Edit tour

Windows Analysis Report
https://cmax.co.uk/bv.PDF

Overview

General Information

Sample URL:	https://cmax.co.uk/bv.PDF
Analysis ID:	1358923
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Creates files inside the system directory

HTML page contains hidden URLs or javascript code

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 380 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5744 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2404 --field-trial-handle=2256,i,16544369044721870028,13479729168788484395,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4292 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" "https://cmax.co.uk/bv.PDF MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://cmax.co.uk/bv.PDF

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Antivirus detection for URL or domain

Source: https://yellowtelecomms.com/favicon.ico

Avira URL Cloud: Label: phishing

Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/ieoqc/0x4AAAAAAAOK1kuLGSjPsA09/auto/normal

HTTP Parser: Base64 decoded: http://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/ieoqc/0x4AAAAAAAOK1kuLGSjPsA09/auto/normal

Source: https://pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev/DF.html	HTTP Parser: No favicon
Source: https://yellowtelecomms.com/?uoxpeyml=977a77ae68353043b6c9ae912e4a6fdb66e2439ecbf1df63c640f03fdb45bf44ef112d5670400082ce517e3c0b918a2015690385259e60e9efacb3f33a9fc0c3	HTTP Parser: No favicon
Source: https://yellowtelecomms.com/?uoxpeyml=977a77ae68353043b6c9ae912e4a6fdb66e2439ecbf1df63c640f03fdb45bf44ef112d5670400082ce517e3c0b918a2015690385259e60e9efacb3f33a9fc0c3	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/ieoqc/0x4AAAAAAAOK1kuLGSjPsA09/auto/normal	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/ieoqc/0x4AAAAAAAOK1kuLGSjPsA09/auto/normal	HTTP Parser: No favicon
Source: https://www.google.com/sorry/index?continue=http://google.co.uk/&q=EgRmgZjUGMnJ3asGIjCugYbjtADgaWeknEqgxEp7vAmnSPBLI05Hh6qhkYnCegYrKiWBiLAkUmkW39h1K1cyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	HTTP Parser: No favicon
Source: https://www.google.com/sorry/index?continue=http://google.co.uk/&q=EgRmgZjUGMnJ3asGIjCugYbjtADgaWeknEqgxEp7vAmnSPBLI05Hh6qhkYnCegYrKiWBiLAkUmkW39h1K1cyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B&size=normal&s=NUUeGbk_T9QoVOAlKg4x6rYCgoZi_2gXD3RBAbtKnSL6I-5BpK7sTjDigyecTEVPu9DS225O5vLHdfN-FuftiYu7FCs3KFQfaXiUWKxLsiky-sJ4TkWwGmAFs1ME2SSU7BzBdR_vGDXsmv7PKVS2qET0K2WooDdE7HF14nLfLWWJIClxd-lZ_xsfnuetvtMQ3hWlO0SvWG5VkxzoxO34Gzk0tvrkC8STgphjZoM1YucrDJ8_v8h6OwutsHU-yxV46U4WMXoPLoPB2rT97Eiexk1-_apH7VY&cb=2vbizkafv8gy	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	HTTP Parser: No favicon

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49732 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.5:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.5:49765 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49732 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50

Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-117.0.5938.132Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bv.PDF HTTP/1.1Host: cmax.co.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /DF.html HTTP/1.1Host: pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.devConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/nj_logo.gif HTTP/1.1Host: www.netjetseurope.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.netjets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /en-us/ HTTP/1.1Host: www.netjets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev/DF.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en-us/ HTTP/1.1Host: www.netjets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?uoxpeyml HTTP/1.1Host: yellowtelecomms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?uoxpeyml=977a77ae68353043b6c9ae912e4a6fdb66e2439ecbf1df63c640f03fdb45bf44ef112d5670400082ce517e3c0b918a2015690385259e60e9efacb3f33a9fc0c3 HTTP/1.1Host: yellowtelecomms.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=o8OUT2nE99vA; qPdM.sig=KPdyJLDBGV15EhhYnTw73_wFm58
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yellowtelecomms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/56d3063b/api.js?onload=onloadTurnstileCallback HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yellowtelecomms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/ieoqc/0x4AAAAAAAOK1kuLGSjPsA09/auto/normal HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://yellowtelecomms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=83402d707b45098e HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/ieoqc/0x4AAAAAAAOK1kuLGSjPsA09/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/ieoqc/0x4AAAAAAAOK1kuLGSjPsA09/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=9OLg8t8ONbh6t9a&MD=RWzokL8v HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: yellowtelecomms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yellowtelecomms.com/?uoxpeyml=977a77ae68353043b6c9ae912e4a6fdb66e2439ecbf1df63c640f03fdb45bf44ef112d5670400082ce517e3c0b918a2015690385259e60e9efacb3f33a9fc0c3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=o8OUT2nE99vA; qPdM.sig=KPdyJLDBGV15EhhYnTw73_wFm58
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1272996923:1702322464:qGqc8UdJzWaM885DJMpt9LcmL3VeLIOVl7hJMJBf_GI/83402d707b45098e/31d2dd173e550d3 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/83402d707b45098e/1702323398872/fdf2e00a0c52098d4c27b76a4bde84a1400fe91b8666b15ac3a6020431a4b22a/4lfhaL7bcQngd2C HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/ieoqc/0x4AAAAAAAOK1kuLGSjPsA09/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/83402d707b45098e/1702323398877/F8smTac02RMnWaz HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/ieoqc/0x4AAAAAAAOK1kuLGSjPsA09/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/83402d707b45098e/1702323398877/F8smTac02RMnWaz HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1272996923:1702322464:qGqc8UdJzWaM885DJMpt9LcmL3VeLIOVl7hJMJBf_GI/83402d707b45098e/31d2dd173e550d3 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sorry/index?continue=http://google.co.uk/&q=EgRmgZjUGMnJ3asGIjCugYbjtADgaWeknEqgxEp7vAmnSPBLI05Hh6qhkYnCegYrKiWBiLAkUmkW39h1K1cyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1Host: www.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCI/KzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/sorry/index?continue=http://google.co.uk/&q=EgRmgZjUGMnJ3asGIjCugYbjtADgaWeknEqgxEp7vAmnSPBLI05Hh6qhkYnCegYrKiWBiLAkUmkW39h1K1cyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B&size=normal&s=NUUeGbk_T9QoVOAlKg4x6rYCgoZi_2gXD3RBAbtKnSL6I-5BpK7sTjDigyecTEVPu9DS225O5vLHdfN-FuftiYu7FCs3KFQfaXiUWKxLsiky-sJ4TkWwGmAFs1ME2SSU7BzBdR_vGDXsmv7PKVS2qET0K2WooDdE7HF14nLfLWWJIClxd-lZ_xsfnuetvtMQ3hWlO0SvWG5VkxzoxO34Gzk0tvrkC8STgphjZoM1YucrDJ8_v8h6OwutsHU-yxV46U4WMXoPLoPB2rT97Eiexk1-_apH7VY&cb=2vbizkafv8gy HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCI/KzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.google.com/sorry/index?continue=http://google.co.uk/&q=EgRmgZjUGMnJ3asGIjCugYbjtADgaWeknEqgxEp7vAmnSPBLI05Hh6qhkYnCegYrKiWBiLAkUmkW39h1K1cyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /js/bg/lEEM4ZLDLFuvATVvcnxglI8CLvLrSc6BLt7Ue_ua1SM.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCI/KzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B&size=normal&s=NUUeGbk_T9QoVOAlKg4x6rYCgoZi_2gXD3RBAbtKnSL6I-5BpK7sTjDigyecTEVPu9DS225O5vLHdfN-FuftiYu7FCs3KFQfaXiUWKxLsiky-sJ4TkWwGmAFs1ME2SSU7BzBdR_vGDXsmv7PKVS2qET0K2WooDdE7HF14nLfLWWJIClxd-lZ_xsfnuetvtMQ3hWlO0SvWG5VkxzoxO34Gzk0tvrkC8STgphjZoM1YucrDJ8_v8h6OwutsHU-yxV46U4WMXoPLoPB2rT97Eiexk1-_apH7VY&cb=2vbizkafv8gyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCI/KzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B&size=normal&s=NUUeGbk_T9QoVOAlKg4x6rYCgoZi_2gXD3RBAbtKnSL6I-5BpK7sTjDigyecTEVPu9DS225O5vLHdfN-FuftiYu7FCs3KFQfaXiUWKxLsiky-sJ4TkWwGmAFs1ME2SSU7BzBdR_vGDXsmv7PKVS2qET0K2WooDdE7HF14nLfLWWJIClxd-lZ_xsfnuetvtMQ3hWlO0SvWG5VkxzoxO34Gzk0tvrkC8STgphjZoM1YucrDJ8_v8h6OwutsHU-yxV46U4WMXoPLoPB2rT97Eiexk1-_apH7VY&cb=2vbizkafv8gyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCI/KzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/sorry/index?continue=http://google.co.uk/&q=EgRmgZjUGMnJ3asGIjCugYbjtADgaWeknEqgxEp7vAmnSPBLI05Hh6qhkYnCegYrKiWBiLAkUmkW39h1K1cyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/bframe?hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCI/KzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.google.com/sorry/index?continue=http://google.co.uk/&q=EgRmgZjUGMnJ3asGIjCugYbjtADgaWeknEqgxEp7vAmnSPBLI05Hh6qhkYnCegYrKiWBiLAkUmkW39h1K1cyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=9OLg8t8ONbh6t9a&MD=RWzokL8v HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /tools/pso/ping?as=chrome&brand=ONGR&pid=&hl=en&events=C1I,C2I,C7I,C1S,C7S&rep=2&rlz=C1:,C2:,C7:&id=000000000000000000000000000000000000000097CD000E57 HTTP/1.1Host: clients1.google.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: google.co.ukConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_101.2.dr	String found in binary or memory: </script><script data-react-helmet="true" data-test="airline-schema" type="application/ld+json">{"@context":"http://schema.org","@type":"Airline","areaServed":"us","contactPoint":{"@type":"ContactPoint","areaServed":"us","availableLanguage":"en","contactType":"Request Information","telephone":"[+1.877.356.5823]"},"description":"Private Jet Airline","logo":"logo_netjets.png","name":"NetJets","sameAs":["https://twitter.com/NetJets","https://www.instagram.com/netjets/","https://www.youtube.com/c/NetJetsInc","https://www.linkedin.com/company/netjets/","https://en.wikipedia.org/wiki/NetJets"],"url":"https://www.netjets.com/en-us/"}</script><script data-react-helmet="true" data-test="page-schema" type="application/ld+json">{"@context":"http://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.netjets.com/en-us/"},{"@type":"ListItem","position":2,"name":"Making the Impossible Possible. Only NetJets.","item":"https://www.netjets.com/en-us/"}]}</script><script data-react-helmet="true" charSet="UTF-8" data-domain-script="d7d1cd6c-208d-47f8-ac7c-7c55dca3fe7d" data-language="en" src="https://cdn.cookielaw.org/scripttemplates/otSDKStub.js" type="text/javascript"></script><script data-react-helmet="true" src="//assets.adobedtm.com/launch-EN59c1864c39b54767922ce07dbb36e0d5.min.js" type="text/javascript"></script><script data-react-helmet="true" type="text/javascript"> equals www.linkedin.com (Linkedin)
Source: chromecache_101.2.dr	String found in binary or memory: </script><script data-react-helmet="true" data-test="airline-schema" type="application/ld+json">{"@context":"http://schema.org","@type":"Airline","areaServed":"us","contactPoint":{"@type":"ContactPoint","areaServed":"us","availableLanguage":"en","contactType":"Request Information","telephone":"[+1.877.356.5823]"},"description":"Private Jet Airline","logo":"logo_netjets.png","name":"NetJets","sameAs":["https://twitter.com/NetJets","https://www.instagram.com/netjets/","https://www.youtube.com/c/NetJetsInc","https://www.linkedin.com/company/netjets/","https://en.wikipedia.org/wiki/NetJets"],"url":"https://www.netjets.com/en-us/"}</script><script data-react-helmet="true" data-test="page-schema" type="application/ld+json">{"@context":"http://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.netjets.com/en-us/"},{"@type":"ListItem","position":2,"name":"Making the Impossible Possible. Only NetJets.","item":"https://www.netjets.com/en-us/"}]}</script><script data-react-helmet="true" charSet="UTF-8" data-domain-script="d7d1cd6c-208d-47f8-ac7c-7c55dca3fe7d" data-language="en" src="https://cdn.cookielaw.org/scripttemplates/otSDKStub.js" type="text/javascript"></script><script data-react-helmet="true" src="//assets.adobedtm.com/launch-EN59c1864c39b54767922ce07dbb36e0d5.min.js" type="text/javascript"></script><script data-react-helmet="true" type="text/javascript"> equals www.twitter.com (Twitter)
Source: chromecache_101.2.dr	String found in binary or memory: </script><script data-react-helmet="true" data-test="airline-schema" type="application/ld+json">{"@context":"http://schema.org","@type":"Airline","areaServed":"us","contactPoint":{"@type":"ContactPoint","areaServed":"us","availableLanguage":"en","contactType":"Request Information","telephone":"[+1.877.356.5823]"},"description":"Private Jet Airline","logo":"logo_netjets.png","name":"NetJets","sameAs":["https://twitter.com/NetJets","https://www.instagram.com/netjets/","https://www.youtube.com/c/NetJetsInc","https://www.linkedin.com/company/netjets/","https://en.wikipedia.org/wiki/NetJets"],"url":"https://www.netjets.com/en-us/"}</script><script data-react-helmet="true" data-test="page-schema" type="application/ld+json">{"@context":"http://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.netjets.com/en-us/"},{"@type":"ListItem","position":2,"name":"Making the Impossible Possible. Only NetJets.","item":"https://www.netjets.com/en-us/"}]}</script><script data-react-helmet="true" charSet="UTF-8" data-domain-script="d7d1cd6c-208d-47f8-ac7c-7c55dca3fe7d" data-language="en" src="https://cdn.cookielaw.org/scripttemplates/otSDKStub.js" type="text/javascript"></script><script data-react-helmet="true" src="//assets.adobedtm.com/launch-EN59c1864c39b54767922ce07dbb36e0d5.min.js" type="text/javascript"></script><script data-react-helmet="true" type="text/javascript"> equals www.youtube.com (Youtube)

Source: unknown

DNS traffic detected: queries for: clients2.google.com

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 11 Dec 2023 19:36:31 GMTContent-Type: text/htmlContent-Length: 27242Connection: closeServer: cloudflareCF-RAY: 83402d4d0d0409ae-MIA

Source: chromecache_81.2.dr	String found in binary or memory: http://google.co.uk
Source: chromecache_101.2.dr	String found in binary or memory: http://schema.org
Source: chromecache_81.2.dr	String found in binary or memory: http://www.netjetseurope.com/images/nj_logo.gif
Source: chromecache_81.2.dr	String found in binary or memory: https://amazon.com
Source: chromecache_101.2.dr	String found in binary or memory: https://c64djon8lb.execute-api.us-east-1.amazonaws.com/prod/q85-w220/public/adobe-dam/praetor-360-sp
Source: chromecache_101.2.dr	String found in binary or memory: https://c64djon8lb.execute-api.us-east-1.amazonaws.com/prod/q85-w220/public/webdam/aircraft/global-7
Source: chromecache_101.2.dr	String found in binary or memory: https://c64djon8lb.execute-api.us-east-1.amazonaws.com/prod/q85-w220/public/webdam/web-assets/3d-spi
Source: chromecache_87.2.dr	String found in binary or memory: https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
Source: chromecache_98.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_98.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_91.2.dr	String found in binary or memory: https://developers.cloudflare.com/r2/data-access/public-buckets/
Source: chromecache_98.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_98.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_98.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_81.2.dr	String found in binary or memory: https://google.co.uk
Source: chromecache_81.2.dr	String found in binary or memory: https://office.com
Source: chromecache_98.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_98.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_98.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_98.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_98.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_98.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_101.2.dr	String found in binary or memory: https://twitter.com/NetJets
Source: chromecache_98.2.dr	String found in binary or memory: https://www.apache.org/licenses/
Source: chromecache_91.2.dr	String found in binary or memory: https://www.cloudflare.com/favicon.ico
Source: chromecache_101.2.dr	String found in binary or memory: https://www.datadoghq-browser-agent.com/us1/v4/datadog-rum.js
Source: chromecache_98.2.dr	String found in binary or memory: https://www.google.com/log?format=json&hasfast=true
Source: chromecache_90.2.dr, chromecache_98.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_101.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_98.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/recaptcha__.
Source: chromecache_90.2.dr, chromecache_82.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/recaptcha__en.js
Source: chromecache_101.2.dr	String found in binary or memory: https://www.instagram.com/netjets/
Source: chromecache_101.2.dr	String found in binary or memory: https://www.linkedin.com/company/netjets/
Source: chromecache_101.2.dr	String found in binary or memory: https://www.netjets.com
Source: chromecache_101.2.dr	String found in binary or memory: https://www.netjets.com/de-de/
Source: chromecache_101.2.dr	String found in binary or memory: https://www.netjets.com/en-gb/
Source: chromecache_101.2.dr	String found in binary or memory: https://www.netjets.com/en-us/
Source: chromecache_101.2.dr	String found in binary or memory: https://www.netjets.com/es-es/
Source: chromecache_101.2.dr	String found in binary or memory: https://www.netjets.com/fr-fr/
Source: chromecache_101.2.dr	String found in binary or memory: https://www.netjets.com/it-it/
Source: chromecache_101.2.dr	String found in binary or memory: https://www.netjets.com/pt-pt/
Source: chromecache_101.2.dr	String found in binary or memory: https://www.netjets.com/ru-ru/
Source: chromecache_101.2.dr	String found in binary or memory: https://www.youtube.com/c/NetJetsInc
Source: chromecache_81.2.dr	String found in binary or memory: https://yellowtelecomms.com/?uoxpeyml

Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443

Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.5:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.5:49765 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_BITS_380_1292641099

Jump to behavior

Source: classification engine

Classification label: mal56.win@22/27@30/15

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2404 --field-trial-handle=2256,i,16544369044721870028,13479729168788484395,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "https://cmax.co.uk/bv.PDF
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2404 --field-trial-handle=2256,i,16544369044721870028,13479729168788484395,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact	Resource Development	Reconnaissance
Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	11 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Abuse Accessibility Features	Acquire Infrastructure	Gather Victim Identity Information
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	4 Non-Application Layer Protocol	SIM Card Swap	Obtain Device Cloud Backups	Network Denial of Service	Domains	Credentials
Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	5 Application Layer Protocol			Data Encrypted for Impact	DNS Server	Email Addresses
Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Traffic Duplication	3 Ingress Tool Transfer			Data Destruction	Virtual Private Server	Employee Names

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://cmax.co.uk/bv.PDF	0%	Avira URL Cloud	safe
https://cmax.co.uk/bv.PDF	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Label
https://www.gstatic.c..?/recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/recaptcha__.	0%	URL Reputation	safe
https://recaptcha.net	0%	URL Reputation	safe
https://yellowtelecomms.com/favicon.ico	100%	Avira URL Cloud	phishing
https://pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev/favicon.ico	0%	Avira URL Cloud	safe
https://google.co.uk	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://www.datadoghq-browser-agent.com/us1/v4/datadog-rum.js	0%	Avira URL Cloud	safe
http://google.co.uk/	0%	Avira URL Cloud	safe
http://google.co.uk	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
www.netjetseurope.com	54.77.133.128	true	false	high
www.aws.netjets.com	18.239.225.39	true	false	high
accounts.google.com	142.250.64.141	true	false	high
cmax.co.uk	62.182.22.52	true	false	unknown
yellowtelecomms.com	194.26.192.93	true	false	unknown
challenges.cloudflare.com	104.17.2.184	true	false	high
www.google.com	142.250.217.196	true	false	high
clients.l.google.com	142.250.217.238	true	false	high
pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev	104.18.2.35	true	false	unknown
google.co.uk	142.250.217.163	true	false	unknown
clients1.google.com	unknown	unknown	false	high
clients2.google.com	unknown	unknown	false	high
www.netjets.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B	false		high
https://pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev/favicon.ico	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1272996923:1702322464:qGqc8UdJzWaM885DJMpt9LcmL3VeLIOVl7hJMJBf_GI/83402d707b45098e/31d2dd173e550d3	false		high
about:blank	false	Avira URL Cloud: safe	low
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/83402d707b45098e/1702323398877/F8smTac02RMnWaz	false		high
https://clients1.google.com/tools/pso/ping?as=chrome&brand=ONGR&pid=&hl=en&events=C1I,C2I,C7I,C1S,C7S&rep=2&rlz=C1:,C2:,C7:&id=000000000000000000000000000000000000000097CD000E57	false		high
https://www.netjets.com/	false		high
https://www.google.com/recaptcha/api.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	false		high
https://cmax.co.uk/bv.PDF	true		unknown
https://challenges.cloudflare.com/turnstile/v0/b/56d3063b/api.js?onload=onloadTurnstileCallback	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=83402d707b45098e	false		high
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B&size=normal&s=NUUeGbk_T9QoVOAlKg4x6rYCgoZi_2gXD3RBAbtKnSL6I-5BpK7sTjDigyecTEVPu9DS225O5vLHdfN-FuftiYu7FCs3KFQfaXiUWKxLsiky-sJ4TkWwGmAFs1ME2SSU7BzBdR_vGDXsmv7PKVS2qET0K2WooDdE7HF14nLfLWWJIClxd-lZ_xsfnuetvtMQ3hWlO0SvWG5VkxzoxO34Gzk0tvrkC8STgphjZoM1YucrDJ8_v8h6OwutsHU-yxV46U4WMXoPLoPB2rT97Eiexk1-_apH7VY&cb=2vbizkafv8gy	false		high
https://www.google.com/js/bg/lEEM4ZLDLFuvATVvcnxglI8CLvLrSc6BLt7Ue_ua1SM.js	false		high
https://www.netjets.com/en-us/	false		high
https://www.google.com/sorry/index?continue=http://google.co.uk/&q=EgRmgZjUGMnJ3asGIjCugYbjtADgaWeknEqgxEp7vAmnSPBLI05Hh6qhkYnCegYrKiWBiLAkUmkW39h1K1cyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	false		high
https://yellowtelecomms.com/favicon.ico	false	Avira URL Cloud: phishing	unknown
http://google.co.uk/	false	Avira URL Cloud: safe	unknown
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard	false		high
https://www.netjetseurope.com/images/nj_logo.gif	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/ieoqc/0x4AAAAAAAOK1kuLGSjPsA09/auto/normal	false		high
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	false		high
https://www.google.com/favicon.ico	false		high
https://pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev/DF.html	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/83402d707b45098e/1702323398872/fdf2e00a0c52098d4c27b76a4bde84a1400fe91b8666b15ac3a6020431a4b22a/4lfhaL7bcQngd2C	false		high
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1	false		high
https://www.google.com/recaptcha/api2/bframe?hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_98.2.dr	false		high
https://www.linkedin.com/company/netjets/	chromecache_101.2.dr	false		high
https://www.netjets.com/fr-fr/	chromecache_101.2.dr	false		high
https://support.google.com/recaptcha#6262736	chromecache_98.2.dr	false		high
https://www.google.com/log?format=json&hasfast=true	chromecache_98.2.dr	false		high
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_98.2.dr	false		high
https://www.instagram.com/netjets/	chromecache_101.2.dr	false		high
https://cloud.google.com/contact	chromecache_98.2.dr	false		high
https://c64djon8lb.execute-api.us-east-1.amazonaws.com/prod/q85-w220/public/adobe-dam/praetor-360-sp	chromecache_101.2.dr	false		high
https://www.netjets.com	chromecache_101.2.dr	false		high
http://schema.org	chromecache_101.2.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_98.2.dr	false		high
https://c64djon8lb.execute-api.us-east-1.amazonaws.com/prod/q85-w220/public/webdam/web-assets/3d-spi	chromecache_101.2.dr	false		high
https://www.google.com/recaptcha/api2/	chromecache_90.2.dr, chromecache_98.2.dr	false		high
https://developers.cloudflare.com/r2/data-access/public-buckets/	chromecache_91.2.dr	false		high
https://c64djon8lb.execute-api.us-east-1.amazonaws.com/prod/q85-w220/public/webdam/aircraft/global-7	chromecache_101.2.dr	false		high
https://support.google.com/recaptcha	chromecache_98.2.dr	false		high
https://www.gstatic.c..?/recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/recaptcha__.	chromecache_98.2.dr	false	URL Reputation: safe	low
https://www.netjets.com/ru-ru/	chromecache_101.2.dr	false		high
https://twitter.com/NetJets	chromecache_101.2.dr	false		high
https://office.com	chromecache_81.2.dr	false		high
https://www.netjets.com/de-de/	chromecache_101.2.dr	false		high
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_98.2.dr	false		high
https://recaptcha.net	chromecache_98.2.dr	false	URL Reputation: safe	unknown
https://www.apache.org/licenses/	chromecache_98.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_98.2.dr	false		high
http://google.co.uk	chromecache_81.2.dr	false	Avira URL Cloud: safe	unknown
http://www.netjetseurope.com/images/nj_logo.gif	chromecache_81.2.dr	false		high
https://www.datadoghq-browser-agent.com/us1/v4/datadog-rum.js	chromecache_101.2.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/c/NetJetsInc	chromecache_101.2.dr	false		high
https://www.netjets.com/en-gb/	chromecache_101.2.dr	false		high
https://play.google.com/log?format=json&hasfast=true	chromecache_98.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_98.2.dr	false		high
https://amazon.com	chromecache_81.2.dr	false		high
https://www.netjets.com/es-es/	chromecache_101.2.dr	false		high
https://google.co.uk	chromecache_81.2.dr	false	Avira URL Cloud: safe	unknown
https://www.netjets.com/it-it/	chromecache_101.2.dr	false		high
https://www.cloudflare.com/favicon.ico	chromecache_91.2.dr	false		high
https://www.netjets.com/pt-pt/	chromecache_101.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
192.178.50.68	unknown	United States	15169	GOOGLEUS	false
104.18.2.35	pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev	United States	13335	CLOUDFLARENETUS	false
18.239.225.76	unknown	United States	16509	AMAZON-02US	false
54.77.133.128	www.netjetseurope.com	United States	16509	AMAZON-02US	false
62.182.22.52	cmax.co.uk	United Kingdom	200083	SUB6GB	false
142.250.217.238	clients.l.google.com	United States	15169	GOOGLEUS	false
18.239.225.39	www.aws.netjets.com	United States	16509	AMAZON-02US	false
104.17.3.184	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.64.141	accounts.google.com	United States	15169	GOOGLEUS	false
142.250.217.196	www.google.com	United States	15169	GOOGLEUS	false
142.250.217.163	google.co.uk	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
194.26.192.93	yellowtelecomms.com	Netherlands	1213	HEANETIE	false
104.17.2.184	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	38.0.0 Ammolite
Analysis ID:	1358923
Start date and time:	2023-12-11 20:35:29 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 20s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://cmax.co.uk/bv.PDF
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.win@22/27@30/15
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: http://google.co.uk/

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.189.131, 34.104.35.123, 192.229.211.108, 72.21.81.240, 142.250.217.227, 142.250.64.170, 192.178.50.42, 142.251.35.234, 142.250.64.234, 142.250.64.138, 142.250.217.234, 192.178.50.74, 142.250.189.138, 142.250.217.170, 142.250.217.202, 192.178.50.35, 192.178.50.67
Excluded domains from analysis (whitelisted): fs.microsoft.com, ocsp.digicert.com, edgedl.me.gvt1.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, update.googleapis.com, ctldl.windowsupdate.com, clientservices.googleapis.com, www.gstatic.com, fe3cr.delivery.mp.microsoft.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
VT rate limit hit for: https://cmax.co.uk/bv.PDF

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 11 18:36:25 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.978239443999198
Encrypted:	false
SSDEEP:	48:8ad0T4ALjXcH1zidAKZdA19ehwiZUklqehAy+3:8dHm/y
MD5:	40398325AE22C258FA5CFE500BBB898C
SHA1:	59B9076101B9CD5264EFED1373CD3F108DAF1DAF
SHA-256:	1114A3D46C6FDCCA37337BADF75BC259C2CAC8323285AAE2BC308B4734A686FD
SHA-512:	F660C9251C87246CCFB7B5FB398872E523F4AD6CA401D1EBBD79F1E53C381684BD1759A8D4794ECCE37A09FE48AA2AB47CA2E0FCA5E9255A31A95DF0B58277BE
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......KTi,..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.W......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.W......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.W......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.W............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.W.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 11 18:36:25 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9901012789830848
Encrypted:	false
SSDEEP:	48:87dd0T4ALjXcH1zidAKZdA1weh/iZUkAQkqehvy+2:8YHk9Q+y
MD5:	A858EF3BF2446794B2D23D674810B082
SHA1:	EF0D7F91B03206CB96856884E95CBEFB7D2AEC91
SHA-256:	7FB7E326EFB20136E889388D136BAB25DB031622D0D490BFD12DEB5C5CDA3A00
SHA-512:	343D0B53C72890DCB08551562EB345EB9BA3253D0EC8275C5FFFDE7760B97FFBA28A37A76C61B32B2B23B0AC7F29EFBDFD9D36C032FBAA30E6698CF292849B3F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....6:=Ti,..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.W......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.W......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.W......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.W............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.W.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.004634256377505
Encrypted:	false
SSDEEP:	48:8xdd0T4ALjsH1zidAKZdA14tseh7sFiZUkmgqeh7sVy+BX:8xEHcnLy
MD5:	22664C46ADA4E99505D9AEB5BEB02850
SHA1:	DAF92EDDF1370B5CFE2896EE10999FAEB7045A98
SHA-256:	61047BCFA39001135EDF530AA5832E456A3BF20854523A59CA4DD1417D679A06
SHA-512:	04FE733EBE9A91ACC71DED08CD85BF699A8B37321BDD86FFBC68BA69F68FEAA9192208C7A45F75D36C6996138CE49436EEC9B77FECAD3F429BE9824D9B3D3AA5
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.W......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.W......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.W......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.W............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 11 18:36:25 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.989874626027923
Encrypted:	false
SSDEEP:	48:8Od0T4ALjXcH1zidAKZdA1vehDiZUkwqehjy+R:8hHvty
MD5:	155D86205EF723D748E37B3B1067F30B
SHA1:	209424B7652293DFD4BEAAEFAA8BE06FF58A6F34
SHA-256:	96FB9F90521BC02BB5F083965F84FC8B57CF5C9CCC985DBFF1D62BB641528579
SHA-512:	0A8F3575C93D705218CB2057C04E3E4E1B646D7DF8DA0F6938355F13B2C14AC85A30A2E149FD61AFA065C832B344B6918E81BBDEE4BEA5393961F2D9C931CF9C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....S.6Ti,..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.W......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.W......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.W......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.W............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.W.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 11 18:36:25 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.977981983943458
Encrypted:	false
SSDEEP:	48:8Ed0T4ALjXcH1zidAKZdA1hehBiZUk1W1qehBy+C:8rHP9hy
MD5:	583CFBEC8873425CEA2E7FAD1537792C
SHA1:	C6A2AE23A2F106BCE4786FD020B4FD0AECB35BDA
SHA-256:	247170402F5106841E60551F22B535692A52A9F3B8E426F326ACE47FC15F08FB
SHA-512:	0B7B7B302F90D8A80978922B92F9F486E4BC03B8B52F66445B5DC926530096C2EC50B65073AF2A8E2039E76FCC5E950DE38E9A621E7A694B4175800E5ADF9161
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....=.CTi,..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.W......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.W......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.W......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.W............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.W.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 11 18:36:25 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9908704972432565
Encrypted:	false
SSDEEP:	48:8jd0T4ALjXcH1zidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbLy+yT+:8WHHT/TbxWOvTbLy7T
MD5:	C6A93B63D5EF9F80256658399BD56B59
SHA1:	6CEE7B6EEA8973D1492A0F43BA5A761BC1660905
SHA-256:	63D3881CF3910DC5F229AD9FE873805A5D0288A6F66F5EBA9EBD16D1FB9F86E9
SHA-512:	CD448633BCDACB97EDA3646AA3E1DC3ED581CA55EB85398C3DA77B5BC3580987C8E72B137E943F0B44C69E45AEE015B1B3CADC7EC2D10F0475A44AD43E100FE8
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....`,Ti,..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.W......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.W......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.W......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.W............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.W.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAk8dqZYMe7mkRIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (3933)
Category:	dropped
Size (bytes):	130236
Entropy (8bit):	5.564368174096918
Encrypted:	false
SSDEEP:	1536:YDn9XtPzQZ4KePlM8QMgkuCkDRX4MUR4wcmwWDYrxByVpXR25YBNJaOVcSF9h0cK:YDpt+lBW19XlW8A
MD5:	57304ED273D8173D4F9C3428759E5EBE
SHA1:	B4676C0F64A46E80E0E45AE3D925467B5E8E48BB
SHA-256:	AEDF4905F70404289E9BCD6EE37BD476E6FEFBA632F71A21FFEA5B25758B17B2
SHA-512:	81E91FA0D74753FC47CDB6D22A569FB12433558F20812790C6BBC75B2E8B996BF58A8895FCD4B78DBD3041E141A67C582DDD8ED809AED3D3F209549BFCE5DB20
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html><html lang="en-us"><head><meta charSet="utf-8"/><meta content="ie=edge" http-equiv="x-ua-compatible"/><meta content="width=device-width, initial-scale=1, shrink-to-fit=no" name="viewport"/><meta name="generator" content="Gatsby 4.23.1"/><meta data-react-helmet="true" name="description" content="NetJets is the world.s largest private jet company, offering fractional aircraft ownership, private jet leases, and private jet card programs. Experience the ultimate in private jet travel, from departure to return."/><meta data-react-helmet="true" name="keywords"/><meta data-react-helmet="true" name="og:url" content="https://www.netjets.com/en-us/"/><meta data-react-helmet="true" name="og:type" content="website"/><meta data-react-helmet="true" name="og:title" content="NetJets \| World's Leading Private Jet Company \| Fractional Aircraft Companies"/><meta data-react-helmet="true" name="og:image"/><meta data-react-helmet="true" name="og:description" content="NetJets is the wor

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	4363
Entropy (8bit):	5.076535908414515
Encrypted:	false
SSDEEP:	96:chfSh3LvyHnEHXSuvNad4pvQQQQj/HqbiC1CYC7CxC1:OkQQQQjCU
MD5:	471F668D7D62C75A1B47A3BBDB1BA9A2
SHA1:	85712EC79174DD8ACA53F1D80D9955BB9EA57469
SHA-256:	34BC41B7F70BFA8A34B1B1FB8123D41A3C31B8F0D8A8B9E2CF960D092155939B
SHA-512:	CCCC2F00FF243FCDC093378E9B38C3C69E9F78B7620C1390C48C47085973825F302C03710CCE48AA5075870ECEC7D78C77418A5E77391E958C67F10C8BAF81B5
Malicious:	false
Reputation:	low
URL:	https://pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev/DF.html
Preview:	<!DOCTYPE html>..<html>..<head>....<BODY bgcolor="#FFFFFF">..<font face="Arial"color="#000000"size="2">..<p><img src="http://www.netjetseurope.com/images/nj_logo.gif" align="right" ALT="NetJets"><br clear="all"><br><br><br>..<p align="center"><font face="Arial"color="#000000"size="3"><u><b>Remittance Advice - Transportes A.reos, S.A.</b></u></font></p>..<p align="right"><table border="0"width="30%"cellpadding="0"align="right"><tr><td align="left"width="50%"bgcolor="#3F2C23"><font face="Arial"color="White"size="2"><b>Payment Date: </b></font></td>..<td align="right"width="50%"><font face="Arial"color="#000000"size="2">16/11/2023</font></td></tr>..<tr><td align="left"width="50%"bgcolor="#3F2C23"><font face="Arial"color="White"size="2"><b>Vendor ID: </b></font></td>..<td align="right"width="50%"><font face="Arial"color="#000000"size="2">INFLI01</font></td></tr>..<tr><td align="left"width="50%"bgcolor="#3F2C23"><font face="Arial"color="White"size="2"><b>Check Number: </b></font></td>..<td

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.81296697998377
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKhT0168yKIVgWaee:PLKdXNQKF016fKogL
MD5:	E985F667E666AD879364D2E1C20A02DC
SHA1:	4E896E0F0268C2D6565798A87665EB0084F23D41
SHA-256:	153667004611F8905F074B17B69C32F43B8038F0D95D1341D00A88E48F990A6D
SHA-512:	0742FFD758935DADEC5398BF8BF8A056179F3DC28FDB4EDC8A117359C96094C27121A2F1432F7E1394826E8765615F9C92AB0470670CFB9B42E3A5F18F6027C3
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/recaptcha__en.js');

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 21 x 16, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.068159130770307
Encrypted:	false
SSDEEP:	3:yionv//thPl6tg1Cyxl/k4E08up:6v/lhP9wy7Tp
MD5:	CFDAE70BBAA81DBDBD5124437200B5EB
SHA1:	1AB8F1CB7AED2348FDF795844F44135CCA1B3ABF
SHA-256:	5237F1A9E93B6E987B2D278033D23278F87732EC11C38069A6278BC19F292DEF
SHA-512:	5011BA74A5A37A3C1E9633FE291205B9C9A5ECEAC1EE4E42FB67F2E4B51265D1D8C239D8C405AEB1EA1FEC8CBD68AEA553E6CE7E63A01EF8579B07FD11517CAC
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/83402d707b45098e/1702323398877/F8smTac02RMnWaz
Preview:	.PNG........IHDR.............v..r....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56398), with no line terminators
Category:	downloaded
Size (bytes):	56398
Entropy (8bit):	5.907604034780877
Encrypted:	false
SSDEEP:	768:+LUmmAWTe2uXYp8Mi+yKYlebyB5lxRx54PHSGdXXwW7MFWwXVuE2:4UcW6v+0B5chXwW49z2
MD5:	EB4BC511F79F7A1573B45F5775B3A99B
SHA1:	D910FB51AD7316AA54F055079374574698E74B35
SHA-256:	7859A62E04B0ACB06516EB12454DE6673883ECFAEAED6C254659BCA7CD59C050
SHA-512:	EC9BDF1C91B6262B183FD23F640EAC22016D1F42DB631380676ED34B962E01BADDA91F9CBDFA189B42FE3182A992F1B95A7353AF41E41B2D6E1DAB17E87637A0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAABIAAAASABGyWs+AAAACXZwQWcAAABUAAADSAC4K4y8AAA4oElEQVR42u2dCZRV1ZX3q5iE4IQIiKQQCKBt0JLEIUZwCCk7pBNFiRMajZrIl9aOLZ8sY4CWdkDbT2McooaAEmNixFhpaYE2dCiLScWiQHCgoGQoGQuhGArKKl7V+c5/n33fO/V4w733nVuheXuv9V/rrnvP2Xud3zvTPee+ewsKxMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExP4OdtlT6ztAbRWvvLy8A3QkwxzH6tBGMMexI

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
URL:	https://www.google.com/favicon.ico
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 21 x 16, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.068159130770307
Encrypted:	false
SSDEEP:	3:yionv//thPl6tg1Cyxl/k4E08up:6v/lhP9wy7Tp
MD5:	CFDAE70BBAA81DBDBD5124437200B5EB
SHA1:	1AB8F1CB7AED2348FDF795844F44135CCA1B3ABF
SHA-256:	5237F1A9E93B6E987B2D278033D23278F87732EC11C38069A6278BC19F292DEF
SHA-512:	5011BA74A5A37A3C1E9633FE291205B9C9A5ECEAC1EE4E42FB67F2E4B51265D1D8C239D8C405AEB1EA1FEC8CBD68AEA553E6CE7E63A01EF8579B07FD11517CAC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............v..r....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1928)
Category:	downloaded
Size (bytes):	3260
Entropy (8bit):	5.238866654478205
Encrypted:	false
SSDEEP:	48:YUXW4NNPkiWUZ4bW7136yKrnVjbv8+qfOcqwFtiGNir38SKZyEk0s4tPI:lGsCUyA1XanFISch+r38SKZdFsig
MD5:	A1300D4A7ADA9BD7F9BBE7F90B33D6DF
SHA1:	F2C63266D82DA22865B8A383C5C3014FFDD61406
SHA-256:	5CD0646F7BCC6B332F9D922B9370277AEDA4BAB5F4DC86DB7D3100261E8EB1E6
SHA-512:	E8D94D45EF7CD727A8718E31C9C079E62BC3A56DE9F1B13D9ABFF6D1BDF17A90B2B1070EA60738A69E39E5B9BC1797B4FADECBA536434C19F2D5CD2FCC95C510
Malicious:	false
Reputation:	low
URL:	https://yellowtelecomms.com/?uoxpeyml=977a77ae68353043b6c9ae912e4a6fdb66e2439ecbf1df63c640f03fdb45bf44ef112d5670400082ce517e3c0b918a2015690385259e60e9efacb3f33a9fc0c3
Preview:	.<!doctype html><html lang=en-US><head> <script async defer src="https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback">.</script> <title>Just a moment...</title> <meta content="width=device-width,initial-scale=1" name=viewport> <script>var verifyCallback_CF=function (response){var cfForm=document.querySelector("#cfForm"); if (response && response.length > 10){cfForm.submit(); return;}}; window.onloadTurnstileCallback=function (){turnstile.render("#turnstileCaptcha",{sitekey: "0x4AAAAAAAOK1kuLGSjPsA09", callback: verifyCallback_CF,});};.</script></head><style>.h1,.h2{font-weight:500}*{box-sizing:border-box;margin:0;padding:0}html{line-height:1.15;-webkit-text-size-adjust:100%;color:#313131;font-family:system-ui,-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica Neue,Arial,Noto Sans,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol,Noto Color Emoji}body{display:flex;flex-direction:column;min-height:100vh}a{transition:color .15s;background

