Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
https://sclreg.com/122861d2-a974-4dcc-80de-fc04620cb773/

Overview

General Information

Sample URL:https://sclreg.com/122861d2-a974-4dcc-80de-fc04620cb773/
Analysis ID:1446885
Infos:

Detection

HTMLPhisher
Score:64
Range:0 - 100
Whitelisted:false
Confidence:100%

Signatures

Antivirus / Scanner detection for submitted sample
Antivirus detection for URL or domain
Yara detected BlockedWebSite

Classification

  • System is w10x64
  • chrome.exe (PID: 7052 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)
    • chrome.exe (PID: 5772 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2388 --field-trial-handle=2216,i,16482093608261227541,114962425812962219,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)
  • chrome.exe (PID: 1912 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sclreg.com/122861d2-a974-4dcc-80de-fc04620cb773/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)
  • cleanup
No configs have been found
SourceRuleDescriptionAuthorStrings
dropped/chromecache_44JoeSecurity_BlockedWebSiteYara detected BlockedWebSiteJoe Security
    SourceRuleDescriptionAuthorStrings
    0.0.pages.csvJoeSecurity_BlockedWebSiteYara detected BlockedWebSiteJoe Security
      No Sigma rule has matched
      No Snort rule has matched

      Click to jump to signature section

      Show All Signature Results

      AV Detection

      barindex
      Source: https://sclreg.com/122861d2-a974-4dcc-80de-fc04620cb773/Avira URL Cloud: detection malicious, Label: phishing
      Source: https://sclreg.com/122861d2-a974-4dcc-80de-fc04620cb773/SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social usering
      Source: https://sclreg.com/cdn-cgi/images/icon-exclamation.png?1376755637Avira URL Cloud: Label: phishing
      Source: https://sclreg.com/favicon.icoAvira URL Cloud: Label: phishing
      Source: https://sclreg.com/cdn-cgi/styles/cf.errors.cssAvira URL Cloud: Label: phishing

