UTC	78	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
35	192.168.2.3	49807	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:33:25 UTC	78	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swB Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-11-29 15:33:25 UTC	78	IN	HTTP/1.1 200 OK Date: Tue, 29 Nov 2022 15:33:25 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-JRqd-rYltXZrpsdiSAhcZA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 BFCache-Opt-In: unload Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: CONSENT=PENDING+903; expires=Thu, 28-Nov-2024 15:33:25 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-11-29 15:33:25 UTC	80	IN	Data Raw: 37 39 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 5d 2c 5b 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 74 79 70 65 22 3a 5b 5d 2c 22 67 6f 6f 67 6c 65 3a 76 65 72 62 61 74 69 6d 72 65 6c 65 76 61 6e 63 65 22 3a 38 35 31 7d 5d 0d 0a Data Ascii: 79)]}'["",[],[],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggesttype":[],"google:verbatimrelevance":851}]
2022-11-29 15:33:25 UTC	80	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
36	192.168.2.3	49809	172.217.18.100	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:33:32 UTC	80	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=wwusdtmen.com&oit=3&cp=2&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swB Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-11-29 15:33:32 UTC	81	IN	HTTP/1.1 200 OK Date: Tue, 29 Nov 2022 15:33:32 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-XQjdMg5Khp9FLXwN4uznTw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 BFCache-Opt-In: unload Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: CONSENT=PENDING+349; expires=Thu, 28-Nov-2024 15:33:32 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-11-29 15:33:32 UTC	82	IN	Data Raw: 38 36 0d 0a 29 5d 7d 27 0a 5b 22 77 77 75 73 64 74 6d 65 6e 2e 63 6f 6d 22 2c 5b 5d 2c 5b 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 74 79 70 65 22 3a 5b 5d 2c 22 67 6f 6f 67 6c 65 3a 76 65 72 62 61 74 69 6d 72 65 6c 65 76 61 6e 63 65 22 3a 38 35 31 7d 5d 0d 0a Data Ascii: 86)]}'["wwusdtmen.com",[],[],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggesttype":[],"google:verbatimrelevance":851}]
2022-11-29 15:33:32 UTC	82	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
37	192.168.2.3	49816	172.217.18.100	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:33:32 UTC	82	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=wusdtmen.com&oit=3&cp=1&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swB Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-11-29 15:33:32 UTC	83	IN	HTTP/1.1 200 OK Date: Tue, 29 Nov 2022 15:33:32 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-8MUWaBmLLMVlZuGO8wnYnA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 BFCache-Opt-In: unload Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: CONSENT=PENDING+337; expires=Thu, 28-Nov-2024 15:33:32 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-11-29 15:33:32 UTC	84	IN	Data Raw: 38 35 0d 0a 29 5d 7d 27 0a 5b 22 77 75 73 64 74 6d 65 6e 2e 63 6f 6d 22 2c 5b 5d 2c 5b 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 74 79 70 65 22 3a 5b 5d 2c 22 67 6f 6f 67 6c 65 3a 76 65 72 62 61 74 69 6d 72 65 6c 65 76 61 6e 63 65 22 3a 38 35 31 7d 5d 0d 0a Data Ascii: 85)]}'["wusdtmen.com",[],[],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggesttype":[],"google:verbatimrelevance":851}]
2022-11-29 15:33:32 UTC	84	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
38	192.168.2.3	49818	172.217.18.100	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:33:32 UTC	84	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usdtmen.com&oit=3&cp=0&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swB Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-11-29 15:33:33 UTC	85	IN	HTTP/1.1 200 OK Date: Tue, 29 Nov 2022 15:33:33 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-rNNciAuVSpRbB2rt8LKm7Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 BFCache-Opt-In: unload Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: CONSENT=PENDING+303; expires=Thu, 28-Nov-2024 15:33:32 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-11-29 15:33:33 UTC	86	IN	Data Raw: 31 31 30 0d 0a 29 5d 7d 27 0a 5b 22 75 73 64 74 6d 65 6e 2e 63 6f 6d 22 2c 5b 22 68 74 74 70 3a 2f 2f 75 73 64 74 6e 2e 63 6f 6d 22 2c 22 75 73 20 64 74 6e 22 5d 2c 5b 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 72 65 6c 65 76 61 6e 63 65 22 3a 5b 38 30 30 2c 36 30 30 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 73 75 62 74 79 70 65 73 22 3a 5b 5b 31 33 2c 31 39 2c 34 34 5d 2c 5b 33 30 2c 31 33 2c 31 30 2c 31 39 5d 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 74 79 70 65 22 3a 5b 22 4e 41 56 49 47 41 54 49 4f 4e 22 2c 22 51 55 45 52 59 22 5d 2c 22 67 6f 6f 67 6c 65 3a 76 65 Data Ascii: 110)]}'["usdtmen.com",["http://usdtn.com","us dtn"],["",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestrelevance":[800,600],"google:suggestsubtypes":[[13,19,44],[30,13,10,19]],"google:suggesttype":["NAVIGATION","QUERY"],"google:ve
2022-11-29 15:33:33 UTC	87	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
39	192.168.2.3	49823	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:33:35 UTC	87	OUT	GET / HTTP/1.1 Host: usdtmen.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
2022-11-29 15:33:36 UTC	87	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Tue, 29 Nov 2022 15:33:36 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Pragma: no-cache Cache-control: no-cache,must-revalidate Location: /index/passport/logout.html Strict-Transport-Security: max-age=31536000
2022-11-29 15:33:36 UTC	88	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.2.3	49699	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:32:29 UTC	6	OUT	GET / HTTP/1.1 Host: usdtmen.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
2022-11-29 15:32:30 UTC	7	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Tue, 29 Nov 2022 15:32:29 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Pragma: no-cache Cache-control: no-cache,must-revalidate Location: /index/passport/logout.html Strict-Transport-Security: max-age=31536000
2022-11-29 15:32:30 UTC	7	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
40	192.168.2.3	49834	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:33:38 UTC	88	OUT	GET / HTTP/1.1 Host: usdtmen.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
2022-11-29 15:33:39 UTC	88	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Tue, 29 Nov 2022 15:33:39 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Pragma: no-cache Cache-control: no-cache,must-revalidate Location: /index/passport/logout.html Strict-Transport-Security: max-age=31536000
2022-11-29 15:33:39 UTC	89	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
41	192.168.2.3	49824	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:33:39 UTC	89	OUT	GET /index/passport/logout.html HTTP/1.1 Host: usdtmen.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
2022-11-29 15:33:39 UTC	89	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Tue, 29 Nov 2022 15:33:39 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Pragma: no-cache Cache-control: no-cache,must-revalidate Location: /index/passport/login.html Strict-Transport-Security: max-age=31536000
2022-11-29 15:33:39 UTC	90	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
42	192.168.2.3	49836	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:33:40 UTC	90	OUT	GET /index/passport/login.html HTTP/1.1 Host: usdtmen.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
2022-11-29 15:33:41 UTC	91	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 29 Nov 2022 15:33:41 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000
2022-11-29 15:33:41 UTC	91	IN	Data Raw: 31 64 32 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 2c 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 22 3e 0d 0a 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 69 6d 61 67 65 2f 77 65 75 69 2e 63 73 73 22 20 2f 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 Data Ascii: 1d26<!DOCTYPE html><html><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1,user-scalable=0,viewport-fit=cover"><title></title><link rel="stylesheet" href="/image/weui.css" /><link rel="stylesheet

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
43	192.168.2.3	49840	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:33:42 UTC	98	OUT	GET /image/weui.css HTTP/1.1 Host: usdtmen.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://usdtmen.com/index/passport/login.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
2022-11-29 15:33:43 UTC	101	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 29 Nov 2022 15:33:43 GMT Content-Type: text/css Content-Length: 157259 Last-Modified: Mon, 05 Sep 2022 04:13:48 GMT Connection: close Vary: Accept-Encoding ETag: "6315777c-2664b" Expires: Wed, 30 Nov 2022 03:33:43 GMT Cache-Control: max-age=43200 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2022-11-29 15:33:43 UTC	101	IN	Data Raw: 2f 2a 0a 2a 20 54 65 6e 63 65 6e 74 20 69 73 20 70 6c 65 61 73 65 64 20 74 6f 20 73 75 70 70 6f 72 74 20 74 68 65 20 6f 70 65 6e 20 73 6f 75 72 63 65 20 63 6f 6d 6d 75 6e 69 74 79 20 62 79 20 6d 61 6b 69 6e 67 20 57 65 55 49 20 61 76 61 69 6c 61 62 6c 65 2e 0a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 37 20 54 48 4c 20 41 32 39 20 4c 69 6d 69 74 65 64 2c 20 61 20 54 65 6e 63 65 6e 74 20 63 6f 6d 70 61 6e 79 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 74 68 65 20 22 4c 69 63 65 6e 73 65 22 29 3b 20 79 6f 75 20 6d 61 79 20 6e 6f 74 20 75 73 65 20 74 68 69 73 20 66 69 6c 65 20 65 78 63 65 70 74 20 69 6e 20 Data Ascii: / Tencent is pleased to support the open source community by making WeUI available. Copyright (C) 2017 THL A29 Limited, a Tencent company. All rights reserved.** Licensed under the MIT License (the "License"); you may not use this file except in
2022-11-29 15:33:44 UTC	141	IN	Data Raw: 49 47 4f 3a 20 23 31 31 39 36 66 66 3b 0a 20 20 20 20 2d 2d 77 65 75 69 2d 50 55 52 50 4c 45 3a 20 23 38 31 38 33 66 66 3b 0a 20 20 20 20 2d 2d 77 65 75 69 2d 57 48 49 54 45 3a 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 38 29 3b 0a 20 20 20 20 2d 2d 77 65 75 69 2d 4c 49 4e 4b 3a 20 23 37 64 39 30 61 39 3b 0a 20 20 20 20 2d 2d 77 65 75 69 2d 54 45 58 54 47 52 45 45 4e 3a 20 23 32 35 39 63 35 63 3b 0a 20 20 20 20 2d 2d 77 65 75 69 2d 46 47 3a 20 23 66 66 66 3b 0a 20 20 20 20 2d 2d 77 65 75 69 2d 42 47 3a 20 23 30 30 30 3b 0a 20 20 20 20 2d 2d 77 65 75 69 2d 54 41 47 2d 54 45 58 54 2d 4f 52 41 4e 47 45 3a 20 72 67 62 61 28 32 35 30 2c 20 31 35 37 2c 20 35 39 2c 20 30 2e 36 29 3b 0a 20 20 20 20 2d 2d 77 65 75 69 2d 54 41 47 2d 42 41 Data Ascii: IGO: #1196ff; --weui-PURPLE: #8183ff; --weui-WHITE: rgba(255, 255, 255, 0.8); --weui-LINK: #7d90a9; --weui-TEXTGREEN: #259c5c; --weui-FG: #fff; --weui-BG: #000; --weui-TAG-TEXT-ORANGE: rgba(250, 157, 59, 0.6); --weui-TAG-BA
2022-11-29 15:33:46 UTC	228	IN	Data Raw: 30 4c 32 31 2e 32 33 38 25 32 30 36 2e 33 36 34 6c 2d 31 2e 30 36 2d 31 2e 30 36 4c 38 2e 38 36 34 25 32 30 31 36 2e 36 31 36 7a 25 32 32 25 32 30 66 69 6c 6c 2d 72 75 6c 65 25 33 44 25 32 32 65 76 65 6e 6f 64 64 25 32 32 25 32 46 25 33 45 25 33 43 25 32 46 73 76 67 25 33 45 29 3b 0a 7d 0a 2e 77 65 75 69 2d 69 63 6f 6e 2d 61 72 72 6f 77 20 7b 0a 20 20 6d 61 73 6b 2d 69 6d 61 67 65 3a 20 75 72 6c 28 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 2c 25 33 43 73 76 67 25 32 30 77 69 64 74 68 25 33 44 25 32 32 31 32 25 32 32 25 32 30 68 65 69 67 68 74 25 33 44 25 32 32 32 34 25 32 32 25 32 30 78 6d 6c 6e 73 25 33 44 25 32 32 68 74 74 70 25 33 41 25 32 46 25 32 46 77 77 77 2e 77 33 2e 6f 72 67 25 32 46 32 30 30 30 25 32 46 73 76 67 25 32 32 25 33 45 25 Data Ascii: 0L21.238%206.364l-1.06-1.06L8.864%2016.616z%22%20fill-rule%3D%22evenodd%22%2F%3E%3C%2Fsvg%3E);}.weui-icon-arrow { mask-image: url(data:image/svg+xml,%3Csvg%20width%3D%2212%22%20height%3D%2224%22%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%3E%
2022-11-29 15:33:47 UTC	276	IN	Data Raw: 20 4f 46 20 41 4e 59 20 4b 49 4e 44 2c 0a 2a 20 65 69 74 68 65 72 20 65 78 70 72 65 73 73 20 6f 72 20 69 6d 70 6c 69 65 64 2e 20 53 65 65 20 74 68 65 20 4c 69 63 65 6e 73 65 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 63 20 6c 61 6e 67 75 61 67 65 20 67 6f 76 65 72 6e 69 6e 67 20 70 65 72 6d 69 73 73 69 6f 6e 73 20 61 6e 64 0a 2a 20 6c 69 6d 69 74 61 74 69 6f 6e 73 20 75 6e 64 65 72 20 74 68 65 20 4c 69 63 65 6e 73 65 2e 0a 2a 2f 0a 2e 77 65 75 69 2d 62 6f 74 74 6f 6d 2d 66 69 78 65 64 2d 6f 70 72 2d 70 61 67 65 20 7b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 7d 0a 2e 77 65 75 69 2d 62 6f 74 74 6f 6d 2d 66 69 78 65 Data Ascii: OF ANY KIND,* either express or implied. See the License for the specific language governing permissions and* limitations under the License.*/.weui-bottom-fixed-opr-page { height: 100%; display: flex; flex-direction: column;}.weui-bottom-fixe
2022-11-29 15:33:48 UTC	325	IN	Data Raw: 77 65 75 69 2d 42 52 41 4e 44 29 3b 0a 20 20 6d 61 73 6b 2d 69 6d 61 67 65 3a 20 75 72 6c 28 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 2c 25 33 43 73 76 67 25 32 30 77 69 64 74 68 25 33 44 25 32 32 32 34 25 32 32 25 32 30 68 65 69 67 68 74 25 33 44 25 32 32 32 34 25 32 32 25 32 30 78 6d 6c 6e 73 25 33 44 25 32 32 68 74 74 70 25 33 41 25 32 46 25 32 46 77 77 77 2e 77 33 2e 6f 72 67 25 32 46 32 30 30 30 25 32 46 73 76 67 25 32 32 25 33 45 25 33 43 70 61 74 68 25 32 30 64 25 33 44 25 32 32 4d 31 32 25 32 30 32 32 43 36 2e 34 37 37 25 32 30 32 32 25 32 30 32 25 32 30 31 37 2e 35 32 33 25 32 30 32 25 32 30 31 32 53 36 2e 34 37 37 25 32 30 32 25 32 30 31 32 25 32 30 32 73 31 30 25 32 30 34 2e 34 37 37 25 32 30 31 30 25 32 30 31 30 2d 34 2e 34 37 37 Data Ascii: weui-BRAND); mask-image: url(data:image/svg+xml,%3Csvg%20width%3D%2224%22%20height%3D%2224%22%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%3E%3Cpath%20d%3D%22M12%2022C6.477%2022%202%2017.523%202%2012S6.477%202%2012%202s10%204.477%2010%2010-4.477
2022-11-29 15:33:50 UTC	402	IN	Data Raw: 64 74 68 3a 20 30 3b 0a 20 20 68 65 69 67 68 74 3a 20 30 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 2e 77 65 75 69 2d 73 77 69 74 63 68 2d 63 70 5f 5f 62 6f 78 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 2f 2a 0a 2a 20 54 65 6e 63 65 6e 74 20 69 73 20 70 6c 65 61 73 65 64 20 74 6f 20 73 75 70 70 6f 72 74 20 74 68 65 20 6f 70 65 6e 20 73 6f 75 72 63 65 20 63 6f 6d 6d 75 6e 69 74 79 20 62 79 20 6d 61 6b 69 6e 67 20 57 65 55 49 20 61 76 61 69 6c 61 62 6c 65 2e 0a 2a 20 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 37 20 54 48 4c 20 41 32 39 20 4c 69 6d 69 74 65 64 2c 20 61 20 54 65 6e 63 65 6e 74 20 63 6f 6d 70 61 6e 79 2e 20 41 6c 6c 20 72 69 67 68 Data Ascii: dth: 0; height: 0; opacity: 0; overflow: hidden;}.weui-switch-cp__box { display: block;}/** Tencent is pleased to support the open source community by making WeUI available.* * Copyright (C) 2017 THL A29 Limited, a Tencent company. All righ
2022-11-29 15:33:52 UTC	434	IN	Data Raw: 65 64 20 74 6f 20 73 75 70 70 6f 72 74 20 74 68 65 20 6f 70 65 6e 20 73 6f 75 72 63 65 20 63 6f 6d 6d 75 6e 69 74 79 20 62 79 20 6d 61 6b 69 6e 67 20 57 65 55 49 20 61 76 61 69 6c 61 62 6c 65 2e 0a 2a 20 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 37 20 54 48 4c 20 41 32 39 20 4c 69 6d 69 74 65 64 2c 20 61 20 54 65 6e 63 65 6e 74 20 63 6f 6d 70 61 6e 79 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 20 0a 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 74 68 65 20 22 4c 69 63 65 6e 73 65 22 29 3b 20 79 6f 75 20 6d 61 79 20 6e 6f 74 20 75 73 65 20 74 68 69 73 20 66 69 6c 65 20 65 78 63 65 70 74 20 69 6e 20 63 6f 6d 70 6c 69 61 6e 63 65 0a 2a 20 77 69 74 68 20 74 Data Ascii: ed to support the open source community by making WeUI available.* * Copyright (C) 2017 THL A29 Limited, a Tencent company. All rights reserved.* * Licensed under the MIT License (the "License"); you may not use this file except in compliance* with t
2022-11-29 15:33:54 UTC	482	IN	Data Raw: 69 6d 70 6c 69 65 64 2e 20 53 65 65 20 74 68 65 20 4c 69 63 65 6e 73 65 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 63 20 6c 61 6e 67 75 61 67 65 20 67 6f 76 65 72 6e 69 6e 67 20 70 65 72 6d 69 73 73 69 6f 6e 73 20 61 6e 64 0a 2a 20 6c 69 6d 69 74 61 74 69 6f 6e 73 20 75 6e 64 65 72 20 74 68 65 20 4c 69 63 65 6e 73 65 2e 0a 2a 2f 0a 2e 77 65 75 69 2d 64 69 61 6c 6f 67 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 35 30 30 30 3b 0a 20 20 74 6f 70 3a 20 35 30 25 3b 0a 20 20 6c 65 66 74 3a 20 31 36 70 78 3b 0a 20 20 72 69 67 68 74 3a 20 31 36 70 78 3b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 30 2c 20 2d 35 30 25 29 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f Data Ascii: implied. See the License for the specific language governing permissions and* limitations under the License.*/.weui-dialog { position: fixed; z-index: 5000; top: 50%; left: 16px; right: 16px; transform: translate(0, -50%); background-colo
2022-11-29 15:33:58 UTC	564	IN	Data Raw: 66 65 2d 61 72 65 61 2d 69 6e 73 65 74 2d 72 69 67 68 74 29 29 20 31 36 70 78 20 63 61 6c 63 28 31 36 70 78 20 2b 20 65 6e 76 28 73 61 66 65 2d 61 72 65 61 2d 69 6e 73 65 74 2d 6c 65 66 74 29 29 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 37 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 31 31 37 36 34 37 31 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 2e 77 65 75 69 2d 61 63 74 69 6f 6e 73 68 65 65 74 5f 5f 63 65 6c 6c 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 20 22 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 72 69 67 68 Data Ascii: fe-area-inset-right)) 16px calc(16px + env(safe-area-inset-left)); text-align: center; font-size: 17px; line-height: 1.41176471; overflow: hidden;}.weui-actionsheet__cell:before { content: " "; position: absolute; left: 0; top: 0; righ
2022-11-29 15:34:00 UTC	590	IN	Data Raw: 6e 65 3b 0a 7d 0a 2e 77 65 75 69 2d 61 67 72 65 65 5f 5f 74 65 78 74 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 65 75 69 2d 46 47 2d 31 29 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 70 78 3b 0a 7d 0a 2e 77 65 75 69 2d 61 67 72 65 65 5f 5f 63 68 65 63 6b 62 6f 78 20 7b 0a 20 20 61 70 70 65 61 72 61 6e 63 65 3a 20 6e 6f 6e 65 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 30 3b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 0a 20 20 6d 61 73 6b 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 30 3b 0a 20 20 Data Ascii: ne;}.weui-agree__text { color: var(--weui-FG-1); margin-left: 2px;}.weui-agree__checkbox { appearance: none; display: inline-block; border: 0; outline: 0; vertical-align: middle; background-color: currentColor; mask-position: 0 0;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
44	192.168.2.3	49843	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:33:43 UTC	99	OUT	GET /image/bootstrap.min.css HTTP/1.1 Host: usdtmen.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://usdtmen.com/index/passport/login.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
2022-11-29 15:33:44 UTC	125	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 29 Nov 2022 15:33:43 GMT Content-Type: text/css Content-Length: 121457 Last-Modified: Mon, 05 Sep 2022 04:11:01 GMT Connection: close Vary: Accept-Encoding ETag: "631576d5-1da71" Expires: Wed, 30 Nov 2022 03:33:43 GMT Cache-Control: max-age=43200 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2022-11-29 15:33:44 UTC	125	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 34 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 33 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 68 74 6d 6c 7b 66 6f 6e 74 Data Ascii: /! Bootstrap v3.4.1 (https://getbootstrap.com/) * Copyright 2011-2019 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */html{font
2022-11-29 15:33:45 UTC	199	IN	Data Raw: 72 3b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 2d 32 70 78 7d 66 69 67 75 72 65 7b 6d 61 72 67 69 6e 3a 30 7d 69 6d 67 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 63 61 72 6f 75 73 65 6c 2d 69 6e 6e 65 72 3e 2e 69 74 65 6d 3e 61 3e 69 6d 67 2c 2e 63 61 72 6f 75 73 65 6c 2d 69 6e 6e 65 72 3e 2e 69 74 65 6d 3e 69 6d 67 2c 2e 69 6d 67 2d 72 65 73 70 6f 6e 73 69 76 65 2c 2e 74 68 75 6d 62 6e 61 69 6c 20 61 3e 69 6d 67 2c 2e 74 68 75 6d 62 6e 61 69 6c 3e 69 6d 67 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 69 6d 67 2d 72 6f 75 6e 64 65 64 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 36 70 78 7d 2e 69 6d 67 2d 74 68 75 6d 62 6e 61 69 6c 7b 70 61 Data Ascii: r;outline-offset:-2px}figure{margin:0}img{vertical-align:middle}.carousel-inner>.item>a>img,.carousel-inner>.item>img,.img-responsive,.thumbnail a>img,.thumbnail>img{display:block;max-width:100%;height:auto}.img-rounded{border-radius:6px}.img-thumbnail{pa
2022-11-29 15:33:47 UTC	292	IN	Data Raw: 3a 68 6f 76 65 72 3e 2e 73 75 63 63 65 73 73 2c 2e 74 61 62 6c 65 2d 68 6f 76 65 72 3e 74 62 6f 64 79 3e 74 72 3e 74 64 2e 73 75 63 63 65 73 73 3a 68 6f 76 65 72 2c 2e 74 61 62 6c 65 2d 68 6f 76 65 72 3e 74 62 6f 64 79 3e 74 72 3e 74 68 2e 73 75 63 63 65 73 73 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 30 65 39 63 36 7d 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 2e 69 6e 66 6f 3e 74 64 2c 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 2e 69 6e 66 6f 3e 74 68 2c 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 3e 74 64 2e 69 6e 66 6f 2c 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 3e 74 68 2e 69 6e 66 6f 2c 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 2e 69 6e 66 6f 3e 74 64 2c 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 2e Data Ascii: :hover>.success,.table-hover>tbody>tr>td.success:hover,.table-hover>tbody>tr>th.success:hover{background-color:#d0e9c6}.table>tbody>tr.info>td,.table>tbody>tr.info>th,.table>tbody>tr>td.info,.table>tbody>tr>th.info,.table>tfoot>tr.info>td,.table>tfoot>tr.
2022-11-29 15:33:48 UTC	350	IN	Data Raw: 2c 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 66 6f 63 75 73 2c 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 33 37 61 62 37 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 32 65 36 64 61 34 7d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 20 2e 62 61 64 67 65 7b 63 6f 6c 6f 72 3a 23 33 33 37 61 62 37 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 62 74 6e 2d 73 75 63 63 65 73 73 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c Data Ascii: ,fieldset[disabled] .btn-primary.focus,fieldset[disabled] .btn-primary:focus,fieldset[disabled] .btn-primary:hover{background-color:#337ab7;border-color:#2e6da4}.btn-primary .badge{color:#337ab7;background-color:#fff}.btn-success{color:#fff;background-col
2022-11-29 15:33:50 UTC	418	IN	Data Raw: 61 72 67 69 6e 3a 39 70 78 20 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 35 65 35 65 35 7d 2e 6e 61 76 3e 6c 69 3e 61 3e 69 6d 67 7b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 7d 2e 6e 61 76 2d 74 61 62 73 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 7d 2e 6e 61 76 2d 74 61 62 73 3e 6c 69 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 31 70 78 7d 2e 6e 61 76 2d 74 61 62 73 3e 6c 69 3e 61 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 32 38 35 37 31 34 33 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d Data Ascii: argin:9px 0;overflow:hidden;background-color:#e5e5e5}.nav>li>a>img{max-width:none}.nav-tabs{border-bottom:1px solid #ddd}.nav-tabs>li{float:left;margin-bottom:-1px}.nav-tabs>li>a{margin-right:2px;line-height:1.42857143;border:1px solid transparent;border-
2022-11-29 15:33:52 UTC	450	IN	Data Raw: 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 39 35 33 34 66 7d 2e 6c 61 62 65 6c 2d 64 61 6e 67 65 72 5b 68 72 65 66 5d 3a 66 6f 63 75 73 2c 2e 6c 61 62 65 6c 2d 64 61 6e 67 65 72 5b 68 72 65 66 5d 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 63 39 33 30 32 63 7d 2e 62 61 64 67 65 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 69 6e 2d 77 69 64 74 68 3a 31 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 70 78 20 37 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 Data Ascii: r{background-color:#d9534f}.label-danger[href]:focus,.label-danger[href]:hover{background-color:#c9302c}.badge{display:inline-block;min-width:10px;padding:3px 7px;font-size:12px;font-weight:700;line-height:1;color:#fff;text-align:center;white-space:nowrap
2022-11-29 15:33:54 UTC	498	IN	Data Raw: 3a 33 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 33 70 78 7d 2e 70 61 6e 65 6c 3e 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 2e 74 61 62 6c 65 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 62 6f 64 79 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 72 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 70 61 6e 65 6c 3e 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 2e 74 61 62 6c 65 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 66 6f 6f 74 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 72 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 70 61 6e 65 6c 3e 2e 74 61 62 6c 65 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 62 6f 64 79 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 72 3a 6c 61 73 74 2d Data Ascii: :3px;border-bottom-left-radius:3px}.panel>.table-responsive:last-child>.table:last-child>tbody:last-child>tr:last-child,.panel>.table-responsive:last-child>.table:last-child>tfoot:last-child>tr:last-child,.panel>.table:last-child>tbody:last-child>tr:last-
2022-11-29 15:33:55 UTC	530	IN	Data Raw: 23 38 30 30 30 30 30 30 30 27 2c 20 65 6e 64 43 6f 6c 6f 72 73 74 72 3d 27 23 30 30 30 30 30 30 30 30 27 2c 20 47 72 61 64 69 65 6e 74 54 79 70 65 3d 31 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 2d 78 7d 2e 63 61 72 6f 75 73 65 6c 2d 63 6f 6e 74 72 6f 6c 2e 72 69 67 68 74 7b 72 69 67 68 74 3a 30 3b 6c 65 66 74 3a 61 75 74 6f 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 6c 65 66 74 2c 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 30 30 31 29 20 30 2c 72 67 62 61 28 30 2c 30 2c 30 2c 2e 35 29 20 31 30 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 6c 65 66 74 2c 72 67 62 61 28 Data Ascii: #80000000', endColorstr='#00000000', GradientType=1);background-repeat:repeat-x}.carousel-control.right{right:0;left:auto;background-image:-webkit-linear-gradient(left,rgba(0,0,0,.0001) 0,rgba(0,0,0,.5) 100%);background-image:-o-linear-gradient(left,rgba(

