Edit tour

Windows Analysis Report
https://cmax.co.uk/qw.PDF

Overview

General Information

Sample URL:	https://cmax.co.uk/qw.PDF
Analysis ID:	1356307
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Creates files inside the system directory

HTML page contains hidden URLs or javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4080 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 1916 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=2044,i,5254295920708420066,16508067594936788554,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3992 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" "https://cmax.co.uk/qw.PDF MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://cmax.co.uk/qw.PDF

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social usering

Antivirus detection for URL or domain

Source: https://yellowtelecomms.com/favicon.ico

Avira URL Cloud: Label: phishing

Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/pplhm/0x4AAAAAAAOK1kuLGSjPsA09/auto/normal

HTTP Parser: Base64 decoded: http://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/pplhm/0x4AAAAAAAOK1kuLGSjPsA09/auto/normal

Source: https://pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev/DF.html	HTTP Parser: No favicon
Source: https://yellowtelecomms.com/?uoxpeyml=2f55add6b836aa4259dab5df60ce153f174c9a1fbc9b51db3344b1403ca7675618bf96aa5564f4933669a9fb029d759e0cc8ada4debdb66b54039511b3abb583	HTTP Parser: No favicon
Source: https://yellowtelecomms.com/?uoxpeyml=2f55add6b836aa4259dab5df60ce153f174c9a1fbc9b51db3344b1403ca7675618bf96aa5564f4933669a9fb029d759e0cc8ada4debdb66b54039511b3abb583	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/pplhm/0x4AAAAAAAOK1kuLGSjPsA09/auto/normal	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/pplhm/0x4AAAAAAAOK1kuLGSjPsA09/auto/normal	HTTP Parser: No favicon
Source: https://www.google.com/sorry/index?continue=http://google.co.uk/&q=EgRmgZjUGI3NzKsGIjCnPpvWLbXDb183drVmgfJaSuOR6afn9EaOWYnUbyGbs7c--C6gg1mEUAh9LvwzP6MyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	HTTP Parser: No favicon
Source: https://www.google.com/sorry/index?continue=http://google.co.uk/&q=EgRmgZjUGI3NzKsGIjCnPpvWLbXDb183drVmgfJaSuOR6afn9EaOWYnUbyGbs7c--C6gg1mEUAh9LvwzP6MyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B&size=normal&s=2Si2oG2vqiJDMkfmdCiyYG47taXWmmv1DThCTXJFVzGeyffO5En3cciASXKsozAzASCwEoWvjRXm3bXAFFd0Nznp7eONKdw1O-ZoT1tvJ44jhAteAdAVNVbBONiYzV4VdhBqZx0JZwsnry9e3i7Fhxp6qrFglI0AWYkx7kclnCibOznQiXcb5gGxA95AV31LMyA6OF_5FM_bJEdQeMpKwFSpAv1PY-WgLXFhjwtdS2t4ZBdN2b2t5tltQo38zBD367y7X_uejy391DzFcBMU2ly-lSUKWr4&cb=r5b06divj710	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.6:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.6:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.6:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.6:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.6:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.6:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.6:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.6:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.6:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.6:49773 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183

Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.134&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-117.0.5938.134Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /qw.PDF HTTP/1.1Host: cmax.co.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /DF.html HTTP/1.1Host: pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.devConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /images/nj_logo.gif HTTP/1.1Host: www.netjetseurope.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.netjets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en-us/ HTTP/1.1Host: www.netjets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev/DF.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en-us/ HTTP/1.1Host: www.netjets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?uoxpeyml HTTP/1.1Host: yellowtelecomms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?uoxpeyml=2f55add6b836aa4259dab5df60ce153f174c9a1fbc9b51db3344b1403ca7675618bf96aa5564f4933669a9fb029d759e0cc8ada4debdb66b54039511b3abb583 HTTP/1.1Host: yellowtelecomms.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=LbzGEm3uoXgZ; qPdM.sig=dPrdM1sD3YP7v0-YRh0efKrALtE
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yellowtelecomms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/56d3063b/api.js?onload=onloadTurnstileCallback HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yellowtelecomms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/pplhm/0x4AAAAAAAOK1kuLGSjPsA09/auto/normal HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://yellowtelecomms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8325a88a1b39287a HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/pplhm/0x4AAAAAAAOK1kuLGSjPsA09/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/pplhm/0x4AAAAAAAOK1kuLGSjPsA09/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: yellowtelecomms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yellowtelecomms.com/?uoxpeyml=2f55add6b836aa4259dab5df60ce153f174c9a1fbc9b51db3344b1403ca7675618bf96aa5564f4933669a9fb029d759e0cc8ada4debdb66b54039511b3abb583Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=LbzGEm3uoXgZ; qPdM.sig=dPrdM1sD3YP7v0-YRh0efKrALtE
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Z4OR3NL8zldvxh4&MD=xA93+xHC HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /sorry/index?continue=http://google.co.uk/&q=EgRmgZjUGI3NzKsGIjCnPpvWLbXDb183drVmgfJaSuOR6afn9EaOWYnUbyGbs7c--C6gg1mEUAh9LvwzP6MyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1Host: www.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=UBeNCkZ3L8yXcx8qh4JFUXkwkNC9IrdiRdbjSTjqSiFh8WrRcbKr_rOJbgHY6TA4RT-6ps0bhemfwCPBsLMgPT7-gTcWqHvZvZbafOpkqRy0dLyYG9AjP2vbUBomarnc9pcZVlhHkUeUaWMurD0GGXyW05_B_1IyUNYEELmyqRg
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/444306888:1702041974:qedNnDAvJuTEx6GK7a0PZ6aCZBDBhkOW-8_-5XsNyIA/8325a88a1b39287a/c48312223deb6d4 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/sorry/index?continue=http://google.co.uk/&q=EgRmgZjUGI3NzKsGIjCnPpvWLbXDb183drVmgfJaSuOR6afn9EaOWYnUbyGbs7c--C6gg1mEUAh9LvwzP6MyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=UBeNCkZ3L8yXcx8qh4JFUXkwkNC9IrdiRdbjSTjqSiFh8WrRcbKr_rOJbgHY6TA4RT-6ps0bhemfwCPBsLMgPT7-gTcWqHvZvZbafOpkqRy0dLyYG9AjP2vbUBomarnc9pcZVlhHkUeUaWMurD0GGXyW05_B_1IyUNYEELmyqRg
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/8325a88a1b39287a/1702045325441/60ed290997626eb1a1ce799b56cbd68b9613d1865e9881799b17d985a5e6e502/1eIgiSiESzLLnF9 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/pplhm/0x4AAAAAAAOK1kuLGSjPsA09/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8325a88a1b39287a/1702045325441/i3LT-P1zuZ3N7c- HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/pplhm/0x4AAAAAAAOK1kuLGSjPsA09/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B&size=normal&s=2Si2oG2vqiJDMkfmdCiyYG47taXWmmv1DThCTXJFVzGeyffO5En3cciASXKsozAzASCwEoWvjRXm3bXAFFd0Nznp7eONKdw1O-ZoT1tvJ44jhAteAdAVNVbBONiYzV4VdhBqZx0JZwsnry9e3i7Fhxp6qrFglI0AWYkx7kclnCibOznQiXcb5gGxA95AV31LMyA6OF_5FM_bJEdQeMpKwFSpAv1PY-WgLXFhjwtdS2t4ZBdN2b2t5tltQo38zBD367y7X_uejy391DzFcBMU2ly-lSUKWr4&cb=r5b06divj710 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.google.com/sorry/index?continue=http://google.co.uk/&q=EgRmgZjUGI3NzKsGIjCnPpvWLbXDb183drVmgfJaSuOR6afn9EaOWYnUbyGbs7c--C6gg1mEUAh9LvwzP6MyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=UBeNCkZ3L8yXcx8qh4JFUXkwkNC9IrdiRdbjSTjqSiFh8WrRcbKr_rOJbgHY6TA4RT-6ps0bhemfwCPBsLMgPT7-gTcWqHvZvZbafOpkqRy0dLyYG9AjP2vbUBomarnc9pcZVlhHkUeUaWMurD0GGXyW05_B_1IyUNYEELmyqRg
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8325a88a1b39287a/1702045325441/i3LT-P1zuZ3N7c- HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/SHUkEiphQuZqXyLzDNA1LcOjIY5P93oSbI0OKMKltYY.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B&size=normal&s=2Si2oG2vqiJDMkfmdCiyYG47taXWmmv1DThCTXJFVzGeyffO5En3cciASXKsozAzASCwEoWvjRXm3bXAFFd0Nznp7eONKdw1O-ZoT1tvJ44jhAteAdAVNVbBONiYzV4VdhBqZx0JZwsnry9e3i7Fhxp6qrFglI0AWYkx7kclnCibOznQiXcb5gGxA95AV31LMyA6OF_5FM_bJEdQeMpKwFSpAv1PY-WgLXFhjwtdS2t4ZBdN2b2t5tltQo38zBD367y7X_uejy391DzFcBMU2ly-lSUKWr4&cb=r5b06divj710Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=UBeNCkZ3L8yXcx8qh4JFUXkwkNC9IrdiRdbjSTjqSiFh8WrRcbKr_rOJbgHY6TA4RT-6ps0bhemfwCPBsLMgPT7-gTcWqHvZvZbafOpkqRy0dLyYG9AjP2vbUBomarnc9pcZVlhHkUeUaWMurD0GGXyW05_B_1IyUNYEELmyqRg
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B&size=normal&s=2Si2oG2vqiJDMkfmdCiyYG47taXWmmv1DThCTXJFVzGeyffO5En3cciASXKsozAzASCwEoWvjRXm3bXAFFd0Nznp7eONKdw1O-ZoT1tvJ44jhAteAdAVNVbBONiYzV4VdhBqZx0JZwsnry9e3i7Fhxp6qrFglI0AWYkx7kclnCibOznQiXcb5gGxA95AV31LMyA6OF_5FM_bJEdQeMpKwFSpAv1PY-WgLXFhjwtdS2t4ZBdN2b2t5tltQo38zBD367y7X_uejy391DzFcBMU2ly-lSUKWr4&cb=r5b06divj710Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=UBeNCkZ3L8yXcx8qh4JFUXkwkNC9IrdiRdbjSTjqSiFh8WrRcbKr_rOJbgHY6TA4RT-6ps0bhemfwCPBsLMgPT7-gTcWqHvZvZbafOpkqRy0dLyYG9AjP2vbUBomarnc9pcZVlhHkUeUaWMurD0GGXyW05_B_1IyUNYEELmyqRg
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/sorry/index?continue=http://google.co.uk/&q=EgRmgZjUGI3NzKsGIjCnPpvWLbXDb183drVmgfJaSuOR6afn9EaOWYnUbyGbs7c--C6gg1mEUAh9LvwzP6MyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=UBeNCkZ3L8yXcx8qh4JFUXkwkNC9IrdiRdbjSTjqSiFh8WrRcbKr_rOJbgHY6TA4RT-6ps0bhemfwCPBsLMgPT7-gTcWqHvZvZbafOpkqRy0dLyYG9AjP2vbUBomarnc9pcZVlhHkUeUaWMurD0GGXyW05_B_1IyUNYEELmyqRg
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/444306888:1702041974:qedNnDAvJuTEx6GK7a0PZ6aCZBDBhkOW-8_-5XsNyIA/8325a88a1b39287a/c48312223deb6d4 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/bframe?hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.google.com/sorry/index?continue=http://google.co.uk/&q=EgRmgZjUGI3NzKsGIjCnPpvWLbXDb183drVmgfJaSuOR6afn9EaOWYnUbyGbs7c--C6gg1mEUAh9LvwzP6MyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=UBeNCkZ3L8yXcx8qh4JFUXkwkNC9IrdiRdbjSTjqSiFh8WrRcbKr_rOJbgHY6TA4RT-6ps0bhemfwCPBsLMgPT7-gTcWqHvZvZbafOpkqRy0dLyYG9AjP2vbUBomarnc9pcZVlhHkUeUaWMurD0GGXyW05_B_1IyUNYEELmyqRg
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=UBeNCkZ3L8yXcx8qh4JFUXkwkNC9IrdiRdbjSTjqSiFh8WrRcbKr_rOJbgHY6TA4RT-6ps0bhemfwCPBsLMgPT7-gTcWqHvZvZbafOpkqRy0dLyYG9AjP2vbUBomarnc9pcZVlhHkUeUaWMurD0GGXyW05_B_1IyUNYEELmyqRg
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Z4OR3NL8zldvxh4&MD=xA93+xHC HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /tools/pso/ping?as=chrome&brand=ONGR&pid=&hl=en&events=C1I,C2I,C7I,C1S,C7S&rep=2&rlz=C1:,C2:,C7:&id=0000000000000000000000000000000000000000848500971B HTTP/1.1Host: clients1.google.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: google.co.ukConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_78.2.dr	String found in binary or memory: </script><script data-react-helmet="true" data-test="airline-schema" type="application/ld+json">{"@context":"http://schema.org","@type":"Airline","areaServed":"us","contactPoint":{"@type":"ContactPoint","areaServed":"us","availableLanguage":"en","contactType":"Request Information","telephone":"[+1.877.356.5823]"},"description":"Private Jet Airline","logo":"logo_netjets.png","name":"NetJets","sameAs":["https://twitter.com/NetJets","https://www.instagram.com/netjets/","https://www.youtube.com/c/NetJetsInc","https://www.linkedin.com/company/netjets/","https://en.wikipedia.org/wiki/NetJets"],"url":"https://www.netjets.com/en-us/"}</script><script data-react-helmet="true" data-test="page-schema" type="application/ld+json">{"@context":"http://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.netjets.com/en-us/"},{"@type":"ListItem","position":2,"name":"Making the Impossible Possible. Only NetJets.","item":"https://www.netjets.com/en-us/"}]}</script><script data-react-helmet="true" charSet="UTF-8" data-domain-script="d7d1cd6c-208d-47f8-ac7c-7c55dca3fe7d" data-language="en" src="https://cdn.cookielaw.org/scripttemplates/otSDKStub.js" type="text/javascript"></script><script data-react-helmet="true" src="//assets.adobedtm.com/launch-EN59c1864c39b54767922ce07dbb36e0d5.min.js" type="text/javascript"></script><script data-react-helmet="true" type="text/javascript"> equals www.linkedin.com (Linkedin)
Source: chromecache_78.2.dr	String found in binary or memory: </script><script data-react-helmet="true" data-test="airline-schema" type="application/ld+json">{"@context":"http://schema.org","@type":"Airline","areaServed":"us","contactPoint":{"@type":"ContactPoint","areaServed":"us","availableLanguage":"en","contactType":"Request Information","telephone":"[+1.877.356.5823]"},"description":"Private Jet Airline","logo":"logo_netjets.png","name":"NetJets","sameAs":["https://twitter.com/NetJets","https://www.instagram.com/netjets/","https://www.youtube.com/c/NetJetsInc","https://www.linkedin.com/company/netjets/","https://en.wikipedia.org/wiki/NetJets"],"url":"https://www.netjets.com/en-us/"}</script><script data-react-helmet="true" data-test="page-schema" type="application/ld+json">{"@context":"http://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.netjets.com/en-us/"},{"@type":"ListItem","position":2,"name":"Making the Impossible Possible. Only NetJets.","item":"https://www.netjets.com/en-us/"}]}</script><script data-react-helmet="true" charSet="UTF-8" data-domain-script="d7d1cd6c-208d-47f8-ac7c-7c55dca3fe7d" data-language="en" src="https://cdn.cookielaw.org/scripttemplates/otSDKStub.js" type="text/javascript"></script><script data-react-helmet="true" src="//assets.adobedtm.com/launch-EN59c1864c39b54767922ce07dbb36e0d5.min.js" type="text/javascript"></script><script data-react-helmet="true" type="text/javascript"> equals www.twitter.com (Twitter)
Source: chromecache_78.2.dr	String found in binary or memory: </script><script data-react-helmet="true" data-test="airline-schema" type="application/ld+json">{"@context":"http://schema.org","@type":"Airline","areaServed":"us","contactPoint":{"@type":"ContactPoint","areaServed":"us","availableLanguage":"en","contactType":"Request Information","telephone":"[+1.877.356.5823]"},"description":"Private Jet Airline","logo":"logo_netjets.png","name":"NetJets","sameAs":["https://twitter.com/NetJets","https://www.instagram.com/netjets/","https://www.youtube.com/c/NetJetsInc","https://www.linkedin.com/company/netjets/","https://en.wikipedia.org/wiki/NetJets"],"url":"https://www.netjets.com/en-us/"}</script><script data-react-helmet="true" data-test="page-schema" type="application/ld+json">{"@context":"http://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.netjets.com/en-us/"},{"@type":"ListItem","position":2,"name":"Making the Impossible Possible. Only NetJets.","item":"https://www.netjets.com/en-us/"}]}</script><script data-react-helmet="true" charSet="UTF-8" data-domain-script="d7d1cd6c-208d-47f8-ac7c-7c55dca3fe7d" data-language="en" src="https://cdn.cookielaw.org/scripttemplates/otSDKStub.js" type="text/javascript"></script><script data-react-helmet="true" src="//assets.adobedtm.com/launch-EN59c1864c39b54767922ce07dbb36e0d5.min.js" type="text/javascript"></script><script data-react-helmet="true" type="text/javascript"> equals www.youtube.com (Youtube)

Source: unknown

DNS traffic detected: queries for: clients2.google.com

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=UBeNCkZ3L8yXcx8qh4JFUXkwkNC9IrdiRdbjSTjqSiFh8WrRcbKr_rOJbgHY6TA4RT-6ps0bhemfwCPBsLMgPT7-gTcWqHvZvZbafOpkqRy0dLyYG9AjP2vbUBomarnc9pcZVlhHkUeUaWMurD0GGXyW05_B_1IyUNYEELmyqRg

Source: chromecache_59.2.dr	String found in binary or memory: http://google.co.uk
Source: chromecache_78.2.dr	String found in binary or memory: http://schema.org
Source: chromecache_59.2.dr	String found in binary or memory: http://www.netjetseurope.com/images/nj_logo.gif
Source: chromecache_59.2.dr	String found in binary or memory: https://amazon.com
Source: chromecache_78.2.dr	String found in binary or memory: https://c64djon8lb.execute-api.us-east-1.amazonaws.com/prod/q85-w220/public/adobe-dam/praetor-360-sp
Source: chromecache_78.2.dr	String found in binary or memory: https://c64djon8lb.execute-api.us-east-1.amazonaws.com/prod/q85-w220/public/webdam/aircraft/global-7
Source: chromecache_78.2.dr	String found in binary or memory: https://c64djon8lb.execute-api.us-east-1.amazonaws.com/prod/q85-w220/public/webdam/web-assets/3d-spi
Source: chromecache_73.2.dr	String found in binary or memory: https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
Source: chromecache_76.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_76.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_68.2.dr	String found in binary or memory: https://developers.cloudflare.com/r2/data-access/public-buckets/
Source: chromecache_76.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_76.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_76.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_59.2.dr	String found in binary or memory: https://google.co.uk
Source: chromecache_59.2.dr	String found in binary or memory: https://office.com
Source: chromecache_76.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_76.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_76.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_76.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_76.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_76.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_78.2.dr	String found in binary or memory: https://twitter.com/NetJets
Source: chromecache_76.2.dr	String found in binary or memory: https://www.apache.org/licenses/
Source: chromecache_68.2.dr	String found in binary or memory: https://www.cloudflare.com/favicon.ico
Source: chromecache_78.2.dr	String found in binary or memory: https://www.datadoghq-browser-agent.com/us1/v4/datadog-rum.js
Source: chromecache_76.2.dr	String found in binary or memory: https://www.google.com/log?format=json&hasfast=true
Source: chromecache_67.2.dr, chromecache_76.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_78.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_76.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/recaptcha__.
Source: chromecache_67.2.dr, chromecache_60.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/recaptcha__en.js
Source: chromecache_78.2.dr	String found in binary or memory: https://www.instagram.com/netjets/
Source: chromecache_78.2.dr	String found in binary or memory: https://www.linkedin.com/company/netjets/
Source: chromecache_78.2.dr	String found in binary or memory: https://www.netjets.com
Source: chromecache_78.2.dr	String found in binary or memory: https://www.netjets.com/de-de/
Source: chromecache_78.2.dr	String found in binary or memory: https://www.netjets.com/en-gb/
Source: chromecache_78.2.dr	String found in binary or memory: https://www.netjets.com/en-us/
Source: chromecache_78.2.dr	String found in binary or memory: https://www.netjets.com/es-es/
Source: chromecache_78.2.dr	String found in binary or memory: https://www.netjets.com/fr-fr/
Source: chromecache_78.2.dr	String found in binary or memory: https://www.netjets.com/it-it/
Source: chromecache_78.2.dr	String found in binary or memory: https://www.netjets.com/pt-pt/
Source: chromecache_78.2.dr	String found in binary or memory: https://www.netjets.com/ru-ru/
Source: chromecache_78.2.dr	String found in binary or memory: https://www.youtube.com/c/NetJetsInc
Source: chromecache_59.2.dr	String found in binary or memory: https://yellowtelecomms.com/?uoxpeyml

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746

Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.6:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.6:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.6:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.6:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.6:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.6:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.6:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.6:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.6:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.6:49773 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_BITS_4080_944448555

Jump to behavior

Source: classification engine

Classification label: mal56.win@22/21@30/16

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=2044,i,5254295920708420066,16508067594936788554,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "https://cmax.co.uk/qw.PDF
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=2044,i,5254295920708420066,16508067594936788554,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact	Resource Development	Reconnaissance
Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Abuse Accessibility Features	Acquire Infrastructure	Gather Victim Identity Information
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	3 Non-Application Layer Protocol	SIM Card Swap	Obtain Device Cloud Backups	Network Denial of Service	Domains	Credentials
Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	4 Application Layer Protocol			Data Encrypted for Impact	DNS Server	Email Addresses
Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Traffic Duplication	1 Ingress Tool Transfer			Data Destruction	Virtual Private Server	Employee Names

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://cmax.co.uk/qw.PDF	0%	Avira URL Cloud	safe
https://cmax.co.uk/qw.PDF	100%	SlashNext	Credential Stealing type: Phishing & Social usering

Source	Detection	Scanner	Label
https://recaptcha.net	0%	URL Reputation	safe
https://www.datadoghq-browser-agent.com/us1/v4/datadog-rum.js	0%	Avira URL Cloud	safe
https://pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev/favicon.ico	0%	Avira URL Cloud	safe
https://yellowtelecomms.com/favicon.ico	100%	Avira URL Cloud	phishing
https://www.gstatic.c..?/recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/recaptcha__.	0%	Avira URL Cloud	safe
https://google.co.uk	0%	Avira URL Cloud	safe
http://google.co.uk/	0%	Avira URL Cloud	safe
http://google.co.uk	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
www.netjetseurope.com	54.77.133.128	true	false	high
www.aws.netjets.com	18.239.225.76	true	false	high
accounts.google.com	142.250.217.173	true	false	high
cmax.co.uk	62.182.22.52	true	false	unknown
yellowtelecomms.com	194.26.192.93	true	false	unknown
challenges.cloudflare.com	104.17.3.184	true	false	high
www.google.com	142.250.217.228	true	false	high
clients.l.google.com	192.178.50.46	true	false	high
pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev	104.18.3.35	true	false	unknown
google.co.uk	172.217.2.195	true	false	unknown
clients1.google.com	unknown	unknown	false	high
clients2.google.com	unknown	unknown	false	high
www.netjets.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B	false		high
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.134&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8325a88a1b39287a	false		high
https://pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev/DF.html	false		unknown
https://pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev/favicon.ico	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8325a88a1b39287a/1702045325441/i3LT-P1zuZ3N7c-	false		high
https://www.google.com/recaptcha/api2/bframe?hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/444306888:1702041974:qedNnDAvJuTEx6GK7a0PZ6aCZBDBhkOW-8_-5XsNyIA/8325a88a1b39287a/c48312223deb6d4	false		high
https://clients1.google.com/tools/pso/ping?as=chrome&brand=ONGR&pid=&hl=en&events=C1I,C2I,C7I,C1S,C7S&rep=2&rlz=C1:,C2:,C7:&id=0000000000000000000000000000000000000000848500971B	false		high
https://www.netjets.com/	false		high
https://www.google.com/recaptcha/api.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/pplhm/0x4AAAAAAAOK1kuLGSjPsA09/auto/normal	false		high
https://www.google.com/js/bg/SHUkEiphQuZqXyLzDNA1LcOjIY5P93oSbI0OKMKltYY.js	false		high
https://www.google.com/sorry/index?continue=http://google.co.uk/&q=EgRmgZjUGI3NzKsGIjCnPpvWLbXDb183drVmgfJaSuOR6afn9EaOWYnUbyGbs7c--C6gg1mEUAh9LvwzP6MyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	false		high
https://challenges.cloudflare.com/turnstile/v0/b/56d3063b/api.js?onload=onloadTurnstileCallback	false		high
https://cmax.co.uk/qw.PDF	true		unknown
about:blank	false		low
https://www.netjets.com/en-us/	false		high
https://yellowtelecomms.com/favicon.ico	false	Avira URL Cloud: phishing	unknown
http://google.co.uk/	false	Avira URL Cloud: safe	unknown
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard	false		high
https://www.netjetseurope.com/images/nj_logo.gif	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/pplhm/0x4AAAAAAAOK1kuLGSjPsA09/auto/normal	false		high
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	false		high
https://www.google.com/favicon.ico	false		high
https://pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev/DF.html	false		unknown
https://www.google.com/sorry/index?continue=http://google.co.uk/&q=EgRmgZjUGI3NzKsGIjCnPpvWLbXDb183drVmgfJaSuOR6afn9EaOWYnUbyGbs7c--C6gg1mEUAh9LvwzP6MyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/8325a88a1b39287a/1702045325441/60ed290997626eb1a1ce799b56cbd68b9613d1865e9881799b17d985a5e6e502/1eIgiSiESzLLnF9	false		high
https://www.google.com/recaptcha/api2/bframe?hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_76.2.dr	false		high
https://www.linkedin.com/company/netjets/	chromecache_78.2.dr	false		high
https://www.netjets.com/fr-fr/	chromecache_78.2.dr	false		high
https://support.google.com/recaptcha#6262736	chromecache_76.2.dr	false		high
https://www.google.com/log?format=json&hasfast=true	chromecache_76.2.dr	false		high
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_76.2.dr	false		high
https://www.instagram.com/netjets/	chromecache_78.2.dr	false		high
https://cloud.google.com/contact	chromecache_76.2.dr	false		high
https://c64djon8lb.execute-api.us-east-1.amazonaws.com/prod/q85-w220/public/adobe-dam/praetor-360-sp	chromecache_78.2.dr	false		high
https://www.netjets.com	chromecache_78.2.dr	false		high
http://schema.org	chromecache_78.2.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_76.2.dr	false		high
https://c64djon8lb.execute-api.us-east-1.amazonaws.com/prod/q85-w220/public/webdam/web-assets/3d-spi	chromecache_78.2.dr	false		high
https://www.google.com/recaptcha/api2/	chromecache_67.2.dr, chromecache_76.2.dr	false		high
https://developers.cloudflare.com/r2/data-access/public-buckets/	chromecache_68.2.dr	false		high
https://c64djon8lb.execute-api.us-east-1.amazonaws.com/prod/q85-w220/public/webdam/aircraft/global-7	chromecache_78.2.dr	false		high
https://support.google.com/recaptcha	chromecache_76.2.dr	false		high
https://www.gstatic.c..?/recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/recaptcha__.	chromecache_76.2.dr	false	Avira URL Cloud: safe	low
https://www.netjets.com/ru-ru/	chromecache_78.2.dr	false		high
https://twitter.com/NetJets	chromecache_78.2.dr	false		high
https://office.com	chromecache_59.2.dr	false		high
https://www.netjets.com/de-de/	chromecache_78.2.dr	false		high
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_76.2.dr	false		high
https://recaptcha.net	chromecache_76.2.dr	false	URL Reputation: safe	unknown
https://www.apache.org/licenses/	chromecache_76.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_76.2.dr	false		high
http://google.co.uk	chromecache_59.2.dr	false	Avira URL Cloud: safe	unknown
http://www.netjetseurope.com/images/nj_logo.gif	chromecache_59.2.dr	false		high
https://www.datadoghq-browser-agent.com/us1/v4/datadog-rum.js	chromecache_78.2.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/c/NetJetsInc	chromecache_78.2.dr	false		high
https://www.netjets.com/en-gb/	chromecache_78.2.dr	false		high
https://play.google.com/log?format=json&hasfast=true	chromecache_76.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_76.2.dr	false		high
https://amazon.com	chromecache_59.2.dr	false		high
https://www.netjets.com/es-es/	chromecache_78.2.dr	false		high
https://google.co.uk	chromecache_59.2.dr	false	Avira URL Cloud: safe	unknown
https://www.netjets.com/it-it/	chromecache_78.2.dr	false		high
https://www.cloudflare.com/favicon.ico	chromecache_68.2.dr	false		high
https://www.netjets.com/pt-pt/	chromecache_78.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
192.178.50.46	clients.l.google.com	United States	15169	GOOGLEUS	false
104.18.3.35	pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev	United States	13335	CLOUDFLARENETUS	false
192.178.50.68	unknown	United States	15169	GOOGLEUS	false
18.239.225.76	www.aws.netjets.com	United States	16509	AMAZON-02US	false
18.239.225.66	unknown	United States	16509	AMAZON-02US	false
172.217.2.195	google.co.uk	United States	15169	GOOGLEUS	false
54.77.133.128	www.netjetseurope.com	United States	16509	AMAZON-02US	false
62.182.22.52	cmax.co.uk	United Kingdom	200083	SUB6GB	false
142.250.217.228	www.google.com	United States	15169	GOOGLEUS	false
104.17.3.184	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
194.26.192.93	yellowtelecomms.com	Netherlands	1213	HEANETIE	false
142.250.217.173	accounts.google.com	United States	15169	GOOGLEUS	false
104.17.2.184	unknown	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.17
192.168.2.6

General Information

Joe Sandbox version:	38.0.0 Ammolite
Analysis ID:	1356307
Start date and time:	2023-12-08 15:20:59 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 30s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://cmax.co.uk/qw.PDF
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.win@22/21@30/16
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: http://google.co.uk/

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.217.227, 34.104.35.123, 192.229.211.108, 72.21.81.240, 142.250.217.163, 142.250.217.170, 142.250.64.170, 142.250.189.138, 142.250.217.234, 142.250.217.202, 192.178.50.74, 192.178.50.42, 172.217.2.202, 142.251.35.227
Excluded domains from analysis (whitelisted): client.wns.windows.com, fs.microsoft.com, ocsp.digicert.com, edgedl.me.gvt1.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, update.googleapis.com, ctldl.windowsupdate.com, clientservices.googleapis.com, www.gstatic.com, fe3cr.delivery.mp.microsoft.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
VT rate limit hit for: https://cmax.co.uk/qw.PDF

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	4363
Entropy (8bit):	5.076535908414515
Encrypted:	false
SSDEEP:	96:chfSh3LvyHnEHXSuvNad4pvQQQQj/HqbiC1CYC7CxC1:OkQQQQjCU
MD5:	471F668D7D62C75A1B47A3BBDB1BA9A2
SHA1:	85712EC79174DD8ACA53F1D80D9955BB9EA57469
SHA-256:	34BC41B7F70BFA8A34B1B1FB8123D41A3C31B8F0D8A8B9E2CF960D092155939B
SHA-512:	CCCC2F00FF243FCDC093378E9B38C3C69E9F78B7620C1390C48C47085973825F302C03710CCE48AA5075870ECEC7D78C77418A5E77391E958C67F10C8BAF81B5
Malicious:	false
Reputation:	low
URL:	https://pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev/DF.html
Preview:	<!DOCTYPE html>..<html>..<head>....<BODY bgcolor="#FFFFFF">..<font face="Arial"color="#000000"size="2">..<p><img src="http://www.netjetseurope.com/images/nj_logo.gif" align="right" ALT="NetJets"><br clear="all"><br><br><br>..<p align="center"><font face="Arial"color="#000000"size="3"><u><b>Remittance Advice - Transportes A.reos, S.A.</b></u></font></p>..<p align="right"><table border="0"width="30%"cellpadding="0"align="right"><tr><td align="left"width="50%"bgcolor="#3F2C23"><font face="Arial"color="White"size="2"><b>Payment Date: </b></font></td>..<td align="right"width="50%"><font face="Arial"color="#000000"size="2">16/11/2023</font></td></tr>..<tr><td align="left"width="50%"bgcolor="#3F2C23"><font face="Arial"color="White"size="2"><b>Vendor ID: </b></font></td>..<td align="right"width="50%"><font face="Arial"color="#000000"size="2">INFLI01</font></td></tr>..<tr><td align="left"width="50%"bgcolor="#3F2C23"><font face="Arial"color="White"size="2"><b>Check Number: </b></font></td>..<td

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.81296697998377
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKhT0168yKIVgWaee:PLKdXNQKF016fKogL
MD5:	E985F667E666AD879364D2E1C20A02DC
SHA1:	4E896E0F0268C2D6565798A87665EB0084F23D41
SHA-256:	153667004611F8905F074B17B69C32F43B8038F0D95D1341D00A88E48F990A6D
SHA-512:	0742FFD758935DADEC5398BF8BF8A056179F3DC28FDB4EDC8A117359C96094C27121A2F1432F7E1394826E8765615F9C92AB0470670CFB9B42E3A5F18F6027C3
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/recaptcha__en.js');

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 14 x 33, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.022997040570905
Encrypted:	false
SSDEEP:	3:yionv//thPlZKBCyxl/k4E08up:6v/lhPOl7Tp
MD5:	763507FE6940794579F93E0F4883D6FF
SHA1:	8B6A6162ECE87FD6E6A5A6E14224092BFEA80C66
SHA-256:	E3C1ED3D6EBB2674FBC4493EC05CB6C4760446E734D2907E056BDB370BF67626
SHA-512:	A068B9252D6EC6D828D831928DEDAAB90E4B628BE4DE41396E81B4422DDC414AF7CB3FFD51986BF19AFBAC6D40FE4AADEA090D7A66F4DF2B6F095166D77FECC9
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8325a88a1b39287a/1702045325441/i3LT-P1zuZ3N7c-
Preview:	.PNG........IHDR.......!.....f..e....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56398), with no line terminators
Category:	downloaded
Size (bytes):	56398
Entropy (8bit):	5.907604034780877
Encrypted:	false
SSDEEP:	768:+LUmmAWTe2uXYp8Mi+yKYlebyB5lxRx54PHSGdXXwW7MFWwXVuE2:4UcW6v+0B5chXwW49z2
MD5:	EB4BC511F79F7A1573B45F5775B3A99B
SHA1:	D910FB51AD7316AA54F055079374574698E74B35
SHA-256:	7859A62E04B0ACB06516EB12454DE6673883ECFAEAED6C254659BCA7CD59C050
SHA-512:	EC9BDF1C91B6262B183FD23F640EAC22016D1F42DB631380676ED34B962E01BADDA91F9CBDFA189B42FE3182A992F1B95A7353AF41E41B2D6E1DAB17E87637A0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAABIAAAASABGyWs+AAAACXZwQWcAAABUAAADSAC4K4y8AAA4oElEQVR42u2dCZRV1ZX3q5iE4IQIiKQQCKBt0JLEIUZwCCk7pBNFiRMajZrIl9aOLZ8sY4CWdkDbT2McooaAEmNixFhpaYE2dCiLScWiQHCgoGQoGQuhGArKKl7V+c5/n33fO/V4w733nVuheXuv9V/rrnvP2Xud3zvTPee+ewsKxMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExP4OdtlT6ztAbRWvvLy8A3QkwxzH6tBGMMexI

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
URL:	https://www.google.com/favicon.ico
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 14 x 33, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.022997040570905
Encrypted:	false
SSDEEP:	3:yionv//thPlZKBCyxl/k4E08up:6v/lhPOl7Tp
MD5:	763507FE6940794579F93E0F4883D6FF
SHA1:	8B6A6162ECE87FD6E6A5A6E14224092BFEA80C66
SHA-256:	E3C1ED3D6EBB2674FBC4493EC05CB6C4760446E734D2907E056BDB370BF67626
SHA-512:	A068B9252D6EC6D828D831928DEDAAB90E4B628BE4DE41396E81B4422DDC414AF7CB3FFD51986BF19AFBAC6D40FE4AADEA090D7A66F4DF2B6F095166D77FECC9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......!.....f..e....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1222), with no line terminators
Category:	downloaded
Size (bytes):	1222
Entropy (8bit):	5.815294760819388
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVCLTLv138EgFB5vtTGJTlWtNS1TB25sLqo40RWUnYN:VKEctKonR3evtTA8W1UGLrwUnG
MD5:	D67C1E308323A465CD23C2212112093A
SHA1:	CCCCD2A05BC7129D8D5C65E11F311F205A6637A6
SHA-256:	B311AC29F8D7837679D637891DB9BBCC84AB0FA8652196D3605DE190DC6A6857
SHA-512:	B32D0FDCF4D5FF44A5811FC26E764F1F73E7B0F8CDA4C18C7947E47DA83C94F595FFEF4E144A32A412664ACD4180FA7577F0BE8715E18F719EDCDDD5AACE7098
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-JtvhFQlPQ6LL/+I5aABhkbXo/hmh5M6IvL9vK+ec

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (611)
Category:	downloaded
Size (bytes):	27242
Entropy (8bit):	4.3631679730758375
Encrypted:	false
SSDEEP:	384:6FamwIluB0sJQqCeSQup5szCUXAG0VVi82OgoKACZQQofNJXY3gW3:663Mp5If8WOmgW3
MD5:	DF3D48946E8D3F5A83608308EDBB4B86
SHA1:	47B9C40C97ABF2658DF96B1C06109324E15E1A00
SHA-256:	570A6631252B8A52DF4DE0E953AE77DBDF524DFC3637CDA2840494A0D2B49499
SHA-512:	36EC1CEC72DC3245730C813277C645525473CC5232E85CD23503B8593D90264F335E61A16D364A1E6C41922820B40BA7C0F46B19F4B91DB6A0CF5E31E778DDEA
Malicious:	false
Reputation:	low
URL:	https://pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev/favicon.ico
Preview:	<!DOCTYPE html>.<html lang="en">. <head>. <meta charset="UTF-8" />. <meta name="viewport" content="width=device-width, initial-scale=1.0" />. <link rel="icon" href="https://www.cloudflare.com/favicon.ico" />. <title>Not Found</title>. <style>. body {. font-family: system-ui;. font-weight: 300;. font-size: 1.25rem;. color: #36393a;. display: flex;. align-items: center;. justify-content: center;. }. main {. max-width: 1200px;. margin-top: 120px;. display: flex;. flex-wrap: wrap;. align-items: center;. justify-content: center;. }. #text {. max-width: 60%;. margin-left: 1rem;. margin-right: 1rem;. }. main > section > div {. margin-bottom: 3.25rem;. }. svg {. margin-left: 2rem;. }. @keyframes eye-1 {. 0% {. transform: translateX(0);. }. 10%,. 50% {. tr

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17030), with no line terminators
Category:	downloaded
Size (bytes):	17030
Entropy (8bit):	5.563208504937851
Encrypted:	false
SSDEEP:	384:X9Jm7iuD3pnPy665jct3CwUxRSNOHs/fZJxtH8/gVtER:tJe3D1PKPxtMJJDc4Vt6
MD5:	AD5CE37F5CBDCC7C085C8D22452AF1DA
SHA1:	16DAE831208B6D9EBC9FCF42BB60348FA855F5FB
SHA-256:	487524122A6142E66A5F22F30CD0352DC3A3218E4FF77A126C8D0E28C2A5B586
SHA-512:	97BF9E28F3C76B300B18D50E12D3CEF504195A2EE6C3A554B4AACABC93FA61DEB107B1801DA897C687ACC092087E92B42896A2D81C71CEC89DDE2C679BDF167E
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/SHUkEiphQuZqXyLzDNA1LcOjIY5P93oSbI0OKMKltYY.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var M=this\|\|self,C=function(U){return U},c=function(U,y){if(y=(U=M.trustedTypes,null),!U\|\|!U.createPolicy)return y;try{y=U.createPolicy("bg",{createHTML:C,createScript:C,createScriptURL:C})}catch(u){M.console&&M.console.error(u.message)}return y};(0,eval)(function(U,y){return(y=c())&&1===U.eval(y.createScript("1"))?function(u){return y.createScript(u)}:function(u){return""+u}}(M)(Array(7824Math.random()\|0).join("\n")+'(function(){var UV=function(y,U,M,C){try{C=y[((U\|0)+2)%3],y[U]=(y[U]\|0)-(y[((U\|0)+1)%3]\|0)-(C\|0)^(1==U?C<<M:C>>>M)}catch(B){throw B;}},ub=function(y,U,M,C,B,k){if(!y.C){y.Z++;try{for(k=(M=(B=void 0,y.S),0);--U;)try{if((C=void 0,y).o)B=yJ(y.o,y);else{if((k=T(100,y),k)>=M)break;B=(C=(n(y,395,k),l(y)),T(C,y))}I(y,false,(B&&B[q]&2048?B(y,U):G(0,[D,21,C],y),false),U)}catch(u){T(419,y)?G(22,u,y):n(y,419,u)}if(!U){if(y.QO){(y.Z--,ub)(y,406807620597);return}G(0,[D,33],y)}}catch(

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	22
Entropy (8bit):	3.6978458230844122
Encrypted:	false
SSDEEP:	3:jAbukMn:jP
MD5:	6AAB5444A217195068E4B25509BC0C50
SHA1:	7B22EAF7EAA9B7E1F664A0632D3894D406FE7933
SHA-256:	FC5525D427BFA27792D3A87411BE241C047D07F07C18E2FC36BF00B1C2E33D07
SHA-512:	AA5F66638B142B5E6D1D008F2934530C7AAD2F7F19128CA24609825D0DACFFD25A77591BFD7FB1D225BE2FA77CABCE837E0741326C1AC622C244D51E6FAFB303
Malicious:	false
Reputation:	low
URL:	https://yellowtelecomms.com/favicon.ico
Preview:	<h1>Access Denied</h1>

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1928)
Category:	downloaded
Size (bytes):	3260
Entropy (8bit):	5.238866654478205
Encrypted:	false
SSDEEP:	48:YUXW4NNPkiWUZ4bW7136yKrnVjbv8+qfOcqwFtiGNir38SKZyEk0s4tPI:lGsCUyA1XanFISch+r38SKZdFsig
MD5:	A1300D4A7ADA9BD7F9BBE7F90B33D6DF
SHA1:	F2C63266D82DA22865B8A383C5C3014FFDD61406
SHA-256:	5CD0646F7BCC6B332F9D922B9370277AEDA4BAB5F4DC86DB7D3100261E8EB1E6
SHA-512:	E8D94D45EF7CD727A8718E31C9C079E62BC3A56DE9F1B13D9ABFF6D1BDF17A90B2B1070EA60738A69E39E5B9BC1797B4FADECBA536434C19F2D5CD2FCC95C510
Malicious:	false
Reputation:	low
URL:	https://yellowtelecomms.com/?uoxpeyml=2f55add6b836aa4259dab5df60ce153f174c9a1fbc9b51db3344b1403ca7675618bf96aa5564f4933669a9fb029d759e0cc8ada4debdb66b54039511b3abb583
Preview:	.<!doctype html><html lang=en-US><head> <script async defer src="https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback">.</script> <title>Just a moment...</title> <meta content="width=device-width,initial-scale=1" name=viewport> <script>var verifyCallback_CF=function (response){var cfForm=document.querySelector("#cfForm"); if (response && response.length > 10){cfForm.submit(); return;}}; window.onloadTurnstileCallback=function (){turnstile.render("#turnstileCaptcha",{sitekey: "0x4AAAAAAAOK1kuLGSjPsA09", callback: verifyCallback_CF,});};.</script></head><style>.h1,.h2{font-weight:500}*{box-sizing:border-box;margin:0;padding:0}html{line-height:1.15;-webkit-text-size-adjust:100%;color:#313131;font-family:system-ui,-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica Neue,Arial,Noto Sans,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol,Noto Color Emoji}body{display:flex;flex-direction:column;min-height:100vh}a{transition:color .15s;background

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (568)
Category:	downloaded
Size (bytes):	512519
Entropy (8bit):	5.723996293218035
Encrypted:	false
SSDEEP:	6144:53K+oivdmEZwL1ZXgJgb3fqFZ7Nk/FfF1O3HZ5jUMFDyYtE0Vtdx1ugKX+D3lmFw:5/ct1ZXzKde/n1OXZ5jUMFmUtHz5
MD5:	AF51EB6CED1AFE3F0F11EE679198808C
SHA1:	02B9D6A7A54F930807A01AE3CDCF462862925B40
SHA-256:	6788908EFCFF931E3C0C4FB54A255932414A22E81971DCC1427C8A4F459A1FBF
SHA-512:	E561A39733D211536D6F4666169221CA52B3502DD7DE20EADBA2C0CCD6F7568E3037FA8935D141993529AC9651ED7ECFF20F5482DE210FA5355A270DABE9221E
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that control, are controlled by, or are under common. control with that entity. For the purposes of this definition,. "control" means (i) the power, direct or indirect, to cause the. direction or management of such entity, whether by contract or. o