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1222), with no line terminators
Category:	downloaded
Size (bytes):	1222
Entropy (8bit):	5.815294760819388
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVCLTLv138EgFB5vtTGJTlWtNS1TB25sLqo40RWUnYN:VKEctKonR3evtTA8W1UGLrwUnG
MD5:	D67C1E308323A465CD23C2212112093A
SHA1:	CCCCD2A05BC7129D8D5C65E11F311F205A6637A6
SHA-256:	B311AC29F8D7837679D637891DB9BBCC84AB0FA8652196D3605DE190DC6A6857
SHA-512:	B32D0FDCF4D5FF44A5811FC26E764F1F73E7B0F8CDA4C18C7947E47DA83C94F595FFEF4E144A32A412664ACD4180FA7577F0BE8715E18F719EDCDDD5AACE7098
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-JtvhFQlPQ6LL/+I5aABhkbXo/hmh5M6IvL9vK+ec

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (611)
Category:	downloaded
Size (bytes):	27242
Entropy (8bit):	4.3631679730758375
Encrypted:	false
SSDEEP:	384:6FamwIluB0sJQqCeSQup5szCUXAG0VVi82OgoKACZQQofNJXY3gW3:663Mp5If8WOmgW3
MD5:	DF3D48946E8D3F5A83608308EDBB4B86
SHA1:	47B9C40C97ABF2658DF96B1C06109324E15E1A00
SHA-256:	570A6631252B8A52DF4DE0E953AE77DBDF524DFC3637CDA2840494A0D2B49499
SHA-512:	36EC1CEC72DC3245730C813277C645525473CC5232E85CD23503B8593D90264F335E61A16D364A1E6C41922820B40BA7C0F46B19F4B91DB6A0CF5E31E778DDEA
Malicious:	false
Reputation:	low
URL:	https://pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev/favicon.ico
Preview:	<!DOCTYPE html>.<html lang="en">. <head>. <meta charset="UTF-8" />. <meta name="viewport" content="width=device-width, initial-scale=1.0" />. <link rel="icon" href="https://www.cloudflare.com/favicon.ico" />. <title>Not Found</title>. <style>. body {. font-family: system-ui;. font-weight: 300;. font-size: 1.25rem;. color: #36393a;. display: flex;. align-items: center;. justify-content: center;. }. main {. max-width: 1200px;. margin-top: 120px;. display: flex;. flex-wrap: wrap;. align-items: center;. justify-content: center;. }. #text {. max-width: 60%;. margin-left: 1rem;. margin-right: 1rem;. }. main > section > div {. margin-bottom: 3.25rem;. }. svg {. margin-left: 2rem;. }. @keyframes eye-1 {. 0% {. transform: translateX(0);. }. 10%,. 50% {. tr

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	22
Entropy (8bit):	3.6978458230844122
Encrypted:	false
SSDEEP:	3:jAbukMn:jP
MD5:	6AAB5444A217195068E4B25509BC0C50
SHA1:	7B22EAF7EAA9B7E1F664A0632D3894D406FE7933
SHA-256:	FC5525D427BFA27792D3A87411BE241C047D07F07C18E2FC36BF00B1C2E33D07
SHA-512:	AA5F66638B142B5E6D1D008F2934530C7AAD2F7F19128CA24609825D0DACFFD25A77591BFD7FB1D225BE2FA77CABCE837E0741326C1AC622C244D51E6FAFB303
Malicious:	false
Reputation:	low
URL:	https://yellowtelecomms.com/favicon.ico
Preview:	<h1>Access Denied</h1>

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17029), with no line terminators
Category:	downloaded
Size (bytes):	17029
Entropy (8bit):	5.5735328608357335
Encrypted:	false
SSDEEP:	192:yLZuH8XV4C6qVMf8xyefVuoaebItntHKCrKA7biuagB6ND5rN/b6HWq1DpgiUo1:MuH8XmvSyEVuoauWntqCrxdaBD6b1D6y
MD5:	E2DCAF4318D1CA9EE630EB93804FA2A2
SHA1:	BEAA685908E1B17CAC2F3268025A349E64DBC44A
SHA-256:	94410CE192C32C5BAF01356F727C60948F022EF2EB49CE812EDED47BFB9AD523
SHA-512:	A6FE3EEF914B7CAC38AD94C011A87A5BBEB61150F9DBE1A9C3F350445138CA09019B76542D831B653D2F87D74228F447472EB034CB3FE91503D6CBF47357ACC3
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/lEEM4ZLDLFuvATVvcnxglI8CLvLrSc6BLt7Ue_ua1SM.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var C=function(x,U){if(!(x=(U=b.trustedTypes,null),U)\|\|!U.createPolicy)return x;try{x=U.createPolicy("bg",{createHTML:a,createScript:a,createScriptURL:a})}catch(R){b.console&&b.console.error(R.message)}return x},b=this\|\|self,a=function(x){return x};(0,eval)(function(x,U){return(U=C())&&1===x.eval(U.createScript("1"))?function(R){return U.createScript(R)}:function(R){return""+R}}(b)(Array(7824Math.random()\|0).join("\n")+'(function(){var hc=function(x,U,a,R,C,J){for(J=(C=(R.cn=(R.Ct=Re({get:function(){return this.concat()}},(R.IK=(R.m3=UZ,xu),R.Vl=R[z],R.v)),G)[R.v](R.Ct,{value:{value:{}}}),[]),0);285>J;J++)C[J]=String.fromCharCode(J);(q(R,(q(R,(W(R,(Q(function(b,r){(b=Z((r=e(b),b.D),r),b[0]).removeEventListener(b[1],b[2],N)},R,(W(R,(W(R,(Q(function(b,r,I,u,T){r=e((u=e(b),b)),I=e(b),b.D==b&&(I=Z(b,I),T=Z(b,u),r=Z(b,r),T[r]=I,351==u&&(b.j=void 0,2==r&&(b.Y=A(false,32,b),b.j=void 0)))},(W

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (568)
Category:	downloaded
Size (bytes):	512519
Entropy (8bit):	5.723996293218035
Encrypted:	false
SSDEEP:	6144:53K+oivdmEZwL1ZXgJgb3fqFZ7Nk/FfF1O3HZ5jUMFDyYtE0Vtdx1ugKX+D3lmFw:5/ct1ZXzKde/n1OXZ5jUMFmUtHz5
MD5:	AF51EB6CED1AFE3F0F11EE679198808C
SHA1:	02B9D6A7A54F930807A01AE3CDCF462862925B40
SHA-256:	6788908EFCFF931E3C0C4FB54A255932414A22E81971DCC1427C8A4F459A1FBF
SHA-512:	E561A39733D211536D6F4666169221CA52B3502DD7DE20EADBA2C0CCD6F7568E3037FA8935D141993529AC9651ED7ECFF20F5482DE210FA5355A270DABE9221E
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that control, are controlled by, or are under common. control with that entity. For the purposes of this definition,. "control" means (i) the power, direct or indirect, to cause the. direction or management of such entity, whether by contract or. o

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33875)
Category:	downloaded
Size (bytes):	33876
Entropy (8bit):	5.368899803670649
Encrypted:	false
SSDEEP:	768:oY9CGXLlh6vb4QkegBwZqraqmAMVEiopz+rGYxY6ZYTHjk3SY:oeuvb4Qk/DraqHq
MD5:	8C90F391245A994AE95E644A587C8626
SHA1:	7BFC99336571D0CCFE38F9E1D18CB26B4ADFC316
SHA-256:	ACBE221D9BB71E85D0A3B52A7A9D44EE4669AB664186B32D0C737A2BE62681E7
SHA-512:	916F4CD48FC87B759EFA209ECB2B67A7878D6E16EB3128512BE9668731027F7795BC016E6081EE9F74FF4B38AF54C9CADF88A6F965980C7D0881B05D645CFEAF
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/b/56d3063b/api.js?onload=onloadTurnstileCallback
Preview:	"use strict";(function(){function Ze(e,n,c,u,l,_,m){try{var s=e[_](m),d=s.value}catch(g){c(g);return}s.done?n(d):Promise.resolve(d).then(u,l)}function et(e){return function(){var n=this,c=arguments;return new Promise(function(u,l){var _=e.apply(n,c);function m(d){Ze(_,u,l,m,s,"next",d)}function s(d){Ze(_,u,l,m,s,"throw",d)}m(void 0)})}}function O(e,n){return n!=null&&typeof Symbol!="undefined"&&n[Symbol.hasInstance]?!!n[Symbol.hasInstance](e):O(e,n)}function ye(e,n,c){return n in e?Object.defineProperty(e,n,{value:c,enumerable:!0,configurable:!0,writable:!0}):e[n]=c,e}function Pe(e){for(var n=1;n<arguments.length;n++){var c=arguments[n]!=null?arguments[n]:{},u=Object.keys(c);typeof Object.getOwnPropertySymbols=="function"&&(u=u.concat(Object.getOwnPropertySymbols(c).filter(function(l){return Object.getOwnPropertyDescriptor(c,l).enumerable}))),u.forEach(function(l){ye(e,l,c[l])})}return e}function tt(e){if(Array.isArray(e))return e}function rt(e,n){var c=e==null?null:typeof Symbol!="und