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
45	192.168.2.3	49841	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:33:43 UTC	99	OUT	GET /image/iconfont.css HTTP/1.1 Host: usdtmen.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://usdtmen.com/index/passport/login.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
2022-11-29 15:33:44 UTC	157	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 29 Nov 2022 15:33:43 GMT Content-Type: text/css Content-Length: 25550 Last-Modified: Mon, 05 Sep 2022 04:12:01 GMT Connection: close Vary: Accept-Encoding ETag: "63157711-63ce" Expires: Wed, 30 Nov 2022 03:33:43 GMT Cache-Control: max-age=43200 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2022-11-29 15:33:44 UTC	157	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 69 63 6f 6e 66 6f 6e 74 22 3b 20 2f 2a 20 50 72 6f 6a 65 63 74 20 69 64 20 37 37 32 37 33 31 20 2a 2f 0a 20 20 73 72 63 3a 20 0a 20 20 20 20 20 20 20 75 72 6c 28 27 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 66 6f 6e 74 2d 77 6f 66 66 32 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3b 62 61 73 65 36 34 2c 64 30 39 47 4d 67 41 42 41 41 41 41 41 44 78 6b 41 41 73 41 41 41 41 41 62 61 77 41 41 44 77 54 41 41 45 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 48 46 51 47 59 41 43 50 4d 41 71 42 74 68 79 42 6b 77 63 42 4e 67 49 6b 41 34 4a 34 43 34 45 2b 41 41 51 67 42 59 52 6e 42 34 68 53 47 35 56 61 4e 65 4f 59 70 62 67 64 Data Ascii: @font-face { font-family: "iconfont"; /* Project id 772731 */ src: url('data:application/x-font-woff2;charset=utf-8;base64,d09GMgABAAAAADxkAAsAAAAAbawAADwTAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHFQGYACPMAqBthyBkwcBNgIkA4J4C4E+AAQgBYRnB4hSG5VaNeOYpbgd
2022-11-29 15:33:45 UTC	190	IN	Data Raw: 76 49 44 73 72 4d 44 66 6b 42 54 51 2f 49 4d 63 2f 4f 44 4d 30 42 31 71 39 75 62 6a 2b 67 4e 4e 6a 4d 79 71 30 34 45 50 39 78 31 41 6e 58 77 63 55 43 4b 44 6c 78 6a 50 4c 62 55 61 50 57 35 36 52 36 44 56 50 48 55 37 4d 6b 61 31 31 53 31 4b 45 58 36 42 53 62 76 73 61 66 62 33 6a 52 41 51 33 74 36 79 31 2b 61 63 72 39 50 6a 6f 2b 72 7a 47 5a 42 63 55 79 6e 33 58 50 32 36 33 63 55 73 33 35 33 2b 49 55 70 56 31 55 59 65 73 32 35 38 6e 4d 38 67 47 42 76 51 48 2b 48 54 4a 73 72 69 52 6b 64 77 73 6d 56 35 62 57 36 66 56 79 37 49 34 6e 46 54 33 62 58 51 71 72 73 37 64 35 71 35 44 79 6d 58 4a 79 56 4c 35 2f 76 38 68 59 48 6e 35 6d 62 36 52 76 74 62 79 6d 51 31 46 53 63 68 31 6d 64 4a 67 51 65 56 75 70 2b 47 56 5a 38 42 69 6e 33 69 59 6e 71 62 32 69 73 2b 66 33 6c Data Ascii: vIDsrMDfkBTQ/IMc/ODM0B1q9ubj+gNNjMyq04EP9x1AnXwcUCKDlxjPLbUaPW56R6DVPHU7Mka11S1KEX6BSbvsafb3jRAQ3t6y1+acr9Pjo+rzGZBcUyn3XP263cUs353+IUpV1UYes258nM8gGBvQH+HTJsriRkdwsmV5bW6fVy7I4nFT3bXQqrs7d5q5DymXJyVL5/v8hYHn5mb6RvtbymQ1FSch1mdJgQeVup+GVZ8Bin3iYnqb2is+f3l

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
46	192.168.2.3	49838	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:33:43 UTC	100	OUT	GET /image/common.css HTTP/1.1 Host: usdtmen.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://usdtmen.com/index/passport/login.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
2022-11-29 15:33:44 UTC	118	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 29 Nov 2022 15:33:43 GMT Content-Type: text/css Content-Length: 7112 Last-Modified: Mon, 05 Sep 2022 04:11:06 GMT Connection: close Vary: Accept-Encoding ETag: "631576da-1bc8" Expires: Wed, 30 Nov 2022 03:33:43 GMT Cache-Control: max-age=43200 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2022-11-29 15:33:44 UTC	118	IN	Data Raw: 68 74 6d 6c 2c 0a 62 6f 64 79 20 7b 68 65 69 67 68 74 3a 20 31 30 30 25 3b 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 20 20 20 20 66 6f 6e 74 3a 20 31 34 70 78 20 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 48 65 6c 76 65 74 69 63 61 2c 50 69 6e 67 46 61 6e 67 20 53 43 2c 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 32 37 30 64 65 67 2c 23 31 65 32 35 33 34 2c 23 30 63 31 61 33 37 29 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 7d 0a 2e 69 6d 67 20 7b 77 69 64 74 68 3a 20 31 30 30 25 7d 0a 2e 74 6c 20 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 7d 0a 2e 74 63 20 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 7d 0a 2e 74 Data Ascii: html,body {height: 100%; width: 100%; font: 14px Helvetica Neue,Helvetica,PingFang SC,Tahoma,Arial,sans-serif;background: linear-gradient(270deg,#1e2534,#0c1a37); color: #fff;}.img {width: 100%}.tl {text-align: left;}.tc {text-align: center;}.t

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
47	192.168.2.3	49839	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:33:43 UTC	101	OUT	GET /image/zepto.min.js HTTP/1.1 Host: usdtmen.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://usdtmen.com/index/passport/login.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
2022-11-29 15:33:45 UTC	174	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 29 Nov 2022 15:33:44 GMT Content-Type: application/javascript Content-Length: 29237 Last-Modified: Mon, 05 Sep 2022 04:13:57 GMT Connection: close Vary: Accept-Encoding ETag: "63157785-7235" Expires: Wed, 30 Nov 2022 03:33:44 GMT Cache-Control: max-age=43200 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2022-11-29 15:33:45 UTC	174	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 29 7d 29 3a 65 28 74 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 74 2b 22 22 3a 57 5b 59 2e 63 61 6c 6c 28 74 29 5d 7c 7c 22 6f 62 6a 65 63 74 22 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 65 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 74 26 26 74 3d 3d 74 2e 77 Data Ascii: !function(t,e){"function"==typeof define&&define.amd?define(function(){return e(t)}):e(t)}(this,function(t){var e=function(){function e(t){return null==t?t+"":W[Y.call(t)]\|\|"object"}function n(t){return"function"==e(t)}function r(t){return null!=t&&t==t.w
2022-11-29 15:33:45 UTC	215	IN	Data Raw: 75 6d 65 6e 74 73 29 3a 76 6f 69 64 20 30 7d 29 2c 72 2e 64 65 6c 3d 66 3b 76 61 72 20 64 3d 66 7c 7c 6f 3b 72 2e 70 72 6f 78 79 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 3d 6c 28 65 29 2c 21 65 2e 69 73 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 28 29 29 7b 65 2e 64 61 74 61 3d 75 3b 76 61 72 20 6e 3d 64 2e 61 70 70 6c 79 28 74 2c 65 2e 5f 61 72 67 73 3d 3d 68 3f 5b 65 5d 3a 5b 65 5d 2e 63 6f 6e 63 61 74 28 65 2e 5f 61 72 67 73 29 29 3b 72 65 74 75 72 6e 20 6e 3d 3d 3d 21 31 26 26 28 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 65 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 29 2c 6e 7d 7d 2c 72 2e 69 3d 6d 2e 6c 65 6e 67 74 68 2c 6d 2e 70 75 73 68 28 72 29 2c 22 61 64 64 45 76 65 6e 74 Data Ascii: uments):void 0}),r.del=f;var d=f\|\|o;r.proxy=function(e){if(e=l(e),!e.isImmediatePropagationStopped()){e.data=u;var n=d.apply(t,e._args==h?[e]:[e].concat(e._args));return n===!1&&(e.preventDefault(),e.stopPropagation()),n}},r.i=m.length,m.push(r),"addEvent

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
48	192.168.2.3	49842	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:33:44 UTC	117	OUT	GET /image/jquery.min.js HTTP/1.1 Host: usdtmen.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://usdtmen.com/index/passport/login.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
2022-11-29 15:33:46 UTC	244	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 29 Nov 2022 15:33:44 GMT Content-Type: application/javascript Content-Length: 92629 Last-Modified: Mon, 05 Sep 2022 04:12:07 GMT Connection: close Vary: Accept-Encoding ETag: "63157717-169d5" Expires: Wed, 30 Nov 2022 03:33:44 GMT Cache-Control: max-age=43200 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2022-11-29 15:33:46 UTC	244	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 39 2e 31 20 7c 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 32 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 2f 2f 40 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 6a 71 75 65 72 79 2e 6d 69 6e 2e 6d 61 70 0a 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 2c 69 3d 74 79 70 65 6f 66 20 74 2c 6f 3d 65 2e 64 6f 63 75 6d 65 6e 74 2c 61 3d 65 2e 6c 6f 63 61 74 69 6f 6e 2c 73 3d 65 2e 6a 51 75 65 72 79 2c 75 3d 65 2e 24 2c 6c 3d 7b 7d 2c 63 3d 5b 5d 2c 70 3d 22 31 2e 39 2e 31 22 2c 66 3d 63 2e 63 6f 6e 63 61 74 2c 64 3d 63 2e 70 75 73 68 2c 68 3d 63 2e 73 6c 69 63 65 2c 67 3d 63 2e 69 6e 64 65 78 4f Data Ascii: /! jQuery v1.9.1 \| (c) 2005, 2012 jQuery Foundation, Inc. \| jquery.org/license//@ sourceMappingURL=jquery.min.map/(function(e,t){var n,r,i=typeof t,o=e.document,a=e.location,s=e.jQuery,u=e.$,l={},c=[],p="1.9.1",f=c.concat,d=c.push,h=c.slice,g=c.indexO
2022-11-29 15:33:50 UTC	386	IN	Data Raw: 73 2c 65 29 7d 29 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 57 28 65 2c 6e 2c 72 29 7b 69 66 28 72 3d 3d 3d 74 26 26 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 7b 76 61 72 20 69 3d 22 64 61 74 61 2d 22 2b 6e 2e 72 65 70 6c 61 63 65 28 42 2c 22 2d 24 31 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 69 66 28 72 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 69 29 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 72 29 7b 74 72 79 7b 72 3d 22 74 72 75 65 22 3d 3d 3d 72 3f 21 30 3a 22 66 61 6c 73 65 22 3d 3d 3d 72 3f 21 31 3a 22 6e 75 6c 6c 22 3d 3d 3d 72 3f 6e 75 6c 6c 3a 2b 72 2b 22 22 3d 3d 3d 72 3f 2b 72 3a 4f 2e 74 65 73 74 28 72 29 3f 62 2e 70 61 72 73 65 4a 53 4f 4e 28 72 29 3a 72 7d 63 61 74 63 68 28 6f 29 7b 7d 62 2e 64 61 74 61 28 65 2c 6e Data Ascii: s,e)})}});function W(e,n,r){if(r===t&&1===e.nodeType){var i="data-"+n.replace(B,"-$1").toLowerCase();if(r=e.getAttribute(i),"string"==typeof r){try{r="true"===r?!0:"false"===r?!1:"null"===r?null:+r+""===r?+r:O.test(r)?b.parseJSON(r):r}catch(o){}b.data(e,n
2022-11-29 15:33:52 UTC	466	IN	Data Raw: 2e 6e 6f 64 65 4e 61 6d 65 28 74 68 69 73 2c 22 66 6f 72 6d 22 29 3f 21 31 3a 28 62 2e 65 76 65 6e 74 2e 61 64 64 28 74 68 69 73 2c 22 63 6c 69 63 6b 2e 5f 73 75 62 6d 69 74 20 6b 65 79 70 72 65 73 73 2e 5f 73 75 62 6d 69 74 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 74 61 72 67 65 74 2c 72 3d 62 2e 6e 6f 64 65 4e 61 6d 65 28 6e 2c 22 69 6e 70 75 74 22 29 7c 7c 62 2e 6e 6f 64 65 4e 61 6d 65 28 6e 2c 22 62 75 74 74 6f 6e 22 29 3f 6e 2e 66 6f 72 6d 3a 74 3b 72 26 26 21 62 2e 5f 64 61 74 61 28 72 2c 22 73 75 62 6d 69 74 42 75 62 62 6c 65 73 22 29 26 26 28 62 2e 65 76 65 6e 74 2e 61 64 64 28 72 2c 22 73 75 62 6d 69 74 2e 5f 73 75 62 6d 69 74 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 5f 73 75 62 6d 69 74 5f 62 75 62 62 6c 65 3d 21 Data Ascii: .nodeName(this,"form")?!1:(b.event.add(this,"click._submit keypress._submit",function(e){var n=e.target,r=b.nodeName(n,"input")\|\|b.nodeName(n,"button")?n.form:t;r&&!b._data(r,"submitBubbles")&&(b.event.add(r,"submit._submit",function(e){e._submit_bubble=!
2022-11-29 15:33:54 UTC	514	IN	Data Raw: 29 3b 72 65 74 75 72 6e 20 65 7d 29 7d 7d 3b 66 6f 72 28 6e 20 69 6e 7b 72 61 64 69 6f 3a 21 30 2c 63 68 65 63 6b 62 6f 78 3a 21 30 2c 66 69 6c 65 3a 21 30 2c 70 61 73 73 77 6f 72 64 3a 21 30 2c 69 6d 61 67 65 3a 21 30 7d 29 69 2e 70 73 65 75 64 6f 73 5b 6e 5d 3d 6c 74 28 6e 29 3b 66 6f 72 28 6e 20 69 6e 7b 73 75 62 6d 69 74 3a 21 30 2c 72 65 73 65 74 3a 21 30 7d 29 69 2e 70 73 65 75 64 6f 73 5b 6e 5d 3d 63 74 28 6e 29 3b 66 75 6e 63 74 69 6f 6e 20 66 74 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 2c 6f 2c 61 2c 73 2c 75 2c 6c 2c 63 3d 45 5b 65 2b 22 20 22 5d 3b 69 66 28 63 29 72 65 74 75 72 6e 20 74 3f 30 3a 63 2e 73 6c 69 63 65 28 30 29 3b 73 3d 65 2c 75 3d 5b 5d 2c 6c 3d 69 2e 70 72 65 46 69 6c 74 65 72 3b 77 68 69 6c 65 28 73 29 7b 28 21 6e 7c 7c 28 72 3d Data Ascii: );return e})}};for(n in{radio:!0,checkbox:!0,file:!0,password:!0,image:!0})i.pseudos[n]=lt(n);for(n in{submit:!0,reset:!0})i.pseudos[n]=ct(n);function ft(e,t){var n,r,o,a,s,u,l,c=E[e+" "];if(c)return t?0:c.slice(0);s=e,u=[],l=i.preFilter;while(s){(!n\|\|(r=
2022-11-29 15:33:56 UTC	545	IN	Data Raw: 59 74 3d 52 65 67 45 78 70 28 22 5e 28 22 2b 78 2b 22 29 28 3f 21 70 78 29 5b 61 2d 7a 25 5d 2b 24 22 2c 22 69 22 29 2c 4a 74 3d 52 65 67 45 78 70 28 22 5e 28 5b 2b 2d 5d 29 3d 28 22 2b 78 2b 22 29 22 2c 22 69 22 29 2c 47 74 3d 7b 42 4f 44 59 3a 22 62 6c 6f 63 6b 22 7d 2c 51 74 3d 7b 70 6f 73 69 74 69 6f 6e 3a 22 61 62 73 6f 6c 75 74 65 22 2c 76 69 73 69 62 69 6c 69 74 79 3a 22 68 69 64 64 65 6e 22 2c 64 69 73 70 6c 61 79 3a 22 62 6c 6f 63 6b 22 7d 2c 4b 74 3d 7b 6c 65 74 74 65 72 53 70 61 63 69 6e 67 3a 30 2c 66 6f 6e 74 57 65 69 67 68 74 3a 34 30 30 7d 2c 5a 74 3d 5b 22 54 6f 70 22 2c 22 52 69 67 68 74 22 2c 22 42 6f 74 74 6f 6d 22 2c 22 4c 65 66 74 22 5d 2c 65 6e 3d 5b 22 57 65 62 6b 69 74 22 2c 22 4f 22 2c 22 4d 6f 7a 22 2c 22 6d 73 22 5d 3b 66 75 6e Data Ascii: Yt=RegExp("^("+x+")(?!px)[a-z%]+$","i"),Jt=RegExp("^([+-])=("+x+")","i"),Gt={BODY:"block"},Qt={position:"absolute",visibility:"hidden",display:"block"},Kt={letterSpacing:0,fontWeight:400},Zt=["Top","Right","Bottom","Left"],en=["Webkit","O","Moz","ms"];fun
2022-11-29 15:33:59 UTC	580	IN	Data Raw: 43 72 65 64 65 6e 74 69 61 6c 73 22 69 6e 20 52 6e 2c 52 6e 3d 62 2e 73 75 70 70 6f 72 74 2e 61 6a 61 78 3d 21 21 52 6e 2c 52 6e 26 26 62 2e 61 6a 61 78 54 72 61 6e 73 70 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 21 6e 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 62 2e 73 75 70 70 6f 72 74 2e 63 6f 72 73 29 7b 76 61 72 20 72 3b 72 65 74 75 72 6e 7b 73 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6f 29 7b 76 61 72 20 61 2c 73 2c 75 3d 6e 2e 78 68 72 28 29 3b 69 66 28 6e 2e 75 73 65 72 6e 61 6d 65 3f 75 2e 6f 70 65 6e 28 6e 2e 74 79 70 65 2c 6e 2e 75 72 6c 2c 6e 2e 61 73 79 6e 63 2c 6e 2e 75 73 65 72 6e 61 6d 65 2c 6e 2e 70 61 73 73 77 6f 72 64 29 3a 75 2e 6f 70 65 6e 28 6e 2e 74 79 70 65 2c 6e 2e 75 72 6c 2c 6e 2e 61 73 79 6e 63 29 2c 6e 2e 78 Data Ascii: Credentials"in Rn,Rn=b.support.ajax=!!Rn,Rn&&b.ajaxTransport(function(n){if(!n.crossDomain\|\|b.support.cors){var r;return{send:function(i,o){var a,s,u=n.xhr();if(n.username?u.open(n.type,n.url,n.async,n.username,n.password):u.open(n.type,n.url,n.async),n.x