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33875)
Category:	downloaded
Size (bytes):	33876
Entropy (8bit):	5.368899803670649
Encrypted:	false
SSDEEP:	768:oY9CGXLlh6vb4QkegBwZqraqmAMVEiopz+rGYxY6ZYTHjk3SY:oeuvb4Qk/DraqHq
MD5:	8C90F391245A994AE95E644A587C8626
SHA1:	7BFC99336571D0CCFE38F9E1D18CB26B4ADFC316
SHA-256:	ACBE221D9BB71E85D0A3B52A7A9D44EE4669AB664186B32D0C737A2BE62681E7
SHA-512:	916F4CD48FC87B759EFA209ECB2B67A7878D6E16EB3128512BE9668731027F7795BC016E6081EE9F74FF4B38AF54C9CADF88A6F965980C7D0881B05D645CFEAF
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/b/56d3063b/api.js?onload=onloadTurnstileCallback
Preview:	"use strict";(function(){function Ze(e,n,c,u,l,_,m){try{var s=e[_](m),d=s.value}catch(g){c(g);return}s.done?n(d):Promise.resolve(d).then(u,l)}function et(e){return function(){var n=this,c=arguments;return new Promise(function(u,l){var _=e.apply(n,c);function m(d){Ze(_,u,l,m,s,"next",d)}function s(d){Ze(_,u,l,m,s,"throw",d)}m(void 0)})}}function O(e,n){return n!=null&&typeof Symbol!="undefined"&&n[Symbol.hasInstance]?!!n[Symbol.hasInstance](e):O(e,n)}function ye(e,n,c){return n in e?Object.defineProperty(e,n,{value:c,enumerable:!0,configurable:!0,writable:!0}):e[n]=c,e}function Pe(e){for(var n=1;n<arguments.length;n++){var c=arguments[n]!=null?arguments[n]:{},u=Object.keys(c);typeof Object.getOwnPropertySymbols=="function"&&(u=u.concat(Object.getOwnPropertySymbols(c).filter(function(l){return Object.getOwnPropertyDescriptor(c,l).enumerable}))),u.forEach(function(l){ye(e,l,c[l])})}return e}function tt(e){if(Array.isArray(e))return e}function rt(e,n){var c=e==null?null:typeof Symbol!="und

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (3933)
Category:	dropped
Size (bytes):	130236
Entropy (8bit):	5.564368174096918
Encrypted:	false
SSDEEP:	1536:YDn9XtPzQZ4KePlM8QMgkuCkDRX4MUR4wcmwWDYrxByVpXR25YBNJaOVcSF9h0cK:YDpt+lBW19XlW8A
MD5:	57304ED273D8173D4F9C3428759E5EBE
SHA1:	B4676C0F64A46E80E0E45AE3D925467B5E8E48BB
SHA-256:	AEDF4905F70404289E9BCD6EE37BD476E6FEFBA632F71A21FFEA5B25758B17B2
SHA-512:	81E91FA0D74753FC47CDB6D22A569FB12433558F20812790C6BBC75B2E8B996BF58A8895FCD4B78DBD3041E141A67C582DDD8ED809AED3D3F209549BFCE5DB20
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html><html lang="en-us"><head><meta charSet="utf-8"/><meta content="ie=edge" http-equiv="x-ua-compatible"/><meta content="width=device-width, initial-scale=1, shrink-to-fit=no" name="viewport"/><meta name="generator" content="Gatsby 4.23.1"/><meta data-react-helmet="true" name="description" content="NetJets is the world.s largest private jet company, offering fractional aircraft ownership, private jet leases, and private jet card programs. Experience the ultimate in private jet travel, from departure to return."/><meta data-react-helmet="true" name="keywords"/><meta data-react-helmet="true" name="og:url" content="https://www.netjets.com/en-us/"/><meta data-react-helmet="true" name="og:type" content="website"/><meta data-react-helmet="true" name="og:title" content="NetJets \| World's Leading Private Jet Company \| Fractional Aircraft Companies"/><meta data-react-helmet="true" name="og:image"/><meta data-react-helmet="true" name="og:description" content="NetJets is the wor