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 11, 2023 20:36:17.038470984 CET	49674	443	192.168.2.5	23.1.237.91
Dec 11, 2023 20:36:17.038575888 CET	49675	443	192.168.2.5	23.1.237.91
Dec 11, 2023 20:36:17.179120064 CET	49673	443	192.168.2.5	23.1.237.91
Dec 11, 2023 20:36:24.849996090 CET	49706	443	192.168.2.5	142.250.64.141
Dec 11, 2023 20:36:24.850039005 CET	443	49706	142.250.64.141	192.168.2.5
Dec 11, 2023 20:36:24.850106955 CET	49706	443	192.168.2.5	142.250.64.141
Dec 11, 2023 20:36:24.850445986 CET	49706	443	192.168.2.5	142.250.64.141
Dec 11, 2023 20:36:24.850461006 CET	443	49706	142.250.64.141	192.168.2.5
Dec 11, 2023 20:36:24.871201992 CET	49707	443	192.168.2.5	142.250.217.238
Dec 11, 2023 20:36:24.871242046 CET	443	49707	142.250.217.238	192.168.2.5
Dec 11, 2023 20:36:24.871308088 CET	49707	443	192.168.2.5	142.250.217.238
Dec 11, 2023 20:36:24.871727943 CET	49707	443	192.168.2.5	142.250.217.238
Dec 11, 2023 20:36:24.871746063 CET	443	49707	142.250.217.238	192.168.2.5
Dec 11, 2023 20:36:25.165646076 CET	443	49706	142.250.64.141	192.168.2.5
Dec 11, 2023 20:36:25.165880919 CET	49706	443	192.168.2.5	142.250.64.141
Dec 11, 2023 20:36:25.165915012 CET	443	49706	142.250.64.141	192.168.2.5
Dec 11, 2023 20:36:25.167920113 CET	443	49706	142.250.64.141	192.168.2.5
Dec 11, 2023 20:36:25.168119907 CET	49706	443	192.168.2.5	142.250.64.141
Dec 11, 2023 20:36:25.169085979 CET	49706	443	192.168.2.5	142.250.64.141
Dec 11, 2023 20:36:25.169193029 CET	443	49706	142.250.64.141	192.168.2.5
Dec 11, 2023 20:36:25.169239044 CET	49706	443	192.168.2.5	142.250.64.141
Dec 11, 2023 20:36:25.181199074 CET	443	49707	142.250.217.238	192.168.2.5
Dec 11, 2023 20:36:25.181504965 CET	49707	443	192.168.2.5	142.250.217.238
Dec 11, 2023 20:36:25.181580067 CET	443	49707	142.250.217.238	192.168.2.5
Dec 11, 2023 20:36:25.182023048 CET	443	49707	142.250.217.238	192.168.2.5
Dec 11, 2023 20:36:25.182104111 CET	49707	443	192.168.2.5	142.250.217.238
Dec 11, 2023 20:36:25.182832956 CET	443	49707	142.250.217.238	192.168.2.5
Dec 11, 2023 20:36:25.182897091 CET	49707	443	192.168.2.5	142.250.217.238
Dec 11, 2023 20:36:25.183788061 CET	49707	443	192.168.2.5	142.250.217.238
Dec 11, 2023 20:36:25.183893919 CET	443	49707	142.250.217.238	192.168.2.5
Dec 11, 2023 20:36:25.183904886 CET	49707	443	192.168.2.5	142.250.217.238
Dec 11, 2023 20:36:25.216743946 CET	443	49706	142.250.64.141	192.168.2.5
Dec 11, 2023 20:36:25.228765965 CET	443	49707	142.250.217.238	192.168.2.5
Dec 11, 2023 20:36:25.244066954 CET	49707	443	192.168.2.5	142.250.217.238
Dec 11, 2023 20:36:25.244096994 CET	443	49707	142.250.217.238	192.168.2.5
Dec 11, 2023 20:36:25.352910042 CET	49707	443	192.168.2.5	142.250.217.238
Dec 11, 2023 20:36:25.380774021 CET	443	49706	142.250.64.141	192.168.2.5
Dec 11, 2023 20:36:25.381011009 CET	49706	443	192.168.2.5	142.250.64.141
Dec 11, 2023 20:36:25.478282928 CET	443	49706	142.250.64.141	192.168.2.5
Dec 11, 2023 20:36:25.478812933 CET	443	49706	142.250.64.141	192.168.2.5
Dec 11, 2023 20:36:25.478890896 CET	49706	443	192.168.2.5	142.250.64.141
Dec 11, 2023 20:36:25.479598045 CET	49706	443	192.168.2.5	142.250.64.141
Dec 11, 2023 20:36:25.479617119 CET	443	49706	142.250.64.141	192.168.2.5
Dec 11, 2023 20:36:25.481412888 CET	443	49707	142.250.217.238	192.168.2.5
Dec 11, 2023 20:36:25.481720924 CET	443	49707	142.250.217.238	192.168.2.5
Dec 11, 2023 20:36:25.481800079 CET	49707	443	192.168.2.5	142.250.217.238
Dec 11, 2023 20:36:25.482764006 CET	49707	443	192.168.2.5	142.250.217.238
Dec 11, 2023 20:36:25.482825994 CET	443	49707	142.250.217.238	192.168.2.5
Dec 11, 2023 20:36:25.967179060 CET	49710	443	192.168.2.5	62.182.22.52
Dec 11, 2023 20:36:25.967226028 CET	443	49710	62.182.22.52	192.168.2.5
Dec 11, 2023 20:36:25.967324018 CET	49710	443	192.168.2.5	62.182.22.52
Dec 11, 2023 20:36:25.967799902 CET	49711	443	192.168.2.5	62.182.22.52
Dec 11, 2023 20:36:25.967904091 CET	443	49711	62.182.22.52	192.168.2.5
Dec 11, 2023 20:36:25.968004942 CET	49711	443	192.168.2.5	62.182.22.52
Dec 11, 2023 20:36:25.968179941 CET	49710	443	192.168.2.5	62.182.22.52
Dec 11, 2023 20:36:25.968194962 CET	443	49710	62.182.22.52	192.168.2.5
Dec 11, 2023 20:36:25.968538046 CET	49711	443	192.168.2.5	62.182.22.52
Dec 11, 2023 20:36:25.968571901 CET	443	49711	62.182.22.52	192.168.2.5
Dec 11, 2023 20:36:26.457591057 CET	443	49711	62.182.22.52	192.168.2.5
Dec 11, 2023 20:36:26.457979918 CET	49711	443	192.168.2.5	62.182.22.52
Dec 11, 2023 20:36:26.458003044 CET	443	49711	62.182.22.52	192.168.2.5
Dec 11, 2023 20:36:26.459076881 CET	443	49711	62.182.22.52	192.168.2.5
Dec 11, 2023 20:36:26.459248066 CET	49711	443	192.168.2.5	62.182.22.52
Dec 11, 2023 20:36:26.460352898 CET	49711	443	192.168.2.5	62.182.22.52
Dec 11, 2023 20:36:26.460515976 CET	443	49711	62.182.22.52	192.168.2.5
Dec 11, 2023 20:36:26.460556030 CET	49711	443	192.168.2.5	62.182.22.52
Dec 11, 2023 20:36:26.461843014 CET	443	49710	62.182.22.52	192.168.2.5
Dec 11, 2023 20:36:26.462148905 CET	49710	443	192.168.2.5	62.182.22.52
Dec 11, 2023 20:36:26.462179899 CET	443	49710	62.182.22.52	192.168.2.5
Dec 11, 2023 20:36:26.463711977 CET	443	49710	62.182.22.52	192.168.2.5
Dec 11, 2023 20:36:26.463787079 CET	49710	443	192.168.2.5	62.182.22.52
Dec 11, 2023 20:36:26.464926958 CET	49710	443	192.168.2.5	62.182.22.52
Dec 11, 2023 20:36:26.465020895 CET	443	49710	62.182.22.52	192.168.2.5
Dec 11, 2023 20:36:26.500744104 CET	443	49711	62.182.22.52	192.168.2.5
Dec 11, 2023 20:36:26.510556936 CET	49711	443	192.168.2.5	62.182.22.52
Dec 11, 2023 20:36:26.510559082 CET	49710	443	192.168.2.5	62.182.22.52
Dec 11, 2023 20:36:26.510570049 CET	443	49711	62.182.22.52	192.168.2.5
Dec 11, 2023 20:36:26.510585070 CET	443	49710	62.182.22.52	192.168.2.5
Dec 11, 2023 20:36:26.556076050 CET	49711	443	192.168.2.5	62.182.22.52
Dec 11, 2023 20:36:26.571253061 CET	49710	443	192.168.2.5	62.182.22.52
Dec 11, 2023 20:36:26.642638922 CET	49674	443	192.168.2.5	23.1.237.91
Dec 11, 2023 20:36:26.649919987 CET	49675	443	192.168.2.5	23.1.237.91
Dec 11, 2023 20:36:26.792638063 CET	49673	443	192.168.2.5	23.1.237.91
Dec 11, 2023 20:36:26.896529913 CET	49712	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:26.896559000 CET	443	49712	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:26.896636963 CET	49712	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:26.897171021 CET	49712	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:26.897183895 CET	443	49712	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:26.957434893 CET	443	49711	62.182.22.52	192.168.2.5
Dec 11, 2023 20:36:26.957628965 CET	443	49711	62.182.22.52	192.168.2.5
Dec 11, 2023 20:36:26.957694054 CET	49711	443	192.168.2.5	62.182.22.52
Dec 11, 2023 20:36:26.957968950 CET	49711	443	192.168.2.5	62.182.22.52
Dec 11, 2023 20:36:26.957987070 CET	443	49711	62.182.22.52	192.168.2.5
Dec 11, 2023 20:36:26.957998037 CET	49711	443	192.168.2.5	62.182.22.52
Dec 11, 2023 20:36:26.958033085 CET	49711	443	192.168.2.5	62.182.22.52
Dec 11, 2023 20:36:27.092538118 CET	49714	443	192.168.2.5	104.18.2.35
Dec 11, 2023 20:36:27.092576981 CET	443	49714	104.18.2.35	192.168.2.5
Dec 11, 2023 20:36:27.092698097 CET	49714	443	192.168.2.5	104.18.2.35
Dec 11, 2023 20:36:27.093008995 CET	49714	443	192.168.2.5	104.18.2.35
Dec 11, 2023 20:36:27.093025923 CET	443	49714	104.18.2.35	192.168.2.5
Dec 11, 2023 20:36:27.217567921 CET	443	49712	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:27.217900038 CET	49712	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:27.217916965 CET	443	49712	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:27.219113111 CET	443	49712	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:27.219196081 CET	49712	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:27.224694014 CET	49712	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:27.224821091 CET	443	49712	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:27.276019096 CET	49712	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:27.276036978 CET	443	49712	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:27.323582888 CET	49712	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:27.364527941 CET	443	49714	104.18.2.35	192.168.2.5
Dec 11, 2023 20:36:27.364881039 CET	49714	443	192.168.2.5	104.18.2.35
Dec 11, 2023 20:36:27.364907026 CET	443	49714	104.18.2.35	192.168.2.5
Dec 11, 2023 20:36:27.366607904 CET	443	49714	104.18.2.35	192.168.2.5
Dec 11, 2023 20:36:27.366677046 CET	49714	443	192.168.2.5	104.18.2.35
Dec 11, 2023 20:36:27.367979050 CET	49714	443	192.168.2.5	104.18.2.35
Dec 11, 2023 20:36:27.368063927 CET	443	49714	104.18.2.35	192.168.2.5
Dec 11, 2023 20:36:27.368302107 CET	49714	443	192.168.2.5	104.18.2.35
Dec 11, 2023 20:36:27.368311882 CET	443	49714	104.18.2.35	192.168.2.5
Dec 11, 2023 20:36:27.418523073 CET	49714	443	192.168.2.5	104.18.2.35
Dec 11, 2023 20:36:27.828805923 CET	443	49714	104.18.2.35	192.168.2.5
Dec 11, 2023 20:36:27.828933001 CET	443	49714	104.18.2.35	192.168.2.5
Dec 11, 2023 20:36:27.829042912 CET	443	49714	104.18.2.35	192.168.2.5
Dec 11, 2023 20:36:27.829067945 CET	49714	443	192.168.2.5	104.18.2.35
Dec 11, 2023 20:36:27.829116106 CET	443	49714	104.18.2.35	192.168.2.5
Dec 11, 2023 20:36:27.829310894 CET	49714	443	192.168.2.5	104.18.2.35
Dec 11, 2023 20:36:27.829329967 CET	443	49714	104.18.2.35	192.168.2.5
Dec 11, 2023 20:36:27.829353094 CET	443	49714	104.18.2.35	192.168.2.5
Dec 11, 2023 20:36:27.829422951 CET	49714	443	192.168.2.5	104.18.2.35
Dec 11, 2023 20:36:27.832647085 CET	49714	443	192.168.2.5	104.18.2.35
Dec 11, 2023 20:36:27.832664013 CET	443	49714	104.18.2.35	192.168.2.5
Dec 11, 2023 20:36:28.208728075 CET	443	49703	23.1.237.91	192.168.2.5
Dec 11, 2023 20:36:28.208947897 CET	49703	443	192.168.2.5	23.1.237.91
Dec 11, 2023 20:36:28.268815041 CET	49716	443	192.168.2.5	54.77.133.128
Dec 11, 2023 20:36:28.268862963 CET	443	49716	54.77.133.128	192.168.2.5
Dec 11, 2023 20:36:28.268934011 CET	49716	443	192.168.2.5	54.77.133.128
Dec 11, 2023 20:36:28.296232939 CET	49716	443	192.168.2.5	54.77.133.128
Dec 11, 2023 20:36:28.296252012 CET	443	49716	54.77.133.128	192.168.2.5
Dec 11, 2023 20:36:29.059231997 CET	443	49716	54.77.133.128	192.168.2.5
Dec 11, 2023 20:36:29.059622049 CET	49716	443	192.168.2.5	54.77.133.128
Dec 11, 2023 20:36:29.059652090 CET	443	49716	54.77.133.128	192.168.2.5
Dec 11, 2023 20:36:29.061005116 CET	443	49716	54.77.133.128	192.168.2.5
Dec 11, 2023 20:36:29.061086893 CET	49716	443	192.168.2.5	54.77.133.128
Dec 11, 2023 20:36:29.287367105 CET	49716	443	192.168.2.5	54.77.133.128
Dec 11, 2023 20:36:29.287585974 CET	443	49716	54.77.133.128	192.168.2.5
Dec 11, 2023 20:36:29.288188934 CET	49716	443	192.168.2.5	54.77.133.128
Dec 11, 2023 20:36:29.288211107 CET	443	49716	54.77.133.128	192.168.2.5
Dec 11, 2023 20:36:29.333865881 CET	49716	443	192.168.2.5	54.77.133.128
Dec 11, 2023 20:36:29.354233027 CET	49717	443	192.168.2.5	23.204.76.112
Dec 11, 2023 20:36:29.354291916 CET	443	49717	23.204.76.112	192.168.2.5
Dec 11, 2023 20:36:29.354360104 CET	49717	443	192.168.2.5	23.204.76.112
Dec 11, 2023 20:36:29.357213974 CET	49717	443	192.168.2.5	23.204.76.112
Dec 11, 2023 20:36:29.357243061 CET	443	49717	23.204.76.112	192.168.2.5
Dec 11, 2023 20:36:29.539161921 CET	443	49716	54.77.133.128	192.168.2.5
Dec 11, 2023 20:36:29.539330959 CET	443	49716	54.77.133.128	192.168.2.5
Dec 11, 2023 20:36:29.539427996 CET	49716	443	192.168.2.5	54.77.133.128
Dec 11, 2023 20:36:29.540330887 CET	49716	443	192.168.2.5	54.77.133.128
Dec 11, 2023 20:36:29.540349007 CET	443	49716	54.77.133.128	192.168.2.5
Dec 11, 2023 20:36:29.621706963 CET	443	49717	23.204.76.112	192.168.2.5
Dec 11, 2023 20:36:29.621805906 CET	49717	443	192.168.2.5	23.204.76.112
Dec 11, 2023 20:36:29.625204086 CET	49717	443	192.168.2.5	23.204.76.112
Dec 11, 2023 20:36:29.625221968 CET	443	49717	23.204.76.112	192.168.2.5
Dec 11, 2023 20:36:29.625618935 CET	443	49717	23.204.76.112	192.168.2.5
Dec 11, 2023 20:36:29.666682005 CET	49717	443	192.168.2.5	23.204.76.112
Dec 11, 2023 20:36:29.721273899 CET	49717	443	192.168.2.5	23.204.76.112
Dec 11, 2023 20:36:29.758439064 CET	49718	443	192.168.2.5	18.239.225.39
Dec 11, 2023 20:36:29.758497000 CET	443	49718	18.239.225.39	192.168.2.5
Dec 11, 2023 20:36:29.758589983 CET	49718	443	192.168.2.5	18.239.225.39
Dec 11, 2023 20:36:29.759597063 CET	49718	443	192.168.2.5	18.239.225.39
Dec 11, 2023 20:36:29.759617090 CET	443	49718	18.239.225.39	192.168.2.5
Dec 11, 2023 20:36:29.764759064 CET	443	49717	23.204.76.112	192.168.2.5
Dec 11, 2023 20:36:29.862217903 CET	443	49717	23.204.76.112	192.168.2.5
Dec 11, 2023 20:36:29.862277985 CET	443	49717	23.204.76.112	192.168.2.5
Dec 11, 2023 20:36:29.862395048 CET	49717	443	192.168.2.5	23.204.76.112
Dec 11, 2023 20:36:29.862565041 CET	49717	443	192.168.2.5	23.204.76.112
Dec 11, 2023 20:36:29.862579107 CET	443	49717	23.204.76.112	192.168.2.5
Dec 11, 2023 20:36:29.911830902 CET	49719	443	192.168.2.5	23.204.76.112
Dec 11, 2023 20:36:29.911873102 CET	443	49719	23.204.76.112	192.168.2.5
Dec 11, 2023 20:36:29.911973953 CET	49719	443	192.168.2.5	23.204.76.112
Dec 11, 2023 20:36:29.913054943 CET	49719	443	192.168.2.5	23.204.76.112
Dec 11, 2023 20:36:29.913069010 CET	443	49719	23.204.76.112	192.168.2.5
Dec 11, 2023 20:36:30.030565023 CET	443	49718	18.239.225.39	192.168.2.5
Dec 11, 2023 20:36:30.068042040 CET	49718	443	192.168.2.5	18.239.225.39
Dec 11, 2023 20:36:30.068062067 CET	443	49718	18.239.225.39	192.168.2.5
Dec 11, 2023 20:36:30.071942091 CET	443	49718	18.239.225.39	192.168.2.5
Dec 11, 2023 20:36:30.072052002 CET	49718	443	192.168.2.5	18.239.225.39
Dec 11, 2023 20:36:30.104794979 CET	49718	443	192.168.2.5	18.239.225.39
Dec 11, 2023 20:36:30.105161905 CET	443	49718	18.239.225.39	192.168.2.5
Dec 11, 2023 20:36:30.105412006 CET	49718	443	192.168.2.5	18.239.225.39
Dec 11, 2023 20:36:30.105432987 CET	443	49718	18.239.225.39	192.168.2.5
Dec 11, 2023 20:36:30.148984909 CET	49718	443	192.168.2.5	18.239.225.39
Dec 11, 2023 20:36:30.170701981 CET	443	49719	23.204.76.112	192.168.2.5
Dec 11, 2023 20:36:30.170798063 CET	49719	443	192.168.2.5	23.204.76.112
Dec 11, 2023 20:36:30.172852993 CET	49719	443	192.168.2.5	23.204.76.112
Dec 11, 2023 20:36:30.172868013 CET	443	49719	23.204.76.112	192.168.2.5
Dec 11, 2023 20:36:30.173120022 CET	443	49719	23.204.76.112	192.168.2.5
Dec 11, 2023 20:36:30.175605059 CET	49719	443	192.168.2.5	23.204.76.112
Dec 11, 2023 20:36:30.216766119 CET	443	49719	23.204.76.112	192.168.2.5
Dec 11, 2023 20:36:30.319963932 CET	443	49718	18.239.225.39	192.168.2.5
Dec 11, 2023 20:36:30.320141077 CET	443	49718	18.239.225.39	192.168.2.5
Dec 11, 2023 20:36:30.320344925 CET	49718	443	192.168.2.5	18.239.225.39
Dec 11, 2023 20:36:30.322092056 CET	49718	443	192.168.2.5	18.239.225.39
Dec 11, 2023 20:36:30.322114944 CET	443	49718	18.239.225.39	192.168.2.5
Dec 11, 2023 20:36:30.326071978 CET	49720	443	192.168.2.5	18.239.225.39
Dec 11, 2023 20:36:30.326103926 CET	443	49720	18.239.225.39	192.168.2.5
Dec 11, 2023 20:36:30.326184034 CET	49720	443	192.168.2.5	18.239.225.39
Dec 11, 2023 20:36:30.326982021 CET	49720	443	192.168.2.5	18.239.225.39
Dec 11, 2023 20:36:30.326998949 CET	443	49720	18.239.225.39	192.168.2.5
Dec 11, 2023 20:36:30.431425095 CET	443	49719	23.204.76.112	192.168.2.5
Dec 11, 2023 20:36:30.431509972 CET	443	49719	23.204.76.112	192.168.2.5
Dec 11, 2023 20:36:30.431723118 CET	49719	443	192.168.2.5	23.204.76.112
Dec 11, 2023 20:36:30.433746099 CET	49719	443	192.168.2.5	23.204.76.112
Dec 11, 2023 20:36:30.433773041 CET	443	49719	23.204.76.112	192.168.2.5
Dec 11, 2023 20:36:30.433787107 CET	49719	443	192.168.2.5	23.204.76.112
Dec 11, 2023 20:36:30.433794975 CET	443	49719	23.204.76.112	192.168.2.5
Dec 11, 2023 20:36:30.594748974 CET	443	49720	18.239.225.39	192.168.2.5
Dec 11, 2023 20:36:30.595103979 CET	49720	443	192.168.2.5	18.239.225.39
Dec 11, 2023 20:36:30.595139980 CET	443	49720	18.239.225.39	192.168.2.5
Dec 11, 2023 20:36:30.595515966 CET	443	49720	18.239.225.39	192.168.2.5
Dec 11, 2023 20:36:30.595926046 CET	49720	443	192.168.2.5	18.239.225.39
Dec 11, 2023 20:36:30.596000910 CET	443	49720	18.239.225.39	192.168.2.5
Dec 11, 2023 20:36:30.596077919 CET	49720	443	192.168.2.5	18.239.225.39
Dec 11, 2023 20:36:30.640738964 CET	443	49720	18.239.225.39	192.168.2.5
Dec 11, 2023 20:36:30.951261044 CET	443	49720	18.239.225.39	192.168.2.5
Dec 11, 2023 20:36:30.968633890 CET	443	49720	18.239.225.39	192.168.2.5
Dec 11, 2023 20:36:30.968769073 CET	443	49720	18.239.225.39	192.168.2.5
Dec 11, 2023 20:36:30.968794107 CET	49720	443	192.168.2.5	18.239.225.39
Dec 11, 2023 20:36:30.968825102 CET	443	49720	18.239.225.39	192.168.2.5
Dec 11, 2023 20:36:30.968854904 CET	49720	443	192.168.2.5	18.239.225.39
Dec 11, 2023 20:36:30.968888044 CET	49720	443	192.168.2.5	18.239.225.39
Dec 11, 2023 20:36:30.977355957 CET	49720	443	192.168.2.5	18.239.225.39
Dec 11, 2023 20:36:30.977448940 CET	443	49720	18.239.225.39	192.168.2.5
Dec 11, 2023 20:36:30.977531910 CET	49720	443	192.168.2.5	18.239.225.39
Dec 11, 2023 20:36:31.039908886 CET	49721	443	192.168.2.5	104.18.2.35
Dec 11, 2023 20:36:31.039952993 CET	443	49721	104.18.2.35	192.168.2.5
Dec 11, 2023 20:36:31.040031910 CET	49721	443	192.168.2.5	104.18.2.35
Dec 11, 2023 20:36:31.041430950 CET	49721	443	192.168.2.5	104.18.2.35
Dec 11, 2023 20:36:31.041446924 CET	443	49721	104.18.2.35	192.168.2.5
Dec 11, 2023 20:36:31.158221006 CET	49722	443	192.168.2.5	194.26.192.93
Dec 11, 2023 20:36:31.158265114 CET	443	49722	194.26.192.93	192.168.2.5
Dec 11, 2023 20:36:31.158361912 CET	49722	443	192.168.2.5	194.26.192.93
Dec 11, 2023 20:36:31.159934998 CET	49723	443	192.168.2.5	194.26.192.93
Dec 11, 2023 20:36:31.159976006 CET	443	49723	194.26.192.93	192.168.2.5
Dec 11, 2023 20:36:31.160039902 CET	49723	443	192.168.2.5	194.26.192.93
Dec 11, 2023 20:36:31.161783934 CET	49723	443	192.168.2.5	194.26.192.93
Dec 11, 2023 20:36:31.161815882 CET	443	49723	194.26.192.93	192.168.2.5
Dec 11, 2023 20:36:31.162188053 CET	49722	443	192.168.2.5	194.26.192.93
Dec 11, 2023 20:36:31.162205935 CET	443	49722	194.26.192.93	192.168.2.5
Dec 11, 2023 20:36:31.305740118 CET	443	49721	104.18.2.35	192.168.2.5
Dec 11, 2023 20:36:31.306668997 CET	49721	443	192.168.2.5	104.18.2.35
Dec 11, 2023 20:36:31.306698084 CET	443	49721	104.18.2.35	192.168.2.5
Dec 11, 2023 20:36:31.307049036 CET	443	49721	104.18.2.35	192.168.2.5
Dec 11, 2023 20:36:31.307450056 CET	49721	443	192.168.2.5	104.18.2.35
Dec 11, 2023 20:36:31.307533979 CET	443	49721	104.18.2.35	192.168.2.5
Dec 11, 2023 20:36:31.307636976 CET	49721	443	192.168.2.5	104.18.2.35
Dec 11, 2023 20:36:31.348764896 CET	443	49721	104.18.2.35	192.168.2.5
Dec 11, 2023 20:36:31.414227962 CET	49724	443	192.168.2.5	18.239.225.76
Dec 11, 2023 20:36:31.414267063 CET	443	49724	18.239.225.76	192.168.2.5
Dec 11, 2023 20:36:31.414333105 CET	49724	443	192.168.2.5	18.239.225.76
Dec 11, 2023 20:36:31.415951014 CET	49724	443	192.168.2.5	18.239.225.76
Dec 11, 2023 20:36:31.415965080 CET	443	49724	18.239.225.76	192.168.2.5
Dec 11, 2023 20:36:31.675101995 CET	443	49724	18.239.225.76	192.168.2.5
Dec 11, 2023 20:36:31.675601006 CET	49724	443	192.168.2.5	18.239.225.76
Dec 11, 2023 20:36:31.675625086 CET	443	49724	18.239.225.76	192.168.2.5
Dec 11, 2023 20:36:31.676760912 CET	443	49724	18.239.225.76	192.168.2.5
Dec 11, 2023 20:36:31.676846981 CET	49724	443	192.168.2.5	18.239.225.76
Dec 11, 2023 20:36:31.677436113 CET	49724	443	192.168.2.5	18.239.225.76
Dec 11, 2023 20:36:31.677526951 CET	443	49724	18.239.225.76	192.168.2.5
Dec 11, 2023 20:36:31.677778959 CET	49724	443	192.168.2.5	18.239.225.76
Dec 11, 2023 20:36:31.677788019 CET	443	49724	18.239.225.76	192.168.2.5
Dec 11, 2023 20:36:31.679562092 CET	443	49723	194.26.192.93	192.168.2.5
Dec 11, 2023 20:36:31.679841995 CET	49723	443	192.168.2.5	194.26.192.93
Dec 11, 2023 20:36:31.679876089 CET	443	49723	194.26.192.93	192.168.2.5
Dec 11, 2023 20:36:31.680969000 CET	443	49723	194.26.192.93	192.168.2.5
Dec 11, 2023 20:36:31.681060076 CET	49723	443	192.168.2.5	194.26.192.93
Dec 11, 2023 20:36:31.682451963 CET	49723	443	192.168.2.5	194.26.192.93
Dec 11, 2023 20:36:31.682535887 CET	443	49723	194.26.192.93	192.168.2.5
Dec 11, 2023 20:36:31.683053017 CET	443	49722	194.26.192.93	192.168.2.5
Dec 11, 2023 20:36:31.683516979 CET	49723	443	192.168.2.5	194.26.192.93
Dec 11, 2023 20:36:31.683528900 CET	443	49723	194.26.192.93	192.168.2.5
Dec 11, 2023 20:36:31.683743954 CET	49722	443	192.168.2.5	194.26.192.93
Dec 11, 2023 20:36:31.683779955 CET	443	49722	194.26.192.93	192.168.2.5
Dec 11, 2023 20:36:31.685412884 CET	443	49722	194.26.192.93	192.168.2.5
Dec 11, 2023 20:36:31.685513973 CET	49722	443	192.168.2.5	194.26.192.93
Dec 11, 2023 20:36:31.686523914 CET	49722	443	192.168.2.5	194.26.192.93
Dec 11, 2023 20:36:31.686618090 CET	443	49722	194.26.192.93	192.168.2.5
Dec 11, 2023 20:36:31.726774931 CET	49723	443	192.168.2.5	194.26.192.93
Dec 11, 2023 20:36:31.726774931 CET	49724	443	192.168.2.5	18.239.225.76
Dec 11, 2023 20:36:31.726780891 CET	49722	443	192.168.2.5	194.26.192.93
Dec 11, 2023 20:36:31.726820946 CET	443	49722	194.26.192.93	192.168.2.5
Dec 11, 2023 20:36:31.771213055 CET	443	49721	104.18.2.35	192.168.2.5
Dec 11, 2023 20:36:31.771378994 CET	443	49721	104.18.2.35	192.168.2.5
Dec 11, 2023 20:36:31.771466017 CET	443	49721	104.18.2.35	192.168.2.5
Dec 11, 2023 20:36:31.771493912 CET	49721	443	192.168.2.5	104.18.2.35
Dec 11, 2023 20:36:31.771517992 CET	443	49721	104.18.2.35	192.168.2.5
Dec 11, 2023 20:36:31.771568060 CET	49721	443	192.168.2.5	104.18.2.35
Dec 11, 2023 20:36:31.771576881 CET	443	49721	104.18.2.35	192.168.2.5
Dec 11, 2023 20:36:31.771672010 CET	443	49721	104.18.2.35	192.168.2.5
Dec 11, 2023 20:36:31.771724939 CET	49721	443	192.168.2.5	104.18.2.35
Dec 11, 2023 20:36:31.771730900 CET	443	49721	104.18.2.35	192.168.2.5
Dec 11, 2023 20:36:31.771816015 CET	443	49721	104.18.2.35	192.168.2.5
Dec 11, 2023 20:36:31.771867037 CET	49721	443	192.168.2.5	104.18.2.35
Dec 11, 2023 20:36:31.771874905 CET	443	49721	104.18.2.35	192.168.2.5
Dec 11, 2023 20:36:31.771956921 CET	443	49721	104.18.2.35	192.168.2.5
Dec 11, 2023 20:36:31.772007942 CET	49721	443	192.168.2.5	104.18.2.35
Dec 11, 2023 20:36:31.772017002 CET	443	49721	104.18.2.35	192.168.2.5
Dec 11, 2023 20:36:31.772310019 CET	443	49721	104.18.2.35	192.168.2.5
Dec 11, 2023 20:36:31.772366047 CET	49721	443	192.168.2.5	104.18.2.35
Dec 11, 2023 20:36:31.772373915 CET	443	49721	104.18.2.35	192.168.2.5
Dec 11, 2023 20:36:31.772586107 CET	443	49721	104.18.2.35	192.168.2.5
Dec 11, 2023 20:36:31.772701025 CET	49721	443	192.168.2.5	104.18.2.35
Dec 11, 2023 20:36:31.772708893 CET	443	49721	104.18.2.35	192.168.2.5
Dec 11, 2023 20:36:31.772821903 CET	443	49721	104.18.2.35	192.168.2.5
Dec 11, 2023 20:36:31.772876024 CET	49721	443	192.168.2.5	104.18.2.35
Dec 11, 2023 20:36:31.772885084 CET	443	49721	104.18.2.35	192.168.2.5
Dec 11, 2023 20:36:31.773345947 CET	443	49721	104.18.2.35	192.168.2.5
Dec 11, 2023 20:36:31.773402929 CET	49721	443	192.168.2.5	104.18.2.35
Dec 11, 2023 20:36:31.773418903 CET	443	49721	104.18.2.35	192.168.2.5
Dec 11, 2023 20:36:31.773502111 CET	443	49721	104.18.2.35	192.168.2.5
Dec 11, 2023 20:36:31.773567915 CET	49721	443	192.168.2.5	104.18.2.35
Dec 11, 2023 20:36:31.773576975 CET	443	49721	104.18.2.35	192.168.2.5
Dec 11, 2023 20:36:31.773714066 CET	443	49721	104.18.2.35	192.168.2.5
Dec 11, 2023 20:36:31.773772001 CET	49721	443	192.168.2.5	104.18.2.35
Dec 11, 2023 20:36:31.773948908 CET	49722	443	192.168.2.5	194.26.192.93
Dec 11, 2023 20:36:31.776030064 CET	49721	443	192.168.2.5	104.18.2.35
Dec 11, 2023 20:36:31.776055098 CET	443	49721	104.18.2.35	192.168.2.5
Dec 11, 2023 20:36:32.056503057 CET	443	49724	18.239.225.76	192.168.2.5
Dec 11, 2023 20:36:32.073071957 CET	443	49724	18.239.225.76	192.168.2.5
Dec 11, 2023 20:36:32.073091030 CET	443	49724	18.239.225.76	192.168.2.5
Dec 11, 2023 20:36:32.073108912 CET	443	49724	18.239.225.76	192.168.2.5
Dec 11, 2023 20:36:32.073178053 CET	49724	443	192.168.2.5	18.239.225.76
Dec 11, 2023 20:36:32.073205948 CET	443	49724	18.239.225.76	192.168.2.5
Dec 11, 2023 20:36:32.073240995 CET	49724	443	192.168.2.5	18.239.225.76
Dec 11, 2023 20:36:32.073292017 CET	49724	443	192.168.2.5	18.239.225.76
Dec 11, 2023 20:36:32.077233076 CET	443	49724	18.239.225.76	192.168.2.5
Dec 11, 2023 20:36:32.077301025 CET	49724	443	192.168.2.5	18.239.225.76
Dec 11, 2023 20:36:32.099845886 CET	443	49724	18.239.225.76	192.168.2.5
Dec 11, 2023 20:36:32.099921942 CET	443	49724	18.239.225.76	192.168.2.5
Dec 11, 2023 20:36:32.100032091 CET	49724	443	192.168.2.5	18.239.225.76
Dec 11, 2023 20:36:32.100058079 CET	443	49724	18.239.225.76	192.168.2.5
Dec 11, 2023 20:36:32.100102901 CET	49724	443	192.168.2.5	18.239.225.76
Dec 11, 2023 20:36:32.155910015 CET	49724	443	192.168.2.5	18.239.225.76
Dec 11, 2023 20:36:32.199770927 CET	443	49724	18.239.225.76	192.168.2.5
Dec 11, 2023 20:36:32.199784040 CET	443	49724	18.239.225.76	192.168.2.5
Dec 11, 2023 20:36:32.199829102 CET	443	49724	18.239.225.76	192.168.2.5
Dec 11, 2023 20:36:32.199862957 CET	443	49724	18.239.225.76	192.168.2.5
Dec 11, 2023 20:36:32.200040102 CET	49724	443	192.168.2.5	18.239.225.76
Dec 11, 2023 20:36:32.200040102 CET	49724	443	192.168.2.5	18.239.225.76
Dec 11, 2023 20:36:32.200078011 CET	443	49724	18.239.225.76	192.168.2.5
Dec 11, 2023 20:36:32.200129986 CET	49724	443	192.168.2.5	18.239.225.76
Dec 11, 2023 20:36:32.203913927 CET	443	49723	194.26.192.93	192.168.2.5
Dec 11, 2023 20:36:32.205990076 CET	49723	443	192.168.2.5	194.26.192.93
Dec 11, 2023 20:36:32.206012964 CET	443	49723	194.26.192.93	192.168.2.5
Dec 11, 2023 20:36:32.206165075 CET	49723	443	192.168.2.5	194.26.192.93
Dec 11, 2023 20:36:32.222656012 CET	443	49724	18.239.225.76	192.168.2.5
Dec 11, 2023 20:36:32.222681999 CET	443	49724	18.239.225.76	192.168.2.5
Dec 11, 2023 20:36:32.222913027 CET	49724	443	192.168.2.5	18.239.225.76
Dec 11, 2023 20:36:32.222939968 CET	443	49724	18.239.225.76	192.168.2.5
Dec 11, 2023 20:36:32.222999096 CET	49724	443	192.168.2.5	18.239.225.76
Dec 11, 2023 20:36:32.236383915 CET	443	49724	18.239.225.76	192.168.2.5
Dec 11, 2023 20:36:32.236427069 CET	443	49724	18.239.225.76	192.168.2.5
Dec 11, 2023 20:36:32.236479044 CET	49724	443	192.168.2.5	18.239.225.76
Dec 11, 2023 20:36:32.236502886 CET	443	49724	18.239.225.76	192.168.2.5
Dec 11, 2023 20:36:32.236665010 CET	49724	443	192.168.2.5	18.239.225.76
Dec 11, 2023 20:36:32.260838032 CET	443	49724	18.239.225.76	192.168.2.5
Dec 11, 2023 20:36:32.260862112 CET	443	49724	18.239.225.76	192.168.2.5
Dec 11, 2023 20:36:32.260972023 CET	49724	443	192.168.2.5	18.239.225.76
Dec 11, 2023 20:36:32.260998011 CET	443	49724	18.239.225.76	192.168.2.5
Dec 11, 2023 20:36:32.261174917 CET	49724	443	192.168.2.5	18.239.225.76
Dec 11, 2023 20:36:32.265969992 CET	443	49724	18.239.225.76	192.168.2.5
Dec 11, 2023 20:36:32.266057968 CET	49724	443	192.168.2.5	18.239.225.76
Dec 11, 2023 20:36:32.326500893 CET	443	49724	18.239.225.76	192.168.2.5
Dec 11, 2023 20:36:32.326534986 CET	443	49724	18.239.225.76	192.168.2.5
Dec 11, 2023 20:36:32.326679945 CET	49724	443	192.168.2.5	18.239.225.76
Dec 11, 2023 20:36:32.326710939 CET	443	49724	18.239.225.76	192.168.2.5
Dec 11, 2023 20:36:32.326762915 CET	49724	443	192.168.2.5	18.239.225.76
Dec 11, 2023 20:36:32.341435909 CET	443	49724	18.239.225.76	192.168.2.5
Dec 11, 2023 20:36:32.341490984 CET	443	49724	18.239.225.76	192.168.2.5
Dec 11, 2023 20:36:32.341528893 CET	443	49724	18.239.225.76	192.168.2.5
Dec 11, 2023 20:36:32.341555119 CET	49724	443	192.168.2.5	18.239.225.76
Dec 11, 2023 20:36:32.341566086 CET	443	49724	18.239.225.76	192.168.2.5
Dec 11, 2023 20:36:32.341582060 CET	443	49724	18.239.225.76	192.168.2.5
Dec 11, 2023 20:36:32.341726065 CET	49724	443	192.168.2.5	18.239.225.76
Dec 11, 2023 20:36:32.341726065 CET	49724	443	192.168.2.5	18.239.225.76
Dec 11, 2023 20:36:32.342747927 CET	49722	443	192.168.2.5	194.26.192.93
Dec 11, 2023 20:36:32.343758106 CET	49724	443	192.168.2.5	18.239.225.76
Dec 11, 2023 20:36:32.343774080 CET	443	49724	18.239.225.76	192.168.2.5
Dec 11, 2023 20:36:32.384779930 CET	443	49722	194.26.192.93	192.168.2.5
Dec 11, 2023 20:36:32.583676100 CET	443	49722	194.26.192.93	192.168.2.5
Dec 11, 2023 20:36:32.583715916 CET	443	49722	194.26.192.93	192.168.2.5
Dec 11, 2023 20:36:32.583802938 CET	443	49722	194.26.192.93	192.168.2.5
Dec 11, 2023 20:36:32.583944082 CET	49722	443	192.168.2.5	194.26.192.93
Dec 11, 2023 20:36:32.583944082 CET	49722	443	192.168.2.5	194.26.192.93
Dec 11, 2023 20:36:32.630784988 CET	49722	443	192.168.2.5	194.26.192.93
Dec 11, 2023 20:36:32.630805016 CET	443	49722	194.26.192.93	192.168.2.5
Dec 11, 2023 20:36:35.438483953 CET	49725	443	192.168.2.5	104.17.2.184
Dec 11, 2023 20:36:35.438519001 CET	443	49725	104.17.2.184	192.168.2.5
Dec 11, 2023 20:36:35.438587904 CET	49725	443	192.168.2.5	104.17.2.184
Dec 11, 2023 20:36:35.438945055 CET	49725	443	192.168.2.5	104.17.2.184
Dec 11, 2023 20:36:35.438956976 CET	443	49725	104.17.2.184	192.168.2.5
Dec 11, 2023 20:36:35.710978985 CET	443	49725	104.17.2.184	192.168.2.5
Dec 11, 2023 20:36:35.711318016 CET	49725	443	192.168.2.5	104.17.2.184
Dec 11, 2023 20:36:35.711334944 CET	443	49725	104.17.2.184	192.168.2.5
Dec 11, 2023 20:36:35.712445021 CET	443	49725	104.17.2.184	192.168.2.5
Dec 11, 2023 20:36:35.712563038 CET	49725	443	192.168.2.5	104.17.2.184
Dec 11, 2023 20:36:35.713764906 CET	49725	443	192.168.2.5	104.17.2.184
Dec 11, 2023 20:36:35.713831902 CET	443	49725	104.17.2.184	192.168.2.5
Dec 11, 2023 20:36:35.714063883 CET	49725	443	192.168.2.5	104.17.2.184
Dec 11, 2023 20:36:35.714073896 CET	443	49725	104.17.2.184	192.168.2.5
Dec 11, 2023 20:36:35.786128998 CET	49725	443	192.168.2.5	104.17.2.184
Dec 11, 2023 20:36:36.001351118 CET	443	49725	104.17.2.184	192.168.2.5
Dec 11, 2023 20:36:36.001451015 CET	443	49725	104.17.2.184	192.168.2.5
Dec 11, 2023 20:36:36.001529932 CET	49725	443	192.168.2.5	104.17.2.184
Dec 11, 2023 20:36:36.002362013 CET	49725	443	192.168.2.5	104.17.2.184
Dec 11, 2023 20:36:36.002377987 CET	443	49725	104.17.2.184	192.168.2.5
Dec 11, 2023 20:36:36.003864050 CET	49726	443	192.168.2.5	104.17.2.184
Dec 11, 2023 20:36:36.003910065 CET	443	49726	104.17.2.184	192.168.2.5
Dec 11, 2023 20:36:36.004018068 CET	49726	443	192.168.2.5	104.17.2.184
Dec 11, 2023 20:36:36.004348040 CET	49726	443	192.168.2.5	104.17.2.184
Dec 11, 2023 20:36:36.004370928 CET	443	49726	104.17.2.184	192.168.2.5
Dec 11, 2023 20:36:36.261481047 CET	443	49726	104.17.2.184	192.168.2.5
Dec 11, 2023 20:36:36.261843920 CET	49726	443	192.168.2.5	104.17.2.184
Dec 11, 2023 20:36:36.261877060 CET	443	49726	104.17.2.184	192.168.2.5
Dec 11, 2023 20:36:36.262238026 CET	443	49726	104.17.2.184	192.168.2.5
Dec 11, 2023 20:36:36.262631893 CET	49726	443	192.168.2.5	104.17.2.184
Dec 11, 2023 20:36:36.262698889 CET	443	49726	104.17.2.184	192.168.2.5
Dec 11, 2023 20:36:36.262728930 CET	49726	443	192.168.2.5	104.17.2.184
Dec 11, 2023 20:36:36.308738947 CET	443	49726	104.17.2.184	192.168.2.5
Dec 11, 2023 20:36:36.309428930 CET	49726	443	192.168.2.5	104.17.2.184
Dec 11, 2023 20:36:36.577882051 CET	443	49726	104.17.2.184	192.168.2.5
Dec 11, 2023 20:36:36.577925920 CET	443	49726	104.17.2.184	192.168.2.5
Dec 11, 2023 20:36:36.577989101 CET	443	49726	104.17.2.184	192.168.2.5
Dec 11, 2023 20:36:36.578000069 CET	49726	443	192.168.2.5	104.17.2.184
Dec 11, 2023 20:36:36.578018904 CET	443	49726	104.17.2.184	192.168.2.5
Dec 11, 2023 20:36:36.578073025 CET	49726	443	192.168.2.5	104.17.2.184
Dec 11, 2023 20:36:36.578078032 CET	443	49726	104.17.2.184	192.168.2.5
Dec 11, 2023 20:36:36.578104019 CET	443	49726	104.17.2.184	192.168.2.5
Dec 11, 2023 20:36:36.578155994 CET	443	49726	104.17.2.184	192.168.2.5
Dec 11, 2023 20:36:36.578195095 CET	49726	443	192.168.2.5	104.17.2.184
Dec 11, 2023 20:36:36.578198910 CET	443	49726	104.17.2.184	192.168.2.5
Dec 11, 2023 20:36:36.578258038 CET	49726	443	192.168.2.5	104.17.2.184
Dec 11, 2023 20:36:36.578283072 CET	443	49726	104.17.2.184	192.168.2.5
Dec 11, 2023 20:36:36.578773975 CET	443	49726	104.17.2.184	192.168.2.5
Dec 11, 2023 20:36:36.578818083 CET	49726	443	192.168.2.5	104.17.2.184
Dec 11, 2023 20:36:36.578823090 CET	443	49726	104.17.2.184	192.168.2.5
Dec 11, 2023 20:36:36.579190016 CET	443	49726	104.17.2.184	192.168.2.5
Dec 11, 2023 20:36:36.579229116 CET	49726	443	192.168.2.5	104.17.2.184
Dec 11, 2023 20:36:36.579231977 CET	443	49726	104.17.2.184	192.168.2.5
Dec 11, 2023 20:36:36.579432964 CET	443	49726	104.17.2.184	192.168.2.5
Dec 11, 2023 20:36:36.579473972 CET	49726	443	192.168.2.5	104.17.2.184
Dec 11, 2023 20:36:36.579478025 CET	443	49726	104.17.2.184	192.168.2.5
Dec 11, 2023 20:36:36.579583883 CET	443	49726	104.17.2.184	192.168.2.5
Dec 11, 2023 20:36:36.579612017 CET	443	49726	104.17.2.184	192.168.2.5
Dec 11, 2023 20:36:36.579629898 CET	49726	443	192.168.2.5	104.17.2.184
Dec 11, 2023 20:36:36.579634905 CET	443	49726	104.17.2.184	192.168.2.5
Dec 11, 2023 20:36:36.579673052 CET	49726	443	192.168.2.5	104.17.2.184
Dec 11, 2023 20:36:36.580275059 CET	443	49726	104.17.2.184	192.168.2.5
Dec 11, 2023 20:36:36.580548048 CET	443	49726	104.17.2.184	192.168.2.5
Dec 11, 2023 20:36:36.580599070 CET	49726	443	192.168.2.5	104.17.2.184
Dec 11, 2023 20:36:36.580605030 CET	443	49726	104.17.2.184	192.168.2.5
Dec 11, 2023 20:36:36.580615044 CET	443	49726	104.17.2.184	192.168.2.5
Dec 11, 2023 20:36:36.580650091 CET	49726	443	192.168.2.5	104.17.2.184
Dec 11, 2023 20:36:36.581398964 CET	443	49726	104.17.2.184	192.168.2.5
Dec 11, 2023 20:36:36.581571102 CET	443	49726	104.17.2.184	192.168.2.5
Dec 11, 2023 20:36:36.581604004 CET	443	49726	104.17.2.184	192.168.2.5
Dec 11, 2023 20:36:36.581613064 CET	49726	443	192.168.2.5	104.17.2.184
Dec 11, 2023 20:36:36.581619978 CET	443	49726	104.17.2.184	192.168.2.5
Dec 11, 2023 20:36:36.581659079 CET	49726	443	192.168.2.5	104.17.2.184
Dec 11, 2023 20:36:36.581661940 CET	443	49726	104.17.2.184	192.168.2.5
Dec 11, 2023 20:36:36.581707001 CET	443	49726	104.17.2.184	192.168.2.5
Dec 11, 2023 20:36:36.581747055 CET	49726	443	192.168.2.5	104.17.2.184
Dec 11, 2023 20:36:36.582114935 CET	49726	443	192.168.2.5	104.17.2.184
Dec 11, 2023 20:36:36.582130909 CET	443	49726	104.17.2.184	192.168.2.5
Dec 11, 2023 20:36:36.723047972 CET	49727	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:36.723081112 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:36.723148108 CET	49727	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:36.723433971 CET	49727	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:36.723440886 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:36.980423927 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:36.983841896 CET	49727	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:36.983867884 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:36.984958887 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:36.985053062 CET	49727	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:36.985853910 CET	49727	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:36.985917091 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:36.986041069 CET	49727	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:36.986052990 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.031039000 CET	49727	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:37.155864000 CET	443	49712	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:37.156017065 CET	443	49712	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:37.156095028 CET	49712	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:37.284924030 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.284980059 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.285011053 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.285043001 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.285069942 CET	49727	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:37.285092115 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.285104990 CET	49727	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:37.285140991 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.285171032 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.285182953 CET	49727	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:37.285188913 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.285227060 CET	49727	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:37.285231113 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.285703897 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.285758018 CET	49727	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:37.285759926 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.285770893 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.285815954 CET	49727	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:37.285820007 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.286546946 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.286592960 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.286602020 CET	49727	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:37.286606073 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.286659002 CET	49727	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:37.286679983 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.286793947 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.286835909 CET	49727	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:37.286840916 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.287540913 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.287591934 CET	49727	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:37.287595987 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.287605047 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.287652016 CET	49727	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:37.287657022 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.288391113 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.288455009 CET	49727	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:37.288459063 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.288520098 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.288562059 CET	49727	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:37.288566113 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.289237976 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.289290905 CET	49727	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:37.289293051 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.289302111 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.289350986 CET	49727	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:37.289355993 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.289414883 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.289455891 CET	49727	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:37.289460897 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.290189981 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.290220022 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.290240049 CET	49727	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:37.290244102 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.290281057 CET	49727	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:37.290285110 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.291296005 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.291354895 CET	49727	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:37.291361094 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.291445017 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.291487932 CET	49727	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:37.291492939 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.292047977 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.292105913 CET	49727	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:37.292110920 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.342139959 CET	443	49710	62.182.22.52	192.168.2.5
Dec 11, 2023 20:36:37.342206001 CET	443	49710	62.182.22.52	192.168.2.5
Dec 11, 2023 20:36:37.342267990 CET	49710	443	192.168.2.5	62.182.22.52
Dec 11, 2023 20:36:37.343683958 CET	49727	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:37.409394979 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.409414053 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.409485102 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.409485102 CET	49727	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:37.409499884 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.409534931 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.409559011 CET	49727	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:37.410159111 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.410216093 CET	49727	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:37.410221100 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.410264969 CET	49727	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:37.410286903 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.410326958 CET	49727	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:37.410343885 CET	49727	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:37.410356045 CET	443	49727	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.457860947 CET	49710	443	192.168.2.5	62.182.22.52
Dec 11, 2023 20:36:37.457895994 CET	443	49710	62.182.22.52	192.168.2.5
Dec 11, 2023 20:36:37.457941055 CET	49712	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:37.457977057 CET	443	49712	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:37.458307028 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:37.458347082 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.458412886 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:37.458842993 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:37.458858967 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.460026979 CET	49729	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:37.460069895 CET	443	49729	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.460127115 CET	49729	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:37.460448980 CET	49729	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:37.460464954 CET	443	49729	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.658436060 CET	49730	443	192.168.2.5	20.12.23.50
Dec 11, 2023 20:36:37.658483982 CET	443	49730	20.12.23.50	192.168.2.5
Dec 11, 2023 20:36:37.658566952 CET	49730	443	192.168.2.5	20.12.23.50
Dec 11, 2023 20:36:37.661535978 CET	49730	443	192.168.2.5	20.12.23.50
Dec 11, 2023 20:36:37.661555052 CET	443	49730	20.12.23.50	192.168.2.5
Dec 11, 2023 20:36:37.722944975 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.723332882 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:37.723366976 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.723773003 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.723880053 CET	443	49729	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.724102974 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:37.724174023 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.724292040 CET	49729	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:37.724319935 CET	443	49729	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.724416018 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:37.724736929 CET	443	49729	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.725037098 CET	49729	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:37.725111961 CET	443	49729	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.725164890 CET	49729	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:37.764739037 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.768738985 CET	443	49729	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:37.778337002 CET	49729	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.021925926 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.022253990 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.022280931 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.022346973 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.022345066 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.022371054 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.022387981 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.022537947 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.022559881 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.022581100 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.022588015 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.022624969 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.022711039 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.022938013 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.022975922 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.022980928 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.023283005 CET	443	49729	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.023405075 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.023416996 CET	443	49729	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.023447037 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.023451090 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.023499966 CET	49729	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.023550987 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.023588896 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.023595095 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.023737907 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.023776054 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.023781061 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.024321079 CET	49729	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.024338961 CET	443	49729	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.024388075 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.024430037 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.024434090 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.024633884 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.024672031 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.024676085 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.025296926 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.025342941 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.025348902 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.025352955 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.025393963 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.025413990 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.025418997 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.025454998 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.025922060 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.026161909 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.026202917 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.026207924 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.026405096 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.026454926 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.026459932 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.026931047 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.026988983 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.026992083 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.027136087 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.027180910 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.027184963 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.027848959 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.027894974 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.027899027 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.028115988 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.028157949 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.028161049 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.028573036 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.028614998 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.028618097 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.029417038 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.029478073 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.029481888 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.070729971 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.095850945 CET	49703	443	192.168.2.5	23.1.237.91
Dec 11, 2023 20:36:38.095951080 CET	49703	443	192.168.2.5	23.1.237.91
Dec 11, 2023 20:36:38.096285105 CET	49732	443	192.168.2.5	23.1.237.91
Dec 11, 2023 20:36:38.096333027 CET	443	49732	23.1.237.91	192.168.2.5
Dec 11, 2023 20:36:38.096425056 CET	49732	443	192.168.2.5	23.1.237.91
Dec 11, 2023 20:36:38.097326040 CET	49732	443	192.168.2.5	23.1.237.91
Dec 11, 2023 20:36:38.097337961 CET	443	49732	23.1.237.91	192.168.2.5
Dec 11, 2023 20:36:38.146668911 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.146781921 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.146806002 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.146855116 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.148410082 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.148477077 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.148581028 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.148636103 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.149396896 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.149456024 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.149692059 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.149746895 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.150038004 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.150094986 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.150736094 CET	443	49730	20.12.23.50	192.168.2.5
Dec 11, 2023 20:36:38.150814056 CET	49730	443	192.168.2.5	20.12.23.50
Dec 11, 2023 20:36:38.151230097 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.151284933 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.152421951 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.152476072 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.152595043 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.152650118 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.153016090 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.153084040 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.153664112 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.153717041 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.154005051 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.154067993 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.154321909 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.154377937 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.154777050 CET	49730	443	192.168.2.5	20.12.23.50
Dec 11, 2023 20:36:38.154787064 CET	443	49730	20.12.23.50	192.168.2.5
Dec 11, 2023 20:36:38.155004978 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.155090094 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.155289888 CET	443	49730	20.12.23.50	192.168.2.5
Dec 11, 2023 20:36:38.157397032 CET	49734	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.157438040 CET	443	49734	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.157516003 CET	49734	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.157944918 CET	49734	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.157958984 CET	443	49734	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.201438904 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.201538086 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.201560974 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.201611996 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.208915949 CET	49730	443	192.168.2.5	20.12.23.50
Dec 11, 2023 20:36:38.272094965 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.272167921 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.272288084 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.272341013 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.272607088 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.272663116 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.274601936 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.274683952 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.275238037 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.275300026 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.275629997 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.275691986 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.276444912 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.276501894 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.276731014 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.276791096 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.279161930 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.279236078 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.279341936 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.279392958 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.279700994 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.279757023 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.280082941 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.280141115 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.280374050 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.280483007 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.280531883 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.280625105 CET	49728	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.280639887 CET	443	49728	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.289439917 CET	443	49703	23.1.237.91	192.168.2.5
Dec 11, 2023 20:36:38.289465904 CET	443	49703	23.1.237.91	192.168.2.5
Dec 11, 2023 20:36:38.339972019 CET	49735	443	192.168.2.5	194.26.192.93
Dec 11, 2023 20:36:38.340017080 CET	443	49735	194.26.192.93	192.168.2.5
Dec 11, 2023 20:36:38.340085983 CET	49735	443	192.168.2.5	194.26.192.93
Dec 11, 2023 20:36:38.340440035 CET	49735	443	192.168.2.5	194.26.192.93
Dec 11, 2023 20:36:38.340454102 CET	443	49735	194.26.192.93	192.168.2.5
Dec 11, 2023 20:36:38.423769951 CET	49737	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.423811913 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.423894882 CET	49737	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.424175024 CET	443	49734	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.424422979 CET	49737	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.424443007 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.424684048 CET	49734	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.424701929 CET	443	49734	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.426018000 CET	443	49734	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.426084042 CET	49734	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.426453114 CET	49734	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.426520109 CET	443	49734	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.426637888 CET	49734	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.426645994 CET	443	49734	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.477926016 CET	49734	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.484699965 CET	443	49732	23.1.237.91	192.168.2.5
Dec 11, 2023 20:36:38.484867096 CET	49732	443	192.168.2.5	23.1.237.91
Dec 11, 2023 20:36:38.503129959 CET	49732	443	192.168.2.5	23.1.237.91
Dec 11, 2023 20:36:38.503165007 CET	443	49732	23.1.237.91	192.168.2.5
Dec 11, 2023 20:36:38.503601074 CET	443	49732	23.1.237.91	192.168.2.5
Dec 11, 2023 20:36:38.503824949 CET	49732	443	192.168.2.5	23.1.237.91
Dec 11, 2023 20:36:38.504206896 CET	49732	443	192.168.2.5	23.1.237.91
Dec 11, 2023 20:36:38.504235983 CET	443	49732	23.1.237.91	192.168.2.5
Dec 11, 2023 20:36:38.504422903 CET	49732	443	192.168.2.5	23.1.237.91
Dec 11, 2023 20:36:38.504430056 CET	443	49732	23.1.237.91	192.168.2.5
Dec 11, 2023 20:36:38.681806087 CET	49730	443	192.168.2.5	20.12.23.50
Dec 11, 2023 20:36:38.683065891 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.683407068 CET	49737	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.683434963 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.683851957 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.684210062 CET	49737	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.684302092 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.684381008 CET	49737	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.684412956 CET	49737	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.684453964 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.724746943 CET	443	49730	20.12.23.50	192.168.2.5
Dec 11, 2023 20:36:38.726258039 CET	443	49734	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.726386070 CET	443	49734	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.726479053 CET	49734	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.728993893 CET	49734	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:38.729016066 CET	443	49734	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:38.829447031 CET	443	49735	194.26.192.93	192.168.2.5
Dec 11, 2023 20:36:38.829885006 CET	49735	443	192.168.2.5	194.26.192.93
Dec 11, 2023 20:36:38.829921007 CET	443	49735	194.26.192.93	192.168.2.5
Dec 11, 2023 20:36:38.830405951 CET	443	49735	194.26.192.93	192.168.2.5
Dec 11, 2023 20:36:38.830740929 CET	49735	443	192.168.2.5	194.26.192.93
Dec 11, 2023 20:36:38.830817938 CET	443	49735	194.26.192.93	192.168.2.5
Dec 11, 2023 20:36:38.830894947 CET	49735	443	192.168.2.5	194.26.192.93
Dec 11, 2023 20:36:38.872746944 CET	443	49735	194.26.192.93	192.168.2.5
Dec 11, 2023 20:36:38.888320923 CET	443	49732	23.1.237.91	192.168.2.5
Dec 11, 2023 20:36:38.888484955 CET	49732	443	192.168.2.5	23.1.237.91
Dec 11, 2023 20:36:38.888550043 CET	443	49732	23.1.237.91	192.168.2.5
Dec 11, 2023 20:36:38.888622999 CET	49732	443	192.168.2.5	23.1.237.91
Dec 11, 2023 20:36:38.888632059 CET	443	49732	23.1.237.91	192.168.2.5
Dec 11, 2023 20:36:38.888681889 CET	49732	443	192.168.2.5	23.1.237.91
Dec 11, 2023 20:36:38.990772963 CET	443	49730	20.12.23.50	192.168.2.5
Dec 11, 2023 20:36:38.990814924 CET	443	49730	20.12.23.50	192.168.2.5
Dec 11, 2023 20:36:38.990824938 CET	443	49730	20.12.23.50	192.168.2.5
Dec 11, 2023 20:36:38.990844965 CET	443	49730	20.12.23.50	192.168.2.5
Dec 11, 2023 20:36:38.990854025 CET	443	49730	20.12.23.50	192.168.2.5
Dec 11, 2023 20:36:38.990860939 CET	443	49730	20.12.23.50	192.168.2.5
Dec 11, 2023 20:36:38.990936041 CET	49730	443	192.168.2.5	20.12.23.50
Dec 11, 2023 20:36:38.990971088 CET	443	49730	20.12.23.50	192.168.2.5
Dec 11, 2023 20:36:38.990987062 CET	49730	443	192.168.2.5	20.12.23.50
Dec 11, 2023 20:36:38.991019011 CET	49730	443	192.168.2.5	20.12.23.50
Dec 11, 2023 20:36:38.991178036 CET	443	49730	20.12.23.50	192.168.2.5
Dec 11, 2023 20:36:38.991245031 CET	49730	443	192.168.2.5	20.12.23.50
Dec 11, 2023 20:36:38.991251945 CET	443	49730	20.12.23.50	192.168.2.5
Dec 11, 2023 20:36:38.991266012 CET	443	49730	20.12.23.50	192.168.2.5
Dec 11, 2023 20:36:38.991318941 CET	49730	443	192.168.2.5	20.12.23.50
Dec 11, 2023 20:36:39.005443096 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.005507946 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.005551100 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.005578995 CET	49737	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.005582094 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.005605936 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.005644083 CET	49737	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.006215096 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.006263018 CET	49737	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.006270885 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.006515026 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.006556034 CET	49737	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.006562948 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.006866932 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.006899118 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.006911039 CET	49737	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.006916046 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.006967068 CET	49737	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.007026911 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.007716894 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.007762909 CET	49737	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.007770061 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.008668900 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.008728981 CET	49737	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.008735895 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.009319067 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.009361029 CET	49737	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.009366989 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.009494066 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.009532928 CET	49737	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.009537935 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.009999990 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.010046005 CET	49737	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.010046959 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.010061026 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.010113955 CET	49737	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.010660887 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.011245966 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.011288881 CET	49737	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.011295080 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.011693954 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.011737108 CET	49737	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.011742115 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.012386084 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.012437105 CET	49737	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.012443066 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.012994051 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.013032913 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.013036966 CET	49737	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.013046026 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.013078928 CET	49737	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.013087034 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.014050961 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.014086962 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.014102936 CET	49737	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.014110088 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.014154911 CET	49737	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.014159918 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.014832020 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.014872074 CET	49737	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.014878988 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.016515970 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.016572952 CET	49737	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.016582966 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.059166908 CET	49737	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.130826950 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.130983114 CET	49737	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.131014109 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.131061077 CET	49737	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.132102013 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.132162094 CET	49737	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.132373095 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.132426977 CET	49737	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.133742094 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.133822918 CET	49737	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.134150982 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.134222031 CET	49737	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.134649038 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.134704113 CET	49737	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.135749102 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.135832071 CET	49737	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.136836052 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.136904001 CET	49737	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.137034893 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.137087107 CET	49737	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.137759924 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.137820959 CET	49737	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.140345097 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.140439987 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.140526056 CET	49737	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.140542030 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.140588999 CET	49737	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.140599012 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.140645027 CET	49737	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.140932083 CET	49737	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.140953064 CET	443	49737	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.264405966 CET	49741	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.264445066 CET	443	49741	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.264542103 CET	49741	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.264847040 CET	49741	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.264862061 CET	443	49741	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.311021090 CET	443	49735	194.26.192.93	192.168.2.5
Dec 11, 2023 20:36:39.311144114 CET	443	49735	194.26.192.93	192.168.2.5
Dec 11, 2023 20:36:39.311247110 CET	49735	443	192.168.2.5	194.26.192.93
Dec 11, 2023 20:36:39.402184963 CET	49735	443	192.168.2.5	194.26.192.93
Dec 11, 2023 20:36:39.402226925 CET	443	49735	194.26.192.93	192.168.2.5
Dec 11, 2023 20:36:39.533322096 CET	443	49741	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.533638954 CET	49741	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.533654928 CET	443	49741	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.534142017 CET	443	49741	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.534459114 CET	49741	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.534523010 CET	443	49741	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.534620047 CET	49741	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.580743074 CET	443	49741	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.647284031 CET	49730	443	192.168.2.5	20.12.23.50
Dec 11, 2023 20:36:39.647315025 CET	443	49730	20.12.23.50	192.168.2.5
Dec 11, 2023 20:36:39.647339106 CET	49730	443	192.168.2.5	20.12.23.50
Dec 11, 2023 20:36:39.647346020 CET	443	49730	20.12.23.50	192.168.2.5
Dec 11, 2023 20:36:39.795878887 CET	49742	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.795922041 CET	443	49742	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.795983076 CET	49742	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.796365023 CET	49742	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.796380043 CET	443	49742	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.832092047 CET	443	49741	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.832488060 CET	443	49741	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:39.832552910 CET	49741	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.833101034 CET	49741	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:39.833120108 CET	443	49741	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:40.064739943 CET	443	49742	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:40.065104961 CET	49742	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:40.065140009 CET	443	49742	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:40.065516949 CET	443	49742	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:40.066063881 CET	49742	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:40.066132069 CET	443	49742	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:40.066302061 CET	49742	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:40.112746000 CET	443	49742	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:40.379257917 CET	443	49742	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:40.379612923 CET	443	49742	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:40.379714966 CET	49742	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:40.379734993 CET	443	49742	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:40.379774094 CET	443	49742	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:40.379834890 CET	49742	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:40.384866953 CET	49742	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:40.384886980 CET	443	49742	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:40.829536915 CET	49743	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:40.829581022 CET	443	49743	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:40.829653025 CET	49743	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:40.832051992 CET	49743	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:40.832068920 CET	443	49743	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:41.089165926 CET	443	49743	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:41.092057943 CET	49743	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:41.092099905 CET	443	49743	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:41.092525005 CET	443	49743	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:41.093003035 CET	49743	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:41.093084097 CET	443	49743	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:41.093379021 CET	49743	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:41.136742115 CET	443	49743	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:41.221616983 CET	49744	80	192.168.2.5	142.250.217.163
Dec 11, 2023 20:36:41.222409010 CET	49745	80	192.168.2.5	142.250.217.163
Dec 11, 2023 20:36:41.328330994 CET	49746	80	192.168.2.5	142.250.217.163
Dec 11, 2023 20:36:41.346553087 CET	80	49744	142.250.217.163	192.168.2.5
Dec 11, 2023 20:36:41.346694946 CET	49744	80	192.168.2.5	142.250.217.163
Dec 11, 2023 20:36:41.346959114 CET	49744	80	192.168.2.5	142.250.217.163
Dec 11, 2023 20:36:41.347116947 CET	80	49745	142.250.217.163	192.168.2.5
Dec 11, 2023 20:36:41.347181082 CET	49745	80	192.168.2.5	142.250.217.163
Dec 11, 2023 20:36:41.403569937 CET	443	49743	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:41.403697014 CET	443	49743	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:41.403796911 CET	49743	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:41.404831886 CET	49743	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:41.404850960 CET	443	49743	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:41.409703016 CET	49747	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:41.409760952 CET	443	49747	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:41.409847975 CET	49747	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:41.410128117 CET	49747	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:41.410142899 CET	443	49747	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:41.453053951 CET	80	49746	142.250.217.163	192.168.2.5
Dec 11, 2023 20:36:41.453237057 CET	49746	80	192.168.2.5	142.250.217.163
Dec 11, 2023 20:36:41.471671104 CET	80	49744	142.250.217.163	192.168.2.5
Dec 11, 2023 20:36:41.566468954 CET	49748	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:41.566524029 CET	443	49748	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:41.566620111 CET	49748	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:41.567050934 CET	49748	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:41.567068100 CET	443	49748	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:41.665365934 CET	443	49747	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:41.665891886 CET	49747	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:41.665920973 CET	443	49747	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:41.666268110 CET	443	49747	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:41.666620016 CET	49747	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:41.666677952 CET	443	49747	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:41.666798115 CET	49747	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:41.708753109 CET	443	49747	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:41.822604895 CET	443	49748	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:41.822954893 CET	49748	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:41.822987080 CET	443	49748	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:41.823348045 CET	443	49748	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:41.823658943 CET	49748	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:41.823730946 CET	443	49748	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:41.823841095 CET	49748	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:41.823954105 CET	49748	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:41.823977947 CET	443	49748	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:41.824084997 CET	49748	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:41.824095964 CET	443	49748	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:41.966726065 CET	443	49747	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:41.966886997 CET	443	49747	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:41.966985941 CET	49747	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:41.968106031 CET	49747	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:41.968127966 CET	443	49747	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:42.113595009 CET	443	49748	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:42.113643885 CET	443	49748	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:42.113673925 CET	443	49748	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:42.113713026 CET	49748	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:42.113740921 CET	443	49748	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:42.113785982 CET	49748	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:42.113792896 CET	443	49748	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:42.113959074 CET	443	49748	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:42.114018917 CET	49748	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:42.114025116 CET	443	49748	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:42.114259958 CET	443	49748	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:42.114295959 CET	49748	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:42.114301920 CET	443	49748	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:42.114442110 CET	443	49748	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:42.114479065 CET	49748	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:42.114483118 CET	443	49748	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:42.114607096 CET	443	49748	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:42.114641905 CET	49748	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:42.114646912 CET	443	49748	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:42.115499020 CET	443	49748	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:42.115545988 CET	49748	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:42.115550995 CET	443	49748	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:42.115583897 CET	443	49748	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:42.115627050 CET	49748	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:42.115647078 CET	49748	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:42.115658045 CET	443	49748	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:42.121938944 CET	49749	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:42.121974945 CET	443	49749	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:42.122051954 CET	49749	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:42.122349024 CET	49749	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:42.122363091 CET	443	49749	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:42.162456989 CET	80	49744	142.250.217.163	192.168.2.5
Dec 11, 2023 20:36:42.162481070 CET	80	49744	142.250.217.163	192.168.2.5
Dec 11, 2023 20:36:42.162568092 CET	49744	80	192.168.2.5	142.250.217.163
Dec 11, 2023 20:36:42.167464972 CET	49750	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:42.167505026 CET	443	49750	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:42.167618990 CET	49750	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:42.167953014 CET	49750	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:42.167967081 CET	443	49750	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:42.381346941 CET	443	49749	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:42.381788015 CET	49749	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:42.381824970 CET	443	49749	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:42.382164001 CET	443	49749	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:42.382536888 CET	49749	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:42.382595062 CET	443	49749	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:42.382666111 CET	49749	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:42.424777031 CET	443	49749	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:42.471678019 CET	443	49750	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:42.471997023 CET	49750	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:42.472031116 CET	443	49750	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:42.472402096 CET	443	49750	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:42.472737074 CET	49750	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:42.472883940 CET	49750	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:42.472888947 CET	443	49750	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:42.474562883 CET	443	49750	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:42.526825905 CET	49750	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:42.684746027 CET	443	49749	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:42.684870005 CET	443	49749	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:42.684937000 CET	49749	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:42.685837030 CET	49749	443	192.168.2.5	104.17.3.184
Dec 11, 2023 20:36:42.685859919 CET	443	49749	104.17.3.184	192.168.2.5
Dec 11, 2023 20:36:42.783184052 CET	443	49750	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:42.783256054 CET	443	49750	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:42.783312082 CET	443	49750	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:42.783312082 CET	49750	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:42.783339977 CET	443	49750	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:42.783385038 CET	49750	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:42.783392906 CET	443	49750	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:42.783404112 CET	443	49750	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:42.783442974 CET	49750	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:42.784266949 CET	49750	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:42.784280062 CET	443	49750	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:42.784288883 CET	49750	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:42.784322977 CET	49750	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:42.823268890 CET	49751	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:42.823328018 CET	443	49751	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:42.823437929 CET	49751	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:42.823745966 CET	49751	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:42.823762894 CET	443	49751	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:43.126852036 CET	443	49751	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:43.127417088 CET	49751	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:43.127444029 CET	443	49751	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:43.127979994 CET	443	49751	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:43.128443956 CET	49751	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:43.128539085 CET	443	49751	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:43.128673077 CET	49751	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:43.172739029 CET	443	49751	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:43.443825006 CET	443	49751	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:43.444406986 CET	443	49751	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:43.444505930 CET	49751	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:43.444977045 CET	49751	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:43.445002079 CET	443	49751	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:44.830444098 CET	49753	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:44.830502987 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:44.830589056 CET	49753	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:44.831121922 CET	49753	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:44.831140995 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:45.145915031 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:45.146245956 CET	49753	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:45.146272898 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:45.146631956 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:45.146944046 CET	49753	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:45.147027016 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:45.147115946 CET	49753	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:45.147144079 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:45.468331099 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:45.468466043 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:45.468544960 CET	49753	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:45.468550920 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:45.468579054 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:45.468625069 CET	49753	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:45.468660116 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:45.468817949 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:45.468861103 CET	49753	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:45.468872070 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:45.476573944 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:45.476692915 CET	49753	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:45.476708889 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:45.485197067 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:45.485282898 CET	49753	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:45.485295057 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:45.491543055 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:45.491602898 CET	49753	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:45.491626978 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:45.540680885 CET	49753	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:45.540728092 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:45.586711884 CET	49753	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:45.593164921 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:45.597039938 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:45.597112894 CET	49753	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:45.597148895 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:45.605977058 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:45.606070995 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:45.606074095 CET	49753	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:45.606098890 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:45.606152058 CET	49753	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:45.614566088 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:45.624383926 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:45.624464035 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:45.624485016 CET	49753	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:45.624505043 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:45.624548912 CET	49753	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:45.631953955 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:45.640862942 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:45.640898943 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:45.640960932 CET	49753	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:45.640984058 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:45.641027927 CET	49753	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:45.649421930 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:45.657538891 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:45.657599926 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:45.657639027 CET	49753	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:45.657663107 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:45.657710075 CET	49753	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:45.665025949 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:45.672951937 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:45.673013926 CET	49753	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:45.673032045 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:45.680875063 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:45.680993080 CET	49753	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:45.681009054 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:45.681088924 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:45.681128025 CET	49753	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:45.681133986 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:45.681461096 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:45.681520939 CET	49753	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:45.681984901 CET	49753	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:45.682001114 CET	443	49753	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:46.353189945 CET	49757	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:46.353238106 CET	443	49757	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:46.353331089 CET	49757	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:46.353871107 CET	49757	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:46.353883028 CET	443	49757	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:46.655399084 CET	443	49757	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:46.655735016 CET	49757	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:46.655762911 CET	443	49757	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:46.656125069 CET	443	49757	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:46.656449080 CET	49757	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:46.656502008 CET	443	49757	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:46.656946898 CET	49759	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:46.656984091 CET	443	49759	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:46.657049894 CET	49757	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:46.657162905 CET	49759	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:46.657366991 CET	49759	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:46.657381058 CET	443	49759	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:46.704740047 CET	443	49757	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:46.906375885 CET	443	49757	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:46.906526089 CET	443	49757	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:46.906589985 CET	49757	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:46.906610012 CET	443	49757	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:46.906682968 CET	443	49757	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:46.906764030 CET	443	49757	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:46.906836033 CET	49757	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:46.906842947 CET	443	49757	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:46.906944036 CET	49757	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:46.914607048 CET	443	49757	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:46.914669991 CET	49757	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:46.914680004 CET	443	49757	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:46.923449039 CET	443	49757	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:46.923516989 CET	49757	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:46.923523903 CET	443	49757	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:46.933449984 CET	443	49757	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:46.933700085 CET	49757	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:46.933706999 CET	443	49757	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:46.960499048 CET	443	49759	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:46.960825920 CET	49759	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:46.960854053 CET	443	49759	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:46.961208105 CET	443	49759	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:46.961571932 CET	49759	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:46.961652040 CET	443	49759	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:46.961740017 CET	49759	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:46.979645014 CET	49757	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:46.979654074 CET	443	49757	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:47.008747101 CET	443	49759	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:47.025618076 CET	49757	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:47.031230927 CET	443	49757	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:47.031385899 CET	443	49757	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:47.031445980 CET	49757	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:47.031964064 CET	49757	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:47.031980991 CET	443	49757	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:47.104229927 CET	49761	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:47.104269981 CET	443	49761	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:47.104343891 CET	49761	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:47.105097055 CET	49761	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:47.105113029 CET	443	49761	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:47.274513960 CET	443	49759	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:47.274648905 CET	443	49759	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:47.274871111 CET	49759	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:47.276283979 CET	49759	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:47.276346922 CET	443	49759	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:47.415659904 CET	443	49761	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:47.420437098 CET	49761	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:47.420478106 CET	443	49761	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:47.420881033 CET	443	49761	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:47.421401978 CET	49761	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:47.421474934 CET	443	49761	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:47.422193050 CET	49762	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:47.422241926 CET	443	49762	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:47.422312975 CET	49762	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:47.422338963 CET	49761	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:47.422799110 CET	49762	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:47.422817945 CET	443	49762	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:47.464756966 CET	443	49761	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:47.665817022 CET	443	49761	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:47.665867090 CET	443	49761	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:47.665949106 CET	49761	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:47.665958881 CET	443	49761	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:47.665980101 CET	443	49761	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:47.666111946 CET	49761	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:47.669411898 CET	443	49761	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:47.669502020 CET	49761	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:47.679802895 CET	49761	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:47.679825068 CET	443	49761	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:47.733644962 CET	443	49762	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:47.774868011 CET	49762	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:47.775135040 CET	49762	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:47.775151014 CET	443	49762	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:47.776005983 CET	443	49762	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:47.776629925 CET	49762	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:47.776778936 CET	443	49762	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:47.777384996 CET	49762	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:47.824743986 CET	443	49762	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:47.905056000 CET	49764	443	192.168.2.5	192.178.50.68
Dec 11, 2023 20:36:47.905097008 CET	443	49764	192.178.50.68	192.168.2.5
Dec 11, 2023 20:36:47.905162096 CET	49764	443	192.168.2.5	192.178.50.68
Dec 11, 2023 20:36:47.905549049 CET	49764	443	192.168.2.5	192.178.50.68
Dec 11, 2023 20:36:47.905561924 CET	443	49764	192.178.50.68	192.168.2.5
Dec 11, 2023 20:36:48.048763037 CET	443	49762	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:48.048811913 CET	443	49762	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:48.048842907 CET	443	49762	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:48.048886061 CET	443	49762	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:48.048907995 CET	443	49762	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:48.048919916 CET	49762	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:48.048959970 CET	443	49762	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:48.048974991 CET	49762	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:48.049010992 CET	49762	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:48.057528019 CET	443	49762	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:48.059608936 CET	443	49762	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:48.059695959 CET	49762	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:48.059762955 CET	49762	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:36:48.059782982 CET	443	49762	142.250.217.196	192.168.2.5
Dec 11, 2023 20:36:48.206675053 CET	443	49764	192.178.50.68	192.168.2.5
Dec 11, 2023 20:36:48.207110882 CET	49764	443	192.168.2.5	192.178.50.68
Dec 11, 2023 20:36:48.207139015 CET	443	49764	192.178.50.68	192.168.2.5
Dec 11, 2023 20:36:48.208154917 CET	443	49764	192.178.50.68	192.168.2.5
Dec 11, 2023 20:36:48.208230972 CET	49764	443	192.168.2.5	192.178.50.68
Dec 11, 2023 20:36:48.208710909 CET	49764	443	192.168.2.5	192.178.50.68
Dec 11, 2023 20:36:48.208781958 CET	443	49764	192.178.50.68	192.168.2.5
Dec 11, 2023 20:36:48.208878040 CET	49764	443	192.168.2.5	192.178.50.68
Dec 11, 2023 20:36:48.208884001 CET	443	49764	192.178.50.68	192.168.2.5
Dec 11, 2023 20:36:48.258033991 CET	49764	443	192.168.2.5	192.178.50.68
Dec 11, 2023 20:36:48.456655979 CET	443	49764	192.178.50.68	192.168.2.5
Dec 11, 2023 20:36:48.456696987 CET	443	49764	192.178.50.68	192.168.2.5
Dec 11, 2023 20:36:48.456716061 CET	443	49764	192.178.50.68	192.168.2.5
Dec 11, 2023 20:36:48.456746101 CET	443	49764	192.178.50.68	192.168.2.5
Dec 11, 2023 20:36:48.456886053 CET	49764	443	192.168.2.5	192.178.50.68
Dec 11, 2023 20:36:48.456907988 CET	443	49764	192.178.50.68	192.168.2.5
Dec 11, 2023 20:36:48.456922054 CET	49764	443	192.168.2.5	192.178.50.68
Dec 11, 2023 20:36:48.459497929 CET	49764	443	192.168.2.5	192.178.50.68
Dec 11, 2023 20:36:48.459538937 CET	443	49764	192.178.50.68	192.168.2.5
Dec 11, 2023 20:36:48.459619999 CET	49764	443	192.168.2.5	192.178.50.68
Dec 11, 2023 20:37:16.151256084 CET	49765	443	192.168.2.5	20.12.23.50
Dec 11, 2023 20:37:16.151295900 CET	443	49765	20.12.23.50	192.168.2.5
Dec 11, 2023 20:37:16.151391029 CET	49765	443	192.168.2.5	20.12.23.50
Dec 11, 2023 20:37:16.152069092 CET	49765	443	192.168.2.5	20.12.23.50
Dec 11, 2023 20:37:16.152082920 CET	443	49765	20.12.23.50	192.168.2.5
Dec 11, 2023 20:37:16.645304918 CET	443	49765	20.12.23.50	192.168.2.5
Dec 11, 2023 20:37:16.645448923 CET	49765	443	192.168.2.5	20.12.23.50
Dec 11, 2023 20:37:16.650466919 CET	49765	443	192.168.2.5	20.12.23.50
Dec 11, 2023 20:37:16.650489092 CET	443	49765	20.12.23.50	192.168.2.5
Dec 11, 2023 20:37:16.650839090 CET	443	49765	20.12.23.50	192.168.2.5
Dec 11, 2023 20:37:16.662077904 CET	49765	443	192.168.2.5	20.12.23.50
Dec 11, 2023 20:37:16.704751968 CET	443	49765	20.12.23.50	192.168.2.5
Dec 11, 2023 20:37:17.104782104 CET	443	49765	20.12.23.50	192.168.2.5
Dec 11, 2023 20:37:17.104815006 CET	443	49765	20.12.23.50	192.168.2.5
Dec 11, 2023 20:37:17.104898930 CET	443	49765	20.12.23.50	192.168.2.5
Dec 11, 2023 20:37:17.104913950 CET	49765	443	192.168.2.5	20.12.23.50
Dec 11, 2023 20:37:17.104942083 CET	443	49765	20.12.23.50	192.168.2.5
Dec 11, 2023 20:37:17.104991913 CET	49765	443	192.168.2.5	20.12.23.50
Dec 11, 2023 20:37:17.105034113 CET	49765	443	192.168.2.5	20.12.23.50
Dec 11, 2023 20:37:17.105201960 CET	443	49765	20.12.23.50	192.168.2.5
Dec 11, 2023 20:37:17.105247021 CET	443	49765	20.12.23.50	192.168.2.5
Dec 11, 2023 20:37:17.105278969 CET	49765	443	192.168.2.5	20.12.23.50
Dec 11, 2023 20:37:17.105285883 CET	443	49765	20.12.23.50	192.168.2.5
Dec 11, 2023 20:37:17.105320930 CET	443	49765	20.12.23.50	192.168.2.5
Dec 11, 2023 20:37:17.105334044 CET	49765	443	192.168.2.5	20.12.23.50
Dec 11, 2023 20:37:17.105375051 CET	49765	443	192.168.2.5	20.12.23.50
Dec 11, 2023 20:37:17.114876032 CET	49765	443	192.168.2.5	20.12.23.50
Dec 11, 2023 20:37:17.114892006 CET	443	49765	20.12.23.50	192.168.2.5
Dec 11, 2023 20:37:17.114922047 CET	49765	443	192.168.2.5	20.12.23.50
Dec 11, 2023 20:37:17.114927053 CET	443	49765	20.12.23.50	192.168.2.5
Dec 11, 2023 20:37:26.352705002 CET	49745	80	192.168.2.5	142.250.217.163
Dec 11, 2023 20:37:26.462045908 CET	49746	80	192.168.2.5	142.250.217.163
Dec 11, 2023 20:37:26.484447002 CET	80	49745	142.250.217.163	192.168.2.5
Dec 11, 2023 20:37:26.586631060 CET	80	49746	142.250.217.163	192.168.2.5
Dec 11, 2023 20:37:26.780587912 CET	49767	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:37:26.780646086 CET	443	49767	142.250.217.196	192.168.2.5
Dec 11, 2023 20:37:26.780730963 CET	49767	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:37:26.781179905 CET	49767	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:37:26.781187057 CET	443	49767	142.250.217.196	192.168.2.5
Dec 11, 2023 20:37:27.085879087 CET	443	49767	142.250.217.196	192.168.2.5
Dec 11, 2023 20:37:27.086286068 CET	49767	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:37:27.086301088 CET	443	49767	142.250.217.196	192.168.2.5
Dec 11, 2023 20:37:27.086682081 CET	443	49767	142.250.217.196	192.168.2.5
Dec 11, 2023 20:37:27.087555885 CET	49767	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:37:27.087644100 CET	443	49767	142.250.217.196	192.168.2.5
Dec 11, 2023 20:37:27.133682013 CET	49767	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:37:27.164942026 CET	49744	80	192.168.2.5	142.250.217.163
Dec 11, 2023 20:37:27.289735079 CET	80	49744	142.250.217.163	192.168.2.5
Dec 11, 2023 20:37:37.045361996 CET	443	49767	142.250.217.196	192.168.2.5
Dec 11, 2023 20:37:37.045438051 CET	443	49767	142.250.217.196	192.168.2.5
Dec 11, 2023 20:37:37.045501947 CET	49767	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:37:39.018343925 CET	49767	443	192.168.2.5	142.250.217.196
Dec 11, 2023 20:37:39.018377066 CET	443	49767	142.250.217.196	192.168.2.5
Dec 11, 2023 20:37:42.964221954 CET	49745	80	192.168.2.5	142.250.217.163
Dec 11, 2023 20:37:42.964288950 CET	49746	80	192.168.2.5	142.250.217.163
Dec 11, 2023 20:37:43.089131117 CET	80	49745	142.250.217.163	192.168.2.5
Dec 11, 2023 20:37:43.089154005 CET	80	49746	142.250.217.163	192.168.2.5
Dec 11, 2023 20:37:43.089313984 CET	49745	80	192.168.2.5	142.250.217.163
Dec 11, 2023 20:37:43.089308977 CET	49746	80	192.168.2.5	142.250.217.163
Dec 11, 2023 20:37:51.855494022 CET	49770	443	192.168.2.5	192.178.50.78
Dec 11, 2023 20:37:51.855535984 CET	443	49770	192.178.50.78	192.168.2.5
Dec 11, 2023 20:37:51.855621099 CET	49770	443	192.168.2.5	192.178.50.78
Dec 11, 2023 20:37:51.855856895 CET	49770	443	192.168.2.5	192.178.50.78
Dec 11, 2023 20:37:51.855874062 CET	443	49770	192.178.50.78	192.168.2.5
Dec 11, 2023 20:37:52.164304018 CET	443	49770	192.178.50.78	192.168.2.5
Dec 11, 2023 20:37:52.165745020 CET	49770	443	192.168.2.5	192.178.50.78
Dec 11, 2023 20:37:52.165776968 CET	443	49770	192.178.50.78	192.168.2.5
Dec 11, 2023 20:37:52.166192055 CET	443	49770	192.178.50.78	192.168.2.5
Dec 11, 2023 20:37:52.166259050 CET	49770	443	192.168.2.5	192.178.50.78
Dec 11, 2023 20:37:52.166929007 CET	443	49770	192.178.50.78	192.168.2.5
Dec 11, 2023 20:37:52.166982889 CET	49770	443	192.168.2.5	192.178.50.78
Dec 11, 2023 20:37:52.167969942 CET	49770	443	192.168.2.5	192.178.50.78
Dec 11, 2023 20:37:52.168071032 CET	443	49770	192.178.50.78	192.168.2.5
Dec 11, 2023 20:37:52.168111086 CET	49770	443	192.168.2.5	192.178.50.78
Dec 11, 2023 20:37:52.211031914 CET	49770	443	192.168.2.5	192.178.50.78
Dec 11, 2023 20:37:52.211055994 CET	443	49770	192.178.50.78	192.168.2.5
Dec 11, 2023 20:37:52.257889986 CET	49770	443	192.168.2.5	192.178.50.78
Dec 11, 2023 20:37:52.465012074 CET	443	49770	192.178.50.78	192.168.2.5
Dec 11, 2023 20:37:52.465626955 CET	443	49770	192.178.50.78	192.168.2.5
Dec 11, 2023 20:37:52.465704918 CET	49770	443	192.168.2.5	192.178.50.78
Dec 11, 2023 20:37:52.466651917 CET	49770	443	192.168.2.5	192.178.50.78
Dec 11, 2023 20:37:52.466666937 CET	443	49770	192.178.50.78	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 11, 2023 20:36:24.721906900 CET	51544	53	192.168.2.5	1.1.1.1
Dec 11, 2023 20:36:24.722309113 CET	62087	53	192.168.2.5	1.1.1.1
Dec 11, 2023 20:36:24.723198891 CET	61732	53	192.168.2.5	1.1.1.1
Dec 11, 2023 20:36:24.723506927 CET	52852	53	192.168.2.5	1.1.1.1
Dec 11, 2023 20:36:24.828803062 CET	53	59095	1.1.1.1	192.168.2.5
Dec 11, 2023 20:36:24.847616911 CET	53	51544	1.1.1.1	192.168.2.5
Dec 11, 2023 20:36:24.849006891 CET	53	52852	1.1.1.1	192.168.2.5
Dec 11, 2023 20:36:24.849509954 CET	53	61732	1.1.1.1	192.168.2.5
Dec 11, 2023 20:36:24.870573997 CET	53	62087	1.1.1.1	192.168.2.5
Dec 11, 2023 20:36:25.662086964 CET	53	56854	1.1.1.1	192.168.2.5
Dec 11, 2023 20:36:25.839673042 CET	58451	53	192.168.2.5	1.1.1.1
Dec 11, 2023 20:36:25.839957952 CET	52553	53	192.168.2.5	1.1.1.1
Dec 11, 2023 20:36:25.965961933 CET	53	58451	1.1.1.1	192.168.2.5
Dec 11, 2023 20:36:25.966344118 CET	53	52553	1.1.1.1	192.168.2.5
Dec 11, 2023 20:36:26.732412100 CET	58724	53	192.168.2.5	1.1.1.1
Dec 11, 2023 20:36:26.732811928 CET	61603	53	192.168.2.5	1.1.1.1
Dec 11, 2023 20:36:26.857593060 CET	53	58724	1.1.1.1	192.168.2.5
Dec 11, 2023 20:36:26.858041048 CET	53	61603	1.1.1.1	192.168.2.5
Dec 11, 2023 20:36:26.961847067 CET	63483	53	192.168.2.5	1.1.1.1
Dec 11, 2023 20:36:26.963823080 CET	65137	53	192.168.2.5	1.1.1.1
Dec 11, 2023 20:36:27.088490963 CET	53	63483	1.1.1.1	192.168.2.5
Dec 11, 2023 20:36:27.091979027 CET	53	65137	1.1.1.1	192.168.2.5
Dec 11, 2023 20:36:28.058032036 CET	50074	53	192.168.2.5	1.1.1.1
Dec 11, 2023 20:36:28.058630943 CET	60000	53	192.168.2.5	1.1.1.1
Dec 11, 2023 20:36:28.203424931 CET	53	60000	1.1.1.1	192.168.2.5
Dec 11, 2023 20:36:28.233787060 CET	53	50074	1.1.1.1	192.168.2.5
Dec 11, 2023 20:36:29.543385029 CET	49960	53	192.168.2.5	1.1.1.1
Dec 11, 2023 20:36:29.543993950 CET	53023	53	192.168.2.5	1.1.1.1
Dec 11, 2023 20:36:29.702697039 CET	53	53023	1.1.1.1	192.168.2.5
Dec 11, 2023 20:36:29.754437923 CET	53	49960	1.1.1.1	192.168.2.5
Dec 11, 2023 20:36:31.000240088 CET	60535	53	192.168.2.5	1.1.1.1
Dec 11, 2023 20:36:31.005382061 CET	59248	53	192.168.2.5	1.1.1.1
Dec 11, 2023 20:36:31.128098965 CET	53	60535	1.1.1.1	192.168.2.5
Dec 11, 2023 20:36:31.169750929 CET	65489	53	192.168.2.5	1.1.1.1
Dec 11, 2023 20:36:31.170121908 CET	52946	53	192.168.2.5	1.1.1.1
Dec 11, 2023 20:36:31.297833920 CET	53	52946	1.1.1.1	192.168.2.5
Dec 11, 2023 20:36:31.298815012 CET	53	59248	1.1.1.1	192.168.2.5
Dec 11, 2023 20:36:31.408458948 CET	53	65489	1.1.1.1	192.168.2.5
Dec 11, 2023 20:36:35.304548979 CET	60115	53	192.168.2.5	1.1.1.1
Dec 11, 2023 20:36:35.310976982 CET	52494	53	192.168.2.5	1.1.1.1
Dec 11, 2023 20:36:35.429845095 CET	53	60115	1.1.1.1	192.168.2.5
Dec 11, 2023 20:36:35.437752008 CET	53	52494	1.1.1.1	192.168.2.5
Dec 11, 2023 20:36:36.594995975 CET	60307	53	192.168.2.5	1.1.1.1
Dec 11, 2023 20:36:36.595321894 CET	62370	53	192.168.2.5	1.1.1.1
Dec 11, 2023 20:36:36.722009897 CET	53	62370	1.1.1.1	192.168.2.5
Dec 11, 2023 20:36:36.722059011 CET	53	60307	1.1.1.1	192.168.2.5
Dec 11, 2023 20:36:38.030803919 CET	57925	53	192.168.2.5	1.1.1.1
Dec 11, 2023 20:36:38.031013966 CET	56607	53	192.168.2.5	1.1.1.1
Dec 11, 2023 20:36:38.156583071 CET	53	57925	1.1.1.1	192.168.2.5
Dec 11, 2023 20:36:38.156862020 CET	53	56607	1.1.1.1	192.168.2.5
Dec 11, 2023 20:36:41.035263062 CET	62734	53	192.168.2.5	1.1.1.1
Dec 11, 2023 20:36:41.036830902 CET	60081	53	192.168.2.5	1.1.1.1
Dec 11, 2023 20:36:41.219954014 CET	53	62734	1.1.1.1	192.168.2.5
Dec 11, 2023 20:36:41.220710993 CET	53	60081	1.1.1.1	192.168.2.5
Dec 11, 2023 20:36:42.886769056 CET	53	64023	1.1.1.1	192.168.2.5
Dec 11, 2023 20:36:43.576492071 CET	53	56598	1.1.1.1	192.168.2.5
Dec 11, 2023 20:36:45.049287081 CET	53	54727	1.1.1.1	192.168.2.5
Dec 11, 2023 20:36:46.502940893 CET	53	63382	1.1.1.1	192.168.2.5
Dec 11, 2023 20:36:47.025599957 CET	53	65073	1.1.1.1	192.168.2.5
Dec 11, 2023 20:36:47.778081894 CET	51346	53	192.168.2.5	1.1.1.1
Dec 11, 2023 20:36:47.778376102 CET	51105	53	192.168.2.5	1.1.1.1
Dec 11, 2023 20:36:47.903064013 CET	53	51346	1.1.1.1	192.168.2.5
Dec 11, 2023 20:36:47.904179096 CET	53	51105	1.1.1.1	192.168.2.5
Dec 11, 2023 20:37:01.939034939 CET	53	54974	1.1.1.1	192.168.2.5
Dec 11, 2023 20:37:23.826971054 CET	53	58807	1.1.1.1	192.168.2.5
Dec 11, 2023 20:37:24.432698011 CET	53	54223	1.1.1.1	192.168.2.5
Dec 11, 2023 20:37:51.524967909 CET	53	50024	1.1.1.1	192.168.2.5
Dec 11, 2023 20:37:51.728614092 CET	59803	53	192.168.2.5	1.1.1.1
Dec 11, 2023 20:37:51.728738070 CET	57333	53	192.168.2.5	1.1.1.1
Dec 11, 2023 20:37:51.853931904 CET	53	57333	1.1.1.1	192.168.2.5
Dec 11, 2023 20:37:51.854875088 CET	53	59803	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 11, 2023 20:36:31.298918009 CET	192.168.2.5	1.1.1.1	c228	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 11, 2023 20:36:24.721906900 CET	192.168.2.5	1.1.1.1	0x97a3	Standard query (0)	clients2.google.com	A (IP address)	IN (0x0001)	false
Dec 11, 2023 20:36:24.722309113 CET	192.168.2.5	1.1.1.1	0x9972	Standard query (0)	clients2.google.com	65	IN (0x0001)	false
Dec 11, 2023 20:36:24.723198891 CET	192.168.2.5	1.1.1.1	0x19cc	Standard query (0)	accounts.google.com	A (IP address)	IN (0x0001)	false
Dec 11, 2023 20:36:24.723506927 CET	192.168.2.5	1.1.1.1	0x8762	Standard query (0)	accounts.google.com	65	IN (0x0001)	false
Dec 11, 2023 20:36:25.839673042 CET	192.168.2.5	1.1.1.1	0x40b	Standard query (0)	cmax.co.uk	A (IP address)	IN (0x0001)	false
Dec 11, 2023 20:36:25.839957952 CET	192.168.2.5	1.1.1.1	0xc1d7	Standard query (0)	cmax.co.uk	65	IN (0x0001)	false
Dec 11, 2023 20:36:26.732412100 CET	192.168.2.5	1.1.1.1	0xbe54	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 11, 2023 20:36:26.732811928 CET	192.168.2.5	1.1.1.1	0x7d19	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 11, 2023 20:36:26.961847067 CET	192.168.2.5	1.1.1.1	0x89e3	Standard query (0)	pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev	A (IP address)	IN (0x0001)	false
Dec 11, 2023 20:36:26.963823080 CET	192.168.2.5	1.1.1.1	0x786f	Standard query (0)	pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev	65	IN (0x0001)	false
Dec 11, 2023 20:36:28.058032036 CET	192.168.2.5	1.1.1.1	0x70c2	Standard query (0)	www.netjetseurope.com	A (IP address)	IN (0x0001)	false
Dec 11, 2023 20:36:28.058630943 CET	192.168.2.5	1.1.1.1	0x5cdf	Standard query (0)	www.netjetseurope.com	65	IN (0x0001)	false
Dec 11, 2023 20:36:29.543385029 CET	192.168.2.5	1.1.1.1	0xb6bb	Standard query (0)	www.netjets.com	A (IP address)	IN (0x0001)	false
Dec 11, 2023 20:36:29.543993950 CET	192.168.2.5	1.1.1.1	0xbc4d	Standard query (0)	www.netjets.com	65	IN (0x0001)	false
Dec 11, 2023 20:36:31.000240088 CET	192.168.2.5	1.1.1.1	0xd4ce	Standard query (0)	yellowtelecomms.com	A (IP address)	IN (0x0001)	false
Dec 11, 2023 20:36:31.005382061 CET	192.168.2.5	1.1.1.1	0x41c1	Standard query (0)	yellowtelecomms.com	65	IN (0x0001)	false
Dec 11, 2023 20:36:31.169750929 CET	192.168.2.5	1.1.1.1	0x61fb	Standard query (0)	www.netjets.com	A (IP address)	IN (0x0001)	false
Dec 11, 2023 20:36:31.170121908 CET	192.168.2.5	1.1.1.1	0xc692	Standard query (0)	www.netjets.com	65	IN (0x0001)	false
Dec 11, 2023 20:36:35.304548979 CET	192.168.2.5	1.1.1.1	0xc391	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 11, 2023 20:36:35.310976982 CET	192.168.2.5	1.1.1.1	0xe836	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Dec 11, 2023 20:36:36.594995975 CET	192.168.2.5	1.1.1.1	0x8091	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 11, 2023 20:36:36.595321894 CET	192.168.2.5	1.1.1.1	0x8e36	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Dec 11, 2023 20:36:38.030803919 CET	192.168.2.5	1.1.1.1	0x63ef	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 11, 2023 20:36:38.031013966 CET	192.168.2.5	1.1.1.1	0x7dfe	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Dec 11, 2023 20:36:41.035263062 CET	192.168.2.5	1.1.1.1	0xc7fb	Standard query (0)	google.co.uk	A (IP address)	IN (0x0001)	false
Dec 11, 2023 20:36:41.036830902 CET	192.168.2.5	1.1.1.1	0xbfc3	Standard query (0)	google.co.uk	65	IN (0x0001)	false
Dec 11, 2023 20:36:47.778081894 CET	192.168.2.5	1.1.1.1	0x6cea	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 11, 2023 20:36:47.778376102 CET	192.168.2.5	1.1.1.1	0xa480	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 11, 2023 20:37:51.728614092 CET	192.168.2.5	1.1.1.1	0x41b0	Standard query (0)	clients1.google.com	A (IP address)	IN (0x0001)	false
Dec 11, 2023 20:37:51.728738070 CET	192.168.2.5	1.1.1.1	0xe0aa	Standard query (0)	clients1.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 11, 2023 20:36:24.847616911 CET	1.1.1.1	192.168.2.5	0x97a3	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2023 20:36:24.847616911 CET	1.1.1.1	192.168.2.5	0x97a3	No error (0)	clients.l.google.com		142.250.217.238	A (IP address)	IN (0x0001)	false
Dec 11, 2023 20:36:24.849509954 CET	1.1.1.1	192.168.2.5	0x19cc	No error (0)	accounts.google.com		142.250.64.141	A (IP address)	IN (0x0001)	false
Dec 11, 2023 20:36:24.870573997 CET	1.1.1.1	192.168.2.5	0x9972	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2023 20:36:25.965961933 CET	1.1.1.1	192.168.2.5	0x40b	No error (0)	cmax.co.uk		62.182.22.52	A (IP address)	IN (0x0001)	false
Dec 11, 2023 20:36:26.857593060 CET	1.1.1.1	192.168.2.5	0xbe54	No error (0)	www.google.com		142.250.217.196	A (IP address)	IN (0x0001)	false
Dec 11, 2023 20:36:26.858041048 CET	1.1.1.1	192.168.2.5	0x7d19	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 11, 2023 20:36:27.088490963 CET	1.1.1.1	192.168.2.5	0x89e3	No error (0)	pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev		104.18.2.35	A (IP address)	IN (0x0001)	false
Dec 11, 2023 20:36:27.088490963 CET	1.1.1.1	192.168.2.5	0x89e3	No error (0)	pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev		104.18.3.35	A (IP address)	IN (0x0001)	false
Dec 11, 2023 20:36:28.233787060 CET	1.1.1.1	192.168.2.5	0x70c2	No error (0)	www.netjetseurope.com		54.77.133.128	A (IP address)	IN (0x0001)	false
Dec 11, 2023 20:36:28.233787060 CET	1.1.1.1	192.168.2.5	0x70c2	No error (0)	www.netjetseurope.com		34.252.235.88	A (IP address)	IN (0x0001)	false
Dec 11, 2023 20:36:29.702697039 CET	1.1.1.1	192.168.2.5	0xbc4d	No error (0)	www.netjets.com	www.aws.netjets.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2023 20:36:29.754437923 CET	1.1.1.1	192.168.2.5	0xb6bb	No error (0)	www.netjets.com	www.aws.netjets.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2023 20:36:29.754437923 CET	1.1.1.1	192.168.2.5	0xb6bb	No error (0)	www.aws.netjets.com		18.239.225.39	A (IP address)	IN (0x0001)	false
Dec 11, 2023 20:36:29.754437923 CET	1.1.1.1	192.168.2.5	0xb6bb	No error (0)	www.aws.netjets.com		18.239.225.38	A (IP address)	IN (0x0001)	false
Dec 11, 2023 20:36:29.754437923 CET	1.1.1.1	192.168.2.5	0xb6bb	No error (0)	www.aws.netjets.com		18.239.225.66	A (IP address)	IN (0x0001)	false
Dec 11, 2023 20:36:29.754437923 CET	1.1.1.1	192.168.2.5	0xb6bb	No error (0)	www.aws.netjets.com		18.239.225.76	A (IP address)	IN (0x0001)	false
Dec 11, 2023 20:36:31.128098965 CET	1.1.1.1	192.168.2.5	0xd4ce	No error (0)	yellowtelecomms.com		194.26.192.93	A (IP address)	IN (0x0001)	false
Dec 11, 2023 20:36:31.297833920 CET	1.1.1.1	192.168.2.5	0xc692	No error (0)	www.netjets.com	www.aws.netjets.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2023 20:36:31.408458948 CET	1.1.1.1	192.168.2.5	0x61fb	No error (0)	www.netjets.com	www.aws.netjets.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2023 20:36:31.408458948 CET	1.1.1.1	192.168.2.5	0x61fb	No error (0)	www.aws.netjets.com		18.239.225.76	A (IP address)	IN (0x0001)	false
Dec 11, 2023 20:36:31.408458948 CET	1.1.1.1	192.168.2.5	0x61fb	No error (0)	www.aws.netjets.com		18.239.225.38	A (IP address)	IN (0x0001)	false
Dec 11, 2023 20:36:31.408458948 CET	1.1.1.1	192.168.2.5	0x61fb	No error (0)	www.aws.netjets.com		18.239.225.39	A (IP address)	IN (0x0001)	false
Dec 11, 2023 20:36:31.408458948 CET	1.1.1.1	192.168.2.5	0x61fb	No error (0)	www.aws.netjets.com		18.239.225.66	A (IP address)	IN (0x0001)	false
Dec 11, 2023 20:36:35.429845095 CET	1.1.1.1	192.168.2.5	0xc391	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Dec 11, 2023 20:36:35.429845095 CET	1.1.1.1	192.168.2.5	0xc391	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Dec 11, 2023 20:36:35.437752008 CET	1.1.1.1	192.168.2.5	0xe836	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Dec 11, 2023 20:36:36.722009897 CET	1.1.1.1	192.168.2.5	0x8e36	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Dec 11, 2023 20:36:36.722059011 CET	1.1.1.1	192.168.2.5	0x8091	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Dec 11, 2023 20:36:36.722059011 CET	1.1.1.1	192.168.2.5	0x8091	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Dec 11, 2023 20:36:38.156583071 CET	1.1.1.1	192.168.2.5	0x63ef	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Dec 11, 2023 20:36:38.156583071 CET	1.1.1.1	192.168.2.5	0x63ef	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Dec 11, 2023 20:36:38.156862020 CET	1.1.1.1	192.168.2.5	0x7dfe	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Dec 11, 2023 20:36:41.219954014 CET	1.1.1.1	192.168.2.5	0xc7fb	No error (0)	google.co.uk		142.250.217.163	A (IP address)	IN (0x0001)	false
Dec 11, 2023 20:36:47.903064013 CET	1.1.1.1	192.168.2.5	0x6cea	No error (0)	www.google.com		192.178.50.68	A (IP address)	IN (0x0001)	false
Dec 11, 2023 20:36:47.904179096 CET	1.1.1.1	192.168.2.5	0xa480	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 11, 2023 20:37:51.853931904 CET	1.1.1.1	192.168.2.5	0xe0aa	No error (0)	clients1.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2023 20:37:51.854875088 CET	1.1.1.1	192.168.2.5	0x41b0	No error (0)	clients1.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2023 20:37:51.854875088 CET	1.1.1.1	192.168.2.5	0x41b0	No error (0)	clients.l.google.com		192.178.50.78	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