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
49	192.168.2.3	49845	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:33:45 UTC	173	OUT	GET /image/weui.min.js HTTP/1.1 Host: usdtmen.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://usdtmen.com/index/passport/login.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
2022-11-29 15:33:46 UTC	260	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 29 Nov 2022 15:33:45 GMT Content-Type: application/javascript Content-Length: 36806 Last-Modified: Mon, 05 Sep 2022 04:13:50 GMT Connection: close Vary: Accept-Encoding ETag: "6315777e-8fc6" Expires: Wed, 30 Nov 2022 03:33:45 GMT Cache-Control: max-age=43200 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2022-11-29 15:33:46 UTC	260	IN	Data Raw: 2f 2a 21 0a 20 2a 20 77 65 75 69 2e 6a 73 20 76 31 2e 32 2e 31 20 28 68 74 74 70 73 3a 2f 2f 77 65 75 69 2e 69 6f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 39 2c 20 77 65 63 68 61 74 20 75 69 20 74 65 61 6d 0a 20 2a 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 Data Ascii: /! weui.js v1.2.1 (https://weui.io) * Copyright 2019, wechat ui team * MIT license */!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?ex
2022-11-29 15:33:48 UTC	366	IN	Data Raw: 75 69 2d 74 61 62 62 61 72 5f 5f 69 74 65 6d 22 29 2c 61 3d 6e 2e 66 69 6e 64 28 22 2e 77 65 75 69 2d 74 61 62 5f 5f 63 6f 6e 74 65 6e 74 22 29 3b 69 2e 65 71 28 74 2e 64 65 66 61 75 6c 74 49 6e 64 65 78 29 2e 61 64 64 43 6c 61 73 73 28 22 77 65 75 69 2d 62 61 72 5f 5f 69 74 65 6d 5f 6f 6e 22 29 2c 61 2e 65 71 28 74 2e 64 65 66 61 75 6c 74 49 6e 64 65 78 29 2e 73 68 6f 77 28 29 2c 69 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 28 30 2c 72 2e 64 65 66 61 75 6c 74 29 28 74 68 69 73 29 2c 6e 3d 65 2e 69 6e 64 65 78 28 29 3b 69 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 77 65 75 69 2d 62 61 72 5f 5f 69 74 65 6d 5f 6f 6e 22 29 2c 65 2e 61 64 64 43 6c 61 73 73 28 22 77 65 75 69 2d 62 61 72 5f 5f 69 74 65 6d 5f 6f 6e 22 Data Ascii: ui-tabbar__item"),a=n.find(".weui-tab__content");i.eq(t.defaultIndex).addClass("weui-bar__item_on"),a.eq(t.defaultIndex).show(),i.on("click",function(){var e=(0,r.default)(this),n=e.index();i.removeClass("weui-bar__item_on"),e.addClass("weui-bar__item_on"
2022-11-29 15:33:49 UTC	382	IN	Data Raw: 72 6f 77 48 65 69 67 68 74 29 2a 70 2e 72 6f 77 48 65 69 67 68 74 3b 76 61 72 20 74 3d 66 28 70 2e 6f 66 66 73 65 74 2c 70 2e 72 6f 77 48 65 69 67 68 74 29 2c 6e 3d 63 28 70 2e 6f 66 66 73 65 74 2c 70 2e 72 6f 77 48 65 69 67 68 74 2c 70 2e 69 74 65 6d 73 2e 6c 65 6e 67 74 68 29 3b 79 3e 74 26 26 28 79 3d 74 29 2c 79 3c 6e 26 26 28 79 3d 6e 29 3b 66 6f 72 28 76 61 72 20 69 3d 70 2e 6f 66 66 73 65 74 2d 79 2f 70 2e 72 6f 77 48 65 69 67 68 74 3b 70 2e 69 74 65 6d 73 5b 69 5d 26 26 70 2e 69 74 65 6d 73 5b 69 5d 2e 64 69 73 61 62 6c 65 64 3b 29 65 3e 30 3f 2b 2b 69 3a 2d 2d 69 3b 79 3d 28 70 2e 6f 66 66 73 65 74 2d 69 29 2a 70 2e 72 6f 77 48 65 69 67 68 74 2c 75 28 6d 2c 2e 33 29 2c 6c 28 6d 2c 79 29 2c 70 2e 6f 6e 43 68 61 6e 67 65 2e 63 61 6c 6c 28 6f 2c 70 Data Ascii: rowHeight)p.rowHeight;var t=f(p.offset,p.rowHeight),n=c(p.offset,p.rowHeight,p.items.length);y>t&&(y=t),y<n&&(y=n);for(var i=p.offset-y/p.rowHeight;p.items[i]&&p.items[i].disabled;)e>0?++i:--i;y=(p.offset-i)p.rowHeight,u(m,.3),l(m,y),p.onChange.call(o,p

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
5	192.168.2.3	49705	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:32:30 UTC	7	OUT	GET /index/passport/logout.html HTTP/1.1 Host: usdtmen.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
50	192.168.2.3	49849	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:33:46 UTC	276	OUT	GET /layer3.1/layer.js HTTP/1.1 Host: usdtmen.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://usdtmen.com/index/passport/login.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
2022-11-29 15:33:48 UTC	309	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 29 Nov 2022 15:33:47 GMT Content-Type: application/javascript Content-Length: 22116 Last-Modified: Sat, 05 Jun 2021 10:36:02 GMT Connection: close Vary: Accept-Encoding ETag: "60bb5392-5664" Expires: Wed, 30 Nov 2022 03:33:47 GMT Cache-Control: max-age=43200 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2022-11-29 15:33:48 UTC	309	IN	Data Raw: 2f 2a 21 20 6c 61 79 65 72 2d 76 33 2e 31 2e 31 20 57 65 62 e5 bc b9 e5 b1 82 e7 bb 84 e4 bb b6 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 20 68 74 74 70 3a 2f 2f 6c 61 79 65 72 2e 6c 61 79 75 69 2e 63 6f 6d 2f 20 20 42 79 20 e8 b4 a4 e5 bf 83 20 2a 2f 0a 20 3b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 2c 6e 2c 61 3d 65 2e 6c 61 79 75 69 26 26 6c 61 79 75 69 2e 64 65 66 69 6e 65 2c 6f 3d 7b 67 65 74 50 61 74 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3f 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 2e 73 72 63 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 2c 74 3d 64 6f 63 75 6d 65 6e 74 Data Ascii: /! layer-v3.1.1 Web MIT License http://layer.layui.com/ By / ;!function(e,t){"use strict";var i,n,a=e.layui&&layui.define,o={getPath:function(){var e=document.currentScript?document.currentScript.src:function(){for(var e,t=document
2022-11-29 15:33:48 UTC	341	IN	Data Raw: 22 2b 6c 5b 34 5d 2b 65 29 5b 30 5d 3b 66 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 22 22 29 2c 66 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 63 6c 6f 73 65 28 29 2c 74 2e 66 69 6e 64 28 22 2e 22 2b 6c 5b 35 5d 29 5b 30 5d 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 66 29 7d 63 61 74 63 68 28 63 29 7b 7d 74 5b 30 5d 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 22 2c 74 2e 72 65 6d 6f 76 65 28 29 7d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 2e 65 6e 64 5b 65 5d 26 26 6f 2e 65 6e 64 5b 65 5d 28 29 2c 64 65 6c 65 74 65 20 6f 2e 65 6e 64 5b 65 5d 7d 3b 74 2e 64 61 74 61 28 22 69 73 4f 75 74 41 6e 69 6d 22 29 26 26 74 2e 61 64 64 43 6c 61 73 73 28 22 6c 61 79 65 72 2d 61 6e 69 6d 20 22 2b 61 29 2c 69 28 22 Data Ascii: "+l[4]+e)[0];f.contentWindow.document.write(""),f.contentWindow.close(),t.find("."+l[5])[0].removeChild(f)}catch(c){}t[0].innerHTML="",t.remove()}"function"==typeof o.end[e]&&o.end[e](),delete o.end[e]};t.data("isOutAnim")&&t.addClass("layer-anim "+a),i("

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
51	192.168.2.3	49848	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:33:47 UTC	308	OUT	GET /image/common.js HTTP/1.1 Host: usdtmen.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://usdtmen.com/index/passport/login.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
2022-11-29 15:33:48 UTC	347	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 29 Nov 2022 15:33:48 GMT Content-Type: application/javascript Content-Length: 2614 Last-Modified: Mon, 05 Sep 2022 04:11:07 GMT Connection: close Vary: Accept-Encoding ETag: "631576db-a36" Expires: Wed, 30 Nov 2022 03:33:48 GMT Cache-Control: max-age=43200 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2022-11-29 15:33:48 UTC	347	IN	Data Raw: 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 2f 2f 66 6c 61 67 20 3d 20 77 69 6e 64 6f 77 2e 73 65 74 49 6e 74 65 72 76 61 6c 28 69 73 6f 6e 6c 69 6e 65 2c 20 35 30 30 29 3b 0d 0a 09 24 28 27 23 64 69 61 6c 6f 67 73 27 29 2e 6f 6e 28 27 63 6c 69 63 6b 27 2c 20 27 2e 77 65 75 69 2d 64 69 61 6c 6f 67 5f 5f 62 74 6e 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 09 24 28 74 68 69 73 29 2e 70 61 72 65 6e 74 73 28 27 2e 6a 73 5f 64 69 61 6c 6f 67 27 29 2e 66 61 64 65 4f 75 74 28 32 30 30 29 3b 0d 0a 09 09 24 28 74 68 69 73 29 2e 70 61 72 65 6e 74 73 28 27 2e 6a 73 5f 64 69 61 6c 6f 67 27 29 2e 61 74 74 72 28 27 61 72 69 61 2d 68 69 64 64 65 6e 27 2c 20 27 74 72 75 65 27 29 3b 0d 0a 09 09 24 28 74 68 Data Ascii: $(document).ready(function() {//flag = window.setInterval(isonline, 500);$('#dialogs').on('click', '.weui-dialog__btn', function() {$(this).parents('.js_dialog').fadeOut(200);$(this).parents('.js_dialog').attr('aria-hidden', 'true');$(th

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
52	192.168.2.3	49858	142.251.143.67	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:33:55 UTC	537	OUT	POST /domainreliability/upload HTTP/1.1 Host: beacons.gcp.gvt2.com Connection: keep-alive Content-Length: 281 Content-Type: application/json; charset=utf-8 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-11-29 15:33:55 UTC	538	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 68 74 74 70 5f 72 65 73 70 6f 6e 73 65 5f 63 6f 64 65 22 3a 32 30 30 2c 22 6e 65 74 77 6f 72 6b 5f 63 68 61 6e 67 65 64 22 3a 66 61 6c 73 65 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 48 54 54 50 53 22 2c 22 72 65 71 75 65 73 74 5f 61 67 65 5f 6d 73 22 3a 36 31 31 39 31 2c 22 72 65 71 75 65 73 74 5f 65 6c 61 70 73 65 64 5f 6d 73 22 3a 34 32 36 2c 22 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 30 2e 30 35 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 34 32 2e 32 35 30 2e 31 38 35 2e 37 38 3a 34 34 33 22 2c 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 65 6e 63 72 79 70 74 65 64 2d 74 62 6e 30 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 22 2c 22 77 61 73 5f 70 72 6f 78 69 65 64 22 3a 66 61 Data Ascii: {"entries":[{"http_response_code":200,"network_changed":false,"protocol":"HTTPS","request_age_ms":61191,"request_elapsed_ms":426,"sample_rate":0.05,"server_ip":"142.250.185.78:443","status":"ok","url":"https://encrypted-tbn0.gstatic.com/","was_proxied":fa
2022-11-29 15:33:55 UTC	538	IN	HTTP/1.1 307 Temporary Redirect Report-To: {"endpoints":[{"priority":1,"url":"https://beacons.gcp.gvt2.com/domainreliability/upload-nel","weight":1},{"priority":1,"url":"https://beacons.gvt2.com/domainreliability/upload-nel","weight":1},{"priority":1,"url":"https://beacons2.gvt2.com/domainreliability/upload-nel","weight":1},{"priority":1,"url":"https://beacons3.gvt2.com/domainreliability/upload-nel","weight":1},{"priority":1,"url":"https://beacons4.gvt2.com/domainreliability/upload-nel","weight":1},{"priority":1,"url":"https://clients2.google.com/domainreliability/upload-nel","weight":1},{"priority":2,"url":"https://beacons5.gvt2.com/domainreliability/upload-nel","weight":1},{"priority":2,"url":"https://beacons5.gvt3.com/domainreliability/upload-nel","weight":1}],"group":"nel","max_age":300} NEL: {"failure_fraction":1,"include_subdomains":false,"max_age":300,"report_to":"nel","success_fraction":0.25} Location: https://e2c27.gcp.gvt2.com/nel/ Content-Type: application/javascript; charset=utf-8 Date: Tue, 29 Nov 2022 15:33:55 GMT Server: Domain Reliability Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
53	192.168.2.3	49860	172.217.13.227	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:33:55 UTC	539	OUT	OPTIONS /domainreliability/upload-nel HTTP/1.1 Host: beacons2.gvt2.com Connection: keep-alive Origin: https://beacons.gcp.gvt2.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-11-29 15:33:55 UTC	540	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: POST Access-Control-Allow-Origin: * Date: Tue, 29 Nov 2022 15:33:55 GMT Content-Type: text/html Server: Domain Reliability Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
54	192.168.2.3	49859	35.227.159.135	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:33:55 UTC	540	OUT	POST /nel/ HTTP/1.1 Host: e2c27.gcp.gvt2.com Connection: keep-alive Content-Length: 281 Content-Type: application/json; charset=utf-8 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-11-29 15:33:55 UTC	540	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 68 74 74 70 5f 72 65 73 70 6f 6e 73 65 5f 63 6f 64 65 22 3a 32 30 30 2c 22 6e 65 74 77 6f 72 6b 5f 63 68 61 6e 67 65 64 22 3a 66 61 6c 73 65 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 48 54 54 50 53 22 2c 22 72 65 71 75 65 73 74 5f 61 67 65 5f 6d 73 22 3a 36 31 31 39 31 2c 22 72 65 71 75 65 73 74 5f 65 6c 61 70 73 65 64 5f 6d 73 22 3a 34 32 36 2c 22 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 30 2e 30 35 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 34 32 2e 32 35 30 2e 31 38 35 2e 37 38 3a 34 34 33 22 2c 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 65 6e 63 72 79 70 74 65 64 2d 74 62 6e 30 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 22 2c 22 77 61 73 5f 70 72 6f 78 69 65 64 22 3a 66 61 Data Ascii: {"entries":[{"http_response_code":200,"network_changed":false,"protocol":"HTTPS","request_age_ms":61191,"request_elapsed_ms":426,"sample_rate":0.05,"server_ip":"142.250.185.78:443","status":"ok","url":"https://encrypted-tbn0.gstatic.com/","was_proxied":fa
2022-11-29 15:33:56 UTC	541	IN	HTTP/1.1 204 No Content Date: Tue, 29 Nov 2022 15:33:56 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
55	192.168.2.3	49862	172.217.13.227	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:33:56 UTC	541	OUT	POST /domainreliability/upload-nel HTTP/1.1 Host: beacons2.gvt2.com Connection: keep-alive Content-Length: 409 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-11-29 15:33:56 UTC	541	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 31 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 37 35 2c 22 6d 65 74 68 6f 64 22 3a 22 50 4f 53 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 32 35 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 34 32 2e 32 35 31 2e 31 34 33 2e 36 37 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 33 30 37 2c 22 74 79 70 65 22 3a 22 6f 6b 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 62 65 61 63 6f 6e 73 2e 67 63 70 2e 67 76 74 32 2e 63 6f 6d 2f Data Ascii: [{"age":1,"body":{"elapsed_time":175,"method":"POST","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":0.25,"server_ip":"142.251.143.67","status_code":307,"type":"ok"},"type":"network-error","url":"https://beacons.gcp.gvt2.com/
2022-11-29 15:33:56 UTC	541	IN	HTTP/1.1 200 OK Report-To: {"endpoints":[{"priority":1,"url":"https://beacons.gcp.gvt2.com/domainreliability/upload-nel","weight":1},{"priority":1,"url":"https://beacons.gvt2.com/domainreliability/upload-nel","weight":1},{"priority":1,"url":"https://beacons2.gvt2.com/domainreliability/upload-nel","weight":1},{"priority":1,"url":"https://beacons3.gvt2.com/domainreliability/upload-nel","weight":1},{"priority":1,"url":"https://beacons4.gvt2.com/domainreliability/upload-nel","weight":1},{"priority":1,"url":"https://clients2.google.com/domainreliability/upload-nel","weight":1},{"priority":2,"url":"https://beacons5.gvt2.com/domainreliability/upload-nel","weight":1},{"priority":2,"url":"https://beacons5.gvt3.com/domainreliability/upload-nel","weight":1}],"group":"nel","max_age":300} NEL: {"failure_fraction":1,"include_subdomains":false,"max_age":300,"report_to":"nel","success_fraction":0.25} Content-Type: application/javascript; charset=utf-8 Date: Tue, 29 Nov 2022 15:33:56 GMT Server: Domain Reliability Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
56	192.168.2.3	49863	216.58.212.163	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:33:56 UTC	543	OUT	POST /domainreliability/upload HTTP/1.1 Host: beacons.gvt2.com Connection: keep-alive Content-Length: 281 Content-Type: application/json; charset=utf-8 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-11-29 15:33:56 UTC	543	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 68 74 74 70 5f 72 65 73 70 6f 6e 73 65 5f 63 6f 64 65 22 3a 32 30 30 2c 22 6e 65 74 77 6f 72 6b 5f 63 68 61 6e 67 65 64 22 3a 66 61 6c 73 65 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 48 54 54 50 53 22 2c 22 72 65 71 75 65 73 74 5f 61 67 65 5f 6d 73 22 3a 36 32 35 33 36 2c 22 72 65 71 75 65 73 74 5f 65 6c 61 70 73 65 64 5f 6d 73 22 3a 34 32 36 2c 22 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 30 2e 30 35 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 34 32 2e 32 35 30 2e 31 38 35 2e 37 38 3a 34 34 33 22 2c 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 65 6e 63 72 79 70 74 65 64 2d 74 62 6e 30 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 22 2c 22 77 61 73 5f 70 72 6f 78 69 65 64 22 3a 66 61 Data Ascii: {"entries":[{"http_response_code":200,"network_changed":false,"protocol":"HTTPS","request_age_ms":62536,"request_elapsed_ms":426,"sample_rate":0.05,"server_ip":"142.250.185.78:443","status":"ok","url":"https://encrypted-tbn0.gstatic.com/","was_proxied":fa
2022-11-29 15:33:56 UTC	543	IN	HTTP/1.1 200 OK Report-To: {"endpoints":[{"priority":1,"url":"https://beacons.gcp.gvt2.com/domainreliability/upload-nel","weight":1},{"priority":1,"url":"https://beacons.gvt2.com/domainreliability/upload-nel","weight":1},{"priority":1,"url":"https://beacons2.gvt2.com/domainreliability/upload-nel","weight":1},{"priority":1,"url":"https://beacons3.gvt2.com/domainreliability/upload-nel","weight":1},{"priority":1,"url":"https://beacons4.gvt2.com/domainreliability/upload-nel","weight":1},{"priority":1,"url":"https://clients2.google.com/domainreliability/upload-nel","weight":1},{"priority":2,"url":"https://beacons5.gvt2.com/domainreliability/upload-nel","weight":1},{"priority":2,"url":"https://beacons5.gvt3.com/domainreliability/upload-nel","weight":1}],"group":"nel","max_age":300} NEL: {"failure_fraction":1,"include_subdomains":false,"max_age":300,"report_to":"nel","success_fraction":0.25} Content-Type: application/javascript; charset=utf-8 Date: Tue, 29 Nov 2022 15:33:56 GMT Server: Domain Reliability Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
57	192.168.2.3	49867	142.251.143.67	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:33:57 UTC	561	OUT	POST /domainreliability/upload HTTP/1.1 Host: beacons.gcp.gvt2.com Connection: keep-alive Content-Length: 1479 Content-Type: application/json; charset=utf-8 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-11-29 15:33:57 UTC	561	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 66 61 69 6c 75 72 65 5f 64 61 74 61 22 3a 7b 22 63 75 73 74 6f 6d 5f 65 72 72 6f 72 22 3a 22 6e 65 74 3a 3a 45 52 52 5f 41 42 4f 52 54 45 44 22 7d 2c 22 6e 65 74 77 6f 72 6b 5f 63 68 61 6e 67 65 64 22 3a 66 61 6c 73 65 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 22 2c 22 72 65 71 75 65 73 74 5f 61 67 65 5f 6d 73 22 3a 36 30 35 39 31 2c 22 72 65 71 75 65 73 74 5f 65 6c 61 70 73 65 64 5f 6d 73 22 3a 31 32 33 2c 22 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 22 2c 22 73 74 61 74 75 73 22 3a 22 61 62 6f 72 74 65 64 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 22 2c 22 77 61 73 5f 70 72 6f 78 69 65 64 22 3a 66 61 6c 73 65 7d 2c Data Ascii: {"entries":[{"failure_data":{"custom_error":"net::ERR_ABORTED"},"network_changed":false,"protocol":"","request_age_ms":60591,"request_elapsed_ms":123,"sample_rate":1.0,"server_ip":"","status":"aborted","url":"https://www.google.com/","was_proxied":false},
2022-11-29 15:33:57 UTC	562	IN	HTTP/1.1 200 OK Report-To: {"endpoints":[{"priority":1,"url":"https://beacons.gcp.gvt2.com/domainreliability/upload-nel","weight":1},{"priority":1,"url":"https://beacons.gvt2.com/domainreliability/upload-nel","weight":1},{"priority":1,"url":"https://beacons2.gvt2.com/domainreliability/upload-nel","weight":1},{"priority":1,"url":"https://beacons3.gvt2.com/domainreliability/upload-nel","weight":1},{"priority":1,"url":"https://beacons4.gvt2.com/domainreliability/upload-nel","weight":1},{"priority":1,"url":"https://clients2.google.com/domainreliability/upload-nel","weight":1},{"priority":2,"url":"https://beacons5.gvt2.com/domainreliability/upload-nel","weight":1},{"priority":2,"url":"https://beacons5.gvt3.com/domainreliability/upload-nel","weight":1}],"group":"nel","max_age":300} NEL: {"failure_fraction":1,"include_subdomains":false,"max_age":300,"report_to":"nel","success_fraction":0.25} Content-Type: application/javascript; charset=utf-8 Date: Tue, 29 Nov 2022 15:33:57 GMT Server: Domain Reliability Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
58	192.168.2.3	49870	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:34:00 UTC	600	OUT	GET /layer3.1/theme/default/layer.css?v=3.1.1 HTTP/1.1 Host: usdtmen.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?1 User-Agent: Mozilla/5.0 (Linux; Android 9.0; SAMSUNG SM-F900U Build/PPR1.180610.011) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Mobile Safari/537.36 sec-ch-ua-platform: "Android" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://usdtmen.com/index/passport/login.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
2022-11-29 15:34:01 UTC	603	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 29 Nov 2022 15:34:01 GMT Content-Type: text/css Content-Length: 14367 Last-Modified: Sat, 05 Jun 2021 10:36:02 GMT Connection: close Vary: Accept-Encoding ETag: "60bb5392-381f" Expires: Wed, 30 Nov 2022 03:34:01 GMT Cache-Control: max-age=43200 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2022-11-29 15:34:01 UTC	603	IN	Data Raw: 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 69 6d 67 62 61 72 2c 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 69 6d 67 74 69 74 20 61 2c 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 74 61 62 20 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 74 69 74 6c 65 20 73 70 61 6e 2c 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 74 69 74 6c 65 7b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 68 74 6d 6c 20 23 6c 61 79 75 69 63 73 73 2d 6c 61 79 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 39 38 39 70 78 7d 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2c 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 73 68 61 64 65 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 Data Ascii: .layui-layer-imgbar,.layui-layer-imgtit a,.layui-layer-tab .layui-layer-title span,.layui-layer-title{text-overflow:ellipsis;white-space:nowrap}html #layuicss-layer{display:none;position:absolute;width:1989px}.layui-layer,.layui-layer-shade{position:fixed