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAk8dqZYMe7mkRIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 8, 2023 15:21:44.886723995 CET	49673	443	192.168.2.6	173.222.162.64
Dec 8, 2023 15:21:44.886799097 CET	49674	443	192.168.2.6	173.222.162.64
Dec 8, 2023 15:21:45.214868069 CET	49672	443	192.168.2.6	173.222.162.64
Dec 8, 2023 15:21:50.542491913 CET	443	49706	173.222.162.64	192.168.2.6
Dec 8, 2023 15:21:50.542685032 CET	49706	443	192.168.2.6	173.222.162.64
Dec 8, 2023 15:21:50.832329035 CET	49709	443	192.168.2.6	192.178.50.46
Dec 8, 2023 15:21:50.832360029 CET	443	49709	192.178.50.46	192.168.2.6
Dec 8, 2023 15:21:50.832421064 CET	49709	443	192.168.2.6	192.178.50.46
Dec 8, 2023 15:21:50.832923889 CET	49710	443	192.168.2.6	142.250.217.173
Dec 8, 2023 15:21:50.832954884 CET	443	49710	142.250.217.173	192.168.2.6
Dec 8, 2023 15:21:50.833000898 CET	49710	443	192.168.2.6	142.250.217.173
Dec 8, 2023 15:21:50.833178043 CET	49709	443	192.168.2.6	192.178.50.46
Dec 8, 2023 15:21:50.833197117 CET	443	49709	192.178.50.46	192.168.2.6
Dec 8, 2023 15:21:50.833482981 CET	49710	443	192.168.2.6	142.250.217.173
Dec 8, 2023 15:21:50.833496094 CET	443	49710	142.250.217.173	192.168.2.6
Dec 8, 2023 15:21:51.150604963 CET	443	49710	142.250.217.173	192.168.2.6
Dec 8, 2023 15:21:51.150698900 CET	443	49709	192.178.50.46	192.168.2.6
Dec 8, 2023 15:21:51.151103973 CET	49710	443	192.168.2.6	142.250.217.173
Dec 8, 2023 15:21:51.151129961 CET	443	49710	142.250.217.173	192.168.2.6
Dec 8, 2023 15:21:51.151227951 CET	49709	443	192.168.2.6	192.178.50.46
Dec 8, 2023 15:21:51.151254892 CET	443	49709	192.178.50.46	192.168.2.6
Dec 8, 2023 15:21:51.151842117 CET	443	49709	192.178.50.46	192.168.2.6
Dec 8, 2023 15:21:51.151937008 CET	49709	443	192.168.2.6	192.178.50.46
Dec 8, 2023 15:21:51.153085947 CET	443	49710	142.250.217.173	192.168.2.6
Dec 8, 2023 15:21:51.153137922 CET	443	49709	192.178.50.46	192.168.2.6
Dec 8, 2023 15:21:51.153151989 CET	49710	443	192.168.2.6	142.250.217.173
Dec 8, 2023 15:21:51.153186083 CET	49709	443	192.168.2.6	192.178.50.46
Dec 8, 2023 15:21:51.158458948 CET	49709	443	192.168.2.6	192.178.50.46
Dec 8, 2023 15:21:51.158548117 CET	443	49709	192.178.50.46	192.168.2.6
Dec 8, 2023 15:21:51.158746958 CET	49710	443	192.168.2.6	142.250.217.173
Dec 8, 2023 15:21:51.158873081 CET	49709	443	192.168.2.6	192.178.50.46
Dec 8, 2023 15:21:51.158883095 CET	443	49709	192.178.50.46	192.168.2.6
Dec 8, 2023 15:21:51.158921003 CET	443	49710	142.250.217.173	192.168.2.6
Dec 8, 2023 15:21:51.158947945 CET	49710	443	192.168.2.6	142.250.217.173
Dec 8, 2023 15:21:51.204754114 CET	443	49710	142.250.217.173	192.168.2.6
Dec 8, 2023 15:21:51.245873928 CET	49710	443	192.168.2.6	142.250.217.173
Dec 8, 2023 15:21:51.245906115 CET	443	49710	142.250.217.173	192.168.2.6
Dec 8, 2023 15:21:51.245944977 CET	49709	443	192.168.2.6	192.178.50.46
Dec 8, 2023 15:21:51.402683020 CET	443	49709	192.178.50.46	192.168.2.6
Dec 8, 2023 15:21:51.402882099 CET	443	49709	192.178.50.46	192.168.2.6
Dec 8, 2023 15:21:51.402947903 CET	49709	443	192.168.2.6	192.178.50.46
Dec 8, 2023 15:21:51.403425932 CET	49709	443	192.168.2.6	192.178.50.46
Dec 8, 2023 15:21:51.403450966 CET	443	49709	192.178.50.46	192.168.2.6
Dec 8, 2023 15:21:51.408507109 CET	443	49710	142.250.217.173	192.168.2.6
Dec 8, 2023 15:21:51.408586979 CET	49710	443	192.168.2.6	142.250.217.173
Dec 8, 2023 15:21:51.408605099 CET	443	49710	142.250.217.173	192.168.2.6
Dec 8, 2023 15:21:51.408695936 CET	443	49710	142.250.217.173	192.168.2.6
Dec 8, 2023 15:21:51.408745050 CET	49710	443	192.168.2.6	142.250.217.173
Dec 8, 2023 15:21:51.409586906 CET	49710	443	192.168.2.6	142.250.217.173
Dec 8, 2023 15:21:51.409601927 CET	443	49710	142.250.217.173	192.168.2.6
Dec 8, 2023 15:21:52.898042917 CET	49713	443	192.168.2.6	62.182.22.52
Dec 8, 2023 15:21:52.898082972 CET	443	49713	62.182.22.52	192.168.2.6
Dec 8, 2023 15:21:52.898179054 CET	49713	443	192.168.2.6	62.182.22.52
Dec 8, 2023 15:21:52.898802042 CET	49713	443	192.168.2.6	62.182.22.52
Dec 8, 2023 15:21:52.898818970 CET	443	49713	62.182.22.52	192.168.2.6
Dec 8, 2023 15:21:52.915498018 CET	49714	443	192.168.2.6	62.182.22.52
Dec 8, 2023 15:21:52.915535927 CET	443	49714	62.182.22.52	192.168.2.6
Dec 8, 2023 15:21:52.915642023 CET	49714	443	192.168.2.6	62.182.22.52
Dec 8, 2023 15:21:52.915972948 CET	49714	443	192.168.2.6	62.182.22.52
Dec 8, 2023 15:21:52.915983915 CET	443	49714	62.182.22.52	192.168.2.6
Dec 8, 2023 15:21:53.384277105 CET	443	49713	62.182.22.52	192.168.2.6
Dec 8, 2023 15:21:53.385436058 CET	49713	443	192.168.2.6	62.182.22.52
Dec 8, 2023 15:21:53.385462046 CET	443	49713	62.182.22.52	192.168.2.6
Dec 8, 2023 15:21:53.386334896 CET	443	49713	62.182.22.52	192.168.2.6
Dec 8, 2023 15:21:53.386423111 CET	49713	443	192.168.2.6	62.182.22.52
Dec 8, 2023 15:21:53.390799999 CET	443	49714	62.182.22.52	192.168.2.6
Dec 8, 2023 15:21:53.399333000 CET	49713	443	192.168.2.6	62.182.22.52
Dec 8, 2023 15:21:53.399538994 CET	443	49713	62.182.22.52	192.168.2.6
Dec 8, 2023 15:21:53.399595022 CET	49714	443	192.168.2.6	62.182.22.52
Dec 8, 2023 15:21:53.399616003 CET	443	49714	62.182.22.52	192.168.2.6
Dec 8, 2023 15:21:53.399894953 CET	49713	443	192.168.2.6	62.182.22.52
Dec 8, 2023 15:21:53.399915934 CET	443	49713	62.182.22.52	192.168.2.6
Dec 8, 2023 15:21:53.401284933 CET	443	49714	62.182.22.52	192.168.2.6
Dec 8, 2023 15:21:53.401508093 CET	49714	443	192.168.2.6	62.182.22.52
Dec 8, 2023 15:21:53.408746004 CET	49714	443	192.168.2.6	62.182.22.52
Dec 8, 2023 15:21:53.408890963 CET	443	49714	62.182.22.52	192.168.2.6
Dec 8, 2023 15:21:53.447897911 CET	49713	443	192.168.2.6	62.182.22.52
Dec 8, 2023 15:21:53.461688995 CET	49714	443	192.168.2.6	62.182.22.52
Dec 8, 2023 15:21:53.461709023 CET	443	49714	62.182.22.52	192.168.2.6
Dec 8, 2023 15:21:53.504843950 CET	49714	443	192.168.2.6	62.182.22.52
Dec 8, 2023 15:21:53.795100927 CET	49717	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:21:53.795136929 CET	443	49717	52.159.126.152	192.168.2.6
Dec 8, 2023 15:21:53.795188904 CET	49717	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:21:53.796438932 CET	49717	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:21:53.796454906 CET	443	49717	52.159.126.152	192.168.2.6
Dec 8, 2023 15:21:53.881359100 CET	443	49713	62.182.22.52	192.168.2.6
Dec 8, 2023 15:21:53.881445885 CET	443	49713	62.182.22.52	192.168.2.6
Dec 8, 2023 15:21:53.881510973 CET	49713	443	192.168.2.6	62.182.22.52
Dec 8, 2023 15:21:53.889605045 CET	49713	443	192.168.2.6	62.182.22.52
Dec 8, 2023 15:21:53.889621973 CET	443	49713	62.182.22.52	192.168.2.6
Dec 8, 2023 15:21:54.024924040 CET	49718	443	192.168.2.6	104.18.3.35
Dec 8, 2023 15:21:54.024960041 CET	443	49718	104.18.3.35	192.168.2.6
Dec 8, 2023 15:21:54.025048971 CET	49718	443	192.168.2.6	104.18.3.35
Dec 8, 2023 15:21:54.025783062 CET	49718	443	192.168.2.6	104.18.3.35
Dec 8, 2023 15:21:54.025798082 CET	443	49718	104.18.3.35	192.168.2.6
Dec 8, 2023 15:21:54.294255972 CET	443	49718	104.18.3.35	192.168.2.6
Dec 8, 2023 15:21:54.295933008 CET	443	49717	52.159.126.152	192.168.2.6
Dec 8, 2023 15:21:54.296143055 CET	49717	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:21:54.333092928 CET	49717	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:21:54.333113909 CET	443	49717	52.159.126.152	192.168.2.6
Dec 8, 2023 15:21:54.333441019 CET	443	49717	52.159.126.152	192.168.2.6
Dec 8, 2023 15:21:54.335815907 CET	49718	443	192.168.2.6	104.18.3.35
Dec 8, 2023 15:21:54.335823059 CET	443	49718	104.18.3.35	192.168.2.6
Dec 8, 2023 15:21:54.336750984 CET	49717	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:21:54.336853981 CET	49717	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:21:54.336858988 CET	443	49717	52.159.126.152	192.168.2.6
Dec 8, 2023 15:21:54.337014914 CET	49717	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:21:54.337466002 CET	443	49718	104.18.3.35	192.168.2.6
Dec 8, 2023 15:21:54.337533951 CET	49718	443	192.168.2.6	104.18.3.35
Dec 8, 2023 15:21:54.349251032 CET	49718	443	192.168.2.6	104.18.3.35
Dec 8, 2023 15:21:54.349345922 CET	443	49718	104.18.3.35	192.168.2.6
Dec 8, 2023 15:21:54.349534988 CET	49718	443	192.168.2.6	104.18.3.35
Dec 8, 2023 15:21:54.349541903 CET	443	49718	104.18.3.35	192.168.2.6
Dec 8, 2023 15:21:54.380740881 CET	443	49717	52.159.126.152	192.168.2.6
Dec 8, 2023 15:21:54.400814056 CET	49718	443	192.168.2.6	104.18.3.35
Dec 8, 2023 15:21:54.493957996 CET	443	49717	52.159.126.152	192.168.2.6
Dec 8, 2023 15:21:54.494054079 CET	443	49717	52.159.126.152	192.168.2.6
Dec 8, 2023 15:21:54.494138956 CET	49717	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:21:54.494191885 CET	49674	443	192.168.2.6	173.222.162.64
Dec 8, 2023 15:21:54.494193077 CET	49673	443	192.168.2.6	173.222.162.64
Dec 8, 2023 15:21:54.494909048 CET	49717	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:21:54.494925976 CET	443	49717	52.159.126.152	192.168.2.6
Dec 8, 2023 15:21:54.804493904 CET	443	49718	104.18.3.35	192.168.2.6
Dec 8, 2023 15:21:54.804574013 CET	443	49718	104.18.3.35	192.168.2.6
Dec 8, 2023 15:21:54.804610968 CET	443	49718	104.18.3.35	192.168.2.6
Dec 8, 2023 15:21:54.804658890 CET	443	49718	104.18.3.35	192.168.2.6
Dec 8, 2023 15:21:54.804661989 CET	49718	443	192.168.2.6	104.18.3.35
Dec 8, 2023 15:21:54.804686069 CET	443	49718	104.18.3.35	192.168.2.6
Dec 8, 2023 15:21:54.804729939 CET	49718	443	192.168.2.6	104.18.3.35
Dec 8, 2023 15:21:54.804774046 CET	443	49718	104.18.3.35	192.168.2.6
Dec 8, 2023 15:21:54.804841042 CET	49718	443	192.168.2.6	104.18.3.35
Dec 8, 2023 15:21:54.805627108 CET	49718	443	192.168.2.6	104.18.3.35
Dec 8, 2023 15:21:54.805640936 CET	443	49718	104.18.3.35	192.168.2.6
Dec 8, 2023 15:21:54.805649996 CET	49718	443	192.168.2.6	104.18.3.35
Dec 8, 2023 15:21:54.805700064 CET	49718	443	192.168.2.6	104.18.3.35
Dec 8, 2023 15:21:54.825624943 CET	49672	443	192.168.2.6	173.222.162.64
Dec 8, 2023 15:21:55.341876984 CET	49719	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:21:55.341924906 CET	443	49719	142.250.217.228	192.168.2.6
Dec 8, 2023 15:21:55.341990948 CET	49719	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:21:55.342777967 CET	49719	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:21:55.342788935 CET	443	49719	142.250.217.228	192.168.2.6
Dec 8, 2023 15:21:55.448427916 CET	49720	443	192.168.2.6	54.77.133.128
Dec 8, 2023 15:21:55.448457956 CET	443	49720	54.77.133.128	192.168.2.6
Dec 8, 2023 15:21:55.448514938 CET	49720	443	192.168.2.6	54.77.133.128
Dec 8, 2023 15:21:55.449248075 CET	49720	443	192.168.2.6	54.77.133.128
Dec 8, 2023 15:21:55.449259996 CET	443	49720	54.77.133.128	192.168.2.6
Dec 8, 2023 15:21:55.619661093 CET	49721	443	192.168.2.6	23.204.76.112
Dec 8, 2023 15:21:55.619702101 CET	443	49721	23.204.76.112	192.168.2.6
Dec 8, 2023 15:21:55.619791031 CET	49721	443	192.168.2.6	23.204.76.112
Dec 8, 2023 15:21:55.627172947 CET	49721	443	192.168.2.6	23.204.76.112
Dec 8, 2023 15:21:55.627185106 CET	443	49721	23.204.76.112	192.168.2.6
Dec 8, 2023 15:21:55.639866114 CET	443	49719	142.250.217.228	192.168.2.6
Dec 8, 2023 15:21:55.691893101 CET	49719	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:21:55.691910028 CET	443	49719	142.250.217.228	192.168.2.6
Dec 8, 2023 15:21:55.693526983 CET	443	49719	142.250.217.228	192.168.2.6
Dec 8, 2023 15:21:55.693550110 CET	443	49719	142.250.217.228	192.168.2.6
Dec 8, 2023 15:21:55.693599939 CET	49719	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:21:55.695986986 CET	49719	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:21:55.696070910 CET	443	49719	142.250.217.228	192.168.2.6
Dec 8, 2023 15:21:55.744061947 CET	49719	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:21:55.744087934 CET	443	49719	142.250.217.228	192.168.2.6
Dec 8, 2023 15:21:55.794331074 CET	49719	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:21:55.909624100 CET	443	49721	23.204.76.112	192.168.2.6
Dec 8, 2023 15:21:55.909811020 CET	49721	443	192.168.2.6	23.204.76.112
Dec 8, 2023 15:21:55.913189888 CET	49721	443	192.168.2.6	23.204.76.112
Dec 8, 2023 15:21:55.913204908 CET	443	49721	23.204.76.112	192.168.2.6
Dec 8, 2023 15:21:55.913629055 CET	443	49721	23.204.76.112	192.168.2.6
Dec 8, 2023 15:21:55.962878942 CET	49721	443	192.168.2.6	23.204.76.112
Dec 8, 2023 15:21:56.030220985 CET	49721	443	192.168.2.6	23.204.76.112
Dec 8, 2023 15:21:56.072748899 CET	443	49721	23.204.76.112	192.168.2.6
Dec 8, 2023 15:21:56.156589985 CET	443	49721	23.204.76.112	192.168.2.6
Dec 8, 2023 15:21:56.156899929 CET	443	49721	23.204.76.112	192.168.2.6
Dec 8, 2023 15:21:56.156985044 CET	49721	443	192.168.2.6	23.204.76.112
Dec 8, 2023 15:21:56.157027006 CET	49721	443	192.168.2.6	23.204.76.112
Dec 8, 2023 15:21:56.157027006 CET	49721	443	192.168.2.6	23.204.76.112
Dec 8, 2023 15:21:56.157049894 CET	443	49721	23.204.76.112	192.168.2.6
Dec 8, 2023 15:21:56.157062054 CET	443	49721	23.204.76.112	192.168.2.6
Dec 8, 2023 15:21:56.194963932 CET	49722	443	192.168.2.6	23.204.76.112
Dec 8, 2023 15:21:56.195008993 CET	443	49722	23.204.76.112	192.168.2.6
Dec 8, 2023 15:21:56.195127010 CET	49722	443	192.168.2.6	23.204.76.112
Dec 8, 2023 15:21:56.195827961 CET	49722	443	192.168.2.6	23.204.76.112
Dec 8, 2023 15:21:56.195838928 CET	443	49722	23.204.76.112	192.168.2.6
Dec 8, 2023 15:21:56.212663889 CET	443	49720	54.77.133.128	192.168.2.6
Dec 8, 2023 15:21:56.212990999 CET	49720	443	192.168.2.6	54.77.133.128
Dec 8, 2023 15:21:56.213035107 CET	443	49720	54.77.133.128	192.168.2.6
Dec 8, 2023 15:21:56.214142084 CET	443	49720	54.77.133.128	192.168.2.6
Dec 8, 2023 15:21:56.214236021 CET	49720	443	192.168.2.6	54.77.133.128
Dec 8, 2023 15:21:56.452882051 CET	443	49722	23.204.76.112	192.168.2.6
Dec 8, 2023 15:21:56.453022957 CET	49722	443	192.168.2.6	23.204.76.112
Dec 8, 2023 15:21:56.454252005 CET	49722	443	192.168.2.6	23.204.76.112
Dec 8, 2023 15:21:56.454271078 CET	443	49722	23.204.76.112	192.168.2.6
Dec 8, 2023 15:21:56.454538107 CET	443	49722	23.204.76.112	192.168.2.6
Dec 8, 2023 15:21:56.455810070 CET	49722	443	192.168.2.6	23.204.76.112
Dec 8, 2023 15:21:56.496745110 CET	443	49722	23.204.76.112	192.168.2.6
Dec 8, 2023 15:21:56.642673016 CET	49720	443	192.168.2.6	54.77.133.128
Dec 8, 2023 15:21:56.642843008 CET	443	49720	54.77.133.128	192.168.2.6
Dec 8, 2023 15:21:56.643641949 CET	49720	443	192.168.2.6	54.77.133.128
Dec 8, 2023 15:21:56.643657923 CET	443	49720	54.77.133.128	192.168.2.6
Dec 8, 2023 15:21:56.697355032 CET	49720	443	192.168.2.6	54.77.133.128
Dec 8, 2023 15:21:56.702131987 CET	443	49722	23.204.76.112	192.168.2.6
Dec 8, 2023 15:21:56.702337980 CET	443	49722	23.204.76.112	192.168.2.6
Dec 8, 2023 15:21:56.702400923 CET	49722	443	192.168.2.6	23.204.76.112
Dec 8, 2023 15:21:56.703546047 CET	49722	443	192.168.2.6	23.204.76.112
Dec 8, 2023 15:21:56.703572035 CET	443	49722	23.204.76.112	192.168.2.6
Dec 8, 2023 15:21:56.703586102 CET	49722	443	192.168.2.6	23.204.76.112
Dec 8, 2023 15:21:56.703594923 CET	443	49722	23.204.76.112	192.168.2.6
Dec 8, 2023 15:21:56.898961067 CET	443	49720	54.77.133.128	192.168.2.6
Dec 8, 2023 15:21:56.899028063 CET	443	49720	54.77.133.128	192.168.2.6
Dec 8, 2023 15:21:56.899104118 CET	49720	443	192.168.2.6	54.77.133.128
Dec 8, 2023 15:21:56.899734974 CET	49720	443	192.168.2.6	54.77.133.128
Dec 8, 2023 15:21:56.899750948 CET	443	49720	54.77.133.128	192.168.2.6
Dec 8, 2023 15:21:57.061654091 CET	49723	443	192.168.2.6	18.239.225.76
Dec 8, 2023 15:21:57.061697006 CET	443	49723	18.239.225.76	192.168.2.6
Dec 8, 2023 15:21:57.061764002 CET	49723	443	192.168.2.6	18.239.225.76
Dec 8, 2023 15:21:57.062954903 CET	49723	443	192.168.2.6	18.239.225.76
Dec 8, 2023 15:21:57.062983036 CET	443	49723	18.239.225.76	192.168.2.6
Dec 8, 2023 15:21:57.323735952 CET	443	49723	18.239.225.76	192.168.2.6
Dec 8, 2023 15:21:57.325536013 CET	49723	443	192.168.2.6	18.239.225.76
Dec 8, 2023 15:21:57.325568914 CET	443	49723	18.239.225.76	192.168.2.6
Dec 8, 2023 15:21:57.326699972 CET	443	49723	18.239.225.76	192.168.2.6
Dec 8, 2023 15:21:57.326791048 CET	49723	443	192.168.2.6	18.239.225.76
Dec 8, 2023 15:21:57.328346014 CET	49723	443	192.168.2.6	18.239.225.76
Dec 8, 2023 15:21:57.328450918 CET	443	49723	18.239.225.76	192.168.2.6
Dec 8, 2023 15:21:57.328730106 CET	49723	443	192.168.2.6	18.239.225.76
Dec 8, 2023 15:21:57.328749895 CET	443	49723	18.239.225.76	192.168.2.6
Dec 8, 2023 15:21:57.368987083 CET	49723	443	192.168.2.6	18.239.225.76
Dec 8, 2023 15:21:57.611655951 CET	443	49723	18.239.225.76	192.168.2.6
Dec 8, 2023 15:21:57.611901999 CET	443	49723	18.239.225.76	192.168.2.6
Dec 8, 2023 15:21:57.611990929 CET	49723	443	192.168.2.6	18.239.225.76
Dec 8, 2023 15:21:57.612330914 CET	49723	443	192.168.2.6	18.239.225.76
Dec 8, 2023 15:21:57.612363100 CET	443	49723	18.239.225.76	192.168.2.6
Dec 8, 2023 15:21:57.612380028 CET	49723	443	192.168.2.6	18.239.225.76
Dec 8, 2023 15:21:57.612409115 CET	49723	443	192.168.2.6	18.239.225.76
Dec 8, 2023 15:21:58.012846947 CET	49724	443	192.168.2.6	18.239.225.76
Dec 8, 2023 15:21:58.012887001 CET	443	49724	18.239.225.76	192.168.2.6
Dec 8, 2023 15:21:58.012959957 CET	49724	443	192.168.2.6	18.239.225.76
Dec 8, 2023 15:21:58.014672041 CET	49724	443	192.168.2.6	18.239.225.76
Dec 8, 2023 15:21:58.014683962 CET	443	49724	18.239.225.76	192.168.2.6
Dec 8, 2023 15:21:58.281305075 CET	443	49724	18.239.225.76	192.168.2.6
Dec 8, 2023 15:21:58.281714916 CET	49724	443	192.168.2.6	18.239.225.76
Dec 8, 2023 15:21:58.281765938 CET	443	49724	18.239.225.76	192.168.2.6
Dec 8, 2023 15:21:58.282305002 CET	443	49724	18.239.225.76	192.168.2.6
Dec 8, 2023 15:21:58.282728910 CET	49724	443	192.168.2.6	18.239.225.76
Dec 8, 2023 15:21:58.282833099 CET	443	49724	18.239.225.76	192.168.2.6
Dec 8, 2023 15:21:58.282845974 CET	49724	443	192.168.2.6	18.239.225.76
Dec 8, 2023 15:21:58.323033094 CET	49724	443	192.168.2.6	18.239.225.76
Dec 8, 2023 15:21:58.323071957 CET	443	49724	18.239.225.76	192.168.2.6
Dec 8, 2023 15:21:58.695702076 CET	443	49724	18.239.225.76	192.168.2.6
Dec 8, 2023 15:21:58.695735931 CET	443	49724	18.239.225.76	192.168.2.6
Dec 8, 2023 15:21:58.695774078 CET	443	49724	18.239.225.76	192.168.2.6
Dec 8, 2023 15:21:58.695790052 CET	443	49724	18.239.225.76	192.168.2.6
Dec 8, 2023 15:21:58.695804119 CET	443	49724	18.239.225.76	192.168.2.6
Dec 8, 2023 15:21:58.695813894 CET	49724	443	192.168.2.6	18.239.225.76
Dec 8, 2023 15:21:58.695842028 CET	443	49724	18.239.225.76	192.168.2.6
Dec 8, 2023 15:21:58.695862055 CET	49724	443	192.168.2.6	18.239.225.76
Dec 8, 2023 15:21:58.695892096 CET	49724	443	192.168.2.6	18.239.225.76
Dec 8, 2023 15:21:58.701740026 CET	49724	443	192.168.2.6	18.239.225.76
Dec 8, 2023 15:21:58.701762915 CET	49724	443	192.168.2.6	18.239.225.76
Dec 8, 2023 15:21:58.789618969 CET	49725	443	192.168.2.6	104.18.3.35
Dec 8, 2023 15:21:58.789660931 CET	443	49725	104.18.3.35	192.168.2.6
Dec 8, 2023 15:21:58.789716959 CET	49725	443	192.168.2.6	104.18.3.35
Dec 8, 2023 15:21:58.790070057 CET	49725	443	192.168.2.6	104.18.3.35
Dec 8, 2023 15:21:58.790082932 CET	443	49725	104.18.3.35	192.168.2.6
Dec 8, 2023 15:21:58.953345060 CET	49726	443	192.168.2.6	18.239.225.66
Dec 8, 2023 15:21:58.953381062 CET	443	49726	18.239.225.66	192.168.2.6
Dec 8, 2023 15:21:58.953444004 CET	49726	443	192.168.2.6	18.239.225.66
Dec 8, 2023 15:21:58.953782082 CET	49726	443	192.168.2.6	18.239.225.66
Dec 8, 2023 15:21:58.953794956 CET	443	49726	18.239.225.66	192.168.2.6
Dec 8, 2023 15:21:59.049082041 CET	443	49725	104.18.3.35	192.168.2.6
Dec 8, 2023 15:21:59.049403906 CET	49725	443	192.168.2.6	104.18.3.35
Dec 8, 2023 15:21:59.049470901 CET	443	49725	104.18.3.35	192.168.2.6
Dec 8, 2023 15:21:59.049947977 CET	443	49725	104.18.3.35	192.168.2.6
Dec 8, 2023 15:21:59.050282955 CET	49725	443	192.168.2.6	104.18.3.35
Dec 8, 2023 15:21:59.050378084 CET	443	49725	104.18.3.35	192.168.2.6
Dec 8, 2023 15:21:59.050405025 CET	49725	443	192.168.2.6	104.18.3.35
Dec 8, 2023 15:21:59.092048883 CET	49725	443	192.168.2.6	104.18.3.35
Dec 8, 2023 15:21:59.092075109 CET	443	49725	104.18.3.35	192.168.2.6
Dec 8, 2023 15:21:59.115092993 CET	49727	443	192.168.2.6	194.26.192.93
Dec 8, 2023 15:21:59.115178108 CET	443	49727	194.26.192.93	192.168.2.6
Dec 8, 2023 15:21:59.115253925 CET	49727	443	192.168.2.6	194.26.192.93
Dec 8, 2023 15:21:59.115643024 CET	49727	443	192.168.2.6	194.26.192.93
Dec 8, 2023 15:21:59.115658998 CET	443	49727	194.26.192.93	192.168.2.6
Dec 8, 2023 15:21:59.116467953 CET	49728	443	192.168.2.6	194.26.192.93
Dec 8, 2023 15:21:59.116523981 CET	443	49728	194.26.192.93	192.168.2.6
Dec 8, 2023 15:21:59.116635084 CET	49728	443	192.168.2.6	194.26.192.93
Dec 8, 2023 15:21:59.116871119 CET	49728	443	192.168.2.6	194.26.192.93
Dec 8, 2023 15:21:59.116898060 CET	443	49728	194.26.192.93	192.168.2.6
Dec 8, 2023 15:21:59.218538046 CET	443	49726	18.239.225.66	192.168.2.6
Dec 8, 2023 15:21:59.219086885 CET	49726	443	192.168.2.6	18.239.225.66
Dec 8, 2023 15:21:59.219111919 CET	443	49726	18.239.225.66	192.168.2.6
Dec 8, 2023 15:21:59.220236063 CET	443	49726	18.239.225.66	192.168.2.6
Dec 8, 2023 15:21:59.220335007 CET	49726	443	192.168.2.6	18.239.225.66
Dec 8, 2023 15:21:59.220799923 CET	49726	443	192.168.2.6	18.239.225.66
Dec 8, 2023 15:21:59.220864058 CET	443	49726	18.239.225.66	192.168.2.6
Dec 8, 2023 15:21:59.220938921 CET	49726	443	192.168.2.6	18.239.225.66
Dec 8, 2023 15:21:59.220948935 CET	443	49726	18.239.225.66	192.168.2.6
Dec 8, 2023 15:21:59.264769077 CET	49726	443	192.168.2.6	18.239.225.66
Dec 8, 2023 15:21:59.551132917 CET	443	49726	18.239.225.66	192.168.2.6
Dec 8, 2023 15:21:59.569351912 CET	443	49726	18.239.225.66	192.168.2.6
Dec 8, 2023 15:21:59.569361925 CET	443	49726	18.239.225.66	192.168.2.6
Dec 8, 2023 15:21:59.569370985 CET	443	49726	18.239.225.66	192.168.2.6
Dec 8, 2023 15:21:59.569438934 CET	49726	443	192.168.2.6	18.239.225.66
Dec 8, 2023 15:21:59.569463968 CET	443	49726	18.239.225.66	192.168.2.6
Dec 8, 2023 15:21:59.569539070 CET	49726	443	192.168.2.6	18.239.225.66
Dec 8, 2023 15:21:59.590270042 CET	443	49726	18.239.225.66	192.168.2.6
Dec 8, 2023 15:21:59.590281963 CET	443	49726	18.239.225.66	192.168.2.6
Dec 8, 2023 15:21:59.590322018 CET	443	49726	18.239.225.66	192.168.2.6
Dec 8, 2023 15:21:59.590375900 CET	49726	443	192.168.2.6	18.239.225.66
Dec 8, 2023 15:21:59.590389013 CET	443	49726	18.239.225.66	192.168.2.6
Dec 8, 2023 15:21:59.590401888 CET	49726	443	192.168.2.6	18.239.225.66
Dec 8, 2023 15:21:59.609797955 CET	443	49728	194.26.192.93	192.168.2.6
Dec 8, 2023 15:21:59.610073090 CET	49728	443	192.168.2.6	194.26.192.93
Dec 8, 2023 15:21:59.610094070 CET	443	49728	194.26.192.93	192.168.2.6
Dec 8, 2023 15:21:59.611771107 CET	443	49728	194.26.192.93	192.168.2.6
Dec 8, 2023 15:21:59.611869097 CET	49728	443	192.168.2.6	194.26.192.93
Dec 8, 2023 15:21:59.612935066 CET	49728	443	192.168.2.6	194.26.192.93
Dec 8, 2023 15:21:59.613024950 CET	443	49728	194.26.192.93	192.168.2.6
Dec 8, 2023 15:21:59.613161087 CET	49728	443	192.168.2.6	194.26.192.93
Dec 8, 2023 15:21:59.613168001 CET	443	49728	194.26.192.93	192.168.2.6
Dec 8, 2023 15:21:59.615912914 CET	443	49727	194.26.192.93	192.168.2.6
Dec 8, 2023 15:21:59.616153002 CET	49727	443	192.168.2.6	194.26.192.93
Dec 8, 2023 15:21:59.616168976 CET	443	49727	194.26.192.93	192.168.2.6
Dec 8, 2023 15:21:59.617868900 CET	443	49727	194.26.192.93	192.168.2.6
Dec 8, 2023 15:21:59.617947102 CET	49727	443	192.168.2.6	194.26.192.93
Dec 8, 2023 15:21:59.618863106 CET	49727	443	192.168.2.6	194.26.192.93
Dec 8, 2023 15:21:59.618953943 CET	443	49727	194.26.192.93	192.168.2.6
Dec 8, 2023 15:21:59.637084007 CET	49726	443	192.168.2.6	18.239.225.66
Dec 8, 2023 15:21:59.646636963 CET	443	49725	104.18.3.35	192.168.2.6
Dec 8, 2023 15:21:59.646698952 CET	443	49725	104.18.3.35	192.168.2.6
Dec 8, 2023 15:21:59.646750927 CET	443	49725	104.18.3.35	192.168.2.6
Dec 8, 2023 15:21:59.646781921 CET	49725	443	192.168.2.6	104.18.3.35
Dec 8, 2023 15:21:59.646804094 CET	443	49725	104.18.3.35	192.168.2.6
Dec 8, 2023 15:21:59.646845102 CET	49725	443	192.168.2.6	104.18.3.35
Dec 8, 2023 15:21:59.646852016 CET	443	49725	104.18.3.35	192.168.2.6
Dec 8, 2023 15:21:59.646894932 CET	443	49725	104.18.3.35	192.168.2.6
Dec 8, 2023 15:21:59.646945000 CET	443	49725	104.18.3.35	192.168.2.6
Dec 8, 2023 15:21:59.646945953 CET	49725	443	192.168.2.6	104.18.3.35
Dec 8, 2023 15:21:59.646966934 CET	443	49725	104.18.3.35	192.168.2.6
Dec 8, 2023 15:21:59.647010088 CET	49725	443	192.168.2.6	104.18.3.35
Dec 8, 2023 15:21:59.647016048 CET	443	49725	104.18.3.35	192.168.2.6
Dec 8, 2023 15:21:59.647605896 CET	443	49725	104.18.3.35	192.168.2.6
Dec 8, 2023 15:21:59.647651911 CET	49725	443	192.168.2.6	104.18.3.35
Dec 8, 2023 15:21:59.647653103 CET	443	49725	104.18.3.35	192.168.2.6
Dec 8, 2023 15:21:59.647667885 CET	443	49725	104.18.3.35	192.168.2.6
Dec 8, 2023 15:21:59.647707939 CET	49725	443	192.168.2.6	104.18.3.35
Dec 8, 2023 15:21:59.647715092 CET	443	49725	104.18.3.35	192.168.2.6
Dec 8, 2023 15:21:59.648665905 CET	443	49725	104.18.3.35	192.168.2.6
Dec 8, 2023 15:21:59.648727894 CET	49725	443	192.168.2.6	104.18.3.35
Dec 8, 2023 15:21:59.648735046 CET	443	49725	104.18.3.35	192.168.2.6
Dec 8, 2023 15:21:59.648803949 CET	443	49725	104.18.3.35	192.168.2.6
Dec 8, 2023 15:21:59.648852110 CET	49725	443	192.168.2.6	104.18.3.35
Dec 8, 2023 15:21:59.648858070 CET	443	49725	104.18.3.35	192.168.2.6
Dec 8, 2023 15:21:59.648874998 CET	443	49725	104.18.3.35	192.168.2.6
Dec 8, 2023 15:21:59.648916960 CET	49725	443	192.168.2.6	104.18.3.35
Dec 8, 2023 15:21:59.649332047 CET	443	49725	104.18.3.35	192.168.2.6
Dec 8, 2023 15:21:59.649594069 CET	443	49725	104.18.3.35	192.168.2.6
Dec 8, 2023 15:21:59.649635077 CET	49725	443	192.168.2.6	104.18.3.35
Dec 8, 2023 15:21:59.649641037 CET	443	49725	104.18.3.35	192.168.2.6
Dec 8, 2023 15:21:59.649714947 CET	443	49725	104.18.3.35	192.168.2.6
Dec 8, 2023 15:21:59.649758101 CET	49725	443	192.168.2.6	104.18.3.35
Dec 8, 2023 15:21:59.650191069 CET	49725	443	192.168.2.6	104.18.3.35
Dec 8, 2023 15:21:59.650206089 CET	443	49725	104.18.3.35	192.168.2.6
Dec 8, 2023 15:21:59.667485952 CET	49727	443	192.168.2.6	194.26.192.93
Dec 8, 2023 15:21:59.667485952 CET	49728	443	192.168.2.6	194.26.192.93
Dec 8, 2023 15:21:59.667495966 CET	443	49727	194.26.192.93	192.168.2.6
Dec 8, 2023 15:21:59.685869932 CET	443	49726	18.239.225.66	192.168.2.6
Dec 8, 2023 15:21:59.685882092 CET	443	49726	18.239.225.66	192.168.2.6
Dec 8, 2023 15:21:59.685909033 CET	443	49726	18.239.225.66	192.168.2.6
Dec 8, 2023 15:21:59.685936928 CET	443	49726	18.239.225.66	192.168.2.6
Dec 8, 2023 15:21:59.685960054 CET	49726	443	192.168.2.6	18.239.225.66
Dec 8, 2023 15:21:59.685969114 CET	443	49726	18.239.225.66	192.168.2.6
Dec 8, 2023 15:21:59.686007977 CET	49726	443	192.168.2.6	18.239.225.66
Dec 8, 2023 15:21:59.686028957 CET	49726	443	192.168.2.6	18.239.225.66
Dec 8, 2023 15:21:59.710107088 CET	443	49726	18.239.225.66	192.168.2.6
Dec 8, 2023 15:21:59.710129976 CET	443	49726	18.239.225.66	192.168.2.6
Dec 8, 2023 15:21:59.710177898 CET	49726	443	192.168.2.6	18.239.225.66
Dec 8, 2023 15:21:59.710189104 CET	443	49726	18.239.225.66	192.168.2.6
Dec 8, 2023 15:21:59.710217953 CET	49726	443	192.168.2.6	18.239.225.66
Dec 8, 2023 15:21:59.710239887 CET	49726	443	192.168.2.6	18.239.225.66
Dec 8, 2023 15:21:59.713133097 CET	49727	443	192.168.2.6	194.26.192.93
Dec 8, 2023 15:21:59.732717991 CET	443	49726	18.239.225.66	192.168.2.6
Dec 8, 2023 15:21:59.732750893 CET	443	49726	18.239.225.66	192.168.2.6
Dec 8, 2023 15:21:59.732808113 CET	49726	443	192.168.2.6	18.239.225.66
Dec 8, 2023 15:21:59.732820034 CET	443	49726	18.239.225.66	192.168.2.6
Dec 8, 2023 15:21:59.732867956 CET	49726	443	192.168.2.6	18.239.225.66
Dec 8, 2023 15:21:59.753598928 CET	443	49726	18.239.225.66	192.168.2.6
Dec 8, 2023 15:21:59.753618002 CET	443	49726	18.239.225.66	192.168.2.6
Dec 8, 2023 15:21:59.753725052 CET	49726	443	192.168.2.6	18.239.225.66
Dec 8, 2023 15:21:59.753748894 CET	443	49726	18.239.225.66	192.168.2.6
Dec 8, 2023 15:21:59.753791094 CET	49726	443	192.168.2.6	18.239.225.66
Dec 8, 2023 15:21:59.810672045 CET	443	49726	18.239.225.66	192.168.2.6
Dec 8, 2023 15:21:59.810694933 CET	443	49726	18.239.225.66	192.168.2.6
Dec 8, 2023 15:21:59.810792923 CET	49726	443	192.168.2.6	18.239.225.66
Dec 8, 2023 15:21:59.810815096 CET	443	49726	18.239.225.66	192.168.2.6
Dec 8, 2023 15:21:59.810868979 CET	49726	443	192.168.2.6	18.239.225.66
Dec 8, 2023 15:21:59.826617002 CET	443	49726	18.239.225.66	192.168.2.6
Dec 8, 2023 15:21:59.826663017 CET	443	49726	18.239.225.66	192.168.2.6
Dec 8, 2023 15:21:59.826709032 CET	49726	443	192.168.2.6	18.239.225.66
Dec 8, 2023 15:21:59.826723099 CET	443	49726	18.239.225.66	192.168.2.6
Dec 8, 2023 15:21:59.826735973 CET	443	49726	18.239.225.66	192.168.2.6
Dec 8, 2023 15:21:59.826764107 CET	49726	443	192.168.2.6	18.239.225.66
Dec 8, 2023 15:21:59.826787949 CET	49726	443	192.168.2.6	18.239.225.66
Dec 8, 2023 15:21:59.827146053 CET	49726	443	192.168.2.6	18.239.225.66
Dec 8, 2023 15:21:59.827166080 CET	443	49726	18.239.225.66	192.168.2.6
Dec 8, 2023 15:22:00.105501890 CET	443	49728	194.26.192.93	192.168.2.6
Dec 8, 2023 15:22:00.105612040 CET	443	49728	194.26.192.93	192.168.2.6
Dec 8, 2023 15:22:00.105679035 CET	49728	443	192.168.2.6	194.26.192.93
Dec 8, 2023 15:22:00.106283903 CET	49728	443	192.168.2.6	194.26.192.93
Dec 8, 2023 15:22:00.106304884 CET	443	49728	194.26.192.93	192.168.2.6
Dec 8, 2023 15:22:00.111659050 CET	49727	443	192.168.2.6	194.26.192.93
Dec 8, 2023 15:22:00.156752110 CET	443	49727	194.26.192.93	192.168.2.6
Dec 8, 2023 15:22:00.357426882 CET	443	49727	194.26.192.93	192.168.2.6
Dec 8, 2023 15:22:00.357458115 CET	443	49727	194.26.192.93	192.168.2.6
Dec 8, 2023 15:22:00.357532978 CET	49727	443	192.168.2.6	194.26.192.93
Dec 8, 2023 15:22:00.357548952 CET	443	49727	194.26.192.93	192.168.2.6
Dec 8, 2023 15:22:00.357594013 CET	49727	443	192.168.2.6	194.26.192.93
Dec 8, 2023 15:22:00.358566999 CET	49727	443	192.168.2.6	194.26.192.93
Dec 8, 2023 15:22:00.358591080 CET	443	49727	194.26.192.93	192.168.2.6
Dec 8, 2023 15:22:00.576401949 CET	49729	443	192.168.2.6	104.17.3.184
Dec 8, 2023 15:22:00.576442003 CET	443	49729	104.17.3.184	192.168.2.6
Dec 8, 2023 15:22:00.576550007 CET	49729	443	192.168.2.6	104.17.3.184
Dec 8, 2023 15:22:00.577750921 CET	49729	443	192.168.2.6	104.17.3.184
Dec 8, 2023 15:22:00.577763081 CET	443	49729	104.17.3.184	192.168.2.6
Dec 8, 2023 15:22:00.840468884 CET	443	49729	104.17.3.184	192.168.2.6
Dec 8, 2023 15:22:00.840789080 CET	49729	443	192.168.2.6	104.17.3.184
Dec 8, 2023 15:22:00.840831995 CET	443	49729	104.17.3.184	192.168.2.6
Dec 8, 2023 15:22:00.842348099 CET	443	49729	104.17.3.184	192.168.2.6
Dec 8, 2023 15:22:00.842449903 CET	49729	443	192.168.2.6	104.17.3.184
Dec 8, 2023 15:22:00.846191883 CET	49729	443	192.168.2.6	104.17.3.184
Dec 8, 2023 15:22:00.846370935 CET	443	49729	104.17.3.184	192.168.2.6
Dec 8, 2023 15:22:00.846380949 CET	49729	443	192.168.2.6	104.17.3.184
Dec 8, 2023 15:22:00.892779112 CET	443	49729	104.17.3.184	192.168.2.6
Dec 8, 2023 15:22:00.893726110 CET	49729	443	192.168.2.6	104.17.3.184
Dec 8, 2023 15:22:00.893747091 CET	443	49729	104.17.3.184	192.168.2.6
Dec 8, 2023 15:22:00.938519955 CET	49729	443	192.168.2.6	104.17.3.184
Dec 8, 2023 15:22:01.140845060 CET	443	49729	104.17.3.184	192.168.2.6
Dec 8, 2023 15:22:01.141022921 CET	443	49729	104.17.3.184	192.168.2.6
Dec 8, 2023 15:22:01.141092062 CET	49729	443	192.168.2.6	104.17.3.184
Dec 8, 2023 15:22:01.158132076 CET	49729	443	192.168.2.6	104.17.3.184
Dec 8, 2023 15:22:01.158150911 CET	443	49729	104.17.3.184	192.168.2.6
Dec 8, 2023 15:22:01.161638021 CET	49730	443	192.168.2.6	104.17.3.184
Dec 8, 2023 15:22:01.161680937 CET	443	49730	104.17.3.184	192.168.2.6
Dec 8, 2023 15:22:01.161746979 CET	49730	443	192.168.2.6	104.17.3.184
Dec 8, 2023 15:22:01.162206888 CET	49730	443	192.168.2.6	104.17.3.184
Dec 8, 2023 15:22:01.162223101 CET	443	49730	104.17.3.184	192.168.2.6
Dec 8, 2023 15:22:01.193247080 CET	49731	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:22:01.193278074 CET	443	49731	52.159.126.152	192.168.2.6
Dec 8, 2023 15:22:01.193417072 CET	49731	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:22:01.194308043 CET	49731	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:22:01.194320917 CET	443	49731	52.159.126.152	192.168.2.6
Dec 8, 2023 15:22:01.427510023 CET	443	49730	104.17.3.184	192.168.2.6
Dec 8, 2023 15:22:01.427859068 CET	49730	443	192.168.2.6	104.17.3.184
Dec 8, 2023 15:22:01.427885056 CET	443	49730	104.17.3.184	192.168.2.6
Dec 8, 2023 15:22:01.429006100 CET	443	49730	104.17.3.184	192.168.2.6
Dec 8, 2023 15:22:01.429315090 CET	49730	443	192.168.2.6	104.17.3.184
Dec 8, 2023 15:22:01.429404020 CET	443	49730	104.17.3.184	192.168.2.6
Dec 8, 2023 15:22:01.429470062 CET	49730	443	192.168.2.6	104.17.3.184
Dec 8, 2023 15:22:01.472742081 CET	443	49730	104.17.3.184	192.168.2.6
Dec 8, 2023 15:22:01.677110910 CET	443	49731	52.159.126.152	192.168.2.6
Dec 8, 2023 15:22:01.677277088 CET	49731	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:22:01.740823030 CET	443	49730	104.17.3.184	192.168.2.6
Dec 8, 2023 15:22:01.740993977 CET	443	49730	104.17.3.184	192.168.2.6
Dec 8, 2023 15:22:01.741086006 CET	49730	443	192.168.2.6	104.17.3.184
Dec 8, 2023 15:22:01.741091967 CET	443	49730	104.17.3.184	192.168.2.6
Dec 8, 2023 15:22:01.741122007 CET	443	49730	104.17.3.184	192.168.2.6
Dec 8, 2023 15:22:01.741168022 CET	49730	443	192.168.2.6	104.17.3.184
Dec 8, 2023 15:22:01.741214037 CET	443	49730	104.17.3.184	192.168.2.6
Dec 8, 2023 15:22:01.741410017 CET	443	49730	104.17.3.184	192.168.2.6
Dec 8, 2023 15:22:01.741466999 CET	49730	443	192.168.2.6	104.17.3.184
Dec 8, 2023 15:22:01.741477013 CET	443	49730	104.17.3.184	192.168.2.6
Dec 8, 2023 15:22:01.741590977 CET	443	49730	104.17.3.184	192.168.2.6
Dec 8, 2023 15:22:01.741645098 CET	49730	443	192.168.2.6	104.17.3.184
Dec 8, 2023 15:22:01.741650105 CET	443	49730	104.17.3.184	192.168.2.6
Dec 8, 2023 15:22:01.741753101 CET	443	49730	104.17.3.184	192.168.2.6
Dec 8, 2023 15:22:01.741797924 CET	49730	443	192.168.2.6	104.17.3.184
Dec 8, 2023 15:22:01.741801977 CET	443	49730	104.17.3.184	192.168.2.6
Dec 8, 2023 15:22:01.742038012 CET	443	49730	104.17.3.184	192.168.2.6
Dec 8, 2023 15:22:01.742094994 CET	49730	443	192.168.2.6	104.17.3.184
Dec 8, 2023 15:22:01.742099047 CET	443	49730	104.17.3.184	192.168.2.6
Dec 8, 2023 15:22:01.742221117 CET	443	49730	104.17.3.184	192.168.2.6
Dec 8, 2023 15:22:01.742268085 CET	49730	443	192.168.2.6	104.17.3.184
Dec 8, 2023 15:22:01.742271900 CET	443	49730	104.17.3.184	192.168.2.6
Dec 8, 2023 15:22:01.742872953 CET	443	49730	104.17.3.184	192.168.2.6
Dec 8, 2023 15:22:01.742930889 CET	49730	443	192.168.2.6	104.17.3.184
Dec 8, 2023 15:22:01.742934942 CET	443	49730	104.17.3.184	192.168.2.6
Dec 8, 2023 15:22:01.743088007 CET	443	49730	104.17.3.184	192.168.2.6
Dec 8, 2023 15:22:01.743124008 CET	49730	443	192.168.2.6	104.17.3.184
Dec 8, 2023 15:22:01.743128061 CET	443	49730	104.17.3.184	192.168.2.6
Dec 8, 2023 15:22:01.743223906 CET	443	49730	104.17.3.184	192.168.2.6
Dec 8, 2023 15:22:01.743261099 CET	49730	443	192.168.2.6	104.17.3.184
Dec 8, 2023 15:22:01.743264914 CET	443	49730	104.17.3.184	192.168.2.6
Dec 8, 2023 15:22:01.743917942 CET	443	49730	104.17.3.184	192.168.2.6
Dec 8, 2023 15:22:01.743978024 CET	49730	443	192.168.2.6	104.17.3.184
Dec 8, 2023 15:22:01.743982077 CET	443	49730	104.17.3.184	192.168.2.6
Dec 8, 2023 15:22:01.744086981 CET	443	49730	104.17.3.184	192.168.2.6
Dec 8, 2023 15:22:01.744131088 CET	49730	443	192.168.2.6	104.17.3.184
Dec 8, 2023 15:22:01.744136095 CET	443	49730	104.17.3.184	192.168.2.6
Dec 8, 2023 15:22:01.744751930 CET	443	49730	104.17.3.184	192.168.2.6
Dec 8, 2023 15:22:01.744812012 CET	49730	443	192.168.2.6	104.17.3.184
Dec 8, 2023 15:22:01.744816065 CET	443	49730	104.17.3.184	192.168.2.6
Dec 8, 2023 15:22:01.744898081 CET	443	49730	104.17.3.184	192.168.2.6
Dec 8, 2023 15:22:01.744956970 CET	49730	443	192.168.2.6	104.17.3.184
Dec 8, 2023 15:22:03.068044901 CET	49731	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:22:03.068073988 CET	443	49731	52.159.126.152	192.168.2.6
Dec 8, 2023 15:22:03.069097996 CET	443	49731	52.159.126.152	192.168.2.6
Dec 8, 2023 15:22:03.104737043 CET	49731	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:22:03.104796886 CET	49731	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:22:03.104804993 CET	443	49731	52.159.126.152	192.168.2.6
Dec 8, 2023 15:22:03.104953051 CET	49731	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:22:03.149615049 CET	49730	443	192.168.2.6	104.17.3.184
Dec 8, 2023 15:22:03.149638891 CET	443	49730	104.17.3.184	192.168.2.6
Dec 8, 2023 15:22:03.152734041 CET	443	49731	52.159.126.152	192.168.2.6
Dec 8, 2023 15:22:03.261365891 CET	443	49731	52.159.126.152	192.168.2.6
Dec 8, 2023 15:22:03.261593103 CET	443	49731	52.159.126.152	192.168.2.6
Dec 8, 2023 15:22:03.261688948 CET	49731	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:22:03.261867046 CET	49731	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:22:03.261878014 CET	443	49731	52.159.126.152	192.168.2.6
Dec 8, 2023 15:22:03.261888027 CET	49731	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:22:03.384955883 CET	49732	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:03.384973049 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.385045052 CET	49732	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:03.385351896 CET	49732	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:03.385363102 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.642018080 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.642374992 CET	49732	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:03.642414093 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.645817995 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.645912886 CET	49732	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:03.646357059 CET	49732	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:03.646488905 CET	49732	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:03.646502972 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.646605015 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.698571920 CET	49732	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:03.698606968 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.747071028 CET	49732	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:03.943372011 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.943573952 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.943643093 CET	49732	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:03.943665981 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.943773031 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.943850040 CET	49732	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:03.943851948 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.943881035 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.943938017 CET	49732	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:03.943981886 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.944160938 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.944215059 CET	49732	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:03.944228888 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.944324970 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.944375992 CET	49732	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:03.944389105 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.944487095 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.944540024 CET	49732	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:03.944551945 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.944653988 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.944736004 CET	49732	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:03.944747925 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.944889069 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.944952965 CET	49732	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:03.944963932 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.945050001 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.945100069 CET	49732	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:03.945111036 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.945214987 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.945266962 CET	49732	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:03.945277929 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.945943117 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.945997000 CET	49732	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:03.946007967 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.946105003 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.946165085 CET	49732	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:03.946177006 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.946808100 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.946870089 CET	49732	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:03.946881056 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.947010994 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.947065115 CET	49732	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:03.947077036 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.947598934 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.947658062 CET	49732	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:03.947670937 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.947833061 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.947892904 CET	49732	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:03.947904110 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.948029041 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.948081017 CET	49732	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:03.948091984 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.948574066 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.948632956 CET	49732	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:03.948645115 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.948748112 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.948803902 CET	49732	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:03.948817968 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.949290991 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.949345112 CET	49732	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:03.949356079 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.950166941 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.950242043 CET	49732	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:03.950253963 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.974575043 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:03.974597931 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.974678993 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:03.974864960 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:03.974879026 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:03.991358042 CET	49732	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.068016052 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.068221092 CET	49732	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.068305016 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.068361998 CET	49732	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.068562984 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.068633080 CET	49732	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.068964958 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.069036007 CET	49732	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.069045067 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.069089890 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.069140911 CET	49732	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.069231033 CET	49732	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.069242954 CET	443	49732	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.072098970 CET	49734	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.072139978 CET	443	49734	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.072201014 CET	49734	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.072613955 CET	49734	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.072633028 CET	443	49734	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.239337921 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.241599083 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.241657019 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.242165089 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.242584944 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.242686033 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.242793083 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.284734964 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.333683968 CET	443	49734	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.334005117 CET	49734	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.334042072 CET	443	49734	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.335213900 CET	443	49734	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.335616112 CET	49734	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.335757017 CET	49734	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.335769892 CET	443	49734	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.335799932 CET	443	49734	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.375864029 CET	443	49714	62.182.22.52	192.168.2.6
Dec 8, 2023 15:22:04.376017094 CET	443	49714	62.182.22.52	192.168.2.6
Dec 8, 2023 15:22:04.376141071 CET	49714	443	192.168.2.6	62.182.22.52
Dec 8, 2023 15:22:04.388005018 CET	49734	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.539153099 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.539313078 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.539423943 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.539515018 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.539589882 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.539674044 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.539717913 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.539773941 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.539827108 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.539843082 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.539933920 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.539988041 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.539999008 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.540091038 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.540143013 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.540153027 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.540241003 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.540297031 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.540307999 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.540410995 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.540462971 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.540472984 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.540882111 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.540941000 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.540952921 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.541043997 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.541098118 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.541115046 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.541624069 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.541683912 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.541693926 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.541804075 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.541852951 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.541863918 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.541965961 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.542015076 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.542026043 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.542550087 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.542604923 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.542617083 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.542709112 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.542753935 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.542764902 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.543555021 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.543628931 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.543641090 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.543730974 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.543785095 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.543796062 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.544174910 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.544225931 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.544236898 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.544332027 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.544380903 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.544390917 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.544480085 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.544529915 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.544539928 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.545209885 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.545273066 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.545283079 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.546161890 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.546251059 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.546261072 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.586525917 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.631560087 CET	443	49734	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.631891012 CET	443	49734	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.631957054 CET	49734	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.632374048 CET	49734	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.632409096 CET	443	49734	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.635267973 CET	49714	443	192.168.2.6	62.182.22.52
Dec 8, 2023 15:22:04.635332108 CET	443	49714	62.182.22.52	192.168.2.6
Dec 8, 2023 15:22:04.665008068 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.665124893 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.665168047 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.665230989 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.665328979 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.665395021 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.665620089 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.665688992 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.666230917 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.666295052 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.666757107 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.666816950 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.668020964 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.668103933 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.668345928 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.668416023 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.668740988 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.668812037 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.668914080 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.668973923 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.669627905 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.669699907 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.670089006 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.670150042 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.670664072 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.670730114 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.670895100 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.670958042 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.671777010 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.671852112 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.672413111 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.672477007 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.763786077 CET	49735	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.763808012 CET	443	49735	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.763881922 CET	49735	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.764188051 CET	49735	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.764200926 CET	443	49735	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.789628029 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.789752007 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.789880991 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.789952993 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.790726900 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.790812969 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.791023970 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.791088104 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.791513920 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.791574955 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.792000055 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.792066097 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.792454004 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.792520046 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.792774916 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.792829990 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.793311119 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.793374062 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.793616056 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.793678045 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.794291019 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.794362068 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.794514894 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.794581890 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.795563936 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.795641899 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.795655966 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.795715094 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.795757055 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.795806885 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.795826912 CET	443	49733	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.795859098 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.795886040 CET	49733	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.852945089 CET	49736	443	192.168.2.6	194.26.192.93
Dec 8, 2023 15:22:04.853034019 CET	443	49736	194.26.192.93	192.168.2.6
Dec 8, 2023 15:22:04.853108883 CET	49736	443	192.168.2.6	194.26.192.93
Dec 8, 2023 15:22:04.854734898 CET	49736	443	192.168.2.6	194.26.192.93
Dec 8, 2023 15:22:04.854767084 CET	443	49736	194.26.192.93	192.168.2.6
Dec 8, 2023 15:22:04.980453968 CET	49737	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.980500937 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:04.980580091 CET	49737	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.981023073 CET	49737	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:04.981036901 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.028641939 CET	443	49735	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.029126883 CET	49735	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.029143095 CET	443	49735	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.030613899 CET	443	49735	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.030725002 CET	49735	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.031054974 CET	49735	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.031136036 CET	443	49735	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.031198025 CET	49735	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.031205893 CET	443	49735	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.073378086 CET	49735	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.112070084 CET	49738	80	192.168.2.6	172.217.2.195
Dec 8, 2023 15:22:05.112617970 CET	49739	80	192.168.2.6	172.217.2.195
Dec 8, 2023 15:22:05.125927925 CET	49740	443	192.168.2.6	20.114.59.183
Dec 8, 2023 15:22:05.125953913 CET	443	49740	20.114.59.183	192.168.2.6
Dec 8, 2023 15:22:05.126030922 CET	49740	443	192.168.2.6	20.114.59.183
Dec 8, 2023 15:22:05.128751040 CET	49740	443	192.168.2.6	20.114.59.183
Dec 8, 2023 15:22:05.128767967 CET	443	49740	20.114.59.183	192.168.2.6
Dec 8, 2023 15:22:05.232563019 CET	49741	80	192.168.2.6	172.217.2.195
Dec 8, 2023 15:22:05.236444950 CET	80	49738	172.217.2.195	192.168.2.6
Dec 8, 2023 15:22:05.236540079 CET	49738	80	192.168.2.6	172.217.2.195
Dec 8, 2023 15:22:05.236716986 CET	49738	80	192.168.2.6	172.217.2.195
Dec 8, 2023 15:22:05.237746954 CET	80	49739	172.217.2.195	192.168.2.6
Dec 8, 2023 15:22:05.237802029 CET	49739	80	192.168.2.6	172.217.2.195
Dec 8, 2023 15:22:05.247415066 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.247654915 CET	49737	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.247668982 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.249393940 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.249711990 CET	49737	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.249845028 CET	49737	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.249850988 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.249881983 CET	49737	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.250004053 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.294938087 CET	49737	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.326167107 CET	443	49735	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.326486111 CET	443	49735	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.326551914 CET	49735	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.327759027 CET	49735	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.327775955 CET	443	49735	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.347954988 CET	443	49736	194.26.192.93	192.168.2.6
Dec 8, 2023 15:22:05.348215103 CET	49736	443	192.168.2.6	194.26.192.93
Dec 8, 2023 15:22:05.348274946 CET	443	49736	194.26.192.93	192.168.2.6
Dec 8, 2023 15:22:05.349423885 CET	443	49736	194.26.192.93	192.168.2.6
Dec 8, 2023 15:22:05.349761963 CET	49736	443	192.168.2.6	194.26.192.93
Dec 8, 2023 15:22:05.349865913 CET	443	49736	194.26.192.93	192.168.2.6
Dec 8, 2023 15:22:05.349895000 CET	49736	443	192.168.2.6	194.26.192.93
Dec 8, 2023 15:22:05.357145071 CET	80	49741	172.217.2.195	192.168.2.6
Dec 8, 2023 15:22:05.357234001 CET	49741	80	192.168.2.6	172.217.2.195
Dec 8, 2023 15:22:05.362157106 CET	80	49738	172.217.2.195	192.168.2.6
Dec 8, 2023 15:22:05.392775059 CET	443	49736	194.26.192.93	192.168.2.6
Dec 8, 2023 15:22:05.403070927 CET	49736	443	192.168.2.6	194.26.192.93
Dec 8, 2023 15:22:05.519232035 CET	49706	443	192.168.2.6	173.222.162.64
Dec 8, 2023 15:22:05.560540915 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.560749054 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.560806036 CET	49737	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.560833931 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.560942888 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.560988903 CET	49737	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.560997009 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.561108112 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.561156988 CET	49737	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.561165094 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.561259031 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.561305046 CET	49737	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.561311960 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.561400890 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.561445951 CET	49737	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.561451912 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.561553001 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.561593056 CET	49737	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.561599970 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.561703920 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.561749935 CET	49737	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.561755896 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.562418938 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.562473059 CET	49737	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.562479019 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.562577963 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.562623978 CET	49737	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.562630892 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.563239098 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.563298941 CET	49737	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.563306093 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.563420057 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.563469887 CET	49737	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.563477993 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.563575983 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.563625097 CET	49737	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.563631058 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.564161062 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.564217091 CET	49737	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.564223051 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.564327955 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.564372063 CET	49737	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.564378977 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.565093994 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.565149069 CET	49737	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.565155029 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.565248013 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.565294981 CET	49737	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.565303087 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.565788984 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.565841913 CET	49737	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.565849066 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.565942049 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.565988064 CET	49737	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.565994978 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.566081047 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.566138029 CET	49737	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.566143990 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.566951036 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.567020893 CET	49737	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.567027092 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.567866087 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.567943096 CET	49737	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.567950964 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.621227980 CET	49737	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.621783018 CET	443	49719	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:05.621848106 CET	443	49719	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:05.621900082 CET	49719	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:05.648277998 CET	80	49738	172.217.2.195	192.168.2.6
Dec 8, 2023 15:22:05.648313999 CET	80	49738	172.217.2.195	192.168.2.6
Dec 8, 2023 15:22:05.648370981 CET	49738	80	192.168.2.6	172.217.2.195
Dec 8, 2023 15:22:05.655510902 CET	49719	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:05.655534029 CET	443	49719	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:05.655868053 CET	49742	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:05.655888081 CET	443	49742	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:05.655944109 CET	49742	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:05.656212091 CET	49742	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:05.656223059 CET	443	49742	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:05.686266899 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.686284065 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.686399937 CET	49737	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.686429024 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.686472893 CET	49737	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.686686993 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.686753035 CET	49737	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.686995029 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.687064886 CET	49737	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.687607050 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.687659979 CET	49737	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.687956095 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.688020945 CET	49737	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.688620090 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.688678026 CET	49737	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.689392090 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.689454079 CET	49737	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.689634085 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.689682961 CET	49737	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.690243006 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.690296888 CET	49737	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.690462112 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.690530062 CET	49737	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.691313028 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.691384077 CET	49737	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.691395998 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.691442966 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.691484928 CET	49737	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.691557884 CET	49737	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.691570997 CET	443	49737	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.694355011 CET	49743	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.694399118 CET	443	49743	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.694461107 CET	49743	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.694772005 CET	49743	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.694785118 CET	443	49743	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.706908941 CET	443	49706	173.222.162.64	192.168.2.6
Dec 8, 2023 15:22:05.707854986 CET	443	49706	173.222.162.64	192.168.2.6
Dec 8, 2023 15:22:05.707894087 CET	443	49706	173.222.162.64	192.168.2.6
Dec 8, 2023 15:22:05.707931042 CET	443	49706	173.222.162.64	192.168.2.6
Dec 8, 2023 15:22:05.707942963 CET	49706	443	192.168.2.6	173.222.162.64
Dec 8, 2023 15:22:05.707942963 CET	49706	443	192.168.2.6	173.222.162.64
Dec 8, 2023 15:22:05.707967997 CET	443	49706	173.222.162.64	192.168.2.6
Dec 8, 2023 15:22:05.707974911 CET	49706	443	192.168.2.6	173.222.162.64
Dec 8, 2023 15:22:05.708012104 CET	49706	443	192.168.2.6	173.222.162.64
Dec 8, 2023 15:22:05.788439035 CET	443	49740	20.114.59.183	192.168.2.6
Dec 8, 2023 15:22:05.788578033 CET	49740	443	192.168.2.6	20.114.59.183
Dec 8, 2023 15:22:05.790884018 CET	49740	443	192.168.2.6	20.114.59.183
Dec 8, 2023 15:22:05.790899038 CET	443	49740	20.114.59.183	192.168.2.6
Dec 8, 2023 15:22:05.791224957 CET	443	49740	20.114.59.183	192.168.2.6
Dec 8, 2023 15:22:05.831532955 CET	443	49736	194.26.192.93	192.168.2.6
Dec 8, 2023 15:22:05.831649065 CET	443	49736	194.26.192.93	192.168.2.6
Dec 8, 2023 15:22:05.831736088 CET	49736	443	192.168.2.6	194.26.192.93
Dec 8, 2023 15:22:05.832214117 CET	49736	443	192.168.2.6	194.26.192.93
Dec 8, 2023 15:22:05.832230091 CET	443	49736	194.26.192.93	192.168.2.6
Dec 8, 2023 15:22:05.840373993 CET	49740	443	192.168.2.6	20.114.59.183
Dec 8, 2023 15:22:05.899425983 CET	49740	443	192.168.2.6	20.114.59.183
Dec 8, 2023 15:22:05.932881117 CET	443	49742	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:05.933144093 CET	49742	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:05.933171988 CET	443	49742	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:05.933506966 CET	443	49742	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:05.933792114 CET	49742	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:05.933860064 CET	443	49742	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:05.933933020 CET	49742	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:05.944744110 CET	443	49740	20.114.59.183	192.168.2.6
Dec 8, 2023 15:22:05.948648930 CET	443	49743	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.948921919 CET	49743	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.948940992 CET	443	49743	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.949238062 CET	443	49743	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.949563026 CET	49743	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.949625969 CET	443	49743	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:05.949702978 CET	49743	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:05.980737925 CET	443	49742	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:05.992749929 CET	443	49743	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:06.213943005 CET	443	49742	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:06.213996887 CET	443	49742	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:06.214040995 CET	443	49742	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:06.214050055 CET	49742	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:06.214080095 CET	443	49742	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:06.214119911 CET	443	49742	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:06.214123964 CET	49742	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:06.214164972 CET	49742	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:06.214597940 CET	49742	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:06.214616060 CET	443	49742	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:06.246718884 CET	443	49743	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:06.246836901 CET	443	49743	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:06.247028112 CET	49743	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:06.247613907 CET	49743	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:06.247628927 CET	443	49743	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:06.251303911 CET	49746	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:06.251384974 CET	443	49746	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:06.251466990 CET	49746	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:06.251827955 CET	49746	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:06.251852036 CET	443	49746	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:06.406171083 CET	443	49740	20.114.59.183	192.168.2.6
Dec 8, 2023 15:22:06.406255007 CET	443	49740	20.114.59.183	192.168.2.6
Dec 8, 2023 15:22:06.406276941 CET	443	49740	20.114.59.183	192.168.2.6
Dec 8, 2023 15:22:06.406316996 CET	443	49740	20.114.59.183	192.168.2.6
Dec 8, 2023 15:22:06.406338930 CET	49740	443	192.168.2.6	20.114.59.183
Dec 8, 2023 15:22:06.406362057 CET	443	49740	20.114.59.183	192.168.2.6
Dec 8, 2023 15:22:06.406378984 CET	49740	443	192.168.2.6	20.114.59.183
Dec 8, 2023 15:22:06.406387091 CET	443	49740	20.114.59.183	192.168.2.6
Dec 8, 2023 15:22:06.406421900 CET	49740	443	192.168.2.6	20.114.59.183
Dec 8, 2023 15:22:06.406439066 CET	49740	443	192.168.2.6	20.114.59.183
Dec 8, 2023 15:22:06.406620979 CET	443	49740	20.114.59.183	192.168.2.6
Dec 8, 2023 15:22:06.406692028 CET	49740	443	192.168.2.6	20.114.59.183
Dec 8, 2023 15:22:06.406698942 CET	443	49740	20.114.59.183	192.168.2.6
Dec 8, 2023 15:22:06.406805038 CET	443	49740	20.114.59.183	192.168.2.6
Dec 8, 2023 15:22:06.406863928 CET	49740	443	192.168.2.6	20.114.59.183
Dec 8, 2023 15:22:06.425451040 CET	49740	443	192.168.2.6	20.114.59.183
Dec 8, 2023 15:22:06.425472021 CET	443	49740	20.114.59.183	192.168.2.6
Dec 8, 2023 15:22:06.425520897 CET	49740	443	192.168.2.6	20.114.59.183
Dec 8, 2023 15:22:06.425529003 CET	443	49740	20.114.59.183	192.168.2.6
Dec 8, 2023 15:22:06.528212070 CET	443	49746	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:06.528501034 CET	49746	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:06.528536081 CET	443	49746	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:06.528834105 CET	443	49746	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:06.531724930 CET	49746	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:06.531785965 CET	443	49746	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:06.531909943 CET	49746	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:06.572776079 CET	443	49746	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:06.809447050 CET	443	49746	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:06.809565067 CET	443	49746	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:06.809653997 CET	49746	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:06.882178068 CET	49746	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:06.882253885 CET	443	49746	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:07.423132896 CET	49750	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:07.423161030 CET	443	49750	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:07.423238993 CET	49750	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:07.423566103 CET	49750	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:07.423583984 CET	443	49750	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:07.688195944 CET	443	49750	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:07.688399076 CET	49750	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:07.688411951 CET	443	49750	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:07.689490080 CET	443	49750	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:07.689800024 CET	49750	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:07.689862967 CET	443	49750	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:07.689930916 CET	49750	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:07.736730099 CET	443	49750	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:08.000184059 CET	443	49750	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:08.000274897 CET	443	49750	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:08.000323057 CET	443	49750	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:08.000324011 CET	49750	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:08.000370026 CET	49750	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:08.012317896 CET	49750	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:08.012342930 CET	443	49750	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:08.062869072 CET	49751	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:08.062912941 CET	443	49751	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:08.062978983 CET	49751	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:08.063318968 CET	49751	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:08.063339949 CET	443	49751	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:08.256764889 CET	49752	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:08.256791115 CET	443	49752	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:08.256879091 CET	49752	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:08.257108927 CET	49752	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:08.257124901 CET	443	49752	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:08.315839052 CET	49706	443	192.168.2.6	173.222.162.64
Dec 8, 2023 15:22:08.327716112 CET	443	49751	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:08.327972889 CET	49751	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:08.327992916 CET	443	49751	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:08.329181910 CET	443	49751	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:08.329488039 CET	49751	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:08.329612970 CET	49751	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:08.329619884 CET	443	49751	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:08.329667091 CET	443	49751	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:08.369920969 CET	49751	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:08.503367901 CET	443	49706	173.222.162.64	192.168.2.6
Dec 8, 2023 15:22:08.506268024 CET	443	49706	173.222.162.64	192.168.2.6
Dec 8, 2023 15:22:08.506349087 CET	49706	443	192.168.2.6	173.222.162.64
Dec 8, 2023 15:22:08.533027887 CET	443	49752	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:08.533274889 CET	49752	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:08.533301115 CET	443	49752	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:08.533587933 CET	443	49752	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:08.533926010 CET	49752	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:08.533977985 CET	443	49752	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:08.534060955 CET	49752	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:08.534082890 CET	443	49752	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:08.625199080 CET	443	49751	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:08.625463009 CET	443	49751	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:08.625533104 CET	49751	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:08.626132965 CET	49751	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:08.626151085 CET	443	49751	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:08.629317045 CET	49754	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:08.629338980 CET	443	49754	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:08.629487991 CET	49754	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:08.629621983 CET	49754	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:08.629633904 CET	443	49754	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:08.826742887 CET	443	49752	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:08.826781034 CET	443	49752	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:08.826829910 CET	443	49752	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:08.826867104 CET	49752	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:08.826877117 CET	443	49752	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:08.826941013 CET	49752	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:08.835298061 CET	443	49752	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:08.843987942 CET	443	49752	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:08.844007969 CET	443	49752	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:08.844049931 CET	49752	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:08.844058037 CET	443	49752	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:08.844105959 CET	49752	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:08.849929094 CET	443	49752	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:08.858962059 CET	443	49752	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:08.859038115 CET	49752	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:08.859050989 CET	443	49752	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:08.888863087 CET	443	49754	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:08.890043974 CET	49754	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:08.890058994 CET	443	49754	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:08.890422106 CET	443	49754	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:08.891103029 CET	49754	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:08.891103029 CET	49754	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:08.891165018 CET	443	49754	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:08.912877083 CET	49752	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:08.934756041 CET	49754	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:08.951397896 CET	443	49752	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:08.955724001 CET	443	49752	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:08.955760002 CET	443	49752	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:08.955789089 CET	49752	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:08.955806971 CET	443	49752	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:08.955876112 CET	49752	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:08.964380026 CET	443	49752	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:08.973098993 CET	443	49752	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:08.973169088 CET	49752	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:08.973176003 CET	443	49752	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:08.981795073 CET	443	49752	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:08.981831074 CET	443	49752	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:08.981873989 CET	49752	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:08.981880903 CET	443	49752	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:08.981930017 CET	49752	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:08.990478992 CET	443	49752	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:08.999243021 CET	443	49752	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:08.999269962 CET	443	49752	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:08.999428034 CET	49752	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:08.999434948 CET	443	49752	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:08.999485970 CET	49752	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:09.007858992 CET	443	49752	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:09.015655041 CET	443	49752	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:09.015676975 CET	443	49752	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:09.015738010 CET	49752	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:09.015760899 CET	443	49752	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:09.015990973 CET	49752	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:09.023552895 CET	443	49752	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:09.031460047 CET	443	49752	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:09.031482935 CET	443	49752	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:09.031543016 CET	49752	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:09.031558037 CET	443	49752	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:09.031704903 CET	49752	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:09.039247990 CET	443	49752	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:09.039400101 CET	443	49752	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:09.039462090 CET	49752	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:09.039709091 CET	49752	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:09.039724112 CET	443	49752	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:09.200366974 CET	443	49754	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:09.200659990 CET	443	49754	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:09.200747013 CET	49754	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:09.201324940 CET	49754	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:09.201335907 CET	443	49754	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:09.690726042 CET	49757	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:09.690773964 CET	443	49757	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:09.690862894 CET	49757	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:09.691181898 CET	49757	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:09.691210985 CET	443	49757	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:09.972045898 CET	443	49757	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:09.972412109 CET	49757	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:09.972444057 CET	443	49757	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:09.972768068 CET	443	49757	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:09.973109007 CET	49757	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:09.973176003 CET	443	49757	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:09.973577023 CET	49759	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:09.973618984 CET	49757	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:09.973659039 CET	443	49759	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:09.973810911 CET	49759	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:09.974018097 CET	49759	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:09.974054098 CET	443	49759	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:10.016740084 CET	443	49757	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:10.227355957 CET	443	49757	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:10.227473021 CET	443	49757	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:10.227526903 CET	49757	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:10.227544069 CET	443	49757	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:10.227650881 CET	443	49757	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:10.227698088 CET	49757	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:10.227708101 CET	443	49757	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:10.227785110 CET	443	49757	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:10.227833033 CET	49757	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:10.227839947 CET	443	49757	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:10.235785961 CET	443	49757	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:10.235874891 CET	49757	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:10.235883951 CET	443	49757	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:10.244483948 CET	443	49757	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:10.244576931 CET	49757	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:10.244596958 CET	443	49757	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:10.253216028 CET	443	49757	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:10.253367901 CET	49757	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:10.253384113 CET	443	49757	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:10.259835958 CET	49760	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:10.259871960 CET	443	49760	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:10.259947062 CET	49760	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:10.260683060 CET	49760	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:10.260696888 CET	443	49760	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:10.276439905 CET	443	49759	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:10.277425051 CET	49759	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:10.277456999 CET	443	49759	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:10.278716087 CET	443	49759	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:10.279180050 CET	49759	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:10.279346943 CET	49759	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:10.279360056 CET	443	49759	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:10.279386997 CET	443	49759	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:10.307883978 CET	49757	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:10.307904005 CET	443	49757	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:10.322997093 CET	49759	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:10.352088928 CET	443	49757	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:10.352163076 CET	49757	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:10.352183104 CET	443	49757	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:10.352278948 CET	443	49757	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:10.352333069 CET	49757	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:10.354387045 CET	49757	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:10.354418039 CET	443	49757	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:10.516697884 CET	49762	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:10.516731977 CET	443	49762	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:10.516809940 CET	49762	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:10.517528057 CET	49762	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:10.517541885 CET	443	49762	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:10.526829958 CET	443	49760	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:10.527092934 CET	49760	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:10.527107954 CET	443	49760	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:10.528263092 CET	443	49760	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:10.528594971 CET	49760	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:10.528712034 CET	49760	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:10.528717995 CET	443	49760	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:10.528779984 CET	49760	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:10.528804064 CET	443	49760	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:10.528827906 CET	49760	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:10.528867006 CET	443	49760	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:10.528876066 CET	49760	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:10.528932095 CET	443	49760	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:10.550904989 CET	443	49759	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:10.551070929 CET	443	49759	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:10.551145077 CET	49759	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:10.552819014 CET	49759	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:10.552838087 CET	443	49759	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:10.795497894 CET	443	49762	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:10.795777082 CET	49762	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:10.795790911 CET	443	49762	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:10.796168089 CET	443	49762	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:10.796492100 CET	49762	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:10.796561003 CET	443	49762	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:10.796900988 CET	49763	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:10.796932936 CET	443	49763	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:10.796983957 CET	49762	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:10.797007084 CET	49763	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:10.797230005 CET	49763	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:10.797244072 CET	443	49763	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:10.810297012 CET	443	49760	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:10.810408115 CET	443	49760	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:10.810481071 CET	49760	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:10.810494900 CET	443	49760	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:10.810576916 CET	443	49760	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:10.810636044 CET	49760	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:10.810643911 CET	443	49760	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:10.810734034 CET	443	49760	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:10.810786009 CET	49760	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:10.810794115 CET	443	49760	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:10.810897112 CET	443	49760	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:10.810961008 CET	49760	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:10.810971022 CET	443	49760	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:10.811060905 CET	443	49760	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:10.811113119 CET	49760	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:10.811120987 CET	443	49760	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:10.811239958 CET	443	49760	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:10.811290026 CET	49760	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:10.811297894 CET	443	49760	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:10.811902046 CET	443	49760	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:10.811961889 CET	49760	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:10.811969042 CET	443	49760	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:10.812089920 CET	443	49760	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:10.812150955 CET	49760	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:10.812201023 CET	49760	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:10.812216043 CET	443	49760	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:10.816414118 CET	49764	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:10.816428900 CET	443	49764	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:10.816495895 CET	49764	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:10.816901922 CET	49764	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:10.816915989 CET	443	49764	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:10.844732046 CET	443	49762	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:11.051049948 CET	443	49762	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:11.051151991 CET	443	49762	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:11.051189899 CET	443	49762	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:11.051218033 CET	49762	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:11.051234007 CET	443	49762	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:11.051261902 CET	443	49762	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:11.051282883 CET	49762	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:11.051291943 CET	443	49762	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:11.051347971 CET	49762	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:11.053158998 CET	49762	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:11.053200960 CET	443	49762	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:11.053283930 CET	49762	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:11.078701973 CET	443	49764	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:11.081433058 CET	443	49763	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:11.083358049 CET	49763	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:11.083380938 CET	443	49763	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:11.083556890 CET	49764	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:11.083573103 CET	443	49764	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:11.084059000 CET	443	49764	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:11.085099936 CET	49764	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:11.085163116 CET	443	49764	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:11.085273981 CET	443	49763	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:11.085334063 CET	49763	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:11.085556984 CET	49764	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:11.098105907 CET	49763	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:11.098217964 CET	443	49763	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:11.098331928 CET	49763	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:11.098346949 CET	443	49763	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:11.132744074 CET	443	49764	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:11.150760889 CET	49763	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:11.293021917 CET	49765	443	192.168.2.6	192.178.50.68
Dec 8, 2023 15:22:11.293107033 CET	443	49765	192.178.50.68	192.168.2.6
Dec 8, 2023 15:22:11.293222904 CET	49765	443	192.168.2.6	192.178.50.68
Dec 8, 2023 15:22:11.293795109 CET	49765	443	192.168.2.6	192.178.50.68
Dec 8, 2023 15:22:11.293828964 CET	443	49765	192.178.50.68	192.168.2.6
Dec 8, 2023 15:22:11.365078926 CET	443	49763	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:11.365122080 CET	443	49763	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:11.365154028 CET	443	49763	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:11.365200996 CET	443	49763	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:11.365221977 CET	443	49763	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:11.365331888 CET	49763	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:11.365331888 CET	49763	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:11.365353107 CET	443	49763	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:11.365408897 CET	49763	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:11.373578072 CET	443	49763	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:11.375442028 CET	443	49764	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:11.375566959 CET	443	49764	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:11.375637054 CET	49764	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:11.375894070 CET	443	49763	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:11.375946045 CET	49763	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:11.376280069 CET	49763	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:11.376296043 CET	443	49763	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:11.377232075 CET	49764	443	192.168.2.6	104.17.2.184
Dec 8, 2023 15:22:11.377245903 CET	443	49764	104.17.2.184	192.168.2.6
Dec 8, 2023 15:22:11.572228909 CET	443	49765	192.178.50.68	192.168.2.6
Dec 8, 2023 15:22:11.572670937 CET	49765	443	192.168.2.6	192.178.50.68
Dec 8, 2023 15:22:11.572705030 CET	443	49765	192.178.50.68	192.168.2.6
Dec 8, 2023 15:22:11.573478937 CET	443	49765	192.178.50.68	192.168.2.6
Dec 8, 2023 15:22:11.573555946 CET	49765	443	192.168.2.6	192.178.50.68
Dec 8, 2023 15:22:11.574012995 CET	49765	443	192.168.2.6	192.178.50.68
Dec 8, 2023 15:22:11.574069023 CET	443	49765	192.178.50.68	192.168.2.6
Dec 8, 2023 15:22:11.574177027 CET	49765	443	192.168.2.6	192.178.50.68
Dec 8, 2023 15:22:11.574187040 CET	443	49765	192.178.50.68	192.168.2.6
Dec 8, 2023 15:22:11.619858027 CET	49765	443	192.168.2.6	192.178.50.68
Dec 8, 2023 15:22:11.829446077 CET	443	49765	192.178.50.68	192.168.2.6
Dec 8, 2023 15:22:11.829494953 CET	443	49765	192.178.50.68	192.168.2.6
Dec 8, 2023 15:22:11.829518080 CET	443	49765	192.178.50.68	192.168.2.6
Dec 8, 2023 15:22:11.829544067 CET	443	49765	192.178.50.68	192.168.2.6
Dec 8, 2023 15:22:11.829576969 CET	49765	443	192.168.2.6	192.178.50.68
Dec 8, 2023 15:22:11.829622030 CET	443	49765	192.178.50.68	192.168.2.6
Dec 8, 2023 15:22:11.829657078 CET	49765	443	192.168.2.6	192.178.50.68
Dec 8, 2023 15:22:11.830707073 CET	49765	443	192.168.2.6	192.178.50.68
Dec 8, 2023 15:22:11.830754042 CET	443	49765	192.178.50.68	192.168.2.6
Dec 8, 2023 15:22:11.830811977 CET	49765	443	192.168.2.6	192.178.50.68
Dec 8, 2023 15:22:14.882575035 CET	49766	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:22:14.882608891 CET	443	49766	52.159.126.152	192.168.2.6
Dec 8, 2023 15:22:14.882692099 CET	49766	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:22:14.884447098 CET	49766	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:22:14.884463072 CET	443	49766	52.159.126.152	192.168.2.6
Dec 8, 2023 15:22:15.376305103 CET	443	49766	52.159.126.152	192.168.2.6
Dec 8, 2023 15:22:15.376705885 CET	49766	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:22:15.383301020 CET	49766	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:22:15.383316994 CET	443	49766	52.159.126.152	192.168.2.6
Dec 8, 2023 15:22:15.383646965 CET	443	49766	52.159.126.152	192.168.2.6
Dec 8, 2023 15:22:15.385410070 CET	49766	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:22:15.385478973 CET	49766	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:22:15.385485888 CET	443	49766	52.159.126.152	192.168.2.6
Dec 8, 2023 15:22:15.385627985 CET	49766	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:22:15.432744026 CET	443	49766	52.159.126.152	192.168.2.6
Dec 8, 2023 15:22:15.542104959 CET	443	49766	52.159.126.152	192.168.2.6
Dec 8, 2023 15:22:15.542327881 CET	443	49766	52.159.126.152	192.168.2.6
Dec 8, 2023 15:22:15.542414904 CET	49766	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:22:15.548289061 CET	49766	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:22:15.548335075 CET	443	49766	52.159.126.152	192.168.2.6
Dec 8, 2023 15:22:18.507179976 CET	443	49706	173.222.162.64	192.168.2.6
Dec 8, 2023 15:22:18.507205009 CET	443	49706	173.222.162.64	192.168.2.6
Dec 8, 2023 15:22:18.507220030 CET	443	49706	173.222.162.64	192.168.2.6
Dec 8, 2023 15:22:18.507318974 CET	49706	443	192.168.2.6	173.222.162.64
Dec 8, 2023 15:22:18.507402897 CET	49706	443	192.168.2.6	173.222.162.64
Dec 8, 2023 15:22:34.399195910 CET	49767	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:22:34.399277925 CET	443	49767	52.159.126.152	192.168.2.6
Dec 8, 2023 15:22:34.399422884 CET	49767	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:22:34.401453018 CET	49767	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:22:34.401519060 CET	443	49767	52.159.126.152	192.168.2.6
Dec 8, 2023 15:22:34.892431974 CET	443	49767	52.159.126.152	192.168.2.6
Dec 8, 2023 15:22:34.892568111 CET	49767	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:22:35.037014961 CET	49767	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:22:35.037048101 CET	443	49767	52.159.126.152	192.168.2.6
Dec 8, 2023 15:22:35.038049936 CET	443	49767	52.159.126.152	192.168.2.6
Dec 8, 2023 15:22:35.059802055 CET	49767	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:22:35.059885979 CET	49767	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:22:35.059899092 CET	443	49767	52.159.126.152	192.168.2.6
Dec 8, 2023 15:22:35.060038090 CET	49767	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:22:35.104741096 CET	443	49767	52.159.126.152	192.168.2.6
Dec 8, 2023 15:22:35.218224049 CET	443	49767	52.159.126.152	192.168.2.6
Dec 8, 2023 15:22:35.218434095 CET	443	49767	52.159.126.152	192.168.2.6
Dec 8, 2023 15:22:35.218503952 CET	49767	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:22:35.218632936 CET	49767	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:22:35.218650103 CET	443	49767	52.159.126.152	192.168.2.6
Dec 8, 2023 15:22:43.571082115 CET	49768	443	192.168.2.6	20.114.59.183
Dec 8, 2023 15:22:43.571171045 CET	443	49768	20.114.59.183	192.168.2.6
Dec 8, 2023 15:22:43.571264982 CET	49768	443	192.168.2.6	20.114.59.183
Dec 8, 2023 15:22:43.572781086 CET	49768	443	192.168.2.6	20.114.59.183
Dec 8, 2023 15:22:43.572794914 CET	443	49768	20.114.59.183	192.168.2.6
Dec 8, 2023 15:22:44.224435091 CET	443	49768	20.114.59.183	192.168.2.6
Dec 8, 2023 15:22:44.224596024 CET	49768	443	192.168.2.6	20.114.59.183
Dec 8, 2023 15:22:44.228090048 CET	49768	443	192.168.2.6	20.114.59.183
Dec 8, 2023 15:22:44.228097916 CET	443	49768	20.114.59.183	192.168.2.6
Dec 8, 2023 15:22:44.228492022 CET	443	49768	20.114.59.183	192.168.2.6
Dec 8, 2023 15:22:44.242543936 CET	49768	443	192.168.2.6	20.114.59.183
Dec 8, 2023 15:22:44.284773111 CET	443	49768	20.114.59.183	192.168.2.6
Dec 8, 2023 15:22:44.852950096 CET	443	49768	20.114.59.183	192.168.2.6
Dec 8, 2023 15:22:44.853010893 CET	443	49768	20.114.59.183	192.168.2.6
Dec 8, 2023 15:22:44.853055000 CET	443	49768	20.114.59.183	192.168.2.6
Dec 8, 2023 15:22:44.853096008 CET	49768	443	192.168.2.6	20.114.59.183
Dec 8, 2023 15:22:44.853115082 CET	443	49768	20.114.59.183	192.168.2.6
Dec 8, 2023 15:22:44.853153944 CET	49768	443	192.168.2.6	20.114.59.183
Dec 8, 2023 15:22:44.853195906 CET	49768	443	192.168.2.6	20.114.59.183
Dec 8, 2023 15:22:44.853230000 CET	443	49768	20.114.59.183	192.168.2.6
Dec 8, 2023 15:22:44.853291988 CET	443	49768	20.114.59.183	192.168.2.6
Dec 8, 2023 15:22:44.853297949 CET	49768	443	192.168.2.6	20.114.59.183
Dec 8, 2023 15:22:44.853310108 CET	443	49768	20.114.59.183	192.168.2.6
Dec 8, 2023 15:22:44.853351116 CET	49768	443	192.168.2.6	20.114.59.183
Dec 8, 2023 15:22:44.853358030 CET	443	49768	20.114.59.183	192.168.2.6
Dec 8, 2023 15:22:44.853420973 CET	443	49768	20.114.59.183	192.168.2.6
Dec 8, 2023 15:22:44.853471994 CET	49768	443	192.168.2.6	20.114.59.183
Dec 8, 2023 15:22:44.869927883 CET	49768	443	192.168.2.6	20.114.59.183
Dec 8, 2023 15:22:44.869945049 CET	443	49768	20.114.59.183	192.168.2.6
Dec 8, 2023 15:22:44.869970083 CET	49768	443	192.168.2.6	20.114.59.183
Dec 8, 2023 15:22:44.869976997 CET	443	49768	20.114.59.183	192.168.2.6
Dec 8, 2023 15:22:50.244630098 CET	49739	80	192.168.2.6	172.217.2.195
Dec 8, 2023 15:22:50.369587898 CET	49741	80	192.168.2.6	172.217.2.195
Dec 8, 2023 15:22:50.369927883 CET	80	49739	172.217.2.195	192.168.2.6
Dec 8, 2023 15:22:50.494560003 CET	80	49741	172.217.2.195	192.168.2.6
Dec 8, 2023 15:22:50.650990963 CET	49738	80	192.168.2.6	172.217.2.195
Dec 8, 2023 15:22:50.775638103 CET	80	49738	172.217.2.195	192.168.2.6
Dec 8, 2023 15:22:55.263806105 CET	49770	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:55.263842106 CET	443	49770	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:55.263921022 CET	49770	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:55.264152050 CET	49770	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:55.264168978 CET	443	49770	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:55.546520948 CET	443	49770	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:55.546897888 CET	49770	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:55.546915054 CET	443	49770	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:55.547357082 CET	443	49770	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:55.547750950 CET	49770	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:22:55.547816992 CET	443	49770	142.250.217.228	192.168.2.6
Dec 8, 2023 15:22:55.588561058 CET	49770	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:23:01.076514006 CET	49771	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:23:01.076600075 CET	443	49771	52.159.126.152	192.168.2.6
Dec 8, 2023 15:23:01.076692104 CET	49771	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:23:01.079216003 CET	49771	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:23:01.079267025 CET	443	49771	52.159.126.152	192.168.2.6
Dec 8, 2023 15:23:01.573134899 CET	443	49771	52.159.126.152	192.168.2.6
Dec 8, 2023 15:23:01.573272943 CET	49771	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:23:01.576184034 CET	49771	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:23:01.576208115 CET	443	49771	52.159.126.152	192.168.2.6
Dec 8, 2023 15:23:01.577056885 CET	443	49771	52.159.126.152	192.168.2.6
Dec 8, 2023 15:23:01.579935074 CET	49771	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:23:01.580173969 CET	49771	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:23:01.580187082 CET	443	49771	52.159.126.152	192.168.2.6
Dec 8, 2023 15:23:01.580516100 CET	49771	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:23:01.620763063 CET	443	49771	52.159.126.152	192.168.2.6
Dec 8, 2023 15:23:01.736958981 CET	443	49771	52.159.126.152	192.168.2.6
Dec 8, 2023 15:23:01.737199068 CET	443	49771	52.159.126.152	192.168.2.6
Dec 8, 2023 15:23:01.737310886 CET	49771	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:23:01.737624884 CET	49771	443	192.168.2.6	52.159.126.152
Dec 8, 2023 15:23:01.737656116 CET	443	49771	52.159.126.152	192.168.2.6
Dec 8, 2023 15:23:05.537631989 CET	443	49770	142.250.217.228	192.168.2.6
Dec 8, 2023 15:23:05.537712097 CET	443	49770	142.250.217.228	192.168.2.6
Dec 8, 2023 15:23:05.537796021 CET	49770	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:23:06.903495073 CET	49739	80	192.168.2.6	172.217.2.195
Dec 8, 2023 15:23:06.903537035 CET	49741	80	192.168.2.6	172.217.2.195
Dec 8, 2023 15:23:06.903582096 CET	49770	443	192.168.2.6	142.250.217.228
Dec 8, 2023 15:23:06.903610945 CET	443	49770	142.250.217.228	192.168.2.6
Dec 8, 2023 15:23:07.028539896 CET	80	49741	172.217.2.195	192.168.2.6
Dec 8, 2023 15:23:07.028765917 CET	49741	80	192.168.2.6	172.217.2.195
Dec 8, 2023 15:23:07.031343937 CET	80	49739	172.217.2.195	192.168.2.6
Dec 8, 2023 15:23:07.031491995 CET	49739	80	192.168.2.6	172.217.2.195
Dec 8, 2023 15:23:20.021039963 CET	49772	443	192.168.2.6	192.178.50.46
Dec 8, 2023 15:23:20.021073103 CET	443	49772	192.178.50.46	192.168.2.6
Dec 8, 2023 15:23:20.021147966 CET	49772	443	192.168.2.6	192.178.50.46
Dec 8, 2023 15:23:20.021637917 CET	49772	443	192.168.2.6	192.178.50.46
Dec 8, 2023 15:23:20.021648884 CET	443	49772	192.178.50.46	192.168.2.6
Dec 8, 2023 15:23:20.299628973 CET	443	49772	192.178.50.46	192.168.2.6
Dec 8, 2023 15:23:20.300008059 CET	49772	443	192.168.2.6	192.178.50.46
Dec 8, 2023 15:23:20.300035954 CET	443	49772	192.178.50.46	192.168.2.6
Dec 8, 2023 15:23:20.300446987 CET	443	49772	192.178.50.46	192.168.2.6
Dec 8, 2023 15:23:20.300520897 CET	49772	443	192.168.2.6	192.178.50.46
Dec 8, 2023 15:23:20.301305056 CET	443	49772	192.178.50.46	192.168.2.6
Dec 8, 2023 15:23:20.301378965 CET	49772	443	192.168.2.6	192.178.50.46
Dec 8, 2023 15:23:20.302562952 CET	49772	443	192.168.2.6	192.178.50.46
Dec 8, 2023 15:23:20.302628040 CET	443	49772	192.178.50.46	192.168.2.6
Dec 8, 2023 15:23:20.302750111 CET	49772	443	192.168.2.6	192.178.50.46
Dec 8, 2023 15:23:20.302758932 CET	443	49772	192.178.50.46	192.168.2.6
Dec 8, 2023 15:23:20.354568005 CET	49772	443	192.168.2.6	192.178.50.46
Dec 8, 2023 15:23:20.572582960 CET	443	49772	192.178.50.46	192.168.2.6
Dec 8, 2023 15:23:20.574222088 CET	443	49772	192.178.50.46	192.168.2.6
Dec 8, 2023 15:23:20.574311972 CET	49772	443	192.168.2.6	192.178.50.46
Dec 8, 2023 15:23:20.577188015 CET	49772	443	192.168.2.6	192.178.50.46
Dec 8, 2023 15:23:20.577205896 CET	443	49772	192.178.50.46	192.168.2.6
Dec 8, 2023 15:23:24.652013063 CET	49704	80	192.168.2.6	104.91.175.60
Dec 8, 2023 15:23:24.776596069 CET	80	49704	104.91.175.60	192.168.2.6
Dec 8, 2023 15:23:24.776802063 CET	49704	80	192.168.2.6	104.91.175.60
Dec 8, 2023 15:23:30.991050005 CET	49773	443	192.168.2.6	20.25.241.18
Dec 8, 2023 15:23:30.991092920 CET	443	49773	20.25.241.18	192.168.2.6
Dec 8, 2023 15:23:30.991153002 CET	49773	443	192.168.2.6	20.25.241.18
Dec 8, 2023 15:23:30.992575884 CET	49773	443	192.168.2.6	20.25.241.18
Dec 8, 2023 15:23:30.992588043 CET	443	49773	20.25.241.18	192.168.2.6
Dec 8, 2023 15:23:31.483253002 CET	443	49773	20.25.241.18	192.168.2.6
Dec 8, 2023 15:23:31.483530045 CET	49773	443	192.168.2.6	20.25.241.18
Dec 8, 2023 15:23:31.485949039 CET	49773	443	192.168.2.6	20.25.241.18
Dec 8, 2023 15:23:31.485970020 CET	443	49773	20.25.241.18	192.168.2.6
Dec 8, 2023 15:23:31.486807108 CET	443	49773	20.25.241.18	192.168.2.6
Dec 8, 2023 15:23:31.488751888 CET	49773	443	192.168.2.6	20.25.241.18
Dec 8, 2023 15:23:31.488811970 CET	49773	443	192.168.2.6	20.25.241.18
Dec 8, 2023 15:23:31.488821983 CET	443	49773	20.25.241.18	192.168.2.6
Dec 8, 2023 15:23:31.488965034 CET	49773	443	192.168.2.6	20.25.241.18
Dec 8, 2023 15:23:31.536736012 CET	443	49773	20.25.241.18	192.168.2.6
Dec 8, 2023 15:23:31.645395994 CET	443	49773	20.25.241.18	192.168.2.6
Dec 8, 2023 15:23:31.645610094 CET	443	49773	20.25.241.18	192.168.2.6
Dec 8, 2023 15:23:31.645704985 CET	49773	443	192.168.2.6	20.25.241.18
Dec 8, 2023 15:23:31.645800114 CET	49773	443	192.168.2.6	20.25.241.18
Dec 8, 2023 15:23:31.645819902 CET	443	49773	20.25.241.18	192.168.2.6
Dec 8, 2023 15:23:35.775719881 CET	49738	80	192.168.2.6	172.217.2.195
Dec 8, 2023 15:23:35.900995970 CET	80	49738	172.217.2.195	192.168.2.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 8, 2023 15:21:50.705856085 CET	61455	53	192.168.2.6	1.1.1.1
Dec 8, 2023 15:21:50.706142902 CET	61468	53	192.168.2.6	1.1.1.1
Dec 8, 2023 15:21:50.706687927 CET	63512	53	192.168.2.6	1.1.1.1
Dec 8, 2023 15:21:50.707020998 CET	62143	53	192.168.2.6	1.1.1.1
Dec 8, 2023 15:21:50.822948933 CET	53	64224	1.1.1.1	192.168.2.6
Dec 8, 2023 15:21:50.831237078 CET	53	61468	1.1.1.1	192.168.2.6
Dec 8, 2023 15:21:50.831610918 CET	53	61455	1.1.1.1	192.168.2.6
Dec 8, 2023 15:21:50.832010031 CET	53	63512	1.1.1.1	192.168.2.6
Dec 8, 2023 15:21:50.832031965 CET	53	62143	1.1.1.1	192.168.2.6
Dec 8, 2023 15:21:51.584572077 CET	53	51274	1.1.1.1	192.168.2.6
Dec 8, 2023 15:21:52.741377115 CET	54741	53	192.168.2.6	1.1.1.1
Dec 8, 2023 15:21:52.741811991 CET	55995	53	192.168.2.6	1.1.1.1
Dec 8, 2023 15:21:52.869091988 CET	53	54741	1.1.1.1	192.168.2.6
Dec 8, 2023 15:21:53.095550060 CET	53	55995	1.1.1.1	192.168.2.6
Dec 8, 2023 15:21:53.894277096 CET	57119	53	192.168.2.6	1.1.1.1
Dec 8, 2023 15:21:53.895710945 CET	55791	53	192.168.2.6	1.1.1.1
Dec 8, 2023 15:21:54.021969080 CET	53	57119	1.1.1.1	192.168.2.6
Dec 8, 2023 15:21:54.024106979 CET	53	55791	1.1.1.1	192.168.2.6
Dec 8, 2023 15:21:55.204483032 CET	50002	53	192.168.2.6	1.1.1.1
Dec 8, 2023 15:21:55.204730988 CET	59657	53	192.168.2.6	1.1.1.1
Dec 8, 2023 15:21:55.273164988 CET	49838	53	192.168.2.6	1.1.1.1
Dec 8, 2023 15:21:55.273598909 CET	55915	53	192.168.2.6	1.1.1.1
Dec 8, 2023 15:21:55.329154968 CET	53	50002	1.1.1.1	192.168.2.6
Dec 8, 2023 15:21:55.329725981 CET	53	59657	1.1.1.1	192.168.2.6
Dec 8, 2023 15:21:55.446815014 CET	53	55915	1.1.1.1	192.168.2.6
Dec 8, 2023 15:21:55.447280884 CET	53	49838	1.1.1.1	192.168.2.6
Dec 8, 2023 15:21:56.903817892 CET	59635	53	192.168.2.6	1.1.1.1
Dec 8, 2023 15:21:56.904211044 CET	62128	53	192.168.2.6	1.1.1.1
Dec 8, 2023 15:21:57.058923006 CET	53	62128	1.1.1.1	192.168.2.6
Dec 8, 2023 15:21:57.060360909 CET	53	59635	1.1.1.1	192.168.2.6
Dec 8, 2023 15:21:58.781507969 CET	55851	53	192.168.2.6	1.1.1.1
Dec 8, 2023 15:21:58.781802893 CET	52345	53	192.168.2.6	1.1.1.1
Dec 8, 2023 15:21:58.796876907 CET	62757	53	192.168.2.6	1.1.1.1
Dec 8, 2023 15:21:58.797182083 CET	60180	53	192.168.2.6	1.1.1.1
Dec 8, 2023 15:21:58.923015118 CET	53	62757	1.1.1.1	192.168.2.6
Dec 8, 2023 15:21:58.944667101 CET	53	52345	1.1.1.1	192.168.2.6
Dec 8, 2023 15:21:58.952828884 CET	53	60180	1.1.1.1	192.168.2.6
Dec 8, 2023 15:21:59.114192963 CET	53	55851	1.1.1.1	192.168.2.6
Dec 8, 2023 15:22:00.391859055 CET	65237	53	192.168.2.6	1.1.1.1
Dec 8, 2023 15:22:00.397000074 CET	60818	53	192.168.2.6	1.1.1.1
Dec 8, 2023 15:22:00.517596960 CET	53	65237	1.1.1.1	192.168.2.6
Dec 8, 2023 15:22:00.522574902 CET	53	60818	1.1.1.1	192.168.2.6
Dec 8, 2023 15:22:03.257755041 CET	60289	53	192.168.2.6	1.1.1.1
Dec 8, 2023 15:22:03.258327007 CET	49819	53	192.168.2.6	1.1.1.1
Dec 8, 2023 15:22:03.383467913 CET	53	60289	1.1.1.1	192.168.2.6
Dec 8, 2023 15:22:03.384392023 CET	53	49819	1.1.1.1	192.168.2.6
Dec 8, 2023 15:22:04.635898113 CET	57483	53	192.168.2.6	1.1.1.1
Dec 8, 2023 15:22:04.636176109 CET	55869	53	192.168.2.6	1.1.1.1
Dec 8, 2023 15:22:04.761756897 CET	53	57483	1.1.1.1	192.168.2.6
Dec 8, 2023 15:22:04.761898041 CET	53	55869	1.1.1.1	192.168.2.6
Dec 8, 2023 15:22:04.961160898 CET	64169	53	192.168.2.6	1.1.1.1
Dec 8, 2023 15:22:04.961492062 CET	50118	53	192.168.2.6	1.1.1.1
Dec 8, 2023 15:22:05.086422920 CET	53	64169	1.1.1.1	192.168.2.6
Dec 8, 2023 15:22:05.111462116 CET	53	50118	1.1.1.1	192.168.2.6
Dec 8, 2023 15:22:07.018832922 CET	53	62544	1.1.1.1	192.168.2.6
Dec 8, 2023 15:22:08.456473112 CET	53	52751	1.1.1.1	192.168.2.6
Dec 8, 2023 15:22:09.167970896 CET	53	61683	1.1.1.1	192.168.2.6
Dec 8, 2023 15:22:09.872596025 CET	53	64033	1.1.1.1	192.168.2.6
Dec 8, 2023 15:22:10.352380037 CET	53	53652	1.1.1.1	192.168.2.6
Dec 8, 2023 15:22:11.166419029 CET	49833	53	192.168.2.6	1.1.1.1
Dec 8, 2023 15:22:11.166929960 CET	58944	53	192.168.2.6	1.1.1.1
Dec 8, 2023 15:22:11.291872978 CET	53	58944	1.1.1.1	192.168.2.6
Dec 8, 2023 15:22:11.292057037 CET	53	49833	1.1.1.1	192.168.2.6
Dec 8, 2023 15:22:28.176673889 CET	53	58174	1.1.1.1	192.168.2.6
Dec 8, 2023 15:22:50.452550888 CET	53	55541	1.1.1.1	192.168.2.6
Dec 8, 2023 15:22:50.715500116 CET	53	61514	1.1.1.1	192.168.2.6
Dec 8, 2023 15:23:19.121078014 CET	53	65499	1.1.1.1	192.168.2.6
Dec 8, 2023 15:23:19.894685030 CET	60393	53	192.168.2.6	1.1.1.1
Dec 8, 2023 15:23:19.894946098 CET	64206	53	192.168.2.6	1.1.1.1
Dec 8, 2023 15:23:20.020049095 CET	53	60393	1.1.1.1	192.168.2.6
Dec 8, 2023 15:23:20.020298958 CET	53	64206	1.1.1.1	192.168.2.6