accounts.google.com

clients2.google.com

cmax.co.uk

pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev

https:

www.netjetseurope.com

www.netjets.com

yellowtelecomms.com

challenges.cloudflare.com

www.bing.com

www.google.com

fs.microsoft.com

slscr.update.microsoft.com

clients1.google.com

google.co.uk

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49744	142.250.217.163	80	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 11, 2023 20:36:41.346959114 CET	427	OUT	GET / HTTP/1.1 Host: google.co.uk Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Dec 11, 2023 20:36:42.162456989 CET	1286	IN	HTTP/1.1 302 Found Location: http://www.google.com/sorry/index?continue=http://google.co.uk/&q=EgRmgZjUGMnJ3asGIjCugYbjtADgaWeknEqgxEp7vAmnSPBLI05Hh6qhkYnCegYrKiWBiLAkUmkW39h1K1cyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM x-hallmonitor-challenge: CgwIycndqwYQobf81gMSBGaBmNQ Content-Type: text/html; charset=UTF-8 Content-Security-Policy-Report-Only: object-src 'none';base-uri 'self';script-src 'nonce-kHlpAjL9MfrzmaIaUXAWyQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFp Data Raw: Data Ascii:
Dec 11, 2023 20:36:42.162481070 CET	833	IN	Data Raw: 69 49 36 64 48 4a 31 5a 58 30 3d 0d 0a 44 61 74 65 3a 20 4d 6f 6e 2c 20 31 31 20 44 65 63 20 32 30 32 33 20 31 39 3a 33 36 3a 34 31 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 67 77 73 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 39 34 Data Ascii: iI6dHJ1ZX0=Date: Mon, 11 Dec 2023 19:36:41 GMTServer: gwsContent-Length: 394X-XSS-Protection: 0X-Frame-Options: SAMEORIGINSet-Cookie: 1P_JAR=2023-12-11-19; expires=Wed, 10-Jan-2024 19:36:41 GMT; path=/; domain=.google.co.uk; Secure
Dec 11, 2023 20:37:27.164942026 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49745	142.250.217.163	80	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 11, 2023 20:37:26.352705002 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49746	142.250.217.163	80	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Dec 11, 2023 20:37:26.462045908 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49706	142.250.64.141	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-11 19:36:25 UTC	680	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2023-12-11 19:36:25 UTC	1	OUT	Data Raw: 20 Data Ascii:
2023-12-11 19:36:25 UTC	1627	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: https://www.google.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 11 Dec 2023 19:36:25 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/IdentityListAccountsHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-aiBwbC7007aQb2kam-nOxg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdentityListAccountsHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdentityListAccountsHttp/cspreport/allowlist Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-12-11 19:36:25 UTC	23	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2023-12-11 19:36:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49707	142.250.217.238	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-11 19:36:25 UTC	752	OUT	GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1 Host: clients2.google.com Connection: keep-alive X-Goog-Update-Interactivity: fg X-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda X-Goog-Update-Updater: chromecrx-117.0.5938.132 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-11 19:36:25 UTC	732	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-tp0UhhI_rMg2w16TNtlCng' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 11 Dec 2023 19:36:25 GMT Content-Type: text/xml; charset=UTF-8 X-Daynum: 6188 X-Daystart: 41785 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-12-11 19:36:25 UTC	520	IN	Data Raw: 32 63 39 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 36 31 38 38 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 34 31 37 38 35 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 Data Ascii: 2c9<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="6188" elapsed_seconds="41785"/><app appid="nmmhkkegccagdldgiimedpiccmgmieda" cohort="1::" cohortname=""
2023-12-11 19:36:25 UTC	200	IN	Data Raw: 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 7a 65 3d 22 32 34 38 35 33 31 22 20 73 74 61 74 75 73 3d 22 6f 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 2e 30 2e 36 22 2f 3e 3c 2f 61 70 70 3e 3c 2f 67 75 70 64 61 74 65 3e 0d 0a Data Ascii: 723f56b8717175c536685c5450122b30789464ad82" hash_sha256="81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" protected="0" size="248531" status="ok" version="1.0.0.6"/></app></gupdate>
2023-12-11 19:36:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49711	62.182.22.52	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-11 19:36:26 UTC	659	OUT	GET /bv.PDF HTTP/1.1 Host: cmax.co.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-11 19:36:26 UTC	404	IN	HTTP/1.1 301 Moved Permanently Connection: close content-type: text/html content-length: 707 date: Mon, 11 Dec 2023 19:36:26 GMT server: LiteSpeed location: https://pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev/DF.html alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2023-12-11 19:36:26 UTC	707	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 301 Moved Permanently</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49714	104.18.2.35	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-11 19:36:27 UTC	693	OUT	GET /DF.html HTTP/1.1 Host: pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-11 19:36:27 UTC	282	IN	HTTP/1.1 200 OK Date: Mon, 11 Dec 2023 19:36:27 GMT Content-Type: text/html Content-Length: 4363 Connection: close Accept-Ranges: bytes ETag: "471f668d7d62c75a1b47a3bbdb1ba9a2" Last-Modified: Mon, 27 Nov 2023 07:22:46 GMT Server: cloudflare CF-RAY: 83402d34687a749c-MIA
2023-12-11 19:36:27 UTC	1087	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 0d 0a 3c 42 4f 44 59 20 62 67 63 6f 6c 6f 72 3d 22 23 46 46 46 46 46 46 22 3e 0d 0a 3c 66 6f 6e 74 20 66 61 63 65 3d 22 41 72 69 61 6c 22 63 6f 6c 6f 72 3d 22 23 30 30 30 30 30 30 22 73 69 7a 65 3d 22 32 22 3e 0d 0a 3c 70 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 6e 65 74 6a 65 74 73 65 75 72 6f 70 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 6e 6a 5f 6c 6f 67 6f 2e 67 69 66 22 20 61 6c 69 67 6e 3d 22 72 69 67 68 74 22 20 41 4c 54 3d 22 4e 65 74 4a 65 74 73 22 3e 3c 62 72 20 63 6c 65 61 72 3d 22 61 6c 6c 22 3e 3c 62 72 3e 3c 62 72 3e 3c 62 72 3e 0d 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 Data Ascii: <!DOCTYPE html><html><head><BODY bgcolor="#FFFFFF"><font face="Arial"color="#000000"size="2"><p><img src="http://www.netjetseurope.com/images/nj_logo.gif" align="right" ALT="NetJets"><br clear="all"><br><br><br><p align="center"><font face="
2023-12-11 19:36:27 UTC	1369	IN	Data Raw: 31 3c 2f 66 6f 6e 74 3e 3c 2f 74 64 3e 3c 2f 74 72 3e 0d 0a 3c 74 72 3e 3c 74 64 20 61 6c 69 67 6e 3d 22 6c 65 66 74 22 77 69 64 74 68 3d 22 35 30 25 22 20 62 67 63 6f 6c 6f 72 3d 22 23 33 46 32 43 32 33 22 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 41 72 69 61 6c 22 63 6f 6c 6f 72 3d 22 57 68 69 74 65 22 73 69 7a 65 3d 22 32 22 3e 3c 62 3e 50 61 69 64 20 54 6f 3a 20 3c 2f 62 3e 3c 2f 66 6f 6e 74 3e 3c 2f 74 64 3e 0d 0a 3c 74 64 20 61 6c 69 67 6e 3d 22 72 69 67 68 74 22 77 69 64 74 68 3d 22 35 30 25 22 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 41 72 69 61 6c 22 63 6f 6c 6f 72 3d 22 23 30 30 30 30 30 30 22 73 69 7a 65 3d 22 32 22 3e 49 6e 66 6c 69 74 65 20 54 68 65 20 4a 65 74 20 43 65 6e 74 72 65 3c 2f 66 6f 6e 74 3e 3c 2f 74 64 3e 3c 2f 74 72 3e 0d 0a 3c 74 64 Data Ascii: 1</font></td></tr><tr><td align="left"width="50%" bgcolor="#3F2C23"><font face="Arial"color="White"size="2"><b>Paid To: </b></font></td><td align="right"width="50%"><font face="Arial"color="#000000"size="2">Inflite The Jet Centre</font></td></tr><td
2023-12-11 19:36:27 UTC	1369	IN	Data Raw: 6d 6f 75 6e 74 3c 2f 62 3e 3c 2f 66 6f 6e 74 3e 3c 2f 74 64 3e 0d 0a 3c 74 64 20 77 69 64 74 68 3d 22 31 32 25 22 61 6c 69 67 6e 3d 22 72 69 67 68 74 22 62 67 63 6f 6c 6f 72 3d 22 23 33 46 32 43 32 33 22 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 41 72 69 61 6c 22 63 6f 6c 6f 72 3d 22 57 68 69 74 65 22 73 69 7a 65 3d 22 32 22 3e 3c 62 3e 43 72 65 64 69 74 3c 2f 62 3e 3c 2f 66 6f 6e 74 3e 3c 2f 74 64 3e 0d 0a 3c 74 64 20 77 69 64 74 68 3d 22 31 32 25 22 61 6c 69 67 6e 3d 22 72 69 67 68 74 22 62 67 63 6f 6c 6f 72 3d 22 23 33 46 32 43 32 33 22 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 41 72 69 61 6c 22 63 6f 6c 6f 72 3d 22 57 68 69 74 65 22 73 69 7a 65 3d 22 32 22 3e 3c 62 3e 44 65 62 69 74 3c 2f 62 3e 3c 2f 66 6f 6e 74 3e 3c 2f 74 64 3e 0d 0a 3c 74 64 20 77 69 64 Data Ascii: mount</b></font></td><td width="12%"align="right"bgcolor="#3F2C23"><font face="Arial"color="White"size="2"><b>Credit</b></font></td><td width="12%"align="right"bgcolor="#3F2C23"><font face="Arial"color="White"size="2"><b>Debit</b></font></td><td wid
2023-12-11 19:36:27 UTC	538	IN	Data Raw: 3a 22 3e 3c 2f 61 3e 3c 2f 66 6f 6e 74 3e 3c 2f 74 64 3e 0d 0a 3c 74 64 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 41 72 69 61 6c 22 73 69 7a 65 3d 22 32 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 67 6f 6f 67 6c 65 2e 63 6f 2e 75 6b 22 3e 4e 65 74 4a 65 74 73 3c 2f 61 3e 3c 2f 66 6f 6e 74 3e 3c 2f 74 64 3e 0d 0a 3c 2f 74 72 3e 3c 2f 74 61 62 6c 65 3e 3c 2f 70 3e 3c 2f 66 6f 6e 74 3e 0d 0a 3c 2f 74 72 3e 3c 2f 74 61 62 6c 65 3e 3c 2f 70 3e 3c 2f 66 6f 6e 74 3e 0d 0a 3c 2f 42 4f 44 59 3e 0d 0a 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 20 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 2e 63 6f 2e 75 6b 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 Data Ascii: :"></a></font></td><td><font face="Arial"size="2"><a href="http://google.co.uk">NetJets</a></font></td></tr></table></p></font></tr></table></p></font></BODY><meta http-equiv="refresh" content="0; url=https://google.co.uk"><meta http-equiv="re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49716	54.77.133.128	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-11 19:36:29 UTC	626	OUT	GET /images/nj_logo.gif HTTP/1.1 Host: www.netjetseurope.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-11 19:36:29 UTC	196	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Mon, 11 Dec 2023 19:36:29 GMT Content-Type: text/html Content-Length: 134 Connection: close Location: https://www.netjets.com:443/
2023-12-11 19:36:29 UTC	134	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49717	23.204.76.112	443