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
59	192.168.2.3	49871	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:34:01 UTC	601	OUT	GET /image/logo.cba20b1b.png HTTP/1.1 Host: usdtmen.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://usdtmen.com/index/passport/login.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
2022-11-29 15:34:02 UTC	621	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 29 Nov 2022 15:34:01 GMT Content-Type: image/png Content-Length: 132354 Last-Modified: Mon, 05 Sep 2022 04:12:14 GMT Connection: close ETag: "6315771e-20502" Expires: Thu, 29 Dec 2022 15:34:01 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2022-11-29 15:34:02 UTC	621	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 95 00 00 01 52 08 06 00 00 00 a3 54 24 36 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec bd 69 b0 24 d7 79 9e f9 9e 93 59 cb 5d 7a 03 d0 40 03 20 76 90 06 41 8a 10 17 51 a2 c6 32 9b 92 46 36 69 53 e3 25 1a 1e 5b 21 6f 13 23 79 26 c6 11 33 bf 26 e6 97 5a 11 13 31 8e 59 3c 3f f4 8b 0e c7 58 f2 48 31 21 c2 cb d8 74 90 96 cd 11 41 d9 16 65 92 10 41 51 00 49 10 80 40 12 04 08 74 a3 b7 bb 56 55 e6 39 13 ef 39 f9 dd 3a f7 dc dc aa 6e 55 f7 ed 46 56 04 70 ab ab b2 b2 32 4f 65 9e 7c f2 fd be ef fd 14 ba 47 37 02 dd 08 74 23 d0 8d 40 37 02 6f c7 11 b0 56 bd 1d 77 fb 56 da e7 f3 f8 d5 5b e6 37 7c 0e 8f cf bd 2f 17 70 da 7d f6 34 2e d8 f0 f7 95 d7 67 f9 cd df 85 17 66 de 8e cb 38 a5 2e Data Ascii: PNGIHDRRT$6sRGB IDATx^i$yY]z@ vAQ2F6iS%[!o#y&3&Z1Y<?XH1!tAeAQI@tVU99:nUFVp2Oe\|G7t#@7oVwV[7\|/p}4.gf8.
2022-11-29 15:34:03 UTC	643	IN	Data Raw: 69 0a 9b 0e 15 86 03 65 07 2b 4a 0d 87 ca ae ac 01 ab ab 50 c3 75 65 fb 3d ce 13 46 1b f2 a8 b1 5e ce 24 7b 52 cd cc 4d 62 95 ce b4 55 bb 0a f9 8e 56 d9 8b 69 9a 3d ab b5 fd e3 dd 2b b8 fc 99 bb 3f b9 e3 45 d0 72 e5 b2 2c a4 33 2f 50 86 a1 1d fe 6a 71 0e 65 59 eb c5 b0 1f 77 58 94 53 07 93 5c 77 18 02 f2 f0 38 35 33 2f cb a1 2c eb cf 2d 00 28 61 6e 39 d2 f6 db 06 ed 2f c0 e1 64 2b 10 e9 27 ef 29 48 f2 df 16 59 d1 fb 3b e9 29 8c b7 b7 b1 fa ed 26 a8 6c 3e c2 cb 97 f8 b8 fd ec f1 21 cc fd 39 76 35 6f 8e 34 2d e4 82 47 95 57 65 bc b6 50 91 94 f7 0e 86 be e9 dd 2a b7 35 64 e0 58 f1 dc 9f f7 d8 54 45 1e e7 60 8a 72 b9 68 b0 8c e1 32 0e 79 57 29 96 75 60 e9 df f3 2a 68 1b bb a1 36 d5 e0 1e 22 4e 94 e6 b9 d6 81 65 db 8e 3b 75 4a a5 40 d2 ac 1d 76 9a a0 b2 e9 b8 Data Ascii: ie+JPue=F^${RMbUVi=+?Er,3/PjqeYwXS\w853/,-(an9/d+')HY;)&l>!9v5o4-GWeP5dXTE`rh2yW)u`h6"Ne;uJ@v
2022-11-29 15:34:03 UTC	660	IN	Data Raw: a3 d5 d6 f9 89 02 db 2a cf 52 3f 1b 0f 2e cf 46 7a 48 d7 2f 1b 6f ce 56 d7 32 70 2c f5 ba 18 05 96 c1 de 51 bf ab 8b 5a 19 c7 fa 95 fa 79 d3 9d 4f dc b8 13 fe 7d 3a ed ca 70 9d ac 26 35 24 df bf 50 0d cb b3 01 95 b2 dd 90 ad dc 86 7d 76 01 73 f6 76 bc db be e5 e9 3b eb 33 8d 6c 1e 75 be 99 07 f8 19 93 e3 3a 10 a6 2d b1 34 8c c8 b4 bb 2c d3 96 de b5 4e c1 2d 6f d5 91 4d b5 65 92 89 5e d7 d2 c2 51 e6 23 fb 73 1c 3e 68 69 59 ca db 3d 26 97 b6 13 ab 6a 23 4a 62 c3 ce 6c e5 41 96 37 73 d9 32 33 b4 b6 1d 69 a3 51 9e b8 c6 27 c9 95 b2 34 f8 c8 64 d7 24 6c d2 3a d8 b4 8c 28 56 f0 c4 24 51 bb 6d 68 62 92 b9 d9 36 a8 37 08 b5 16 a1 5e 93 d8 64 28 71 c6 86 2e 2e b8 4a 96 ef 57 74 d5 ae 5c 18 d3 85 64 58 1d 1f 5f 32 8c dc 3d 05 e9 3c 37 8b a7 40 27 4f 14 dc 3b d6 41 Data Ascii: *R?.FzH/oV2p,QZyO}:p&5$P}vsv;3lu:-4,N-oMe^Q#s>hiY=&j#JblA7s23iQ'4d$l:(V$Qmhb67^d(q..JWt\dX_2=<7@'O;A
2022-11-29 15:34:07 UTC	850	IN	Data Raw: b2 1b 13 be e4 fa 94 66 67 88 8b 1a 90 31 bb 0b c9 03 51 27 b3 10 65 02 cb 6a 82 2f 9d 57 6a ac c3 98 13 65 30 a9 47 0d ea a3 e1 bb e2 fc cf b9 f2 f1 13 c7 e2 6a 86 2d 8e 9d d5 98 1d 96 1d b7 4e 55 67 72 1c c0 aa c6 cb d5 f6 1d 83 b4 6a 75 29 1c 53 d8 7e 3c 41 5f 0d 1c 57 f7 33 04 95 a9 a4 07 7b c0 3f de 3d 40 6f 00 ba e9 b5 c2 63 00 8b ab 4e 04 ee e3 73 11 1d 12 24 79 41 13 bd 0e d7 13 b9 74 dc e3 2b 3e e6 ea 88 57 e3 bc 5c 6d 72 cd 2c 0e a6 f9 ab 83 16 ee 57 7f 70 67 cb e8 26 31 1a a2 c5 51 c7 4c 31 8a 35 50 f9 22 87 50 6b a7 37 66 04 7e f6 b9 3b e6 d3 dc fc 3e 01 6f 17 ba a3 3c 8b 22 60 19 82 65 3c eb ac ce 52 dd 73 55 02 ac 94 58 d3 1a f8 f0 01 6b 0f 1f b0 30 89 a1 24 61 2a 32 51 45 21 cc 5d 3e c1 53 db 1b cc 03 70 91 29 55 b0 de 00 7c 37 78 90 19 0a Data Ascii: fg1Q'ej/Wje0Gj-NUgrju)S~<A_W3{?=@ocNs$yAt+>W\mr,Wpg&1QL15P"Pk7f~;>o<"`e<RsUXk0$a*2QE!]>Sp)U\|7x
2022-11-29 15:34:08 UTC	933	IN	Data Raw: 5d b6 5d e4 88 fe 5e 3f 83 4f a6 0f e1 10 e6 b0 d6 b8 bc eb 98 57 2d b3 17 cb 1d b2 d5 ac f5 e7 de 81 61 4c 67 d5 e6 7e d7 62 1c 79 3e 8c e0 b9 64 7d db b8 ee 85 80 d2 b9 4f ea dd 3e ea f3 42 67 2e 72 e0 73 1f e3 d2 2f 5d 7c 25 8b dd 33 15 77 24 71 27 00 96 0c 3e f0 5d 3b e0 a7 69 8c 56 9a 59 19 81 53 1a 81 dd 77 dc 51 6f 4d a8 1f 54 44 bf 04 60 53 25 71 c7 03 46 33 b5 5d c3 21 d3 56 32 78 02 42 84 91 94 c4 9c 63 c7 35 1f 3a 6a 01 a2 64 d8 39 b9 10 bf 48 18 7e 4c 80 65 6f 4e 63 64 55 cc 97 bd 66 1c eb ce 6b 70 bf a7 29 4b 2c 02 92 9a d5 12 f3 62 26 7a 95 df f3 1e e8 1c 64 12 a7 c8 24 fb 9b af a5 b5 fc f3 8d dd d8 a8 da a6 06 b1 b4 96 b0 36 12 23 77 67 c7 f0 df 07 7b 70 8f 9e 32 18 6c 5d 92 61 ac 3f 00 ab 40 b4 a5 58 40 43 5d cc 22 69 c6 8f 8a fd d7 8c 41 Data Ascii: ]]^?OW-aLg~by>d}O>Bg.rs/]\|%3w$q'>];iVYSwQoMTD`S%qF3]!V2xBc5:jd9H~LeoNcdUfkp)K,b&zd$6#wg{p2l]a?@X@C]"iA
2022-11-29 15:34:10 UTC	1091	IN	Data Raw: d2 37 bb 67 e2 72 b9 01 5d a7 09 58 3e a5 0b f8 5b 7d 3f ee c6 10 ba e0 72 9b 16 7a a1 e7 14 45 60 c8 93 d2 3e bf ec 31 f9 39 e0 18 b5 77 f1 58 05 c3 0f 4e 42 85 0a 8e 37 b5 4f a8 05 96 3d 7d 82 42 e1 c2 f5 c0 8a f0 e4 fe 17 fa dc 34 30 a4 35 7e 4f 14 aa 5f 38 b0 6b 6f 94 ab dd 7c d4 25 50 b9 d0 57 62 69 ff 4b 3d b0 10 3d b0 ef bb 2e 46 9f de 08 21 de 01 2d de 00 81 55 2d 0e 93 c6 50 ce ad 45 f4 d4 a0 4c 4a 02 94 93 9a 22 75 24 14 6a 5c 78 b6 e3 78 1c 40 25 f0 42 a0 73 b5 c4 c6 f3 5c 6c bd c8 c3 ca ad 0e b4 d2 60 e6 92 c2 e7 51 d8 5b 29 c3 64 56 ab f4 cf 00 80 f8 c3 b3 21 5b af 51 09 6e d0 0f 57 1f 4c 98 96 5b d0 51 57 8a 1b 1c d2 0a 50 c6 40 67 dd f7 a8 9e af 17 67 47 69 1f 04 28 b3 59 60 eb 79 96 a5 14 e6 1c c6 28 a7 32 95 a5 a4 c3 1f 81 90 7b be 70 e6 Data Ascii: 7gr]X>[}?rzE`>19wXNB7O=}B405~O_8ko\|%PWbiK==.F!-U-PELJ"u$j\xx@%Bs\l`Q[)dV![QnWL[QWP@ggGi(Y`y(2{p
2022-11-29 15:34:12 UTC	1173	IN	Data Raw: d1 58 67 12 af 09 ee 7d 70 db ed ef d9 71 36 58 ca c8 f0 39 bf 1a ab 7d b7 4d 5a c0 67 2a 97 03 72 23 e5 53 72 48 97 58 4a 02 8f 3e 53 49 6c 24 17 52 b1 98 be 58 27 0c 8d 87 a2 1e 1f 58 ba c2 57 8b 57 42 e1 a1 e5 10 b1 95 3e 98 6c 1c 02 9f 09 5b 49 4f 14 32 96 39 74 08 ca ab 0c 9f f2 ef d1 2b 40 ec 24 63 92 16 cd 02 92 5d 86 e5 f4 71 16 bb 56 ba fa ed d2 e3 b7 40 e7 7d e0 2c c9 39 8b 73 48 b2 4f 56 4b aa 32 56 0e aa 40 a8 28 5b 10 6a f3 5c 09 8f 5a 45 50 4e 11 73 19 64 d6 d0 dd 97 99 69 7f 42 9a ce 8f c9 83 d2 84 ec f7 20 c8 99 8c c0 25 f9 52 aa 3f 54 f4 23 12 fe 1e 77 80 6f 7c 93 9d 3f 21 d2 0b 68 fc 30 dc f9 d7 26 8c 94 a9 74 55 94 fa aa 0b 03 52 4f 42 7a 3d 60 5e 07 b8 66 c0 a3 4f 0a c6 20 98 80 e6 95 50 34 26 30 e1 65 e1 b1 12 12 94 b6 8f 12 7e 72 61 Data Ascii: Xg}pq6X9}MZg*r#SrHXJ>SIl$RX'XWWB>l[IO29t+@$c]qV@},9sHOVK2V@([j\ZEPNsdiB %R?T#wo\|?!h0&tUROBz=`^fO P4&0e~ra
2022-11-29 15:34:13 UTC	1230	IN	Data Raw: ae a6 c6 f6 75 cf a4 05 02 f3 f3 1b 39 f4 87 28 fc 4d ea 6f ff 65 13 c3 26 8b 9e 40 d1 98 90 77 c6 c6 d9 5b 04 60 a6 33 02 c5 82 ef 53 46 b9 52 f1 14 53 a5 b1 c2 d0 57 c8 54 54 81 cb 80 a9 e0 5c 89 7d 90 91 96 aa b9 fd b6 8e d5 f8 60 df 66 2c d3 3b ea 1a 9a 1f 77 32 f8 72 ee 75 5c 13 5f 8a 75 46 af 52 84 ff cc 3a 8a 1e 1e 43 8a e9 70 0d 13 63 a6 a1 42 e7 8f ea eb b1 4b 4c e2 47 de 49 15 02 0f 41 64 d5 9c 54 fb e5 1f 4c ac 14 c2 76 85 af 50 4f 1f 2a 20 73 b8 e0 8b 0d 66 e0 81 16 7c 89 8b 81 45 ec 47 fd cb d9 47 be b0 f4 57 0e 9f c9 7b 69 1f db 6e 81 f9 6e 01 7f ec c7 6e 65 10 8f 41 b0 a2 9e c6 26 7d 18 d7 4d 1b fa a6 18 46 3c a8 a2 13 f8 53 86 c0 52 25 b7 e9 be 37 25 e5 53 aa ff 13 a8 8c ac 1e 55 c0 aa 65 40 d4 2e e5 38 05 3c 9f 0d 60 a9 26 75 a8 d0 b7 1b Data Ascii: u9(Moe&@w[`3SFRSWTT\}`f,;w2ru\_uFR:CpcBKLGIAdTLvPO* sf\|EGGW{innneA&}MF<SR%7%SUe@.8<`&u
2022-11-29 15:34:14 UTC	1246	IN	Data Raw: 00 34 73 88 41 c0 20 60 10 30 08 e4 21 20 ad 1c ad c8 e7 01 fe 04 88 12 65 e1 e3 d7 57 c6 c9 41 33 5b 5a f8 53 2f 1d 77 f2 85 3b e5 75 dc 91 a3 85 4c 76 00 fc 7d c0 7e 08 2a 7b 04 f7 5c 29 35 94 66 33 08 2c 39 02 86 54 2e 39 e4 e6 03 0d 02 06 01 83 c0 2a 45 e0 dd 77 9d 0e cb ba 1e c0 ff 84 48 50 ca d9 34 b1 64 85 26 8b d1 a8 1b 1b 8a 94 a5 3e b6 a0 70 27 54 52 6f 74 31 65 1a 06 61 1f 80 47 00 eb 11 20 7d d0 a4 b8 eb 63 ba ac e4 ab 34 a4 72 25 df 1d 33 36 83 80 41 c0 20 50 6b 08 9c 7f ef 5b 61 39 77 00 74 76 d9 8a 70 b1 dd f6 3b ee c4 eb 88 58 fa c2 1d 91 eb 88 22 dc 2a aa 08 4f 7a 64 f2 05 28 3c 04 2b f3 04 40 83 86 4c d6 da 97 64 f5 8e d7 90 ca 55 7a 6f 99 59 6a 73 36 01 68 00 b0 9b 88 8c 17 d9 2a bd d7 e6 b2 0c 02 2b 0b 01 e9 b8 73 c6 fb 40 b8 11 80 28 Data Ascii: 4sA `0! eWA3[ZS/w;uLv}~{\)5f3,9T.9EwHP4d&>p'TRot1eaG }c4r%36A Pk[a9wtvp;X"Ozd(<+@LdUzoYjs6h+s@(

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
6	192.168.2.3	49728	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:32:53 UTC	8	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=u&oit=1&cp=1&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swB Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-11-29 15:32:53 UTC	9	IN	HTTP/1.1 200 OK Date: Tue, 29 Nov 2022 15:32:53 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-o8gsPIMzFJ3TDnUS81jw1w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 BFCache-Opt-In: unload Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: CONSENT=PENDING+436; expires=Thu, 28-Nov-2024 15:32:53 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-11-29 15:32:53 UTC	10	IN	Data Raw: 35 37 36 0d 0a 29 5d 7d 27 0a 5b 22 75 22 2c 5b 22 75 6b 72 61 69 6e 65 22 2c 22 75 6b 72 61 69 6e 65 22 2c 22 75 70 73 22 2c 22 75 72 75 67 75 61 79 22 2c 22 75 6b 72 61 69 6e 65 20 6e 65 77 73 22 2c 22 75 70 73 20 74 72 61 63 6b 69 6e 67 22 2c 22 75 6e 73 70 6c 61 73 68 22 2c 22 75 72 6c 61 75 62 73 70 69 72 61 74 65 6e 22 2c 22 75 6b 72 61 69 6e 65 20 6b 72 69 65 67 22 2c 22 75 6e 69 64 61 79 73 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 64 65 74 61 69 6c 22 3a 5b 7b 7d 2c 7b 22 61 22 3a 22 4c 61 6e Data Ascii: 576)]}'["u",["ukraine","ukraine","ups","uruguay","ukraine news","ups tracking","unsplash","urlaubspiraten","ukraine krieg","unidays"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestdetail":[{},{"a":"Lan
2022-11-29 15:32:53 UTC	12	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
60	192.168.2.3	49874	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:34:01 UTC	602	OUT	GET /image/username_icon.png HTTP/1.1 Host: usdtmen.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://usdtmen.com/index/passport/login.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
2022-11-29 15:34:02 UTC	617	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 29 Nov 2022 15:34:01 GMT Content-Type: image/png Content-Length: 1344 Last-Modified: Mon, 05 Sep 2022 04:13:28 GMT Connection: close ETag: "63157768-540" Expires: Thu, 29 Dec 2022 15:34:01 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2022-11-29 15:34:02 UTC	618	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1a 00 00 00 1e 08 06 00 00 00 32 db 0e d8 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 04 fa 49 44 41 54 48 4b b5 94 7f 4c 55 65 18 c7 bf cf fb 1e f2 aa 18 ce 68 05 e1 14 f9 51 84 62 9a cd 42 2b ac a9 d3 95 9a 53 57 33 0c 4c 81 0b f9 03 9a fd 51 6b bb eb 0f 9b b3 8c 34 ef 15 cd 60 98 59 b1 96 3f 9a 4a 53 74 b6 b4 92 99 0a 8a 80 7a 45 99 59 cc 9f 60 e8 3d e7 3c 4f 3b 57 71 2a e2 c5 49 e7 8f f3 be 67 e7 fb 7c 3f 7b 9f f7 7d bf 84 4e 3c f9 4d 07 5f 24 93 66 c2 96 a1 62 d3 43 30 e5 8a d8 aa 8e 4c 59 6f b9 5c df 2c 4b 48 b8 14 ca 86 ee 26 28 38 5b d5 97 02 28 15 1b 69 b0 00 61 9c 87 89 33 62 21 1c 36 3d 26 16 14 2c f9 c7 b6 d4 3b 5f a4 26 97 dd cd ab 43 d0 dc 53 7f 26 18 a4 77 82 29 1a 4c 5b 85 ed 85 8d Data Ascii: PNGIHDR2sRGBIDATHKLUehQbB+SW3LQk4`Y?JStzEY`=<O;Wq*Ig\|?{}N<M_$fbC0LYo\,KH&(8[(ia3b!6=&,;_&CS&w)L[

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
61	192.168.2.3	49873	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:34:01 UTC	602	OUT	GET /image/password_icon.png HTTP/1.1 Host: usdtmen.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://usdtmen.com/index/passport/login.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
2022-11-29 15:34:02 UTC	619	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 29 Nov 2022 15:34:01 GMT Content-Type: image/png Content-Length: 1464 Last-Modified: Mon, 05 Sep 2022 04:13:01 GMT Connection: close ETag: "6315774d-5b8" Expires: Thu, 29 Dec 2022 15:34:01 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2022-11-29 15:34:02 UTC	619	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1a 00 00 00 1f 08 06 00 00 00 f9 87 dd 7d 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 05 72 49 44 41 54 48 4b a5 96 7d 4c 56 55 1c c7 bf bf 73 1f 02 73 95 86 6f 29 be bf 00 a2 53 99 2b 5f 9a 66 73 8d 74 28 9a 16 62 82 86 09 12 94 62 ad b6 6a 73 bd 6c f5 47 6a 42 0f 0a 0e 27 26 14 b4 c4 61 f1 e4 6a 16 4d ca cd 54 04 1e 5e 14 51 30 df 90 b4 17 31 7c ee 39 bf 76 ee 7d 34 5b f7 01 a9 bb dd 9d 7b 9f f3 3b df cf f9 9d f3 fd 9d fb 10 ee e2 4a 6f 3b 3a 38 d8 0c 5a c7 12 b1 50 18 03 1f c0 26 4e c1 44 99 af d3 b7 25 3b 3a fa 7c 77 32 d4 5d 40 e6 c5 ea 67 a0 90 07 13 f7 b1 09 40 5a 10 7f 4b 80 89 df d9 c7 ab b7 4e 9f 58 dc 95 56 97 a0 cc d6 9a a7 40 28 66 1f 0b 0d 80 09 1f 2b 54 c3 04 d8 87 89 90 14 e4 87 2a Data Ascii: PNGIHDR}sRGBrIDATHK}LVUsso)S+_fst(bbjslGjB'&ajMT^Q01\|9v}4[{;Jo;:8ZP&ND%;:\|w2]@g@ZKNXV@(f+T*