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 8, 2023 15:21:53.095696926 CET	192.168.2.6	1.1.1.1	c21e	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 8, 2023 15:21:50.705856085 CET	192.168.2.6	1.1.1.1	0xe7f	Standard query (0)	clients2.google.com	A (IP address)	IN (0x0001)	false
Dec 8, 2023 15:21:50.706142902 CET	192.168.2.6	1.1.1.1	0x58f9	Standard query (0)	clients2.google.com	65	IN (0x0001)	false
Dec 8, 2023 15:21:50.706687927 CET	192.168.2.6	1.1.1.1	0xf6fe	Standard query (0)	accounts.google.com	A (IP address)	IN (0x0001)	false
Dec 8, 2023 15:21:50.707020998 CET	192.168.2.6	1.1.1.1	0x9294	Standard query (0)	accounts.google.com	65	IN (0x0001)	false
Dec 8, 2023 15:21:52.741377115 CET	192.168.2.6	1.1.1.1	0xbfc9	Standard query (0)	cmax.co.uk	A (IP address)	IN (0x0001)	false
Dec 8, 2023 15:21:52.741811991 CET	192.168.2.6	1.1.1.1	0xcf74	Standard query (0)	cmax.co.uk	65	IN (0x0001)	false
Dec 8, 2023 15:21:53.894277096 CET	192.168.2.6	1.1.1.1	0x6bd9	Standard query (0)	pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev	A (IP address)	IN (0x0001)	false
Dec 8, 2023 15:21:53.895710945 CET	192.168.2.6	1.1.1.1	0x61be	Standard query (0)	pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev	65	IN (0x0001)	false
Dec 8, 2023 15:21:55.204483032 CET	192.168.2.6	1.1.1.1	0x529e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 8, 2023 15:21:55.204730988 CET	192.168.2.6	1.1.1.1	0xc1d	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 8, 2023 15:21:55.273164988 CET	192.168.2.6	1.1.1.1	0xe39b	Standard query (0)	www.netjetseurope.com	A (IP address)	IN (0x0001)	false
Dec 8, 2023 15:21:55.273598909 CET	192.168.2.6	1.1.1.1	0xb21b	Standard query (0)	www.netjetseurope.com	65	IN (0x0001)	false
Dec 8, 2023 15:21:56.903817892 CET	192.168.2.6	1.1.1.1	0xebb4	Standard query (0)	www.netjets.com	A (IP address)	IN (0x0001)	false
Dec 8, 2023 15:21:56.904211044 CET	192.168.2.6	1.1.1.1	0x4ef4	Standard query (0)	www.netjets.com	65	IN (0x0001)	false
Dec 8, 2023 15:21:58.781507969 CET	192.168.2.6	1.1.1.1	0xd6f7	Standard query (0)	yellowtelecomms.com	A (IP address)	IN (0x0001)	false
Dec 8, 2023 15:21:58.781802893 CET	192.168.2.6	1.1.1.1	0x6363	Standard query (0)	yellowtelecomms.com	65	IN (0x0001)	false
Dec 8, 2023 15:21:58.796876907 CET	192.168.2.6	1.1.1.1	0x220e	Standard query (0)	www.netjets.com	A (IP address)	IN (0x0001)	false
Dec 8, 2023 15:21:58.797182083 CET	192.168.2.6	1.1.1.1	0x8c07	Standard query (0)	www.netjets.com	65	IN (0x0001)	false
Dec 8, 2023 15:22:00.391859055 CET	192.168.2.6	1.1.1.1	0xb081	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 8, 2023 15:22:00.397000074 CET	192.168.2.6	1.1.1.1	0x1f71	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Dec 8, 2023 15:22:03.257755041 CET	192.168.2.6	1.1.1.1	0xdbf6	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 8, 2023 15:22:03.258327007 CET	192.168.2.6	1.1.1.1	0xe5b8	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Dec 8, 2023 15:22:04.635898113 CET	192.168.2.6	1.1.1.1	0xbbbf	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 8, 2023 15:22:04.636176109 CET	192.168.2.6	1.1.1.1	0x7219	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Dec 8, 2023 15:22:04.961160898 CET	192.168.2.6	1.1.1.1	0x6877	Standard query (0)	google.co.uk	A (IP address)	IN (0x0001)	false
Dec 8, 2023 15:22:04.961492062 CET	192.168.2.6	1.1.1.1	0x90a6	Standard query (0)	google.co.uk	65	IN (0x0001)	false
Dec 8, 2023 15:22:11.166419029 CET	192.168.2.6	1.1.1.1	0xe9c6	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 8, 2023 15:22:11.166929960 CET	192.168.2.6	1.1.1.1	0x2ff6	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 8, 2023 15:23:19.894685030 CET	192.168.2.6	1.1.1.1	0x818b	Standard query (0)	clients1.google.com	A (IP address)	IN (0x0001)	false
Dec 8, 2023 15:23:19.894946098 CET	192.168.2.6	1.1.1.1	0xda9c	Standard query (0)	clients1.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 8, 2023 15:21:50.831237078 CET	1.1.1.1	192.168.2.6	0x58f9	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 8, 2023 15:21:50.831610918 CET	1.1.1.1	192.168.2.6	0xe7f	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 8, 2023 15:21:50.831610918 CET	1.1.1.1	192.168.2.6	0xe7f	No error (0)	clients.l.google.com		192.178.50.46	A (IP address)	IN (0x0001)	false
Dec 8, 2023 15:21:50.832010031 CET	1.1.1.1	192.168.2.6	0xf6fe	No error (0)	accounts.google.com		142.250.217.173	A (IP address)	IN (0x0001)	false
Dec 8, 2023 15:21:52.869091988 CET	1.1.1.1	192.168.2.6	0xbfc9	No error (0)	cmax.co.uk		62.182.22.52	A (IP address)	IN (0x0001)	false
Dec 8, 2023 15:21:54.021969080 CET	1.1.1.1	192.168.2.6	0x6bd9	No error (0)	pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev		104.18.3.35	A (IP address)	IN (0x0001)	false
Dec 8, 2023 15:21:54.021969080 CET	1.1.1.1	192.168.2.6	0x6bd9	No error (0)	pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev		104.18.2.35	A (IP address)	IN (0x0001)	false
Dec 8, 2023 15:21:55.329154968 CET	1.1.1.1	192.168.2.6	0x529e	No error (0)	www.google.com		142.250.217.228	A (IP address)	IN (0x0001)	false
Dec 8, 2023 15:21:55.329725981 CET	1.1.1.1	192.168.2.6	0xc1d	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 8, 2023 15:21:55.447280884 CET	1.1.1.1	192.168.2.6	0xe39b	No error (0)	www.netjetseurope.com		54.77.133.128	A (IP address)	IN (0x0001)	false
Dec 8, 2023 15:21:55.447280884 CET	1.1.1.1	192.168.2.6	0xe39b	No error (0)	www.netjetseurope.com		34.252.235.88	A (IP address)	IN (0x0001)	false
Dec 8, 2023 15:21:57.058923006 CET	1.1.1.1	192.168.2.6	0x4ef4	No error (0)	www.netjets.com	www.aws.netjets.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 8, 2023 15:21:57.060360909 CET	1.1.1.1	192.168.2.6	0xebb4	No error (0)	www.netjets.com	www.aws.netjets.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 8, 2023 15:21:57.060360909 CET	1.1.1.1	192.168.2.6	0xebb4	No error (0)	www.aws.netjets.com		18.239.225.76	A (IP address)	IN (0x0001)	false
Dec 8, 2023 15:21:57.060360909 CET	1.1.1.1	192.168.2.6	0xebb4	No error (0)	www.aws.netjets.com		18.239.225.38	A (IP address)	IN (0x0001)	false
Dec 8, 2023 15:21:57.060360909 CET	1.1.1.1	192.168.2.6	0xebb4	No error (0)	www.aws.netjets.com		18.239.225.39	A (IP address)	IN (0x0001)	false
Dec 8, 2023 15:21:57.060360909 CET	1.1.1.1	192.168.2.6	0xebb4	No error (0)	www.aws.netjets.com		18.239.225.66	A (IP address)	IN (0x0001)	false
Dec 8, 2023 15:21:58.923015118 CET	1.1.1.1	192.168.2.6	0x220e	No error (0)	www.netjets.com	www.aws.netjets.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 8, 2023 15:21:58.923015118 CET	1.1.1.1	192.168.2.6	0x220e	No error (0)	www.aws.netjets.com		18.239.225.66	A (IP address)	IN (0x0001)	false
Dec 8, 2023 15:21:58.923015118 CET	1.1.1.1	192.168.2.6	0x220e	No error (0)	www.aws.netjets.com		18.239.225.38	A (IP address)	IN (0x0001)	false
Dec 8, 2023 15:21:58.923015118 CET	1.1.1.1	192.168.2.6	0x220e	No error (0)	www.aws.netjets.com		18.239.225.39	A (IP address)	IN (0x0001)	false
Dec 8, 2023 15:21:58.923015118 CET	1.1.1.1	192.168.2.6	0x220e	No error (0)	www.aws.netjets.com		18.239.225.76	A (IP address)	IN (0x0001)	false
Dec 8, 2023 15:21:58.952828884 CET	1.1.1.1	192.168.2.6	0x8c07	No error (0)	www.netjets.com	www.aws.netjets.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 8, 2023 15:21:59.114192963 CET	1.1.1.1	192.168.2.6	0xd6f7	No error (0)	yellowtelecomms.com		194.26.192.93	A (IP address)	IN (0x0001)	false
Dec 8, 2023 15:22:00.517596960 CET	1.1.1.1	192.168.2.6	0xb081	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Dec 8, 2023 15:22:00.517596960 CET	1.1.1.1	192.168.2.6	0xb081	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Dec 8, 2023 15:22:00.522574902 CET	1.1.1.1	192.168.2.6	0x1f71	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Dec 8, 2023 15:22:03.383467913 CET	1.1.1.1	192.168.2.6	0xdbf6	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Dec 8, 2023 15:22:03.383467913 CET	1.1.1.1	192.168.2.6	0xdbf6	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Dec 8, 2023 15:22:03.384392023 CET	1.1.1.1	192.168.2.6	0xe5b8	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Dec 8, 2023 15:22:04.761756897 CET	1.1.1.1	192.168.2.6	0xbbbf	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Dec 8, 2023 15:22:04.761756897 CET	1.1.1.1	192.168.2.6	0xbbbf	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Dec 8, 2023 15:22:04.761898041 CET	1.1.1.1	192.168.2.6	0x7219	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Dec 8, 2023 15:22:05.086422920 CET	1.1.1.1	192.168.2.6	0x6877	No error (0)	google.co.uk		172.217.2.195	A (IP address)	IN (0x0001)	false
Dec 8, 2023 15:22:11.291872978 CET	1.1.1.1	192.168.2.6	0x2ff6	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 8, 2023 15:22:11.292057037 CET	1.1.1.1	192.168.2.6	0xe9c6	No error (0)	www.google.com		192.178.50.68	A (IP address)	IN (0x0001)	false
Dec 8, 2023 15:23:20.020049095 CET	1.1.1.1	192.168.2.6	0x818b	No error (0)	clients1.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 8, 2023 15:23:20.020049095 CET	1.1.1.1	192.168.2.6	0x818b	No error (0)	clients.l.google.com		192.178.50.46	A (IP address)	IN (0x0001)	false
Dec 8, 2023 15:23:20.020298958 CET	1.1.1.1	192.168.2.6	0xda9c	No error (0)	clients1.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

clients2.google.com

accounts.google.com

cmax.co.uk

pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev

fs.microsoft.com

https:

www.netjetseurope.com

www.netjets.com

yellowtelecomms.com

challenges.cloudflare.com

www.google.com

slscr.update.microsoft.com

clients1.google.com

google.co.uk

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49738	172.217.2.195	80	1916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 8, 2023 15:22:05.236716986 CET	427	OUT	GET / HTTP/1.1 Host: google.co.uk Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Dec 8, 2023 15:22:05.648277998 CET	1286	IN	HTTP/1.1 302 Found Location: http://www.google.com/sorry/index?continue=http://google.co.uk/&q=EgRmgZjUGI3NzKsGIjCnPpvWLbXDb183drVmgfJaSuOR6afn9EaOWYnUbyGbs7c--C6gg1mEUAh9LvwzP6MyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM x-hallmonitor-challenge: CgwIjc3MqwYQ_q6hiwISBGaBmNQ Content-Type: text/html; charset=UTF-8 Content-Security-Policy-Report-Only: object-src 'none';base-uri 'self';script-src 'nonce-r9duywB4_am7WMZVuRnLHA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFp Data Raw: Data Ascii:
Dec 8, 2023 15:22:05.648313999 CET	833	IN	Data Raw: 69 49 36 64 48 4a 31 5a 58 30 3d 0d 0a 44 61 74 65 3a 20 46 72 69 2c 20 30 38 20 44 65 63 20 32 30 32 33 20 31 34 3a 32 32 3a 30 35 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 67 77 73 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 39 34 Data Ascii: iI6dHJ1ZX0=Date: Fri, 08 Dec 2023 14:22:05 GMTServer: gwsContent-Length: 394X-XSS-Protection: 0X-Frame-Options: SAMEORIGINSet-Cookie: 1P_JAR=2023-12-08-14; expires=Sun, 07-Jan-2024 14:22:05 GMT; path=/; domain=.google.co.uk; Secure
Dec 8, 2023 15:22:50.650990963 CET	6	OUT	Data Raw: 00 Data Ascii:
Dec 8, 2023 15:23:35.775719881 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49739	172.217.2.195	80	1916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 8, 2023 15:22:50.244630098 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49741	172.217.2.195	80	1916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 8, 2023 15:22:50.369587898 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Connections

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Dec 8, 2023 15:22:05.707931042 CET	173.222.162.64	443	192.168.2.6	49706	CN=r.bing.com, O=Microsoft Corporation, L=Redmond, ST=WA, C=US CN=Microsoft Azure ECC TLS Issuing CA 05, O=Microsoft Corporation, C=US	CN=Microsoft Azure ECC TLS Issuing CA 05, O=Microsoft Corporation, C=US CN=DigiCert Global Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Oct 18 22:32:40 CEST 2023 Wed Aug 12 02:00:00 CEST 2020	Fri Jun 28 01:59:59 CEST 2024 Fri Jun 28 01:59:59 CEST 2024	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-5-10-11-13-35-16-23-65281,29-23-24,0	28a2c9bd18a11de089ef85a160da29e4
Dec 8, 2023 15:22:05.707931042 CET	173.222.162.64	443	192.168.2.6	49706	CN=Microsoft Azure ECC TLS Issuing CA 05, O=Microsoft Corporation, C=US	CN=DigiCert Global Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Aug 12 02:00:00 CEST 2020	Fri Jun 28 01:59:59 CEST 2024		28a2c9bd18a11de089ef85a160da29e4

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49709	192.178.50.46	443	1916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-08 14:21:51 UTC	752	OUT	GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.134&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1 Host: clients2.google.com Connection: keep-alive X-Goog-Update-Interactivity: fg X-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda X-Goog-Update-Updater: chromecrx-117.0.5938.134 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-08 14:21:51 UTC	732	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 73 63 72 69 70 74 2d 73 72 63 20 27 72 65 70 6f 72 74 2d 73 61 6d 70 6c 65 27 20 27 6e 6f 6e 63 65 2d 41 4b 58 30 67 5a 62 73 30 49 36 52 42 7a 64 72 57 73 6e 70 59 41 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 73 74 72 69 63 74 2d 64 79 6e 61 6d 69 63 27 20 68 74 74 70 73 3a 20 68 74 74 70 3a 3b 6f 62 6a 65 63 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 72 65 70 6f 72 74 2d 75 72 69 20 68 74 74 70 73 3a 2f 2f 63 73 70 2e 77 69 74 68 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 73 70 2f 63 6c 69 65 6e 74 75 70 64 61 74 65 2d 61 75 73 2f 31 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c Data Ascii: HTTP/1.1 200 OKContent-Security-Policy: script-src 'report-sample' 'nonce-AKX0gZbs0I6RBzdrWsnpYA' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1Cache-Control
2023-12-08 14:21:51 UTC	520	IN	Data Raw: 32 63 39 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 36 31 38 35 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 32 32 39 31 31 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 Data Ascii: 2c9<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="6185" elapsed_seconds="22911"/><app appid="nmmhkkegccagdldgiimedpiccmgmieda" cohort="1::" cohortname=""
2023-12-08 14:21:51 UTC	200	IN	Data Raw: 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 7a 65 3d 22 32 34 38 35 33 31 22 20 73 74 61 74 75 73 3d 22 6f 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 2e 30 2e 36 22 2f 3e 3c 2f 61 70 70 3e 3c 2f 67 75 70 64 61 74 65 3e 0d 0a Data Ascii: 723f56b8717175c536685c5450122b30789464ad82" hash_sha256="81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" protected="0" size="248531" status="ok" version="1.0.0.6"/></app></gupdate>
2023-12-08 14:21:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49710	142.250.217.173	443	1916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-08 14:21:51 UTC	680	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=UBeNCkZ3L8yXcx8qh4JFUXkwkNC9IrdiRdbjSTjqSiFh8WrRcbKr_rOJbgHY6TA4RT-6ps0bhemfwCPBsLMgPT7-gTcWqHvZvZbafOpkqRy0dLyYG9AjP2vbUBomarnc9pcZVlhHkUeUaWMurD0GGXyW05_B_1IyUNYEELmyqRg
2023-12-08 14:21:51 UTC	1	OUT	Data Raw: 20 Data Ascii:
2023-12-08 14:21:51 UTC	1627	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 43 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 50 72 Data Ascii: HTTP/1.1 200 OKContent-Type: application/json; charset=utf-8Access-Control-Allow-Origin: https://www.google.comAccess-Control-Allow-Credentials: trueX-Content-Type-Options: nosniffCache-Control: no-cache, no-store, max-age=0, must-revalidatePr
2023-12-08 14:21:51 UTC	23	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2023-12-08 14:21:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49713	62.182.22.52	443	1916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-08 14:21:53 UTC	659	OUT	GET /qw.PDF HTTP/1.1 Host: cmax.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-08 14:21:53 UTC	404	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 37 30 37 0d 0a 64 61 74 65 3a 20 46 72 69 2c 20 30 38 20 44 65 63 20 32 30 32 33 20 31 34 3a 32 31 3a 35 33 20 47 4d 54 0d 0a 73 65 72 76 65 72 3a 20 4c 69 74 65 53 70 65 65 64 0d 0a 6c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 70 75 62 2d 64 33 62 38 37 37 39 62 36 63 65 61 34 63 36 64 61 39 33 63 61 64 36 63 36 62 32 30 66 36 32 30 2e 72 32 2e 64 65 76 2f 44 46 2e 68 74 6d 6c 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 32 35 39 32 30 30 30 2c Data Ascii: HTTP/1.1 301 Moved PermanentlyConnection: closecontent-type: text/htmlcontent-length: 707date: Fri, 08 Dec 2023 14:21:53 GMTserver: LiteSpeedlocation: https://pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev/DF.htmlalt-svc: h3=":443"; ma=2592000,
2023-12-08 14:21:53 UTC	707	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 301 Moved Permanently</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helv

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.6	49717	52.159.126.152	443

Timestamp	Bytes transferred	Direction	Data
2023-12-08 14:21:54 UTC	70	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 34 0d 0a 4d 53 2d 43 56 3a 20 55 68 4c 42 34 31 63 69 5a 45 61 64 4f 70 6d 7a 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 64 38 61 39 36 34 37 38 63 66 65 37 31 33 0d 0a 0d 0a Data Ascii: CNT 1 CON 304MS-CV: UhLB41ciZEadOpmz.1Context: 7d8a96478cfe713
2023-12-08 14:21:54 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2023-12-08 14:21:54 UTC	1075	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 35 32 0d 0a 4d 53 2d 43 56 3a 20 55 68 4c 42 34 31 63 69 5a 45 61 64 4f 70 6d 7a 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 64 38 61 39 36 34 37 38 63 66 65 37 31 33 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 48 67 55 7a 54 6a 67 77 42 38 4e 4e 64 66 54 51 74 6e 77 54 7a 53 6d 79 71 74 30 44 6d 46 47 64 70 41 64 72 4e 61 53 6b 46 6f 77 7a 51 6e 59 50 59 36 65 55 63 74 58 4a 70 58 42 56 30 65 6d 4e 4e 69 57 5a 34 57 2b 51 6e 38 74 42 2f 65 6a 53 62 77 59 34 53 43 5a 6c 4e 6b 41 33 75 74 55 6b 77 52 41 38 61 4b 6d 58 6e 43 37 31 70 Data Ascii: ATH 2 CON\DEVICE 1052MS-CV: UhLB41ciZEadOpmz.2Context: 7d8a96478cfe713<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAWHgUzTjgwB8NNdfTQtnwTzSmyqt0DmFGdpAdrNaSkFowzQnYPY6eUctXJpXBV0emNNiWZ4W+Qn8tB/ejSbwY4SCZlNkA3utUkwRA8aKmXnC71p
2023-12-08 14:21:54 UTC	217	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 36 0d 0a 4d 53 2d 43 56 3a 20 55 68 4c 42 34 31 63 69 5a 45 61 64 4f 70 6d 7a 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 64 38 61 39 36 34 37 38 63 66 65 37 31 33 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 196MS-CV: UhLB41ciZEadOpmz.3Context: 7d8a96478cfe713<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2023-12-08 14:21:54 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2023-12-08 14:21:54 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 50 61 4c 55 30 43 36 75 43 45 61 72 41 66 36 50 6a 50 62 71 6d 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: PaLU0C6uCEarAf6PjPbqmA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49718	104.18.3.35	443	1916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-08 14:21:54 UTC	693	OUT	GET /DF.html HTTP/1.1 Host: pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-08 14:21:54 UTC	282	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 46 72 69 2c 20 30 38 20 44 65 63 20 32 30 32 33 20 31 34 3a 32 31 3a 35 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 34 33 36 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 45 54 61 67 3a 20 22 34 37 31 66 36 36 38 64 37 64 36 32 63 37 35 61 31 62 34 37 61 33 62 62 64 62 31 62 61 39 61 32 22 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 4d 6f 6e 2c 20 32 37 20 4e 6f 76 20 32 30 32 33 20 30 37 3a 32 32 3a 34 36 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 Data Ascii: HTTP/1.1 200 OKDate: Fri, 08 Dec 2023 14:21:54 GMTContent-Type: text/htmlContent-Length: 4363Connection: closeAccept-Ranges: bytesETag: "471f668d7d62c75a1b47a3bbdb1ba9a2"Last-Modified: Mon, 27 Nov 2023 07:22:46 GMTServer: cloudflareCF-RA
2023-12-08 14:21:54 UTC	1087	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 0d 0a 3c 42 4f 44 59 20 62 67 63 6f 6c 6f 72 3d 22 23 46 46 46 46 46 46 22 3e 0d 0a 3c 66 6f 6e 74 20 66 61 63 65 3d 22 41 72 69 61 6c 22 63 6f 6c 6f 72 3d 22 23 30 30 30 30 30 30 22 73 69 7a 65 3d 22 32 22 3e 0d 0a 3c 70 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 6e 65 74 6a 65 74 73 65 75 72 6f 70 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 6e 6a 5f 6c 6f 67 6f 2e 67 69 66 22 20 61 6c 69 67 6e 3d 22 72 69 67 68 74 22 20 41 4c 54 3d 22 4e 65 74 4a 65 74 73 22 3e 3c 62 72 20 63 6c 65 61 72 3d 22 61 6c 6c 22 3e 3c 62 72 3e 3c 62 72 3e 3c 62 72 3e 0d 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 Data Ascii: <!DOCTYPE html><html><head><BODY bgcolor="#FFFFFF"><font face="Arial"color="#000000"size="2"><p><img src="http://www.netjetseurope.com/images/nj_logo.gif" align="right" ALT="NetJets"><br clear="all"><br><br><br><p align="center"><font face="
2023-12-08 14:21:54 UTC	1369	IN	Data Raw: 31 3c 2f 66 6f 6e 74 3e 3c 2f 74 64 3e 3c 2f 74 72 3e 0d 0a 3c 74 72 3e 3c 74 64 20 61 6c 69 67 6e 3d 22 6c 65 66 74 22 77 69 64 74 68 3d 22 35 30 25 22 20 62 67 63 6f 6c 6f 72 3d 22 23 33 46 32 43 32 33 22 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 41 72 69 61 6c 22 63 6f 6c 6f 72 3d 22 57 68 69 74 65 22 73 69 7a 65 3d 22 32 22 3e 3c 62 3e 50 61 69 64 20 54 6f 3a 20 3c 2f 62 3e 3c 2f 66 6f 6e 74 3e 3c 2f 74 64 3e 0d 0a 3c 74 64 20 61 6c 69 67 6e 3d 22 72 69 67 68 74 22 77 69 64 74 68 3d 22 35 30 25 22 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 41 72 69 61 6c 22 63 6f 6c 6f 72 3d 22 23 30 30 30 30 30 30 22 73 69 7a 65 3d 22 32 22 3e 49 6e 66 6c 69 74 65 20 54 68 65 20 4a 65 74 20 43 65 6e 74 72 65 3c 2f 66 6f 6e 74 3e 3c 2f 74 64 3e 3c 2f 74 72 3e 0d 0a 3c 74 64 Data Ascii: 1</font></td></tr><tr><td align="left"width="50%" bgcolor="#3F2C23"><font face="Arial"color="White"size="2"><b>Paid To: </b></font></td><td align="right"width="50%"><font face="Arial"color="#000000"size="2">Inflite The Jet Centre</font></td></tr><td
2023-12-08 14:21:54 UTC	1369	IN	Data Raw: 6d 6f 75 6e 74 3c 2f 62 3e 3c 2f 66 6f 6e 74 3e 3c 2f 74 64 3e 0d 0a 3c 74 64 20 77 69 64 74 68 3d 22 31 32 25 22 61 6c 69 67 6e 3d 22 72 69 67 68 74 22 62 67 63 6f 6c 6f 72 3d 22 23 33 46 32 43 32 33 22 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 41 72 69 61 6c 22 63 6f 6c 6f 72 3d 22 57 68 69 74 65 22 73 69 7a 65 3d 22 32 22 3e 3c 62 3e 43 72 65 64 69 74 3c 2f 62 3e 3c 2f 66 6f 6e 74 3e 3c 2f 74 64 3e 0d 0a 3c 74 64 20 77 69 64 74 68 3d 22 31 32 25 22 61 6c 69 67 6e 3d 22 72 69 67 68 74 22 62 67 63 6f 6c 6f 72 3d 22 23 33 46 32 43 32 33 22 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 41 72 69 61 6c 22 63 6f 6c 6f 72 3d 22 57 68 69 74 65 22 73 69 7a 65 3d 22 32 22 3e 3c 62 3e 44 65 62 69 74 3c 2f 62 3e 3c 2f 66 6f 6e 74 3e 3c 2f 74 64 3e 0d 0a 3c 74 64 20 77 69 64 Data Ascii: mount</b></font></td><td width="12%"align="right"bgcolor="#3F2C23"><font face="Arial"color="White"size="2"><b>Credit</b></font></td><td width="12%"align="right"bgcolor="#3F2C23"><font face="Arial"color="White"size="2"><b>Debit</b></font></td><td wid
2023-12-08 14:21:54 UTC	538	IN	Data Raw: 3a 22 3e 3c 2f 61 3e 3c 2f 66 6f 6e 74 3e 3c 2f 74 64 3e 0d 0a 3c 74 64 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 41 72 69 61 6c 22 73 69 7a 65 3d 22 32 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 67 6f 6f 67 6c 65 2e 63 6f 2e 75 6b 22 3e 4e 65 74 4a 65 74 73 3c 2f 61 3e 3c 2f 66 6f 6e 74 3e 3c 2f 74 64 3e 0d 0a 3c 2f 74 72 3e 3c 2f 74 61 62 6c 65 3e 3c 2f 70 3e 3c 2f 66 6f 6e 74 3e 0d 0a 3c 2f 74 72 3e 3c 2f 74 61 62 6c 65 3e 3c 2f 70 3e 3c 2f 66 6f 6e 74 3e 0d 0a 3c 2f 42 4f 44 59 3e 0d 0a 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 20 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 2e 63 6f 2e 75 6b 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 Data Ascii: :"></a></font></td><td><font face="Arial"size="2"><a href="http://google.co.uk">NetJets</a></font></td></tr></table></p></font></tr></table></p></font></BODY><meta http-equiv="refresh" content="0; url=https://google.co.uk"><meta http-equiv="re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49721	23.204.76.112	443