Timestamp	Bytes transferred	Direction	Data
2023-12-11 19:36:29 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2023-12-11 19:36:29 UTC	495	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (dce/26AC) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=115903 Date: Mon, 11 Dec 2023 19:36:29 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49718	18.239.225.39	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-11 19:36:30 UTC	602	OUT	GET / HTTP/1.1 Host: www.netjets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-11 19:36:30 UTC	383	IN	HTTP/1.1 301 Moved Permanently Content-Length: 0 Connection: close Server: CloudFront Date: Mon, 11 Dec 2023 19:08:25 GMT Cache-Control: max-age=3600 Location: /en-us/ X-Cache: Hit from cloudfront Via: 1.1 e8e86a0bfba495b0c160da8db57821d4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P8 X-Amz-Cf-Id: c_9KkTlSL7xGlAqrwZ8ERDCi3LXQDKqaTgumWiFkokKDrtymmXm17g== Age: 1685

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49719	23.204.76.112	443

Timestamp	Bytes transferred	Direction	Data
2023-12-11 19:36:30 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2023-12-11 19:36:30 UTC	531	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0DZ+oYgAAAABSxwJpMgMuSLkfS640ajfFQVRBRURHRTEyMTkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=115838 Date: Mon, 11 Dec 2023 19:36:30 GMT Content-Length: 55 Connection: close X-CID: 2
2023-12-11 19:36:30 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49720	18.239.225.39	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-11 19:36:30 UTC	608	OUT	GET /en-us/ HTTP/1.1 Host: www.netjets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-11 19:36:30 UTC	1097	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 130236 Connection: close x-amz-id-2: mn+uWmFdFG2aIJ76w54p9vT7TZ+HO2Bw/kcQg5zm5vJu1OQS9rTwkd+6KXLK4CcuiufrlUImXA0= x-amz-request-id: YQ92BK2SND1P1NNZ Last-Modified: Thu, 07 Dec 2023 21:15:05 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Frame-Options: DENY Content-Security-Policy: default-src https: 'unsafe-eval' 'unsafe-inline'; object-src 'none'; img-src https: data:; worker-src blob:; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=undefined&dd-evp-origin=content-security-policy&ddsource=csp-report X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Mon, 11 Dec 2023 19:36:31 GMT Cache-Control: public, max-age=0, must-revalidate ETag: "57304ed273d8173d4f9c3428759e5ebe" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 ef7f0ce5a2e592b15a2956dcdb5832f0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P8 X-Amz-Cf-Id: dGaIdDJVAjq4-2BW1JZHyDlmnZqdVcuT7Y9rByqVYRn_NbNktPuYBw==
2023-12-11 19:36:30 UTC	16384	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 2f 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 65 6e 65 72 61 74 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 47 61 74 73 62 79 20 34 2e 32 33 2e 31 22 2f 3e 3c 6d 65 Data Ascii: <!DOCTYPE html><html lang="en-us"><head><meta charSet="utf-8"/><meta content="ie=edge" http-equiv="x-ua-compatible"/><meta content="width=device-width, initial-scale=1, shrink-to-fit=no" name="viewport"/><meta name="generator" content="Gatsby 4.23.1"/><me

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49721	104.18.2.35	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-11 19:36:31 UTC	649	OUT	GET /favicon.ico HTTP/1.1 Host: pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev/DF.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-11 19:36:31 UTC	180	IN	HTTP/1.1 404 Not Found Date: Mon, 11 Dec 2023 19:36:31 GMT Content-Type: text/html Content-Length: 27242 Connection: close Server: cloudflare CF-RAY: 83402d4d0d0409ae-MIA
2023-12-11 19:36:31 UTC	1189	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 Data Ascii: <!DOCTYPE html><html lang="en"> <head> <meta charset="UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <link rel="icon" href="https://www.cloudflare.com/favicon.ico" /> <title>Not Found</title> <sty
2023-12-11 19:36:31 UTC	1369	IN	Data Raw: 32 20 7b 0a 20 20 20 20 20 20 20 20 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 31 30 25 2c 0a 20 20 20 20 20 20 20 20 35 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 35 70 78 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 36 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 31 30 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 70 78 29 3b 0a 20 20 20 20 Data Ascii: 2 { 0% { transform: translateX(0); } 10%, 50% { transform: translateX(5px); } 60% { transform: translateX(0); } 100% { transform: translateX(0px);
2023-12-11 19:36:31 UTC	1369	IN	Data Raw: 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 20 20 20 20 3c 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 20 69 64 3d 22 66 6f 6f 74 65 72 2d 74 69 74 6c 65 22 3e 49 73 20 74 68 69 73 20 79 6f 75 72 20 62 75 63 6b 65 74 3f 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 4c 65 61 72 6e 20 68 6f 77 20 74 6f 20 65 6e 61 62 6c 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 72 32 2f 64 61 74 61 2d 61 63 63 65 73 73 2f 70 75 62 6c 69 63 2d 62 75 63 6b 65 74 73 2f 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: </p> </div> <div> <p id="footer-title">Is this your bucket?</p> <p> Learn how to enable <a href="https://developers.cloudflare.com/r2/data-access/public-buckets/"
2023-12-11 19:36:31 UTC	1369	IN	Data Raw: 6c 3d 22 23 43 35 45 42 46 35 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 3d 22 23 36 45 43 43 45 35 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 32 22 0a 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 32 34 2e 35 36 36 20 31 33 2e 32 37 37 43 31 32 31 2e 30 35 33 20 31 33 2e 32 37 37 20 31 31 38 2e 32 30 34 20 31 30 2e 34 32 38 38 20 31 31 38 2e 32 30 34 20 36 2e 39 31 35 33 34 43 31 31 38 2e 32 30 34 20 33 2e 34 30 31 39 31 20 31 32 31 2e 30 35 33 20 30 2e 35 35 33 37 31 31 20 31 32 34 2e 35 36 36 20 30 2e 35 35 33 37 31 31 43 31 32 38 2e 30 38 20 30 2e 35 35 33 37 31 31 20 31 33 30 2e 39 32 38 20 33 2e 34 30 Data Ascii: l="#C5EBF5" stroke="#6ECCE5" stroke-width="2" /> <path d="M124.566 13.277C121.053 13.277 118.204 10.4288 118.204 6.91534C118.204 3.40191 121.053 0.553711 124.566 0.553711C128.08 0.553711 130.928 3.40
2023-12-11 19:36:31 UTC	1369	IN	Data Raw: 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 35 36 2e 30 37 37 37 20 31 30 35 2e 34 30 36 4c 36 30 2e 39 37 31 32 20 31 30 36 2e 39 30 36 43 36 30 2e 39 37 31 32 20 31 30 36 2e 39 30 36 20 36 32 2e 34 37 32 20 39 38 2e 33 33 34 35 20 36 37 2e 38 33 30 34 20 39 39 2e 36 31 34 39 43 37 33 2e 31 38 38 38 20 31 30 30 2e 38 39 35 20 37 31 2e 32 35 35 39 20 31 30 38 2e 31 39 35 20 37 31 2e 32 35 35 39 20 31 30 38 2e 31 39 35 48 37 35 2e 35 34 35 39 43 37 35 2e 35 34 35 39 20 31 30 38 2e 31 39 35 20 37 38 2e 33 33 35 33 20 39 35 2e 39 36 31 31 20 36 38 2e 36 38 36 38 20 39 34 2e 30 34 34 35 43 35 39 2e 30 33 38 34 20 39 32 2e 31 32 37 38 20 35 36 2e 30 37 37 37 20 31 30 35 2e 34 30 36 20 35 36 2e 30 37 37 37 20 31 30 35 2e 34 30 36 Data Ascii: <path d="M56.0777 105.406L60.9712 106.906C60.9712 106.906 62.472 98.3345 67.8304 99.6149C73.1888 100.895 71.2559 108.195 71.2559 108.195H75.5459C75.5459 108.195 78.3353 95.9611 68.6868 94.0445C59.0384 92.1278 56.0777 105.406 56.0777 105.406
2023-12-11 19:36:31 UTC	1369	IN	Data Raw: 20 31 32 34 2e 37 31 37 20 31 30 36 2e 39 33 37 43 31 32 34 2e 30 35 38 20 31 30 36 2e 39 33 37 20 31 32 33 2e 34 30 36 20 31 30 37 2e 30 36 37 20 31 32 32 2e 37 39 38 20 31 30 37 2e 33 31 39 43 31 32 32 2e 31 38 39 20 31 30 37 2e 35 37 31 20 31 32 31 2e 36 33 36 20 31 30 37 2e 39 34 31 20 31 32 31 2e 31 37 20 31 30 38 2e 34 30 37 43 31 32 30 2e 37 30 34 20 31 30 38 2e 38 37 32 20 31 32 30 2e 33 33 35 20 31 30 39 2e 34 32 35 20 31 32 30 2e 30 38 33 20 31 31 30 2e 30 33 34 43 31 31 39 2e 38 33 31 20 31 31 30 2e 36 34 32 20 31 31 39 2e 37 30 31 20 31 31 31 2e 32 39 35 20 31 31 39 2e 37 30 31 20 31 31 31 2e 39 35 33 56 31 31 31 2e 39 35 33 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 30 30 35 35 44 43 22 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: 124.717 106.937C124.058 106.937 123.406 107.067 122.798 107.319C122.189 107.571 121.636 107.941 121.17 108.407C120.704 108.872 120.335 109.425 120.083 110.034C119.831 110.642 119.701 111.295 119.701 111.953V111.953Z" fill="#0055DC"
2023-12-11 19:36:31 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 33 39 2e 37 39 32 20 34 38 2e 39 35 31 36 43 31 33 34 2e 39 39 35 20 34 38 2e 39 35 31 36 20 31 33 31 2e 31 30 36 20 34 35 2e 30 36 32 37 20 31 33 31 2e 31 30 36 20 34 30 2e 32 36 35 36 43 31 33 31 2e 31 30 36 20 33 35 2e 34 36 38 34 20 31 33 34 2e 39 39 35 20 33 31 2e 35 37 39 35 20 31 33 39 2e 37 39 32 20 33 31 2e 35 37 39 35 43 31 34 34 2e 35 38 39 20 33 31 2e 35 37 39 35 20 31 34 38 2e 34 37 38 20 33 35 2e 34 36 38 34 20 31 34 38 2e 34 37 38 20 34 30 2e 32 36 35 36 43 31 34 38 2e 34 37 38 20 34 35 2e 30 36 32 37 20 31 34 34 2e 35 38 39 20 34 38 2e 39 35 31 36 20 31 33 39 2e 37 39 32 20 34 38 2e 39 35 31 36 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 0a 20 20 20 20 Data Ascii: d="M139.792 48.9516C134.995 48.9516 131.106 45.0627 131.106 40.2656C131.106 35.4684 134.995 31.5795 139.792 31.5795C144.589 31.5795 148.478 35.4684 148.478 40.2656C148.478 45.0627 144.589 48.9516 139.792 48.9516Z" fill="white"
2023-12-11 19:36:31 UTC	1369	IN	Data Raw: 37 34 20 31 31 30 2e 33 35 37 20 34 34 2e 35 31 31 38 20 31 31 31 2e 34 37 32 20 34 34 2e 35 31 33 39 43 31 31 32 2e 35 38 38 20 34 34 2e 35 31 33 39 20 31 31 33 2e 36 35 38 20 34 34 2e 30 37 30 36 20 31 31 34 2e 34 34 37 20 34 33 2e 32 38 31 33 43 31 31 35 2e 32 33 37 20 34 32 2e 34 39 32 31 20 31 31 35 2e 36 38 20 34 31 2e 34 32 31 36 20 31 31 35 2e 36 38 20 34 30 2e 33 30 35 35 43 31 31 35 2e 36 37 38 20 33 39 2e 31 39 30 37 20 31 31 35 2e 32 33 34 20 33 38 2e 31 32 32 34 20 31 31 34 2e 34 34 35 20 33 37 2e 33 33 34 39 43 31 31 33 2e 36 35 36 20 33 36 2e 35 34 37 34 20 31 31 32 2e 35 38 36 20 33 36 2e 31 30 35 32 20 31 31 31 2e 34 37 32 20 33 36 2e 31 30 35 32 43 31 31 30 2e 33 35 38 20 33 36 2e 31 30 37 33 20 31 30 39 2e 32 39 31 20 33 36 2e 35 35 30 Data Ascii: 74 110.357 44.5118 111.472 44.5139C112.588 44.5139 113.658 44.0706 114.447 43.2813C115.237 42.4921 115.68 41.4216 115.68 40.3055C115.678 39.1907 115.234 38.1224 114.445 37.3349C113.656 36.5474 112.586 36.1052 111.472 36.1052C110.358 36.1073 109.291 36.550
2023-12-11 19:36:31 UTC	1369	IN	Data Raw: 20 31 35 32 2e 36 34 31 20 31 32 37 2e 35 35 32 20 31 34 38 2e 32 34 39 20 31 32 37 2e 35 35 32 20 31 34 32 2e 38 33 31 43 31 32 37 2e 35 35 32 20 31 33 37 2e 34 31 32 20 31 33 31 2e 38 31 38 20 31 33 33 2e 30 32 20 31 33 37 2e 30 38 31 20 31 33 33 2e 30 32 43 31 34 32 2e 33 34 34 20 31 33 33 2e 30 32 20 31 34 36 2e 36 31 31 20 31 33 37 2e 34 31 32 20 31 34 36 2e 36 31 31 20 31 34 32 2e 38 33 31 43 31 34 36 2e 36 31 31 20 31 34 38 2e 32 34 39 20 31 34 32 2e 33 34 34 20 31 35 32 2e 36 34 31 20 31 33 37 2e 30 38 31 20 31 35 32 2e 36 34 31 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 43 35 45 42 46 35 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 67 Data Ascii: 152.641 127.552 148.249 127.552 142.831C127.552 137.412 131.818 133.02 137.081 133.02C142.344 133.02 146.611 137.412 146.611 142.831C146.611 148.249 142.344 152.641 137.081 152.641Z" fill="#C5EBF5" /> </g> <g
2023-12-11 19:36:31 UTC	1369	IN	Data Raw: 36 2e 37 36 35 56 39 35 2e 32 34 33 37 48 31 30 33 2e 32 35 32 56 37 31 2e 31 39 32 39 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 36 45 43 43 45 35 22 0a 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 33 37 2e 30 38 37 20 37 35 2e 36 33 35 48 31 34 32 2e 31 37 37 56 37 39 2e 37 33 37 39 48 31 33 37 2e 30 38 37 56 37 35 2e 36 33 35 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 30 30 35 35 44 43 22 0a 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 32 39 2e 38 35 32 20 37 35 2e 36 33 35 48 31 33 34 2e 39 33 34 56 37 39 2e 37 33 37 39 48 Data Ascii: 6.765V95.2437H103.252V71.1929Z" fill="#6ECCE5" /> <path d="M137.087 75.635H142.177V79.7379H137.087V75.635Z" fill="#0055DC" /> <path d="M129.852 75.635H134.934V79.7379H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49724	18.239.225.76	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-11 19:36:31 UTC	345	OUT	GET /en-us/ HTTP/1.1 Host: www.netjets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-11 19:36:32 UTC	1097	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 130236 Connection: close x-amz-id-2: mn+uWmFdFG2aIJ76w54p9vT7TZ+HO2Bw/kcQg5zm5vJu1OQS9rTwkd+6KXLK4CcuiufrlUImXA0= x-amz-request-id: YQ92BK2SND1P1NNZ Last-Modified: Thu, 07 Dec 2023 21:15:05 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Frame-Options: DENY Content-Security-Policy: default-src https: 'unsafe-eval' 'unsafe-inline'; object-src 'none'; img-src https: data:; worker-src blob:; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=undefined&dd-evp-origin=content-security-policy&ddsource=csp-report X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Mon, 11 Dec 2023 19:36:32 GMT Cache-Control: public, max-age=0, must-revalidate ETag: "57304ed273d8173d4f9c3428759e5ebe" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 e763a229a66d7c303966816658a2f986.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P8 X-Amz-Cf-Id: Sn5sA5Qr9i1qtYt36zZDtogBythkKMo77P52skCHsor4DqCXGuWKcg==
2023-12-11 19:36:32 UTC	16384	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 2f 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 65 6e 65 72 61 74 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 47 61 74 73 62 79 20 34 2e 32 33 2e 31 22 2f 3e 3c 6d 65 Data Ascii: <!DOCTYPE html><html lang="en-us"><head><meta charSet="utf-8"/><meta content="ie=edge" http-equiv="x-ua-compatible"/><meta content="width=device-width, initial-scale=1, shrink-to-fit=no" name="viewport"/><meta name="generator" content="Gatsby 4.23.1"/><me
2023-12-11 19:36:32 UTC	1514	IN	Data Raw: 6e 74 61 69 6e 65 72 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 39 30 64 65 67 2c 76 61 72 28 2d 2d 6e 6a 2d 63 6f 6c 6f 72 73 2d 77 68 69 74 65 29 20 33 39 35 2e 38 34 34 70 78 2c 74 72 61 6e 73 70 61 72 65 6e 74 20 35 35 35 2e 38 34 34 70 78 29 3b 2d 2d 6e 6a 2d 68 65 69 67 68 74 73 2d 63 74 61 42 75 74 74 6f 6e 3a 33 36 70 78 3b 2d 2d 6e 6a 2d 68 65 69 67 68 74 73 2d 68 65 61 64 65 72 48 65 69 67 68 74 4d 6f 62 69 6c 65 3a 37 30 70 78 3b 2d 2d 6e 6a 2d 6c 65 74 74 65 72 53 70 61 63 69 6e 67 2d 74 68 69 6e 3a 30 2e 30 33 31 32 35 72 65 6d 3b 2d 2d 6e 6a 2d 6c 65 74 74 65 72 53 70 61 63 69 6e 67 2d 6d 65 64 69 75 6d 3a 30 2e 30 36 32 35 72 65 6d 3b 2d 2d 6e 6a 2d 6c 65 74 74 65 72 53 70 61 63 69 6e 67 2d 6c 65 73 73 2d 77 69 64 65 3a 30 2e 30 39 Data Ascii: ntainer:linear-gradient(90deg,var(--nj-colors-white) 395.844px,transparent 555.844px);--nj-heights-ctaButton:36px;--nj-heights-headerHeightMobile:70px;--nj-letterSpacing-thin:0.03125rem;--nj-letterSpacing-medium:0.0625rem;--nj-letterSpacing-less-wide:0.09
2023-12-11 19:36:32 UTC	16384	IN	Data Raw: 75 74 6f 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 7d 2f 2a 21 73 63 2a 2f 0a 62 6c 6f 63 6b 71 75 6f 74 65 3a 6c 61 6e 67 28 72 75 29 2c 68 31 3a 6e 6f 74 28 3a 6c 61 6e 67 28 65 6e 29 29 2c 68 32 3a 6e 6f 74 28 3a 6c 61 6e 67 28 65 6e 29 29 7b 2d 77 65 62 6b 69 74 2d 68 79 70 68 65 6e 73 3a 61 75 74 6f 3b 2d 6d 6f 7a 2d 68 79 70 68 65 6e 73 3a 61 75 74 6f 3b 2d 6d 73 2d 68 79 70 68 65 6e 73 3a 61 75 74 6f 3b 68 79 70 68 65 6e 73 3a 61 75 74 6f 3b 7d 2f 2a 21 73 63 2a 2f 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 34 38 65 6d 29 7b 62 6c 6f 63 6b 71 75 6f 74 65 3a 6c 61 6e 67 28 72 75 29 2c 68 31 3a 6e 6f 74 28 3a 6c 61 6e 67 28 65 6e 29 29 2c 68 32 3a 6e 6f 74 28 3a 6c 61 6e 67 28 65 6e 29 29 7b 2d 77 65 62 6b 69 74 2d 68 79 70 68 Data Ascii: uto;text-align:left;}/!sc/blockquote:lang(ru),h1:not(:lang(en)),h2:not(:lang(en)){-webkit-hyphens:auto;-moz-hyphens:auto;-ms-hyphens:auto;hyphens:auto;}/!sc/@media (min-width:48em){blockquote:lang(ru),h1:not(:lang(en)),h2:not(:lang(en)){-webkit-hyph
2023-12-11 19:36:32 UTC	16384	IN	Data Raw: 7b 2e 66 51 4c 63 47 55 3a 3a 61 66 74 65 72 7b 6c 65 66 74 3a 2d 32 70 78 3b 72 69 67 68 74 3a 30 3b 7d 7d 2f 2a 21 73 63 2a 2f 0a 64 61 74 61 2d 73 74 79 6c 65 64 2e 67 38 30 5b 69 64 3d 22 69 6e 64 65 78 73 74 79 6c 65 64 5f 5f 50 72 69 6d 61 72 79 4e 75 6d 62 65 72 57 72 61 70 70 65 72 2d 73 63 2d 31 79 6b 62 66 70 6c 2d 34 22 5d 7b 63 6f 6e 74 65 6e 74 3a 22 66 51 4c 63 47 55 2c 22 7d 2f 2a 21 73 63 2a 2f 0a 2e 65 69 43 58 71 59 7b 6c 65 66 74 3a 38 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 70 61 64 64 69 6e 67 3a 30 20 35 70 78 20 30 20 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 38 33 25 3b 7a 2d 69 6e 64 65 78 3a 2d 31 3b 7d 2f 2a 21 73 63 2a 2f 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 34 38 65 Data Ascii: {.fQLcGU::after{left:-2px;right:0;}}/!sc/data-styled.g80[id="indexstyled__PrimaryNumberWrapper-sc-1ykbfpl-4"]{content:"fQLcGU,"}/!sc/.eiCXqY{left:8%;margin-top:0;padding:0 5px 0 0;position:relative;width:83%;z-index:-1;}/!sc/@media (min-width:48e
2023-12-11 19:36:32 UTC	16384	IN	Data Raw: 74 53 69 7a 65 73 2d 32 30 70 78 29 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 20 33 30 70 78 20 31 35 70 78 20 34 30 70 78 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 3b 7d 2f 2a 21 73 63 2a 2f 0a 2e 63 49 54 79 73 47 2e 73 6d 61 6c 6c 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 6e 6f 6e 65 3b 7d 2f 2a 21 73 63 2a 2f 0a 2e 63 49 54 79 73 47 2e 6d 65 64 69 75 6d 7b 70 61 64 64 69 6e 67 3a 31 35 70 78 20 31 30 25 3b 77 69 64 74 68 3a 31 30 30 25 3b 7d 2f 2a 21 73 63 2a 2f 0a 2e 63 49 54 79 73 47 2e 6d 65 64 69 75 6d 2c 2e 63 49 54 79 73 47 2e 6c 61 72 67 65 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 6a 75 73 74 69 66 79 3b 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 Data Ascii: tSizes-20px);padding:15px 30px 15px 40px;text-transform:uppercase;}/!sc/.cITysG.small{border-bottom:none;}/!sc/.cITysG.medium{padding:15px 10%;width:100%;}/!sc/.cITysG.medium,.cITysG.large{-webkit-box-pack:justify;-webkit-justify-content:space-be
2023-12-11 19:36:32 UTC	10463	IN	Data Raw: 74 69 64 3d 22 69 6e 74 65 72 6e 61 6c 2d 6c 69 6e 6b 22 20 68 72 65 66 3d 22 2f 65 6e 2d 75 73 2f 22 3e 3c 73 76 67 20 63 6c 61 73 73 3d 22 4c 6f 67 6f 5f 5f 5f 53 74 79 6c 65 64 53 76 67 49 63 6f 6e 2d 73 63 2d 65 7a 73 70 6c 79 2d 30 20 65 68 55 72 44 52 20 69 6e 64 65 78 73 74 79 6c 65 64 5f 5f 4c 6f 67 6f 2d 73 63 2d 31 30 34 31 6f 6a 6c 2d 33 20 63 6a 70 68 44 6c 22 20 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 3d 22 69 63 6f 6e 5f 32 38 32 36 38 22 20 72 6f 6c 65 3d 22 69 6d 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 34 36 2e 31 38 20 31 32 38 2e 30 39 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 74 69 74 6c 65 20 69 64 3d 22 69 63 6f 6e 5f 32 38 32 36 38 22 3e 4e 65 74 Data Ascii: tid="internal-link" href="/en-us/"><svg class="Logo___StyledSvgIcon-sc-ezsply-0 ehUrDR indexstyled__Logo-sc-1041ojl-3 cjphDl" aria-labelledby="icon_28268" role="img" viewBox="0 0 646.18 128.09" xmlns="http://www.w3.org/2000/svg"><title id="icon_28268">Net
2023-12-11 19:36:32 UTC	16384	IN	Data Raw: 73 74 79 6c 65 64 5f 5f 53 75 62 4c 69 6e 6b 73 41 72 65 61 2d 73 63 2d 35 63 30 61 78 69 2d 35 20 66 4e 76 65 6b 48 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 64 65 78 73 74 79 6c 65 64 5f 5f 4c 69 6e 6b 57 72 61 70 70 65 72 2d 73 63 2d 72 61 6b 35 37 74 2d 30 20 63 49 54 79 73 47 20 45 78 70 61 6e 64 69 6e 67 4d 65 6e 75 4c 69 6e 6b 5f 5f 5f 53 74 79 6c 65 64 4d 65 6e 75 4c 69 6e 6b 2d 73 63 2d 31 76 67 30 76 6f 79 2d 34 20 64 68 56 63 6b 71 20 73 6d 61 6c 6c 22 20 64 61 74 61 2d 74 65 73 74 69 64 3d 22 6d 65 6e 75 2d 6c 69 6e 6b 22 3e 3c 61 20 63 6c 61 73 73 3d 22 53 69 74 65 4c 69 6e 6b 5f 5f 5f 53 74 79 6c 65 64 4c 69 6e 6b 2d 73 63 2d 31 6b 61 7a 68 33 75 2d 31 20 64 70 6f 4a 66 41 20 69 6e 64 65 78 73 74 79 6c 65 64 5f 5f 53 74 79 6c 65 64 4c Data Ascii: styled__SubLinksArea-sc-5c0axi-5 fNvekH"><div class="indexstyled__LinkWrapper-sc-rak57t-0 cITysG ExpandingMenuLink___StyledMenuLink-sc-1vg0voy-4 dhVckq small" data-testid="menu-link"><a class="SiteLink___StyledLink-sc-1kazh3u-1 dpoJfA indexstyled__StyledL
2023-12-11 19:36:32 UTC	4542	IN	Data Raw: 61 72 64 69 65 72 2f 72 65 6e 64 65 72 69 6e 67 73 2f 62 6f 6d 62 61 72 64 69 65 72 2d 67 6c 6f 62 61 6c 2d 37 35 30 30 2d 32 78 2d 77 65 62 2e 70 6e 67 2d 31 30 30 34 38 35 33 30 31 2d 76 31 2e 70 6e 67 22 20 63 6c 61 73 73 3d 22 53 75 62 4c 69 6e 6b 57 69 74 68 49 6d 61 67 65 5f 5f 5f 53 74 79 6c 65 64 44 69 76 2d 73 63 2d 31 79 66 7a 73 70 73 2d 31 20 65 4a 4d 54 4b 55 22 3e 3c 2f 64 69 76 3e 3c 2f 62 75 74 74 6f 6e 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 64 65 78 73 74 79 6c 65 64 5f 5f 4c 69 6e 6b 57 72 61 70 70 65 72 2d 73 63 2d 35 63 30 61 78 69 2d 30 20 68 41 74 63 73 50 20 6e 65 73 74 65 64 22 20 64 61 74 61 2d 74 65 73 74 69 64 3d 22 65 78 70 61 6e 64 69 6e 67 2d 6d 65 6e 75 2d 6c 69 6e 6b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 45 78 70 Data Ascii: ardier/renderings/bombardier-global-7500-2x-web.png-100485301-v1.png" class="SubLinkWithImage___StyledDiv-sc-1yfzsps-1 eJMTKU"></div></button><div class="indexstyled__LinkWrapper-sc-5c0axi-0 hAtcsP nested" data-testid="expanding-menu-link"><div class="Exp
2023-12-11 19:36:32 UTC	16384	IN	Data Raw: 77 2d 73 63 2d 72 61 6b 35 37 74 2d 33 20 63 67 62 4e 69 55 20 73 6d 61 6c 6c 22 20 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 3d 22 69 63 6f 6e 5f 32 38 33 30 37 22 20 72 6f 6c 65 3d 22 69 6d 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 2e 38 20 32 32 2e 37 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 74 69 74 6c 65 20 69 64 3d 22 69 63 6f 6e 5f 32 38 33 30 37 22 3e 43 68 65 76 72 6f 6e 20 52 69 67 68 74 20 49 63 6f 6e 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 31 20 32 31 2e 39 6c 31 31 2d 31 31 2e 31 4d 31 20 2e 38 6c 31 31 20 31 31 22 3e 3c 2f 70 61 74 68 3e 3c 2f 73 76 67 3e 3c 2f 61 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 62 75 74 74 6f 6e Data Ascii: w-sc-rak57t-3 cgbNiU small" aria-labelledby="icon_28307" role="img" viewBox="0 0 12.8 22.7" xmlns="http://www.w3.org/2000/svg"><title id="icon_28307">Chevron Right Icon</title><path d="M1 21.9l11-11.1M1 .8l11 11"></path></svg></a></div></div></div><button
2023-12-11 19:36:32 UTC	15413	IN	Data Raw: 3d 22 69 6e 64 65 78 73 74 79 6c 65 64 5f 5f 53 75 62 4d 65 6e 75 52 6f 77 2d 73 63 2d 6f 32 6d 38 32 67 2d 31 20 6b 71 6d 66 67 54 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 64 65 78 73 74 79 6c 65 64 5f 5f 4c 69 6e 6b 57 72 61 70 70 65 72 2d 73 63 2d 72 61 6b 35 37 74 2d 30 20 63 49 54 79 73 47 20 4d 6f 62 69 6c 65 4d 65 6e 75 5f 5f 5f 53 74 79 6c 65 64 4d 65 6e 75 4c 69 6e 6b 2d 73 63 2d 66 32 66 74 78 66 2d 30 20 67 41 5a 5a 71 4b 20 6d 65 64 69 75 6d 22 20 64 61 74 61 2d 74 65 73 74 69 64 3d 22 6d 65 6e 75 2d 6c 69 6e 6b 22 3e 3c 61 20 63 6c 61 73 73 3d 22 53 69 74 65 4c 69 6e 6b 5f 5f 5f 53 74 79 6c 65 64 4c 69 6e 6b 2d 73 63 2d 31 6b 61 7a 68 33 75 2d 31 20 64 70 6f 4a 66 41 20 69 6e 64 65 78 73 74 79 6c 65 64 5f 5f 53 74 79 6c 65 64 4c 69 6e Data Ascii: ="indexstyled__SubMenuRow-sc-o2m82g-1 kqmfgT"><div class="indexstyled__LinkWrapper-sc-rak57t-0 cITysG MobileMenu___StyledMenuLink-sc-f2ftxf-0 gAZZqK medium" data-testid="menu-link"><a class="SiteLink___StyledLink-sc-1kazh3u-1 dpoJfA indexstyled__StyledLin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49723	194.26.192.93	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-11 19:36:31 UTC	720	OUT	GET /?uoxpeyml HTTP/1.1 Host: yellowtelecomms.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-11 19:36:32 UTC	420	IN	HTTP/1.1 302 Found Set-Cookie: qPdM=o8OUT2nE99vA; path=/; samesite=none; secure; httponly Set-Cookie: qPdM.sig=KPdyJLDBGV15EhhYnTw73_wFm58; path=/; samesite=none; secure; httponly location: /?uoxpeyml=977a77ae68353043b6c9ae912e4a6fdb66e2439ecbf1df63c640f03fdb45bf44ef112d5670400082ce517e3c0b918a2015690385259e60e9efacb3f33a9fc0c3 Date: Mon, 11 Dec 2023 19:36:32 GMT Connection: close Transfer-Encoding: chunked
2023-12-11 19:36:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49722	194.26.192.93	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-11 19:36:32 UTC	914	OUT	GET /?uoxpeyml=977a77ae68353043b6c9ae912e4a6fdb66e2439ecbf1df63c640f03fdb45bf44ef112d5670400082ce517e3c0b918a2015690385259e60e9efacb3f33a9fc0c3 HTTP/1.1 Host: yellowtelecomms.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://pub-d3b8779b6cea4c6da93cad6c6b20f620.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=o8OUT2nE99vA; qPdM.sig=KPdyJLDBGV15EhhYnTw73_wFm58
2023-12-11 19:36:32 UTC	142	IN	HTTP/1.1 200 OK Content-Type: text/html;charset=UTF-8 Date: Mon, 11 Dec 2023 19:36:32 GMT Connection: close Transfer-Encoding: chunked
2023-12-11 19:36:32 UTC	3272	IN	Data Raw: 63 62 63 0d 0a 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 2d 55 53 3e 3c 68 65 61 64 3e 20 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 64 65 66 65 72 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 74 75 72 6e 73 74 69 6c 65 2f 76 30 2f 61 70 69 2e 6a 73 3f 6f 6e 6c 6f 61 64 3d 6f 6e 6c 6f 61 64 54 75 72 6e 73 74 69 6c 65 43 61 6c 6c 62 61 63 6b 22 3e 0a 3c 2f 73 63 72 69 70 74 3e 20 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 6e 61 6d 65 3d Data Ascii: cbc<!doctype html><html lang=en-US><head> <script async defer src="https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback"></script> <title>Just a moment...</title> <meta content="width=device-width,initial-scale=1" name=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49725	104.17.2.184	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-11 19:36:35 UTC	578	OUT	GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://yellowtelecomms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-11 19:36:35 UTC	351	IN	HTTP/1.1 302 Found Date: Mon, 11 Dec 2023 19:36:35 GMT Transfer-Encoding: chunked Connection: close cache-control: max-age=300, public access-control-allow-origin: * vary: accept-encoding location: /turnstile/v0/b/56d3063b/api.js?onload=onloadTurnstileCallback Server: cloudflare CF-RAY: 83402d688d72097d-MIA alt-svc: h3=":443"; ma=86400
2023-12-11 19:36:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49726	104.17.2.184	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-11 19:36:36 UTC	589	OUT	GET /turnstile/v0/b/56d3063b/api.js?onload=onloadTurnstileCallback HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://yellowtelecomms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-11 19:36:36 UTC	296	IN	HTTP/1.1 200 OK Date: Mon, 11 Dec 2023 19:36:36 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 33876 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Server: cloudflare CF-RAY: 83402d6bf8e0da9f-MIA alt-svc: h3=":443"; ma=86400
2023-12-11 19:36:36 UTC	1073	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 5a 65 28 65 2c 6e 2c 63 2c 75 2c 6c 2c 5f 2c 6d 29 7b 74 72 79 7b 76 61 72 20 73 3d 65 5b 5f 5d 28 6d 29 2c 64 3d 73 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 67 29 7b 63 28 67 29 3b 72 65 74 75 72 6e 7d 73 2e 64 6f 6e 65 3f 6e 28 64 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 64 29 2e 74 68 65 6e 28 75 2c 6c 29 7d 66 75 6e 63 74 69 6f 6e 20 65 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 74 68 69 73 2c 63 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 75 2c 6c 29 7b 76 61 72 20 5f 3d 65 2e 61 70 70 6c 79 28 6e 2c 63 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ze(e,n,c,u,l,_,m){try{var s=e[_](m),d=s.value}catch(g){c(g);return}s.done?n(d):Promise.resolve(d).then(u,l)}function et(e){return function(){var n=this,c=arguments;return new Promise(function(u,l){var _=e.apply(n,c);funct
2023-12-11 19:36:36 UTC	1369	IN	Data Raw: 21 31 2c 6d 2c 73 3b 74 72 79 7b 66 6f 72 28 63 3d 63 2e 63 61 6c 6c 28 65 29 3b 21 28 6c 3d 28 6d 3d 63 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 75 2e 70 75 73 68 28 6d 2e 76 61 6c 75 65 29 2c 21 28 6e 26 26 75 2e 6c 65 6e 67 74 68 3d 3d 3d 6e 29 29 3b 6c 3d 21 30 29 3b 7d 63 61 74 63 68 28 64 29 7b 5f 3d 21 30 2c 73 3d 64 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 21 6c 26 26 63 2e 72 65 74 75 72 6e 21 3d 6e 75 6c 6c 26 26 63 2e 72 65 74 75 72 6e 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 5f 29 74 68 72 6f 77 20 73 7d 7d 72 65 74 75 72 6e 20 75 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e Data Ascii: !1,m,s;try{for(c=c.call(e);!(l=(m=c.next()).done)&&(u.push(m.value),!(n&&u.length===n));l=!0);}catch(d){_=!0,s=d}finally{try{!l&&c.return!=null&&c.return()}finally{if(_)throw s}}return u}}function nt(){throw new TypeError("Invalid attempt to destructure n
2023-12-11 19:36:36 UTC	1369	IN	Data Raw: 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 20 37 3a 76 3d 6c 2e 6f 70 73 2e 70 6f 70 28 29 2c 6c 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 3b 64 65 66 61 75 6c 74 3a 69 66 28 73 3d 6c 2e 74 72 79 73 2c 21 28 73 3d 73 2e 6c 65 6e 67 74 68 3e 30 26 26 73 5b 73 2e 6c 65 6e 67 74 68 2d 31 5d 29 26 26 28 76 5b 30 5d 3d 3d 3d 36 7c 7c 76 5b 30 5d 3d 3d 3d 32 29 29 7b 6c 3d 30 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 76 5b 30 5d 3d 3d 3d 33 26 26 28 21 73 7c 7c 76 5b 31 5d 3e 73 5b 30 5d 26 26 76 5b 31 5d 3c 73 5b 33 5d 29 29 7b 6c 2e 6c 61 62 65 6c 3d 76 5b 31 5d 3b 62 72 65 61 6b 7d 69 66 28 76 5b 30 5d 3d 3d 3d 36 26 26 6c 2e 6c 61 62 65 6c 3c 73 5b 31 5d 29 7b 6c 2e 6c 61 62 65 6c 3d 73 5b 31 5d 2c 73 3d 76 3b 62 72 65 61 6b 7d 69 66 28 73 26 Data Ascii: ;continue;case 7:v=l.ops.pop(),l.trys.pop();continue;default:if(s=l.trys,!(s=s.length>0&&s[s.length-1])&&(v[0]===6\|\|v[0]===2)){l=0;continue}if(v[0]===3&&(!s\|\|v[1]>s[0]&&v[1]<s[3])){l.label=v[1];break}if(v[0]===6&&l.label<s[1]){l.label=s[1],s=v;break}if(s&
2023-12-11 19:36:36 UTC	1369	IN	Data Raw: 63 75 74 65 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 55 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 5f 46 41 49 4c 53 3d 22 61 6c 77 61 79 73 2d 66 61 69 6c 73 22 2c 65 2e 53 4f 4d 45 54 49 4d 45 53 5f 46 41 49 4c 53 3d 22 73 6f 6d 65 74 69 6d 65 73 2d 66 61 69 6c 73 22 2c 65 2e 54 4f 4f 5f 53 4c 4f 57 3d 22 74 6f 6f 2d 73 6c 6f 77 22 2c 65 2e 4f 54 48 45 52 3d 22 6f 74 68 65 72 22 7d 29 28 55 65 7c 7c 28 55 65 3d 7b 7d 29 29 3b 66 75 6e 63 74 69 6f 6e 20 4d 65 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 75 74 6f 22 2c 22 64 61 72 6b 22 2c 22 6c 69 67 68 74 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 57 65 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 75 74 6f 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 Data Ascii: cute"})(Q\|\|(Q={}));var Ue;(function(e){e.ALWAYS_FAILS="always-fails",e.SOMETIMES_FAILS="sometimes-fails",e.TOO_SLOW="too-slow",e.OTHER="other"})(Ue\|\|(Ue={}));function Me(e){return M(["auto","dark","light"],e)}function We(e){return M(["auto","never"],e)}fu
2023-12-11 19:36:36 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 75 2c 6c 29 7b 72 65 74 75 72 6e 20 75 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 6c 2c 75 7d 2c 71 28 65 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 2c 6e 29 7b 69 66 28 74 79 70 65 6f 66 20 6e 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 6e 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 26 26 6e 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 Data Ascii: function(u,l){return u.__proto__=l,u},q(e,n)}function yt(e,n){if(typeof n!="function"&&n!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(n&&n.prototype,{constructor:{value:e,writable:!0,configurab
2023-12-11 19:36:36 UTC	1369	IN	Data Raw: 6c 2c 75 29 7d 2c 77 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 26 26 28 6b 28 6e 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 6e 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 6e 3a 62 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 78 74 28 65 29 7b 76 61 72 20 6e 3d 45 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 75 3d 4a 28 65 29 2c 6c 3b 69 66 28 6e 29 7b 76 61 72 20 5f 3d 4a 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 6c 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 75 2c 61 72 67 75 6d 65 6e 74 73 2c 5f 29 7d 65 6c 73 65 20 6c 3d 75 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 67 74 28 74 68 69 Data Ascii: l,u)},we(e)}function gt(e,n){return n&&(k(n)==="object"\|\|typeof n=="function")?n:be(e)}function xt(e){var n=Ee();return function(){var u=J(e),l;if(n){var _=J(this).constructor;l=Reflect.construct(u,arguments,_)}else l=u.apply(this,arguments);return gt(thi
2023-12-11 19:36:36 UTC	1369	IN	Data Raw: 6e 74 69 6e 75 65 7d 69 66 28 28 64 2e 69 73 45 78 65 63 75 74 69 6e 67 7c 7c 21 64 2e 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 7c 7c 64 2e 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 26 26 21 64 2e 69 73 53 74 61 6c 65 26 26 21 64 2e 69 73 45 78 65 63 75 74 65 64 29 26 26 64 2e 77 61 74 63 68 63 61 74 2e 6c 61 73 74 41 63 6b 65 64 53 65 71 21 3d 3d 30 26 26 64 2e 77 61 74 63 68 63 61 74 2e 6c 61 73 74 41 63 6b 65 64 53 65 71 3c 64 2e 77 61 74 63 68 63 61 74 2e 73 65 71 2d 31 2d 56 74 29 7b 64 2e 77 61 74 63 68 63 61 74 2e 6c 61 73 74 41 63 6b 65 64 53 65 71 3d 30 2c 64 2e 77 61 74 63 68 63 61 74 2e 73 65 71 3d 30 2c 64 2e 69 73 45 78 65 63 75 74 69 6e 67 3d 21 31 2c 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 54 75 72 6e 73 74 69 6c 65 20 57 69 64 67 65 74 20 73 65 Data Ascii: ntinue}if((d.isExecuting\|\|!d.isInitialized\|\|d.isInitialized&&!d.isStale&&!d.isExecuted)&&d.watchcat.lastAckedSeq!==0&&d.watchcat.lastAckedSeq<d.watchcat.seq-1-Vt){d.watchcat.lastAckedSeq=0,d.watchcat.seq=0,d.isExecuting=!1,console.log("Turnstile Widget se
2023-12-11 19:36:36 UTC	1369	IN	Data Raw: 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 73 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 66 65 65 64 62 61 63 6b 22 2c 73 2e 69 64 3d 22 63 66 2d 66 72 2d 69 64 22 2c 73 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 43 6f 6c 6f 72 3d 22 23 30 30 30 30 30 30 22 2c 73 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 34 35 30 70 78 22 2c 73 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 33 34 30 70 78 22 2c 73 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 61 62 73 6f 6c 75 74 65 22 2c 73 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 32 30 22 2c 73 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 57 69 64 74 68 3d 22 31 70 78 22 2c 73 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 43 6f 6c 6f 72 3d 22 23 30 30 30 22 2c 73 2e 73 74 79 Data Ascii: ement("div");s.className="cf-turnstile-feedback",s.id="cf-fr-id",s.style.borderColor="#000000",s.style.width="450px",s.style.height="340px",s.style.position="absolute",s.style.zIndex="21474836420",s.style.borderWidth="1px",s.style.borderColor="#000",s.sty
2023-12-11 19:36:36 UTC	1369	IN	Data Raw: 63 78 22 2c 22 31 32 22 29 2c 76 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 66 69 6c 6c 22 2c 22 23 61 61 61 61 61 61 22 29 2c 76 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 72 6f 6b 65 2d 77 69 64 74 68 22 2c 22 30 22 29 2c 67 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 76 29 3b 76 61 72 20 45 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 28 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 2c 22 6c 69 6e 65 22 29 3b 45 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 72 6f 6b 65 2d 77 69 64 74 68 22 2c 22 33 22 29 2c 45 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 72 6f 6b 65 22 2c 22 23 66 66 66 22 29 2c 45 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 66 69 6c 6c 22 2c 22 6e 6f Data Ascii: cx","12"),v.setAttribute("fill","#aaaaaa"),v.setAttribute("stroke-width","0"),g.appendChild(v);var E=document.createElementNS("http://www.w3.org/2000/svg","line");E.setAttribute("stroke-width","3"),E.setAttribute("stroke","#fff"),E.setAttribute("fill","no
2023-12-11 19:36:36 UTC	1369	IN	Data Raw: 27 2e 63 6f 6e 63 61 74 28 57 2e 43 4f 4d 50 41 43 54 2c 27 22 20 6f 72 20 22 27 29 2e 63 6f 6e 63 61 74 28 57 2e 4e 4f 52 4d 41 4c 2c 27 22 2c 20 67 6f 74 20 22 27 29 2e 63 6f 6e 63 61 74 28 6c 2c 27 22 27 29 2c 32 38 31 37 29 3b 63 61 73 65 20 57 2e 4e 4f 52 4d 41 4c 3a 65 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 33 30 30 70 78 22 2c 65 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 36 35 70 78 22 3b 62 72 65 61 6b 7d 62 72 65 61 6b 3b 63 61 73 65 20 4e 2e 49 4e 56 49 53 49 42 4c 45 3a 65 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 30 22 2c 65 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 30 22 2c 65 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 61 62 73 6f 6c 75 74 65 22 2c 65 2e 73 74 79 6c 65 2e 76 69 73 69 62 69 6c 69 74 79 3d 22 68 69 64 64 65 6e Data Ascii: '.concat(W.COMPACT,'" or "').concat(W.NORMAL,'", got "').concat(l,'"'),2817);case W.NORMAL:e.style.width="300px",e.style.height="65px";break}break;case N.INVISIBLE:e.style.width="0",e.style.height="0",e.style.position="absolute",e.style.visibility="hidden