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
62	192.168.2.3	49875	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:34:02 UTC	637	OUT	GET /image/bg1.6c9f941a.png HTTP/1.1 Host: usdtmen.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?1 User-Agent: Mozilla/5.0 (Linux; Android 9.0; SAMSUNG SM-F900U Build/PPR1.180610.011) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Mobile Safari/537.36 sec-ch-ua-platform: "Android" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://usdtmen.com/index/passport/login.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
2022-11-29 15:34:04 UTC	696	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 29 Nov 2022 15:34:03 GMT Content-Type: image/png Content-Length: 641435 Last-Modified: Mon, 05 Sep 2022 04:10:59 GMT Connection: close ETag: "631576d3-9c99b" Expires: Thu, 29 Dec 2022 15:34:03 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2022-11-29 15:34:04 UTC	696	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 ed 00 00 05 32 08 06 00 00 00 ba 71 ca 13 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec bd cd 8e 2c 3b 92 1e 98 79 37 b3 1a a0 30 0f a2 ee 6a 69 1e 6c 5a 7a da 82 a0 cd ac 66 55 c0 ac 04 08 e8 14 9c a4 91 9f fd 1b e9 1e 91 79 ee 3d a7 d1 75 33 22 48 a3 fd db 47 3a 49 ff fc 97 7f f9 7f fe df 8f 8f 8f ff eb e3 e3 f3 7f 7d 7c 7c 7c 7d 3c f8 ef 53 d0 22 e2 d7 f7 d7 ff cb c1 64 fb 07 59 d9 22 d5 f8 b2 98 b9 7e f8 29 4c 02 2b 15 96 48 d7 8f 1a 18 b4 4a 36 dd 52 f4 ef c6 df ae 01 f4 9d a7 7c a3 e2 8f 6f 11 9c 18 b9 23 18 d1 38 15 ea 6b a7 e3 d7 ca 2f 23 09 ed f4 7e 8b 4e 31 37 52 3e 7c 21 93 16 e9 27 87 fb fa fc fc f8 fc ea 0e 72 fd 5d f9 f7 4a 9e c8 5d 3e 87 cf ba b5 88 e5 5e 59 Data Ascii: PNGIHDR2qsRGB IDATx^,;y70jilZzfUy=u3"HG:I}\|\|\|}<S"dY"~)L+HJ6R\|o#8k/#~N17R>\|!'r]J]>^Y
2022-11-29 15:34:06 UTC	803	IN	Data Raw: 18 cb 4b 5e e9 b0 2c 23 8b a0 5a 8c d7 d5 ca ab 17 ff 34 fc 4e 65 f5 f1 45 ee cc c1 13 ad 3c c6 c0 e7 6b 57 3e f6 c9 83 38 19 ef 3d 6b 7e 13 70 df 4a 54 35 9d fc 25 5b 15 7c ad ae 17 2b 39 d5 7b fb 2d 2f ba a7 8c 5e ce 2b 90 64 73 e5 53 7a 83 95 1b dd 95 9c 72 3b 4a e4 db 32 21 22 31 bd b5 65 47 f9 22 45 e1 fe 54 83 4c 24 bf 06 ee fa be 78 f6 52 28 d9 c1 62 7b 16 e7 7a 92 dc 91 9e da de 71 61 0b 62 b4 d4 79 87 11 a7 98 31 84 d0 3e 1c 8d 12 52 2f b3 bd 31 b4 2c 7d 1d 37 18 6b ed ac c2 97 39 29 37 b4 ea bf ad 0c f4 88 0d 41 ad d5 70 69 26 01 14 fb f8 d2 8b fa 96 35 dc 7a f2 d4 36 af 67 56 d9 a5 4e 82 e9 29 6c 85 c9 53 ba a5 eb 4e db ce 8f 46 12 61 24 34 bd 46 87 d8 25 d0 09 e6 d6 93 eb 3e 76 cf 5d 6b 85 76 bd 38 0a 40 bb e9 2a 63 40 3c ec 2b da 79 0b 1b d3 Data Ascii: K^,#Z4NeE<kW>8=k~pJT5%[\|+9{-/^+dsSzr;J2!"1eG"ETL$xR(b{zqaby1>R/1,}7k9)7Api&5z6gVN)lSNFa$4F%>v]kv8@*c@<+y
2022-11-29 15:34:09 UTC	993	IN	Data Raw: 56 18 8b 36 aa 03 5f bb 84 6d 25 ce 74 4b 22 38 2a 57 f3 d8 28 32 57 de 0b f1 b2 09 4e 7c 50 2e 7c 7e 3e cc 12 68 c1 78 5f c3 d2 41 66 95 25 8f 95 2d a7 1b 0b a0 31 f5 0a 0b 28 cd 06 3f 7e 7b cc 90 d2 b4 11 59 7e a7 9a 53 fe c8 02 bd f8 3b 19 a1 6e 36 4e 78 b2 4e 53 d0 e2 b8 bd 19 df e7 39 67 ad fd a7 a3 7f 3d a1 1e 75 7d 7b 27 5d 62 fd e0 20 95 54 45 2b af 82 79 19 ab a0 8d 76 62 7c a2 d7 42 07 a3 09 a4 9c 33 02 1b bd aa a0 bd 42 b2 32 81 22 3a 58 04 22 9b 57 c6 fd 09 ab e9 1e 9f 09 36 0b c4 ab 7a f5 fd d8 46 77 2f f9 5e 9d 35 5b 3e 78 fc 5e 1a 8f 51 89 b6 12 4a c6 40 32 83 67 51 4f 05 af f0 ab d3 b7 e2 9b 6e 1b 00 3b b3 c0 63 e3 0d 1d 2f 1d 2e f0 e6 92 62 b9 8d 0a 31 b5 c6 55 5c bc dc 3a 5a 10 43 2d 42 7f 85 98 47 f9 9a 37 72 8e a7 25 f3 3e f7 c1 43 41 Data Ascii: V6_m%tK"8*W(2WN\|P.\|~>hx_Af%-1(?~{Y~S;n6NxNS9g=u}{']b TE+yvb\|B3B2":X"W6zFw/^5[>x^QJ@2gQOn;c/.b1U\:ZC-BG7r%>CA
2022-11-29 15:34:12 UTC	1202	IN	Data Raw: 66 76 6c 97 e8 d6 92 4d 09 4d 16 bb 0c cf fb ab dc cb 55 cb e8 7f ff fa eb af bd d2 fe fb d7 af bf 63 c7 37 05 ea c6 ce 3e 3c 72 0c 4e cd cb ed ab be a5 e2 26 e0 fb 7b 34 90 cb 8e e1 6e ec 5f 0a da 6b 30 ab 23 a8 04 7c c5 bf 09 cb 45 51 26 45 ef 9c fe 73 25 d0 60 7d e6 7d 68 df e2 c8 43 84 38 34 97 41 c3 69 64 f8 75 d1 1c ff 26 1c 59 7d 69 de 2d dc c9 eb 4e c1 83 24 d2 25 10 d3 6c 4b 7f 7b 9f 9a 77 7d a2 a2 6a 96 81 f0 d4 d9 fa 29 ea 1b 6c 0a 9a bf f9 1d 82 2d 76 a3 19 61 24 92 bb fe d0 5c b3 0e 3f eb f4 29 37 49 e8 79 b5 43 5d b9 c7 c3 9d 09 27 1e 96 9e 37 b7 76 1b 11 5a 71 3e f6 0e 38 7c e4 ef b2 32 48 5b 41 f9 8c 18 bb 0b 85 a2 a9 5e d6 65 66 73 3e 21 e4 48 c3 86 b2 ec 67 13 99 83 7d 21 17 1e 04 f0 64 6d a8 56 f1 81 66 e0 ae 6d e8 7a 01 4a 2a 4e 7e a3 Data Ascii: fvlMMUc7><rN&{4n_k0#\|EQ&Es%`}}hC84Aidu&Y}i-N$%lK{w}j)l-va$\?)7IyC]'7vZq>8\|2H[A^efs>!Hg}!dmVfmzJ*N~
2022-11-29 15:34:15 UTC	1264	IN	Data Raw: c6 c9 25 20 e8 1f 92 af b0 9f 04 b4 b3 11 3c 72 3b 45 ea 6a b4 bb 7f 14 0a 66 e5 bf 6a 58 ea ee 72 9f aa 3b dc 97 d9 a3 97 2d 36 64 af 40 c2 20 be 9f e8 0f 0b 3c 35 f8 be 4b a7 b3 f3 71 4b 24 58 cf 54 29 f6 70 03 12 37 4d d8 f5 f7 ff c6 0f dd a4 9a 69 c0 54 26 46 4c cf 05 5b dd 49 31 fa 4a 67 b8 06 10 a3 c1 76 7a ab 39 48 09 c1 49 f6 49 7f d4 8e 02 c5 8c 7c cb ba da 20 55 8b e4 a2 c5 05 47 13 25 5e 37 b6 f0 02 d2 73 4c dc 75 55 a2 f6 35 06 70 8e 89 98 12 05 de 0f 70 df e2 61 2b d7 74 53 4d b9 99 62 70 93 4d 04 37 e0 0d 41 08 25 ce 11 bb 73 ae ed 16 17 97 44 69 6e f6 45 35 dd fa 80 b7 8d 49 30 dd b4 a3 8d 63 67 92 fd 37 a9 a8 a2 4f af 98 1f f3 45 15 31 52 28 f4 00 31 e0 60 b8 d3 17 17 25 c4 68 11 66 24 86 6c 0a b4 d7 73 ef 75 d4 32 68 c6 c7 63 53 ee 15 3e Data Ascii: % <r;EjfjXr;-6d@ <5KqK$XT)p7MiT&FL[I1Jgvz9HII\| UG%^7sLuU5ppa+tSMbpM7A%sDinE5I0cg7OE1R(1`%hf$lsu2hcS>
2022-11-29 15:34:18 UTC	1328	IN	Data Raw: e8 74 3b 51 d3 6a de 8e 5e f4 91 ad 18 cd 8d ab 34 66 bc 6a 75 ac 98 20 2a f3 bd 06 f7 07 f9 39 2d 3c 61 2a 4a 6d 1a ca 73 b8 08 50 06 eb c8 f3 78 3f 3f 2e b7 e5 80 6e 1b 3d ff 59 27 d7 95 8c 02 50 f6 34 6f da 36 94 d8 c9 6c 6e 66 e1 d8 5f ad bf 6d a8 35 7f c0 fc b9 24 87 dd e4 61 b9 7e c5 93 79 aa 47 0e 84 4e 6c 1e 17 0a ec 45 5f c4 63 00 19 e5 d6 a3 3e 92 f1 35 1f 68 87 78 49 17 95 06 9c 4a 64 78 6e 89 3b 66 a3 27 d5 51 36 d8 b8 80 41 9e e8 6c 31 65 58 b4 2a db 2f 99 3d 51 a3 7d 53 d7 e3 7c 80 96 53 a1 f9 62 b2 fb 7d 5b 9c 0d 8b 9f 69 b8 86 a7 87 73 17 b5 04 09 e4 12 fc b1 78 c0 71 75 b8 dd 5e c5 88 92 3e cb 9e ab 40 ff 1a fc 9b 3e 37 31 84 2d e8 c0 36 22 1b bf ec c4 2f 64 c0 d2 18 67 bb 77 fe 63 59 4f cb 85 ec 30 96 b7 a5 0e e6 84 87 a9 c4 a8 b6 48 22 Data Ascii: t;Qj^4fju 9-<aJmsPx??.n=Y'P4o6lnf_m5$a~yGNlE_c>5hxIJdxn;f'Q6Al1eX*/=Q}S\|Sb}[isxqu^>@>71-6"/dgwcYO0H"
2022-11-29 15:34:20 UTC	1376	IN	Data Raw: e3 b6 3d 1b 41 a6 63 4d e2 6a 8c 8f 80 08 91 c3 9e 56 f2 47 b9 06 4f 34 45 2b eb 6b e9 45 33 d4 cc 98 39 9e 74 dd d8 3d ad 2a 60 21 9a dd af 3d 58 b7 fb 24 63 dc 7d 59 07 2e f0 7a 82 4d f6 59 bf 9c bb c7 c0 ec 1e 9d ac 23 2b df fa 58 bf 26 1e ce 7b 91 e7 f7 f3 f5 d2 9e ae 0d 00 30 07 d5 2c be 10 32 d1 93 ad b5 38 54 7e 1a 5e 79 1b 0f b7 f4 07 0d 7a 49 5a 82 d3 3a 67 02 09 12 d4 1f 64 e1 73 c0 8e b2 c6 a0 06 ae 0c 64 bf 0b 5e a5 ac 2c d7 4c d7 d4 3a ca 6c 5f bd ff c7 22 50 1c 2a f4 d7 b0 a1 76 12 c4 f8 6d 71 39 c2 a7 1c 6f 9b 9e 7d 69 18 82 f8 08 bb 05 18 47 e6 f8 b3 ff e2 65 29 68 e2 70 36 49 39 a7 11 df ed 81 3f 0f 5e b9 71 c0 c7 8a fc 16 98 4f 90 90 d2 af 01 7b 1d 27 11 32 4c 59 f0 3a c0 d6 6e 64 c3 f3 8a ca d5 a3 24 d7 08 31 e8 50 17 05 71 45 bd 35 46 Data Ascii: =AcMjVGO4E+kE39t=`!=X$c}Y.zMY#+X&{0,28T~^yzIZ:gdsd^,L:l_"Pvmq9o}iGe)hp6I9?^qO{'2LY:nd$1PqE5F
2022-11-29 15:34:21 UTC	1393	IN	Data Raw: ac 2b 96 2c fb 55 6b 01 2d 13 9a cc 8b 7b c0 e7 8e 4e d5 47 6c 1b d4 e9 b4 8c 9b 45 e8 f9 04 fa f4 31 1f 9f 1a 8e e5 ef 90 29 e3 6e 23 61 20 0c a0 57 39 0e 58 8a 2a 51 4e 8e 89 6c 18 85 43 4c 00 76 49 0f a3 23 ad 57 27 7d 7b 87 33 d7 c0 96 92 0d 16 65 7d 82 ba e3 7f e4 fa 10 72 3f b2 d4 43 58 4c 9b da 06 76 5d ca dd db 09 ff 17 c7 cf 99 ea a7 c5 b1 85 48 71 48 af 71 ab 45 43 e8 ba a1 b5 42 af d2 36 44 55 d9 24 83 dc bf 1e c9 b4 c0 2a 13 f7 13 21 65 fd fa 35 07 dd 39 ca 30 a2 e9 7c 97 26 ee 58 24 e6 52 70 89 48 d7 19 c6 da db cb 64 46 ee c8 57 df 49 9d 00 8f 88 7c 89 72 9f 62 87 d3 0d 34 32 51 62 ec 15 3e f6 a0 55 dd 6e 23 9f b6 2b 15 28 3e 68 85 ba aa c9 a6 11 e4 d3 16 35 34 3b f5 80 1d a2 eb e6 7b 54 2c e2 90 8e 7a da d4 ce ff 02 87 67 bf b5 78 b3 e9 f1 Data Ascii: +,Uk-{NGlE1)n#a W9XQNlCLvI#W'}{3e}r?CXLv]HqHqECB6DU$!e590\|&X$RpHdFWI\|rb42Qb>Un#+(>h54;{T,zgx
2022-11-29 15:34:23 UTC	1442	IN	Data Raw: 6a 12 9f 6d 36 a0 d8 1d c6 34 bb e2 66 39 cb 61 a3 2e 7e f4 ce c9 98 d3 09 8b 8a 67 b1 5b e9 e5 a4 0d 16 2b 70 0d 5c 82 f5 20 28 e3 a4 dc fe b1 2b c3 a0 99 46 05 06 07 c5 f1 72 92 b8 db f3 60 52 ed 67 22 67 b8 af 78 eb af 95 68 05 4b f1 7a bb cb b2 df 59 39 76 1f 18 43 3f 46 b0 70 91 6f c9 82 f1 26 ef 42 76 a0 98 ca 27 9a 8d 2f 59 31 d5 59 e3 83 5b c1 c5 01 ac 13 15 7c 46 64 ac 43 e1 16 89 9e df a0 7c ec d8 ea f4 ed 03 b1 7b 3c 5c de b1 2b 34 dd 89 cf 08 09 3c 8e 29 be 4f a1 db 5c d2 8c f3 57 27 16 38 e1 d9 a7 e8 0e 2f 9c 53 a8 cb ee 32 49 e1 b8 91 e4 d4 dd d7 74 71 9d 7f fa dc 54 c5 9c 15 91 16 0b 07 bc 24 bb bc 18 94 36 76 0f 56 6b 47 a1 36 79 a4 fc 61 a7 94 78 84 ca 7a f9 be 9c 52 60 53 2f 07 5c 6c be 67 db 51 ff 50 87 f1 df 2d b3 2f 30 69 36 5b 9c cc Data Ascii: jm64f9a.~g[+p\ (+Fr`Rg"gxhKzY9vC?Fpo&Bv'/Y1Y[\|FdC\|{<\+4<)O\W'8/S2ItqT$6vVkG6yaxzR`S/\lgQP-/0i6[
2022-11-29 15:34:26 UTC	1476	IN	Data Raw: 86 81 61 44 ca c4 34 c1 1f 94 89 36 a7 af 87 67 42 7b 07 34 ce 40 18 87 84 75 ee 89 05 d5 c0 a8 da a1 35 c9 16 01 91 65 58 d4 16 b2 94 fe 0e 25 fd 34 72 fc 25 d4 e1 e7 4a b5 fb 5b 71 41 2a 91 53 42 9d 7b be fc ee 49 b0 38 85 6f 08 8d d7 46 05 87 59 58 ae d4 f1 02 cf b1 e4 a3 5b 03 2b d1 98 5f d0 12 d6 9e 8f 8e e5 62 d0 11 64 f4 2d 25 f1 a2 93 40 14 33 c8 49 fe 91 69 ff fd 0f 72 4a 83 b2 a7 81 8a fd d8 a3 f8 c2 ac e6 fd e8 c7 82 6c fb 0b 05 50 cb 29 1b 20 e3 a2 5c 0f d2 6c c0 39 bb 6b 0c 28 7a a3 3e 5f f9 a3 a3 50 07 83 d4 2b 08 61 99 a4 57 e5 79 a6 d7 5b 15 65 1e 45 b3 0f bc dd 69 ef 2f 33 22 c5 82 a7 7e 07 35 e8 54 79 04 e1 6e 10 57 33 bf 18 81 3d 3a c7 60 e9 c6 cb ea fd 2f 77 c3 f5 a9 eb f4 e2 5c 65 3e e9 fe 26 5f 25 5a 03 99 72 54 05 d1 e5 ba 5f 04 ac Data Ascii: aD46gB{4@u5eX%4r%J[qA*SB{I8oFYX[+_bd-%@3IirJlP) \l9k(z>_P+aWy[eEi/3"~5TynW3=:`/w\e>&_%ZrT_
2022-11-29 15:34:28 UTC	1508	IN	Data Raw: f0 6c a2 22 33 a0 32 b9 5f 4f 58 ba 0c e5 11 27 a2 0e 70 d5 77 1f 84 97 c0 d8 2f 70 72 72 72 cd ae ad 26 95 1a db 0c ea 63 2c 13 72 a7 f7 e7 8d 7e a4 ce 42 4c 65 88 b7 b0 70 40 68 ef 3b ca b5 8a 14 c7 96 50 c7 25 08 a3 49 a9 37 bf c4 48 85 42 f4 e5 50 d1 5f d0 29 55 2f c5 4a 34 95 bc 97 9d 0f 6f 1b 48 72 39 db 58 ba 44 56 0b f6 c8 6d 46 00 56 98 c7 14 45 dc 6e bd ce 07 b4 0c 12 a9 44 ee 72 7a 4c e8 99 66 28 d1 ae a2 dd f8 b2 73 68 f5 79 d7 99 65 d4 16 57 b3 c4 0b 1f 22 1d 73 ed 08 9c d5 95 46 ca 0e ee e0 b0 95 ed 8c 58 07 6d 92 ad fb f5 43 bd e0 be 1b 62 1e 4a 31 d9 ec cd 42 b2 4b 79 e8 32 0f b1 2e 50 f1 65 30 31 69 ff f0 58 db 89 a0 3d 1a 69 e7 d1 1f e1 d5 37 1d 52 b6 fa 47 9e f8 65 37 4a 3f 21 c3 5e ca 6a 30 27 e5 81 e5 e3 74 e2 30 70 2c 2e b9 da d3 13 Data Ascii: l"32_OX'pw/prrr&c,r~BLep@h;P%I7HBP_)U/J4oHr9XDVmFVEnDrzLf(shyeW"sFXmCbJ1BKy2.Pe01iX=i7RGe7J?!^j0't0p,.
2022-11-29 15:34:31 UTC	1558	IN	Data Raw: fa 3c 39 23 5d 1c 54 4f 61 68 fd 3d 05 29 03 ee dc 62 19 99 ae 51 69 d7 d3 8c 00 58 71 df 88 2a 89 a2 dd da 9c a3 c8 20 ce f1 82 52 40 2c a1 8a a3 fe d8 de 1a 34 7f c0 37 34 6a 74 b2 8c 34 a4 bd 50 22 e4 19 29 29 e7 44 50 db fd 67 39 26 55 5d f2 1d 2f b0 ca 1c a9 3f a8 ba 28 fe 6e 6a ae 73 6a 56 d9 38 52 31 37 e7 28 e3 cb 56 2c 53 27 b4 5c cb 66 84 b0 e6 3f df ec 66 0f f0 7f 08 5a 32 63 c4 49 f1 fb 3e 84 61 ac 13 e4 f0 63 fe 4b 2d 7a 55 34 bb 31 6d 42 b2 96 f8 28 c9 c3 df 49 06 71 79 3a e7 1a 32 5f 77 dd 74 c7 a5 89 12 ed ef 02 9e 7d f2 77 23 f6 ad a2 f3 d1 9e af 27 90 d1 fc 42 02 f7 1e 8c f5 c2 da f7 a4 15 d3 32 14 ab 97 2f ac e2 1e 46 00 9d df 1e b1 e2 4f 82 f6 89 3f ab 7e ed 25 19 6f 83 f6 8d a5 4f f2 0c d6 34 6e 80 5c d7 e1 9f 97 20 42 c4 9d 90 1b e0 Data Ascii: <9#]TOah=)bQiXq* R@,474jt4P"))DPg9&U]/?(njsjV8R17(V,S'\f?fZ2cI>acK-zU41mB(Iqy:2_wt}w#'B2/FO?~%oO4n\ B

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
63	192.168.2.3	49883	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:34:02 UTC	638	OUT	GET /image/en-us.jpg HTTP/1.1 Host: usdtmen.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://usdtmen.com/index/passport/login.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
2022-11-29 15:34:03 UTC	639	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 29 Nov 2022 15:34:03 GMT Content-Type: image/jpeg Content-Length: 4140 Last-Modified: Mon, 05 Sep 2022 04:11:46 GMT Connection: close ETag: "63157702-102c" Expires: Thu, 29 Dec 2022 15:34:03 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2022-11-29 15:34:03 UTC	639	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 64 00 00 ff e1 03 2f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 64 61 62 61 63 62 62 2c 20 32 30 32 31 2f 30 34 2f 31 34 2d 30 30 3a 33 39 3a 34 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 Data Ascii: JFIFddDuckyd/http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.dabacbb, 2021/04/14-00:39:44 "> <rdf:RDF xmlns:rdf

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
64	192.168.2.3	49882	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:34:03 UTC	638	OUT	GET /image/es-es.jpg HTTP/1.1 Host: usdtmen.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://usdtmen.com/index/passport/login.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
2022-11-29 15:34:04 UTC	680	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 29 Nov 2022 15:34:03 GMT Content-Type: image/jpeg Content-Length: 43386 Last-Modified: Mon, 05 Sep 2022 04:11:52 GMT Connection: close ETag: "63157708-a97a" Expires: Thu, 29 Dec 2022 15:34:03 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2022-11-29 15:34:04 UTC	680	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 01 65 02 18 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 01 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 07 08 09 0a 04 05 06 03 01 02 ff c4 00 4d 10 00 00 06 02 01 01 06 05 02 01 06 09 08 0b 00 00 00 02 03 04 05 06 01 07 08 58 11 12 13 18 19 97 14 15 96 d4 d6 09 16 21 17 Data Ascii: JFIFHHCCeMX!
2022-11-29 15:34:06 UTC	744	IN	Data Raw: 5c 85 35 8c f2 43 b3 9d 22 d1 87 61 22 e7 36 8f a7 30 e3 b8 86 65 b6 bc a5 dc e1 6a 46 32 ac a5 a6 d3 f7 3b ee b8 ae ee 10 da 14 b7 16 96 d2 ac e3 33 95 92 ca 12 b7 5f 24 e6 54 cc d1 20 e2 4b 31 95 4e 9a 8a e6 50 ac 1b e2 43 2a 1d 1c 99 13 a9 97 78 5b be 74 8c 64 cc 6e dc 93 39 2e 71 91 04 2d b3 11 56 96 4a af ee f9 02 ac 26 66 17 71 2a 4a 3c 93 32 1c cc 6e e2 57 8c 2d 29 f0 7b 9d d4 af 18 56 31 d3 0a c6 33 d7 04 93 8d 87 71 1a 3e 1f eb e3 e1 86 b0 f7 5c e3 39 f1 70 da 7c 4e b9 c7 a3 39 ef f5 eb 9c 7a 3f ab d0 77 62 9e 73 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 87 d9 b1 6c 66 f5 cd f2 26 4d 0c b9 8f 7f 4f b1 b6 Data Ascii: \5C"a"60ejF2;3_$T K1NPCx[tdn9.q-VJ&fqJ<2nW-){V13q>\9p\|N9z?wbslf&MO
2022-11-29 15:34:07 UTC	840	IN	Data Raw: 9f 62 fe 65 59 4b 5c d9 59 6d b6 70 f3 98 ee f7 63 b0 9f 0e 33 08 46 33 94 b6 db 2d 61 29 ee b7 84 a1 6e 65 c7 f2 9c 38 f3 99 cd 87 18 a4 eb 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 45 bd ae d0 f4 2d 55 73 98 96 93 86 8f 55 d4 14 b4 44 2a 33 52 cc e2 13 98 9d 90 8b 7a 56 30 ec 16 7c aa 29 38 93 76 54 d7 51 b3 4f 11 2c 28 54 15 51 c3 86 6c d2 72 f5 b5 fb c6 15 36 36 fb de b2 9a f8 73 25 e6 be e6 b2 da 62 a1 c2 91 3b 10 e1 57 cf 8a f3 d3 25 b7 19 2a 71 b8 4d 2f 0d 21 f7 b1 85 29 3e 2a 52 d3 6f 3e b6 98 76 81 b4 4f 8d 5d 43 68 f4 97 98 6b 0b 85 29 86 52 fb e8 63 c7 90 f4 77 52 dc 76 94 bc 67 0a 79 ce 8a f0 d1 84 e7 Data Ascii: beYK\Ympc3F3-a)ne8E-UsUD3RzV0\|)8vTQO,(TQlr66s%b;W%qM/!)>*Ro>vO]Chk)RcwRvgy