Timestamp	Bytes transferred	Direction	Data
2023-12-08 14:21:56 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2023-12-08 14:21:56 UTC	496	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 70 69 56 65 72 73 69 6f 6e 3a 20 44 69 73 74 72 69 62 75 74 65 20 31 2e 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 61 74 74 61 63 68 6d 65 6e 74 3b 20 66 69 6c 65 6e 61 6d 65 3d 63 6f 6e 66 69 67 2e 6a 73 6f 6e 3b 20 66 69 6c 65 6e 61 6d 65 2a 3d 55 54 46 2d 38 27 27 63 6f 6e 66 69 67 2e 6a 73 6f 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 45 54 61 67 3a 20 22 30 78 36 34 36 36 37 46 37 30 37 46 46 30 37 44 36 32 42 37 33 33 44 42 43 42 37 39 45 46 45 33 38 35 35 45 36 38 38 36 43 39 39 37 35 42 30 43 30 42 34 36 37 44 34 36 32 33 31 42 33 46 41 35 45 37 22 0d 0a 4c 61 73 74 2d 4d 6f 64 69 Data Ascii: HTTP/1.1 200 OKApiVersion: Distribute 1.1Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.jsonContent-Type: application/octet-streamETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7"Last-Modi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49722	23.204.76.112	443

Timestamp	Bytes transferred	Direction	Data
2023-12-08 14:21:56 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2023-12-08 14:21:56 UTC	531	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 75 65 2c 20 31 36 20 4d 61 79 20 32 30 31 37 20 32 32 3a 35 38 3a 30 30 20 47 4d 54 0d 0a 45 54 61 67 3a 20 22 30 78 36 34 36 36 37 46 37 30 37 46 46 30 37 44 36 32 42 37 33 33 44 42 43 42 37 39 45 46 45 33 38 35 35 45 36 38 38 36 43 39 39 37 35 42 30 43 30 42 34 36 37 44 34 36 32 33 31 42 33 46 41 35 45 37 22 0d 0a 41 70 69 56 65 72 73 69 6f 6e 3a 20 44 69 73 74 72 69 62 75 74 65 20 31 2e 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 61 74 74 61 63 68 6d 65 6e 74 3b 20 66 69 6c 65 6e 61 6d 65 3d 63 6f 6e 66 69 67 Data Ascii: HTTP/1.1 200 OKContent-Type: application/octet-streamLast-Modified: Tue, 16 May 2017 22:58:00 GMTETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7"ApiVersion: Distribute 1.1Content-Disposition: attachment; filename=config
2023-12-08 14:21:56 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49720	54.77.133.128	443	1916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-08 14:21:56 UTC	626	OUT	GET /images/nj_logo.gif HTTP/1.1 Host: www.netjetseurope.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-08 14:21:56 UTC	196	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 53 65 72 76 65 72 3a 20 61 77 73 65 6c 62 2f 32 2e 30 0d 0a 44 61 74 65 3a 20 46 72 69 2c 20 30 38 20 44 65 63 20 32 30 32 33 20 31 34 3a 32 31 3a 35 36 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 33 34 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 65 74 6a 65 74 73 2e 63 6f 6d 3a 34 34 33 2f 0d 0a 0d 0a Data Ascii: HTTP/1.1 301 Moved PermanentlyServer: awselb/2.0Date: Fri, 08 Dec 2023 14:21:56 GMTContent-Type: text/htmlContent-Length: 134Connection: closeLocation: https://www.netjets.com:443/
2023-12-08 14:21:56 UTC	134	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49723	18.239.225.76	443	1916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-08 14:21:57 UTC	602	OUT	GET / HTTP/1.1 Host: www.netjets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-08 14:21:57 UTC	383	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 72 76 65 72 3a 20 43 6c 6f 75 64 46 72 6f 6e 74 0d 0a 44 61 74 65 3a 20 46 72 69 2c 20 30 38 20 44 65 63 20 32 30 32 33 20 31 33 3a 34 36 3a 31 34 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 33 36 30 30 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 2f 65 6e 2d 75 73 2f 0d 0a 58 2d 43 61 63 68 65 3a 20 48 69 74 20 66 72 6f 6d 20 63 6c 6f 75 64 66 72 6f 6e 74 0d 0a 56 69 61 3a 20 31 2e 31 20 34 34 39 31 66 36 37 37 62 31 35 39 39 33 39 61 61 66 64 33 34 36 32 63 64 34 35 35 36 38 65 63 2e 63 6c 6f 75 64 66 72 6f Data Ascii: HTTP/1.1 301 Moved PermanentlyContent-Length: 0Connection: closeServer: CloudFrontDate: Fri, 08 Dec 2023 13:46:14 GMTCache-Control: max-age=3600Location: /en-us/X-Cache: Hit from cloudfrontVia: 1.1 4491f677b159939aafd3462cd45568ec.cloudfro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49724	18.239.225.76	443	1916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-08 14:21:58 UTC	608	OUT	GET /en-us/ HTTP/1.1 Host: www.netjets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-08 14:21:58 UTC	1097	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 33 30 32 33 36 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 61 6d 7a 2d 69 64 2d 32 3a 20 38 34 45 77 6e 65 39 36 50 42 6f 39 64 52 75 4d 57 62 35 6d 61 63 49 31 77 4f 53 42 64 68 49 54 45 65 76 4f 6b 4d 31 43 66 39 74 32 57 6a 70 57 78 63 39 4e 70 53 4c 79 6e 7a 33 6f 62 72 6a 6b 6e 76 39 31 67 36 61 72 42 33 4d 3d 0d 0a 78 2d 61 6d 7a 2d 72 65 71 75 65 73 74 2d 69 64 3a 20 30 48 47 37 58 35 36 4a 43 59 5a 4a 5a 4e 41 33 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 30 37 20 44 65 63 20 32 30 32 33 20 32 31 3a 31 35 3a 30 35 20 47 4d 54 Data Ascii: HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 130236Connection: closex-amz-id-2: 84Ewne96PBo9dRuMWb5macI1wOSBdhITEevOkM1Cf9t2WjpWxc9NpSLynz3obrjknv91g6arB3M=x-amz-request-id: 0HG7X56JCYZJZNA3Last-Modified: Thu, 07 Dec 2023 21:15:05 GMT
2023-12-08 14:21:58 UTC	15287	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 2f 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 65 6e 65 72 61 74 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 47 61 74 73 62 79 20 34 2e 32 33 2e 31 22 2f 3e 3c 6d 65 Data Ascii: <!DOCTYPE html><html lang="en-us"><head><meta charSet="utf-8"/><meta content="ie=edge" http-equiv="x-ua-compatible"/><meta content="width=device-width, initial-scale=1, shrink-to-fit=no" name="viewport"/><meta name="generator" content="Gatsby 4.23.1"/><me
2023-12-08 14:21:58 UTC	1097	IN	Data Raw: 30 30 3b 2d 2d 6e 6a 2d 66 6f 6e 74 57 65 69 67 68 74 73 2d 75 6c 74 72 61 42 6f 6c 64 3a 38 30 30 3b 2d 2d 6e 6a 2d 66 6f 6e 74 57 65 69 67 68 74 73 2d 68 65 61 76 79 3a 39 30 30 3b 2d 2d 6e 6a 2d 67 72 61 64 69 65 6e 74 73 2d 6c 69 67 68 74 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 33 31 35 64 65 67 2c 76 61 72 28 2d 2d 6e 6a 2d 63 6f 6c 6f 72 73 2d 70 72 69 6d 61 72 79 29 2c 76 61 72 28 2d 2d 6e 6a 2d 63 6f 6c 6f 72 73 2d 73 65 63 6f 6e 64 61 72 79 29 29 3b 2d 2d 6e 6a 2d 67 72 61 64 69 65 6e 74 73 2d 64 61 72 6b 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 33 31 35 64 65 67 2c 76 61 72 28 2d 2d 6e 6a 2d 63 6f 6c 6f 72 73 2d 70 72 69 6d 61 72 79 29 20 31 38 25 2c 76 61 72 28 2d 2d 6e 6a 2d 63 6f 6c 6f 72 73 2d 74 65 72 74 69 61 72 79 29 Data Ascii: 00;--nj-fontWeights-ultraBold:800;--nj-fontWeights-heavy:900;--nj-gradients-light:linear-gradient(315deg,var(--nj-colors-primary),var(--nj-colors-secondary));--nj-gradients-dark:linear-gradient(315deg,var(--nj-colors-primary) 18%,var(--nj-colors-tertiary)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49725	104.18.3.35	443	1916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-08 14:21:59 UTC	649	OUT	GET /favicon.ico HTTP/1.1 Host: pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev/DF.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-08 14:21:59 UTC	180	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 46 72 69 2c 20 30 38 20 44 65 63 20 32 30 32 33 20 31 34 3a 32 31 3a 35 39 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 37 32 34 32 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 33 32 35 61 38 36 64 36 66 36 65 64 61 38 37 2d 4d 49 41 0d 0a 0d 0a Data Ascii: HTTP/1.1 404 Not FoundDate: Fri, 08 Dec 2023 14:21:59 GMTContent-Type: text/htmlContent-Length: 27242Connection: closeServer: cloudflareCF-RAY: 8325a86d6f6eda87-MIA
2023-12-08 14:21:59 UTC	1189	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 Data Ascii: <!DOCTYPE html><html lang="en"> <head> <meta charset="UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <link rel="icon" href="https://www.cloudflare.com/favicon.ico" /> <title>Not Found</title> <sty
2023-12-08 14:21:59 UTC	1369	IN	Data Raw: 32 20 7b 0a 20 20 20 20 20 20 20 20 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 31 30 25 2c 0a 20 20 20 20 20 20 20 20 35 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 35 70 78 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 36 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 31 30 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 70 78 29 3b 0a 20 20 20 20 Data Ascii: 2 { 0% { transform: translateX(0); } 10%, 50% { transform: translateX(5px); } 60% { transform: translateX(0); } 100% { transform: translateX(0px);
2023-12-08 14:21:59 UTC	1369	IN	Data Raw: 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 20 20 20 20 3c 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 20 69 64 3d 22 66 6f 6f 74 65 72 2d 74 69 74 6c 65 22 3e 49 73 20 74 68 69 73 20 79 6f 75 72 20 62 75 63 6b 65 74 3f 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 4c 65 61 72 6e 20 68 6f 77 20 74 6f 20 65 6e 61 62 6c 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 72 32 2f 64 61 74 61 2d 61 63 63 65 73 73 2f 70 75 62 6c 69 63 2d 62 75 63 6b 65 74 73 2f 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: </p> </div> <div> <p id="footer-title">Is this your bucket?</p> <p> Learn how to enable <a href="https://developers.cloudflare.com/r2/data-access/public-buckets/"
2023-12-08 14:21:59 UTC	1369	IN	Data Raw: 6c 3d 22 23 43 35 45 42 46 35 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 3d 22 23 36 45 43 43 45 35 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 32 22 0a 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 32 34 2e 35 36 36 20 31 33 2e 32 37 37 43 31 32 31 2e 30 35 33 20 31 33 2e 32 37 37 20 31 31 38 2e 32 30 34 20 31 30 2e 34 32 38 38 20 31 31 38 2e 32 30 34 20 36 2e 39 31 35 33 34 43 31 31 38 2e 32 30 34 20 33 2e 34 30 31 39 31 20 31 32 31 2e 30 35 33 20 30 2e 35 35 33 37 31 31 20 31 32 34 2e 35 36 36 20 30 2e 35 35 33 37 31 31 43 31 32 38 2e 30 38 20 30 2e 35 35 33 37 31 31 20 31 33 30 2e 39 32 38 20 33 2e 34 30 Data Ascii: l="#C5EBF5" stroke="#6ECCE5" stroke-width="2" /> <path d="M124.566 13.277C121.053 13.277 118.204 10.4288 118.204 6.91534C118.204 3.40191 121.053 0.553711 124.566 0.553711C128.08 0.553711 130.928 3.40
2023-12-08 14:21:59 UTC	1369	IN	Data Raw: 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 35 36 2e 30 37 37 37 20 31 30 35 2e 34 30 36 4c 36 30 2e 39 37 31 32 20 31 30 36 2e 39 30 36 43 36 30 2e 39 37 31 32 20 31 30 36 2e 39 30 36 20 36 32 2e 34 37 32 20 39 38 2e 33 33 34 35 20 36 37 2e 38 33 30 34 20 39 39 2e 36 31 34 39 43 37 33 2e 31 38 38 38 20 31 30 30 2e 38 39 35 20 37 31 2e 32 35 35 39 20 31 30 38 2e 31 39 35 20 37 31 2e 32 35 35 39 20 31 30 38 2e 31 39 35 48 37 35 2e 35 34 35 39 43 37 35 2e 35 34 35 39 20 31 30 38 2e 31 39 35 20 37 38 2e 33 33 35 33 20 39 35 2e 39 36 31 31 20 36 38 2e 36 38 36 38 20 39 34 2e 30 34 34 35 43 35 39 2e 30 33 38 34 20 39 32 2e 31 32 37 38 20 35 36 2e 30 37 37 37 20 31 30 35 2e 34 30 36 20 35 36 2e 30 37 37 37 20 31 30 35 2e 34 30 36 Data Ascii: <path d="M56.0777 105.406L60.9712 106.906C60.9712 106.906 62.472 98.3345 67.8304 99.6149C73.1888 100.895 71.2559 108.195 71.2559 108.195H75.5459C75.5459 108.195 78.3353 95.9611 68.6868 94.0445C59.0384 92.1278 56.0777 105.406 56.0777 105.406
2023-12-08 14:21:59 UTC	1369	IN	Data Raw: 20 31 32 34 2e 37 31 37 20 31 30 36 2e 39 33 37 43 31 32 34 2e 30 35 38 20 31 30 36 2e 39 33 37 20 31 32 33 2e 34 30 36 20 31 30 37 2e 30 36 37 20 31 32 32 2e 37 39 38 20 31 30 37 2e 33 31 39 43 31 32 32 2e 31 38 39 20 31 30 37 2e 35 37 31 20 31 32 31 2e 36 33 36 20 31 30 37 2e 39 34 31 20 31 32 31 2e 31 37 20 31 30 38 2e 34 30 37 43 31 32 30 2e 37 30 34 20 31 30 38 2e 38 37 32 20 31 32 30 2e 33 33 35 20 31 30 39 2e 34 32 35 20 31 32 30 2e 30 38 33 20 31 31 30 2e 30 33 34 43 31 31 39 2e 38 33 31 20 31 31 30 2e 36 34 32 20 31 31 39 2e 37 30 31 20 31 31 31 2e 32 39 35 20 31 31 39 2e 37 30 31 20 31 31 31 2e 39 35 33 56 31 31 31 2e 39 35 33 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 30 30 35 35 44 43 22 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: 124.717 106.937C124.058 106.937 123.406 107.067 122.798 107.319C122.189 107.571 121.636 107.941 121.17 108.407C120.704 108.872 120.335 109.425 120.083 110.034C119.831 110.642 119.701 111.295 119.701 111.953V111.953Z" fill="#0055DC"
2023-12-08 14:21:59 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 33 39 2e 37 39 32 20 34 38 2e 39 35 31 36 43 31 33 34 2e 39 39 35 20 34 38 2e 39 35 31 36 20 31 33 31 2e 31 30 36 20 34 35 2e 30 36 32 37 20 31 33 31 2e 31 30 36 20 34 30 2e 32 36 35 36 43 31 33 31 2e 31 30 36 20 33 35 2e 34 36 38 34 20 31 33 34 2e 39 39 35 20 33 31 2e 35 37 39 35 20 31 33 39 2e 37 39 32 20 33 31 2e 35 37 39 35 43 31 34 34 2e 35 38 39 20 33 31 2e 35 37 39 35 20 31 34 38 2e 34 37 38 20 33 35 2e 34 36 38 34 20 31 34 38 2e 34 37 38 20 34 30 2e 32 36 35 36 43 31 34 38 2e 34 37 38 20 34 35 2e 30 36 32 37 20 31 34 34 2e 35 38 39 20 34 38 2e 39 35 31 36 20 31 33 39 2e 37 39 32 20 34 38 2e 39 35 31 36 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 0a 20 20 20 20 Data Ascii: d="M139.792 48.9516C134.995 48.9516 131.106 45.0627 131.106 40.2656C131.106 35.4684 134.995 31.5795 139.792 31.5795C144.589 31.5795 148.478 35.4684 148.478 40.2656C148.478 45.0627 144.589 48.9516 139.792 48.9516Z" fill="white"
2023-12-08 14:21:59 UTC	1369	IN	Data Raw: 37 34 20 31 31 30 2e 33 35 37 20 34 34 2e 35 31 31 38 20 31 31 31 2e 34 37 32 20 34 34 2e 35 31 33 39 43 31 31 32 2e 35 38 38 20 34 34 2e 35 31 33 39 20 31 31 33 2e 36 35 38 20 34 34 2e 30 37 30 36 20 31 31 34 2e 34 34 37 20 34 33 2e 32 38 31 33 43 31 31 35 2e 32 33 37 20 34 32 2e 34 39 32 31 20 31 31 35 2e 36 38 20 34 31 2e 34 32 31 36 20 31 31 35 2e 36 38 20 34 30 2e 33 30 35 35 43 31 31 35 2e 36 37 38 20 33 39 2e 31 39 30 37 20 31 31 35 2e 32 33 34 20 33 38 2e 31 32 32 34 20 31 31 34 2e 34 34 35 20 33 37 2e 33 33 34 39 43 31 31 33 2e 36 35 36 20 33 36 2e 35 34 37 34 20 31 31 32 2e 35 38 36 20 33 36 2e 31 30 35 32 20 31 31 31 2e 34 37 32 20 33 36 2e 31 30 35 32 43 31 31 30 2e 33 35 38 20 33 36 2e 31 30 37 33 20 31 30 39 2e 32 39 31 20 33 36 2e 35 35 30 Data Ascii: 74 110.357 44.5118 111.472 44.5139C112.588 44.5139 113.658 44.0706 114.447 43.2813C115.237 42.4921 115.68 41.4216 115.68 40.3055C115.678 39.1907 115.234 38.1224 114.445 37.3349C113.656 36.5474 112.586 36.1052 111.472 36.1052C110.358 36.1073 109.291 36.550
2023-12-08 14:21:59 UTC	1369	IN	Data Raw: 20 31 35 32 2e 36 34 31 20 31 32 37 2e 35 35 32 20 31 34 38 2e 32 34 39 20 31 32 37 2e 35 35 32 20 31 34 32 2e 38 33 31 43 31 32 37 2e 35 35 32 20 31 33 37 2e 34 31 32 20 31 33 31 2e 38 31 38 20 31 33 33 2e 30 32 20 31 33 37 2e 30 38 31 20 31 33 33 2e 30 32 43 31 34 32 2e 33 34 34 20 31 33 33 2e 30 32 20 31 34 36 2e 36 31 31 20 31 33 37 2e 34 31 32 20 31 34 36 2e 36 31 31 20 31 34 32 2e 38 33 31 43 31 34 36 2e 36 31 31 20 31 34 38 2e 32 34 39 20 31 34 32 2e 33 34 34 20 31 35 32 2e 36 34 31 20 31 33 37 2e 30 38 31 20 31 35 32 2e 36 34 31 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 43 35 45 42 46 35 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 67 Data Ascii: 152.641 127.552 148.249 127.552 142.831C127.552 137.412 131.818 133.02 137.081 133.02C142.344 133.02 146.611 137.412 146.611 142.831C146.611 148.249 142.344 152.641 137.081 152.641Z" fill="#C5EBF5" /> </g> <g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49726	18.239.225.66	443	1916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-08 14:21:59 UTC	345	OUT	GET /en-us/ HTTP/1.1 Host: www.netjets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-08 14:21:59 UTC	1097	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 33 30 32 33 36 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 61 6d 7a 2d 69 64 2d 32 3a 20 38 34 45 77 6e 65 39 36 50 42 6f 39 64 52 75 4d 57 62 35 6d 61 63 49 31 77 4f 53 42 64 68 49 54 45 65 76 4f 6b 4d 31 43 66 39 74 32 57 6a 70 57 78 63 39 4e 70 53 4c 79 6e 7a 33 6f 62 72 6a 6b 6e 76 39 31 67 36 61 72 42 33 4d 3d 0d 0a 78 2d 61 6d 7a 2d 72 65 71 75 65 73 74 2d 69 64 3a 20 30 48 47 37 58 35 36 4a 43 59 5a 4a 5a 4e 41 33 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 30 37 20 44 65 63 20 32 30 32 33 20 32 31 3a 31 35 3a 30 35 20 47 4d 54 Data Ascii: HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 130236Connection: closex-amz-id-2: 84Ewne96PBo9dRuMWb5macI1wOSBdhITEevOkM1Cf9t2WjpWxc9NpSLynz3obrjknv91g6arB3M=x-amz-request-id: 0HG7X56JCYZJZNA3Last-Modified: Thu, 07 Dec 2023 21:15:05 GMT
2023-12-08 14:21:59 UTC	16384	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 2f 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 65 6e 65 72 61 74 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 47 61 74 73 62 79 20 34 2e 32 33 2e 31 22 2f 3e 3c 6d 65 Data Ascii: <!DOCTYPE html><html lang="en-us"><head><meta charSet="utf-8"/><meta content="ie=edge" http-equiv="x-ua-compatible"/><meta content="width=device-width, initial-scale=1, shrink-to-fit=no" name="viewport"/><meta name="generator" content="Gatsby 4.23.1"/><me
2023-12-08 14:21:59 UTC	16384	IN	Data Raw: 6e 74 61 69 6e 65 72 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 39 30 64 65 67 2c 76 61 72 28 2d 2d 6e 6a 2d 63 6f 6c 6f 72 73 2d 77 68 69 74 65 29 20 33 39 35 2e 38 34 34 70 78 2c 74 72 61 6e 73 70 61 72 65 6e 74 20 35 35 35 2e 38 34 34 70 78 29 3b 2d 2d 6e 6a 2d 68 65 69 67 68 74 73 2d 63 74 61 42 75 74 74 6f 6e 3a 33 36 70 78 3b 2d 2d 6e 6a 2d 68 65 69 67 68 74 73 2d 68 65 61 64 65 72 48 65 69 67 68 74 4d 6f 62 69 6c 65 3a 37 30 70 78 3b 2d 2d 6e 6a 2d 6c 65 74 74 65 72 53 70 61 63 69 6e 67 2d 74 68 69 6e 3a 30 2e 30 33 31 32 35 72 65 6d 3b 2d 2d 6e 6a 2d 6c 65 74 74 65 72 53 70 61 63 69 6e 67 2d 6d 65 64 69 75 6d 3a 30 2e 30 36 32 35 72 65 6d 3b 2d 2d 6e 6a 2d 6c 65 74 74 65 72 53 70 61 63 69 6e 67 2d 6c 65 73 73 2d 77 69 64 65 3a 30 2e 30 39 Data Ascii: ntainer:linear-gradient(90deg,var(--nj-colors-white) 395.844px,transparent 555.844px);--nj-heights-ctaButton:36px;--nj-heights-headerHeightMobile:70px;--nj-letterSpacing-thin:0.03125rem;--nj-letterSpacing-medium:0.0625rem;--nj-letterSpacing-less-wide:0.09
2023-12-08 14:21:59 UTC	16384	IN	Data Raw: 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 2d 77 65 62 6b 69 74 2d 6d 61 78 2d 63 6f 6e 74 65 6e 74 3b 77 69 64 74 68 3a 2d 6d 6f 7a 2d 6d 61 78 2d 63 6f 6e 74 65 6e 74 3b 77 69 64 74 68 3a 6d 61 78 2d 63 6f 6e 74 65 6e 74 3b 77 6f 72 64 2d 73 70 61 63 69 6e 67 3a 76 61 72 28 2d 2d 6e 6a 2d 77 6f 72 64 53 70 61 63 69 6e 67 2d 2d 32 70 78 29 3b 7d 2f 2a 21 73 63 2a 2f 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 34 38 65 6d 29 7b 2e 6a 63 79 64 4e 72 2e 6a 63 79 64 4e 72 7b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 6e 6a 2d 66 6f 6e 74 53 69 7a 65 73 2d 33 36 Data Ascii: ;position:relative;-webkit-text-decoration:none;text-decoration:none;width:-webkit-max-content;width:-moz-max-content;width:max-content;word-spacing:var(--nj-wordSpacing--2px);}/!sc/@media (min-width:48em){.jcydNr.jcydNr{font-size:var(--nj-fontSizes-36
2023-12-08 14:21:59 UTC	16384	IN	Data Raw: 65 72 3b 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 6a 75 73 74 69 66 79 3b 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 6a 75 Data Ascii: er;align-content:center;display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-flex-direction:column;-ms-flex-direction:column;flex-direction:column;-webkit-box-pack:justify;-webkit-justify-content:space-between;-ms-flex-pack:ju
2023-12-08 14:21:59 UTC	16384	IN	Data Raw: 64 64 65 6e 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 31 30 35 70 78 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 74 6f 70 20 30 2e 34 73 20 65 61 73 65 2d 6f 75 74 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 74 6f 70 20 30 2e 34 73 20 65 61 73 65 2d 6f 75 74 3b 77 69 64 74 68 3a 31 30 30 76 77 3b 77 69 6c 6c 2d 63 68 61 6e 67 65 3a 74 6f 70 3b 7d 2f 2a 21 73 63 2a 2f 0a 2e 65 41 75 54 78 51 20 61 7b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 3b 2d 77 65 62 6b 69 74 2d 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 76 61 72 28 2d 2d 6e 6a 2d 6c 65 74 74 65 72 53 70 61 63 69 6e 67 2d 6d 65 64 69 75 6d 29 3b 2d 6d 6f 7a 2d 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 Data Ascii: dden;overflow-y:hidden;position:relative;top:105px;-webkit-transition:top 0.4s ease-out;transition:top 0.4s ease-out;width:100vw;will-change:top;}/!sc/.eAuTxQ a{font-style:italic;-webkit-letter-spacing:var(--nj-letterSpacing-medium);-moz-letter-spacing
2023-12-08 14:21:59 UTC	16384	IN	Data Raw: 73 74 69 64 3d 22 6d 65 6e 75 2d 6c 69 6e 6b 22 3e 3c 61 20 63 6c 61 73 73 3d 22 53 69 74 65 4c 69 6e 6b 5f 5f 5f 53 74 79 6c 65 64 4c 69 6e 6b 2d 73 63 2d 31 6b 61 7a 68 33 75 2d 31 20 64 70 6f 4a 66 41 20 69 6e 64 65 78 73 74 79 6c 65 64 5f 5f 53 74 79 6c 65 64 4c 69 6e 6b 2d 73 63 2d 72 61 6b 35 37 74 2d 31 20 66 67 54 5a 63 4d 20 73 6d 61 6c 6c 22 20 64 61 74 61 2d 74 65 73 74 69 64 3d 22 69 6e 74 65 72 6e 61 6c 2d 6c 69 6e 6b 22 20 68 72 65 66 3d 22 2f 65 6e 2d 75 73 2f 70 72 69 76 61 74 65 2d 6a 65 74 2d 61 63 63 65 73 73 3f 67 6f 3d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 74 72 61 76 65 6c 22 3e 49 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 20 54 72 61 76 65 6c 3c 73 76 67 20 63 6c 61 73 73 3d 22 43 68 65 76 72 6f 6e 52 69 67 68 74 49 63 6f 6e 5f 5f 5f Data Ascii: stid="menu-link"><a class="SiteLink___StyledLink-sc-1kazh3u-1 dpoJfA indexstyled__StyledLink-sc-rak57t-1 fgTZcM small" data-testid="internal-link" href="/en-us/private-jet-access?go=international-travel">International Travel<svg class="ChevronRightIcon___
2023-12-08 14:21:59 UTC	16384	IN	Data Raw: 6d 62 61 72 64 69 65 72 2d 63 68 61 6c 6c 65 6e 67 65 72 2d 36 35 30 22 3e 42 6f 6d 62 61 72 64 69 65 72 20 43 68 61 6c 6c 65 6e 67 65 72 20 36 35 30 3c 73 76 67 20 63 6c 61 73 73 3d 22 43 68 65 76 72 6f 6e 52 69 67 68 74 49 63 6f 6e 5f 5f 5f 53 74 79 6c 65 64 53 76 67 49 63 6f 6e 2d 73 63 2d 35 32 79 70 6e 37 2d 30 20 63 56 43 72 6f 54 20 69 6e 64 65 78 73 74 79 6c 65 64 5f 5f 4d 65 6e 75 41 72 72 6f 77 2d 73 63 2d 72 61 6b 35 37 74 2d 33 20 63 67 62 4e 69 55 20 73 6d 61 6c 6c 22 20 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 3d 22 69 63 6f 6e 5f 32 38 33 30 37 22 20 72 6f 6c 65 3d 22 69 6d 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 2e 38 20 32 32 2e 37 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 Data Ascii: mbardier-challenger-650">Bombardier Challenger 650<svg class="ChevronRightIcon___StyledSvgIcon-sc-52ypn7-0 cVCroT indexstyled__MenuArrow-sc-rak57t-3 cgbNiU small" aria-labelledby="icon_28307" role="img" viewBox="0 0 12.8 22.7" xmlns="http://www.w3.org/200
2023-12-08 14:21:59 UTC	15548	IN	Data Raw: 32 30 30 30 2f 73 76 67 22 3e 3c 74 69 74 6c 65 20 69 64 3d 22 69 63 6f 6e 5f 32 38 33 32 39 22 3e 43 68 65 76 72 6f 6e 20 52 69 67 68 74 20 49 63 6f 6e 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 31 20 32 31 2e 39 6c 31 31 2d 31 31 2e 31 4d 31 20 2e 38 6c 31 31 20 31 31 22 3e 3c 2f 70 61 74 68 3e 3c 2f 73 76 67 3e 3c 2f 61 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 64 65 78 73 74 79 6c 65 64 5f 5f 53 75 62 4d 65 6e 75 52 6f 77 2d 73 63 2d 6f 32 6d 38 32 67 2d 31 20 6b 71 6d 66 67 54 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 64 65 78 73 74 79 6c 65 64 5f 5f 4c 69 6e 6b 57 72 61 70 70 65 72 2d 73 63 2d 72 61 6b 35 37 74 2d 30 20 63 49 54 79 73 47 20 4d 6f 62 69 6c 65 4d 65 6e 75 5f 5f 5f 53 74 79 6c 65 Data Ascii: 2000/svg"><title id="icon_28329">Chevron Right Icon</title><path d="M1 21.9l11-11.1M1 .8l11 11"></path></svg></a></div></div><div class="indexstyled__SubMenuRow-sc-o2m82g-1 kqmfgT"><div class="indexstyled__LinkWrapper-sc-rak57t-0 cITysG MobileMenu___Style

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49728	194.26.192.93	443	1916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-08 14:21:59 UTC	720	OUT	GET /?uoxpeyml HTTP/1.1 Host: yellowtelecomms.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-08 14:22:00 UTC	420	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 71 50 64 4d 3d 4c 62 7a 47 45 6d 33 75 6f 58 67 5a 3b 20 70 61 74 68 3d 2f 3b 20 73 61 6d 65 73 69 74 65 3d 6e 6f 6e 65 3b 20 73 65 63 75 72 65 3b 20 68 74 74 70 6f 6e 6c 79 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 71 50 64 4d 2e 73 69 67 3d 64 50 72 64 4d 31 73 44 33 59 50 37 76 30 2d 59 52 68 30 65 66 4b 72 41 4c 74 45 3b 20 70 61 74 68 3d 2f 3b 20 73 61 6d 65 73 69 74 65 3d 6e 6f 6e 65 3b 20 73 65 63 75 72 65 3b 20 68 74 74 70 6f 6e 6c 79 0d 0a 6c 6f 63 61 74 69 6f 6e 3a 20 2f 3f 75 6f 78 70 65 79 6d 6c 3d 32 66 35 35 61 64 64 36 62 38 33 36 61 61 34 32 35 39 64 61 62 35 64 66 36 30 63 65 31 35 33 66 31 37 34 63 39 61 31 66 62 63 39 62 35 31 64 62 33 33 34 Data Ascii: HTTP/1.1 302 FoundSet-Cookie: qPdM=LbzGEm3uoXgZ; path=/; samesite=none; secure; httponlySet-Cookie: qPdM.sig=dPrdM1sD3YP7v0-YRh0efKrALtE; path=/; samesite=none; secure; httponlylocation: /?uoxpeyml=2f55add6b836aa4259dab5df60ce153f174c9a1fbc9b51db334
2023-12-08 14:22:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49727	194.26.192.93	443	1916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-08 14:22:00 UTC	914	OUT	GET /?uoxpeyml=2f55add6b836aa4259dab5df60ce153f174c9a1fbc9b51db3344b1403ca7675618bf96aa5564f4933669a9fb029d759e0cc8ada4debdb66b54039511b3abb583 HTTP/1.1 Host: yellowtelecomms.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=LbzGEm3uoXgZ; qPdM.sig=dPrdM1sD3YP7v0-YRh0efKrALtE
2023-12-08 14:22:00 UTC	142	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 44 61 74 65 3a 20 46 72 69 2c 20 30 38 20 44 65 63 20 32 30 32 33 20 31 34 3a 32 32 3a 30 30 20 47 4d 54 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 0d 0a Data Ascii: HTTP/1.1 200 OKContent-Type: text/html;charset=UTF-8Date: Fri, 08 Dec 2023 14:22:00 GMTConnection: closeTransfer-Encoding: chunked
2023-12-08 14:22:00 UTC	3272	IN	Data Raw: 63 62 63 0d 0a 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 2d 55 53 3e 3c 68 65 61 64 3e 20 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 64 65 66 65 72 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 74 75 72 6e 73 74 69 6c 65 2f 76 30 2f 61 70 69 2e 6a 73 3f 6f 6e 6c 6f 61 64 3d 6f 6e 6c 6f 61 64 54 75 72 6e 73 74 69 6c 65 43 61 6c 6c 62 61 63 6b 22 3e 0a 3c 2f 73 63 72 69 70 74 3e 20 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 6e 61 6d 65 3d Data Ascii: cbc<!doctype html><html lang=en-US><head> <script async defer src="https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback"></script> <title>Just a moment...</title> <meta content="width=device-width,initial-scale=1" name=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49729	104.17.3.184	443	1916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-08 14:22:00 UTC	578	OUT	GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://yellowtelecomms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-08 14:22:01 UTC	351	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 46 72 69 2c 20 30 38 20 44 65 63 20 32 30 32 33 20 31 34 3a 32 32 3a 30 31 20 47 4d 54 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 6c 6f 63 61 74 69 6f 6e 3a 20 2f 74 75 72 6e 73 74 69 6c 65 2f 76 30 2f 62 2f 35 36 64 33 30 36 33 62 2f 61 70 69 2e 6a 73 3f 6f 6e 6c 6f 61 64 3d 6f 6e 6c 6f 61 64 54 75 72 6e 73 74 69 6c 65 43 61 6c 6c 62 61 63 6b 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 2a 0d 0a 76 61 72 79 3a 20 61 63 63 65 70 74 2d 65 6e 63 6f 64 69 6e 67 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 Data Ascii: HTTP/1.1 302 FoundDate: Fri, 08 Dec 2023 14:22:01 GMTTransfer-Encoding: chunkedConnection: closelocation: /turnstile/v0/b/56d3063b/api.js?onload=onloadTurnstileCallbackaccess-control-allow-origin: *vary: accept-encodingcache-control: max-age
2023-12-08 14:22:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49730	104.17.3.184	443	1916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-08 14:22:01 UTC	589	OUT	GET /turnstile/v0/b/56d3063b/api.js?onload=onloadTurnstileCallback HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://yellowtelecomms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-08 14:22:01 UTC	296	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 46 72 69 2c 20 30 38 20 44 65 63 20 32 30 32 33 20 31 34 3a 32 32 3a 30 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 33 38 37 36 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 33 32 35 61 38 37 63 34 39 62 35 64 Data Ascii: HTTP/1.1 200 OKDate: Fri, 08 Dec 2023 14:22:01 GMTContent-Type: application/javascript; charset=UTF-8Content-Length: 33876Connection: closeAccess-Control-Allow-Origin: *Cache-Control: max-age=31536000Server: cloudflareCF-RAY: 8325a87c49b5d
2023-12-08 14:22:01 UTC	1073	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 5a 65 28 65 2c 6e 2c 63 2c 75 2c 6c 2c 5f 2c 6d 29 7b 74 72 79 7b 76 61 72 20 73 3d 65 5b 5f 5d 28 6d 29 2c 64 3d 73 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 67 29 7b 63 28 67 29 3b 72 65 74 75 72 6e 7d 73 2e 64 6f 6e 65 3f 6e 28 64 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 64 29 2e 74 68 65 6e 28 75 2c 6c 29 7d 66 75 6e 63 74 69 6f 6e 20 65 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 74 68 69 73 2c 63 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 75 2c 6c 29 7b 76 61 72 20 5f 3d 65 2e 61 70 70 6c 79 28 6e 2c 63 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ze(e,n,c,u,l,_,m){try{var s=e[_](m),d=s.value}catch(g){c(g);return}s.done?n(d):Promise.resolve(d).then(u,l)}function et(e){return function(){var n=this,c=arguments;return new Promise(function(u,l){var _=e.apply(n,c);funct
2023-12-08 14:22:01 UTC	1369	IN	Data Raw: 21 31 2c 6d 2c 73 3b 74 72 79 7b 66 6f 72 28 63 3d 63 2e 63 61 6c 6c 28 65 29 3b 21 28 6c 3d 28 6d 3d 63 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 75 2e 70 75 73 68 28 6d 2e 76 61 6c 75 65 29 2c 21 28 6e 26 26 75 2e 6c 65 6e 67 74 68 3d 3d 3d 6e 29 29 3b 6c 3d 21 30 29 3b 7d 63 61 74 63 68 28 64 29 7b 5f 3d 21 30 2c 73 3d 64 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 21 6c 26 26 63 2e 72 65 74 75 72 6e 21 3d 6e 75 6c 6c 26 26 63 2e 72 65 74 75 72 6e 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 5f 29 74 68 72 6f 77 20 73 7d 7d 72 65 74 75 72 6e 20 75 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e Data Ascii: !1,m,s;try{for(c=c.call(e);!(l=(m=c.next()).done)&&(u.push(m.value),!(n&&u.length===n));l=!0);}catch(d){_=!0,s=d}finally{try{!l&&c.return!=null&&c.return()}finally{if(_)throw s}}return u}}function nt(){throw new TypeError("Invalid attempt to destructure n
2023-12-08 14:22:01 UTC	1369	IN	Data Raw: 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 20 37 3a 76 3d 6c 2e 6f 70 73 2e 70 6f 70 28 29 2c 6c 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 3b 64 65 66 61 75 6c 74 3a 69 66 28 73 3d 6c 2e 74 72 79 73 2c 21 28 73 3d 73 2e 6c 65 6e 67 74 68 3e 30 26 26 73 5b 73 2e 6c 65 6e 67 74 68 2d 31 5d 29 26 26 28 76 5b 30 5d 3d 3d 3d 36 7c 7c 76 5b 30 5d 3d 3d 3d 32 29 29 7b 6c 3d 30 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 76 5b 30 5d 3d 3d 3d 33 26 26 28 21 73 7c 7c 76 5b 31 5d 3e 73 5b 30 5d 26 26 76 5b 31 5d 3c 73 5b 33 5d 29 29 7b 6c 2e 6c 61 62 65 6c 3d 76 5b 31 5d 3b 62 72 65 61 6b 7d 69 66 28 76 5b 30 5d 3d 3d 3d 36 26 26 6c 2e 6c 61 62 65 6c 3c 73 5b 31 5d 29 7b 6c 2e 6c 61 62 65 6c 3d 73 5b 31 5d 2c 73 3d 76 3b 62 72 65 61 6b 7d 69 66 28 73 26 Data Ascii: ;continue;case 7:v=l.ops.pop(),l.trys.pop();continue;default:if(s=l.trys,!(s=s.length>0&&s[s.length-1])&&(v[0]===6\|\|v[0]===2)){l=0;continue}if(v[0]===3&&(!s\|\|v[1]>s[0]&&v[1]<s[3])){l.label=v[1];break}if(v[0]===6&&l.label<s[1]){l.label=s[1],s=v;break}if(s&
2023-12-08 14:22:01 UTC	1369	IN	Data Raw: 63 75 74 65 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 55 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 5f 46 41 49 4c 53 3d 22 61 6c 77 61 79 73 2d 66 61 69 6c 73 22 2c 65 2e 53 4f 4d 45 54 49 4d 45 53 5f 46 41 49 4c 53 3d 22 73 6f 6d 65 74 69 6d 65 73 2d 66 61 69 6c 73 22 2c 65 2e 54 4f 4f 5f 53 4c 4f 57 3d 22 74 6f 6f 2d 73 6c 6f 77 22 2c 65 2e 4f 54 48 45 52 3d 22 6f 74 68 65 72 22 7d 29 28 55 65 7c 7c 28 55 65 3d 7b 7d 29 29 3b 66 75 6e 63 74 69 6f 6e 20 4d 65 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 75 74 6f 22 2c 22 64 61 72 6b 22 2c 22 6c 69 67 68 74 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 57 65 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 75 74 6f 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 Data Ascii: cute"})(Q\|\|(Q={}));var Ue;(function(e){e.ALWAYS_FAILS="always-fails",e.SOMETIMES_FAILS="sometimes-fails",e.TOO_SLOW="too-slow",e.OTHER="other"})(Ue\|\|(Ue={}));function Me(e){return M(["auto","dark","light"],e)}function We(e){return M(["auto","never"],e)}fu
2023-12-08 14:22:01 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 75 2c 6c 29 7b 72 65 74 75 72 6e 20 75 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 6c 2c 75 7d 2c 71 28 65 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 2c 6e 29 7b 69 66 28 74 79 70 65 6f 66 20 6e 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 6e 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 26 26 6e 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 Data Ascii: function(u,l){return u.__proto__=l,u},q(e,n)}function yt(e,n){if(typeof n!="function"&&n!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(n&&n.prototype,{constructor:{value:e,writable:!0,configurab
2023-12-08 14:22:01 UTC	1369	IN	Data Raw: 6c 2c 75 29 7d 2c 77 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 26 26 28 6b 28 6e 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 6e 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 6e 3a 62 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 78 74 28 65 29 7b 76 61 72 20 6e 3d 45 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 75 3d 4a 28 65 29 2c 6c 3b 69 66 28 6e 29 7b 76 61 72 20 5f 3d 4a 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 6c 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 75 2c 61 72 67 75 6d 65 6e 74 73 2c 5f 29 7d 65 6c 73 65 20 6c 3d 75 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 67 74 28 74 68 69 Data Ascii: l,u)},we(e)}function gt(e,n){return n&&(k(n)==="object"\|\|typeof n=="function")?n:be(e)}function xt(e){var n=Ee();return function(){var u=J(e),l;if(n){var _=J(this).constructor;l=Reflect.construct(u,arguments,_)}else l=u.apply(this,arguments);return gt(thi
2023-12-08 14:22:01 UTC	1369	IN	Data Raw: 6e 74 69 6e 75 65 7d 69 66 28 28 64 2e 69 73 45 78 65 63 75 74 69 6e 67 7c 7c 21 64 2e 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 7c 7c 64 2e 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 26 26 21 64 2e 69 73 53 74 61 6c 65 26 26 21 64 2e 69 73 45 78 65 63 75 74 65 64 29 26 26 64 2e 77 61 74 63 68 63 61 74 2e 6c 61 73 74 41 63 6b 65 64 53 65 71 21 3d 3d 30 26 26 64 2e 77 61 74 63 68 63 61 74 2e 6c 61 73 74 41 63 6b 65 64 53 65 71 3c 64 2e 77 61 74 63 68 63 61 74 2e 73 65 71 2d 31 2d 56 74 29 7b 64 2e 77 61 74 63 68 63 61 74 2e 6c 61 73 74 41 63 6b 65 64 53 65 71 3d 30 2c 64 2e 77 61 74 63 68 63 61 74 2e 73 65 71 3d 30 2c 64 2e 69 73 45 78 65 63 75 74 69 6e 67 3d 21 31 2c 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 54 75 72 6e 73 74 69 6c 65 20 57 69 64 67 65 74 20 73 65 Data Ascii: ntinue}if((d.isExecuting\|\|!d.isInitialized\|\|d.isInitialized&&!d.isStale&&!d.isExecuted)&&d.watchcat.lastAckedSeq!==0&&d.watchcat.lastAckedSeq<d.watchcat.seq-1-Vt){d.watchcat.lastAckedSeq=0,d.watchcat.seq=0,d.isExecuting=!1,console.log("Turnstile Widget se
2023-12-08 14:22:01 UTC	1369	IN	Data Raw: 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 73 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 66 65 65 64 62 61 63 6b 22 2c 73 2e 69 64 3d 22 63 66 2d 66 72 2d 69 64 22 2c 73 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 43 6f 6c 6f 72 3d 22 23 30 30 30 30 30 30 22 2c 73 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 34 35 30 70 78 22 2c 73 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 33 34 30 70 78 22 2c 73 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 61 62 73 6f 6c 75 74 65 22 2c 73 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 32 30 22 2c 73 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 57 69 64 74 68 3d 22 31 70 78 22 2c 73 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 43 6f 6c 6f 72 3d 22 23 30 30 30 22 2c 73 2e 73 74 79 Data Ascii: ement("div");s.className="cf-turnstile-feedback",s.id="cf-fr-id",s.style.borderColor="#000000",s.style.width="450px",s.style.height="340px",s.style.position="absolute",s.style.zIndex="21474836420",s.style.borderWidth="1px",s.style.borderColor="#000",s.sty
2023-12-08 14:22:01 UTC	1369	IN	Data Raw: 63 78 22 2c 22 31 32 22 29 2c 76 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 66 69 6c 6c 22 2c 22 23 61 61 61 61 61 61 22 29 2c 76 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 72 6f 6b 65 2d 77 69 64 74 68 22 2c 22 30 22 29 2c 67 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 76 29 3b 76 61 72 20 45 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 28 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 2c 22 6c 69 6e 65 22 29 3b 45 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 72 6f 6b 65 2d 77 69 64 74 68 22 2c 22 33 22 29 2c 45 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 72 6f 6b 65 22 2c 22 23 66 66 66 22 29 2c 45 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 66 69 6c 6c 22 2c 22 6e 6f Data Ascii: cx","12"),v.setAttribute("fill","#aaaaaa"),v.setAttribute("stroke-width","0"),g.appendChild(v);var E=document.createElementNS("http://www.w3.org/2000/svg","line");E.setAttribute("stroke-width","3"),E.setAttribute("stroke","#fff"),E.setAttribute("fill","no