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49727	104.17.3.184	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-11 19:36:36 UTC	792	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/ieoqc/0x4AAAAAAAOK1kuLGSjPsA09/auto/normal HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://yellowtelecomms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-11 19:36:37 UTC	921	IN	HTTP/1.1 200 OK Date: Mon, 11 Dec 2023 19:36:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin document-policy: js-profiling origin-agent-cluster: ?1 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() referrer-policy: same-origin Server: cloudflare CF-RAY: 83402d707b45098e-MIA alt-svc: h3=":443"; ma=86400
2023-12-11 19:36:37 UTC	448	IN	Data Raw: 37 63 31 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c Data Ascii: 7c19<!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scal
2023-12-11 19:36:37 UTC	1369	IN	Data Raw: 3c 73 74 79 6c 65 3e 40 6b 65 79 66 72 61 6d 65 73 20 72 6f 74 61 74 65 20 7b 0a 20 20 31 30 30 25 20 7b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0a 20 20 7d 0a 7d 0a 40 6b 65 79 66 72 61 6d 65 73 20 73 74 72 6f 6b 65 20 7b 0a 20 20 31 30 30 25 20 7b 0a 20 20 20 20 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 20 30 3b 0a 20 20 7d 0a 7d 0a 40 6b 65 79 66 72 61 6d 65 73 20 73 63 61 6c 65 20 7b 0a 20 20 30 25 2c 20 31 30 30 25 20 7b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0a 20 20 7d 0a 20 20 35 30 25 20 7b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2c 20 31 2c 20 31 29 3b 0a 20 20 7d 0a 7d 0a 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 20 7b Data Ascii: <style>@keyframes rotate { 100% { transform: rotate(360deg); }}@keyframes stroke { 100% { stroke-dashoffset: 0; }}@keyframes scale { 0%, 100% { transform: none; } 50% { transform: scale3d(1, 1, 1); }}@keyframes fill {
2023-12-11 19:36:37 UTC	1369	IN	Data Raw: 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 0a 7d 0a 0a 70 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 38 70 78 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 30 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 7d 0a 0a 23 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 65 30 65 30 65 30 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c Data Ascii: font-size: 16px; font-weight: 700;}p { margin: 8px 0; text-align: center; font-size: 20px; font-weight: 400;}#content { display: flex; align-items: center; justify-content: space-between; border: 1px solid #e0e0e0; background-col
2023-12-11 19:36:37 UTC	1369	IN	Data Raw: 72 63 6c 65 20 7b 0a 20 20 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 20 30 3b 0a 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 32 3b 0a 20 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 20 31 30 3b 0a 20 20 73 74 72 6f 6b 65 3a 20 23 30 33 38 31 32 37 3b 0a 20 20 66 69 6c 6c 3a 20 23 30 33 38 31 32 37 3b 0a 7d 0a 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 73 75 63 63 65 73 73 2d 69 63 6f 6e 20 7b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 61 61 39 33 37 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 73 75 63 63 65 73 73 2d 69 63 6f 6e 20 2e 70 31 20 7b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 61 61 39 33 37 3b 0a 7d 0a 2e 74 68 65 6d 65 2d Data Ascii: rcle { stroke-dashoffset: 0; stroke-width: 2; stroke-miterlimit: 10; stroke: #038127; fill: #038127;}.theme-dark #success-icon { box-shadow: inset 0 0 0 #0aa937;}.theme-dark #success-icon .p1 { box-shadow: inset 0 0 0 #0aa937;}.theme-
2023-12-11 19:36:37 UTC	1369	IN	Data Raw: 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 62 62 62 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 62 62 62 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 68 6f 76 65 72 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 61 63 74 69 76 65 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 Data Ascii: #challenge-error-title a { color: #bbb;}.theme-dark #challenge-error-title a:visited, .theme-dark #challenge-error-title a:link { color: #bbb;}.theme-dark #challenge-error-title a:hover, .theme-dark #challenge-error-title a:active, .theme-dark #c
2023-12-11 19:36:37 UTC	1369	IN	Data Raw: 3a 20 23 62 62 62 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 65 78 70 69 72 65 64 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 65 78 70 69 72 65 64 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 68 6f 76 65 72 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 65 78 70 69 72 65 64 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 34 39 34 39 34 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6f 76 65 72 6c 61 79 20 7b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 66 66 61 32 39 39 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 61 32 39 39 3b 0a 7d 0a 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 Data Ascii: : #bbb;}.theme-dark #expired-refresh-link:active, .theme-dark #expired-refresh-link:hover, .theme-dark #expired-refresh-link:focus { color: #949494;}.theme-dark .overlay { border-color: #ffa299; color: #ffa299;}#challenge-error { margin: 0
2023-12-11 19:36:37 UTC	1369	IN	Data Raw: 20 77 69 64 74 68 3a 20 32 34 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 32 34 70 78 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 61 63 74 69 76 65 20 7e 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 61 63 74 69 76 65 20 7e 20 73 70 61 6e 2e 63 74 70 2d 6c 61 62 65 6c 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 63 34 Data Ascii: width: 24px; height: 24px;}.ctp-checkbox-label input:active ~ .mark { border: 2px solid #c44d0e;}.ctp-checkbox-label input:active ~ span.ctp-label { text-decoration: underline;}.ctp-checkbox-label input:focus ~ .mark { border: 2px solid #c4
2023-12-11 19:36:37 UTC	1369	IN	Data Raw: 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 31 38 70 78 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 33 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 70 78 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6c 6f 67 6f 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 Data Ascii: n-items: center; justify-content: center; height: 118px;}.size-compact .link-spacer { margin-right: 3px; margin-left: 3px;}.size-compact .ctp-checkbox-container { text-align: left;}.size-compact #logo { margin-top: 5px; margin-bottom:
2023-12-11 19:36:37 UTC	1369	IN	Data Raw: 23 73 75 63 63 65 73 73 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 32 35 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 70 78 3b 0a 7d 0a 2e 72 74 6c 20 23 66 61 69 6c 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 32 35 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 70 78 3b 0a 7d 0a 2e 72 74 6c 20 23 73 70 69 6e 6e 65 72 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 32 35 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 70 78 3b 0a 7d 0a 2e 72 74 6c 20 23 65 78 70 69 72 65 64 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 32 35 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 70 78 3b 0a 7d 0a 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 Data Ascii: #success-icon { left: 255px; margin-left: 8px;}.rtl #fail-icon { left: 255px; margin-left: 8px;}.rtl #spinner-icon { left: 255px; margin-left: 8px;}.rtl #expired-icon { left: 255px; margin-left: 8px;}.rtl #branding { margin: 0 0
2023-12-11 19:36:37 UTC	1369	IN	Data Raw: 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 30 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 38 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 7d 0a 23 74 65 72 6d 73 20 61 3a 6c 69 6e 6b 2c 20 23 74 65 72 6d 73 20 61 3a 76 69 73 69 74 65 64 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 30 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 38 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 Data Ascii: decoration: underline; line-height: 10px; color: #1d1f20; font-size: 8px; font-weight: 400; font-style: normal;}#terms a:link, #terms a:visited { text-decoration: underline; line-height: 10px; color: #1d1f20; font-size: 8px; font-wei

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49728	104.17.3.184	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-11 19:36:37 UTC	710	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=83402d707b45098e HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/ieoqc/0x4AAAAAAAOK1kuLGSjPsA09/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-11 19:36:38 UTC	335	IN	HTTP/1.1 200 OK Date: Mon, 11 Dec 2023 19:36:37 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 83402d75195202f1-MIA alt-svc: h3=":443"; ma=86400
2023-12-11 19:36:38 UTC	1034	IN	Data Raw: 37 65 36 33 0d 0a 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 7e 66 75 6e 63 74 69 6f 6e 28 69 31 2c 66 77 2c 66 78 2c 66 79 2c 66 49 2c 66 4d 2c 66 4e 2c 66 52 2c 66 53 2c 67 69 2c 67 6a 2c 67 6b 2c 67 6c 2c 67 6d 2c 67 6e 2c 67 6f 2c 67 70 2c 67 71 2c 67 72 2c 67 73 2c 67 74 2c 67 75 2c 67 76 2c 67 77 2c 67 78 2c 67 79 2c 67 7a 2c 67 41 2c 67 42 2c 67 43 2c 67 44 2c 67 45 2c 67 46 2c 67 47 2c 67 48 2c 67 49 2c 67 4a 2c 67 4b 2c 67 4c 2c 67 4d 2c 67 4e 2c 67 4f 2c 67 50 2c 67 51 2c 67 52 2c 67 53 2c 67 54 2c 67 55 2c 67 56 2c 67 57 2c 67 58 2c 67 59 2c 67 5a 2c 68 30 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 68 37 2c 68 39 2c 68 78 2c 68 43 2c 68 4c 2c 68 55 2c 68 56 2c 68 57 2c 66 50 2c 66 51 29 Data Ascii: 7e63window._cf_chl_opt.uaO=false;~function(i1,fw,fx,fy,fI,fM,fN,fR,fS,gi,gj,gk,gl,gm,gn,go,gp,gq,gr,gs,gt,gu,gv,gw,gx,gy,gz,gA,gB,gC,gD,gE,gF,gG,gH,gI,gJ,gK,gL,gM,gN,gO,gP,gQ,gR,gS,gT,gU,gV,gW,gX,gY,gZ,h0,h1,h2,h3,h4,h5,h6,h7,h9,hx,hC,hL,hU,hV,hW,fP,fQ)
2023-12-11 19:36:38 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 4d 41 53 54 61 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 3d 68 7d 2c 27 47 66 69 66 79 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 43 4e 5a 69 7a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 59 6c 5a 6f 4e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 78 54 6f 71 63 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 62 41 4b 6e 69 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 7c 69 7d 2c 27 55 4a 4e 64 76 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d Data Ascii: eturn h==i},'MASTa':function(h,i){return i!==h},'Gfify':function(h,i){return h(i)},'CNZiz':function(h,i){return h<<i},'YlZoN':function(h,i){return i==h},'xToqc':function(h,i){return h<i},'bAKni':function(h,i){return h\|i},'UJNdv':function(h,i){return h<<i}
2023-12-11 19:36:38 UTC	1369	IN	Data Raw: 35 28 31 36 39 36 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 69 35 28 34 30 33 29 5d 28 30 29 2c 73 3d 30 3b 38 3e 73 3b 48 3d 64 5b 69 35 28 31 38 37 36 29 5d 28 48 3c 3c 31 2e 36 33 2c 4d 26 31 29 2c 49 3d 3d 64 5b 69 35 28 31 36 34 30 29 5d 28 6a 2c 31 29 3f 28 49 3d 30 2c 47 5b 69 35 28 32 34 35 29 5d 28 64 5b 69 35 28 31 36 39 36 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 4d 3d 31 2c 73 3d 30 3b 73 3c 46 3b 48 3d 64 5b 69 35 28 31 36 37 38 29 5d 28 48 3c 3c 31 2e 37 34 2c 4d 29 2c 6a 2d 31 3d 3d 49 3f 28 49 3d 30 2c 47 5b 69 35 28 32 34 35 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3d 30 2c 73 2b 2b 29 3b 66 6f 72 Data Ascii: 5(1696)](o,H)),H=0):I++,s++);for(M=C[i5(403)](0),s=0;8>s;H=d[i5(1876)](H<<1.63,M&1),I==d[i5(1640)](j,1)?(I=0,G[i5(245)](d[i5(1696)](o,H)),H=0):I++,M>>=1,s++);}else{for(M=1,s=0;s<F;H=d[i5(1678)](H<<1.74,M),j-1==I?(I=0,G[i5(245)](o(H)),H=0):I++,M=0,s++);for
2023-12-11 19:36:38 UTC	1369	IN	Data Raw: 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 66 6f 72 28 3b 3b 29 69 66 28 48 3c 3c 3d 31 2c 64 5b 69 35 28 31 30 39 30 29 5d 28 49 2c 64 5b 69 35 28 32 32 39 29 5d 28 6a 2c 31 29 29 29 7b 47 5b 69 35 28 32 34 35 29 5d 28 6f 28 48 29 29 3b 62 72 65 61 6b 7d 65 6c 73 65 20 49 2b 2b 3b 72 65 74 75 72 6e 20 47 5b 69 35 28 33 32 33 29 5d 28 27 27 29 7d 2c 27 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 36 29 7b 72 65 74 75 72 6e 20 69 36 3d 69 32 2c 6e 75 6c 6c 3d 3d 68 3f 27 27 3a 64 5b 69 36 28 31 31 38 31 29 5d 28 27 27 2c 68 29 3f 6e 75 6c 6c 3a 66 2e 69 28 68 5b 69 36 28 31 37 35 36 29 5d 2c 33 32 37 36 38 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 69 37 29 7b 72 65 74 75 72 6e 20 69 37 3d 69 36 2c 68 5b 69 37 28 34 30 33 29 5d 28 Data Ascii: (H)),H=0):I++,M>>=1,s++);for(;;)if(H<<=1,d[i5(1090)](I,d[i5(229)](j,1))){G[i5(245)](o(H));break}else I++;return G[i5(323)]('')},'j':function(h,i6){return i6=i2,null==h?'':d[i6(1181)]('',h)?null:f.i(h[i6(1756)],32768,function(i,i7){return i7=i6,h[i7(403)](
2023-12-11 19:36:38 UTC	1369	IN	Data Raw: 28 31 39 31 36 29 5d 28 64 5b 69 38 28 34 36 33 29 5d 28 30 2c 4f 29 3f 31 3a 30 2c 49 29 2c 49 3c 3c 3d 31 29 3b 43 5b 45 2b 2b 5d 3d 64 5b 69 38 28 31 36 39 36 29 5d 28 65 2c 4d 29 2c 50 3d 64 5b 69 38 28 32 32 39 29 5d 28 45 2c 31 29 2c 44 2d 2d 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 4d 3d 30 2c 4e 3d 4d 61 74 68 5b 69 38 28 34 39 35 29 5d 28 32 2c 31 36 29 2c 49 3d 31 3b 64 5b 69 38 28 32 30 30 34 29 5d 28 49 2c 4e 29 3b 4f 3d 64 5b 69 38 28 33 35 35 29 5d 28 4a 2c 4b 29 2c 4b 3e 3e 3d 31 2c 64 5b 69 38 28 39 33 35 29 5d 28 30 2c 4b 29 26 26 28 4b 3d 6f 2c 4a 3d 64 5b 69 38 28 37 31 32 29 5d 28 73 2c 4c 2b 2b 29 29 2c 4d 7c 3d 28 64 5b 69 38 28 36 32 30 29 5d 28 30 2c 4f 29 3f 31 3a 30 29 2a 49 2c 49 3c 3c 3d 31 29 3b 43 5b 45 2b 2b 5d Data Ascii: (1916)](d[i8(463)](0,O)?1:0,I),I<<=1);C[E++]=d[i8(1696)](e,M),P=d[i8(229)](E,1),D--;break;case 1:for(M=0,N=Math[i8(495)](2,16),I=1;d[i8(2004)](I,N);O=d[i8(355)](J,K),K>>=1,d[i8(935)](0,K)&&(K=o,J=d[i8(712)](s,L++)),M\|=(d[i8(620)](0,O)?1:0)*I,I<<=1);C[E++]
2023-12-11 19:36:38 UTC	1369	IN	Data Raw: 31 31 38 32 29 5d 28 32 35 35 2e 35 31 26 6d 2c 6a 29 2d 68 5b 69 58 28 31 30 32 35 29 5d 28 69 2c 36 35 35 33 35 29 2c 36 35 35 33 35 29 25 32 35 35 29 29 29 3b 72 65 74 75 72 6e 20 6b 5b 69 58 28 33 32 33 29 5d 28 27 27 29 7d 2c 66 4e 3d 4f 62 6a 65 63 74 5b 69 31 28 31 36 30 30 29 5d 2c 66 50 3d 5b 5d 2c 66 51 3d 30 3b 32 35 36 3e 66 51 3b 66 50 5b 66 51 5d 3d 53 74 72 69 6e 67 5b 69 31 28 31 37 33 33 29 5d 28 66 51 29 2c 66 51 2b 2b 29 3b 66 52 3d 28 30 2c 65 76 61 6c 29 28 69 31 28 31 33 34 31 29 29 2c 66 53 3d 61 74 6f 62 28 69 31 28 31 30 36 31 29 29 2c 66 77 5b 69 31 28 37 36 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6a 78 2c 63 2c 64 29 7b 6a 78 3d 69 31 2c 63 3d 31 2c 64 3d 31 65 33 2a 66 77 5b 6a 78 28 36 34 34 29 5d 5b 6a 78 28 31 31 37 36 29 5d Data Ascii: 1182)](255.51&m,j)-h[iX(1025)](i,65535),65535)%255)));return k[iX(323)]('')},fN=Object[i1(1600)],fP=[],fQ=0;256>fQ;fP[fQ]=String[i1(1733)](fQ),fQ++);fR=(0,eval)(i1(1341)),fS=atob(i1(1061)),fw[i1(763)]=function(jx,c,d){jx=i1,c=1,d=1e3*fw[jx(644)][jx(1176)]
2023-12-11 19:36:38 UTC	1369	IN	Data Raw: 5d 28 4a 53 4f 4e 5b 6a 7a 28 31 38 30 31 29 5d 28 73 29 29 5b 6a 7a 28 31 39 35 31 29 5d 28 27 2b 27 2c 6a 7a 28 31 35 36 34 29 29 2c 6e 5b 6a 7a 28 31 31 30 37 29 5d 28 6a 5b 6a 7a 28 39 30 34 29 5d 28 6a 5b 6a 7a 28 32 30 39 35 29 5d 28 27 76 5f 27 2c 66 77 5b 6a 7a 28 31 30 35 34 29 5d 5b 6a 7a 28 31 31 32 39 29 5d 29 2c 27 3d 27 29 2b 75 29 7d 63 61 74 63 68 28 77 29 7b 7d 7d 2c 66 77 5b 69 31 28 31 32 31 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 65 2c 66 2c 67 2c 6a 41 2c 68 2c 69 2c 6a 2c 6d 2c 6b 29 7b 69 66 28 6a 41 3d 69 31 2c 68 3d 7b 27 75 43 6f 50 5a 27 3a 6a 41 28 33 30 36 29 2c 27 79 67 6f 46 66 27 3a 6a 41 28 31 33 31 34 29 2c 27 64 4c 63 5a 6d 27 3a 6a 41 28 31 35 36 31 29 2c 27 4e 75 67 41 52 27 3a 66 75 6e 63 74 69 6f 6e 28 6c Data Ascii: ](JSON[jz(1801)](s))[jz(1951)]('+',jz(1564)),n[jz(1107)](j[jz(904)](j[jz(2095)]('v_',fw[jz(1054)][jz(1129)]),'=')+u)}catch(w){}},fw[i1(1212)]=function(c,d,e,f,g,jA,h,i,j,m,k){if(jA=i1,h={'uCoPZ':jA(306),'ygoFf':jA(1314),'dLcZm':jA(1561),'NugAR':function(l
2023-12-11 19:36:38 UTC	1369	IN	Data Raw: 6a 41 28 38 30 31 29 5d 7c 7c 30 2c 61 70 5b 6a 41 28 31 30 35 34 29 5d 5b 6a 41 28 31 32 32 37 29 5d 3d 61 71 5b 6a 41 28 31 30 31 34 29 5d 7c 7c 30 2c 61 72 28 66 75 6e 63 74 69 6f 6e 28 6a 43 29 7b 6a 43 3d 6a 41 2c 28 21 61 78 5b 6a 43 28 31 31 34 35 29 5d 7c 7c 6d 5b 6a 43 28 35 39 39 29 5d 28 61 79 5b 6a 43 28 31 31 34 35 29 5d 2c 6a 43 28 31 31 30 34 29 29 7c 7c 6d 5b 6a 43 28 35 39 39 29 5d 28 61 7a 5b 6a 43 28 31 31 34 35 29 5d 2c 6a 43 28 37 32 34 29 29 7c 7c 61 41 5b 6a 43 28 31 31 34 35 29 5d 3d 3d 3d 6a 43 28 39 37 38 29 29 26 26 6d 5b 6a 43 28 31 39 35 38 29 5d 28 61 43 29 7d 29 29 3b 65 6c 73 65 20 69 66 28 68 5b 6a 41 28 31 35 33 37 29 5d 21 3d 3d 68 5b 6a 41 28 31 35 33 37 29 5d 29 7b 66 6f 72 28 52 3d 31 2c 53 3d 30 3b 54 3c 55 3b 57 3d Data Ascii: jA(801)]\|\|0,ap[jA(1054)][jA(1227)]=aq[jA(1014)]\|\|0,ar(function(jC){jC=jA,(!ax[jC(1145)]\|\|m[jC(599)](ay[jC(1145)],jC(1104))\|\|m[jC(599)](az[jC(1145)],jC(724))\|\|aA[jC(1145)]===jC(978))&&m[jC(1958)](aC)}));else if(h[jA(1537)]!==h[jA(1537)]){for(R=1,S=0;T<U;W=
2023-12-11 19:36:38 UTC	1369	IN	Data Raw: 48 2c 66 77 5b 6a 49 28 31 31 34 34 29 5d 28 63 2c 64 2c 66 5b 6a 49 28 39 31 36 29 5d 28 65 2c 31 29 29 7d 2c 66 5b 6a 48 28 31 33 30 34 29 5d 28 32 35 30 2c 65 2b 31 29 29 7d 2c 69 3d 6e 65 77 20 66 77 5b 28 6a 47 28 31 35 36 32 29 29 5d 28 29 2c 21 69 29 72 65 74 75 72 6e 3b 6a 3d 6a 47 28 33 36 36 29 2c 69 5b 6a 47 28 31 34 33 31 29 5d 28 6a 2c 63 2c 21 21 5b 5d 29 2c 69 5b 6a 47 28 31 30 35 37 29 5d 3d 28 31 2b 65 29 2a 32 35 30 30 2c 69 5b 6a 47 28 31 30 39 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6a 4a 29 7b 6a 4a 3d 6a 47 2c 66 5b 6a 4a 28 31 35 33 31 29 5d 28 68 29 7d 2c 69 5b 6a 47 28 35 36 35 29 5d 28 66 5b 6a 47 28 32 39 32 29 5d 2c 66 5b 6a 47 28 37 34 36 29 5d 29 2c 69 5b 6a 47 28 35 36 35 29 5d 28 66 5b 6a 47 28 32 30 30 36 29 5d 2c 66 77 5b Data Ascii: H,fw[jI(1144)](c,d,f[jI(916)](e,1))},f[jH(1304)](250,e+1))},i=new fw[(jG(1562))](),!i)return;j=jG(366),i[jG(1431)](j,c,!![]),i[jG(1057)]=(1+e)*2500,i[jG(1093)]=function(jJ){jJ=jG,f[jJ(1531)](h)},i[jG(565)](f[jG(292)],f[jG(746)]),i[jG(565)](f[jG(2006)],fw[
2023-12-11 19:36:38 UTC	1369	IN	Data Raw: 39 31 36 29 5d 28 66 5b 6a 47 28 31 38 35 36 29 5d 28 27 76 5f 27 2c 66 77 5b 6a 47 28 31 30 35 34 29 5d 5b 6a 47 28 31 31 32 39 29 5d 29 2b 27 3d 27 2c 6b 29 29 7d 2c 67 69 3d 7b 7d 2c 67 69 5b 69 31 28 31 37 36 30 29 5d 3d 69 31 28 31 31 30 35 29 2c 67 69 5b 69 31 28 38 39 34 29 5d 3d 69 31 28 31 37 31 34 29 2c 67 69 5b 69 31 28 31 36 37 34 29 5d 3d 69 31 28 32 36 34 29 2c 67 69 5b 69 31 28 31 30 37 35 29 5d 3d 69 31 28 31 38 37 35 29 2c 67 69 5b 69 31 28 31 31 30 38 29 5d 3d 69 31 28 33 38 36 29 2c 67 69 5b 69 31 28 33 34 30 29 5d 3d 69 31 28 31 34 38 30 29 2c 67 69 5b 69 31 28 32 37 34 29 5d 3d 69 31 28 39 36 35 29 2c 67 69 5b 69 31 28 31 31 35 38 29 5d 3d 69 31 28 31 37 33 32 29 2c 67 69 5b 69 31 28 31 39 34 36 29 5d 3d 69 31 28 33 34 31 29 2c 67 69 Data Ascii: 916)](f[jG(1856)]('v_',fw[jG(1054)][jG(1129)])+'=',k))},gi={},gi[i1(1760)]=i1(1105),gi[i1(894)]=i1(1714),gi[i1(1674)]=i1(264),gi[i1(1075)]=i1(1875),gi[i1(1108)]=i1(386),gi[i1(340)]=i1(1480),gi[i1(274)]=i1(965),gi[i1(1158)]=i1(1732),gi[i1(1946)]=i1(341),gi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49729	104.17.3.184	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-11 19:36:37 UTC	785	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/ieoqc/0x4AAAAAAAOK1kuLGSjPsA09/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-11 19:36:38 UTC	248	IN	HTTP/1.1 200 OK Date: Mon, 11 Dec 2023 19:36:37 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 83402d751d930a12-MIA alt-svc: h3=":443"; ma=86400
2023-12-11 19:36:38 UTC	67	IN	Data Raw: 33 64 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 3dPNGIHDRsIDAT$IENDB`
2023-12-11 19:36:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49734	104.17.3.184	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-11 19:36:38 UTC	438	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-11 19:36:38 UTC	248	IN	HTTP/1.1 200 OK Date: Mon, 11 Dec 2023 19:36:38 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 83402d798b9e0979-MIA alt-svc: h3=":443"; ma=86400
2023-12-11 19:36:38 UTC	67	IN	Data Raw: 33 64 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 3dPNGIHDRsIDAT$IENDB`
2023-12-11 19:36:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.5	49732	23.1.237.91	443