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
65	192.168.2.3	49884	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:34:03 UTC	659	OUT	GET /image/pt-pt.jpg HTTP/1.1 Host: usdtmen.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://usdtmen.com/index/passport/login.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
2022-11-29 15:34:05 UTC	712	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 29 Nov 2022 15:34:04 GMT Content-Type: image/jpeg Content-Length: 62082 Last-Modified: Mon, 05 Sep 2022 04:13:08 GMT Connection: close ETag: "63157754-f282" Expires: Thu, 29 Dec 2022 15:34:04 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2022-11-29 15:34:05 UTC	713	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 01 65 02 18 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 01 00 02 02 02 03 01 01 00 00 00 00 00 00 00 00 00 08 09 07 0a 05 06 03 04 0b 02 01 ff c4 00 55 10 00 00 07 01 00 01 03 02 02 06 04 05 0d 0d 09 00 00 01 02 03 04 05 06 07 08 09 11 12 13 14 15 21 0a 16 31 35 73 c2 17 22 Data Ascii: JFIFHHCCeU!15s"
2022-11-29 15:34:06 UTC	824	IN	Data Raw: 00 89 08 33 fe be 25 49 7c 1f a7 3b 1f 8f 8f f1 99 1b ff 00 92 47 2d fe b6 73 cb df f2 f7 7f 1b bf e3 7d 3b ff 00 a7 e3 f4 fd 33 3f fa b6 0d 77 fc b4 ab ff 00 e2 41 fe be 2d 47 eb f4 e7 63 ff 00 e6 64 6f fe 49 1e fd 5f e8 d7 f9 8b 4b 6f 4f 75 0f b8 78 cd 22 55 2d b5 65 cc 66 66 58 75 d6 62 bb 26 a6 74 7b 08 cd 48 55 5e 2a be c7 ed dc 7a 32 10 ff 00 d9 58 c1 95 f4 cd 44 c4 a6 5c 34 b8 9f 52 67 a5 c7 67 42 9b 01 ed 92 1b 66 7c 39 70 5e 5b 34 8d a9 e4 35 32 3b 91 9d 5b 45 2e 5c b8 c6 e2 50 ea 8d bf a8 8b 21 9f 32 2f 71 97 13 da 4f 5f f2 c7 db 01 98 e5 be 3a d6 f1 b5 9f 07 6c f3 b5 9b 1a b5 53 59 5b 66 39 56 ae 15 d3 35 ef 3e cb 93 63 45 91 33 8f ac 23 25 9b 38 ad 3b 59 60 87 22 b9 ef 57 4c 96 c2 14 d3 8e 21 e6 e6 b3 1e 96 9e ab f1 af e4 6a 58 f2 5b c6 26 b4 Data Ascii: 3%I\|;G-s};3?wA-GcdoI_KoOux"U-effXub&t{HU^*z2XD\4RggBf\|9p^[452;[E.\P!2/qO_:lSY[f9V5>cE3#%8;Y`"WL!jX[&
2022-11-29 15:34:09 UTC	1025	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 3d e1 15 94 2a 6f 33 fc 53 9f 3d 5f 4a 34 de f1 ce 31 d3 24 17 b2 4d aa be 8d a5 af e7 f6 7f 55 7e e9 f7 86 88 da 43 95 29 a5 2b e9 b8 98 88 52 8b e4 db 6a 4e a6 e7 c8 b2 27 70 57 30 c6 8e 5e 6e b1 c7 7a 8b c6 1a 3e cc 97 33 2f 55 27 49 13 c1 3d 1f ee e6 f5 59 32 ca c8 bc 92 6f 28 88 fa 5a 89 5b e3 d3 5d bb d5 9c c3 93 60 a4 bc c4 4b 79 32 6b 26 34 87 56 86 64 25 e8 32 8e 32 5f 6d 2a 24 3c 48 96 4c a9 b2 70 94 48 5f 4a 4f 47 f2 37 71 e9 d4 f3 7a 27 84 fe 3e 58 2b e4 73 ac b1 dc de 82 4b 29 3f 93 9f 89 77 8e 33 79 e3 9a 5a 32 3f eb 1b d0 ee 3b 4b 2e ad 26 44 a6 dd 8a a3 75 24 48 70 8a 83 32 73 98 cc 73 df 25 46 2e be 9e 2d e6 a6 c9 a7 0c ba 49 45 e3 bd d5 7f 27 9a cb ae c8 90 fc 1c 23 88 49 91 99 29 Data Ascii: =o3S=_J41$MU~C)+RjN'pW0^nz>3/U'I=Y2o(Z[]`Ky2k&4Vd%22_m$<HLpH_JOG7qz'>X+sK)?w3yZ2?;K.&Du$Hp2ss%F.-IE'#I)
2022-11-29 15:34:10 UTC	1107	IN	Data Raw: be b2 cc f6 9c fd e5 2e ca d8 de d5 26 da e2 71 5f 43 df 57 5e 49 76 62 7a 06 5f 6f 1a 5d 95 3f 46 ce 69 64 bc f4 e8 fb 7a 0b 9b aa db 79 2e c8 37 2c 57 60 89 8c b5 97 68 b0 d7 18 47 98 a8 b0 aa 6e be 14 66 1a 8b 54 a8 2c a1 ba 65 c1 8a d2 19 8a d5 52 98 6d b8 ad c5 8f 1d 0d 34 cc 46 90 d1 c5 65 2d b4 6c 34 92 4a 4b 94 cf a5 9e 6a f4 fd cb 9c 67 46 df a7 fb 2a 78 b9 dc e5 64 38 0b c2 b2 96 ab b4 18 c4 12 54 48 83 79 44 a7 9d 97 1d d5 ba 4f 19 da 1b 93 21 db c8 29 12 e3 d9 cf 5a 9e 7c f1 48 c7 04 98 00 00 00 00 00 00 1f c3 32 22 33 33 22 22 23 33 33 3f 62 22 2f cc cc cc ff 00 22 22 2f da 60 44 66 7d 11 76 67 f0 44 5f 99 9f ec 1f 8a 52 52 93 52 8c 92 94 91 a9 4a 51 91 25 29 22 ec cc cc fe 08 88 be 4c cf e0 8b e4 c5 80 f8 df e1 7e 97 a0 e5 a8 3a 2f 7b d2 69 Data Ascii: .&q_CW^Ivbz_o]?Fidzy.7,W`hGnfT,eRm4Fe-l4JKjgF*xd8THyDO!)Z\|H2"33""#33?b"/""/`Df}vgD_RRRJQ%)"L~:/{i

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
66	192.168.2.3	49872	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:34:04 UTC	676	OUT	GET /image/fr.jpg HTTP/1.1 Host: usdtmen.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://usdtmen.com/index/passport/login.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
2022-11-29 15:34:04 UTC	677	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 29 Nov 2022 15:34:04 GMT Content-Type: image/jpeg Content-Length: 1888 Last-Modified: Mon, 05 Sep 2022 04:11:57 GMT Connection: close ETag: "6315770d-760" Expires: Thu, 29 Dec 2022 15:34:04 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2022-11-29 15:34:04 UTC	678	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 64 00 00 ff e1 03 2f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 64 61 62 61 63 62 62 2c 20 32 30 32 31 2f 30 34 2f 31 34 2d 30 30 3a 33 39 3a 34 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 Data Ascii: JFIFddDuckyd/http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.dabacbb, 2021/04/14-00:39:44 "> <rdf:RDF xmlns:rdf

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
67	192.168.2.3	49889	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:34:04 UTC	677	OUT	GET /image/es-es.jpg HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36 Host: usdtmen.com
2022-11-29 15:34:05 UTC	728	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 29 Nov 2022 15:34:04 GMT Content-Type: image/jpeg Content-Length: 43386 Last-Modified: Mon, 05 Sep 2022 04:11:52 GMT Connection: close ETag: "63157708-a97a" Expires: Thu, 29 Dec 2022 15:34:04 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2022-11-29 15:34:05 UTC	729	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 01 65 02 18 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 01 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 07 08 09 0a 04 05 06 03 01 02 ff c4 00 4d 10 00 00 06 02 01 01 06 05 02 01 06 09 08 0b 00 00 00 02 03 04 05 06 01 07 08 58 11 12 13 18 19 97 14 15 96 d4 d6 09 16 21 17 Data Ascii: JFIFHHCCeMX!
2022-11-29 15:34:06 UTC	776	IN	Data Raw: 5c 85 35 8c f2 43 b3 9d 22 d1 87 61 22 e7 36 8f a7 30 e3 b8 86 65 b6 bc a5 dc e1 6a 46 32 ac a5 a6 d3 f7 3b ee b8 ae ee 10 da 14 b7 16 96 d2 ac e3 33 95 92 ca 12 b7 5f 24 e6 54 cc d1 20 e2 4b 31 95 4e 9a 8a e6 50 ac 1b e2 43 2a 1d 1c 99 13 a9 97 78 5b be 74 8c 64 cc 6e dc 93 39 2e 71 91 04 2d b3 11 56 96 4a af ee f9 02 ac 26 66 17 71 2a 4a 3c 93 32 1c cc 6e e2 57 8c 2d 29 f0 7b 9d d4 af 18 56 31 d3 0a c6 33 d7 04 93 8d 87 71 1a 3e 1f eb e3 e1 86 b0 f7 5c e3 39 f1 70 da 7c 4e b9 c7 a3 39 ef f5 eb 9c 7a 3f ab d0 77 62 9e 73 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 87 d9 b1 6c 66 f5 cd f2 26 4d 0c b9 8f 7f 4f b1 b6 Data Ascii: \5C"a"60ejF2;3_$T K1NPCx[tdn9.q-VJ&fqJ<2nW-){V13q>\9p\|N9z?wbslf&MO
2022-11-29 15:34:06 UTC	792	IN	Data Raw: 9f 62 fe 65 59 4b 5c d9 59 6d b6 70 f3 98 ee f7 63 b0 9f 0e 33 08 46 33 94 b6 db 2d 61 29 ee b7 84 a1 6e 65 c7 f2 9c 38 f3 99 cd 87 18 a4 eb 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 45 bd ae d0 f4 2d 55 73 98 96 93 86 8f 55 d4 14 b4 44 2a 33 52 cc e2 13 98 9d 90 8b 7a 56 30 ec 16 7c aa 29 38 93 76 54 d7 51 b3 4f 11 2c 28 54 15 51 c3 86 6c d2 72 f5 b5 fb c6 15 36 36 fb de b2 9a f8 73 25 e6 be e6 b2 da 62 a1 c2 91 3b 10 e1 57 cf 8a f3 d3 25 b7 19 2a 71 b8 4d 2f 0d 21 f7 b1 85 29 3e 2a 52 d3 6f 3e b6 98 76 81 b4 4f 8d 5d 43 68 f4 97 98 6b 0b 85 29 86 52 fb e8 63 c7 90 f4 77 52 dc 76 94 bc 67 0a 79 ce 8a f0 d1 84 e7 Data Ascii: beYK\Ympc3F3-a)ne8E-UsUD3RzV0\|)8vTQO,(TQlr66s%b;W%qM/!)>*Ro>vO]Chk)RcwRvgy

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
68	192.168.2.3	49890	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:34:04 UTC	677	OUT	GET /image/ar-ae.jpg HTTP/1.1 Host: usdtmen.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://usdtmen.com/index/passport/login.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
2022-11-29 15:34:06 UTC	760	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 29 Nov 2022 15:34:05 GMT Content-Type: image/jpeg Content-Length: 61185 Last-Modified: Mon, 05 Sep 2022 04:10:54 GMT Connection: close ETag: "631576ce-ef01" Expires: Thu, 29 Dec 2022 15:34:05 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2022-11-29 15:34:06 UTC	761	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 01 65 02 18 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 01 00 01 05 01 01 01 01 01 00 00 00 00 00 00 00 00 01 06 07 08 09 0a 02 03 05 04 0b ff c4 00 5d 10 00 00 05 03 02 03 02 06 09 10 07 06 04 05 05 01 00 01 02 03 04 05 06 11 07 08 12 21 31 09 13 0a 14 22 41 51 61 17 26 27 Data Ascii: JFIFHHCCe]!1"AQa&'
2022-11-29 15:34:07 UTC	867	IN	Data Raw: a9 5a 65 b8 0d 42 a5 d8 d6 5a a9 77 7c cb 6e 9b 7e a7 4c ed 1a 7d 54 a4 b1 44 b7 2f 1b 96 6a 6a 12 e8 f1 d8 95 c2 dd 2e 55 42 4c f2 a8 4b 73 85 08 79 2a 5b ab 57 2e 50 d1 da 7b b6 63 6a fb 86 72 4c e4 6d 1d 79 f2 5c 5d 0d 09 a6 31 54 69 d1 7d 3a cd a2 e2 63 c4 a8 00 db ce 6f 11 6b 8e 53 3c 3a 16 f0 6f e6 56 b4 e7 74 db a1 d1 0a fa 89 9a ad 3a d2 75 da bc 46 94 a5 43 fa b1 69 5d 51 28 32 3c 5d 6a 3e 09 0d b6 aa 8b e4 87 9b ca 1c 4a 94 a4 99 a4 cc c6 cf 0a c0 5e e6 3a 40 0c 33 c6 d6 b4 7a fd 64 75 2f 78 f0 39 3a 33 1b 8c c3 6d 13 54 61 6a e6 60 07 74 d4 04 c1 bd 9c 3e e7 3d 37 76 a2 df 9a 89 5e de fe e2 68 37 4d db 5d af d2 ec 7d 69 d4 48 d6 54 0a b5 41 f9 91 ad ca 64 db 96 5c e6 e0 52 1b 79 4a 28 71 52 b3 4a 9a 69 af 21 b3 c7 09 17 21 05 50 1b 56 c4 c0 24 Data Ascii: ZeBZw\|n~L}TD/jj.UBLKsy*[W.P{cjrLmy\]1Ti}:cokS<:oVt:uFCi]Q(2<]j>J^:@3zdu/x9:3mTaj`t>=7v^h7M]}iHTAd\RyJ(qRJi!!PV$
2022-11-29 15:34:08 UTC	901	IN	Data Raw: f4 d9 8e 0f 6b e9 32 8f 43 d2 48 7e c3 74 71 d8 3e 38 2e 37 9c ba 82 c4 3f 06 ff 00 5f 4a c4 dd 85 d9 a3 35 49 fd cd 27 57 ac d9 4e d3 99 5b a4 db 48 ae db 11 df aa 34 e1 a0 d4 94 9c 87 a9 f1 de 86 c9 92 16 b5 29 c2 4f 9f 23 06 8d 57 74 bb 39 b4 92 0c c9 39 4d be 9e 79 00 33 d0 78 0c d3 de e5 d2 af d1 ae 90 2a 1a 92 5c 0e cf e4 f0 b5 4d 89 a8 dc cf fb a4 99 80 b2 83 b7 37 6a 55 1d 6a ed 12 da 6d b9 6e b0 f4 67 75 ce 87 06 ca 99 2e 33 64 97 8d 54 3a b5 56 a1 54 9a d9 a1 b5 a8 e4 c3 a1 2b bd 6c d6 95 20 bb 96 c9 78 2e 42 67 51 75 47 b4 b8 b4 83 94 99 7d ac 44 1d d6 36 9b c5 f8 2e bb c2 56 a8 d2 d3 1a d7 80 79 61 2c c4 56 73 5c 5a d6 ec c3 70 b4 c5 e6 9b b7 b7 79 37 83 12 17 48 5b 54 d8 c6 dc b6 89 66 53 6d 9d 29 d3 ea 0d 36 a2 c4 16 91 55 bc 24 c0 85 2a eb Data Ascii: k2CH~tq>8.7?_J5I'WN[H4)O#Wt99My3x\M7jUjmngu.3dT:VT+l x.BgQuG}D6.Vya,Vs\Zpy7H[TfSm)6U$
2022-11-29 15:34:09 UTC	965	IN	Data Raw: 5d 6e bf 9c 33 c4 b8 cd ff 00 aa b0 35 c7 e5 6c 57 a6 7f 7d ca 8d 47 43 fd 0f a0 86 3a e7 71 19 61 fd 06 7b 14 02 89 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 15 f3 da e7 e5 2d a0 ff 00 da cd 85 f3 92 98 2f c2 7c 23 3d 36 fe f3 57 6d a8 7f 2e e8 8f d2 18 4f e2 29 2b 7f a9 3f 8c bd 45 fd 75 ba fe 70 cf 12 e3 37 fe aa c0 d7 1f 95 b1 5e 99 fd f7 2a 35 1d 0f f4 3e 82 18 eb 9d c4 65 87 f4 19 ec 50 0a 24 04 40 44 04 40 44 04 40 44 04 40 44 04 40 44 04 40 44 04 40 44 04 40 44 04 40 44 04 40 44 04 40 44 04 40 44 04 40 44 04 40 Data Ascii: ]n35lW}GC:qa{-/\|#=6Wm.O)+?Eup7^*5>eP$@D@D@D@D@D@D@D@D@D@D@D@D@D@

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
69	192.168.2.3	49892	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:34:05 UTC	712	OUT	GET /image/ko.jpg HTTP/1.1 Host: usdtmen.com Connection: keep-alive sec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://usdtmen.com/index/passport/login.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
2022-11-29 15:34:08 UTC	883	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 29 Nov 2022 15:34:06 GMT Content-Type: image/jpeg Content-Length: 66330 Last-Modified: Mon, 05 Sep 2022 04:12:10 GMT Connection: close ETag: "6315771a-1031a" Expires: Thu, 29 Dec 2022 15:34:06 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2022-11-29 15:34:08 UTC	883	IN	Data Raw: ff d8 ff e1 11 40 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1c 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 8e 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 35 20 57 69 6e 64 6f 77 73 00 32 30 32 32 3a 30 36 3a 32 35 20 30 30 3a 32 33 3a 31 33 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 02 18 a0 03 00 04 00 00 00 01 00 00 01 65 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: @ExifMM*bj(1r2i''Adobe Photoshop CS5 Windows2022:06:25 00:23:13e
2022-11-29 15:34:08 UTC	949	IN	Data Raw: 1a 2a 1a 51 1a 77 1a 9e 1a c5 1a ec 1b 14 1b 3b 1b 63 1b 8a 1b b2 1b da 1c 02 1c 2a 1c 52 1c 7b 1c a3 1c cc 1c f5 1d 1e 1d 47 1d 70 1d 99 1d c3 1d ec 1e 16 1e 40 1e 6a 1e 94 1e be 1e e9 1f 13 1f 3e 1f 69 1f 94 1f bf 1f ea 20 15 20 41 20 6c 20 98 20 c4 20 f0 21 1c 21 48 21 75 21 a1 21 ce 21 fb 22 27 22 55 22 82 22 af 22 dd 23 0a 23 38 23 66 23 94 23 c2 23 f0 24 1f 24 4d 24 7c 24 ab 24 da 25 09 25 38 25 68 25 97 25 c7 25 f7 26 27 26 57 26 87 26 b7 26 e8 27 18 27 49 27 7a 27 ab 27 dc 28 0d 28 3f 28 71 28 a2 28 d4 29 06 29 38 29 6b 29 9d 29 d0 2a 02 2a 35 2a 68 2a 9b 2a cf 2b 02 2b 36 2b 69 2b 9d 2b d1 2c 05 2c 39 2c 6e 2c a2 2c d7 2d 0c 2d 41 2d 76 2d ab 2d e1 2e 16 2e 4c 2e 82 2e b7 2e ee 2f 24 2f 5a 2f 91 2f c7 2f fe 30 35 30 6c 30 a4 30 db 31 12 31 4a 31 Data Ascii: Qw;cR{Gp@j>i A l !!H!u!!!"'"U"""##8#f###$$M$\|$$%%8%h%%%&'&W&&&''I'z''((?(q(())8)k))*5h**++6+i++,,9,n,,--A-v--..L.../$/Z///050l0011J1
2022-11-29 15:34:09 UTC	1009	IN	Data Raw: f9 7c 3e 19 77 fd 47 c0 dc b6 d9 c4 7c ad c7 ec 3c 86 4f a9 64 dd 1b 7e 9f 72 d3 57 e5 71 af 15 6e 47 0b 85 c7 57 d5 41 87 4d e1 9a c2 c1 51 4d 85 9b 21 1d 56 3e 1c a4 90 1a 98 24 87 5d bd d7 ba f8 93 f7 4f 67 77 07 71 76 8e f4 ec 3e fc de 7b e3 7f 76 f6 e0 ce 56 cb be b7 37 63 e4 f2 b9 6d e5 55 9c a6 99 e9 6a e9 73 33 e6 9d eb e9 a6 c7 49 09 a7 5a 56 11 a5 22 c6 22 44 45 40 a3 dd 7b a1 97 e0 cf cc be dd f8 05 f2 97 a9 7e 55 f4 a6 49 a9 77 8f 58 6e 28 2b ab 30 f3 54 cf 06 1f 7b ed 2a db 51 ee fd 83 b9 16 03 aa 7d bf bb b0 52 cd 49 3f 05 e1 67 49 e2 d3 34 51 ba fb af 75 f6 50 e9 ce d3 f8 b3 fc dc fe 04 e2 f7 a6 3b 1f 8e ec 7f 8e 5f 2b ba ab 29 80 dd db 3f 2e d0 4d 5b 8b 19 6a 6a 9c 0e f4 d8 f9 f1 03 17 c4 6f 2d 8d b8 21 9e 95 e5 88 a4 b4 b5 f4 69 53 4c e2 Data Ascii: \|>wG\|<Od~rWqnGWAMQM!V>$]Ogwqv>{vV7cmUjs3IZV""DE@{~UIwXn(+0T{*Q}RI?gI4QuP;_+)?.M[jjo-!iSL
2022-11-29 15:34:10 UTC	1073	IN	Data Raw: 1b 1e 64 da ee 36 ab f4 fd 37 15 56 1f 12 38 f8 5d 7e 60 fe d0 4a 9c 13 d7 cb 53 e5 af c5 0e e5 f8 57 de 9b d3 e3 ff 00 79 6d b9 b0 3b c7 68 d7 48 29 2b a3 8e 76 c0 6f 1d b9 34 d3 2e 13 7a ed 1c 8c d1 44 b9 6d b1 b8 69 a1 f2 d3 cc 02 bc 6c 1e 19 92 2a 88 a5 89 3a 1b cb 1c cd b5 73 6e cf 6b bd 6d 13 eb b7 90 65 7f 14 6f 4e e8 dc 79 32 f9 f9 11 46 15 52 09 c3 8e 60 d8 37 0e 5b dc e7 db 37 18 e9 22 e5 58 7c 32 25 70 ea 7c c1 fd a0 82 a6 84 11 d1 6d f6 20 e8 93 af 7b f7 5e eb de fd d7 ba f7 bf 75 ee bd ef dd 7b af 7b f7 5e eb de fd d7 ba f7 bf 75 ee bd ef dd 7b af 7b f7 5e eb de fd d7 ba f7 bf 75 ee bd ef dd 7b af 7b f7 5e eb de fd d7 ba 32 bf 12 3e 27 f7 2f cd 5e f6 d9 7f 1f ba 3b 6e cb 9c de 1b ba b9 05 66 42 58 ea 17 01 b3 b6 dc 13 44 33 7b d7 77 e4 60 86 Data Ascii: d67V8]~`JSWym;hH)+vo4.zDmil*:snkmeoNy2FR`7[7"X\|2%p\|m {^u{{^u{{^u{{^2>'/^;nfBXD3{w`
2022-11-29 15:34:10 UTC	1089	IN	Data Raw: bd fb af 75 ef 7e eb dd 7b df ba f7 5e f7 ee bd d7 bd fb af 75 ef 7e eb dd 7b df ba f7 5e f7 ee bd d7 bd fb af 75 ef 7e eb dd 7b df ba f7 5e f7 ee bd d7 bd fb af 75 ef 7e eb dd 7b df ba f7 5e f7 ee bd d7 bd fb af 75 ef 7e eb dd 7b df ba f7 5e f7 ee bd d7 bd fb af 75 ef 7e eb dd 7b df ba f7 5e f7 ee bd d7 bd fb af 75 ef 7e eb dd 7b df ba f7 5e f7 ee bd d7 bd fb af 75 ef 7e eb dd 7b df ba f7 5e f7 ee bd d7 bd fb af 75 ef 7e eb dd 7b df ba f7 5e f7 ee bd d7 bd fb af 75 ef 7e eb dd 7b df ba f7 5e f7 ee bd d7 bd fb af 75 ef 7e eb dd 7b df ba f7 5e f7 ee bd d7 bd fb af 75 ef 7e eb dd 7b df ba f7 5e f7 ee bd d7 bd fb af 75 ef 7e eb dd 7b df ba f7 5e f7 ee bd d7 bd fb af 75 ef 7e eb dd 7b df ba f7 5e f7 ee bd d7 bd fb af 75 ef 7e eb dd 7b df ba f7 5e f7 ee bd d7 Data Ascii: u~{^u~{^u~{^u~{^u~{^u~{^u~{^u~{^u~{^u~{^u~{^u~{^u~{^u~{^u~{^