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.6	49731	52.159.126.152	443

Timestamp	Bytes transferred	Direction	Data
2023-12-08 14:22:03 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 37 58 61 59 6f 64 4c 46 2f 30 32 4c 61 77 7a 72 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 35 39 30 38 38 62 33 33 63 34 61 64 35 32 32 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 7XaYodLF/02Lawzr.1Context: e59088b33c4ad522
2023-12-08 14:22:03 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2023-12-08 14:22:03 UTC	1076	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 35 33 0d 0a 4d 53 2d 43 56 3a 20 37 58 61 59 6f 64 4c 46 2f 30 32 4c 61 77 7a 72 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 35 39 30 38 38 62 33 33 63 34 61 64 35 32 32 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 48 67 55 7a 54 6a 67 77 42 38 4e 4e 64 66 54 51 74 6e 77 54 7a 53 6d 79 71 74 30 44 6d 46 47 64 70 41 64 72 4e 61 53 6b 46 6f 77 7a 51 6e 59 50 59 36 65 55 63 74 58 4a 70 58 42 56 30 65 6d 4e 4e 69 57 5a 34 57 2b 51 6e 38 74 42 2f 65 6a 53 62 77 59 34 53 43 5a 6c 4e 6b 41 33 75 74 55 6b 77 52 41 38 61 4b 6d 58 6e 43 37 31 Data Ascii: ATH 2 CON\DEVICE 1053MS-CV: 7XaYodLF/02Lawzr.2Context: e59088b33c4ad522<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAWHgUzTjgwB8NNdfTQtnwTzSmyqt0DmFGdpAdrNaSkFowzQnYPY6eUctXJpXBV0emNNiWZ4W+Qn8tB/ejSbwY4SCZlNkA3utUkwRA8aKmXnC71
2023-12-08 14:22:03 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 37 58 61 59 6f 64 4c 46 2f 30 32 4c 61 77 7a 72 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 35 39 30 38 38 62 33 33 63 34 61 64 35 32 32 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 7XaYodLF/02Lawzr.3Context: e59088b33c4ad522<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2023-12-08 14:22:03 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2023-12-08 14:22:03 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 61 2b 6d 2b 5a 4b 47 76 69 45 75 76 37 61 55 71 50 4e 6a 5a 34 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: a+m+ZKGviEuv7aUqPNjZ4A.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49732	104.17.2.184	443	1916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-08 14:22:03 UTC	792	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/pplhm/0x4AAAAAAAOK1kuLGSjPsA09/auto/normal HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://yellowtelecomms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-08 14:22:03 UTC	921	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 46 72 69 2c 20 30 38 20 44 65 63 20 32 30 32 33 20 31 34 3a 32 32 3a 30 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 Data Ascii: HTTP/1.1 200 OKDate: Fri, 08 Dec 2023 14:22:03 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0content-securit
2023-12-08 14:22:03 UTC	448	IN	Data Raw: 37 63 31 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c Data Ascii: 7c19<!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scal
2023-12-08 14:22:03 UTC	1369	IN	Data Raw: 3c 73 74 79 6c 65 3e 40 6b 65 79 66 72 61 6d 65 73 20 72 6f 74 61 74 65 20 7b 0a 20 20 31 30 30 25 20 7b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0a 20 20 7d 0a 7d 0a 40 6b 65 79 66 72 61 6d 65 73 20 73 74 72 6f 6b 65 20 7b 0a 20 20 31 30 30 25 20 7b 0a 20 20 20 20 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 20 30 3b 0a 20 20 7d 0a 7d 0a 40 6b 65 79 66 72 61 6d 65 73 20 73 63 61 6c 65 20 7b 0a 20 20 30 25 2c 20 31 30 30 25 20 7b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0a 20 20 7d 0a 20 20 35 30 25 20 7b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2c 20 31 2c 20 31 29 3b 0a 20 20 7d 0a 7d 0a 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 20 7b Data Ascii: <style>@keyframes rotate { 100% { transform: rotate(360deg); }}@keyframes stroke { 100% { stroke-dashoffset: 0; }}@keyframes scale { 0%, 100% { transform: none; } 50% { transform: scale3d(1, 1, 1); }}@keyframes fill {
2023-12-08 14:22:03 UTC	1369	IN	Data Raw: 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 0a 7d 0a 0a 70 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 38 70 78 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 30 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 7d 0a 0a 23 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 65 30 65 30 65 30 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c Data Ascii: font-size: 16px; font-weight: 700;}p { margin: 8px 0; text-align: center; font-size: 20px; font-weight: 400;}#content { display: flex; align-items: center; justify-content: space-between; border: 1px solid #e0e0e0; background-col
2023-12-08 14:22:03 UTC	1369	IN	Data Raw: 72 63 6c 65 20 7b 0a 20 20 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 20 30 3b 0a 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 32 3b 0a 20 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 20 31 30 3b 0a 20 20 73 74 72 6f 6b 65 3a 20 23 30 33 38 31 32 37 3b 0a 20 20 66 69 6c 6c 3a 20 23 30 33 38 31 32 37 3b 0a 7d 0a 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 73 75 63 63 65 73 73 2d 69 63 6f 6e 20 7b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 61 61 39 33 37 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 73 75 63 63 65 73 73 2d 69 63 6f 6e 20 2e 70 31 20 7b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 61 61 39 33 37 3b 0a 7d 0a 2e 74 68 65 6d 65 2d Data Ascii: rcle { stroke-dashoffset: 0; stroke-width: 2; stroke-miterlimit: 10; stroke: #038127; fill: #038127;}.theme-dark #success-icon { box-shadow: inset 0 0 0 #0aa937;}.theme-dark #success-icon .p1 { box-shadow: inset 0 0 0 #0aa937;}.theme-
2023-12-08 14:22:03 UTC	1369	IN	Data Raw: 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 62 62 62 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 62 62 62 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 68 6f 76 65 72 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 61 63 74 69 76 65 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 Data Ascii: #challenge-error-title a { color: #bbb;}.theme-dark #challenge-error-title a:visited, .theme-dark #challenge-error-title a:link { color: #bbb;}.theme-dark #challenge-error-title a:hover, .theme-dark #challenge-error-title a:active, .theme-dark #c
2023-12-08 14:22:03 UTC	1369	IN	Data Raw: 3a 20 23 62 62 62 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 65 78 70 69 72 65 64 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 65 78 70 69 72 65 64 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 68 6f 76 65 72 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 65 78 70 69 72 65 64 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 34 39 34 39 34 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6f 76 65 72 6c 61 79 20 7b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 66 66 61 32 39 39 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 61 32 39 39 3b 0a 7d 0a 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 Data Ascii: : #bbb;}.theme-dark #expired-refresh-link:active, .theme-dark #expired-refresh-link:hover, .theme-dark #expired-refresh-link:focus { color: #949494;}.theme-dark .overlay { border-color: #ffa299; color: #ffa299;}#challenge-error { margin: 0
2023-12-08 14:22:03 UTC	1369	IN	Data Raw: 20 77 69 64 74 68 3a 20 32 34 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 32 34 70 78 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 61 63 74 69 76 65 20 7e 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 61 63 74 69 76 65 20 7e 20 73 70 61 6e 2e 63 74 70 2d 6c 61 62 65 6c 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 63 34 Data Ascii: width: 24px; height: 24px;}.ctp-checkbox-label input:active ~ .mark { border: 2px solid #c44d0e;}.ctp-checkbox-label input:active ~ span.ctp-label { text-decoration: underline;}.ctp-checkbox-label input:focus ~ .mark { border: 2px solid #c4
2023-12-08 14:22:03 UTC	1369	IN	Data Raw: 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 31 38 70 78 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 33 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 70 78 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6c 6f 67 6f 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 Data Ascii: n-items: center; justify-content: center; height: 118px;}.size-compact .link-spacer { margin-right: 3px; margin-left: 3px;}.size-compact .ctp-checkbox-container { text-align: left;}.size-compact #logo { margin-top: 5px; margin-bottom:
2023-12-08 14:22:03 UTC	1369	IN	Data Raw: 23 73 75 63 63 65 73 73 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 32 35 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 70 78 3b 0a 7d 0a 2e 72 74 6c 20 23 66 61 69 6c 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 32 35 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 70 78 3b 0a 7d 0a 2e 72 74 6c 20 23 73 70 69 6e 6e 65 72 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 32 35 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 70 78 3b 0a 7d 0a 2e 72 74 6c 20 23 65 78 70 69 72 65 64 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 32 35 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 70 78 3b 0a 7d 0a 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 Data Ascii: #success-icon { left: 255px; margin-left: 8px;}.rtl #fail-icon { left: 255px; margin-left: 8px;}.rtl #spinner-icon { left: 255px; margin-left: 8px;}.rtl #expired-icon { left: 255px; margin-left: 8px;}.rtl #branding { margin: 0 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49733	104.17.2.184	443	1916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-08 14:22:04 UTC	710	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8325a88a1b39287a HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/pplhm/0x4AAAAAAAOK1kuLGSjPsA09/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-08 14:22:04 UTC	335	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 46 72 69 2c 20 30 38 20 44 65 63 20 32 30 32 33 20 31 34 3a 32 32 3a 30 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 53 65 Data Ascii: HTTP/1.1 200 OKDate: Fri, 08 Dec 2023 14:22:04 GMTContent-Type: application/javascript; charset=UTF-8Transfer-Encoding: chunkedConnection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Se
2023-12-08 14:22:04 UTC	1034	IN	Data Raw: 37 65 36 33 0d 0a 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 7e 66 75 6e 63 74 69 6f 6e 28 69 31 2c 66 77 2c 66 78 2c 66 79 2c 66 43 2c 66 47 2c 66 48 2c 67 37 2c 67 38 2c 67 39 2c 67 61 2c 67 62 2c 67 63 2c 67 64 2c 67 65 2c 67 66 2c 67 67 2c 67 68 2c 67 69 2c 67 6a 2c 67 6b 2c 67 6c 2c 67 6d 2c 67 6e 2c 67 6f 2c 67 70 2c 67 71 2c 67 72 2c 67 73 2c 67 74 2c 67 75 2c 67 76 2c 67 77 2c 67 78 2c 67 79 2c 67 7a 2c 67 41 2c 67 42 2c 67 43 2c 67 44 2c 67 45 2c 67 46 2c 67 47 2c 67 48 2c 67 49 2c 67 4a 2c 67 4b 2c 67 4c 2c 67 4d 2c 67 4e 2c 67 4f 2c 67 50 2c 67 51 2c 67 52 2c 67 53 2c 67 54 2c 67 55 2c 67 56 2c 67 57 2c 67 59 2c 68 6d 2c 68 72 2c 68 41 2c 68 4a 2c 68 4b 2c 68 4c 2c 68 50 2c 68 57 2c 66 45 2c 66 46 29 Data Ascii: 7e63window._cf_chl_opt.uaO=false;~function(i1,fw,fx,fy,fC,fG,fH,g7,g8,g9,ga,gb,gc,gd,ge,gf,gg,gh,gi,gj,gk,gl,gm,gn,go,gp,gq,gr,gs,gt,gu,gv,gw,gx,gy,gz,gA,gB,gC,gD,gE,gF,gG,gH,gI,gJ,gK,gL,gM,gN,gO,gP,gQ,gR,gS,gT,gU,gV,gW,gY,hm,hr,hA,hJ,hK,hL,hP,hW,fE,fF)
2023-12-08 14:22:04 UTC	1369	IN	Data Raw: 35 35 29 2d 6a 2d 68 5b 69 32 28 31 33 30 32 29 5d 28 69 2c 36 35 35 33 35 29 2c 36 35 35 33 35 29 25 32 35 35 29 29 29 3b 72 65 74 75 72 6e 20 6b 5b 69 32 28 32 31 39 35 29 5d 28 27 27 29 7d 2c 66 77 5b 69 31 28 37 36 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 69 70 2c 65 2c 6a 29 7b 65 3d 28 69 70 3d 69 31 2c 7b 27 53 6a 74 77 54 27 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 29 7b 72 65 74 75 72 6e 20 67 28 68 2c 69 29 7d 2c 27 61 78 69 74 6c 27 3a 69 70 28 39 34 30 29 2c 27 65 6c 4f 76 58 27 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 68 3d 3d 3d 67 7d 2c 27 57 65 52 45 4e 27 3a 69 70 28 31 30 39 30 29 2c 27 6b 55 7a 53 59 27 3a 69 70 28 35 39 33 29 7d 29 3b 74 72 79 7b 69 66 28 65 5b 69 70 28 38 37 39 29 5d 28 65 5b 69 70 28 Data Ascii: 55)-j-h[i2(1302)](i,65535),65535)%255)));return k[i2(2195)]('')},fw[i1(768)]=function(c,ip,e,j){e=(ip=i1,{'SjtwT':function(g,h,i){return g(h,i)},'axitl':ip(940),'elOvX':function(g,h){return h===g},'WeREN':ip(1090),'kUzSY':ip(593)});try{if(e[ip(879)](e[ip(
2023-12-08 14:22:04 UTC	1369	IN	Data Raw: 6e 20 77 7c 7c 42 7d 2c 69 5b 69 5a 28 31 37 39 39 29 5d 3d 69 5a 28 39 34 38 29 2c 69 5b 69 5a 28 31 37 37 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 77 2c 42 29 7b 72 65 74 75 72 6e 20 77 2b 42 7d 2c 69 5b 69 5a 28 35 37 35 29 5d 3d 69 5a 28 33 37 36 29 2c 69 5b 69 5a 28 31 32 34 36 29 5d 3d 69 5a 28 31 34 32 33 29 2c 69 5b 69 5a 28 31 32 37 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 77 2c 42 29 7b 72 65 74 75 72 6e 20 77 2b 42 7d 2c 69 29 3b 74 72 79 7b 69 66 28 6b 3d 6a 5b 69 5a 28 31 37 32 36 29 5d 28 68 2c 6a 5b 69 5a 28 31 37 39 39 29 5d 29 2c 6c 3d 66 77 5b 69 5a 28 35 35 36 29 5d 5b 69 5a 28 37 34 38 29 5d 3f 27 68 2f 27 2b 66 77 5b 69 5a 28 35 35 36 29 5d 5b 69 5a 28 37 34 38 29 5d 2b 27 2f 27 3a 27 27 2c 6d 3d 6a 5b 69 5a 28 31 37 37 34 29 5d 28 6a 5b Data Ascii: n w\|\|B},i[iZ(1799)]=iZ(948),i[iZ(1774)]=function(w,B){return w+B},i[iZ(575)]=iZ(376),i[iZ(1246)]=iZ(1423),i[iZ(1273)]=function(w,B){return w+B},i);try{if(k=j[iZ(1726)](h,j[iZ(1799)]),l=fw[iZ(556)][iZ(748)]?'h/'+fw[iZ(556)][iZ(748)]+'/':'',m=j[iZ(1774)](j[
2023-12-08 14:22:04 UTC	1369	IN	Data Raw: 65 64 2c 6a 32 28 38 37 38 29 29 7d 2c 31 30 29 2c 66 77 5b 6a 30 28 31 34 37 32 29 5d 28 66 75 6e 63 74 69 6f 6e 28 6a 33 29 7b 6a 33 3d 6a 30 2c 66 77 5b 6a 33 28 39 32 39 29 5d 28 29 7d 2c 31 65 33 29 2c 66 77 5b 6a 30 28 31 35 38 36 29 5d 5b 6a 30 28 31 39 30 36 29 5d 28 6a 30 28 31 36 32 31 29 2c 6d 29 29 3b 72 65 74 75 72 6e 21 5b 5d 7d 2c 66 77 5b 69 31 28 31 31 36 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 65 2c 6a 35 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 29 7b 69 66 28 6a 35 3d 69 31 2c 66 3d 7b 27 44 4f 6f 5a 5a 27 3a 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 72 65 74 75 72 6e 20 6d 3d 3d 3d 6c 7d 2c 27 77 47 78 77 4b 27 3a 6a 35 28 31 31 33 32 29 2c 27 70 61 58 6e 69 27 3a 6a 35 28 31 34 32 30 29 2c 27 65 6c 51 48 4d 27 3a 66 75 6e 63 74 Data Ascii: ed,j2(878))},10),fw[j0(1472)](function(j3){j3=j0,fw[j3(929)]()},1e3),fw[j0(1586)][j0(1906)](j0(1621),m));return![]},fw[i1(1162)]=function(c,d,e,j5,f,g,h,i,j,k){if(j5=i1,f={'DOoZZ':function(l,m){return m===l},'wGxwK':j5(1132),'paXni':j5(1420),'elQHM':funct
2023-12-08 14:22:04 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 76 6f 69 64 20 66 5b 6a 38 28 31 35 35 35 29 5d 28 68 29 3b 28 73 3d 66 79 28 69 5b 6a 38 28 32 30 35 38 29 5d 29 2c 73 5b 6a 38 28 36 33 30 29 5d 28 66 5b 6a 38 28 34 34 36 29 5d 29 29 3f 6e 65 77 20 66 77 5b 28 6a 38 28 39 35 37 29 29 5d 28 73 29 28 64 29 3a 28 75 3d 67 34 28 73 29 2c 66 5b 6a 38 28 31 39 35 36 29 5d 28 74 79 70 65 6f 66 20 75 2c 6a 38 28 31 36 31 39 29 29 26 26 66 5b 6a 38 28 39 36 39 29 5d 28 75 2c 64 29 29 7d 2c 6b 3d 68 50 5b 6a 35 28 35 32 30 29 5d 28 4a 53 4f 4e 5b 6a 35 28 31 39 35 32 29 5d 28 64 29 29 5b 6a 35 28 31 35 32 36 29 5d 28 27 2b 27 2c 6a 35 28 31 37 30 31 29 29 2c 69 5b 6a 35 28 32 31 35 39 29 5d 28 66 5b 6a 35 28 31 30 30 31 29 5d 28 66 5b 6a 35 28 31 30 30 31 29 5d 28 27 76 5f 27 2b 66 77 5b 6a Data Ascii: return void f[j8(1555)](h);(s=fy(i[j8(2058)]),s[j8(630)](f[j8(446)]))?new fw[(j8(957))](s)(d):(u=g4(s),f[j8(1956)](typeof u,j8(1619))&&f[j8(969)](u,d))},k=hP[j5(520)](JSON[j5(1952)](d))[j5(1526)]('+',j5(1701)),i[j5(2159)](f[j5(1001)](f[j5(1001)]('v_'+fw[j
2023-12-08 14:22:04 UTC	1369	IN	Data Raw: 39 35 35 29 5d 3d 69 31 28 31 35 38 38 29 2c 67 38 5b 69 31 28 31 30 36 31 29 5d 3d 69 31 28 31 37 39 31 29 2c 67 38 5b 69 31 28 31 30 35 34 29 5d 3d 69 31 28 34 36 38 29 2c 67 38 5b 69 31 28 31 37 39 36 29 5d 3d 69 31 28 31 34 39 31 29 2c 67 39 3d 7b 7d 2c 67 39 5b 69 31 28 31 32 36 38 29 5d 3d 69 31 28 33 39 30 29 2c 67 39 5b 69 31 28 31 32 35 37 29 5d 3d 69 31 28 31 33 38 31 29 2c 67 39 5b 69 31 28 31 34 35 31 29 5d 3d 69 31 28 34 30 31 29 2c 67 39 5b 69 31 28 37 32 39 29 5d 3d 69 31 28 31 37 36 34 29 2c 67 39 5b 69 31 28 36 32 37 29 5d 3d 69 31 28 34 37 31 29 2c 67 39 5b 69 31 28 31 37 38 33 29 5d 3d 69 31 28 37 33 37 29 2c 67 39 5b 69 31 28 36 32 39 29 5d 3d 69 31 28 34 33 37 29 2c 67 39 5b 69 31 28 39 37 38 29 5d 3d 69 31 28 38 39 36 29 2c 67 39 5b Data Ascii: 955)]=i1(1588),g8[i1(1061)]=i1(1791),g8[i1(1054)]=i1(468),g8[i1(1796)]=i1(1491),g9={},g9[i1(1268)]=i1(390),g9[i1(1257)]=i1(1381),g9[i1(1451)]=i1(401),g9[i1(729)]=i1(1764),g9[i1(627)]=i1(471),g9[i1(1783)]=i1(737),g9[i1(629)]=i1(437),g9[i1(978)]=i1(896),g9[
2023-12-08 14:22:04 UTC	1369	IN	Data Raw: 34 31 37 29 2c 67 62 5b 69 31 28 36 32 37 29 5d 3d 69 31 28 31 38 34 35 29 2c 67 62 5b 69 31 28 31 37 38 33 29 5d 3d 69 31 28 32 31 39 32 29 2c 67 62 5b 69 31 28 36 32 39 29 5d 3d 69 31 28 31 39 38 34 29 2c 67 62 5b 69 31 28 39 37 38 29 5d 3d 69 31 28 38 31 36 29 2c 67 62 5b 69 31 28 31 38 36 33 29 5d 3d 69 31 28 39 35 33 29 2c 67 62 5b 69 31 28 32 30 34 39 29 5d 3d 69 31 28 31 32 39 35 29 2c 67 62 5b 69 31 28 32 31 31 34 29 5d 3d 69 31 28 35 32 38 29 2c 67 62 5b 69 31 28 38 37 33 29 5d 3d 69 31 28 32 30 39 33 29 2c 67 62 5b 69 31 28 31 38 38 38 29 5d 3d 69 31 28 36 31 30 29 2c 67 62 5b 69 31 28 31 35 39 30 29 5d 3d 69 31 28 32 31 37 32 29 2c 67 62 5b 69 31 28 32 31 37 37 29 5d 3d 69 31 28 32 31 38 31 29 2c 67 62 5b 69 31 28 35 38 38 29 5d 3d 69 31 28 35 Data Ascii: 417),gb[i1(627)]=i1(1845),gb[i1(1783)]=i1(2192),gb[i1(629)]=i1(1984),gb[i1(978)]=i1(816),gb[i1(1863)]=i1(953),gb[i1(2049)]=i1(1295),gb[i1(2114)]=i1(528),gb[i1(873)]=i1(2093),gb[i1(1888)]=i1(610),gb[i1(1590)]=i1(2172),gb[i1(2177)]=i1(2181),gb[i1(588)]=i1(5
2023-12-08 14:22:04 UTC	1369	IN	Data Raw: 5d 3d 69 31 28 37 38 36 29 2c 67 64 5b 69 31 28 32 31 37 37 29 5d 3d 69 31 28 34 39 35 29 2c 67 64 5b 69 31 28 35 38 38 29 5d 3d 69 31 28 31 36 35 30 29 2c 67 64 5b 69 31 28 36 39 34 29 5d 3d 69 31 28 37 39 36 29 2c 67 64 5b 69 31 28 31 31 35 36 29 5d 3d 69 31 28 31 31 36 39 29 2c 67 64 5b 69 31 28 31 37 32 33 29 5d 3d 69 31 28 31 37 33 38 29 2c 67 64 5b 69 31 28 35 33 30 29 5d 3d 69 31 28 32 31 33 36 29 2c 67 64 5b 69 31 28 34 34 37 29 5d 3d 69 31 28 31 30 38 39 29 2c 67 64 5b 69 31 28 31 30 32 30 29 5d 3d 69 31 28 31 39 32 34 29 2c 67 64 5b 69 31 28 31 33 32 36 29 5d 3d 69 31 28 31 32 36 37 29 2c 67 64 5b 69 31 28 31 39 35 35 29 5d 3d 69 31 28 34 37 33 29 2c 67 64 5b 69 31 28 31 30 36 31 29 5d 3d 69 31 28 31 33 37 33 29 2c 67 64 5b 69 31 28 31 30 35 34 Data Ascii: ]=i1(786),gd[i1(2177)]=i1(495),gd[i1(588)]=i1(1650),gd[i1(694)]=i1(796),gd[i1(1156)]=i1(1169),gd[i1(1723)]=i1(1738),gd[i1(530)]=i1(2136),gd[i1(447)]=i1(1089),gd[i1(1020)]=i1(1924),gd[i1(1326)]=i1(1267),gd[i1(1955)]=i1(473),gd[i1(1061)]=i1(1373),gd[i1(1054
2023-12-08 14:22:04 UTC	1369	IN	Data Raw: 2c 67 66 5b 69 31 28 31 39 35 35 29 5d 3d 69 31 28 39 37 35 29 2c 67 66 5b 69 31 28 31 30 36 31 29 5d 3d 69 31 28 31 36 32 36 29 2c 67 66 5b 69 31 28 31 30 35 34 29 5d 3d 69 31 28 32 31 39 31 29 2c 67 66 5b 69 31 28 31 37 39 36 29 5d 3d 69 31 28 36 31 33 29 2c 67 67 3d 7b 7d 2c 67 67 5b 69 31 28 31 32 36 38 29 5d 3d 69 31 28 36 38 31 29 2c 67 67 5b 69 31 28 31 32 35 37 29 5d 3d 69 31 28 31 34 33 30 29 2c 67 67 5b 69 31 28 31 34 35 31 29 5d 3d 69 31 28 31 31 35 37 29 2c 67 67 5b 69 31 28 37 32 39 29 5d 3d 69 31 28 39 39 35 29 2c 67 67 5b 69 31 28 36 32 37 29 5d 3d 69 31 28 34 36 34 29 2c 67 67 5b 69 31 28 31 37 38 33 29 5d 3d 69 31 28 31 36 36 39 29 2c 67 67 5b 69 31 28 36 32 39 29 5d 3d 69 31 28 31 30 35 37 29 2c 67 67 5b 69 31 28 39 37 38 29 5d 3d 69 31 Data Ascii: ,gf[i1(1955)]=i1(975),gf[i1(1061)]=i1(1626),gf[i1(1054)]=i1(2191),gf[i1(1796)]=i1(613),gg={},gg[i1(1268)]=i1(681),gg[i1(1257)]=i1(1430),gg[i1(1451)]=i1(1157),gg[i1(729)]=i1(995),gg[i1(627)]=i1(464),gg[i1(1783)]=i1(1669),gg[i1(629)]=i1(1057),gg[i1(978)]=i1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49734	104.17.2.184	443	1916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-08 14:22:04 UTC	785	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/pplhm/0x4AAAAAAAOK1kuLGSjPsA09/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-08 14:22:04 UTC	248	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 46 72 69 2c 20 30 38 20 44 65 63 20 32 30 32 33 20 31 34 3a 32 32 3a 30 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 70 6e 67 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 32 36 32 39 38 30 30 2c 20 70 75 62 6c 69 63 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 33 32 35 61 38 38 65 37 38 30 30 35 63 38 36 2d 4d 49 41 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: HTTP/1.1 200 OKDate: Fri, 08 Dec 2023 14:22:04 GMTContent-Type: image/pngTransfer-Encoding: chunkedConnection: closecache-control: max-age=2629800, publicServer: cloudflareCF-RAY: 8325a88e78005c86-MIAalt-svc: h3=":443"; ma=86400
2023-12-08 14:22:04 UTC	67	IN	Data Raw: 33 64 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 3dPNGIHDRsIDAT$IENDB`
2023-12-08 14:22:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49735	104.17.2.184	443	1916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-08 14:22:05 UTC	438	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-08 14:22:05 UTC	248	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 46 72 69 2c 20 30 38 20 44 65 63 20 32 30 32 33 20 31 34 3a 32 32 3a 30 35 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 70 6e 67 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 32 36 32 39 38 30 30 2c 20 70 75 62 6c 69 63 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 33 32 35 61 38 39 32 63 39 39 66 34 63 30 38 2d 4d 49 41 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: HTTP/1.1 200 OKDate: Fri, 08 Dec 2023 14:22:05 GMTContent-Type: image/pngTransfer-Encoding: chunkedConnection: closecache-control: max-age=2629800, publicServer: cloudflareCF-RAY: 8325a892c99f4c08-MIAalt-svc: h3=":443"; ma=86400
2023-12-08 14:22:05 UTC	67	IN	Data Raw: 33 64 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 3dPNGIHDRsIDAT$IENDB`
2023-12-08 14:22:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49737	104.17.2.184	443	1916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-08 14:22:05 UTC	915	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/444306888:1702041974:qedNnDAvJuTEx6GK7a0PZ6aCZBDBhkOW-8_-5XsNyIA/8325a88a1b39287a/c48312223deb6d4 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 2582 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: c48312223deb6d4 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/pplhm/0x4AAAAAAAOK1kuLGSjPsA09/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-08 14:22:05 UTC	2582	OUT	Data Raw: 76 5f 38 33 32 35 61 38 38 61 31 62 33 39 32 38 37 61 3d 68 66 6c 63 30 63 42 61 46 74 34 49 6c 34 66 51 6e 2d 6c 25 32 62 49 44 4a 2b 44 46 44 63 56 54 54 42 49 51 46 41 32 46 2d 56 54 44 4c 2b 76 46 48 6a 5a 46 36 76 33 46 6d 46 68 63 46 59 56 51 46 55 46 34 55 66 2b 31 46 68 6c 2b 71 6b 38 54 59 6a 46 48 63 34 2d 59 46 44 54 44 77 46 30 51 34 2d 37 71 24 74 36 46 65 46 34 31 6f 68 34 47 56 46 44 37 46 68 78 4b 36 35 37 6b 30 51 34 77 61 58 63 69 2d 46 55 63 54 56 63 46 71 63 42 6b 6e 30 4d 4b 4a 62 2d 63 46 6c 6a 6c 30 46 44 48 45 46 69 48 34 46 48 24 74 37 63 44 6d 33 2d 77 54 46 69 59 63 46 2b 77 77 73 73 42 45 37 61 33 4b 4b 24 77 36 32 35 47 6a 46 48 76 63 46 2d 77 54 47 62 48 45 62 2b 33 42 50 24 4a 5a 4b 70 36 59 30 6f 55 2d 47 65 37 55 4b 5a 55 Data Ascii: v_8325a88a1b39287a=hflc0cBaFt4Il4fQn-l%2bIDJ+DFDcVTTBIQFA2F-VTDL+vFHjZF6v3FmFhcFYVQFUF4Uf+1Fhl+qk8TYjFHc4-YFDTDwF0Q4-7q$t6FeF41oh4GVFD7FhxK657k0Q4waXci-FUcTVcFqcBkn0MKJb-cFljl0FDHEFiH4FH$t7cDm3-wTFiYcF+wwssBE7a3KK$w625GjFHvcF-wTGbHEb+3BP$JZKp6Y0oU-Ge7UKZU
2023-12-08 14:22:05 UTC	755	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 46 72 69 2c 20 30 38 20 44 65 63 20 32 30 32 33 20 31 34 3a 32 32 3a 30 35 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 70 6c 61 69 6e 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 66 2d 63 68 6c 2d 67 65 6e 3a 20 62 68 66 63 77 49 2f 6d 64 44 6a 45 4f 78 50 73 48 70 53 65 5a 36 65 4a 4f 33 48 48 65 55 42 4a 4d 52 38 4d 56 49 5a 31 35 55 69 6e 30 32 71 46 69 46 4e 76 6e 63 2b 47 4c 46 75 5a 76 34 51 7a 55 53 72 6b 75 36 67 42 66 59 51 63 4b 76 47 45 51 75 43 72 64 53 5a 58 38 62 42 4f 50 74 49 38 33 62 35 61 69 Data Ascii: HTTP/1.1 200 OKDate: Fri, 08 Dec 2023 14:22:05 GMTContent-Type: text/plain; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-chl-gen: bhfcwI/mdDjEOxPsHpSeZ6eJO3HHeUBJMR8MVIZ15Uin02qFiFNvnc+GLFuZv4QzUSrku6gBfYQcKvGEQuCrdSZX8bBOPtI83b5ai
2023-12-08 14:22:05 UTC	614	IN	Data Raw: 37 63 62 66 0d 0a 66 70 47 52 6d 71 4e 38 77 37 57 57 79 4a 57 39 70 37 32 2b 79 4a 75 35 72 59 76 4b 76 4d 71 2f 6a 39 50 4b 32 37 44 64 31 5a 75 78 75 73 7a 43 7a 4e 6d 79 33 39 47 31 32 61 6a 44 71 37 33 74 77 72 2b 37 76 4f 58 53 79 2b 58 31 2b 50 6e 36 30 39 65 36 79 39 32 34 76 65 50 78 34 63 50 68 41 73 50 41 35 4f 76 70 79 50 6a 64 32 51 51 4e 34 64 30 51 42 2b 50 58 32 66 51 53 2f 64 73 4e 32 68 37 31 2f 64 73 67 48 78 63 45 33 78 73 46 2b 77 59 74 36 52 30 53 2f 6a 4d 74 4d 41 73 49 37 69 6b 47 4a 69 72 30 2b 55 41 67 50 42 63 57 2b 6a 55 53 4b 43 67 42 4f 54 55 32 51 45 55 2f 4c 6a 41 6f 4b 30 4a 50 44 69 67 6a 4c 54 51 6f 4b 46 30 51 4e 7a 56 69 46 43 41 32 51 44 74 64 55 69 4d 7a 58 6b 31 69 51 79 31 5a 4b 69 35 50 63 48 5a 53 50 33 52 59 62 Data Ascii: 7cbffpGRmqN8w7WWyJW9p72+yJu5rYvKvMq/j9PK27Dd1ZuxuszCzNmy39G12ajDq73twr+7vOXSy+X1+Pn609e6y924vePx4cPhAsPA5OvpyPjd2QQN4d0QB+PX2fQS/dsN2h71/dsgHxcE3xsF+wYt6R0S/jMtMAsI7ikGJir0+UAgPBcW+jUSKCgBOTU2QEU/LjAoK0JPDigjLTQoKF0QNzViFCA2QDtdUiMzXk1iQy1ZKi5PcHZSP3RYb
2023-12-08 14:22:05 UTC	1369	IN	Data Raw: 66 57 52 62 57 6f 46 6a 52 58 68 35 6a 34 68 4c 6b 4a 43 45 5a 35 64 5a 56 35 71 52 58 5a 39 76 62 34 32 51 67 61 4f 42 63 59 5a 37 58 49 53 58 61 32 57 76 5a 34 70 6f 73 34 4e 31 63 72 57 6e 72 48 71 36 72 59 2b 36 76 6e 4b 71 6e 72 53 53 6a 71 47 5a 6d 38 43 65 78 72 58 46 67 49 57 4a 7a 37 2b 75 7a 71 36 33 71 4c 69 50 78 4e 76 61 33 73 75 56 7a 72 53 2f 6e 70 79 74 6e 36 47 61 35 75 6e 66 35 4d 50 4a 32 71 62 66 72 61 7a 4b 30 76 44 72 38 63 62 4d 7a 4e 58 59 33 4e 7a 71 36 64 44 31 7a 2b 50 30 31 50 72 64 78 64 2f 6d 37 65 76 39 43 2b 55 54 79 76 4c 6a 38 4e 2f 32 36 66 54 38 32 65 37 38 37 68 44 2b 45 51 44 30 4a 53 41 48 39 69 73 55 47 42 6a 39 35 4f 2f 70 45 79 6a 74 37 53 77 6f 49 6a 72 32 4e 42 33 36 4b 42 63 4e 2b 66 30 76 39 53 4d 36 4a 51 56 Data Ascii: fWRbWoFjRXh5j4hLkJCEZ5dZV5qRXZ9vb42QgaOBcYZ7XISXa2WvZ4pos4N1crWnrHq6rY+6vnKqnrSSjqGZm8CexrXFgIWJz7+uzq63qLiPxNva3suVzrS/npytn6Ga5unf5MPJ2qbfrazK0vDr8cbMzNXY3Nzq6dD1z+P01Prdxd/m7ev9C+UTyvLj8N/26fT82e787hD+EQD0JSAH9isUGBj95O/pEyjt7SwoIjr2NB36KBcN+f0v9SM6JQV
2023-12-08 14:22:05 UTC	1369	IN	Data Raw: 49 69 4e 69 33 4a 76 59 35 64 51 6c 32 35 71 63 59 74 78 6d 47 31 5a 62 48 70 7a 66 56 64 39 66 33 4a 69 67 57 56 6b 64 61 75 74 69 33 43 75 62 5a 32 4a 63 48 61 53 6d 5a 64 37 6b 35 4f 74 64 72 71 64 76 6e 7a 46 6f 4a 61 6e 66 72 6d 67 6b 35 79 69 6e 4d 66 45 69 37 75 62 6c 4d 37 53 6c 71 33 4a 31 64 43 36 30 37 43 74 79 4e 6a 4b 77 64 4c 63 78 75 4c 6e 6f 62 50 64 35 62 61 71 37 4e 32 76 77 4f 79 77 76 66 44 30 77 4f 2b 35 78 73 7a 35 2b 4e 33 63 2f 50 7a 64 77 65 2f 59 78 65 50 33 34 77 62 68 44 74 72 4d 2b 77 59 41 33 67 50 55 41 68 45 61 31 78 76 79 43 64 77 4d 37 76 7a 67 2f 75 4c 65 4a 68 59 61 42 77 6b 66 2b 42 59 4d 49 2b 48 34 45 42 37 38 48 53 63 4c 4d 53 45 48 4c 66 4d 4e 43 52 4d 65 50 53 38 66 47 76 30 2f 52 41 49 43 52 77 4a 47 48 68 63 4c Data Ascii: IiNi3JvY5dQl25qcYtxmG1ZbHpzfVd9f3JigWVkdauti3CubZ2JcHaSmZd7k5OtdrqdvnzFoJanfrmgk5yinMfEi7ublM7Slq3J1dC607CtyNjKwdLcxuLnobPd5baq7N2vwOywvfD0wO+5xsz5+N3c/Pzdwe/YxeP34wbhDtrM+wYA3gPUAhEa1xvyCdwM7vzg/uLeJhYaBwkf+BYMI+H4EB78HScLMSEHLfMNCRMePS8fGv0/RAICRwJGHhcL
2023-12-08 14:22:05 UTC	1369	IN	Data Raw: 35 51 56 34 39 73 56 59 6c 6c 64 46 69 4d 6e 33 42 61 6b 33 31 30 58 70 6d 42 65 47 4b 63 68 58 78 6d 6a 49 6d 41 61 70 4f 4e 68 47 36 57 6b 59 68 79 6e 5a 57 4d 64 71 6d 5a 6b 48 71 73 6e 5a 52 2b 67 71 47 59 67 6f 57 6c 6e 49 61 4f 71 61 43 4e 73 36 32 6b 6b 62 61 78 71 4a 57 39 30 4b 2f 4f 73 73 37 4b 31 4f 44 69 7a 39 33 5a 34 37 62 69 32 38 6a 4b 75 39 37 6b 35 4e 44 48 35 72 48 66 7a 65 6a 4a 35 39 65 39 75 4e 6e 4c 37 73 76 41 77 4d 48 76 2f 41 41 45 42 2b 50 62 41 65 50 4d 2b 38 72 49 38 4e 77 43 36 51 73 53 30 41 66 52 30 76 37 6f 32 78 63 53 33 78 6b 44 47 66 72 2b 4a 42 67 59 2f 53 34 63 48 67 45 67 45 43 50 79 4a 51 6b 52 42 42 6b 4e 46 44 49 70 44 42 67 2b 4d 54 7a 35 51 2f 59 65 50 68 38 57 4a 6b 4d 61 4f 41 64 4b 44 6b 77 4b 49 69 73 73 44 Data Ascii: 5QV49sVYlldFiMn3Bak310XpmBeGKchXxmjImAapONhG6WkYhynZWMdqmZkHqsnZR+gqGYgoWlnIaOqaCNs62kkbaxqJW90K/Oss7K1ODiz93Z47bi28jKu97k5NDH5rHfzejJ59e9uNnL7svAwMHv/AAEB+PbAePM+8rI8NwC6QsS0AfR0v7o2xcS3xkDGfr+JBgY/S4cHgEgECPyJQkRBBkNFDIpDBg+MTz5Q/YePh8WJkMaOAdKDkwKIissD
2023-12-08 14:22:05 UTC	1369	IN	Data Raw: 50 6b 6c 2b 52 67 4a 64 34 6c 4a 46 65 59 36 6d 4a 6e 5a 36 57 6a 71 6d 44 61 6d 69 69 66 36 2b 54 62 71 61 5a 6d 59 75 79 71 4a 75 62 6f 4b 69 67 74 35 69 69 6f 35 4f 37 73 4b 6d 6f 67 37 69 72 77 71 4b 69 79 34 2f 46 77 35 33 49 6f 38 61 52 71 35 4b 36 30 74 33 4b 6c 37 71 75 72 63 44 65 78 75 47 2b 79 4d 69 2f 79 37 7a 64 79 39 72 45 38 65 2f 78 7a 73 72 69 7a 2b 37 55 79 74 66 78 31 50 6e 6f 75 74 69 31 7a 51 54 51 76 76 33 46 39 39 77 4a 32 64 66 36 35 77 30 55 79 39 49 52 34 75 6b 59 45 76 48 75 46 4e 6a 65 32 66 37 70 34 67 30 53 35 42 76 39 4a 75 58 38 42 79 37 31 4a 67 4d 67 36 68 76 73 4a 53 38 49 4b 44 6b 7a 48 44 77 74 39 66 6e 37 47 42 38 36 2f 42 52 46 4d 68 73 6a 52 42 51 33 44 41 42 44 51 30 38 6b 52 43 41 2b 49 7a 41 54 46 79 6c 4b 52 6c Data Ascii: Pkl+RgJd4lJFeY6mJnZ6WjqmDamiif6+TbqaZmYuyqJuboKigt5iio5O7sKmog7irwqKiy4/Fw53Io8aRq5K60t3Kl7qurcDexuG+yMi/y7zdy9rE8e/xzsriz+7Uytfx1Pnouti1zQTQvv3F99wJ2df65w0Uy9IR4ukYEvHuFNje2f7p4g0S5Bv9JuX8By71JgMg6hvsJS8IKDkzHDwt9fn7GB86/BRFMhsjRBQ3DABDQ08kRCA+IzATFylKRl
2023-12-08 14:22:05 UTC	1369	IN	Data Raw: 66 58 2b 48 66 58 4b 57 69 6d 68 33 6e 4b 53 66 67 58 6c 71 71 61 61 56 61 4b 79 49 6d 71 75 71 63 72 47 75 74 33 79 38 67 72 53 44 66 38 4a 39 66 36 4f 61 78 37 61 47 78 35 2b 78 6f 39 43 2f 7a 34 33 4d 30 36 36 58 31 73 72 61 6c 4e 75 39 6d 37 6a 61 6e 4e 36 66 35 36 62 51 34 64 76 64 70 39 75 6f 76 61 76 4f 35 4f 50 4c 38 65 6a 76 32 65 79 77 37 4f 61 7a 37 4c 58 63 30 39 41 42 37 76 6b 45 32 4f 6b 43 78 66 55 49 36 67 55 4d 35 75 54 77 41 78 50 4d 46 50 58 54 38 42 50 55 46 39 63 67 33 67 6b 61 46 42 62 66 46 42 7a 31 34 77 63 64 48 41 51 76 2b 69 67 53 4a 67 6b 42 43 50 54 76 43 42 49 46 4a 54 45 54 50 6a 6f 52 44 50 6f 37 48 7a 59 75 4d 54 63 39 49 42 72 39 4e 53 42 49 52 41 73 4c 4b 6c 56 42 46 41 30 78 4b 55 6f 58 58 55 56 59 54 6c 4a 61 4b 79 41 Data Ascii: fX+HfXKWimh3nKSfgXlqqaaVaKyImquqcrGut3y8grSDf8J9f6Oax7aGx5+xo9C/z43M066X1sralNu9m7janN6f56bQ4dvdp9uovavO5OPL8ejv2eyw7Oaz7LXc09AB7vkE2OkCxfUI6gUM5uTwAxPMFPXT8BPUF9cg3gkaFBbfFBz14wcdHAQv+igSJgkBCPTvCBIFJTETPjoRDPo7HzYuMTc9IBr9NSBIRAsLKlVBFA0xKUoXXUVYTlJaKyA
2023-12-08 14:22:05 UTC	1369	IN	Data Raw: 35 69 74 70 70 69 70 6d 34 2b 78 6e 71 56 78 63 49 65 42 62 37 4b 37 70 62 79 66 73 33 36 30 66 58 57 45 76 61 43 54 71 63 47 47 76 72 57 57 72 62 75 49 30 4b 32 4b 76 73 7a 54 6a 35 47 70 6f 73 69 57 78 74 48 57 76 5a 50 6a 34 70 79 30 35 73 44 70 76 4b 48 6c 32 63 76 74 79 4f 47 73 30 63 4f 39 71 37 4c 6e 2b 66 54 79 75 64 44 76 30 62 6a 33 30 51 4f 31 2f 66 6e 6a 41 76 67 4a 35 73 6a 33 41 65 76 76 34 66 72 50 7a 41 44 52 36 2b 66 4f 37 4f 77 64 2b 2f 7a 30 43 77 41 42 2b 50 41 45 42 66 7a 39 49 65 66 35 35 79 67 49 41 78 44 39 42 69 6b 77 4a 7a 62 6f 44 79 77 4f 43 53 38 59 43 52 4d 36 44 76 6a 35 49 78 38 57 49 44 77 69 4e 78 6b 56 42 44 30 48 43 45 73 37 4d 30 6b 4c 4a 30 30 58 44 79 31 48 54 46 73 6f 47 32 46 4b 56 55 35 56 4e 31 74 47 4e 54 77 6b Data Ascii: 5itppipm4+xnqVxcIeBb7K7pbyfs360fXWEvaCTqcGGvrWWrbuI0K2KvszTj5GposiWxtHWvZPj4py05sDpvKHl2cvtyOGs0cO9q7Ln+fTyudDv0bj30QO1/fnjAvgJ5sj3Aevv4frPzADR6+fO7Owd+/z0CwAB+PAEBfz9Ief55ygIAxD9BikwJzboDywOCS8YCRM6Dvj5Ix8WIDwiNxkVBD0HCEs7M0kLJ00XDy1HTFsoG2FKVU5VN1tGNTwk
2023-12-08 14:22:05 UTC	1369	IN	Data Raw: 65 67 61 34 64 2f 74 36 32 4d 6b 6e 47 62 63 35 69 77 66 5a 78 36 73 35 79 53 6a 58 79 42 67 59 6d 53 71 36 57 6d 7a 4d 57 4e 68 39 43 52 6c 49 75 66 71 73 79 6a 73 72 43 72 6e 62 72 4a 6e 37 61 5a 75 4c 4b 2b 32 4e 57 61 77 72 62 6b 6f 72 6a 72 71 61 2b 39 37 74 50 46 76 61 33 6b 73 4e 4c 37 2b 62 62 56 79 75 44 4f 32 38 32 37 30 4c 73 46 78 63 69 2f 30 39 34 42 31 2b 62 6b 33 39 48 75 2f 64 50 74 34 51 50 6d 38 67 30 4b 32 2f 62 71 47 64 62 73 49 4e 33 6a 38 53 4d 49 2b 66 48 68 47 65 51 48 4d 43 2f 35 42 79 55 56 41 78 41 44 44 51 59 54 38 50 6f 54 38 79 77 2b 47 2f 30 78 4e 68 41 66 2f 43 55 59 49 52 63 55 41 79 64 42 4d 53 45 71 52 54 55 68 4d 46 51 58 4c 78 42 49 57 6a 63 61 54 56 49 73 4f 78 6c 42 4e 44 30 79 53 42 39 44 58 55 30 39 52 6b 74 4a 51 Data Ascii: ega4d/t62MknGbc5iwfZx6s5ySjXyBgYmSq6WmzMWNh9CRlIufqsyjsrCrnbrJn7aZuLK+2NWawrbkorjrqa+97tPFva3ksNL7+bbVyuDO28270LsFxci/094B1+bk39Hu/dPt4QPm8g0K2/bqGdbsIN3j8SMI+fHhGeQHMC/5ByUVAxADDQYT8PoT8yw+G/0xNhAf/CUYIRcUAydBMSEqRTUhMFQXLxBIWjcaTVIsOxlBND0ySB9DXU09RktJQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	49736	194.26.192.93	443	1916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-08 14:22:05 UTC	797	OUT	GET /favicon.ico HTTP/1.1 Host: yellowtelecomms.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yellowtelecomms.com/?uoxpeyml=2f55add6b836aa4259dab5df60ce153f174c9a1fbc9b51db3344b1403ca7675618bf96aa5564f4933669a9fb029d759e0cc8ada4debdb66b54039511b3abb583 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=LbzGEm3uoXgZ; qPdM.sig=dPrdM1sD3YP7v0-YRh0efKrALtE
2023-12-08 14:22:05 UTC	122	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 0d 0a 44 61 74 65 3a 20 46 72 69 2c 20 30 38 20 44 65 63 20 32 30 32 33 20 31 34 3a 32 32 3a 30 35 20 47 4d 54 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 0d 0a Data Ascii: HTTP/1.1 500 Internal Server ErrorDate: Fri, 08 Dec 2023 14:22:05 GMTConnection: closeTransfer-Encoding: chunked
2023-12-08 14:22:05 UTC	33	IN	Data Raw: 31 36 0d 0a 3c 68 31 3e 41 63 63 65 73 73 20 44 65 6e 69 65 64 3c 2f 68 31 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 16<h1>Access Denied</h1>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	49740	20.114.59.183	443