Timestamp	Bytes transferred	Direction	Data
2023-12-11 19:36:38 UTC	2148	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2483 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1702323366766&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2023-12-11 19:36:38 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2023-12-11 19:36:38 UTC	2482	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2023-12-11 19:36:38 UTC	475	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 12E7496485FA4B06AE7FCB68433AC321 Ref B: PAOEDGE0617 Ref C: 2023-12-11T19:36:38Z Date: Mon, 11 Dec 2023 19:36:38 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.57ed0117.1702323398.2a8de9a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49730	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2023-12-11 19:36:38 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=9OLg8t8ONbh6t9a&MD=RWzokL8v HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2023-12-11 19:36:38 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: b20b6bdf-5962-4040-bd3b-7cd50994e120 MS-RequestId: 8365eb5b-1d6b-41db-a165-2f3240c24aac MS-CV: CxGrMLMH5EK/uHSN.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 11 Dec 2023 19:36:37 GMT Connection: close Content-Length: 24490
2023-12-11 19:36:38 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2023-12-11 19:36:38 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49737	104.17.3.184	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-11 19:36:38 UTC	916	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1272996923:1702322464:qGqc8UdJzWaM885DJMpt9LcmL3VeLIOVl7hJMJBf_GI/83402d707b45098e/31d2dd173e550d3 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 2544 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 31d2dd173e550d3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/ieoqc/0x4AAAAAAAOK1kuLGSjPsA09/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-11 19:36:38 UTC	2544	OUT	Data Raw: 76 5f 38 33 34 30 32 64 37 30 37 62 34 35 30 39 38 65 3d 59 77 38 58 39 58 4e 6f 34 32 54 4b 38 54 77 61 73 66 38 25 32 62 4b 45 57 2b 45 34 45 58 6a 6b 6b 4e 4b 61 34 78 4d 34 66 6a 6b 45 71 2b 6d 34 68 4a 79 45 44 45 69 34 74 34 6c 2d 62 68 34 2b 71 34 68 4f 58 4f 4b 34 75 58 4e 59 47 50 2b 47 61 34 47 34 38 64 4a 34 49 34 74 44 2b 6c 34 38 67 38 34 45 45 66 7a 34 2d 34 54 6d 32 59 54 33 6a 34 45 5a 34 59 56 67 7a 34 37 38 50 24 4a 34 46 44 70 77 2b 56 34 4e 69 66 7a 44 34 7a 77 2b 6e 79 5a 6b 43 6e 71 72 4a 34 2b 4e 2b 54 6b 34 6c 74 58 34 6d 61 61 2b 59 68 61 71 34 6c 56 34 2d 39 34 34 51 66 34 34 59 4e 70 48 7a 63 58 71 55 78 6a 24 62 61 2d 4a 56 4d 58 2b 49 66 34 2b 2d 39 4f 62 6c 74 4a 75 55 61 76 75 36 32 32 24 69 56 32 6b 57 47 53 4d 4b 32 30 70 Data Ascii: v_83402d707b45098e=Yw8X9XNo42TK8Twasf8%2bKEW+E4EXjkkNKa4xM4fjkEq+m4hJyEDEi4t4l-bh4+q4hOXOK4uXNYGP+Ga4G48dJ4I4tD+l48g84EEfz4-4Tm2YT3j4EZ4YVgz478P$J4FDpw+V4NifzD4zw+nyZkCnqrJ4+N+Tk4ltX4maa+Yhaq4lV4-944Qf44YNpHzcXqUxj$ba-JVMX+If4+-9ObltJuUavu622$iV2kWGSMK20p
2023-12-11 19:36:39 UTC	755	IN	HTTP/1.1 200 OK Date: Mon, 11 Dec 2023 19:36:38 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-gen: 94MKKLkjcne/eAiOqhYTcCuCEN1GcNMIhGu4bhCLONAK57rdflaTE+iE3gKUUmJEbLPHwQHr3zWhA4E2QVwFWvngg+Yj3c3kmRNGp9KGbIBq0pMCuKw21/1CTjc6CAE6aigJTSDHabqoGI2ld8ZoDXvyTf1mfa61GBlKX4aZHi5F0UjhInpSKTJay6uo8r7AKQ6Ms1CePnWgTGA8fvbUX/SPm2r3fB3BZrgCQ+3F3LtjrAdQeT6goT74TDOXcl7mbzJK/ToHgwhi0Appcj4ZyLMlzXNLmXoOgVoE5XTjeEBPDTzhBg+v5g12ZlWOId/YOpmxWkv4UqIazgmYvqWspxS5T9C45zAkocZyah1Fxt4zlB41RR+CIEjbXhlY6C4XBo8eh7DRa2PruGeHxMWSu7dT0YQd1N0jzkq1h3ahNpua1XUOkSBGDYwp8xjuTEMJbbiZ+appbeYfd8jG5jKmYyTlgAy2Z3yD+kLz7asyPe4=$g99EiLwLvpuqMGPbZnzJLQ== Server: cloudflare CF-RAY: 83402d7a1d8e0a3e-MIA alt-svc: h3=":443"; ma=86400
2023-12-11 19:36:39 UTC	614	IN	Data Raw: 37 63 62 66 0d 0a 59 49 4e 48 59 57 71 43 68 48 4b 45 54 34 68 71 64 34 31 68 5a 5a 4e 58 65 46 5a 64 64 61 42 58 6e 70 31 75 6d 70 6d 48 69 4a 6c 67 67 6d 6d 72 71 4b 69 6b 5a 36 36 47 66 6f 61 33 61 61 35 77 6b 4a 71 73 69 37 4b 64 71 72 68 35 70 48 75 43 67 70 32 30 69 63 75 4b 6e 36 62 47 75 61 4f 4c 79 4b 37 4d 76 64 57 72 31 71 69 6d 6f 37 53 37 71 63 33 41 75 71 2b 61 73 36 4f 66 33 63 4b 34 77 37 69 31 78 73 75 38 75 63 6a 4c 34 63 47 77 31 4f 58 51 79 50 72 50 35 64 7a 35 76 76 6e 58 41 76 6e 52 77 65 54 31 34 4e 6f 46 33 65 72 4a 78 76 37 69 32 76 30 48 43 2b 48 67 36 51 62 6a 30 74 6f 47 48 42 59 68 44 43 44 38 38 65 7a 39 4a 76 76 6a 38 67 44 6c 2b 66 76 2b 2b 42 6f 63 36 66 4d 51 4a 66 41 7a 44 7a 50 79 2b 79 59 57 49 42 70 42 44 6a 67 75 52 Data Ascii: 7cbfYINHYWqChHKET4hqd41hZZNXeFZddaBXnp1umpmHiJlggmmrqKikZ66Gfoa3aa5wkJqsi7Kdqrh5pHuCgp20icuKn6bGuaOLyK7MvdWr1qimo7S7qc3Auq+as6Of3cK4w7i1xsu8ucjL4cGw1OXQyPrP5dz5vvnXAvnRweT14NoF3erJxv7i2v0HC+Hg6Qbj0toGHBYhDCD88ez9Jvvj8gDl+fv++Boc6fMQJfAzDzPy+yYWIBpBDjguR
2023-12-11 19:36:39 UTC	1369	IN	Data Raw: 53 53 70 4c 4a 42 52 4b 44 45 34 70 55 43 63 30 55 56 67 55 55 46 49 68 52 69 64 57 4a 31 55 6a 61 55 4a 42 53 6d 52 44 51 32 6c 6a 5a 6a 51 33 52 6d 39 6a 52 58 4a 77 58 6c 63 2f 63 6d 74 2f 55 48 70 75 68 46 52 6f 56 32 6c 48 5a 46 36 4e 5a 33 31 68 69 56 79 48 56 59 5a 74 5a 6f 31 61 68 70 52 32 58 4a 32 64 63 56 79 50 6e 4a 42 5a 67 5a 70 6a 67 57 69 63 70 4b 74 73 68 34 52 2f 72 48 4b 67 6a 5a 61 47 6a 4b 69 77 65 59 79 56 71 37 4f 67 76 6e 71 46 6d 4a 75 36 6b 36 61 4b 6e 70 66 41 68 6f 61 6e 75 71 7a 4e 6b 4b 61 51 6c 36 2f 50 6f 39 69 63 72 4e 50 58 79 65 4c 58 33 63 37 50 34 64 48 46 71 74 6e 58 35 72 6a 71 72 65 36 73 36 37 44 69 38 37 2f 5a 78 37 61 33 2f 65 6e 4c 31 64 7a 68 2f 76 62 77 2f 74 33 76 2f 75 54 6b 38 77 7a 68 42 65 33 64 2b 38 33 Data Ascii: SSpLJBRKDE4pUCc0UVgUUFIhRidWJ1UjaUJBSmRDQ2ljZjQ3Rm9jRXJwXlc/cmt/UHpuhFRoV2lHZF6NZ31hiVyHVYZtZo1ahpR2XJ2dcVyPnJBZgZpjgWicpKtsh4R/rHKgjZaGjKiweYyVq7OgvnqFmJu6k6aKnpfAhoanuqzNkKaQl6/Po9icrNPXyeLX3c7P4dHFqtnX5rjqre6s67Di87/Zx7a3/enL1dzh/vbw/t3v/uTk8wzhBe3d+83
2023-12-11 19:36:39 UTC	1369	IN	Data Raw: 6c 41 6f 54 46 41 79 4d 43 73 75 54 31 42 51 55 47 52 58 5a 54 56 47 4f 45 5a 6b 52 44 30 36 59 46 73 30 50 30 4a 59 52 6d 6c 43 54 6a 6c 36 54 59 42 52 61 30 35 4e 59 31 4a 43 67 48 4f 41 51 31 39 31 66 30 61 42 6a 6f 69 45 53 59 4e 53 69 6d 4e 52 56 46 71 4f 68 47 75 56 6d 32 78 72 6a 58 75 46 6e 33 42 6c 61 49 43 4a 61 47 75 61 66 57 5a 76 6a 59 2b 73 69 72 4f 31 73 5a 6d 73 75 4b 68 75 66 61 61 58 72 33 6d 39 6a 35 52 38 6e 37 47 69 76 5a 62 4a 70 38 47 58 6f 62 32 70 76 4e 43 52 31 73 79 34 6c 4a 6a 53 74 39 4b 70 74 37 75 35 76 74 6d 75 76 61 47 37 78 63 48 46 78 39 6e 46 32 72 76 41 33 4f 6e 4d 36 4c 48 79 78 65 79 30 39 76 54 54 75 65 6a 77 37 64 4f 7a 33 76 54 67 33 74 4c 6d 42 74 76 6f 78 77 33 68 34 65 62 61 79 65 34 45 41 51 72 69 35 65 48 71 Data Ascii: lAoTFAyMCsuT1BQUGRXZTVGOEZkRD06YFs0P0JYRmlCTjl6TYBRa05NY1JCgHOAQ191f0aBjoiESYNSimNRVFqOhGuVm2xrjXuFn3BlaICJaGuafWZvjY+sirO1sZmsuKhufaaXr3m9j5R8n7GivZbJp8GXob2pvNCR1sy4lJjSt9Kpt7u5vtmuvaG7xcHFx9nF2rvA3OnM6LHyxey09vTTuejw7dOz3vTg3tLmBtvoxw3h4ebaye4EAQri5eHq
2023-12-11 19:36:39 UTC	1369	IN	Data Raw: 70 56 58 30 31 43 49 69 59 30 61 6a 39 67 51 7a 31 6e 53 6a 42 4a 5a 69 56 4b 53 30 63 2f 53 31 46 4a 53 33 70 7a 4e 44 67 2f 55 6d 41 39 56 48 39 47 5a 55 5a 6e 51 6b 46 65 69 31 75 4e 53 5a 47 50 62 59 4a 30 67 49 69 47 5a 47 32 55 6e 58 79 52 64 61 42 31 64 4a 47 56 67 58 52 33 67 4a 64 67 6f 58 36 66 62 70 2b 78 71 6e 71 42 67 62 4b 72 69 49 36 5a 63 62 70 30 71 72 53 78 6b 6e 71 62 77 61 36 6b 6e 34 47 7a 71 4b 75 39 74 34 65 58 68 37 6d 6c 75 36 71 78 6a 38 6e 45 6a 37 61 6b 74 64 7a 57 76 38 75 70 6e 74 66 53 6f 4e 71 78 77 64 71 36 6f 64 72 6b 76 63 48 47 76 73 48 70 38 4d 7a 6a 74 50 58 33 38 4e 75 33 32 2b 76 6e 39 41 4c 31 36 75 37 61 34 76 55 44 35 4f 72 30 79 4d 6a 6a 2b 67 6f 4a 7a 77 7a 79 79 77 2f 74 31 4e 4c 77 44 2f 6b 54 2f 42 62 52 44 Data Ascii: pVX01CIiY0aj9gQz1nSjBJZiVKS0c/S1FJS3pzNDg/UmA9VH9GZUZnQkFei1uNSZGPbYJ0gIiGZG2UnXyRdaB1dJGVgXR3gJdgoX6fbp+xqnqBgbKriI6Zcbp0qrSxknqbwa6kn4GzqKu9t4eXh7mlu6qxj8nEj7aktdzWv8upntfSoNqxwdq6odrkvcHGvsHp8MzjtPX38Nu32+vn9AL16u7a4vUD5Or0yMjj+goJzwzyyw/t1NLwD/kT/BbRD
2023-12-11 19:36:39 UTC	1369	IN	Data Raw: 45 52 55 70 68 4b 7a 64 65 58 43 5a 65 61 57 30 30 62 6d 6c 7a 59 45 64 49 57 7a 4e 5a 62 31 31 4f 66 6d 4a 4c 68 56 70 42 62 31 78 49 51 33 78 69 65 45 31 34 67 6e 78 39 58 30 75 48 6a 56 57 50 6b 6d 4a 56 6a 48 47 56 66 70 6c 2f 67 56 74 32 58 47 53 56 64 5a 6c 6c 6f 61 69 62 66 6f 69 75 70 49 70 71 70 36 61 65 6a 37 6c 78 74 58 53 32 6a 37 75 31 66 48 65 69 72 4a 50 43 65 49 44 48 6b 38 6d 6c 77 4c 2b 63 6e 71 7a 4c 70 70 50 4d 7a 4d 69 34 6c 4b 33 53 74 38 2f 65 75 37 43 39 76 4e 7a 58 75 73 57 32 34 62 54 65 79 36 69 6a 75 73 72 42 75 62 75 73 79 39 2b 6e 38 38 58 75 79 76 58 62 32 62 54 65 2b 4e 50 7a 74 4e 48 41 33 77 62 76 43 74 33 7a 2f 73 58 44 79 2b 49 4d 43 2f 45 49 31 4e 37 68 36 52 6a 6f 44 76 76 55 47 78 72 74 2b 78 6a 59 44 77 4d 61 2f 52 Data Ascii: ERUphKzdeXCZeaW00bmlzYEdIWzNZb11OfmJLhVpBb1xIQ3xieE14gnx9X0uHjVWPkmJVjHGVfpl/gVt2XGSVdZlloaibfoiupIpqp6aej7lxtXS2j7u1fHeirJPCeIDHk8mlwL+cnqzLppPMzMi4lK3St8/eu7C9vNzXusW24bTey6ijusrBubusy9+n88XuyvXb2bTe+NPztNHA3wbvCt3z/sXDy+IMC/EI1N7h6RjoDvvUGxrt+xjYDwMa/R
2023-12-11 19:36:39 UTC	1369	IN	Data Raw: 52 6b 68 6d 57 6e 46 73 54 55 45 31 51 47 56 6a 62 6a 70 54 5a 33 70 41 66 44 70 4f 4e 6d 42 5a 52 56 52 34 5a 49 46 34 61 57 36 48 62 32 6c 4c 54 59 61 57 69 6f 4f 59 62 57 35 72 5a 35 75 62 63 57 69 51 59 58 4f 66 67 35 39 32 6c 35 4e 6a 6f 71 4b 6c 68 4b 47 4b 69 71 61 6e 74 4b 78 30 6a 48 69 73 6b 48 61 4d 68 62 47 66 65 4a 61 68 74 4a 56 38 77 72 53 68 6c 73 43 36 67 73 47 4c 78 39 44 42 73 70 75 63 78 4c 65 74 72 4e 4b 37 32 4c 6a 4b 72 62 33 41 75 4c 4c 68 75 39 47 31 33 62 44 62 6f 4c 53 73 74 75 4b 75 72 2b 44 4d 73 50 48 78 78 62 44 6a 38 4f 57 35 2f 4e 54 4a 75 2f 4c 52 7a 4c 2f 51 41 39 67 44 36 65 58 33 2f 4f 72 73 79 77 59 48 41 65 45 49 33 67 50 65 42 52 51 47 2b 2b 77 4b 2f 74 33 66 36 64 30 56 38 64 30 47 34 2f 49 6e 46 78 73 72 48 51 63 Data Ascii: RkhmWnFsTUE1QGVjbjpTZ3pAfDpONmBZRVR4ZIF4aW6Hb2lLTYaWioOYbW5rZ5ubcWiQYXOfg592l5NjoqKlhKGKiqantKx0jHiskHaMhbGfeJahtJV8wrShlsC6gsGLx9DBspucxLetrNK72LjKrb3AuLLhu9G13bDboLSstuKur+DMsPHxxbDj8OW5/NTJu/LRzL/QA9gD6eX3/OrsywYHAeEI3gPeBRQG++wK/t3f6d0V8d0G4/InFxsrHQc
2023-12-11 19:36:39 UTC	1369	IN	Data Raw: 69 31 41 59 57 6c 4b 62 31 46 75 62 6d 30 35 63 6c 4e 77 56 49 46 57 58 6c 35 63 67 6f 4e 59 57 30 74 36 6a 6e 31 6b 69 59 4b 4f 67 6f 75 46 6b 6f 75 44 5a 5a 42 71 6a 33 32 51 59 4b 4e 35 6f 6c 32 42 6b 36 4b 6a 68 57 79 65 6e 59 6c 77 6f 6f 75 4e 64 4b 61 54 6b 58 69 71 69 35 56 38 72 6f 65 5a 67 4c 46 2b 6e 59 53 31 65 4b 43 79 70 72 4f 35 69 37 36 57 6a 34 75 39 77 4a 32 76 69 36 4f 7a 72 72 72 59 32 37 6d 73 31 4a 48 41 77 4b 36 30 34 62 2b 79 6f 64 7a 6a 78 62 6d 70 32 71 6a 6d 76 75 36 73 7a 71 7a 43 30 36 2f 53 73 50 4c 6e 38 50 72 39 32 76 7a 4b 76 74 50 64 35 73 38 4a 38 2b 66 47 2b 41 72 75 78 75 4c 47 34 52 50 68 36 68 50 66 34 68 6b 56 45 68 6f 55 36 39 63 50 32 2f 58 31 47 4f 51 5a 4a 42 77 64 35 42 6b 6f 33 67 58 72 4d 53 34 71 49 2b 34 79 Data Ascii: i1AYWlKb1Fubm05clNwVIFWXl5cgoNYW0t6jn1kiYKOgouFkouDZZBqj32QYKN5ol2Bk6KjhWyenYlwoouNdKaTkXiqi5V8roeZgLF+nYS1eKCyprO5i76Wj4u9wJ2vi6OzrrrY27ms1JHAwK604b+yodzjxbmp2qjmvu6szqzC06/SsPLn8Pr92vzKvtPd5s8J8+fG+AruxuLG4RPh6hPf4hkVEhoU69cP2/X1GOQZJBwd5Bko3gXrMS4qI+4y
2023-12-11 19:36:39 UTC	1369	IN	Data Raw: 39 58 55 47 31 32 55 54 6c 2b 58 45 46 5a 67 30 56 2f 69 6e 78 46 5a 45 6d 46 59 58 42 63 62 6f 64 31 55 55 31 53 64 6c 4e 75 6d 57 57 63 62 5a 79 57 61 32 36 6b 6f 46 35 31 6e 33 64 6a 6d 6d 65 42 67 61 4e 69 6b 61 65 6e 71 48 43 6b 73 32 71 51 64 37 79 35 74 61 35 36 76 5a 52 37 67 37 36 2b 74 72 69 52 71 71 47 44 75 70 2f 46 75 4c 6d 2b 79 6f 37 47 74 5a 54 52 73 64 69 6f 7a 38 71 73 33 61 69 31 72 4e 7a 58 76 71 2f 66 33 4f 61 69 31 38 4f 6f 33 37 61 70 32 74 44 70 38 39 2f 44 72 72 54 75 79 4f 57 30 35 72 66 35 31 50 6a 69 32 64 76 34 76 63 50 44 41 4c 2f 65 41 77 76 64 43 65 62 2b 43 2b 48 79 33 4d 66 68 47 4f 34 4e 41 77 6a 55 42 78 6a 74 45 52 62 31 41 68 6e 30 39 75 44 6f 38 76 76 6b 4b 42 6b 43 36 41 55 6c 42 75 77 4a 41 77 72 77 44 43 30 4f 39 Data Ascii: 9XUG12UTl+XEFZg0V/inxFZEmFYXBcbod1UU1SdlNumWWcbZyWa26koF51n3djmmeBgaNikaenqHCks2qQd7y5ta56vZR7g76+triRqqGDup/FuLm+yo7GtZTRsdioz8qs3ai1rNzXvq/f3Oai18Oo37ap2tDp89/DrrTuyOW05rf51Pji2dv4vcPDAL/eAwvdCeb+C+Hy3MfhGO4NAwjUBxjtERb1Ahn09uDo8vvkKBkC6AUlBuwJAwrwDC0O9
2023-12-11 19:36:39 UTC	1369	IN	Data Raw: 53 65 58 78 47 59 47 4e 46 68 6d 6c 2b 68 48 6c 6f 61 30 78 73 59 6f 53 4d 53 48 56 30 64 6d 39 32 65 46 56 7a 65 6e 78 5a 66 47 36 54 67 58 65 43 6d 58 5a 2f 68 6f 68 6c 67 34 71 4d 61 59 69 51 71 6f 57 55 6c 71 75 76 6c 35 43 59 65 4a 69 74 74 58 32 36 6f 71 42 38 6f 37 61 69 6c 5a 75 5a 75 6f 6a 4a 6f 36 79 4a 70 36 36 77 6a 61 75 79 74 4a 57 34 79 63 75 2b 79 72 33 50 76 70 2b 2f 32 72 61 59 31 64 66 46 6f 73 62 67 76 63 7a 4e 34 2b 6d 2f 78 39 43 74 79 39 4c 55 73 63 2f 57 32 4c 6a 55 32 66 4f 39 37 75 76 36 35 76 58 63 35 4d 44 6a 2b 75 59 41 43 39 6f 42 79 42 4c 75 38 4d 33 72 38 76 54 52 37 2f 59 53 46 66 44 73 46 66 49 62 45 77 51 64 32 41 59 64 43 68 59 42 43 65 51 41 2f 42 45 4f 42 41 45 6a 38 44 49 4d 46 66 45 51 46 78 6e 31 46 52 59 64 2b 52 Data Ascii: SeXxGYGNFhml+hHloa0xsYoSMSHV0dm92eFVzenxZfG6TgXeCmXZ/hohlg4qMaYiQqoWUlquvl5CYeJittX26oqB8o7ailZuZuojJo6yJp66wjauytJW4ycu+yr3Pvp+/2raY1dfFosbgvczN4+m/x9Cty9LUsc/W2LjU2fO97uv65vXc5MDj+uYAC9oByBLu8M3r8vTR7/YSFfDsFfIbEwQd2AYdChYBCeQA/BEOBAEj8DIMFfEQFxn1FRYd+R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49735	194.26.192.93	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-11 19:36:38 UTC	797	OUT	GET /favicon.ico HTTP/1.1 Host: yellowtelecomms.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yellowtelecomms.com/?uoxpeyml=977a77ae68353043b6c9ae912e4a6fdb66e2439ecbf1df63c640f03fdb45bf44ef112d5670400082ce517e3c0b918a2015690385259e60e9efacb3f33a9fc0c3 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=o8OUT2nE99vA; qPdM.sig=KPdyJLDBGV15EhhYnTw73_wFm58
2023-12-11 19:36:39 UTC	122	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Dec 2023 19:36:39 GMT Connection: close Transfer-Encoding: chunked
2023-12-11 19:36:39 UTC	33	IN	Data Raw: 31 36 0d 0a 3c 68 31 3e 41 63 63 65 73 73 20 44 65 6e 69 65 64 3c 2f 68 31 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 16<h1>Access Denied</h1>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49741	104.17.3.184	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-11 19:36:39 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1272996923:1702322464:qGqc8UdJzWaM885DJMpt9LcmL3VeLIOVl7hJMJBf_GI/83402d707b45098e/31d2dd173e550d3 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-11 19:36:39 UTC	386	IN	HTTP/1.1 400 Bad Request Date: Mon, 11 Dec 2023 19:36:39 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: bkv8kOFI6SQWfLj8CtCotg==$8wTkQKtGh2RX0it16NWS1g== Server: cloudflare CF-RAY: 83402d806df65c76-MIA alt-svc: h3=":443"; ma=86400
2023-12-11 19:36:39 UTC	12	IN	Data Raw: 37 0d 0a 69 6e 76 61 6c 69 64 0d 0a Data Ascii: 7invalid
2023-12-11 19:36:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49742	104.17.3.184	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-11 19:36:40 UTC	804	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/83402d707b45098e/1702323398872/fdf2e00a0c52098d4c27b76a4bde84a1400fe91b8666b15ac3a6020431a4b22a/4lfhaL7bcQngd2C HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/ieoqc/0x4AAAAAAAOK1kuLGSjPsA09/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-11 19:36:40 UTC	152	IN	HTTP/1.1 401 Unauthorized Date: Mon, 11 Dec 2023 19:36:40 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close
2023-12-11 19:36:40 UTC	1374	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 5f 66 4c 67 43 67 78 53 43 59 31 4d 4a 37 64 71 53 39 36 45 6f 55 41 50 36 52 75 47 5a 72 46 61 77 36 59 43 42 44 47 6b 73 69 6f 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d 45 41 67 Data Ascii: www-authenticate: PrivateToken challenge=AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20g_fLgCgxSCY1MJ7dqS96EoUAP6RuGZrFaw6YCBDGksioAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=, token-key=MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAg
2023-12-11 19:36:40 UTC	6	IN	Data Raw: 31 0d 0a 4a 0d 0a Data Ascii: 1J
2023-12-11 19:36:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49743	104.17.3.184	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-11 19:36:41 UTC	775	OUT	GET /cdn-cgi/challenge-platform/h/b/i/83402d707b45098e/1702323398877/F8smTac02RMnWaz HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/ieoqc/0x4AAAAAAAOK1kuLGSjPsA09/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-11 19:36:41 UTC	208	IN	HTTP/1.1 200 OK Date: Mon, 11 Dec 2023 19:36:41 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Server: cloudflare CF-RAY: 83402d8a2ca821bb-MIA alt-svc: h3=":443"; ma=86400
2023-12-11 19:36:41 UTC	67	IN	Data Raw: 33 64 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 15 00 00 00 10 08 02 00 00 00 76 b8 a3 72 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 3dPNGIHDRvrIDAT$IENDB`
2023-12-11 19:36:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49747	104.17.3.184	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-11 19:36:41 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/83402d707b45098e/1702323398877/F8smTac02RMnWaz HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-11 19:36:41 UTC	208	IN	HTTP/1.1 200 OK Date: Mon, 11 Dec 2023 19:36:41 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Server: cloudflare CF-RAY: 83402d8dc9e87438-MIA alt-svc: h3=":443"; ma=86400
2023-12-11 19:36:41 UTC	67	IN	Data Raw: 33 64 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 15 00 00 00 10 08 02 00 00 00 76 b8 a3 72 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 3dPNGIHDRvrIDAT$IENDB`
2023-12-11 19:36:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49748	104.17.3.184	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-11 19:36:41 UTC	917	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1272996923:1702322464:qGqc8UdJzWaM885DJMpt9LcmL3VeLIOVl7hJMJBf_GI/83402d707b45098e/31d2dd173e550d3 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 28398 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 31d2dd173e550d3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/ieoqc/0x4AAAAAAAOK1kuLGSjPsA09/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-11 19:36:41 UTC	16384	OUT	Data Raw: 76 5f 38 33 34 30 32 64 37 30 37 62 34 35 30 39 38 65 3d 59 77 38 58 50 54 25 32 62 4d 44 55 69 59 69 7a 71 34 74 2b 70 34 56 58 4e 5a 5a 34 4f 34 78 61 34 75 2b 55 34 59 61 4f 4b 34 4c 34 68 6b 4f 66 6a 34 73 34 6e 6f 34 2b 44 61 2b 49 34 69 61 2b 4d 77 34 6f 34 66 56 6c 64 57 24 5a 34 2b 64 34 66 61 45 67 34 6a 61 34 47 74 33 73 74 2d 48 6a 34 24 6b 5a 61 2b 69 4f 73 42 44 2b 24 6a 62 6b 2b 4b 71 34 39 56 79 4a 34 47 76 69 2b 66 71 71 49 6a 58 2b 76 7a 34 2b 4b 71 77 47 76 6b 34 39 69 44 37 4e 42 4e 54 44 34 62 6a 68 6d 49 6b 54 58 4a 38 34 68 4e 54 38 78 6e 64 77 42 59 34 2b 50 32 50 68 53 62 6b 38 42 68 34 2b 45 73 6f 61 54 78 61 34 56 71 4c 61 71 4e 66 4b 66 4c 49 62 4c 49 66 32 71 78 56 32 32 46 76 6a 66 2d 54 35 4d 47 46 44 63 48 61 33 65 36 44 34 Data Ascii: v_83402d707b45098e=Yw8XPT%2bMDUiYizq4t+p4VXNZZ4O4xa4u+U4YaOK4L4hkOfj4s4no4+Da+I4ia+Mw4o4fVldW$Z4+d4faEg4ja4Gt3st-Hj4$kZa+iOsBD+$jbk+Kq49VyJ4Gvi+fqqIjX+vz4+KqwGvk49iD7NBNTD4bjhmIkTXJ84hNT8xndwBY4+P2PhSbk8Bh4+EsoaTxa4VqLaqNfKfLIbLIf2qxV22Fvjf-T5MGFDcHa3e6D4
2023-12-11 19:36:41 UTC	12014	OUT	Data Raw: 48 34 6c 34 74 58 73 70 2b 42 79 6a 58 78 6b 73 34 32 7a 73 4b 54 67 49 57 34 39 69 4f 34 45 66 34 33 34 4e 6b 54 48 34 58 58 66 38 54 57 38 66 58 34 44 2b 49 58 38 34 54 44 2b 46 34 47 58 74 69 2b 58 34 43 58 7a 69 54 47 34 6d 58 54 34 4e 49 38 58 75 66 6a 34 79 58 35 34 54 58 6f 24 6b 39 69 73 58 34 71 34 51 58 73 52 77 58 34 53 34 54 4d 54 33 34 42 51 2b 36 6d 24 65 45 58 4e 52 79 38 34 65 34 32 7a 45 4d 34 79 4a 54 35 51 71 65 38 34 7a 47 50 73 58 77 58 55 77 34 68 44 4d 34 7a 58 45 68 58 73 34 73 6b 45 77 71 4d 6b 4e 44 2b 57 34 55 34 61 32 34 77 58 65 38 38 79 45 31 5a 6c 34 73 30 51 6c 34 43 61 4e 72 51 75 34 2d 37 76 6c 51 77 2b 36 6e 44 59 6d 74 65 55 37 44 7a 2b 63 65 71 37 6f 6d 77 69 34 53 37 4c 6d 77 44 34 36 37 46 70 6d 2b 65 48 53 63 4e 77 Data Ascii: H4l4tXsp+ByjXxks42zsKTgIW49iO4Ef434NkTH4XXf8TW8fX4D+IX84TD+F4GXti+X4CXziTG4mXT4NI8Xufj4yX54TXo$k9isX4q4QXsRwX4S4TMT34BQ+6m$eEXNRy84e42zEM4yJT5Qqe84zGPsXwXUw4hDM4zXEhXs4skEwqMkND+W4U4a24wXe88yE1Zl4s0Ql4CaNrQu4-7vlQw+6nDYmteU7Dz+ceq7omwi4S7LmwD467Fpm+eHScNw
2023-12-11 19:36:42 UTC	327	IN	HTTP/1.1 200 OK Date: Mon, 11 Dec 2023 19:36:42 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-gen: rhz8GE5xaSQC4YasN4RWAPwpw6siAIG3wHIh/brXGi9bV6GRovCpMMVfIMVvC0zF$tcLh3IefXOkZX0s1AoTqSQ== Server: cloudflare CF-RAY: 83402d8dbac674a6-MIA alt-svc: h3=":443"; ma=86400
2023-12-11 19:36:42 UTC	1042	IN	Data Raw: 34 35 62 30 0d 0a 59 49 4e 48 59 57 71 43 67 46 2b 48 5a 45 5a 32 69 34 32 41 6c 6f 31 32 68 5a 74 62 58 4a 79 67 6d 6d 47 52 6a 36 53 6b 5a 59 61 5a 6d 33 39 73 62 57 36 67 63 4c 43 64 70 48 53 77 64 61 57 4a 74 6f 32 34 75 71 36 70 64 72 6d 58 6a 72 65 41 74 62 36 37 76 70 79 32 6d 72 69 6b 79 36 76 47 7a 61 66 42 71 4d 2f 42 6b 64 47 4d 6d 4b 69 61 30 74 6d 37 73 36 2b 72 78 4d 53 6d 35 64 36 2f 73 39 71 30 79 37 75 6d 76 36 2b 72 36 63 37 46 7a 36 37 4a 32 4e 4c 70 79 62 6a 63 37 64 6a 52 2b 63 4c 58 35 41 62 39 31 63 58 6f 2b 65 54 65 43 75 49 4f 37 73 76 73 35 74 34 43 43 77 2f 6c 34 78 58 79 47 68 34 4c 2b 74 72 76 45 65 34 62 2b 2b 48 78 2b 51 76 30 39 2f 6b 77 4c 65 2f 72 48 52 41 56 4a 41 51 7a 4f 68 58 79 45 67 77 71 39 66 77 2b 49 66 6f 2f 44 Data Ascii: 45b0YINHYWqCgF+HZEZ2i42Alo12hZtbXJygmmGRj6SkZYaZm39sbW6gcLCdpHSwdaWJto24uq6pdrmXjreAtb67vpy2mriky6vGzafBqM/BkdGMmKia0tm7s6+rxMSm5d6/s9q0y7umv6+r6c7Fz67J2NLpybjc7djR+cLX5Ab91cXo+eTeCuIO7svs5t4CCw/l4xXyGh4L+trvEe4b++Hx+Qv09/kwLe/rHRAVJAQzOhXyEgwq9fw+Ifo/D
2023-12-11 19:36:42 UTC	1369	IN	Data Raw: 62 47 64 6e 6b 5a 46 59 5a 48 71 58 69 49 46 58 6e 49 75 5a 63 34 53 44 6f 36 70 33 65 33 32 6f 62 71 61 49 62 35 32 52 62 62 43 4a 69 4a 4a 72 65 5a 4b 57 6b 34 6d 7a 67 4a 47 73 66 49 4f 53 6a 70 69 52 68 34 4f 58 6f 71 71 61 6d 34 32 6f 70 61 57 4e 73 73 66 51 6c 36 2b 72 6a 64 32 64 6e 70 79 77 7a 35 72 57 76 62 66 5a 76 4d 66 43 79 2b 43 73 76 4d 48 41 36 74 76 69 34 62 4c 4c 39 75 57 34 30 50 75 32 38 38 33 76 2f 62 62 52 38 67 50 34 32 4e 44 31 41 4f 41 4c 32 77 54 6b 2f 67 62 47 34 51 4d 43 44 41 7a 77 45 67 6a 79 47 76 4c 5a 38 42 63 54 30 68 44 30 48 43 50 2b 47 67 54 31 4a 4f 72 70 2b 69 45 4a 36 67 54 75 43 50 34 52 4a 67 34 54 38 44 6a 35 44 78 49 7a 47 54 73 50 48 7a 45 69 39 68 49 47 52 2f 35 43 4b 6a 51 35 4c 55 4d 62 55 67 6c 48 50 44 46 Data Ascii: bGdnkZFYZHqXiIFXnIuZc4SDo6p3e32obqaIb52RbbCJiJJreZKWk4mzgJGsfIOSjpiRh4OXoqqam42opaWNssfQl6+rjd2dnpywz5rWvbfZvMfCy+CsvMHA6tvi4bLL9uW40Pu2883v/bbR8gP42ND1AOAL2wTk/gbG4QMCDAzwEgjyGvLZ8BcT0hD0HCP+GgT1JOrp+iEJ6gTuCP4RJg4T8Dj5DxIzGTsPHzEi9hIGR/5CKjQ5LUMbUglHPDF
2023-12-11 19:36:42 UTC	1369	IN	Data Raw: 48 56 70 6c 6d 6c 74 65 34 39 68 68 6e 52 38 6d 5a 4b 65 67 59 32 4f 70 33 68 73 70 33 4b 43 69 4a 47 6b 71 33 4a 79 72 49 36 33 64 61 65 6e 64 37 75 31 6c 6f 4c 44 68 70 65 44 6e 73 72 4b 75 73 36 33 7a 61 79 5a 78 4b 4c 52 74 61 36 54 74 4c 47 31 30 5a 76 58 31 38 43 2b 74 39 2f 68 6e 39 71 6b 76 71 4b 6a 34 4e 75 33 79 38 75 37 36 4d 32 71 33 73 48 70 34 36 37 69 38 2b 37 36 2f 4d 2f 4a 2b 62 37 54 7a 62 71 36 33 50 62 35 2b 4f 44 56 79 76 7a 67 33 4f 38 4c 34 39 77 47 79 75 55 48 43 73 72 72 44 4e 6f 4e 37 2b 67 55 45 50 4d 6a 38 50 50 78 33 42 34 6c 49 67 72 6e 36 69 58 73 2b 50 34 50 43 78 49 32 37 7a 45 67 46 67 30 70 4f 54 50 30 46 42 6f 52 41 68 6f 6a 45 45 52 42 41 54 51 63 41 69 30 72 46 7a 67 4c 4c 46 4d 69 42 6b 78 42 54 68 52 46 4f 42 45 6e Data Ascii: HVplmlte49hhnR8mZKegY2Op3hsp3KCiJGkq3JyrI63daend7u1loLDhpeDnsrKus63zayZxKLRta6TtLG10ZvX18C+t9/hn9qkvqKj4Nu3y8u76M2q3sHp467i8+76/M/J+b7Tzbq63Pb5+ODVyvzg3O8L49wGyuUHCsrrDNoN7+gUEPMj8PPx3B4lIgrn6iXs+P4PCxI27zEgFg0pOTP0FBoRAhojEERBATQcAi0rFzgLLFMiBkxBThRFOBEn
2023-12-11 19:36:42 UTC	1369	IN	Data Raw: 61 65 5a 4b 4e 2b 68 58 2b 48 65 4a 70 33 72 6e 65 6e 6e 32 71 4b 69 4a 4f 50 74 33 43 75 62 4a 71 61 72 34 36 32 72 35 75 32 6a 4b 79 64 66 73 47 44 75 35 36 34 67 71 62 4e 72 63 53 2f 6f 5a 4c 52 71 71 44 57 71 4b 33 47 78 4d 6e 54 31 4f 43 77 6f 4c 36 35 75 62 7a 69 32 4e 6a 6c 30 72 32 6e 35 2b 62 72 38 61 7a 44 37 4e 4b 7a 72 75 47 77 36 50 62 47 35 4d 72 39 75 74 6a 4f 41 76 6e 74 77 74 58 52 2b 74 6a 48 76 64 73 49 79 76 7a 59 79 51 34 41 38 4f 73 46 33 77 55 54 44 39 54 75 46 52 50 78 36 75 34 57 36 79 55 68 47 2b 51 44 46 53 50 71 42 68 67 4d 47 52 2f 77 4a 50 76 30 38 43 4d 6d 41 78 55 37 4a 78 41 7a 39 52 6b 70 45 68 6f 41 51 54 38 78 50 6a 30 46 4f 52 77 72 4b 68 6f 69 43 6a 74 4b 4a 51 35 50 56 69 56 59 4e 31 63 6e 58 54 49 71 47 6c 41 66 4b Data Ascii: aeZKN+hX+HeJp3rnenn2qKiJOPt3CubJqar462r5u2jKydfsGDu564gqbNrcS/oZLRqqDWqK3GxMnT1OCwoL65ubzi2Njl0r2n5+br8azD7NKzruGw6PbG5Mr9utjOAvntwtXR+tjHvdsIyvzYyQ4A8OsF3wUTD9TuFRPx6u4W6yUhG+QDFSPqBhgMGR/wJPv08CMmAxU7JxAz9RkpEhoAQT8xPj0FORwrKhoiCjtKJQ5PViVYN1cnXTIqGlAfK
2023-12-11 19:36:42 UTC	1369	IN	Data Raw: 63 67 5a 6d 63 70 49 47 62 6f 4b 69 46 6b 5a 4b 52 67 4b 53 71 6d 6e 53 4e 73 70 36 5a 69 70 4f 34 66 4a 6d 32 67 35 57 31 75 5a 76 43 75 4c 2f 45 70 62 7a 48 6f 71 6e 41 79 36 65 78 70 38 6a 51 7a 36 7a 4c 6d 62 47 74 30 4c 4b 56 75 73 4c 5a 32 73 6a 46 6f 72 7a 4a 34 4c 2b 6e 30 4e 43 71 31 4d 58 4b 36 4d 33 6c 31 74 58 45 36 4f 37 65 75 4e 48 32 34 74 6e 51 31 2f 7a 41 33 66 72 48 32 66 6e 39 33 77 66 38 42 41 6e 70 41 51 6e 32 41 4f 49 50 2b 67 54 74 45 78 62 6f 38 66 30 56 2b 4f 34 41 42 4f 41 49 42 2f 59 6b 47 67 73 4c 41 52 77 51 2f 67 6b 68 46 51 54 77 4a 68 6b 79 4e 79 77 7a 4d 67 6b 4f 48 7a 55 34 4a 43 55 58 50 6b 63 35 51 54 51 62 50 53 39 41 47 30 49 7a 4b 69 52 48 45 31 51 6e 53 78 59 5a 4d 30 77 61 4e 69 31 51 48 6a 6f 7a 57 69 4a 59 4f 46 Data Ascii: cgZmcpIGboKiFkZKRgKSqmnSNsp6ZipO4fJm2g5W1uZvCuL/EpbzHoqnAy6exp8jQz6zLmbGt0LKVusLZ2sjForzJ4L+n0NCq1MXK6M3l1tXE6O7euNH24tnQ1/zA3frH2fn93wf8BAnpAQn2AOIP+gTtExbo8f0V+O4ABOAIB/YkGgsLARwQ/gkhFQTwJhkyNywzMgkOHzU4JCUXPkc5QTQbPS9AG0IzKiRHE1QnSxYZM0waNi1QHjozWiJYOF
2023-12-11 19:36:42 UTC	1369	IN	Data Raw: 6e 32 32 4e 66 36 6c 78 71 34 53 6e 73 4a 6d 49 72 59 36 56 6a 72 4a 39 6e 61 32 31 6c 72 75 58 74 34 57 33 6e 4c 7a 45 70 5a 7a 43 79 63 2b 6b 78 61 62 4c 72 73 6d 71 7a 36 62 4e 76 70 79 33 73 39 6e 65 74 4e 58 58 73 62 62 59 75 73 58 43 33 4b 6e 66 77 4f 44 43 33 38 54 70 73 65 66 47 35 37 58 52 79 75 33 4f 31 64 48 77 30 74 33 74 39 50 7a 7a 31 76 6e 61 79 4e 76 37 79 51 54 62 41 76 4d 51 35 51 58 6d 38 65 67 49 31 63 33 72 44 65 37 39 38 52 62 64 44 50 51 55 48 65 51 41 47 79 45 63 2b 68 30 6c 37 42 6f 69 45 78 49 45 4a 66 48 70 43 69 6f 62 2b 41 34 73 2b 6a 77 4c 4d 69 50 31 45 54 59 58 48 68 59 36 47 78 34 32 50 55 55 69 48 45 46 4a 4b 68 39 48 54 55 77 71 53 45 74 55 52 6a 6f 2f 56 68 6f 38 50 31 64 44 51 56 34 61 4e 6c 67 6e 4b 56 5a 44 5a 6d 6f Data Ascii: n22Nf6lxq4SnsJmIrY6VjrJ9na21lruXt4W3nLzEpZzCyc+kxabLrsmqz6bNvpy3s9netNXXsbbYusXC3KnfwODC38TpsefG57XRyu3O1dHw0t3t9Pzz1vnayNv7yQTbAvMQ5QXm8egI1c3rDe798RbdDPQUHeQAGyEc+h0l7BoiExIEJfHpCiob+A4s+jwLMiP1ETYXHhY6Gx42PUUiHEFJKh9HTUwqSEtURjo/Vho8P1dDQV4aNlgnKVZDZmo
2023-12-11 19:36:42 UTC	1369	IN	Data Raw: 36 47 56 72 58 4f 59 6c 58 5a 78 6d 4b 43 36 6a 5a 61 32 67 6f 4f 6b 6e 5a 65 49 6f 62 36 75 6e 38 69 72 6a 63 76 42 73 72 65 50 75 4c 69 53 76 4b 32 7a 71 39 36 37 76 64 50 45 72 39 71 65 70 4e 4c 61 70 71 6a 4a 33 63 37 42 75 75 62 6f 37 38 66 6c 31 73 33 67 32 50 48 4e 7a 4f 33 66 79 4e 48 64 39 4e 6a 4f 33 2b 50 41 35 2b 62 57 42 50 6e 71 42 73 7a 35 41 38 2f 67 38 67 76 7a 45 2f 4c 34 39 2f 54 6e 2f 4e 72 63 44 66 73 57 49 78 41 45 47 76 6a 34 42 50 63 4e 43 51 6f 6c 4a 77 34 4b 4a 75 73 56 44 75 37 7a 49 78 6b 63 2b 78 6f 7a 4d 67 6b 4f 48 7a 55 34 4a 43 4d 58 50 79 59 2f 4b 43 45 72 4a 67 63 34 50 43 34 4c 45 44 49 7a 4e 42 51 35 4d 6b 35 58 4b 44 6c 57 57 30 35 53 56 6b 4a 51 51 68 39 4a 4e 45 64 69 4a 46 70 47 63 46 68 61 55 6c 4e 72 55 6d 74 55 Data Ascii: 6GVrXOYlXZxmKC6jZa2goOknZeIob6un8irjcvBsrePuLiSvK2zq967vdPEr9qepNLapqjJ3c7Buubo78fl1s3g2PHNzO3fyNHd9NjO3+PA5+bWBPnqBsz5A8/g8gvzE/L49/Tn/NrcDfsWIxAEGvj4BPcNCQolJw4KJusVDu7zIxkc+xozMgkOHzU4JCMXPyY/KCErJgc4PC4LEDIzNBQ5Mk5XKDlWW05SVkJQQh9JNEdiJFpGcFhaUlNrUmtU
2023-12-11 19:36:42 UTC	1369	IN	Data Raw: 4b 6f 6e 37 79 42 76 4a 72 45 76 4a 57 32 70 37 69 6a 6f 59 53 6a 6e 71 62 51 7a 61 36 77 30 39 44 49 70 73 65 34 73 4d 53 6d 70 74 69 76 34 64 7a 59 74 65 58 67 77 73 62 71 71 74 6a 55 32 38 33 4d 32 4c 71 36 38 4d 2b 73 79 39 4c 58 38 76 54 6b 32 4c 58 53 30 74 41 42 2b 4e 48 66 34 2f 54 66 33 77 6e 66 36 74 6f 4d 43 76 7a 65 44 4f 62 79 36 52 55 52 38 76 63 56 46 50 6b 61 44 41 66 73 43 65 72 71 32 51 49 6c 49 68 30 42 4b 2f 34 55 4b 79 30 5a 36 66 34 78 43 43 44 74 4d 52 2f 70 41 69 51 59 4d 67 6b 39 45 79 6b 53 51 51 77 31 44 78 52 42 4d 69 52 4a 46 43 67 74 47 7a 35 4e 49 69 41 6e 4a 44 34 6a 51 55 45 71 4a 31 6f 76 4a 31 78 4f 57 6b 46 68 49 6c 5a 41 4d 7a 74 64 4e 6a 68 6c 58 6b 35 75 53 47 5a 53 50 30 78 51 56 55 4e 32 61 55 5a 48 56 48 46 4a 66 Data Ascii: Kon7yBvJrEvJW2p7ijoYSjnqbQza6w09DIpse4sMSmptiv4dzYteXgwsbqqtjU283M2Lq68M+sy9LX8vTk2LXS0tAB+NHf4/Tf3wnf6toMCvzeDOby6RUR8vcVFPkaDAfsCerq2QIlIh0BK/4UKy0Z6f4xCCDtMR/pAiQYMgk9EykSQQw1DxRBMiRJFCgtGz5NIiAnJD4jQUEqJ1ovJ1xOWkFhIlZAMztdNjhlXk5uSGZSP0xQVUN2aUZHVHFJf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49749	104.17.3.184	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-11 19:36:42 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1272996923:1702322464:qGqc8UdJzWaM885DJMpt9LcmL3VeLIOVl7hJMJBf_GI/83402d707b45098e/31d2dd173e550d3 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-11 19:36:42 UTC	386	IN	HTTP/1.1 400 Bad Request Date: Mon, 11 Dec 2023 19:36:42 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: i4kwp9DSMY7TQ4LNOkXfFQ==$kIuPUjIpUSuL/3AjTskA1A== Server: cloudflare CF-RAY: 83402d9239ee6dd3-MIA alt-svc: h3=":443"; ma=86400
2023-12-11 19:36:42 UTC	12	IN	Data Raw: 37 0d 0a 69 6e 76 61 6c 69 64 0d 0a Data Ascii: 7invalid
2023-12-11 19:36:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49750	142.250.217.196	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-11 19:36:42 UTC	997	OUT	GET /sorry/index?continue=http://google.co.uk/&q=EgRmgZjUGMnJ3asGIjCugYbjtADgaWeknEqgxEp7vAmnSPBLI05Hh6qhkYnCegYrKiWBiLAkUmkW39h1K1cyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1 Host: www.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2023-12-11 19:36:42 UTC	356	IN	HTTP/1.1 429 Too Many Requests Date: Mon, 11 Dec 2023 19:36:42 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html Server: HTTP server (unknown) Content-Length: 3048 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-11 19:36:42 UTC	896	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 74 69 74 6c 65 3e 68 74 74 70 3a 2f 2f 67 6f 6f 67 6c 65 2e 63 6f 2e 75 6b 2f 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 66 61 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"><meta name="viewport" content="initial-scale=1"><title>http://google.co.uk/</title></head><body style="font-fa
2023-12-11 19:36:42 UTC	1252	IN	Data Raw: 6f 6e 73 65 29 20 7b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 61 70 74 63 68 61 2d 66 6f 72 6d 27 29 2e 73 75 62 6d 69 74 28 29 3b 7d 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 64 69 76 20 69 64 3d 22 72 65 63 61 70 74 63 68 61 22 20 63 6c 61 73 73 3d 22 67 2d 72 65 63 61 70 74 63 68 61 22 20 64 61 74 61 2d 73 69 74 65 6b 65 79 3d 22 36 4c 66 77 75 79 55 54 41 41 41 41 41 4f 41 6d 6f 53 30 66 64 71 69 6a 43 32 50 62 62 64 48 34 6b 6a 71 36 32 59 31 62 22 20 64 61 74 61 2d 63 61 6c 6c 62 61 63 6b 3d 22 73 75 62 6d 69 74 43 61 6c 6c 62 61 63 6b 22 20 64 61 74 61 2d 73 3d 22 4e 55 55 65 47 62 6b 5f 54 39 51 6f 56 4f 41 6c 4b 67 34 78 36 72 59 43 67 6f 5a 69 5f 32 67 58 44 33 52 42 41 62 74 4b 6e 53 4c 36 49 2d 35 42 70 4b 37 73 Data Ascii: onse) {document.getElementById('captcha-form').submit();};</script><div id="recaptcha" class="g-recaptcha" data-sitekey="6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b" data-callback="submitCallback" data-s="NUUeGbk_T9QoVOAlKg4x6rYCgoZi_2gXD3RBAbtKnSL6I-5BpK7s
2023-12-11 19:36:42 UTC	900	IN	Data Raw: 6d 69 6e 67 20 66 72 6f 6d 20 79 6f 75 72 20 63 6f 6d 70 75 74 65 72 20 6e 65 74 77 6f 72 6b 20 77 68 69 63 68 20 61 70 70 65 61 72 20 74 6f 20 62 65 20 69 6e 20 76 69 6f 6c 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 3c 61 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 6f 6c 69 63 69 65 73 2f 74 65 72 6d 73 2f 22 3e 54 65 72 6d 73 20 6f 66 20 53 65 72 76 69 63 65 3c 2f 61 3e 2e 20 54 68 65 20 62 6c 6f 63 6b 20 77 69 6c 6c 20 65 78 70 69 72 65 20 73 68 6f 72 74 6c 79 20 61 66 74 65 72 20 74 68 6f 73 65 20 72 65 71 75 65 73 74 73 20 73 74 6f 70 2e 20 20 49 6e 20 74 68 65 20 6d 65 61 6e 74 69 6d 65 2c 20 73 6f 6c 76 69 6e 67 20 74 68 65 20 61 62 6f 76 65 20 43 41 50 54 43 48 41 20 77 69 6c 6c 20 6c 65 74 20 79 6f 75 20 63 6f 6e 74 69 Data Ascii: ming from your computer network which appear to be in violation of the <a href="//www.google.com/policies/terms/">Terms of Service</a>. The block will expire shortly after those requests stop. In the meantime, solving the above CAPTCHA will let you conti