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
7	192.168.2.3	49732	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:32:54 UTC	12	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=us&oit=1&cp=2&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swB Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-11-29 15:32:54 UTC	12	IN	HTTP/1.1 200 OK Date: Tue, 29 Nov 2022 15:32:54 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-gjnl28UBKqI8qevmVOVeag' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 BFCache-Opt-In: unload Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: CONSENT=PENDING+916; expires=Thu, 28-Nov-2024 15:32:54 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-11-29 15:32:54 UTC	14	IN	Data Raw: 35 34 64 0d 0a 29 5d 7d 27 0a 5b 22 75 73 22 2c 5b 22 75 73 61 22 2c 22 75 73 61 22 2c 22 75 73 64 20 65 75 72 22 2c 22 75 73 74 67 22 2c 22 75 73 74 20 69 64 20 70 72 c3 bc 66 65 6e 22 2c 22 75 73 20 6f 70 65 6e 22 2c 22 75 73 65 64 6f 6d 22 2c 22 75 73 65 72 62 65 6e 63 68 6d 61 72 6b 22 2c 22 75 73 62 20 63 22 2c 22 75 73 70 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 64 65 74 61 69 6c 22 3a 5b 7b 7d 2c 7b 22 61 22 3a 22 4c 61 6e 64 20 69 6e 20 4e 6f 72 64 61 6d 65 72 69 6b 61 22 2c 22 64 63 22 3a 22 Data Ascii: 54d)]}'["us",["usa","usa","usd eur","ustg","ust id prfen","us open","usedom","userbenchmark","usb c","usp"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestdetail":[{},{"a":"Land in Nordamerika","dc":"
2022-11-29 15:32:54 UTC	15	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
70	192.168.2.3	49888	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:34:05 UTC	728	OUT	GET /image/en-us.jpg HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36 Host: usdtmen.com
2022-11-29 15:34:06 UTC	819	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 29 Nov 2022 15:34:06 GMT Content-Type: image/jpeg Content-Length: 4140 Last-Modified: Mon, 05 Sep 2022 04:11:46 GMT Connection: close ETag: "63157702-102c" Expires: Thu, 29 Dec 2022 15:34:06 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2022-11-29 15:34:06 UTC	819	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 64 00 00 ff e1 03 2f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 64 61 62 61 63 62 62 2c 20 32 30 32 31 2f 30 34 2f 31 34 2d 30 30 3a 33 39 3a 34 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 Data Ascii: JFIFddDuckyd/http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.dabacbb, 2021/04/14-00:39:44 "> <rdf:RDF xmlns:rdf

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
71	192.168.2.3	49898	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:34:07 UTC	866	OUT	GET /image/pt-pt.jpg HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36 Host: usdtmen.com
2022-11-29 15:34:08 UTC	917	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 29 Nov 2022 15:34:07 GMT Content-Type: image/jpeg Content-Length: 62082 Last-Modified: Mon, 05 Sep 2022 04:13:08 GMT Connection: close ETag: "63157754-f282" Expires: Thu, 29 Dec 2022 15:34:07 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2022-11-29 15:34:08 UTC	917	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 01 65 02 18 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 01 00 02 02 02 03 01 01 00 00 00 00 00 00 00 00 00 08 09 07 0a 05 06 03 04 0b 02 01 ff c4 00 55 10 00 00 07 01 00 01 03 02 02 06 04 05 0d 0d 09 00 00 01 02 03 04 05 06 07 08 09 11 12 13 14 15 21 0a 16 31 35 73 c2 17 22 Data Ascii: JFIFHHCCeU!15s"
2022-11-29 15:34:09 UTC	977	IN	Data Raw: 00 89 08 33 fe be 25 49 7c 1f a7 3b 1f 8f 8f f1 99 1b ff 00 92 47 2d fe b6 73 cb df f2 f7 7f 1b bf e3 7d 3b ff 00 a7 e3 f4 fd 33 3f fa b6 0d 77 fc b4 ab ff 00 e2 41 fe be 2d 47 eb f4 e7 63 ff 00 e6 64 6f fe 49 1e fd 5f e8 d7 f9 8b 4b 6f 4f 75 0f b8 78 cd 22 55 2d b5 65 cc 66 66 58 75 d6 62 bb 26 a6 74 7b 08 cd 48 55 5e 2a be c7 ed dc 7a 32 10 ff 00 d9 58 c1 95 f4 cd 44 c4 a6 5c 34 b8 9f 52 67 a5 c7 67 42 9b 01 ed 92 1b 66 7c 39 70 5e 5b 34 8d a9 e4 35 32 3b 91 9d 5b 45 2e 5c b8 c6 e2 50 ea 8d bf a8 8b 21 9f 32 2f 71 97 13 da 4f 5f f2 c7 db 01 98 e5 be 3a d6 f1 b5 9f 07 6c f3 b5 9b 1a b5 53 59 5b 66 39 56 ae 15 d3 35 ef 3e cb 93 63 45 91 33 8f ac 23 25 9b 38 ad 3b 59 60 87 22 b9 ef 57 4c 96 c2 14 d3 8e 21 e6 e6 b3 1e 96 9e ab f1 af e4 6a 58 f2 5b c6 26 b4 Data Ascii: 3%I\|;G-s};3?wA-GcdoI_KoOux"U-effXub&t{HU^*z2XD\4RggBf\|9p^[452;[E.\P!2/qO_:lSY[f9V5>cE3#%8;Y`"WL!jX[&
2022-11-29 15:34:11 UTC	1141	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 3d e1 15 94 2a 6f 33 fc 53 9f 3d 5f 4a 34 de f1 ce 31 d3 24 17 b2 4d aa be 8d a5 af e7 f6 7f 55 7e e9 f7 86 88 da 43 95 29 a5 2b e9 b8 98 88 52 8b e4 db 6a 4e a6 e7 c8 b2 27 70 57 30 c6 8e 5e 6e b1 c7 7a 8b c6 1a 3e cc 97 33 2f 55 27 49 13 c1 3d 1f ee e6 f5 59 32 ca c8 bc 92 6f 28 88 fa 5a 89 5b e3 d3 5d bb d5 9c c3 93 60 a4 bc c4 4b 79 32 6b 26 34 87 56 86 64 25 e8 32 8e 32 5f 6d 2a 24 3c 48 96 4c a9 b2 70 94 48 5f 4a 4f 47 f2 37 71 e9 d4 f3 7a 27 84 fe 3e 58 2b e4 73 ac b1 dc de 82 4b 29 3f 93 9f 89 77 8e 33 79 e3 9a 5a 32 3f eb 1b d0 ee 3b 4b 2e ad 26 44 a6 dd 8a a3 75 24 48 70 8a 83 32 73 98 cc 73 df 25 46 2e be 9e 2d e6 a6 c9 a7 0c ba 49 45 e3 bd d5 7f 27 9a cb ae c8 90 fc 1c 23 88 49 91 99 29 Data Ascii: =o3S=_J41$MU~C)+RjN'pW0^nz>3/U'I=Y2o(Z[]`Ky2k&4Vd%22_m$<HLpH_JOG7qz'>X+sK)?w3yZ2?;K.&Du$Hp2ss%F.-IE'#I)
2022-11-29 15:34:12 UTC	1189	IN	Data Raw: be b2 cc f6 9c fd e5 2e ca d8 de d5 26 da e2 71 5f 43 df 57 5e 49 76 62 7a 06 5f 6f 1a 5d 95 3f 46 ce 69 64 bc f4 e8 fb 7a 0b 9b aa db 79 2e c8 37 2c 57 60 89 8c b5 97 68 b0 d7 18 47 98 a8 b0 aa 6e be 14 66 1a 8b 54 a8 2c a1 ba 65 c1 8a d2 19 8a d5 52 98 6d b8 ad c5 8f 1d 0d 34 cc 46 90 d1 c5 65 2d b4 6c 34 92 4a 4b 94 cf a5 9e 6a f4 fd cb 9c 67 46 df a7 fb 2a 78 b9 dc e5 64 38 0b c2 b2 96 ab b4 18 c4 12 54 48 83 79 44 a7 9d 97 1d d5 ba 4f 19 da 1b 93 21 db c8 29 12 e3 d9 cf 5a 9e 7c f1 48 c7 04 98 00 00 00 00 00 00 1f c3 32 22 33 33 22 22 23 33 33 3f 62 22 2f cc cc cc ff 00 22 22 2f da 60 44 66 7d 11 76 67 f0 44 5f 99 9f ec 1f 8a 52 52 93 52 8c 92 94 91 a9 4a 51 91 25 29 22 ec cc cc fe 08 88 be 4c cf e0 8b e4 c5 80 f8 df e1 7e 97 a0 e5 a8 3a 2f 7b d2 69 Data Ascii: .&q_CW^Ivbz_o]?Fidzy.7,W`hGnfT,eRm4Fe-l4JKjgF*xd8THyDO!)Z\|H2"33""#33?b"/""/`Df}vgD_RRRJQ%)"L~:/{i

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
72	192.168.2.3	49899	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:34:07 UTC	866	OUT	GET /image/fr.jpg HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36 Host: usdtmen.com
2022-11-29 15:34:08 UTC	899	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 29 Nov 2022 15:34:08 GMT Content-Type: image/jpeg Content-Length: 1888 Last-Modified: Mon, 05 Sep 2022 04:11:57 GMT Connection: close ETag: "6315770d-760" Expires: Thu, 29 Dec 2022 15:34:08 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2022-11-29 15:34:08 UTC	899	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 64 00 00 ff e1 03 2f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 64 61 62 61 63 62 62 2c 20 32 30 32 31 2f 30 34 2f 31 34 2d 30 30 3a 33 39 3a 34 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 Data Ascii: JFIFddDuckyd/http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.dabacbb, 2021/04/14-00:39:44 "> <rdf:RDF xmlns:rdf

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
73	192.168.2.3	49902	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:34:08 UTC	965	OUT	GET /image/ar-ae.jpg HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36 Host: usdtmen.com
2022-11-29 15:34:09 UTC	1041	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 29 Nov 2022 15:34:09 GMT Content-Type: image/jpeg Content-Length: 61185 Last-Modified: Mon, 05 Sep 2022 04:10:54 GMT Connection: close ETag: "631576ce-ef01" Expires: Thu, 29 Dec 2022 15:34:09 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2022-11-29 15:34:09 UTC	1042	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 01 65 02 18 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 01 00 01 05 01 01 01 01 01 00 00 00 00 00 00 00 00 01 06 07 08 09 0a 02 03 05 04 0b ff c4 00 5d 10 00 00 05 03 02 03 02 06 09 10 07 06 04 05 05 01 00 01 02 03 04 05 06 11 07 08 12 21 31 09 13 0a 14 22 41 51 61 17 26 27 Data Ascii: JFIFHHCCe]!1"AQa&'
2022-11-29 15:34:10 UTC	1057	IN	Data Raw: a9 5a 65 b8 0d 42 a5 d8 d6 5a a9 77 7c cb 6e 9b 7e a7 4c ed 1a 7d 54 a4 b1 44 b7 2f 1b 96 6a 6a 12 e8 f1 d8 95 c2 dd 2e 55 42 4c f2 a8 4b 73 85 08 79 2a 5b ab 57 2e 50 d1 da 7b b6 63 6a fb 86 72 4c e4 6d 1d 79 f2 5c 5d 0d 09 a6 31 54 69 d1 7d 3a cd a2 e2 63 c4 a8 00 db ce 6f 11 6b 8e 53 3c 3a 16 f0 6f e6 56 b4 e7 74 db a1 d1 0a fa 89 9a ad 3a d2 75 da bc 46 94 a5 43 fa b1 69 5d 51 28 32 3c 5d 6a 3e 09 0d b6 aa 8b e4 87 9b ca 1c 4a 94 a4 99 a4 cc c6 cf 0a c0 5e e6 3a 40 0c 33 c6 d6 b4 7a fd 64 75 2f 78 f0 39 3a 33 1b 8c c3 6d 13 54 61 6a e6 60 07 74 d4 04 c1 bd 9c 3e e7 3d 37 76 a2 df 9a 89 5e de fe e2 68 37 4d db 5d af d2 ec 7d 69 d4 48 d6 54 0a b5 41 f9 91 ad ca 64 db 96 5c e6 e0 52 1b 79 4a 28 71 52 b3 4a 9a 69 af 21 b3 c7 09 17 21 05 50 1b 56 c4 c0 24 Data Ascii: ZeBZw\|n~L}TD/jj.UBLKsy*[W.P{cjrLmy\]1Ti}:cokS<:oVt:uFCi]Q(2<]j>J^:@3zdu/x9:3mTaj`t>=7v^h7M]}iHTAd\RyJ(qRJi!!PV$
2022-11-29 15:34:11 UTC	1157	IN	Data Raw: f4 d9 8e 0f 6b e9 32 8f 43 d2 48 7e c3 74 71 d8 3e 38 2e 37 9c ba 82 c4 3f 06 ff 00 5f 4a c4 dd 85 d9 a3 35 49 fd cd 27 57 ac d9 4e d3 99 5b a4 db 48 ae db 11 df aa 34 e1 a0 d4 94 9c 87 a9 f1 de 86 c9 92 16 b5 29 c2 4f 9f 23 06 8d 57 74 bb 39 b4 92 0c c9 39 4d be 9e 79 00 33 d0 78 0c d3 de e5 d2 af d1 ae 90 2a 1a 92 5c 0e cf e4 f0 b5 4d 89 a8 dc cf fb a4 99 80 b2 83 b7 37 6a 55 1d 6a ed 12 da 6d b9 6e b0 f4 67 75 ce 87 06 ca 99 2e 33 64 97 8d 54 3a b5 56 a1 54 9a d9 a1 b5 a8 e4 c3 a1 2b bd 6c d6 95 20 bb 96 c9 78 2e 42 67 51 75 47 b4 b8 b4 83 94 99 7d ac 44 1d d6 36 9b c5 f8 2e bb c2 56 a8 d2 d3 1a d7 80 79 61 2c c4 56 73 5c 5a d6 ec c3 70 b4 c5 e6 9b b7 b7 79 37 83 12 17 48 5b 54 d8 c6 dc b6 89 66 53 6d 9d 29 d3 ea 0d 36 a2 c4 16 91 55 bc 24 c0 85 2a eb Data Ascii: k2CH~tq>8.7?_J5I'WN[H4)O#Wt99My3x\M7jUjmngu.3dT:VT+l x.BgQuG}D6.Vya,Vs\Zpy7H[TfSm)6U$
2022-11-29 15:34:12 UTC	1218	IN	Data Raw: 5d 6e bf 9c 33 c4 b8 cd ff 00 aa b0 35 c7 e5 6c 57 a6 7f 7d ca 8d 47 43 fd 0f a0 86 3a e7 71 19 61 fd 06 7b 14 02 89 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 10 11 01 15 f3 da e7 e5 2d a0 ff 00 da cd 85 f3 92 98 2f c2 7c 23 3d 36 fe f3 57 6d a8 7f 2e e8 8f d2 18 4f e2 29 2b 7f a9 3f 8c bd 45 fd 75 ba fe 70 cf 12 e3 37 fe aa c0 d7 1f 95 b1 5e 99 fd f7 2a 35 1d 0f f4 3e 82 18 eb 9d c4 65 87 f4 19 ec 50 0a 24 04 40 44 04 40 44 04 40 44 04 40 44 04 40 44 04 40 44 04 40 44 04 40 44 04 40 44 04 40 44 04 40 44 04 40 44 04 40 44 04 40 Data Ascii: ]n35lW}GC:qa{-/\|#=6Wm.O)+?Eup7^*5>eP$@D@D@D@D@D@D@D@D@D@D@D@D@D@

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
74	192.168.2.3	49900	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:34:09 UTC	965	OUT	GET /image/bootstrap.min.css.map HTTP/1.1 Host: usdtmen.com Connection: keep-alive Pragma: no-cache Cache-Control: no-cache Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: think_var=en-us; PHPSESSID=vg2hurq6g2m72it0ujr3nddhg4
2022-11-29 15:34:10 UTC	1120	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 29 Nov 2022 15:34:09 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding
2022-11-29 15:34:10 UTC	1120	IN	Data Raw: 35 33 32 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e e7 b3 bb e7 bb 9f e5 8f 91 e7 94 9f e9 94 99 e8 af af 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 2f 2a 20 42 61 73 65 20 2a 2f 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 33 33 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 3a 20 31 36 70 78 20 56 65 72 64 61 6e Data Ascii: 532a<!DOCTYPE html><html><head> <meta charset="UTF-8"> <title></title> <meta name="robots" content="noindex,nofollow" /> <style> /* Base */ body { color: #333; font: 16px Verdan
2022-11-29 15:34:10 UTC	1136	IN	Data Raw: 74 72 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 74 72 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 74 64 3e 48 54 54 50 5f 53 45 43 5f 46 45 54 43 48 5f 44 45 53 54 3c 2f 74 64 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 74 64 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6d 70 74 79 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 74 64 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 74 72 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 74 72 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 74 64 3e 48 54 Data Ascii: tr> <tr> <td>HTTP_SEC_FETCH_DEST</td> <td> empty </td> </tr> <tr> <td>HT

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
75	192.168.2.3	49909	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:34:13 UTC	1246	OUT	GET /image/ko.jpg HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36 Host: usdtmen.com
2022-11-29 15:34:14 UTC	1248	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 29 Nov 2022 15:34:13 GMT Content-Type: image/jpeg Content-Length: 66330 Last-Modified: Mon, 05 Sep 2022 04:12:10 GMT Connection: close ETag: "6315771a-1031a" Expires: Thu, 29 Dec 2022 15:34:13 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2022-11-29 15:34:14 UTC	1248	IN	Data Raw: ff d8 ff e1 11 40 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1c 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 8e 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 35 20 57 69 6e 64 6f 77 73 00 32 30 32 32 3a 30 36 3a 32 35 20 30 30 3a 32 33 3a 31 33 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 02 18 a0 03 00 04 00 00 00 01 00 00 01 65 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 Data Ascii: @ExifMM*bj(1r2i''Adobe Photoshop CS5 Windows2022:06:25 00:23:13e
2022-11-29 15:34:16 UTC	1280	IN	Data Raw: 1a 2a 1a 51 1a 77 1a 9e 1a c5 1a ec 1b 14 1b 3b 1b 63 1b 8a 1b b2 1b da 1c 02 1c 2a 1c 52 1c 7b 1c a3 1c cc 1c f5 1d 1e 1d 47 1d 70 1d 99 1d c3 1d ec 1e 16 1e 40 1e 6a 1e 94 1e be 1e e9 1f 13 1f 3e 1f 69 1f 94 1f bf 1f ea 20 15 20 41 20 6c 20 98 20 c4 20 f0 21 1c 21 48 21 75 21 a1 21 ce 21 fb 22 27 22 55 22 82 22 af 22 dd 23 0a 23 38 23 66 23 94 23 c2 23 f0 24 1f 24 4d 24 7c 24 ab 24 da 25 09 25 38 25 68 25 97 25 c7 25 f7 26 27 26 57 26 87 26 b7 26 e8 27 18 27 49 27 7a 27 ab 27 dc 28 0d 28 3f 28 71 28 a2 28 d4 29 06 29 38 29 6b 29 9d 29 d0 2a 02 2a 35 2a 68 2a 9b 2a cf 2b 02 2b 36 2b 69 2b 9d 2b d1 2c 05 2c 39 2c 6e 2c a2 2c d7 2d 0c 2d 41 2d 76 2d ab 2d e1 2e 16 2e 4c 2e 82 2e b7 2e ee 2f 24 2f 5a 2f 91 2f c7 2f fe 30 35 30 6c 30 a4 30 db 31 12 31 4a 31 Data Ascii: Qw;cR{Gp@j>i A l !!H!u!!!"'"U"""##8#f###$$M$\|$$%%8%h%%%&'&W&&&''I'z''((?(q(())8)k))*5h**++6+i++,,9,n,,--A-v--..L.../$/Z///050l0011J1
2022-11-29 15:34:16 UTC	1296	IN	Data Raw: f9 7c 3e 19 77 fd 47 c0 dc b6 d9 c4 7c ad c7 ec 3c 86 4f a9 64 dd 1b 7e 9f 72 d3 57 e5 71 af 15 6e 47 0b 85 c7 57 d5 41 87 4d e1 9a c2 c1 51 4d 85 9b 21 1d 56 3e 1c a4 90 1a 98 24 87 5d bd d7 ba f8 93 f7 4f 67 77 07 71 76 8e f4 ec 3e fc de 7b e3 7f 76 f6 e0 ce 56 cb be b7 37 63 e4 f2 b9 6d e5 55 9c a6 99 e9 6a e9 73 33 e6 9d eb e9 a6 c7 49 09 a7 5a 56 11 a5 22 c6 22 44 45 40 a3 dd 7b a1 97 e0 cf cc be dd f8 05 f2 97 a9 7e 55 f4 a6 49 a9 77 8f 58 6e 28 2b ab 30 f3 54 cf 06 1f 7b ed 2a db 51 ee fd 83 b9 16 03 aa 7d bf bb b0 52 cd 49 3f 05 e1 67 49 e2 d3 34 51 ba fb af 75 f6 50 e9 ce d3 f8 b3 fc dc fe 04 e2 f7 a6 3b 1f 8e ec 7f 8e 5f 2b ba ab 29 80 dd db 3f 2e d0 4d 5b 8b 19 6a 6a 9c 0e f4 d8 f9 f1 03 17 c4 6f 2d 8d b8 21 9e 95 e5 88 a4 b4 b5 f4 69 53 4c e2 Data Ascii: \|>wG\|<Od~rWqnGWAMQM!V>$]Ogwqv>{vV7cmUjs3IZV""DE@{~UIwXn(+0T{*Q}RI?gI4QuP;_+)?.M[jjo-!iSL
2022-11-29 15:34:18 UTC	1344	IN	Data Raw: 1b 1e 64 da ee 36 ab f4 fd 37 15 56 1f 12 38 f8 5d 7e 60 fe d0 4a 9c 13 d7 cb 53 e5 af c5 0e e5 f8 57 de 9b d3 e3 ff 00 79 6d b9 b0 3b c7 68 d7 48 29 2b a3 8e 76 c0 6f 1d b9 34 d3 2e 13 7a ed 1c 8c d1 44 b9 6d b1 b8 69 a1 f2 d3 cc 02 bc 6c 1e 19 92 2a 88 a5 89 3a 1b cb 1c cd b5 73 6e cf 6b bd 6d 13 eb b7 90 65 7f 14 6f 4e e8 dc 79 32 f9 f9 11 46 15 52 09 c3 8e 60 d8 37 0e 5b dc e7 db 37 18 e9 22 e5 58 7c 32 25 70 ea 7c c1 fd a0 82 a6 84 11 d1 6d f6 20 e8 93 af 7b f7 5e eb de fd d7 ba f7 bf 75 ee bd ef dd 7b af 7b f7 5e eb de fd d7 ba f7 bf 75 ee bd ef dd 7b af 7b f7 5e eb de fd d7 ba f7 bf 75 ee bd ef dd 7b af 7b f7 5e eb de fd d7 ba 32 bf 12 3e 27 f7 2f cd 5e f6 d9 7f 1f ba 3b 6e cb 9c de 1b ba b9 05 66 42 58 ea 17 01 b3 b6 dc 13 44 33 7b d7 77 e4 60 86 Data Ascii: d67V8]~`JSWym;hH)+vo4.zDmil*:snkmeoNy2FR`7[7"X\|2%p\|m {^u{{^u{{^u{{^2>'/^;nfBXD3{w`
2022-11-29 15:34:20 UTC	1392	IN	Data Raw: bd fb af 75 ef 7e eb dd 7b df ba f7 5e f7 ee bd d7 bd fb af 75 ef 7e eb dd 7b df ba f7 5e f7 ee bd d7 bd fb af 75 ef 7e eb dd 7b df ba f7 5e f7 ee bd d7 bd fb af 75 ef 7e eb dd 7b df ba f7 5e f7 ee bd d7 bd fb af 75 ef 7e eb dd 7b df ba f7 5e f7 ee bd d7 bd fb af 75 ef 7e eb dd 7b df ba f7 5e f7 ee bd d7 bd fb af 75 ef 7e eb dd 7b df ba f7 5e f7 ee bd d7 bd fb af 75 ef 7e eb dd 7b df ba f7 5e f7 ee bd d7 bd fb af 75 ef 7e eb dd 7b df ba f7 5e f7 ee bd d7 bd fb af 75 ef 7e eb dd 7b df ba f7 5e f7 ee bd d7 bd fb af 75 ef 7e eb dd 7b df ba f7 5e f7 ee bd d7 bd fb af 75 ef 7e eb dd 7b df ba f7 5e f7 ee bd d7 bd fb af 75 ef 7e eb dd 7b df ba f7 5e f7 ee bd d7 bd fb af 75 ef 7e eb dd 7b df ba f7 5e f7 ee bd d7 bd fb af 75 ef 7e eb dd 7b df ba f7 5e f7 ee bd d7 Data Ascii: u~{^u~{^u~{^u~{^u~{^u~{^u~{^u~{^u~{^u~{^u~{^u~{^u~{^u~{^u~{^