Timestamp	Bytes transferred	Direction	Data
2023-12-08 14:22:05 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Z4OR3NL8zldvxh4&MD=xA93+xHC HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2023-12-08 14:22:06 UTC	560	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 4d 6f 6e 2c 20 30 31 20 4a 61 6e 20 30 30 30 31 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 45 54 61 67 3a 20 22 58 41 6f 70 61 7a 56 30 30 58 44 57 6e 4a 43 77 6b 6d 45 57 52 76 36 4a 6b 62 6a 52 41 39 51 53 53 5a 32 2b 65 2f 33 4d 7a 45 6b 3d 5f 32 38 38 30 22 0d 0a 4d 53 2d 43 6f 72 72 65 6c 61 74 69 6f 6e 49 64 3a 20 30 32 37 36 35 63 61 31 2d 64 62 37 61 2d 34 30 64 61 2d Data Ascii: HTTP/1.1 200 OKCache-Control: no-cachePragma: no-cacheContent-Type: application/octet-streamExpires: -1Last-Modified: Mon, 01 Jan 0001 00:00:00 GMTETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880"MS-CorrelationId: 02765ca1-db7a-40da-
2023-12-08 14:22:06 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2023-12-08 14:22:06 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	49742	142.250.217.228	443	1916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-08 14:22:05 UTC	997	OUT	GET /sorry/index?continue=http://google.co.uk/&q=EgRmgZjUGI3NzKsGIjCnPpvWLbXDb183drVmgfJaSuOR6afn9EaOWYnUbyGbs7c--C6gg1mEUAh9LvwzP6MyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1 Host: www.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=UBeNCkZ3L8yXcx8qh4JFUXkwkNC9IrdiRdbjSTjqSiFh8WrRcbKr_rOJbgHY6TA4RT-6ps0bhemfwCPBsLMgPT7-gTcWqHvZvZbafOpkqRy0dLyYG9AjP2vbUBomarnc9pcZVlhHkUeUaWMurD0GGXyW05_B_1IyUNYEELmyqRg
2023-12-08 14:22:06 UTC	356	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 32 39 20 54 6f 6f 20 4d 61 6e 79 20 52 65 71 75 65 73 74 73 0d 0a 44 61 74 65 3a 20 46 72 69 2c 20 30 38 20 44 65 63 20 32 30 32 33 20 31 34 3a 32 32 3a 30 36 20 47 4d 54 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 46 72 69 2c 20 30 31 20 4a 61 6e 20 31 39 39 30 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 53 65 72 76 65 72 3a 20 48 54 54 50 20 73 65 72 76 65 72 20 28 75 6e 6b 6e 6f 77 6e 29 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 30 34 38 Data Ascii: HTTP/1.1 429 Too Many RequestsDate: Fri, 08 Dec 2023 14:22:06 GMTPragma: no-cacheExpires: Fri, 01 Jan 1990 00:00:00 GMTCache-Control: no-store, no-cache, must-revalidateContent-Type: text/htmlServer: HTTP server (unknown)Content-Length: 3048
2023-12-08 14:22:06 UTC	896	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 74 69 74 6c 65 3e 68 74 74 70 3a 2f 2f 67 6f 6f 67 6c 65 2e 63 6f 2e 75 6b 2f 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 66 61 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"><meta name="viewport" content="initial-scale=1"><title>http://google.co.uk/</title></head><body style="font-fa
2023-12-08 14:22:06 UTC	1252	IN	Data Raw: 6f 6e 73 65 29 20 7b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 61 70 74 63 68 61 2d 66 6f 72 6d 27 29 2e 73 75 62 6d 69 74 28 29 3b 7d 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 64 69 76 20 69 64 3d 22 72 65 63 61 70 74 63 68 61 22 20 63 6c 61 73 73 3d 22 67 2d 72 65 63 61 70 74 63 68 61 22 20 64 61 74 61 2d 73 69 74 65 6b 65 79 3d 22 36 4c 66 77 75 79 55 54 41 41 41 41 41 4f 41 6d 6f 53 30 66 64 71 69 6a 43 32 50 62 62 64 48 34 6b 6a 71 36 32 59 31 62 22 20 64 61 74 61 2d 63 61 6c 6c 62 61 63 6b 3d 22 73 75 62 6d 69 74 43 61 6c 6c 62 61 63 6b 22 20 64 61 74 61 2d 73 3d 22 32 53 69 32 6f 47 32 76 71 69 4a 44 4d 6b 66 6d 64 43 69 79 59 47 34 37 74 61 58 57 6d 6d 76 31 44 54 68 43 54 58 4a 46 56 7a 47 65 79 66 66 4f 35 45 6e 33 Data Ascii: onse) {document.getElementById('captcha-form').submit();};</script><div id="recaptcha" class="g-recaptcha" data-sitekey="6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b" data-callback="submitCallback" data-s="2Si2oG2vqiJDMkfmdCiyYG47taXWmmv1DThCTXJFVzGeyffO5En3
2023-12-08 14:22:06 UTC	900	IN	Data Raw: 6d 69 6e 67 20 66 72 6f 6d 20 79 6f 75 72 20 63 6f 6d 70 75 74 65 72 20 6e 65 74 77 6f 72 6b 20 77 68 69 63 68 20 61 70 70 65 61 72 20 74 6f 20 62 65 20 69 6e 20 76 69 6f 6c 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 3c 61 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 6f 6c 69 63 69 65 73 2f 74 65 72 6d 73 2f 22 3e 54 65 72 6d 73 20 6f 66 20 53 65 72 76 69 63 65 3c 2f 61 3e 2e 20 54 68 65 20 62 6c 6f 63 6b 20 77 69 6c 6c 20 65 78 70 69 72 65 20 73 68 6f 72 74 6c 79 20 61 66 74 65 72 20 74 68 6f 73 65 20 72 65 71 75 65 73 74 73 20 73 74 6f 70 2e 20 20 49 6e 20 74 68 65 20 6d 65 61 6e 74 69 6d 65 2c 20 73 6f 6c 76 69 6e 67 20 74 68 65 20 61 62 6f 76 65 20 43 41 50 54 43 48 41 20 77 69 6c 6c 20 6c 65 74 20 79 6f 75 20 63 6f 6e 74 69 Data Ascii: ming from your computer network which appear to be in violation of the <a href="//www.google.com/policies/terms/">Terms of Service</a>. The block will expire shortly after those requests stop. In the meantime, solving the above CAPTCHA will let you conti

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	49743	104.17.2.184	443	1916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-08 14:22:05 UTC	486	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/444306888:1702041974:qedNnDAvJuTEx6GK7a0PZ6aCZBDBhkOW-8_-5XsNyIA/8325a88a1b39287a/c48312223deb6d4 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-08 14:22:06 UTC	386	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 0d 0a 44 61 74 65 3a 20 46 72 69 2c 20 30 38 20 44 65 63 20 32 30 32 33 20 31 34 3a 32 32 3a 30 36 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 79 78 Data Ascii: HTTP/1.1 400 Bad RequestDate: Fri, 08 Dec 2023 14:22:06 GMTContent-Type: application/jsonTransfer-Encoding: chunkedConnection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: yx
2023-12-08 14:22:06 UTC	12	IN	Data Raw: 37 0d 0a 69 6e 76 61 6c 69 64 0d 0a Data Ascii: 7invalid
2023-12-08 14:22:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	49746	142.250.217.228	443	1916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-08 14:22:06 UTC	1014	OUT	GET /recaptcha/api.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/sorry/index?continue=http://google.co.uk/&q=EgRmgZjUGI3NzKsGIjCnPpvWLbXDb183drVmgfJaSuOR6afn9EaOWYnUbyGbs7c--C6gg1mEUAh9LvwzP6MyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=UBeNCkZ3L8yXcx8qh4JFUXkwkNC9IrdiRdbjSTjqSiFh8WrRcbKr_rOJbgHY6TA4RT-6ps0bhemfwCPBsLMgPT7-gTcWqHvZvZbafOpkqRy0dLyYG9AjP2vbUBomarnc9pcZVlhHkUeUaWMurD0GGXyW05_B_1IyUNYEELmyqRg
2023-12-08 14:22:06 UTC	528	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 45 78 70 69 72 65 73 3a 20 46 72 69 2c 20 30 38 20 44 65 63 20 32 30 32 33 20 31 34 3a 32 32 3a 30 36 20 47 4d 54 0d 0a 44 61 74 65 3a 20 46 72 69 2c 20 30 38 20 44 65 63 20 32 30 32 33 20 31 34 3a 32 32 3a 30 36 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 33 30 30 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 58 Data Ascii: HTTP/1.1 200 OKContent-Type: text/javascript; charset=utf-8Expires: Fri, 08 Dec 2023 14:22:06 GMTDate: Fri, 08 Dec 2023 14:22:06 GMTCache-Control: private, max-age=300Cross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffX
2023-12-08 14:22:06 UTC	724	IN	Data Raw: 34 63 36 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 4c6/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2023-12-08 14:22:06 UTC	505	IN	Data Raw: 6d 56 34 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 5a 58 30 3d 27 3b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 63 77 51 76 51 68 73 79 34 5f 6e 59 64 6e 53 44 59 34 75 37 4f 35 5f 42 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 3b 70 6f 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 27 61 6e 6f 6e 79 6d 6f 75 73 27 3b 70 6f 2e 69 6e 74 65 67 72 69 74 79 3d 27 73 68 61 33 38 34 2d 4a 74 76 68 46 51 6c 50 51 36 4c 4c 2f 2b Data Ascii: mV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-JtvhFQlPQ6LL/+
2023-12-08 14:22:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	49750	104.17.2.184	443	1916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-08 14:22:07 UTC	804	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/8325a88a1b39287a/1702045325441/60ed290997626eb1a1ce799b56cbd68b9613d1865e9881799b17d985a5e6e502/1eIgiSiESzLLnF9 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/pplhm/0x4AAAAAAAOK1kuLGSjPsA09/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-08 14:22:07 UTC	152	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 31 20 55 6e 61 75 74 68 6f 72 69 7a 65 64 0d 0a 44 61 74 65 3a 20 46 72 69 2c 20 30 38 20 44 65 63 20 32 30 32 33 20 31 34 3a 32 32 3a 30 37 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 70 6c 61 69 6e 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: HTTP/1.1 401 UnauthorizedDate: Fri, 08 Dec 2023 14:22:07 GMTContent-Type: text/plain; charset=UTF-8Transfer-Encoding: chunkedConnection: close
2023-12-08 14:22:07 UTC	1374	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 59 4f 30 70 43 5a 64 69 62 72 47 68 7a 6e 6d 62 56 73 76 57 69 35 59 54 30 59 5a 65 6d 49 46 35 6d 78 66 5a 68 61 58 6d 35 51 49 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d 45 41 67 Data Ascii: www-authenticate: PrivateToken challenge=AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gYO0pCZdibrGhznmbVsvWi5YT0YZemIF5mxfZhaXm5QIAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=, token-key=MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAg
2023-12-08 14:22:07 UTC	6	IN	Data Raw: 31 0d 0a 4a 0d 0a Data Ascii: 1J
2023-12-08 14:22:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	49751	104.17.2.184	443	1916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-08 14:22:08 UTC	775	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8325a88a1b39287a/1702045325441/i3LT-P1zuZ3N7c- HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/pplhm/0x4AAAAAAAOK1kuLGSjPsA09/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-08 14:22:08 UTC	208	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 46 72 69 2c 20 30 38 20 44 65 63 20 32 30 32 33 20 31 34 3a 32 32 3a 30 38 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 70 6e 67 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 33 32 35 61 38 61 37 36 66 33 66 30 33 36 32 2d 4d 49 41 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: HTTP/1.1 200 OKDate: Fri, 08 Dec 2023 14:22:08 GMTContent-Type: image/pngTransfer-Encoding: chunkedConnection: closeServer: cloudflareCF-RAY: 8325a8a76f3f0362-MIAalt-svc: h3=":443"; ma=86400
2023-12-08 14:22:08 UTC	67	IN	Data Raw: 33 64 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0e 00 00 00 21 08 02 00 00 00 66 d0 0d 65 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 3dPNGIHDR!feIDAT$IENDB`
2023-12-08 14:22:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	49752	142.250.217.228	443	1916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-08 14:22:08 UTC	1621	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B&size=normal&s=2Si2oG2vqiJDMkfmdCiyYG47taXWmmv1DThCTXJFVzGeyffO5En3cciASXKsozAzASCwEoWvjRXm3bXAFFd0Nznp7eONKdw1O-ZoT1tvJ44jhAteAdAVNVbBONiYzV4VdhBqZx0JZwsnry9e3i7Fhxp6qrFglI0AWYkx7kclnCibOznQiXcb5gGxA95AV31LMyA6OF_5FM_bJEdQeMpKwFSpAv1PY-WgLXFhjwtdS2t4ZBdN2b2t5tltQo38zBD367y7X_uejy391DzFcBMU2ly-lSUKWr4&cb=r5b06divj710 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.google.com/sorry/index?continue=http://google.co.uk/&q=EgRmgZjUGI3NzKsGIjCnPpvWLbXDb183drVmgfJaSuOR6afn9EaOWYnUbyGbs7c--C6gg1mEUAh9LvwzP6MyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=UBeNCkZ3L8yXcx8qh4JFUXkwkNC9IrdiRdbjSTjqSiFh8WrRcbKr_rOJbgHY6TA4RT-6ps0bhemfwCPBsLMgPT7-gTcWqHvZvZbafOpkqRy0dLyYG9AjP2vbUBomarnc9pcZVlhHkUeUaWMurD0GGXyW05_B_1IyUNYEELmyqRg
2023-12-08 14:22:08 UTC	891	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 45 6d 62 65 64 64 65 72 2d 50 6f 6c 69 63 79 3a 20 72 65 71 75 69 72 65 2d 63 6f 72 70 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 72 65 63 61 70 74 63 68 61 22 2c 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 73 70 2e 77 69 74 68 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 73 70 2f 72 65 70 6f 72 74 2d 74 Data Ascii: HTTP/1.1 200 OKContent-Type: text/html; charset=utf-8Cross-Origin-Resource-Policy: cross-originCross-Origin-Embedder-Policy: require-corpReport-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-t
2023-12-08 14:22:08 UTC	361	IN	Data Raw: 32 61 33 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2a37<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2023-12-08 14:22:08 UTC	1252	IN	Data Raw: 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 Data Ascii: o/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//f
2023-12-08 14:22:08 UTC	1252	IN	Data Raw: 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 2d 31 45 39 46 2c 20 55 2b 31 45 46 32 2d 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 46 2c 20 Data Ascii: boto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20CF,
2023-12-08 14:22:08 UTC	1252	IN	Data Raw: 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 Data Ascii: font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/* greek */@font-face { font-family: 'Roboto'; font-sty
2023-12-08 14:22:08 UTC	1252	IN	Data Raw: 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 37 34 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a Data Ascii: to/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}
2023-12-08 14:22:08 UTC	1252	IN	Data Raw: 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 2d Data Ascii: * vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-
2023-12-08 14:22:08 UTC	1252	IN	Data Raw: 6d 77 34 6a 41 41 33 37 38 62 61 75 6e 50 54 71 77 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 61 70 69 32 2f 27 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 63 77 51 76 51 68 73 79 34 5f 6e 59 64 6e 53 44 59 34 75 37 4f 35 5f 42 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 51 74 79 36 78 Data Ascii: mw4jAA378baunPTqw" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com/recaptcha/api2/';</script><script type="text/javascript" src="https://www.gstatic.com/recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/recaptcha__en.js" nonce="Qty6x
2023-12-08 14:22:08 UTC	1252	IN	Data Raw: 78 52 61 66 6c 36 34 31 42 72 44 30 4e 4c 36 61 30 76 4b 51 5f 41 76 6a 65 56 62 42 78 78 34 59 4c 4d 7a 61 4c 4b 65 59 67 37 64 47 34 59 5f 6b 44 6b 49 44 4b 78 6d 45 6c 57 43 5a 78 4c 79 39 6a 57 44 52 4f 6a 61 4a 34 45 67 64 64 62 7a 56 33 52 39 31 51 70 64 53 4e 48 69 6d 2d 32 4d 51 5a 67 77 6b 52 6f 58 52 39 6e 4d 74 65 36 4d 38 42 37 42 45 36 32 71 37 4b 6d 6b 50 75 63 78 59 6c 66 59 4a 78 62 48 70 30 61 33 45 6d 59 5f 67 57 71 63 6a 33 50 74 56 48 4b 2d 55 4d 4a 63 57 57 54 54 74 53 38 66 43 43 69 64 6f 76 6b 76 43 76 49 42 79 61 4f 57 5a 73 38 63 4d 2d 30 6e 57 31 79 70 62 6f 33 52 62 33 4c 6e 7a 5f 63 5f 6b 39 61 44 48 43 68 66 59 36 33 5a 73 72 36 4f 71 4a 43 65 6f 51 38 6c 4a 39 6f 74 41 47 62 6b 75 65 48 64 30 4a 7a 73 75 33 66 63 4f 71 76 72 Data Ascii: xRafl641BrD0NL6a0vKQ_AvjeVbBxx4YLMzaLKeYg7dG4Y_kDkIDKxmElWCZxLy9jWDROjaJ4EgddbzV3R91QpdSNHim-2MQZgwkRoXR9nMte6M8B7BE62q7KmkPucxYlfYJxbHp0a3EmY_gWqcj3PtVHK-UMJcWWTTtS8fCCidovkvCvIByaOWZs8cM-0nW1ypbo3Rb3Lnz_c_k9aDHChfY63Zsr6OqJCeoQ8lJ9otAGbkueHd0Jzsu3fcOqvr
2023-12-08 14:22:08 UTC	1252	IN	Data Raw: 52 58 37 67 52 32 56 53 34 64 6f 49 54 75 77 5f 44 4a 54 75 4b 2d 57 66 49 72 43 56 35 48 54 61 37 4b 70 4c 5a 74 5a 69 44 4d 53 73 41 37 78 66 4d 4a 4f 51 2d 38 4d 4d 6e 4e 41 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 51 74 79 36 78 6d 77 34 6a 41 41 33 37 38 62 61 75 6e 50 54 71 77 22 3e 0a 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 61 6e 63 68 6f 72 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 61 69 6e 70 75 74 5c 78 32 32 2c 5b 5c 78 32 32 62 67 64 61 74 61 5c 78 32 32 2c 5c 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 54 53 46 56 72 52 57 6c 77 61 46 46 31 57 6e 46 59 65 55 78 36 52 45 35 42 4d 55 78 6a Data Ascii: RX7gR2VS4doITuw_DJTuK-WfIrCV5HTa7KpLZtZiDMSsA7xfMJOQ-8MMnNA"><script type="text/javascript" nonce="Qty6xmw4jAA378baunPTqw"> recaptcha.anchor.Main.init("[\x22ainput\x22,[\x22bgdata\x22,\x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy9TSFVrRWlwaFF1WnFYeUx6RE5BMUxj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	49754	104.17.2.184	443	1916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-08 14:22:08 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8325a88a1b39287a/1702045325441/i3LT-P1zuZ3N7c- HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-08 14:22:09 UTC	208	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 46 72 69 2c 20 30 38 20 44 65 63 20 32 30 32 33 20 31 34 3a 32 32 3a 30 39 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 70 6e 67 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 33 32 35 61 38 61 61 65 61 64 38 33 33 34 66 2d 4d 49 41 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: HTTP/1.1 200 OKDate: Fri, 08 Dec 2023 14:22:09 GMTContent-Type: image/pngTransfer-Encoding: chunkedConnection: closeServer: cloudflareCF-RAY: 8325a8aaead8334f-MIAalt-svc: h3=":443"; ma=86400
2023-12-08 14:22:09 UTC	67	IN	Data Raw: 33 64 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0e 00 00 00 21 08 02 00 00 00 66 d0 0d 65 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 3dPNGIHDR!feIDAT$IENDB`
2023-12-08 14:22:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	49757	142.250.217.228	443	1916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-08 14:22:09 UTC	1339	OUT	GET /js/bg/SHUkEiphQuZqXyLzDNA1LcOjIY5P93oSbI0OKMKltYY.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B&size=normal&s=2Si2oG2vqiJDMkfmdCiyYG47taXWmmv1DThCTXJFVzGeyffO5En3cciASXKsozAzASCwEoWvjRXm3bXAFFd0Nznp7eONKdw1O-ZoT1tvJ44jhAteAdAVNVbBONiYzV4VdhBqZx0JZwsnry9e3i7Fhxp6qrFglI0AWYkx7kclnCibOznQiXcb5gGxA95AV31LMyA6OF_5FM_bJEdQeMpKwFSpAv1PY-WgLXFhjwtdS2t4ZBdN2b2t5tltQo38zBD367y7X_uejy391DzFcBMU2ly-lSUKWr4&cb=r5b06divj710 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=UBeNCkZ3L8yXcx8qh4JFUXkwkNC9IrdiRdbjSTjqSiFh8WrRcbKr_rOJbgHY6TA4RT-6ps0bhemfwCPBsLMgPT7-gTcWqHvZvZbafOpkqRy0dLyYG9AjP2vbUBomarnc9pcZVlhHkUeUaWMurD0GGXyW05_B_1IyUNYEELmyqRg
2023-12-08 14:22:10 UTC	810	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 72 65 71 75 69 72 65 2d 74 72 75 73 74 65 64 2d 74 79 70 65 73 2d 66 6f 72 20 27 73 63 72 69 70 74 27 3b 20 72 65 70 6f 72 74 2d 75 72 69 20 68 74 74 70 73 3a 2f 2f 63 73 70 2e 77 69 74 68 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 73 70 2f 62 6f 74 67 75 61 72 64 2d 73 63 73 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesContent-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scsCross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy: same-origin; re
2023-12-08 14:22:10 UTC	442	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 55 29 7b 72 65 74 75 72 6e 20 55 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 55 2c 79 29 7b 69 66 28 79 3d 28 55 3d 4d 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 6e 75 6c 6c 29 2c 21 55 7c 7c 21 55 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 79 3b 74 72 79 7b 79 3d 55 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var M=this\|\|self,C=function(U){return U},c=function(U,y){if(y=(U=M.trustedTypes,null),!U\|\|!U.createPolicy)return y;try{y=U.createPolicy("bg",{createHTML:
2023-12-08 14:22:10 UTC	1252	IN	Data Raw: 65 61 74 65 53 63 72 69 70 74 28 75 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 75 29 7b 72 65 74 75 72 6e 22 22 2b 75 7d 7d 28 4d 29 28 41 72 72 61 79 28 37 38 32 34 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 2e 6a 6f 69 6e 28 22 5c 6e 22 29 2b 27 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 55 56 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 55 2c 4d 2c 43 29 7b 74 72 79 7b 43 3d 79 5b 28 28 55 7c 30 29 2b 32 29 25 33 5d 2c 79 5b 55 5d 3d 28 79 5b 55 5d 7c 30 29 2d 28 79 5b 28 28 55 7c 30 29 2b 31 29 25 33 5d 7c 30 29 2d 28 43 7c 30 29 5e 28 31 3d 3d 55 3f 43 3c 3c 4d 3a 43 3e 3e 3e 4d 29 7d 63 61 74 63 68 28 42 29 7b 74 68 72 6f 77 20 42 3b 7d 7d 2c 75 62 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 55 2c 4d 2c 43 2c 42 2c 6b 29 7b 69 66 28 21 79 2e 43 29 7b 79 2e 5a Data Ascii: eateScript(u)}:function(u){return""+u}}(M)(Array(7824*Math.random()\|0).join("\n")+'(function(){var UV=function(y,U,M,C){try{C=y[((U\|0)+2)%3],y[U]=(y[U]\|0)-(y[((U\|0)+1)%3]\|0)-(C\|0)^(1==U?C<<M:C>>>M)}catch(B){throw B;}},ub=function(y,U,M,C,B,k){if(!y.C){y.Z
2023-12-08 14:22:10 UTC	1252	IN	Data Raw: 75 2c 63 2c 4e 2c 78 29 7b 69 66 28 42 2e 55 48 21 3d 28 63 3d 42 2e 6c 65 6e 67 74 68 2c 78 3d 28 63 7c 30 29 2d 34 3e 3e 33 2c 78 29 29 7b 78 3d 28 78 3c 3c 28 4e 3d 5b 30 2c 30 2c 6b 5b 42 2e 55 48 3d 78 2c 31 5d 2c 6b 5b 32 5d 5d 2c 33 29 29 2d 34 3b 74 72 79 7b 42 2e 69 62 3d 63 66 28 4e 69 28 28 78 7c 30 29 2b 34 2c 42 29 2c 4e 69 28 78 2c 42 29 2c 4e 29 7d 63 61 74 63 68 28 61 29 7b 74 68 72 6f 77 20 61 3b 7d 7d 42 2e 70 75 73 68 28 42 2e 69 62 5b 63 26 37 5d 5e 75 29 7d 2c 6b 3d 54 28 31 36 39 2c 55 29 29 3a 4d 3d 66 75 6e 63 74 69 6f 6e 28 75 29 7b 42 2e 70 75 73 68 28 75 29 7d 2c 43 26 26 4d 28 43 26 32 35 35 29 2c 55 3d 79 2e 6c 65 6e 67 74 68 2c 43 3d 30 3b 43 3c 55 3b 43 2b 2b 29 4d 28 79 5b 43 5d 29 7d 2c 24 65 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: u,c,N,x){if(B.UH!=(c=B.length,x=(c\|0)-4>>3,x)){x=(x<<(N=[0,0,k[B.UH=x,1],k[2]],3))-4;try{B.ib=cf(Ni((x\|0)+4,B),Ni(x,B),N)}catch(a){throw a;}}B.push(B.ib[c&7]^u)},k=T(169,U)):M=function(u){B.push(u)},C&&M(C&255),U=y.length,C=0;C<U;C++)M(y[C])},$e=function(
2023-12-08 14:22:10 UTC	1252	IN	Data Raw: 29 2c 6b 5b 43 2e 67 5d 3d 66 75 6e 63 74 69 6f 6e 28 4e 29 7b 63 3d 4e 2c 75 2b 3d 36 2b 37 2a 79 2c 75 26 3d 37 7d 2c 6b 2e 63 6f 6e 63 61 74 3d 66 75 6e 63 74 69 6f 6e 28 4e 29 7b 72 65 74 75 72 6e 28 28 63 3d 28 4e 3d 28 4e 3d 33 31 30 38 2a 4d 2a 63 2b 75 2b 33 2a 28 4e 3d 4d 25 31 36 2b 31 2c 4d 29 2a 4d 2a 4e 2d 31 32 36 2a 4d 2a 4d 2a 63 2d 33 30 36 36 2a 63 2d 4e 2a 63 2b 28 42 28 29 7c 30 29 2a 4e 2b 34 32 2a 63 2a 63 2b 55 5b 75 2b 34 33 26 37 5d 2a 4d 2a 4e 2c 55 5b 4e 5d 29 2c 76 6f 69 64 20 30 29 2c 55 29 5b 28 75 2b 32 39 26 37 29 2b 28 79 26 32 29 5d 3d 4e 2c 55 29 5b 75 2b 28 79 26 32 29 5d 3d 2d 37 34 2c 4e 7d 2c 6b 7d 2c 6c 62 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 55 29 7b 69 66 28 28 79 3d 28 55 3d 6e 75 6c 6c 2c 4a 29 2e 74 72 75 73 74 Data Ascii: ),k[C.g]=function(N){c=N,u+=6+7y,u&=7},k.concat=function(N){return((c=(N=(N=3108Mc+u+3(N=M%16+1,M)MN-126MMc-3066c-Nc+(B()\|0)N+42cc+U[u+43&7]MN,U[N]),void 0),U)[(u+29&7)+(y&2)]=N,U)[u+(y&2)]=-74,N},k},lb=function(y,U){if((y=(U=null,J).trust
2023-12-08 14:22:10 UTC	1252	IN	Data Raw: 28 74 72 75 65 2c 28 50 28 28 50 28 55 2c 28 55 2e 4a 74 3d 28 6e 28 28 56 28 28 6e 28 55 2c 33 32 2c 28 6e 28 55 2c 33 33 30 2c 28 56 28 66 75 6e 63 74 69 6f 6e 28 75 2c 63 2c 4e 29 7b 6e 28 75 2c 28 4e 3d 28 4e 3d 28 63 3d 28 4e 3d 6c 28 75 29 2c 6c 29 28 75 29 2c 54 28 4e 2c 75 29 29 2c 49 51 28 4e 29 29 2c 63 29 2c 4e 29 7d 2c 28 56 28 28 6e 28 55 2c 28 56 28 28 6e 28 55 2c 34 31 39 2c 28 56 28 66 75 6e 63 74 69 6f 6e 28 75 2c 63 2c 4e 2c 78 2c 61 29 7b 30 21 3d 3d 28 78 3d 28 4e 3d 28 63 3d 28 61 3d 6c 28 28 63 3d 28 4e 3d 6c 28 75 29 2c 6c 29 28 75 29 2c 75 29 29 2c 78 3d 6c 28 75 29 2c 61 3d 54 28 61 2c 75 29 2c 54 28 63 2c 75 29 29 2c 54 29 28 4e 2c 75 2e 49 29 2c 54 28 78 2c 75 29 29 2c 4e 29 26 26 28 78 3d 53 43 28 61 2c 75 2c 31 2c 78 2c 4e 2c Data Ascii: (true,(P((P(U,(U.Jt=(n((V((n(U,32,(n(U,330,(V(function(u,c,N){n(u,(N=(N=(c=(N=l(u),l)(u),T(N,u)),IQ(N)),c),N)},(V((n(U,(V((n(U,419,(V(function(u,c,N,x,a){0!==(x=(N=(c=(a=l((c=(N=l(u),l)(u),u)),x=l(u),a=T(a,u),T(c,u)),T)(N,u.I),T(x,u)),N)&&(x=SC(a,u,1,x,N,
2023-12-08 14:22:10 UTC	1252	IN	Data Raw: 6e 28 75 2c 63 2c 4e 2c 78 2c 61 29 7b 28 78 3d 6c 28 28 63 3d 6c 28 28 61 3d 6c 28 75 29 2c 75 29 29 2c 75 29 29 2c 75 2e 49 3d 3d 75 29 26 26 28 78 3d 54 28 78 2c 75 29 2c 4e 3d 54 28 61 2c 75 29 2c 63 3d 54 28 63 2c 75 29 2c 4e 5b 63 5d 3d 78 2c 31 35 30 3d 3d 61 26 26 28 75 2e 57 3d 76 6f 69 64 20 30 2c 32 3d 3d 63 26 26 28 75 2e 69 3d 70 28 33 32 2c 66 61 6c 73 65 2c 75 29 2c 75 2e 57 3d 76 6f 69 64 20 30 29 29 29 7d 2c 28 56 28 66 75 6e 63 74 69 6f 6e 28 75 2c 63 2c 4e 29 7b 6e 28 75 2c 28 4e 3d 28 63 3d 6c 28 75 29 2c 6c 28 75 29 29 2c 4e 29 2c 22 22 2b 54 28 63 2c 75 29 29 7d 2c 55 2c 28 6e 28 55 2c 33 37 37 2c 28 56 28 66 75 6e 63 74 69 6f 6e 28 75 2c 63 2c 4e 2c 78 29 7b 21 49 28 75 2c 66 61 6c 73 65 2c 74 72 75 65 2c 63 29 26 26 28 63 3d 24 65 Data Ascii: n(u,c,N,x,a){(x=l((c=l((a=l(u),u)),u)),u.I==u)&&(x=T(x,u),N=T(a,u),c=T(c,u),N[c]=x,150==a&&(u.W=void 0,2==c&&(u.i=p(32,false,u),u.W=void 0)))},(V(function(u,c,N){n(u,(N=(c=l(u),l(u)),N),""+T(c,u))},U,(n(U,377,(V(function(u,c,N,x){!I(u,false,true,c)&&(c=$e
2023-12-08 14:22:10 UTC	1252	IN	Data Raw: 2c 63 5b 33 5d 29 3a 32 28 29 2c 6e 28 75 2c 61 2c 63 29 29 7d 2c 28 56 28 66 75 6e 63 74 69 6f 6e 28 75 2c 63 29 7b 75 3d 54 28 28 63 3d 6c 28 75 29 2c 63 29 2c 75 2e 49 29 2c 75 5b 30 5d 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 75 5b 31 5d 2c 75 5b 32 5d 2c 77 29 7d 2c 55 2c 28 6e 28 55 2c 39 33 2c 5b 31 36 30 2c 28 56 28 66 75 6e 63 74 69 6f 6e 28 75 2c 63 2c 4e 2c 78 29 7b 6e 28 75 2c 28 4e 3d 54 28 28 78 3d 28 63 3d 28 78 3d 6c 28 75 29 2c 6c 29 28 75 29 2c 54 28 78 2c 75 29 29 2c 63 29 2c 75 29 2c 63 29 2c 4e 2b 78 29 7d 2c 55 2c 28 6e 28 55 2c 28 6e 28 55 2c 28 55 2e 4f 48 3d 28 55 2e 46 3d 31 2c 55 2e 4b 3d 30 2c 55 2e 44 4b 3d 43 2c 55 2e 6f 3d 76 6f 69 64 20 30 2c 55 2e 4a 3d 76 6f 69 64 20 30 2c 28 55 2e 56 3d 30 2c 55 29 Data Ascii: ,c[3]):2(),n(u,a,c))},(V(function(u,c){u=T((c=l(u),c),u.I),u[0].removeEventListener(u[1],u[2],w)},U,(n(U,93,[160,(V(function(u,c,N,x){n(u,(N=T((x=(c=(x=l(u),l)(u),T(x,u)),c),u),c),N+x)},U,(n(U,(n(U,(U.OH=(U.F=1,U.K=0,U.DK=C,U.o=void 0,U.J=void 0,(U.V=0,U)
2023-12-08 14:22:10 UTC	1252	IN	Data Raw: 2c 30 5d 29 2c 30 29 2c 50 28 55 2c 5b 41 51 5d 29 2c 5b 72 57 2c 79 5d 29 29 2c 55 29 2c 5b 62 62 2c 4d 5d 29 2c 74 72 75 65 29 2c 55 29 7d 2c 64 2c 56 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 55 2c 4d 29 7b 6e 28 55 2c 4d 2c 79 29 2c 79 5b 41 51 5d 3d 32 37 39 36 7d 2c 7a 32 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 55 2c 4d 2c 43 29 7b 66 6f 72 28 43 3d 28 4d 3d 6c 28 79 29 2c 30 29 3b 30 3c 55 3b 55 2d 2d 29 43 3d 43 3c 3c 38 7c 48 28 79 29 3b 6e 28 79 2c 4d 2c 43 29 7d 2c 4f 56 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 55 2c 4d 2c 43 29 7b 72 65 74 75 72 6e 20 54 28 35 35 2c 28 6e 28 79 2c 31 30 30 2c 28 75 62 28 79 2c 28 28 43 3d 54 28 31 30 30 2c 79 29 2c 79 2e 73 29 26 26 43 3c 79 2e 53 3f 28 6e 28 79 2c 31 30 30 2c 79 2e 53 29 2c 59 65 28 4d 2c 79 29 29 3a 6e 28 Data Ascii: ,0]),0),P(U,[AQ]),[rW,y])),U),[bb,M]),true),U)},d,V=function(y,U,M){n(U,M,y),y[AQ]=2796},z2=function(y,U,M,C){for(C=(M=l(y),0);0<U;U--)C=C<<8\|H(y);n(y,M,C)},OV=function(y,U,M,C){return T(55,(n(y,100,(ub(y,((C=T(100,y),y.s)&&C<y.S?(n(y,100,y.S),Ye(M,y)):n(
2023-12-08 14:22:10 UTC	1252	IN	Data Raw: 4d 2c 43 2c 42 29 7b 69 66 28 43 3d 79 5b 30 5d 2c 43 3d 3d 69 62 29 55 2e 4d 66 3d 32 35 2c 55 2e 42 28 79 29 3b 65 6c 73 65 20 69 66 28 43 3d 3d 68 29 7b 4d 3d 79 5b 31 5d 3b 74 72 79 7b 42 3d 55 2e 43 7c 7c 55 2e 42 28 79 29 7d 63 61 74 63 68 28 6b 29 7b 53 28 55 2c 6b 29 2c 42 3d 55 2e 43 7d 4d 28 42 29 7d 65 6c 73 65 20 69 66 28 43 3d 3d 66 65 29 55 2e 42 28 79 29 3b 65 6c 73 65 20 69 66 28 43 3d 3d 72 57 29 55 2e 42 28 79 29 3b 65 6c 73 65 20 69 66 28 43 3d 3d 62 62 29 7b 74 72 79 7b 66 6f 72 28 42 3d 30 3b 42 3c 55 2e 4c 2e 6c 65 6e 67 74 68 3b 42 2b 2b 29 74 72 79 7b 4d 3d 55 2e 4c 5b 42 5d 2c 4d 5b 30 5d 5b 4d 5b 31 5d 5d 28 4d 5b 32 5d 29 7d 63 61 74 63 68 28 6b 29 7b 7d 7d 63 61 74 63 68 28 6b 29 7b 7d 28 30 2c 79 5b 31 5d 29 28 66 75 6e 63 74 Data Ascii: M,C,B){if(C=y[0],C==ib)U.Mf=25,U.B(y);else if(C==h){M=y[1];try{B=U.C\|\|U.B(y)}catch(k){S(U,k),B=U.C}M(B)}else if(C==fe)U.B(y);else if(C==rW)U.B(y);else if(C==bb){try{for(B=0;B<U.L.length;B++)try{M=U.L[B],M[0][M[1]](M[2])}catch(k){}}catch(k){}(0,y[1])(funct