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49751	142.250.217.196	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-11 19:36:43 UTC	1042	OUT	GET /recaptcha/api.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCI/KzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/sorry/index?continue=http://google.co.uk/&q=EgRmgZjUGMnJ3asGIjCugYbjtADgaWeknEqgxEp7vAmnSPBLI05Hh6qhkYnCegYrKiWBiLAkUmkW39h1K1cyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2023-12-11 19:36:43 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Mon, 11 Dec 2023 19:36:43 GMT Date: Mon, 11 Dec 2023 19:36:43 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-12-11 19:36:43 UTC	724	IN	Data Raw: 34 63 36 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 4c6/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2023-12-11 19:36:43 UTC	505	IN	Data Raw: 6d 56 34 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 5a 58 30 3d 27 3b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 63 77 51 76 51 68 73 79 34 5f 6e 59 64 6e 53 44 59 34 75 37 4f 35 5f 42 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 3b 70 6f 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 27 61 6e 6f 6e 79 6d 6f 75 73 27 3b 70 6f 2e 69 6e 74 65 67 72 69 74 79 3d 27 73 68 61 33 38 34 2d 4a 74 76 68 46 51 6c 50 51 36 4c 4c 2f 2b Data Ascii: mV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-JtvhFQlPQ6LL/+
2023-12-11 19:36:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49753	142.250.217.196	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-11 19:36:45 UTC	1649	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B&size=normal&s=NUUeGbk_T9QoVOAlKg4x6rYCgoZi_2gXD3RBAbtKnSL6I-5BpK7sTjDigyecTEVPu9DS225O5vLHdfN-FuftiYu7FCs3KFQfaXiUWKxLsiky-sJ4TkWwGmAFs1ME2SSU7BzBdR_vGDXsmv7PKVS2qET0K2WooDdE7HF14nLfLWWJIClxd-lZ_xsfnuetvtMQ3hWlO0SvWG5VkxzoxO34Gzk0tvrkC8STgphjZoM1YucrDJ8_v8h6OwutsHU-yxV46U4WMXoPLoPB2rT97Eiexk1-_apH7VY&cb=2vbizkafv8gy HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCI/KzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.google.com/sorry/index?continue=http://google.co.uk/&q=EgRmgZjUGMnJ3asGIjCugYbjtADgaWeknEqgxEp7vAmnSPBLI05Hh6qhkYnCegYrKiWBiLAkUmkW39h1K1cyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2023-12-11 19:36:45 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 11 Dec 2023 19:36:45 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-MhtyQ5ju4TvPrlU2TCx1HQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-12-11 19:36:45 UTC	361	IN	Data Raw: 32 61 33 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2a31<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2023-12-11 19:36:45 UTC	1252	IN	Data Raw: 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 Data Ascii: o/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//f
2023-12-11 19:36:45 UTC	1252	IN	Data Raw: 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 2d 31 45 39 46 2c 20 55 2b 31 45 46 32 2d 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 46 2c 20 Data Ascii: boto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20CF,
2023-12-11 19:36:45 UTC	1252	IN	Data Raw: 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 Data Ascii: font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/* greek */@font-face { font-family: 'Roboto'; font-sty
2023-12-11 19:36:45 UTC	1252	IN	Data Raw: 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 37 34 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a Data Ascii: to/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}
2023-12-11 19:36:45 UTC	1252	IN	Data Raw: 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 2d Data Ascii: * vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-
2023-12-11 19:36:45 UTC	1252	IN	Data Raw: 35 6a 75 34 54 76 50 72 6c 55 32 54 43 78 31 48 51 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 61 70 69 32 2f 27 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 63 77 51 76 51 68 73 79 34 5f 6e 59 64 6e 53 44 59 34 75 37 4f 35 5f 42 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 4d 68 74 79 51 Data Ascii: 5ju4TvPrlU2TCx1HQ" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com/recaptcha/api2/';</script><script type="text/javascript" src="https://www.gstatic.com/recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/recaptcha__en.js" nonce="MhtyQ
2023-12-11 19:36:45 UTC	1252	IN	Data Raw: 49 6e 32 5f 41 71 68 31 59 36 72 4a 67 62 37 59 32 73 56 5f 53 49 75 73 65 4f 52 56 4a 42 78 67 6f 52 67 56 53 63 34 71 6a 56 52 75 4b 4a 67 65 36 6c 2d 45 6c 73 37 76 6a 50 63 4b 5a 68 70 6f 56 6b 68 6d 70 5f 6e 77 65 64 47 2d 31 4e 41 6c 46 6f 74 69 78 57 38 33 73 69 56 39 57 49 43 77 48 45 65 4c 2d 78 64 5f 35 65 66 74 6e 72 52 61 74 4e 62 36 63 4c 77 6c 37 31 39 42 6a 66 78 49 62 59 71 55 52 71 2d 65 74 44 74 62 47 65 70 42 78 63 70 74 65 73 37 32 74 72 75 55 67 34 56 74 4b 67 2d 5a 4d 6a 4f 4f 35 48 6d 50 5f 58 4f 43 4f 33 77 38 43 67 5f 32 6d 39 46 62 64 4d 49 36 4b 68 38 5f 53 68 61 70 53 47 43 35 66 78 41 76 45 7a 67 6c 2d 52 37 30 5f 32 37 64 33 36 6a 5a 7a 7a 38 36 72 68 37 6e 49 47 77 72 4c 6c 59 57 52 33 34 34 53 53 6f 39 39 49 4b 75 6c 5f 6c Data Ascii: In2_Aqh1Y6rJgb7Y2sV_SIuseORVJBxgoRgVSc4qjVRuKJge6l-Els7vjPcKZhpoVkhmp_nwedG-1NAlFotixW83siV9WICwHEeL-xd_5eftnrRatNb6cLwl719BjfxIbYqURq-etDtbGepBxcptes72truUg4VtKg-ZMjOO5HmP_XOCO3w8Cg_2m9FbdMI6Kh8_ShapSGC5fxAvEzgl-R70_27d36jZzz86rh7nIGwrLlYWR344SSo99IKul_l
2023-12-11 19:36:45 UTC	1252	IN	Data Raw: 5f 45 72 45 44 48 62 73 31 43 6c 48 52 62 63 43 34 36 30 64 76 68 34 73 38 5a 67 36 65 6c 66 35 69 64 75 64 57 65 70 45 34 61 2d 2d 49 6d 50 73 54 4c 63 41 51 41 45 70 59 71 67 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 4d 68 74 79 51 35 6a 75 34 54 76 50 72 6c 55 32 54 43 78 31 48 51 22 3e 0a 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 61 6e 63 68 6f 72 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 61 69 6e 70 75 74 5c 78 32 32 2c 5b 5c 78 32 32 62 67 64 61 74 61 5c 78 32 32 2c 5c 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 73 52 55 56 4e 4e 46 70 4d 52 45 78 47 64 58 5a 42 56 46 5a 32 59 32 35 34 5a 32 78 4a Data Ascii: _ErEDHbs1ClHRbcC460dvh4s8Zg6elf5idudWepE4a--ImPsTLcAQAEpYqg"><script type="text/javascript" nonce="MhtyQ5ju4TvPrlU2TCx1HQ"> recaptcha.anchor.Main.init("[\x22ainput\x22,[\x22bgdata\x22,\x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy9sRUVNNFpMRExGdXZBVFZ2Y254Z2xJ
2023-12-11 19:36:45 UTC	432	IN	Data Raw: 75 53 56 41 72 63 6a 68 4d 4d 30 39 55 54 55 6c 57 55 47 64 78 5a 30 38 79 61 6c 52 6e 53 6e 42 34 64 46 68 4a 4d 46 42 33 4f 48 6c 31 54 6a 46 33 4b 7a 6c 73 5a 6b 30 32 4d 7a 5a 36 54 6a 6c 45 55 55 4a 73 51 58 64 68 61 57 4a 6b 52 45 46 43 57 55 52 52 4c 31 4a 52 55 45 39 57 4e 31 6c 77 5a 6a 56 59 52 6c 46 48 63 6b 68 53 52 6d 31 74 65 44 4e 46 51 33 64 47 65 6e 6c 70 55 57 6c 5a 52 6c 4a 4c 54 46 56 56 5a 31 5a 6d 64 45 5a 4f 53 57 6b 34 56 54 6c 69 59 33 42 74 4f 58 45 35 4b 30 46 4b 53 48 56 73 54 6b 74 48 51 6c 64 70 4f 46 46 72 52 58 4e 6e 59 30 31 35 64 6b 68 44 53 33 45 30 53 31 4a 6a 54 31 42 6c 51 32 78 79 54 6e 64 54 61 48 42 58 64 46 70 70 62 32 4d 34 54 7a 42 76 65 54 4d 72 62 55 4a 7a 5a 48 51 78 55 6e 63 34 55 46 42 4b 4f 47 74 61 61 30 Data Ascii: uSVArcjhMM09UTUlWUGdxZ08yalRnSnB4dFhJMFB3OHl1TjF3KzlsZk02MzZ6TjlEUUJsQXdhaWJkREFCWURRL1JRUE9WN1lwZjVYRlFHckhSRm1teDNFQ3dGenlpUWlZRlJLTFVVZ1ZmdEZOSWk4VTliY3BtOXE5K0FKSHVsTktHQldpOFFrRXNnY015dkhDS3E0S1JjT1BlQ2xyTndTaHBXdFppb2M4TzBveTMrbUJzZHQxUnc4UFBKOGtaa0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49757	142.250.217.196	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-11 19:36:46 UTC	1367	OUT	GET /js/bg/lEEM4ZLDLFuvATVvcnxglI8CLvLrSc6BLt7Ue_ua1SM.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCI/KzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B&size=normal&s=NUUeGbk_T9QoVOAlKg4x6rYCgoZi_2gXD3RBAbtKnSL6I-5BpK7sTjDigyecTEVPu9DS225O5vLHdfN-FuftiYu7FCs3KFQfaXiUWKxLsiky-sJ4TkWwGmAFs1ME2SSU7BzBdR_vGDXsmv7PKVS2qET0K2WooDdE7HF14nLfLWWJIClxd-lZ_xsfnuetvtMQ3hWlO0SvWG5VkxzoxO34Gzk0tvrkC8STgphjZoM1YucrDJ8_v8h6OwutsHU-yxV46U4WMXoPLoPB2rT97Eiexk1-_apH7VY&cb=2vbizkafv8gy Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2023-12-11 19:36:46 UTC	812	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 17029 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 08 Dec 2023 12:41:04 GMT Expires: Sat, 07 Dec 2024 12:41:04 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 28 Nov 2023 18:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 284142 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-11 19:36:46 UTC	440	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 43 3d 66 75 6e 63 74 69 6f 6e 28 78 2c 55 29 7b 69 66 28 21 28 78 3d 28 55 3d 62 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 6e 75 6c 6c 29 2c 55 29 7c 7c 21 55 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 78 3b 74 72 79 7b 78 3d 55 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 61 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 61 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 61 7d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var C=function(x,U){if(!(x=(U=b.trustedTypes,null),U)\|\|!U.createPolicy)return x;try{x=U.createPolicy("bg",{createHTML:a,createScript:a,createScriptURL:a}
2023-12-11 19:36:46 UTC	1252	IN	Data Raw: 55 2e 63 72 65 61 74 65 53 63 72 69 70 74 28 52 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 52 29 7b 72 65 74 75 72 6e 22 22 2b 52 7d 7d 28 62 29 28 41 72 72 61 79 28 37 38 32 34 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 2e 6a 6f 69 6e 28 22 5c 6e 22 29 2b 27 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 63 3d 66 75 6e 63 74 69 6f 6e 28 78 2c 55 2c 61 2c 52 2c 43 2c 4a 29 7b 66 6f 72 28 4a 3d 28 43 3d 28 52 2e 63 6e 3d 28 52 2e 43 74 3d 52 65 28 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6e 63 61 74 28 29 7d 7d 2c 28 52 2e 49 4b 3d 28 52 2e 6d 33 3d 55 5a 2c 78 75 29 2c 52 2e 56 6c 3d 52 5b 7a 5d 2c 52 2e 76 29 29 2c 47 29 5b 52 2e 76 5d 28 52 2e 43 74 2c 7b 76 61 6c 75 65 3a 7b 76 61 6c 75 65 3a 7b 7d Data Ascii: U.createScript(R)}:function(R){return""+R}}(b)(Array(7824*Math.random()\|0).join("\n")+'(function(){var hc=function(x,U,a,R,C,J){for(J=(C=(R.cn=(R.Ct=Re({get:function(){return this.concat()}},(R.IK=(R.m3=UZ,xu),R.Vl=R[z],R.v)),G)[R.v](R.Ct,{value:{value:{}
2023-12-11 19:36:46 UTC	1252	IN	Data Raw: 28 62 29 2c 65 29 28 62 29 2c 72 29 2c 5a 28 62 2c 49 29 7c 7c 5a 28 62 2c 75 29 29 7d 2c 28 51 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 6a 75 28 62 2c 34 29 7d 2c 28 51 28 66 75 6e 63 74 69 6f 6e 28 62 2c 72 2c 49 29 7b 28 72 3d 28 49 3d 28 72 3d 28 49 3d 65 28 62 29 2c 65 28 62 29 29 2c 30 21 3d 5a 28 62 2c 49 29 29 2c 5a 28 62 2c 72 29 29 2c 49 29 26 26 57 28 62 2c 34 31 35 2c 72 29 7d 2c 28 51 28 66 75 6e 63 74 69 6f 6e 28 62 2c 72 2c 49 2c 75 29 7b 21 74 28 72 2c 74 72 75 65 2c 62 2c 66 61 6c 73 65 29 26 26 28 72 3d 4a 63 28 62 29 2c 75 3d 72 2e 65 43 2c 49 3d 72 2e 6b 63 2c 62 2e 44 3d 3d 62 7c 7c 75 3d 3d 62 2e 72 6b 26 26 49 3d 3d 62 29 26 26 28 57 28 62 2c 72 2e 6a 43 2c 75 2e 61 70 70 6c 79 28 49 2c 72 2e 55 29 29 2c 62 2e 4b 3d 62 2e 43 28 29 29 Data Ascii: (b),e)(b),r),Z(b,I)\|\|Z(b,u))},(Q(function(b){ju(b,4)},(Q(function(b,r,I){(r=(I=(r=(I=e(b),e(b)),0!=Z(b,I)),Z(b,r)),I)&&W(b,415,r)},(Q(function(b,r,I,u){!t(r,true,b,false)&&(r=Jc(b),u=r.eC,I=r.kc,b.D==b\|\|u==b.rk&&I==b)&&(W(b,r.jC,u.apply(I,r.U)),b.K=b.C())
2023-12-11 19:36:46 UTC	1252	IN	Data Raw: 6f 69 64 20 30 2c 52 2e 54 3d 28 52 2e 47 3d 28 52 2e 76 6e 3d 28 28 52 2e 69 3d 30 2c 52 29 2e 4b 3d 30 2c 52 2e 75 3d 28 52 2e 44 3d 52 2c 52 2e 4c 3d 5b 5d 2c 66 61 6c 73 65 29 2c 52 2e 6f 3d 30 2c 52 2e 50 3d 30 2c 28 28 52 2e 5a 3d 31 2c 52 29 2e 4f 3d 6e 75 6c 6c 2c 28 52 2e 53 3d 76 6f 69 64 20 30 2c 52 29 2e 50 6e 3d 38 30 30 31 2c 4a 3d 28 52 2e 6c 3d 30 2c 52 2e 42 3d 5b 5d 2c 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 29 7c 7c 7b 7d 2c 52 29 2e 67 3d 28 52 2e 72 6b 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 74 68 69 73 2e 44 3d 62 7d 2c 28 52 2e 67 6b 3d 28 52 2e 59 63 3d 66 61 6c 73 65 2c 78 29 2c 52 29 2e 78 63 3d 28 52 2e 56 3d 28 52 2e 61 4b 3d 32 35 2c 76 6f 69 64 20 30 29 2c 52 2e 48 3d 76 6f 69 64 20 30 2c 52 2e 52 3d 5b 5d 2c 30 Data Ascii: oid 0,R.T=(R.G=(R.vn=((R.i=0,R).K=0,R.u=(R.D=R,R.L=[],false),R.o=0,R.P=0,((R.Z=1,R).O=null,(R.S=void 0,R).Pn=8001,J=(R.l=0,R.B=[],window.performance)\|\|{},R).g=(R.rk=function(b){this.D=b},(R.gk=(R.Yc=false,x),R).xc=(R.V=(R.aK=25,void 0),R.H=void 0,R.R=[],0
2023-12-11 19:36:46 UTC	1252	IN	Data Raw: 2e 44 29 2c 72 3d 54 2e 6a 43 2c 66 3d 54 2e 6b 63 2c 75 3d 54 2e 65 43 2c 54 3d 54 2e 55 2c 49 3d 54 2e 6c 65 6e 67 74 68 2c 66 3d 30 3d 3d 49 3f 6e 65 77 20 66 5b 75 5d 3a 31 3d 3d 49 3f 6e 65 77 20 66 5b 75 5d 28 54 5b 30 5d 29 3a 32 3d 3d 49 3f 6e 65 77 20 66 5b 75 5d 28 54 5b 30 5d 2c 54 5b 31 5d 29 3a 33 3d 3d 49 3f 6e 65 77 20 66 5b 75 5d 28 54 5b 30 5d 2c 54 5b 31 5d 2c 54 5b 32 5d 29 3a 34 3d 3d 49 3f 6e 65 77 20 66 5b 75 5d 28 54 5b 30 5d 2c 54 5b 31 5d 2c 54 5b 32 5d 2c 54 5b 33 5d 29 3a 32 28 29 2c 57 28 62 2c 72 2c 66 29 29 7d 2c 52 2c 31 38 36 29 2c 52 29 2c 34 34 2c 5b 5d 29 2c 52 29 2c 33 30 39 29 2c 32 31 31 29 2c 30 29 2c 51 28 66 75 6e 63 74 69 6f 6e 28 62 2c 72 2c 49 2c 75 29 7b 57 28 62 2c 28 75 3d 5a 28 28 49 3d 28 72 3d 65 28 28 75 Data Ascii: .D),r=T.jC,f=T.kc,u=T.eC,T=T.U,I=T.length,f=0==I?new f[u]:1==I?new f[u](T[0]):2==I?new f[u](T[0],T[1]):3==I?new f[u](T[0],T[1],T[2]):4==I?new f[u](T[0],T[1],T[2],T[3]):2(),W(b,r,f))},R,186),R),44,[]),R),309),211),0),Q(function(b,r,I,u){W(b,(u=Z((I=(r=e((u
2023-12-11 19:36:46 UTC	1252	IN	Data Raw: 28 43 3d 52 2d 28 74 68 69 73 2e 6e 2b 2b 2c 74 68 69 73 2e 49 29 2c 43 29 2f 74 68 69 73 2e 6e 2c 43 2a 28 52 2d 74 68 69 73 2e 49 29 29 7d 29 2c 61 29 2c 6e 65 77 20 61 29 2c 66 75 6e 63 74 69 6f 6e 28 52 29 7b 72 65 74 75 72 6e 20 78 3d 28 52 3d 5b 55 2e 48 6e 28 29 2c 78 2e 48 6e 28 29 5d 2c 6e 65 77 20 61 29 2c 52 7d 29 5d 7d 2c 69 38 3d 66 75 6e 63 74 69 6f 6e 28 78 2c 55 2c 61 2c 52 2c 43 2c 4a 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 69 66 28 52 2e 44 3d 3d 52 29 7b 69 66 28 52 2e 42 29 7b 76 61 72 20 72 3d 5b 68 2c 78 2c 61 2c 76 6f 69 64 20 30 2c 43 2c 4a 2c 61 72 67 75 6d 65 6e 74 73 5d 3b 69 66 28 32 3d 3d 55 29 76 61 72 20 49 3d 70 28 66 61 6c 73 65 2c 52 2c 28 71 28 52 2c 72 29 2c 66 61 6c 73 65 29 29 3b 65 6c 73 65 20 69 66 28 31 3d 3d Data Ascii: (C=R-(this.n++,this.I),C)/this.n,C*(R-this.I))}),a),new a),function(R){return x=(R=[U.Hn(),x.Hn()],new a),R})]},i8=function(x,U,a,R,C,J){function b(){if(R.D==R){if(R.B){var r=[h,x,a,void 0,C,J,arguments];if(2==U)var I=p(false,R,(q(R,r),false));else if(1==
2023-12-11 19:36:46 UTC	1252	IN	Data Raw: 28 52 3d 3d 47 50 29 7b 74 72 79 7b 66 6f 72 28 43 3d 30 3b 43 3c 55 2e 52 2e 6c 65 6e 67 74 68 3b 43 2b 2b 29 74 72 79 7b 61 3d 55 2e 52 5b 43 5d 2c 61 5b 30 5d 5b 61 5b 31 5d 5d 28 61 5b 32 5d 29 7d 63 61 74 63 68 28 4a 29 7b 7d 7d 63 61 74 63 68 28 4a 29 7b 7d 28 30 2c 78 5b 31 5d 29 28 28 55 2e 52 3d 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 4a 2c 62 29 7b 55 2e 41 28 4a 2c 74 72 75 65 2c 62 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 4a 29 7b 71 28 55 2c 28 4a 3d 21 55 2e 4c 2e 6c 65 6e 67 74 68 2c 5b 5a 71 5d 29 29 2c 4a 26 26 70 28 74 72 75 65 2c 55 2c 66 61 6c 73 65 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 4a 29 7b 72 65 74 75 72 6e 20 55 2e 57 28 4a 29 7d 29 7d 65 6c 73 65 7b 69 66 28 52 3d 3d 68 29 72 65 74 75 72 6e 20 43 3d 78 5b 32 5d 2c 57 28 55 2c 34 36 36 Data Ascii: (R==GP){try{for(C=0;C<U.R.length;C++)try{a=U.R[C],a[0][a[1]](a[2])}catch(J){}}catch(J){}(0,x[1])((U.R=[],function(J,b){U.A(J,true,b)}),function(J){q(U,(J=!U.L.length,[Zq])),J&&p(true,U,false)},function(J){return U.W(J)})}else{if(R==h)return C=x[2],W(U,466
2023-12-11 19:36:46 UTC	1252	IN	Data Raw: 63 6f 6e 63 61 74 28 78 2e 4c 74 28 29 29 2c 6e 65 77 20 61 29 2c 52 7d 5d 7d 2c 59 75 3d 66 75 6e 63 74 69 6f 6e 28 78 2c 55 2c 61 2c 52 29 7b 72 65 74 75 72 6e 20 5a 28 78 2c 28 57 28 78 2c 28 64 43 28 78 2c 28 28 52 3d 5a 28 78 2c 34 31 35 29 2c 78 2e 54 29 26 26 52 3c 78 2e 50 3f 28 57 28 78 2c 34 31 35 2c 78 2e 50 29 2c 72 43 28 61 2c 78 29 29 3a 57 28 78 2c 34 31 35 2c 61 29 2c 55 29 29 2c 34 31 35 29 2c 52 29 2c 33 38 29 29 7d 2c 4a 63 3d 66 75 6e 63 74 69 6f 6e 28 78 2c 55 2c 61 2c 52 2c 43 2c 4a 29 7b 66 6f 72 28 55 3d 28 43 3d 28 4a 3d 28 28 28 61 3d 28 52 3d 78 5b 6d 53 5d 7c 7c 7b 7d 2c 65 28 78 29 29 2c 52 29 2e 6a 43 3d 65 28 78 29 2c 52 29 2e 55 3d 5b 5d 2c 78 2e 44 29 3d 3d 78 3f 28 4f 28 78 29 7c 30 29 2d 31 3a 31 2c 65 29 28 78 29 2c 30 Data Ascii: concat(x.Lt()),new a),R}]},Yu=function(x,U,a,R){return Z(x,(W(x,(dC(x,((R=Z(x,415),x.T)&&R<x.P?(W(x,415,x.P),rC(a,x)):W(x,415,a),U)),415),R),38))},Jc=function(x,U,a,R,C,J){for(U=(C=(J=(((a=(R=x[mS]\|\|{},e(x)),R).jC=e(x),R).U=[],x.D)==x?(O(x)\|0)-1:1,e)(x),0
2023-12-11 19:36:46 UTC	1252	IN	Data Raw: 55 5d 3d 28 78 5b 55 5d 7c 30 29 2d 28 78 5b 28 28 55 7c 30 29 2b 31 29 25 33 5d 7c 30 29 2d 28 52 7c 30 29 5e 28 31 3d 3d 55 3f 52 3c 3c 61 3a 52 3e 3e 3e 61 29 7d 63 61 74 63 68 28 43 29 7b 74 68 72 6f 77 20 43 3b 7d 7d 2c 4f 3d 66 75 6e 63 74 69 6f 6e 28 78 29 7b 72 65 74 75 72 6e 20 78 2e 48 3f 73 5a 28 78 2e 56 2c 78 29 3a 41 28 74 72 75 65 2c 38 2c 78 29 7d 2c 56 66 3d 66 75 6e 63 74 69 6f 6e 28 78 2c 55 29 7b 72 65 74 75 72 6e 20 78 5b 55 5d 3c 3c 32 34 7c 78 5b 28 55 7c 30 29 2b 31 5d 3c 3c 31 36 7c 78 5b 28 55 7c 30 29 2b 32 5d 3c 3c 38 7c 78 5b 28 55 7c 30 29 2b 33 5d 7d 2c 64 43 3d 66 75 6e 63 74 69 6f 6e 28 78 2c 55 2c 61 2c 52 2c 43 2c 4a 29 7b 69 66 28 21 78 2e 47 29 7b 78 2e 6f 2b 2b 3b 74 72 79 7b 66 6f 72 28 43 3d 28 61 3d 28 4a 3d 78 2e Data Ascii: U]=(x[U]\|0)-(x[((U\|0)+1)%3]\|0)-(R\|0)^(1==U?R<<a:R>>>a)}catch(C){throw C;}},O=function(x){return x.H?sZ(x.V,x):A(true,8,x)},Vf=function(x,U){return x[U]<<24\|x[(U\|0)+1]<<16\|x[(U\|0)+2]<<8\|x[(U\|0)+3]},dC=function(x,U,a,R,C,J){if(!x.G){x.o++;try{for(C=(a=(J=x.
2023-12-11 19:36:46 UTC	1252	IN	Data Raw: 69 66 28 22 5b 6f 62 6a 65 63 74 20 46 75 6e 63 74 69 6f 6e 5d 22 3d 3d 61 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 78 2e 63 61 6c 6c 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 78 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 26 26 21 78 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 28 22 63 61 6c 6c 22 29 29 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 7d 65 6c 73 65 20 72 65 74 75 72 6e 22 6e 75 6c 6c 22 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 55 26 26 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 78 2e 63 61 6c 6c 29 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3b 72 65 74 75 72 6e 20 55 7d 2c 41 63 3d 66 75 6e 63 74 69 6f 6e 28 78 2c Data Ascii: if("[object Function]"==a\|\|"undefined"!=typeof x.call&&"undefined"!=typeof x.propertyIsEnumerable&&!x.propertyIsEnumerable("call"))return"function"}else return"null";else if("function"==U&&"undefined"==typeof x.call)return"object";return U},Ac=function(x,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49759	142.250.217.196	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-11 19:36:46 UTC	1379	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCI/KzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B&size=normal&s=NUUeGbk_T9QoVOAlKg4x6rYCgoZi_2gXD3RBAbtKnSL6I-5BpK7sTjDigyecTEVPu9DS225O5vLHdfN-FuftiYu7FCs3KFQfaXiUWKxLsiky-sJ4TkWwGmAFs1ME2SSU7BzBdR_vGDXsmv7PKVS2qET0K2WooDdE7HF14nLfLWWJIClxd-lZ_xsfnuetvtMQ3hWlO0SvWG5VkxzoxO34Gzk0tvrkC8STgphjZoM1YucrDJ8_v8h6OwutsHU-yxV46U4WMXoPLoPB2rT97Eiexk1-_apH7VY&cb=2vbizkafv8gy Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2023-12-11 19:36:47 UTC	655	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Mon, 11 Dec 2023 19:36:47 GMT Date: Mon, 11 Dec 2023 19:36:47 GMT Cache-Control: private, max-age=300 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-12-11 19:36:47 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 63 77 51 76 51 68 73 79 34 5f 6e 59 64 6e 53 44 59 34 75 37 4f 35 5f 42 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/recaptcha__en.js');
2023-12-11 19:36:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49761	142.250.217.196	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-11 19:36:47 UTC	1097	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCI/KzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/sorry/index?continue=http://google.co.uk/&q=EgRmgZjUGMnJ3asGIjCugYbjtADgaWeknEqgxEp7vAmnSPBLI05Hh6qhkYnCegYrKiWBiLAkUmkW39h1K1cyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2023-12-11 19:36:47 UTC	707	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 08 Dec 2023 12:29:16 GMT Expires: Sat, 16 Dec 2023 12:29:16 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 284851 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-11 19:36:47 UTC	545	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2023-12-11 19:36:47 UTC	1252	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 a6 75 ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff 0b be fb ff 05 bc fb ff b6 ec fe ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 aa 7b ff ff ff ff ff fd fd fd f9 fd fd fd db ff ff ff ff 35 c9 fc ff 0a b2 f9 ff 6b a4 f6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 Data Ascii: BBBBBuBBBBB{5k7R8F2Vb5C
2023-12-11 19:36:47 UTC	1252	IN	Data Raw: ff de ee d8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 fe fe fe 2f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 24 fd fd fd ea ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff eb f5 e7 ff 8f c6 7b ff 54 a9 36 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 7e be 67 ff dd ee d7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 ff ff ff 22 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd d3 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff c4 e1 b9 ff 5c ac 3e ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 Data Ascii: /${T6S4S4S4S4S4S4S4S4S4~g"\>S4S4S4S4S4S4S4S4S4S
2023-12-11 19:36:47 UTC	1252	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fa c8 aa ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBBBBBB}BBBBBBBBBBB}
2023-12-11 19:36:47 UTC	1129	IN	Data Raw: ff ff ff ff ff a0 a7 f5 ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 81 8a f2 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 8a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 0b fd fd fd d5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b5 ba f7 ff 3e 4b eb ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 3f 4c eb ff ba bf f8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 26 fd fd fd eb ff ff Data Ascii: 5C5C5C5C5C5C5C5C5C5C5C5C5C5C5C>K5C5C5C5C5C5C5C5C5C5C5C5C?L&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49762	142.250.217.196	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-11 19:36:47 UTC	1286	OUT	GET /recaptcha/api2/bframe?hl=en&v=cwQvQhsy4_nYdnSDY4u7O5_B&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCI/KzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.google.com/sorry/index?continue=http://google.co.uk/&q=EgRmgZjUGMnJ3asGIjCugYbjtADgaWeknEqgxEp7vAmnSPBLI05Hh6qhkYnCegYrKiWBiLAkUmkW39h1K1cyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2023-12-11 19:36:48 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 11 Dec 2023 19:36:47 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-cwdQfC7HRDH_fvdB50V7zQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-12-11 19:36:48 UTC	361	IN	Data Raw: 31 63 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 Data Ascii: 1c55<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face
2023-12-11 19:36:48 UTC	1252	IN	Data Raw: 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f Data Ascii: to/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//
2023-12-11 19:36:48 UTC	1252	IN	Data Raw: 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 2d 31 45 39 46 2c 20 55 2b 31 45 46 32 2d 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 46 2c Data Ascii: oboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20CF,
2023-12-11 19:36:48 UTC	1252	IN	Data Raw: 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 Data Ascii: font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/* greek */@font-face { font-family: 'Roboto'; font-st
2023-12-11 19:36:48 UTC	1252	IN	Data Raw: 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 37 34 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d Data Ascii: oto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}
2023-12-11 19:36:48 UTC	1252	IN	Data Raw: 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 Data Ascii: /* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168
2023-12-11 19:36:48 UTC	640	IN	Data Raw: 66 43 37 48 52 44 48 5f 66 76 64 42 35 30 56 37 7a 51 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 61 70 69 32 2f 27 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 63 77 51 76 51 68 73 79 34 5f 6e 59 64 6e 53 44 59 34 75 37 4f 35 5f 42 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 63 77 64 51 Data Ascii: fC7HRDH_fvdB50V7zQ" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com/recaptcha/api2/';</script><script type="text/javascript" src="https://www.gstatic.com/recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/recaptcha__en.js" nonce="cwdQ
2023-12-11 19:36:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49764	192.178.50.68	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-11 19:36:48 UTC	635	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2023-12-11 19:36:48 UTC	706	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 11 Dec 2023 14:17:29 GMT Expires: Tue, 19 Dec 2023 14:17:29 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 19159 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-11 19:36:48 UTC	546	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2023-12-11 19:36:48 UTC	1252	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 a6 75 ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff 0b be fb ff 05 bc fb ff b6 ec fe ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 aa 7b ff ff ff ff ff fd fd fd f9 fd fd fd db ff ff ff ff 35 c9 fc ff 0a b2 f9 ff 6b a4 f6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea Data Ascii: BBBBBuBBBBB{5k7R8F2Vb5C
2023-12-11 19:36:48 UTC	1252	IN	Data Raw: de ee d8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 fe fe fe 2f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 24 fd fd fd ea ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff eb f5 e7 ff 8f c6 7b ff 54 a9 36 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 7e be 67 ff dd ee d7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 ff ff ff 22 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd d3 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff c4 e1 b9 ff 5c ac 3e ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 Data Ascii: /${T6S4S4S4S4S4S4S4S4S4~g"\>S4S4S4S4S4S4S4S4S4S4
2023-12-11 19:36:48 UTC	1252	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fa c8 aa ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBBBBBB}BBBBBBBBBBB}
2023-12-11 19:36:48 UTC	1128	IN	Data Raw: ff ff ff ff a0 a7 f5 ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 81 8a f2 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 8a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 0b fd fd fd d5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b5 ba f7 ff 3e 4b eb ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 3f 4c eb ff ba bf f8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 26 fd fd fd eb ff ff ff Data Ascii: 5C5C5C5C5C5C5C5C5C5C5C5C5C5C5C>K5C5C5C5C5C5C5C5C5C5C5C5C?L&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49765	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2023-12-11 19:37:16 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=9OLg8t8ONbh6t9a&MD=RWzokL8v HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2023-12-11 19:37:17 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: 8bea7b23-fb0a-4397-8d3f-16874e8034d7 MS-RequestId: 4c12d3dd-062b-4c98-a8b8-126146d492dd MS-CV: FoO6lG+CU0yEcSIh.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 11 Dec 2023 19:37:16 GMT Connection: close Content-Length: 25457
2023-12-11 19:37:17 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2023-12-11 19:37:17 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.5	49770	192.178.50.78	443

Timestamp	Bytes transferred	Direction	Data
2023-12-11 19:37:52 UTC	449	OUT	GET /tools/pso/ping?as=chrome&brand=ONGR&pid=&hl=en&events=C1I,C2I,C7I,C1S,C7S&rep=2&rlz=C1:,C2:,C7:&id=000000000000000000000000000000000000000097CD000E57 HTTP/1.1 Host: clients1.google.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br
2023-12-11 19:37:52 UTC	817	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce--G-H2ZkATSBc_1Yv-PA2Ig' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/download-dt/1 Content-Security-Policy: script-src 'report-sample' 'nonce-AAdQxz-KG3J8fS1vle2PRQ' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/download-dt/1 Content-Type: text/plain; charset=utf-8 Content-Length: 220 Date: Mon, 11 Dec 2023 19:37:52 GMT Expires: Mon, 11 Dec 2023 19:37:52 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-11 19:37:52 UTC	220	IN	Data Raw: 72 6c 7a 43 31 3a 20 31 43 31 4f 4e 47 52 5f 65 6e 55 53 31 30 38 38 0a 72 6c 7a 43 32 3a 20 31 43 32 4f 4e 47 52 5f 65 6e 55 53 31 30 38 38 0a 72 6c 7a 43 37 3a 20 31 43 37 4f 4e 47 52 5f 65 6e 55 53 31 30 38 38 0a 64 63 63 3a 20 0a 73 65 74 5f 64 63 63 3a 20 43 31 3a 31 43 31 4f 4e 47 52 5f 65 6e 55 53 31 30 38 38 2c 43 32 3a 31 43 32 4f 4e 47 52 5f 65 6e 55 53 31 30 38 38 2c 43 37 3a 31 43 37 4f 4e 47 52 5f 65 6e 55 53 31 30 38 38 0a 65 76 65 6e 74 73 3a 20 43 31 49 2c 43 32 49 2c 43 37 49 2c 43 31 53 2c 43 37 53 0a 73 74 61 74 65 66 75 6c 2d 65 76 65 6e 74 73 3a 20 43 31 49 2c 43 32 49 2c 43 37 49 0a 63 72 63 33 32 3a 20 66 62 64 37 30 39 64 62 0a Data Ascii: rlzC1: 1C1ONGR_enUS1088rlzC2: 1C2ONGR_enUS1088rlzC7: 1C7ONGR_enUS1088dcc: set_dcc: C1:1C1ONGR_enUS1088,C2:1C2ONGR_enUS1088,C7:1C7ONGR_enUS1088events: C1I,C2I,C7I,C1S,C7Sstateful-events: C1I,C2I,C7Icrc32: fbd709db

Target ID:	0
Start time:	20:36:17
Start date:	11/12/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	20:36:20
Start date:	11/12/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2404 --field-trial-handle=2256,i,16544369044721870028,13479729168788484395,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	20:36:24
Start date:	11/12/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" "https://cmax.co.uk/bv.PDF
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://cmax.co.uk/bv.PDF

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Chrome Cache Entry: 92

Chrome Cache Entry: 93

Chrome Cache Entry: 94

Chrome Cache Entry: 95

Chrome Cache Entry: 96

Chrome Cache Entry: 97

Chrome Cache Entry: 98

Chrome Cache Entry: 99

Windows Analysis Report
https://cmax.co.uk/bv.PDF