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
76	192.168.2.3	49910	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:34:14 UTC	1247	OUT	GET /image/logo.cba20b1b.png HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36 Host: usdtmen.com
2022-11-29 15:34:16 UTC	1312	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 29 Nov 2022 15:34:14 GMT Content-Type: image/png Content-Length: 132354 Last-Modified: Mon, 05 Sep 2022 04:12:14 GMT Connection: close ETag: "6315771e-20502" Expires: Thu, 29 Dec 2022 15:34:14 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2022-11-29 15:34:16 UTC	1312	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 95 00 00 01 52 08 06 00 00 00 a3 54 24 36 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec bd 69 b0 24 d7 79 9e f9 9e 93 59 cb 5d 7a 03 d0 40 03 20 76 90 06 41 8a 10 17 51 a2 c6 32 9b 92 46 36 69 53 e3 25 1a 1e 5b 21 6f 13 23 79 26 c6 11 33 bf 26 e6 97 5a 11 13 31 8e 59 3c 3f f4 8b 0e c7 58 f2 48 31 21 c2 cb d8 74 90 96 cd 11 41 d9 16 65 92 10 41 51 00 49 10 80 40 12 04 08 74 a3 b7 bb 56 55 e6 39 13 ef 39 f9 dd 3a f7 dc dc aa 6e 55 f7 ed 46 56 04 70 ab ab b2 b2 32 4f 65 9e 7c f2 fd be ef fd 14 ba 47 37 02 dd 08 74 23 d0 8d 40 37 02 6f c7 11 b0 56 bd 1d 77 fb 56 da e7 f3 f8 d5 5b e6 37 7c 0e 8f cf bd 2f 17 70 da 7d f6 34 2e d8 f0 f7 95 d7 67 f9 cd df 85 17 66 de 8e cb 38 a5 2e Data Ascii: PNGIHDRRT$6sRGB IDATx^i$yY]z@ vAQ2F6iS%[!o#y&3&Z1Y<?XH1!tAeAQI@tVU99:nUFVp2Oe\|G7t#@7oVwV[7\|/p}4.gf8.
2022-11-29 15:34:19 UTC	1360	IN	Data Raw: 69 0a 9b 0e 15 86 03 65 07 2b 4a 0d 87 ca ae ac 01 ab ab 50 c3 75 65 fb 3d ce 13 46 1b f2 a8 b1 5e ce 24 7b 52 cd cc 4d 62 95 ce b4 55 bb 0a f9 8e 56 d9 8b 69 9a 3d ab b5 fd e3 dd 2b b8 fc 99 bb 3f b9 e3 45 d0 72 e5 b2 2c a4 33 2f 50 86 a1 1d fe 6a 71 0e 65 59 eb c5 b0 1f 77 58 94 53 07 93 5c 77 18 02 f2 f0 38 35 33 2f cb a1 2c eb cf 2d 00 28 61 6e 39 d2 f6 db 06 ed 2f c0 e1 64 2b 10 e9 27 ef 29 48 f2 df 16 59 d1 fb 3b e9 29 8c b7 b7 b1 fa ed 26 a8 6c 3e c2 cb 97 f8 b8 fd ec f1 21 cc fd 39 76 35 6f 8e 34 2d e4 82 47 95 57 65 bc b6 50 91 94 f7 0e 86 be e9 dd 2a b7 35 64 e0 58 f1 dc 9f f7 d8 54 45 1e e7 60 8a 72 b9 68 b0 8c e1 32 0e 79 57 29 96 75 60 e9 df f3 2a 68 1b bb a1 36 d5 e0 1e 22 4e 94 e6 b9 d6 81 65 db 8e 3b 75 4a a5 40 d2 ac 1d 76 9a a0 b2 e9 b8 Data Ascii: ie+JPue=F^${RMbUVi=+?Er,3/PjqeYwXS\w853/,-(an9/d+')HY;)&l>!9v5o4-GWeP5dXTE`rh2yW)u`h6"Ne;uJ@v
2022-11-29 15:34:22 UTC	1409	IN	Data Raw: a3 d5 d6 f9 89 02 db 2a cf 52 3f 1b 0f 2e cf 46 7a 48 d7 2f 1b 6f ce 56 d7 32 70 2c f5 ba 18 05 96 c1 de 51 bf ab 8b 5a 19 c7 fa 95 fa 79 d3 9d 4f dc b8 13 fe 7d 3a ed ca 70 9d ac 26 35 24 df bf 50 0d cb b3 01 95 b2 dd 90 ad dc 86 7d 76 01 73 f6 76 bc db be e5 e9 3b eb 33 8d 6c 1e 75 be 99 07 f8 19 93 e3 3a 10 a6 2d b1 34 8c c8 b4 bb 2c d3 96 de b5 4e c1 2d 6f d5 91 4d b5 65 92 89 5e d7 d2 c2 51 e6 23 fb 73 1c 3e 68 69 59 ca db 3d 26 97 b6 13 ab 6a 23 4a 62 c3 ce 6c e5 41 96 37 73 d9 32 33 b4 b6 1d 69 a3 51 9e b8 c6 27 c9 95 b2 34 f8 c8 64 d7 24 6c d2 3a d8 b4 8c 28 56 f0 c4 24 51 bb 6d 68 62 92 b9 d9 36 a8 37 08 b5 16 a1 5e 93 d8 64 28 71 c6 86 2e 2e b8 4a 96 ef 57 74 d5 ae 5c 18 d3 85 64 58 1d 1f 5f 32 8c dc 3d 05 e9 3c 37 8b a7 40 27 4f 14 dc 3b d6 41 Data Ascii: *R?.FzH/oV2p,QZyO}:p&5$P}vsv;3lu:-4,N-oMe^Q#s>hiY=&j#JblA7s23iQ'4d$l:(V$Qmhb67^d(q..JWt\dX_2=<7@'O;A
2022-11-29 15:34:23 UTC	1426	IN	Data Raw: b2 1b 13 be e4 fa 94 66 67 88 8b 1a 90 31 bb 0b c9 03 51 27 b3 10 65 02 cb 6a 82 2f 9d 57 6a ac c3 98 13 65 30 a9 47 0d ea a3 e1 bb e2 fc cf b9 f2 f1 13 c7 e2 6a 86 2d 8e 9d d5 98 1d 96 1d b7 4e 55 67 72 1c c0 aa c6 cb d5 f6 1d 83 b4 6a 75 29 1c 53 d8 7e 3c 41 5f 0d 1c 57 f7 33 04 95 a9 a4 07 7b c0 3f de 3d 40 6f 00 ba e9 b5 c2 63 00 8b ab 4e 04 ee e3 73 11 1d 12 24 79 41 13 bd 0e d7 13 b9 74 dc e3 2b 3e e6 ea 88 57 e3 bc 5c 6d 72 cd 2c 0e a6 f9 ab 83 16 ee 57 7f 70 67 cb e8 26 31 1a a2 c5 51 c7 4c 31 8a 35 50 f9 22 87 50 6b a7 37 66 04 7e f6 b9 3b e6 d3 dc fc 3e 01 6f 17 ba a3 3c 8b 22 60 19 82 65 3c eb ac ce 52 dd 73 55 02 ac 94 58 d3 1a f8 f0 01 6b 0f 1f b0 30 89 a1 24 61 2a 32 51 45 21 cc 5d 3e c1 53 db 1b cc 03 70 91 29 55 b0 de 00 7c 37 78 90 19 0a Data Ascii: fg1Q'ej/Wje0Gj-NUgrju)S~<A_W3{?=@ocNs$yAt+>W\mr,Wpg&1QL15P"Pk7f~;>o<"`e<RsUXk0$a*2QE!]>Sp)U\|7x
2022-11-29 15:34:25 UTC	1458	IN	Data Raw: 5d b6 5d e4 88 fe 5e 3f 83 4f a6 0f e1 10 e6 b0 d6 b8 bc eb 98 57 2d b3 17 cb 1d b2 d5 ac f5 e7 de 81 61 4c 67 d5 e6 7e d7 62 1c 79 3e 8c e0 b9 64 7d db b8 ee 85 80 d2 b9 4f ea dd 3e ea f3 42 67 2e 72 e0 73 1f e3 d2 2f 5d 7c 25 8b dd 33 15 77 24 71 27 00 96 0c 3e f0 5d 3b e0 a7 69 8c 56 9a 59 19 81 53 1a 81 dd 77 dc 51 6f 4d a8 1f 54 44 bf 04 60 53 25 71 c7 03 46 33 b5 5d c3 21 d3 56 32 78 02 42 84 91 94 c4 9c 63 c7 35 1f 3a 6a 01 a2 64 d8 39 b9 10 bf 48 18 7e 4c 80 65 6f 4e 63 64 55 cc 97 bd 66 1c eb ce 6b 70 bf a7 29 4b 2c 02 92 9a d5 12 f3 62 26 7a 95 df f3 1e e8 1c 64 12 a7 c8 24 fb 9b af a5 b5 fc f3 8d dd d8 a8 da a6 06 b1 b4 96 b0 36 12 23 77 67 c7 f0 df 07 7b 70 8f 9e 32 18 6c 5d 92 61 ac 3f 00 ab 40 b4 a5 58 40 43 5d cc 22 69 c6 8f 8a fd d7 8c 41 Data Ascii: ]]^?OW-aLg~by>d}O>Bg.rs/]\|%3w$q'>];iVYSwQoMTD`S%qF3]!V2xBc5:jd9H~LeoNcdUfkp)K,b&zd$6#wg{p2l]a?@X@C]"iA
2022-11-29 15:34:28 UTC	1492	IN	Data Raw: d2 37 bb 67 e2 72 b9 01 5d a7 09 58 3e a5 0b f8 5b 7d 3f ee c6 10 ba e0 72 9b 16 7a a1 e7 14 45 60 c8 93 d2 3e bf ec 31 f9 39 e0 18 b5 77 f1 58 05 c3 0f 4e 42 85 0a 8e 37 b5 4f a8 05 96 3d 7d 82 42 e1 c2 f5 c0 8a f0 e4 fe 17 fa dc 34 30 a4 35 7e 4f 14 aa 5f 38 b0 6b 6f 94 ab dd 7c d4 25 50 b9 d0 57 62 69 ff 4b 3d b0 10 3d b0 ef bb 2e 46 9f de 08 21 de 01 2d de 00 81 55 2d 0e 93 c6 50 ce ad 45 f4 d4 a0 4c 4a 02 94 93 9a 22 75 24 14 6a 5c 78 b6 e3 78 1c 40 25 f0 42 a0 73 b5 c4 c6 f3 5c 6c bd c8 c3 ca ad 0e b4 d2 60 e6 92 c2 e7 51 d8 5b 29 c3 64 56 ab f4 cf 00 80 f8 c3 b3 21 5b af 51 09 6e d0 0f 57 1f 4c 98 96 5b d0 51 57 8a 1b 1c d2 0a 50 c6 40 67 dd f7 a8 9e af 17 67 47 69 1f 04 28 b3 59 60 eb 79 96 a5 14 e6 1c c6 28 a7 32 95 a5 a4 c3 1f 81 90 7b be 70 e6 Data Ascii: 7gr]X>[}?rzE`>19wXNB7O=}B405~O_8ko\|%PWbiK==.F!-U-PELJ"u$j\xx@%Bs\l`Q[)dV![QnWL[QWP@ggGi(Y`y(2{p
2022-11-29 15:34:29 UTC	1524	IN	Data Raw: d1 58 67 12 af 09 ee 7d 70 db ed ef d9 71 36 58 ca c8 f0 39 bf 1a ab 7d b7 4d 5a c0 67 2a 97 03 72 23 e5 53 72 48 97 58 4a 02 8f 3e 53 49 6c 24 17 52 b1 98 be 58 27 0c 8d 87 a2 1e 1f 58 ba c2 57 8b 57 42 e1 a1 e5 10 b1 95 3e 98 6c 1c 02 9f 09 5b 49 4f 14 32 96 39 74 08 ca ab 0c 9f f2 ef d1 2b 40 ec 24 63 92 16 cd 02 92 5d 86 e5 f4 71 16 bb 56 ba fa ed d2 e3 b7 40 e7 7d e0 2c c9 39 8b 73 48 b2 4f 56 4b aa 32 56 0e aa 40 a8 28 5b 10 6a f3 5c 09 8f 5a 45 50 4e 11 73 19 64 d6 d0 dd 97 99 69 7f 42 9a ce 8f c9 83 d2 84 ec f7 20 c8 99 8c c0 25 f9 52 aa 3f 54 f4 23 12 fe 1e 77 80 6f 7c 93 9d 3f 21 d2 0b 68 fc 30 dc f9 d7 26 8c 94 a9 74 55 94 fa aa 0b 03 52 4f 42 7a 3d 60 5e 07 b8 66 c0 a3 4f 0a c6 20 98 80 e6 95 50 34 26 30 e1 65 e1 b1 12 12 94 b6 8f 12 7e 72 61 Data Ascii: Xg}pq6X9}MZg*r#SrHXJ>SIl$RX'XWWB>l[IO29t+@$c]qV@},9sHOVK2V@([j\ZEPNsdiB %R?T#wo\|?!h0&tUROBz=`^fO P4&0e~ra
2022-11-29 15:34:31 UTC	1540	IN	Data Raw: ae a6 c6 f6 75 cf a4 05 02 f3 f3 1b 39 f4 87 28 fc 4d ea 6f ff 65 13 c3 26 8b 9e 40 d1 98 90 77 c6 c6 d9 5b 04 60 a6 33 02 c5 82 ef 53 46 b9 52 f1 14 53 a5 b1 c2 d0 57 c8 54 54 81 cb 80 a9 e0 5c 89 7d 90 91 96 aa b9 fd b6 8e d5 f8 60 df 66 2c d3 3b ea 1a 9a 1f 77 32 f8 72 ee 75 5c 13 5f 8a 75 46 af 52 84 ff cc 3a 8a 1e 1e 43 8a e9 70 0d 13 63 a6 a1 42 e7 8f ea eb b1 4b 4c e2 47 de 49 15 02 0f 41 64 d5 9c 54 fb e5 1f 4c ac 14 c2 76 85 af 50 4f 1f 2a 20 73 b8 e0 8b 0d 66 e0 81 16 7c 89 8b 81 45 ec 47 fd cb d9 47 be b0 f4 57 0e 9f c9 7b 69 1f db 6e 81 f9 6e 01 7f ec c7 6e 65 10 8f 41 b0 a2 9e c6 26 7d 18 d7 4d 1b fa a6 18 46 3c a8 a2 13 f8 53 86 c0 52 25 b7 e9 be 37 25 e5 53 aa ff 13 a8 8c ac 1e 55 c0 aa 65 40 d4 2e e5 38 05 3c 9f 0d 60 a9 26 75 a8 d0 b7 1b Data Ascii: u9(Moe&@w[`3SFRSWTT\}`f,;w2ru\_uFR:CpcBKLGIAdTLvPO* sf\|EGGW{innneA&}MF<SR%7%SUe@.8<`&u
2022-11-29 15:34:31 UTC	1556	IN	Data Raw: 00 34 73 88 41 c0 20 60 10 30 08 e4 21 20 ad 1c ad c8 e7 01 fe 04 88 12 65 e1 e3 d7 57 c6 c9 41 33 5b 5a f8 53 2f 1d 77 f2 85 3b e5 75 dc 91 a3 85 4c 76 00 fc 7d c0 7e 08 2a 7b 04 f7 5c 29 35 94 66 33 08 2c 39 02 86 54 2e 39 e4 e6 03 0d 02 06 01 83 c0 2a 45 e0 dd 77 9d 0e cb ba 1e c0 ff 84 48 50 ca d9 34 b1 64 85 26 8b d1 a8 1b 1b 8a 94 a5 3e b6 a0 70 27 54 52 6f 74 31 65 1a 06 61 1f 80 47 00 eb 11 20 7d d0 a4 b8 eb 63 ba ac e4 ab 34 a4 72 25 df 1d 33 36 83 80 41 c0 20 50 6b 08 9c 7f ef 5b 61 39 77 00 74 76 d9 8a 70 b1 dd f6 3b ee c4 eb 88 58 fa c2 1d 91 eb 88 22 dc 2a aa 08 4f 7a 64 f2 05 28 3c 04 2b f3 04 40 83 86 4c d6 da 97 64 f5 8e d7 90 ca 55 7a 6f 99 59 6a 73 36 01 68 00 b0 9b 88 8c 17 d9 2a bd d7 e6 b2 0c 02 2b 0b 01 e9 b8 73 c6 fb 40 b8 11 80 28 Data Ascii: 4sA `0! eWA3[ZS/w;uLv}~{\)5f3,9T.9EwHP4d&>p'TRot1eaG }c4r%36A Pk[a9wtvp;X"Ozd(<+@LdUzoYjs6h+s@(

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
77	192.168.2.3	49923	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:34:21 UTC	1409	OUT	GET /image/username_icon.png HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36 Host: usdtmen.com
2022-11-29 15:34:23 UTC	1425	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 29 Nov 2022 15:34:22 GMT Content-Type: image/png Content-Length: 1344 Last-Modified: Mon, 05 Sep 2022 04:13:28 GMT Connection: close ETag: "63157768-540" Expires: Thu, 29 Dec 2022 15:34:22 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2022-11-29 15:34:23 UTC	1425	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1a 00 00 00 1e 08 06 00 00 00 32 db 0e d8 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 04 fa 49 44 41 54 48 4b b5 94 7f 4c 55 65 18 c7 bf cf fb 1e f2 aa 18 ce 68 05 e1 14 f9 51 84 62 9a cd 42 2b ac a9 d3 95 9a 53 57 33 0c 4c 81 0b f9 03 9a fd 51 6b bb eb 0f 9b b3 8c 34 ef 15 cd 60 98 59 b1 96 3f 9a 4a 53 74 b6 b4 92 99 0a 8a 80 7a 45 99 59 cc 9f 60 e8 3d e7 3c 4f 3b 57 71 2a e2 c5 49 e7 8f f3 be 67 e7 fb 7c 3f 7b 9f f7 7d bf 84 4e 3c f9 4d 07 5f 24 93 66 c2 96 a1 62 d3 43 30 e5 8a d8 aa 8e 4c 59 6f b9 5c df 2c 4b 48 b8 14 ca 86 ee 26 28 38 5b d5 97 02 28 15 1b 69 b0 00 61 9c 87 89 33 62 21 1c 36 3d 26 16 14 2c f9 c7 b6 d4 3b 5f a4 26 97 dd cd ab 43 d0 dc 53 7f 26 18 a4 77 82 29 1a 4c 5b 85 ed 85 8d Data Ascii: PNGIHDR2sRGBIDATHKLUehQbB+SW3LQk4`Y?JStzEY`=<O;Wq*Ig\|?{}N<M_$fbC0LYo\,KH&(8[(ia3b!6=&,;_&CS&w)L[

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
78	192.168.2.3	49930	154.211.96.136	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:34:25 UTC	1474	OUT	GET /image/password_icon.png HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36 Host: usdtmen.com
2022-11-29 15:34:26 UTC	1475	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 29 Nov 2022 15:34:25 GMT Content-Type: image/png Content-Length: 1464 Last-Modified: Mon, 05 Sep 2022 04:13:01 GMT Connection: close ETag: "6315774d-5b8" Expires: Thu, 29 Dec 2022 15:34:25 GMT Cache-Control: max-age=2592000 Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2022-11-29 15:34:26 UTC	1475	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1a 00 00 00 1f 08 06 00 00 00 f9 87 dd 7d 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 05 72 49 44 41 54 48 4b a5 96 7d 4c 56 55 1c c7 bf bf 73 1f 02 73 95 86 6f 29 be bf 00 a2 53 99 2b 5f 9a 66 73 8d 74 28 9a 16 62 82 86 09 12 94 62 ad b6 6a 73 bd 6c f5 47 6a 42 0f 0a 0e 27 26 14 b4 c4 61 f1 e4 6a 16 4d ca cd 54 04 1e 5e 14 51 30 df 90 b4 17 31 7c ee 39 bf 76 ee 7d 34 5b f7 01 a9 bb dd 9d 7b 9f f3 3b df cf f9 9d f3 fd 9d fb 10 ee e2 4a 6f 3b 3a 38 d8 0c 5a c7 12 b1 50 18 03 1f c0 26 4e c1 44 99 af d3 b7 25 3b 3a fa 7c 77 32 d4 5d 40 e6 c5 ea 67 a0 90 07 13 f7 b1 09 40 5a 10 7f 4b 80 89 df d9 c7 ab b7 4e 9f 58 dc 95 56 97 a0 cc d6 9a a7 40 28 66 1f 0b 0d 80 09 1f 2b 54 c3 04 d8 87 89 90 14 e4 87 2a Data Ascii: PNGIHDR}sRGBrIDATHK}LVUsso)S+_fst(bbjslGjB'&ajMT^Q01\|9v}4[{;Jo;:8ZP&ND%;:\|w2]@g@ZKNXV@(f+T*

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
8	192.168.2.3	49736	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:32:54 UTC	15	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usd&oit=1&cp=3&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swB Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-11-29 15:32:54 UTC	15	IN	HTTP/1.1 200 OK Date: Tue, 29 Nov 2022 15:32:54 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce--CSi9mdFomRk3cjxr6ZT1Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 BFCache-Opt-In: unload Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: CONSENT=PENDING+727; expires=Thu, 28-Nov-2024 15:32:54 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-11-29 15:32:54 UTC	17	IN	Data Raw: 32 31 66 0d 0a 29 5d 7d 27 0a 5b 22 75 73 64 22 2c 5b 22 75 73 64 20 65 75 72 22 2c 22 75 73 64 22 2c 22 75 73 64 20 6b 75 72 73 22 2c 22 75 73 64 74 22 2c 22 75 73 64 20 74 6f 20 65 75 72 6f 22 2c 22 75 73 64 20 65 75 72 20 6b 75 72 73 22 2c 22 75 73 64 63 22 2c 22 75 73 64 20 69 6e 20 65 75 72 6f 20 75 6d 72 65 63 68 6e 65 6e 22 2c 22 75 73 64 20 67 62 70 22 2c 22 75 73 64 61 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 72 65 6c 65 76 61 6e 63 65 22 3a 5b 31 32 35 30 2c 39 30 30 2c 36 30 31 2c 36 30 30 Data Ascii: 21f)]}'["usd",["usd eur","usd","usd kurs","usdt","usd to euro","usd eur kurs","usdc","usd in euro umrechnen","usd gbp","usda"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestrelevance":[1250,900,601,600
2022-11-29 15:32:55 UTC	17	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
9	192.168.2.3	49737	142.250.185.132	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2022-11-29 15:32:55 UTC	17	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=usdt&oit=1&cp=4&gs_rn=42&psi=qRYiebaDLQ80oWIb&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CLC1yQEIkrbJAQiitskBCMS2yQEIqZ3KAQiqj8sBCJahywEIi6vMAQj7u8wBCI+9zAEI6sDMAQidycwBCOPLzAEImNHMAQiZ0swB Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-11-29 15:32:55 UTC	18	IN	HTTP/1.1 200 OK Date: Tue, 29 Nov 2022 15:32:55 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-wxKlzgkf5rJztaHhtdpYrA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 BFCache-Opt-In: unload Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: CONSENT=PENDING+794; expires=Thu, 28-Nov-2024 15:32:55 GMT; path=/; domain=.google.com; Secure P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-11-29 15:32:55 UTC	19	IN	Data Raw: 32 30 63 0d 0a 29 5d 7d 27 0a 5b 22 75 73 64 74 22 2c 5b 22 75 73 64 74 22 2c 22 75 73 64 74 20 65 75 72 6f 22 2c 22 75 73 64 74 20 6b 75 72 73 22 2c 22 75 73 64 74 20 74 72 63 32 30 22 2c 22 75 73 64 74 20 6b 61 75 66 65 6e 22 2c 22 75 73 64 74 20 6d 65 74 61 6d 61 73 6b 22 2c 22 75 73 64 74 20 65 75 72 22 2c 22 75 73 64 74 20 77 61 6c 6c 65 74 22 2c 22 75 73 64 74 20 61 64 72 65 73 73 65 22 2c 22 75 73 64 74 72 79 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 72 65 6c 65 76 61 6e 63 65 22 3a 5b 31 32 35 Data Ascii: 20c)]}'["usdt",["usdt","usdt euro","usdt kurs","usdt trc20","usdt kaufen","usdt metamask","usdt eur","usdt wallet","usdt adresse","usdtry"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestrelevance":[125
2022-11-29 15:32:55 UTC	20	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	16:32:21
Start date:	29/11/2022
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://usdtmen.com/
Imagebase:	0x7ff6566b0000
File size:	2852640 bytes
MD5 hash:	7BC7B4AEDC055BB02BCB52710132E9E1
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Target ID:	1
Start time:	16:32:22
Start date:	29/11/2022
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1768,i,5818765958052219750,8192306715576805166,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6566b0000
File size:	2852640 bytes
MD5 hash:	7BC7B4AEDC055BB02BCB52710132E9E1
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://usdtmen.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

High Level Behavior Distribution

back

Behavior

System Behavior

Analysis Process: chrome.exePID: 3188, Parent PID: 2540

General

Chronological Activities

Analysis Process: chrome.exePID: 6160, Parent PID: 3188

General

Chronological Activities

Disassembly

Windows Analysis Report
https://usdtmen.com