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	49759	142.250.217.228	443	1916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-08 14:22:10 UTC	1351	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B&size=normal&s=2Si2oG2vqiJDMkfmdCiyYG47taXWmmv1DThCTXJFVzGeyffO5En3cciASXKsozAzASCwEoWvjRXm3bXAFFd0Nznp7eONKdw1O-ZoT1tvJ44jhAteAdAVNVbBONiYzV4VdhBqZx0JZwsnry9e3i7Fhxp6qrFglI0AWYkx7kclnCibOznQiXcb5gGxA95AV31LMyA6OF_5FM_bJEdQeMpKwFSpAv1PY-WgLXFhjwtdS2t4ZBdN2b2t5tltQo38zBD367y7X_uejy391DzFcBMU2ly-lSUKWr4&cb=r5b06divj710 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=UBeNCkZ3L8yXcx8qh4JFUXkwkNC9IrdiRdbjSTjqSiFh8WrRcbKr_rOJbgHY6TA4RT-6ps0bhemfwCPBsLMgPT7-gTcWqHvZvZbafOpkqRy0dLyYG9AjP2vbUBomarnc9pcZVlhHkUeUaWMurD0GGXyW05_B_1IyUNYEELmyqRg
2023-12-08 14:22:10 UTC	655	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 45 6d 62 65 64 64 65 72 2d 50 6f 6c 69 63 79 3a 20 72 65 71 75 69 72 65 2d 63 6f 72 70 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 72 65 63 61 70 74 63 68 61 22 2c 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 73 70 2e 77 69 74 68 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 73 70 2f 72 65 70 6f 72 74 2d 74 6f 2f 72 65 63 61 70 74 63 68 61 22 7d 5d 7d 0d 0a 45 78 70 69 72 65 73 3a 20 46 72 69 2c 20 30 38 20 44 65 63 20 Data Ascii: HTTP/1.1 200 OKContent-Type: text/javascript; charset=utf-8Cross-Origin-Embedder-Policy: require-corpReport-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}Expires: Fri, 08 Dec
2023-12-08 14:22:10 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 63 77 51 76 51 68 73 79 34 5f 6e 59 64 6e 53 44 59 34 75 37 4f 35 5f 42 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/recaptcha__en.js');
2023-12-08 14:22:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	49760	104.17.2.184	443	1916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-08 14:22:10 UTC	916	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/444306888:1702041974:qedNnDAvJuTEx6GK7a0PZ6aCZBDBhkOW-8_-5XsNyIA/8325a88a1b39287a/c48312223deb6d4 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 28872 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: c48312223deb6d4 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/pplhm/0x4AAAAAAAOK1kuLGSjPsA09/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-08 14:22:10 UTC	16384	OUT	Data Raw: 76 5f 38 33 32 35 61 38 38 61 31 62 33 39 32 38 37 61 3d 68 66 6c 63 70 34 25 32 62 32 38 6f 33 68 33 36 4c 46 6d 2b 71 46 78 63 42 37 37 46 72 63 2d 54 44 32 2b 55 46 6c 51 69 32 2b 4d 46 5a 54 2b 6a 46 64 2d 63 67 61 46 2b 38 51 74 2b 61 46 42 78 61 6c 6e 59 49 42 6b 74 75 46 46 31 46 6e 6c 2b 76 46 48 6c 46 71 46 2b 78 33 5a 6a 6a 62 51 34 50 36 56 6e 44 76 49 46 76 6a 67 42 32 46 47 42 2b 53 49 50 6b 69 46 6e 2d 46 32 63 2d 63 46 6e 68 77 6c 2b 56 59 68 46 34 49 46 68 73 6b 2b 32 46 69 63 2b 74 55 57 70 33 46 6d 38 46 65 77 48 79 46 36 54 37 66 6a 63 46 45 35 42 32 32 59 46 46 52 37 46 38 38 63 34 45 5a 46 44 74 6c 39 6a 63 46 6f 24 6d 46 2b 33 46 36 61 42 54 56 42 37 51 6e 6e 75 66 67 63 46 77 6d 48 24 4b 47 34 63 46 6c 63 46 74 46 74 6f 76 44 39 63 Data Ascii: v_8325a88a1b39287a=hflcp4%2b28o3h36LFm+qFxcB77Frc-TD2+UFlQi2+MFZT+jFd-cgaF+8Qt+aFBxalnYIBktuFF1Fnl+vFHlFqF+x3ZjjbQ4P6VnDvIFvjgB2FGB+SIPkiFn-F2c-cFnhwl+VYhF4IFhsk+2Fic+tUWp3Fm8FewHyF6T7fjcFE5B22YFFR7F88c4EZFDtl9jcFo$mF+3F6aBTVB7QnnufgcFwmH$KG4cFlcFtFtovD9c
2023-12-08 14:22:10 UTC	12488	OUT	Data Raw: 47 4f 74 73 79 38 44 46 44 35 46 6d 2b 4f 46 61 71 5a 66 48 4f 4a 4f 4e 56 2b 36 63 33 46 6e 78 78 51 44 2b 2d 4d 46 67 38 44 51 2b 69 63 2b 54 69 55 46 24 4f 51 74 70 35 2b 72 38 4d 39 6a 4d 61 2d 4f 41 49 36 6d 38 6b 37 32 68 42 41 55 39 35 44 37 44 62 2b 2d 4f 56 59 36 66 51 24 66 56 4a 36 73 79 69 46 7a 51 44 35 46 33 63 33 52 44 66 46 70 63 2b 33 36 63 46 33 63 6e 6c 36 32 46 2b 33 47 37 6e 67 5a 32 30 36 38 61 4f 51 64 2d 6b 76 62 6e 54 54 76 7a 72 44 63 34 30 37 33 75 54 73 6c 6d 6c 69 63 6a 69 79 74 4a 47 75 75 78 72 68 6c 71 4a 63 44 72 50 6c 74 66 62 79 38 52 46 4e 68 53 78 75 44 69 33 51 6c 59 2d 6d 6c 41 4a 69 75 6b 66 59 4c 52 6a 35 66 50 32 44 6d 46 66 63 46 46 33 63 71 79 64 66 71 4d 45 74 38 4c 46 6c 69 4b 39 46 67 57 6d 76 37 53 79 32 34 Data Ascii: GOtsy8DFD5Fm+OFaqZfHOJONV+6c3FnxxQD+-MFg8DQ+ic+TiUF$OQtp5+r8M9jMa-OAI6m8k72hBAU95D7Db+-OVY6fQ$fVJ6syiFzQD5F3c3RDfFpc+36cF3cnl62F+3G7ngZ2068aOQd-kvbnTTvzrDc4073uTslmlicjiytJGuuxrhlqJcDrPltfby8RFNhSxuDi3QlY-mlAJiukfYLRj5fP2DmFfcFF3cqydfqMEt8LFliK9FgWmv7Sy24
2023-12-08 14:22:10 UTC	327	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 46 72 69 2c 20 30 38 20 44 65 63 20 32 30 32 33 20 31 34 3a 32 32 3a 31 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 70 6c 61 69 6e 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 66 2d 63 68 6c 2d 67 65 6e 3a 20 7a 51 7a 50 76 67 4d 52 63 4e 64 76 70 58 43 53 61 6c 66 76 39 74 30 38 66 6e 74 6f 37 55 4f 32 6a 47 52 4d 47 34 55 59 4d 57 68 49 63 2b 47 6f 68 31 68 5a 44 77 47 42 78 30 6a 6b 72 6e 34 30 24 4a 64 75 7a 36 4f 76 42 73 4d 63 4a 56 48 4c 65 6a 71 76 38 34 67 3d 3d 0d 0a 53 65 72 76 65 72 3a 20 63 6c Data Ascii: HTTP/1.1 200 OKDate: Fri, 08 Dec 2023 14:22:10 GMTContent-Type: text/plain; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-chl-gen: zQzPvgMRcNdvpXCSalfv9t08fnto7UO2jGRMG4UYMWhIc+Goh1hZDwGBx0jkrn40$Jduz6OvBsMcJVHLejqv84g==Server: cl
2023-12-08 14:22:10 UTC	1042	IN	Data Raw: 34 35 62 30 0d 0a 66 70 47 52 6d 71 4e 38 66 4d 61 55 6b 63 4f 35 6d 62 32 64 70 38 71 72 75 63 58 4c 30 4d 4c 4e 6b 34 71 77 6b 61 62 4c 30 35 69 31 32 64 66 5a 74 39 71 75 32 4d 2f 49 73 74 7a 55 70 73 4f 32 32 62 33 63 32 2b 2b 72 7a 4d 44 4c 30 76 6a 34 36 66 50 4b 37 2f 58 71 31 66 7a 39 39 74 47 34 2b 4e 62 65 36 66 62 70 36 73 63 50 7a 75 66 6e 33 77 6e 69 41 4f 72 69 36 52 7a 33 48 50 30 48 37 78 41 51 49 2f 63 6b 2f 50 30 45 49 66 63 57 35 75 7a 72 4d 4f 6b 6b 42 77 50 71 4a 51 49 69 4a 76 44 31 50 42 77 34 45 78 44 32 4d 51 34 74 4e 52 55 78 51 6a 49 78 43 43 59 6d 44 52 34 2b 48 77 77 53 45 44 4d 7a 56 6a 46 52 4f 69 51 6c 58 54 6c 51 4d 31 38 78 50 6a 34 33 49 54 59 68 50 79 64 67 59 6b 41 6d 58 58 42 61 50 30 39 6e 58 69 39 78 64 47 46 73 56 Data Ascii: 45b0fpGRmqN8fMaUkcO5mb2dp8qrucXL0MLNk4qwkabL05i12dfZt9qu2M/IstzUpsO22b3c2++rzMDL0vj46fPK7/Xq1fz99tG4+Nbe6fbp6scPzufn3wniAOri6Rz3HP0H7xAQI/ck/P0EIfcW5uzrMOkkBwPqJQIiJvD1PBw4ExD2MQ4tNRUxQjIxCCYmDR4+HwwSEDMzVjFROiQlXTlQM18xPj43ITYhPydgYkAmXXBaP09nXi9xdGFsV
2023-12-08 14:22:10 UTC	1369	IN	Data Raw: 67 71 47 48 74 38 4b 65 6e 62 47 64 73 64 58 43 71 6f 2b 74 79 61 32 38 31 62 58 4d 71 74 6d 67 75 36 54 4f 77 64 33 6e 34 71 53 6e 75 39 76 6b 71 4d 6a 70 34 4e 4f 2f 72 4c 36 74 7a 4d 62 57 7a 4d 37 4e 75 4f 33 33 30 65 72 72 37 50 72 41 38 4e 44 4a 42 4e 2f 4c 33 41 6f 4f 36 2b 54 52 38 65 54 75 34 52 48 53 35 68 4d 57 38 74 50 56 2f 74 67 54 33 67 50 30 37 76 44 6c 47 67 45 73 36 52 34 44 35 65 38 44 37 53 34 75 4e 68 45 79 4d 54 6a 32 4f 41 38 74 2b 66 58 39 4b 66 33 35 50 51 4d 68 51 6b 45 35 42 6a 4d 65 53 69 41 36 47 6b 70 48 53 31 55 73 56 52 59 55 45 44 49 72 58 42 56 53 4d 7a 30 31 4e 6d 4a 53 52 45 46 41 51 54 51 32 57 30 52 6e 62 57 41 6f 49 32 55 78 62 47 70 4a 52 6b 56 5a 56 31 6c 51 64 58 56 6f 54 48 35 65 64 44 38 38 66 6e 43 42 51 34 74 Data Ascii: gqGHt8KenbGdsdXCqo+tya281bXMqtmgu6TOwd3n4qSnu9vkqMjp4NO/rL6tzMbWzM7NuO330err7PrA8NDJBN/L3AoO6+TR8eTu4RHS5hMW8tPV/tgT3gP07vDlGgEs6R4D5e8D7S4uNhEyMTj2OA8t+fX9Kf35PQMhQkE5BjMeSiA6GkpHS1UsVRYUEDIrXBVSMz01NmJSREFAQTQ2W0RnbWAoI2UxbGpJRkVZV1lQdXVoTH5edD88fnCBQ4t
2023-12-08 14:22:10 UTC	1369	IN	Data Raw: 6f 69 62 70 35 57 6e 31 74 6a 42 74 4c 66 56 72 4a 58 5a 7a 4d 2b 32 76 4e 58 56 34 74 7a 4a 76 72 61 2f 34 73 4b 73 71 2b 4c 48 38 38 58 76 34 73 4c 56 77 4f 72 62 78 66 54 47 37 50 58 65 76 73 45 43 34 64 33 34 2f 66 6e 31 31 50 33 37 42 51 59 49 2f 66 77 4e 33 73 30 51 47 42 59 46 30 2b 50 76 47 68 33 2b 44 2b 7a 33 49 41 34 44 48 69 58 6c 33 67 4d 59 43 67 51 68 47 52 37 38 42 53 38 49 36 67 30 7a 44 50 49 56 38 54 55 78 39 6b 41 56 46 2f 70 41 45 7a 30 46 51 78 73 2b 4a 55 5a 46 51 69 68 4d 53 79 63 4c 54 79 64 49 54 45 38 58 55 42 45 74 57 45 6c 58 4d 78 59 77 58 46 63 74 4c 56 63 36 52 6b 6c 70 52 32 70 75 50 44 68 62 52 6a 38 2f 53 45 39 48 51 58 6c 48 55 56 6f 35 58 48 70 33 61 6e 74 73 59 48 4e 69 5a 6f 65 41 66 49 52 6c 54 47 64 6c 67 58 39 4a Data Ascii: oibp5Wn1tjBtLfVrJXZzM+2vNXV4tzJvra/4sKsq+LH88Xv4sLVwOrbxfTG7PXevsEC4d34/fn11P37BQYI/fwN3s0QGBYF0+PvGh3+D+z3IA4DHiXl3gMYCgQhGR78BS8I6g0zDPIV8TUx9kAVF/pAEz0FQxs+JUZFQihMSycLTydITE8XUBEtWElXMxYwXFctLVc6RklpR2puPDhbRj8/SE9HQXlHUVo5XHp3antsYHNiZoeAfIRlTGdlgX9J
2023-12-08 14:22:10 UTC	1369	IN	Data Raw: 61 51 70 63 6d 62 7a 37 4b 31 6e 37 48 63 32 4e 75 64 35 38 4c 58 31 75 48 57 32 4f 4b 72 72 63 44 68 71 64 32 71 74 63 4c 30 39 73 50 45 2b 64 4c 49 35 2f 36 38 38 64 61 2b 31 4e 2f 6d 35 64 67 48 32 4e 62 57 44 2b 6e 75 45 4e 76 6d 79 74 54 4c 38 64 50 76 34 2f 59 55 36 67 76 63 44 50 4d 63 34 52 38 69 4a 78 48 6d 4b 75 67 70 47 77 54 33 43 79 6a 2b 48 2b 72 7a 38 6a 44 75 36 51 77 72 4a 66 72 79 38 7a 30 75 4d 6a 76 34 44 54 41 39 50 67 55 6c 49 7a 30 6a 4e 53 46 47 47 51 70 50 56 42 38 77 4a 51 30 6f 52 68 52 51 4a 69 73 39 47 53 34 31 57 69 45 7a 49 57 46 42 50 45 6b 33 50 32 4a 70 59 47 38 69 53 47 52 55 50 53 74 77 56 58 52 6a 4f 58 70 58 5a 32 68 32 53 57 35 73 5a 45 52 77 63 45 4a 6c 64 48 52 47 53 59 61 49 66 49 52 4a 59 70 4b 43 63 5a 61 48 56 Data Ascii: aQpcmbz7K1n7Hc2Nud58LX1uHW2OKrrcDhqd2qtcL09sPE+dLI5/688da+1N/m5dgH2NbWD+nuENvmytTL8dPv4/YU6gvcDPMc4R8iJxHmKugpGwT3Cyj+H+rz8jDu6QwrJfry8z0uMjv4DTA9PgUlIz0jNSFGGQpPVB8wJQ0oRhRQJis9GS41WiEzIWFBPEk3P2JpYG8iSGRUPStwVXRjOXpXZ2h2SW5sZERwcEJldHRGSYaIfIRJYpKCcZaHV
2023-12-08 14:22:10 UTC	1369	IN	Data Raw: 64 6e 61 48 50 73 73 4f 74 34 71 61 37 77 75 44 6c 72 4b 76 67 35 61 79 78 37 39 76 6b 73 75 58 58 31 74 4c 78 38 64 72 4b 37 72 6e 7a 76 2f 54 53 37 4d 4c 7a 2f 63 6a 47 39 74 76 4d 79 76 72 65 45 65 77 46 43 2b 4c 74 43 4e 4c 56 37 67 7a 72 47 65 38 64 47 75 2f 70 49 4f 48 68 35 52 54 32 43 50 45 6e 36 67 41 48 4a 53 72 77 37 7a 41 63 4a 66 49 6d 47 42 63 54 4a 68 30 50 45 6a 59 32 48 77 38 76 41 41 37 2b 51 7a 30 47 49 54 64 42 51 53 45 38 4d 53 4d 6f 50 6a 52 4e 4b 6b 4e 4f 53 6a 4e 59 56 68 4d 30 46 6b 6b 2f 4c 57 41 34 52 69 52 6b 55 69 59 69 61 55 41 66 4b 32 70 44 54 6a 42 76 61 57 45 79 59 33 4a 71 54 33 6c 33 53 30 6c 36 55 47 6c 34 64 58 74 58 59 48 68 70 55 32 42 39 62 44 39 70 66 30 70 39 62 49 4e 50 6a 57 69 49 55 30 74 75 6a 46 64 50 65 49 Data Ascii: dnaHPssOt4qa7wuDlrKvg5ayx79vksuXX1tLx8drK7rnzv/TS7MLz/cjG9tvMyvreEewFC+LtCNLV7gzrGe8dGu/pIOHh5RT2CPEn6gAHJSrw7zAcJfImGBcTJh0PEjY2Hw8vAA7+Qz0GITdBQSE8MSMoPjRNKkNOSjNYVhM0Fkk/LWA4RiRkUiYiaUAfK2pDTjBvaWEyY3JqT3l3S0l6UGl4dXtXYHhpU2B9bD9pf0p9bINPjWiIU0tujFdPeI
2023-12-08 14:22:10 UTC	1369	IN	Data Raw: 31 36 4f 79 76 74 75 6d 37 4d 54 5a 71 37 37 46 34 2b 6d 74 79 65 6a 48 71 74 50 71 74 76 75 33 38 4e 44 4f 33 50 4f 2f 32 74 33 34 2f 62 72 64 2b 67 48 34 35 51 48 67 33 75 4d 46 35 4f 4c 72 43 66 63 52 37 42 49 52 43 76 55 4f 47 42 48 37 46 50 4d 6c 39 78 6e 6a 38 67 49 63 2f 41 4d 47 47 75 76 36 44 43 54 75 35 68 41 70 43 4f 6f 54 4c 41 77 38 39 7a 45 33 46 78 77 31 46 44 30 68 4f 41 51 58 49 54 30 72 4f 53 64 41 49 46 45 71 52 41 39 52 4d 55 67 6f 45 6a 4e 47 47 43 38 32 55 46 5a 5a 4e 56 4e 62 4c 30 42 5a 58 6d 41 6b 58 55 77 6d 53 57 45 72 62 55 74 6c 56 47 31 50 61 44 4a 6c 55 47 31 63 65 56 4a 78 55 44 4e 58 64 56 52 42 51 48 6c 2b 52 6d 46 39 67 6a 39 6b 66 34 64 66 61 34 53 4d 64 6c 43 58 65 49 47 4b 55 6f 64 73 61 4a 2b 56 6e 58 65 55 58 70 78 Data Ascii: 16Oyvtum7MTZq77F4+mtyejHqtPqtvu38NDO3PO/2t34/brd+gH45QHg3uMF5OLrCfcR7BIRCvUOGBH7FPMl9xnj8gIc/AMGGuv6DCTu5hApCOoTLAw89zE3Fxw1FD0hOAQXIT0rOSdAIFEqRA9RMUgoEjNGGC82UFZZNVNbL0BZXmAkXUwmSWErbUtlVG1PaDJlUG1ceVJxUDNXdVRBQHl+RmF9gj9kf4dfa4SMdlCXeIGKUodsaJ+VnXeUXpx
2023-12-08 14:22:10 UTC	1369	IN	Data Raw: 63 54 71 71 65 54 45 34 73 62 72 73 4f 58 74 38 37 62 33 7a 65 79 36 37 64 2f 65 31 2f 6e 39 38 4e 50 79 78 63 44 42 43 64 34 4b 31 38 58 33 32 73 67 51 30 64 45 47 47 4e 45 56 31 67 62 72 47 4e 6f 4d 41 65 37 33 46 42 6b 64 39 42 62 6a 39 67 45 57 4a 53 54 66 49 51 48 2b 41 75 6b 64 38 67 30 34 4d 77 66 78 4b 66 6b 2b 44 43 76 2b 45 76 34 75 2f 6b 41 43 52 54 30 6e 42 45 68 46 4b 77 31 51 44 6b 77 50 50 30 34 39 44 56 4a 42 51 51 77 53 4d 53 67 6f 58 44 4d 65 4d 47 42 4f 49 68 35 6c 50 42 73 6e 5a 6a 39 4b 4c 47 78 50 61 6b 4a 30 58 6b 68 50 5a 54 5a 35 53 48 68 62 57 7a 52 39 65 6a 64 4d 62 6d 30 33 51 34 52 78 51 6b 65 4a 59 45 70 49 6b 45 2b 49 54 49 39 50 66 56 61 43 67 55 39 6b 6e 46 74 75 56 70 74 66 55 35 4b 4f 59 70 6c 30 70 49 65 48 59 4b 6d 6d Data Ascii: cTqqeTE4sbrsOXt87b3zey67d/e1/n98NPyxcDBCd4K18X32sgQ0dEGGNEV1gbrGNoMAe73FBkd9Bbj9gEWJSTfIQH+Aukd8g04MwfxKfk+DCv+Ev4u/kACRT0nBEhFKw1QDkwPP049DVJBQQwSMSgoXDMeMGBOIh5lPBsnZj9KLGxPakJ0XkhPZTZ5SHhbWzR9ejdMbm03Q4RxQkeJYEpIkE+ITI9PfVaCgU9knFtuVptfU5KOYpl0pIeHYKmm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	49762	142.250.217.228	443	1916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-08 14:22:10 UTC	1069	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/sorry/index?continue=http://google.co.uk/&q=EgRmgZjUGI3NzKsGIjCnPpvWLbXDb183drVmgfJaSuOR6afn9EaOWYnUbyGbs7c--C6gg1mEUAh9LvwzP6MyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=UBeNCkZ3L8yXcx8qh4JFUXkwkNC9IrdiRdbjSTjqSiFh8WrRcbKr_rOJbgHY6TA4RT-6ps0bhemfwCPBsLMgPT7-gTcWqHvZvZbafOpkqRy0dLyYG9AjP2vbUBomarnc9pcZVlhHkUeUaWMurD0GGXyW05_B_1IyUNYEELmyqRg
2023-12-08 14:22:11 UTC	705	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 2c 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesCross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https:/
2023-12-08 14:22:11 UTC	547	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2023-12-08 14:22:11 UTC	1252	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 a6 75 ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff 0b be fb ff 05 bc fb ff b6 ec fe ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 aa 7b ff ff ff ff ff fd fd fd f9 fd fd fd db ff ff ff ff 35 c9 fc ff 0a b2 f9 ff 6b a4 f6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff Data Ascii: BBBBBuBBBBB{5k7R8F2Vb5C
2023-12-08 14:22:11 UTC	1252	IN	Data Raw: ee d8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 fe fe fe 2f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 24 fd fd fd ea ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff eb f5 e7 ff 8f c6 7b ff 54 a9 36 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 7e be 67 ff dd ee d7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 ff ff ff 22 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd d3 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff c4 e1 b9 ff 5c ac 3e ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff Data Ascii: /${T6S4S4S4S4S4S4S4S4S4~g"\>S4S4S4S4S4S4S4S4S4S4
2023-12-08 14:22:11 UTC	1252	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fa c8 aa ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBBBBBB}BBBBBBBBBBB}
2023-12-08 14:22:11 UTC	1127	IN	Data Raw: ff ff ff a0 a7 f5 ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 81 8a f2 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 8a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 0b fd fd fd d5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b5 ba f7 ff 3e 4b eb ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 3f 4c eb ff ba bf f8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 26 fd fd fd eb ff ff ff ff Data Ascii: 5C5C5C5C5C5C5C5C5C5C5C5C5C5C5C>K5C5C5C5C5C5C5C5C5C5C5C5C?L&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.6	49764	104.17.2.184	443	1916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-08 14:22:11 UTC	486	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/444306888:1702041974:qedNnDAvJuTEx6GK7a0PZ6aCZBDBhkOW-8_-5XsNyIA/8325a88a1b39287a/c48312223deb6d4 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-08 14:22:11 UTC	386	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 0d 0a 44 61 74 65 3a 20 46 72 69 2c 20 30 38 20 44 65 63 20 32 30 32 33 20 31 34 3a 32 32 3a 31 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 33 6d Data Ascii: HTTP/1.1 400 Bad RequestDate: Fri, 08 Dec 2023 14:22:11 GMTContent-Type: application/jsonTransfer-Encoding: chunkedConnection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: 3m
2023-12-08 14:22:11 UTC	12	IN	Data Raw: 37 0d 0a 69 6e 76 61 6c 69 64 0d 0a Data Ascii: 7invalid
2023-12-08 14:22:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	49763	142.250.217.228	443	1916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-08 14:22:11 UTC	1258	OUT	GET /recaptcha/api2/bframe?hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.google.com/sorry/index?continue=http://google.co.uk/&q=EgRmgZjUGI3NzKsGIjCnPpvWLbXDb183drVmgfJaSuOR6afn9EaOWYnUbyGbs7c--C6gg1mEUAh9LvwzP6MyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=UBeNCkZ3L8yXcx8qh4JFUXkwkNC9IrdiRdbjSTjqSiFh8WrRcbKr_rOJbgHY6TA4RT-6ps0bhemfwCPBsLMgPT7-gTcWqHvZvZbafOpkqRy0dLyYG9AjP2vbUBomarnc9pcZVlhHkUeUaWMurD0GGXyW05_B_1IyUNYEELmyqRg
2023-12-08 14:22:11 UTC	891	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 45 6d 62 65 64 64 65 72 2d 50 6f 6c 69 63 79 3a 20 72 65 71 75 69 72 65 2d 63 6f 72 70 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 72 65 63 61 70 74 63 68 61 22 2c 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 73 70 2e 77 69 74 68 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 73 70 2f 72 65 70 6f 72 74 2d 74 Data Ascii: HTTP/1.1 200 OKContent-Type: text/html; charset=utf-8Cross-Origin-Resource-Policy: cross-originCross-Origin-Embedder-Policy: require-corpReport-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-t
2023-12-08 14:22:11 UTC	361	IN	Data Raw: 31 63 35 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 Data Ascii: 1c5b<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face
2023-12-08 14:22:11 UTC	1252	IN	Data Raw: 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f Data Ascii: to/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//
2023-12-08 14:22:11 UTC	1252	IN	Data Raw: 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 2d 31 45 39 46 2c 20 55 2b 31 45 46 32 2d 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 46 2c Data Ascii: oboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20CF,
2023-12-08 14:22:11 UTC	1252	IN	Data Raw: 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 Data Ascii: font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/* greek */@font-face { font-family: 'Roboto'; font-st
2023-12-08 14:22:11 UTC	1252	IN	Data Raw: 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 37 34 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d Data Ascii: oto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}
2023-12-08 14:22:11 UTC	1252	IN	Data Raw: 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 Data Ascii: /* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168
2023-12-08 14:22:11 UTC	646	IN	Data Raw: 6e 45 4e 56 36 5a 62 66 61 78 43 70 57 49 45 70 33 77 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 61 70 69 32 2f 27 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 63 77 51 76 51 68 73 79 34 5f 6e 59 64 6e 53 44 59 34 75 37 4f 35 5f 42 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 36 36 34 50 Data Ascii: nENV6ZbfaxCpWIEp3w" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com/recaptcha/api2/';</script><script type="text/javascript" src="https://www.gstatic.com/recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/recaptcha__en.js" nonce="664P
2023-12-08 14:22:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.6	49765	192.178.50.68	443	1916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-08 14:22:11 UTC	615	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=UBeNCkZ3L8yXcx8qh4JFUXkwkNC9IrdiRdbjSTjqSiFh8WrRcbKr_rOJbgHY6TA4RT-6ps0bhemfwCPBsLMgPT7-gTcWqHvZvZbafOpkqRy0dLyYG9AjP2vbUBomarnc9pcZVlhHkUeUaWMurD0GGXyW05_B_1IyUNYEELmyqRg
2023-12-08 14:22:11 UTC	705	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 2c 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesCross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https:/
2023-12-08 14:22:11 UTC	547	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2023-12-08 14:22:11 UTC	1252	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 a6 75 ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff 0b be fb ff 05 bc fb ff b6 ec fe ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 aa 7b ff ff ff ff ff fd fd fd f9 fd fd fd db ff ff ff ff 35 c9 fc ff 0a b2 f9 ff 6b a4 f6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff Data Ascii: BBBBBuBBBBB{5k7R8F2Vb5C
2023-12-08 14:22:11 UTC	1252	IN	Data Raw: ee d8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 fe fe fe 2f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 24 fd fd fd ea ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff eb f5 e7 ff 8f c6 7b ff 54 a9 36 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 7e be 67 ff dd ee d7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 ff ff ff 22 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd d3 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff c4 e1 b9 ff 5c ac 3e ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff Data Ascii: /${T6S4S4S4S4S4S4S4S4S4~g"\>S4S4S4S4S4S4S4S4S4S4
2023-12-08 14:22:11 UTC	1252	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fa c8 aa ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBBBBBB}BBBBBBBBBBB}
2023-12-08 14:22:11 UTC	1127	IN	Data Raw: ff ff ff a0 a7 f5 ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 81 8a f2 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 8a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 0b fd fd fd d5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b5 ba f7 ff 3e 4b eb ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 3f 4c eb ff ba bf f8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 26 fd fd fd eb ff ff ff ff Data Ascii: 5C5C5C5C5C5C5C5C5C5C5C5C5C5C5C>K5C5C5C5C5C5C5C5C5C5C5C5C?L&

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.6	49766	52.159.126.152	443

Timestamp	Bytes transferred	Direction	Data
2023-12-08 14:22:15 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 69 76 66 4e 4a 64 4b 69 74 55 65 4f 4d 7a 34 45 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 36 34 62 62 34 39 63 36 36 62 34 62 61 64 34 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: ivfNJdKitUeOMz4E.1Context: 564bb49c66b4bad4
2023-12-08 14:22:15 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2023-12-08 14:22:15 UTC	1076	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 35 33 0d 0a 4d 53 2d 43 56 3a 20 69 76 66 4e 4a 64 4b 69 74 55 65 4f 4d 7a 34 45 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 36 34 62 62 34 39 63 36 36 62 34 62 61 64 34 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 48 67 55 7a 54 6a 67 77 42 38 4e 4e 64 66 54 51 74 6e 77 54 7a 53 6d 79 71 74 30 44 6d 46 47 64 70 41 64 72 4e 61 53 6b 46 6f 77 7a 51 6e 59 50 59 36 65 55 63 74 58 4a 70 58 42 56 30 65 6d 4e 4e 69 57 5a 34 57 2b 51 6e 38 74 42 2f 65 6a 53 62 77 59 34 53 43 5a 6c 4e 6b 41 33 75 74 55 6b 77 52 41 38 61 4b 6d 58 6e 43 37 31 Data Ascii: ATH 2 CON\DEVICE 1053MS-CV: ivfNJdKitUeOMz4E.2Context: 564bb49c66b4bad4<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAWHgUzTjgwB8NNdfTQtnwTzSmyqt0DmFGdpAdrNaSkFowzQnYPY6eUctXJpXBV0emNNiWZ4W+Qn8tB/ejSbwY4SCZlNkA3utUkwRA8aKmXnC71
2023-12-08 14:22:15 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 69 76 66 4e 4a 64 4b 69 74 55 65 4f 4d 7a 34 45 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 36 34 62 62 34 39 63 36 36 62 34 62 61 64 34 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: ivfNJdKitUeOMz4E.3Context: 564bb49c66b4bad4<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2023-12-08 14:22:15 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2023-12-08 14:22:15 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 32 68 6d 4d 67 56 73 5a 4d 30 69 64 78 68 59 2f 38 39 54 42 70 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 2hmMgVsZM0idxhY/89TBpQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.6	49767	52.159.126.152	443

Timestamp	Bytes transferred	Direction	Data
2023-12-08 14:22:35 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 32 64 67 70 4d 79 34 30 39 45 4b 49 2f 70 56 39 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 32 66 35 33 33 39 38 37 66 30 32 65 37 61 36 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 2dgpMy409EKI/pV9.1Context: 92f533987f02e7a6
2023-12-08 14:22:35 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2023-12-08 14:22:35 UTC	1076	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 35 33 0d 0a 4d 53 2d 43 56 3a 20 32 64 67 70 4d 79 34 30 39 45 4b 49 2f 70 56 39 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 32 66 35 33 33 39 38 37 66 30 32 65 37 61 36 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 48 67 55 7a 54 6a 67 77 42 38 4e 4e 64 66 54 51 74 6e 77 54 7a 53 6d 79 71 74 30 44 6d 46 47 64 70 41 64 72 4e 61 53 6b 46 6f 77 7a 51 6e 59 50 59 36 65 55 63 74 58 4a 70 58 42 56 30 65 6d 4e 4e 69 57 5a 34 57 2b 51 6e 38 74 42 2f 65 6a 53 62 77 59 34 53 43 5a 6c 4e 6b 41 33 75 74 55 6b 77 52 41 38 61 4b 6d 58 6e 43 37 31 Data Ascii: ATH 2 CON\DEVICE 1053MS-CV: 2dgpMy409EKI/pV9.2Context: 92f533987f02e7a6<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAWHgUzTjgwB8NNdfTQtnwTzSmyqt0DmFGdpAdrNaSkFowzQnYPY6eUctXJpXBV0emNNiWZ4W+Qn8tB/ejSbwY4SCZlNkA3utUkwRA8aKmXnC71
2023-12-08 14:22:35 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 32 64 67 70 4d 79 34 30 39 45 4b 49 2f 70 56 39 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 32 66 35 33 33 39 38 37 66 30 32 65 37 61 36 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 2dgpMy409EKI/pV9.3Context: 92f533987f02e7a6<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2023-12-08 14:22:35 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2023-12-08 14:22:35 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 73 4d 69 42 7a 2b 59 62 73 30 69 4f 7a 54 30 59 32 42 66 58 34 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: sMiBz+Ybs0iOzT0Y2BfX4Q.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.6	49768	20.114.59.183	443

Timestamp	Bytes transferred	Direction	Data
2023-12-08 14:22:44 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Z4OR3NL8zldvxh4&MD=xA93+xHC HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2023-12-08 14:22:44 UTC	560	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 4d 6f 6e 2c 20 30 31 20 4a 61 6e 20 30 30 30 31 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 45 54 61 67 3a 20 22 4d 78 31 52 6f 4a 48 2f 71 45 77 70 57 66 4b 6c 6c 78 37 73 62 73 6c 32 38 41 75 45 52 7a 35 49 59 64 63 73 76 74 54 4a 63 67 4d 3d 5f 32 31 36 30 22 0d 0a 4d 53 2d 43 6f 72 72 65 6c 61 74 69 6f 6e 49 64 3a 20 34 61 61 64 66 64 34 65 2d 66 30 37 39 2d 34 34 65 35 2d Data Ascii: HTTP/1.1 200 OKCache-Control: no-cachePragma: no-cacheContent-Type: application/octet-streamExpires: -1Last-Modified: Mon, 01 Jan 0001 00:00:00 GMTETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160"MS-CorrelationId: 4aadfd4e-f079-44e5-
2023-12-08 14:22:44 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2023-12-08 14:22:44 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.6	49771	52.159.126.152	443

Timestamp	Bytes transferred	Direction	Data
2023-12-08 14:23:01 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 52 64 32 68 73 31 66 39 49 30 2b 62 6d 75 38 76 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 37 63 36 66 65 65 37 39 38 64 64 30 65 38 66 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: Rd2hs1f9I0+bmu8v.1Context: a7c6fee798dd0e8f
2023-12-08 14:23:01 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2023-12-08 14:23:01 UTC	1076	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 35 33 0d 0a 4d 53 2d 43 56 3a 20 52 64 32 68 73 31 66 39 49 30 2b 62 6d 75 38 76 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 37 63 36 66 65 65 37 39 38 64 64 30 65 38 66 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 48 67 55 7a 54 6a 67 77 42 38 4e 4e 64 66 54 51 74 6e 77 54 7a 53 6d 79 71 74 30 44 6d 46 47 64 70 41 64 72 4e 61 53 6b 46 6f 77 7a 51 6e 59 50 59 36 65 55 63 74 58 4a 70 58 42 56 30 65 6d 4e 4e 69 57 5a 34 57 2b 51 6e 38 74 42 2f 65 6a 53 62 77 59 34 53 43 5a 6c 4e 6b 41 33 75 74 55 6b 77 52 41 38 61 4b 6d 58 6e 43 37 31 Data Ascii: ATH 2 CON\DEVICE 1053MS-CV: Rd2hs1f9I0+bmu8v.2Context: a7c6fee798dd0e8f<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAWHgUzTjgwB8NNdfTQtnwTzSmyqt0DmFGdpAdrNaSkFowzQnYPY6eUctXJpXBV0emNNiWZ4W+Qn8tB/ejSbwY4SCZlNkA3utUkwRA8aKmXnC71
2023-12-08 14:23:01 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 52 64 32 68 73 31 66 39 49 30 2b 62 6d 75 38 76 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 37 63 36 66 65 65 37 39 38 64 64 30 65 38 66 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: Rd2hs1f9I0+bmu8v.3Context: a7c6fee798dd0e8f<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2023-12-08 14:23:01 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2023-12-08 14:23:01 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 4b 71 65 75 71 69 44 38 70 45 65 6b 46 71 42 2f 4d 4e 4a 6d 47 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: KqeuqiD8pEekFqB/MNJmGQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.6	49772	192.178.50.46	443	1916	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-08 14:23:20 UTC	449	OUT	GET /tools/pso/ping?as=chrome&brand=ONGR&pid=&hl=en&events=C1I,C2I,C7I,C1S,C7S&rep=2&rlz=C1:,C2:,C7:&id=0000000000000000000000000000000000000000848500971B HTTP/1.1 Host: clients1.google.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br
2023-12-08 14:23:20 UTC	817	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 73 63 72 69 70 74 2d 73 72 63 20 27 72 65 70 6f 72 74 2d 73 61 6d 70 6c 65 27 20 27 6e 6f 6e 63 65 2d 4f 66 5a 71 56 63 73 61 52 48 4a 4b 4c 63 48 79 76 77 78 59 68 77 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 73 74 72 69 63 74 2d 64 79 6e 61 6d 69 63 27 20 68 74 74 70 73 3a 20 68 74 74 70 3a 3b 6f 62 6a 65 63 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 72 65 70 6f 72 74 2d 75 72 69 20 68 74 74 70 73 3a 2f 2f 63 73 70 2e 77 69 74 68 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 73 70 2f 64 6f 77 6e 6c 6f 61 64 2d 64 74 2f 31 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 Data Ascii: HTTP/1.1 200 OKContent-Security-Policy: script-src 'report-sample' 'nonce-OfZqVcsaRHJKLcHyvwxYhw' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/download-dt/1Content-Security-P
2023-12-08 14:23:20 UTC	219	IN	Data Raw: 72 6c 7a 43 31 3a 20 31 43 31 4f 4e 47 52 5f 65 6e 55 53 31 30 38 37 0a 72 6c 7a 43 32 3a 20 31 43 32 4f 4e 47 52 5f 65 6e 55 53 31 30 38 37 0a 72 6c 7a 43 37 3a 20 31 43 37 4f 4e 47 52 5f 65 6e 55 53 31 30 38 37 0a 64 63 63 3a 20 0a 73 65 74 5f 64 63 63 3a 20 43 31 3a 31 43 31 4f 4e 47 52 5f 65 6e 55 53 31 30 38 37 2c 43 32 3a 31 43 32 4f 4e 47 52 5f 65 6e 55 53 31 30 38 37 2c 43 37 3a 31 43 37 4f 4e 47 52 5f 65 6e 55 53 31 30 38 37 0a 65 76 65 6e 74 73 3a 20 43 31 49 2c 43 32 49 2c 43 37 49 2c 43 31 53 2c 43 37 53 0a 73 74 61 74 65 66 75 6c 2d 65 76 65 6e 74 73 3a 20 43 31 49 2c 43 32 49 2c 43 37 49 0a 63 72 63 33 32 3a 20 32 65 31 35 66 38 39 0a Data Ascii: rlzC1: 1C1ONGR_enUS1087rlzC2: 1C2ONGR_enUS1087rlzC7: 1C7ONGR_enUS1087dcc: set_dcc: C1:1C1ONGR_enUS1087,C2:1C2ONGR_enUS1087,C7:1C7ONGR_enUS1087events: C1I,C2I,C7I,C1S,C7Sstateful-events: C1I,C2I,C7Icrc32: 2e15f89

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.6	49773	20.25.241.18	443

Timestamp	Bytes transferred	Direction	Data
2023-12-08 14:23:31 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 35 45 48 51 57 54 57 78 7a 6b 61 44 41 53 55 74 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 38 32 31 62 66 62 33 66 32 35 38 30 31 39 36 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 5EHQWTWxzkaDASUt.1Context: 8821bfb3f2580196
2023-12-08 14:23:31 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2023-12-08 14:23:31 UTC	1076	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 35 33 0d 0a 4d 53 2d 43 56 3a 20 35 45 48 51 57 54 57 78 7a 6b 61 44 41 53 55 74 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 38 32 31 62 66 62 33 66 32 35 38 30 31 39 36 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 48 67 55 7a 54 6a 67 77 42 38 4e 4e 64 66 54 51 74 6e 77 54 7a 53 6d 79 71 74 30 44 6d 46 47 64 70 41 64 72 4e 61 53 6b 46 6f 77 7a 51 6e 59 50 59 36 65 55 63 74 58 4a 70 58 42 56 30 65 6d 4e 4e 69 57 5a 34 57 2b 51 6e 38 74 42 2f 65 6a 53 62 77 59 34 53 43 5a 6c 4e 6b 41 33 75 74 55 6b 77 52 41 38 61 4b 6d 58 6e 43 37 31 Data Ascii: ATH 2 CON\DEVICE 1053MS-CV: 5EHQWTWxzkaDASUt.2Context: 8821bfb3f2580196<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAWHgUzTjgwB8NNdfTQtnwTzSmyqt0DmFGdpAdrNaSkFowzQnYPY6eUctXJpXBV0emNNiWZ4W+Qn8tB/ejSbwY4SCZlNkA3utUkwRA8aKmXnC71
2023-12-08 14:23:31 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 35 45 48 51 57 54 57 78 7a 6b 61 44 41 53 55 74 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 38 32 31 62 66 62 33 66 32 35 38 30 31 39 36 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 5EHQWTWxzkaDASUt.3Context: 8821bfb3f2580196<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2023-12-08 14:23:31 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2023-12-08 14:23:31 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 50 56 59 33 51 2f 66 52 34 45 53 37 2b 44 6c 43 31 30 31 6b 6a 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: PVY3Q/fR4ES7+DlC101kjQ.0Payload parsing failed.

Target ID:	0
Start time:	15:21:46
Start date:	08/12/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	15:21:49
Start date:	08/12/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=2044,i,5254295920708420066,16508067594936788554,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	15:21:52
Start date:	08/12/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" "https://cmax.co.uk/qw.PDF
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://cmax.co.uk/qw.PDF

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

Windows Analysis Report
https://cmax.co.uk/qw.PDF