      Phishing

      barindex
      Source: Yara matchFile source: 0.0.pages.csv, type: HTML
      Source: Yara matchFile source: dropped/chromecache_44, type: DROPPED
      Source: https://sclreg.com/122861d2-a974-4dcc-80de-fc04620cb773/HTTP Parser: No favicon
      Source: unknownHTTPS traffic detected: 2.19.104.72:443 -> 192.168.2.6:49715 version: TLS 1.2
      Source: unknownHTTPS traffic detected: 2.19.104.72:443 -> 192.168.2.6:49717 version: TLS 1.2
      Source: unknownTCP traffic detected without corresponding DNS query: 173.222.162.64
      Source: unknownTCP traffic detected without corresponding DNS query: 173.222.162.64
      Source: unknownTCP traffic detected without corresponding DNS query: 173.222.162.64
      Source: unknownTCP traffic detected without corresponding DNS query: 173.222.162.64
      Source: unknownTCP traffic detected without corresponding DNS query: 173.222.162.64
      Source: unknownTCP traffic detected without corresponding DNS query: 173.222.162.64
      Source: unknownTCP traffic detected without corresponding DNS query: 2.19.104.72
      Source: unknownTCP traffic detected without corresponding DNS query: 2.19.104.72
      Source: unknownTCP traffic detected without corresponding DNS query: 2.19.104.72
      Source: unknownTCP traffic detected without corresponding DNS query: 2.19.104.72
      Source: unknownTCP traffic detected without corresponding DNS query: 2.19.104.72
      Source: unknownTCP traffic detected without corresponding DNS query: 2.19.104.72
      Source: unknownTCP traffic detected without corresponding DNS query: 2.19.104.72
      Source: unknownTCP traffic detected without corresponding DNS query: 2.19.104.72
      Source: unknownTCP traffic detected without corresponding DNS query: 2.19.104.72
      Source: unknownTCP traffic detected without corresponding DNS query: 2.19.104.72
      Source: unknownTCP traffic detected without corresponding DNS query: 2.19.104.72
      Source: unknownTCP traffic detected without corresponding DNS query: 2.19.104.72
      Source: unknownTCP traffic detected without corresponding DNS query: 2.19.104.72
      Source: unknownTCP traffic detected without corresponding DNS query: 173.222.162.64
      Source: unknownTCP traffic detected without corresponding DNS query: 2.19.104.72
      Source: unknownTCP traffic detected without corresponding DNS query: 2.19.104.72
      Source: unknownTCP traffic detected without corresponding DNS query: 2.19.104.72
      Source: unknownTCP traffic detected without corresponding DNS query: 2.19.104.72
      Source: unknownTCP traffic detected without corresponding DNS query: 2.19.104.72
      Source: unknownTCP traffic detected without corresponding DNS query: 2.19.104.72
      Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
      Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
      Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
      Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
      Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
      Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
      Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
      Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
      Source: global trafficHTTP traffic detected: GET /122861d2-a974-4dcc-80de-fc04620cb773/ HTTP/1.1Host: sclreg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
      Source: global trafficHTTP traffic detected: GET /cdn-cgi/styles/cf.errors.css HTTP/1.1Host: sclreg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://sclreg.com/122861d2-a974-4dcc-80de-fc04620cb773/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
      Source: global trafficHTTP traffic detected: GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1Host: sclreg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sclreg.com/cdn-cgi/styles/cf.errors.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
      Source: global trafficHTTP traffic detected: GET /favicon.ico HTTP/1.1Host: sclreg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sclreg.com/122861d2-a974-4dcc-80de-fc04620cb773/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
      Source: global trafficHTTP traffic detected: GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1Host: sclreg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
      Source: global trafficHTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: */*Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
      Source: global trafficDNS traffic detected: DNS query: sclreg.com
      Source: global trafficDNS traffic detected: DNS query: a.nel.cloudflare.com
      Source: global trafficDNS traffic detected: DNS query: www.google.com
      Source: unknownHTTP traffic detected: POST /report/v4?s=eM%2BLY7MD5DxS8Q4LGsl2hxq8n1FeuAZ43Kb5DKX6iCMpWhESE2zEaL4rccHh58Z8Q7l5Ln3RMXyGcMph9LJjIk822%2BRzelXJoF8pHoDggYmhCJ4X7PRRg9WgCYXS HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 450Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 23 May 2024 22:31:16 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400CF-Cache-Status: EXPIREDReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eM%2BLY7MD5DxS8Q4LGsl2hxq8n1FeuAZ43Kb5DKX6iCMpWhESE2zEaL4rccHh58Z8Q7l5Ln3RMXyGcMph9LJjIk822%2BRzelXJoF8pHoDggYmhCJ4X7PRRg9WgCYXS"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 88887eca2b6242dc-EWRalt-svc: h3=":443"; ma=86400
      Source: chromecache_44.2.drString found in binary or memory: https://www.cloudflare.com/5xx-error-landing
      Source: chromecache_44.2.drString found in binary or memory: https://www.cloudflare.com/learning/access-management/phishing-attack/
      Source: unknownNetwork traffic detected: HTTP traffic on port 49674 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 49708 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 49710 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 49672 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 49727 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 49704 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 49713 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49717
      Source: unknownNetwork traffic detected: HTTP traffic on port 49715 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49716
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49715
      Source: unknownNetwork traffic detected: HTTP traffic on port 49717 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49714
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49713
      Source: unknownNetwork traffic detected: HTTP traffic on port 49698 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 49709 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49710
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49698
      Source: unknownNetwork traffic detected: HTTP traffic on port 49673 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 49705 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49709
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49708
      Source: unknownNetwork traffic detected: HTTP traffic on port 49716 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 49714 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49705
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49727
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49704
      Source: unknownHTTPS traffic detected: 2.19.104.72:443 -> 192.168.2.6:49715 version: TLS 1.2
      Source: unknownHTTPS traffic detected: 2.19.104.72:443 -> 192.168.2.6:49717 version: TLS 1.2
      Source: classification engineClassification label: mal64.phis.win@16/9@8/6
      Source: unknownProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2388 --field-trial-handle=2216,i,16482093608261227541,114962425812962219,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
      Source: unknownProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sclreg.com/122861d2-a974-4dcc-80de-fc04620cb773/"
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2388 --field-trial-handle=2216,i,16482093608261227541,114962425812962219,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8Jump to behavior
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
      Source: Window RecorderWindow detected: More than 3 window changes detected
      ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
      Gather Victim Identity InformationAcquire InfrastructureValid AccountsWindows Management InstrumentationPath Interception1
      Process Injection
      1
      Process Injection
      OS Credential DumpingSystem Service DiscoveryRemote ServicesData from Local System1
      Encrypted Channel
      Exfiltration Over Other Network MediumAbuse Accessibility Features
      CredentialsDomainsDefault AccountsScheduled Task/JobBoot or Logon Initialization ScriptsBoot or Logon Initialization ScriptsRootkitLSASS MemoryApplication Window DiscoveryRemote Desktop ProtocolData from Removable Media4
      Non-Application Layer Protocol
      Exfiltration Over BluetoothNetwork Denial of Service
      Email AddressesDNS ServerDomain AccountsAtLogon Script (Windows)Logon Script (Windows)Obfuscated Files or InformationSecurity Account ManagerQuery RegistrySMB/Windows Admin SharesData from Network Shared Drive5
      Application Layer Protocol
      Automated ExfiltrationData Encrypted for Impact
      Employee NamesVirtual Private ServerLocal AccountsCronLogin HookLogin HookBinary PaddingNTDSSystem Network Configuration DiscoveryDistributed Component Object ModelInput Capture3
      Ingress Tool Transfer
      Traffic DuplicationData Destruction
      Hide Legend

      Legend:

      • Process
      • Signature
      • Created File
      • DNS/IP Info
      • Is Dropped
      • Is Windows Process
      • Number of created Registry Values
      • Number of created Files
      • Visual Basic
      • Delphi
      • Java
      • .Net C# or VB.NET
      • C, C++ or other language
      • Is malicious
      • Internet

      This section contains all screenshots as thumbnails, including those not shown in the slideshow.


      windows-stand
      SourceDetectionScannerLabelLink
      https://sclreg.com/122861d2-a974-4dcc-80de-fc04620cb773/100%Avira URL Cloudphishing
      https://sclreg.com/122861d2-a974-4dcc-80de-fc04620cb773/100%SlashNextCredential Stealing type: Phishing & Social usering
      No Antivirus matches
      No Antivirus matches
      No Antivirus matches
      SourceDetectionScannerLabelLink
      https://sclreg.com/cdn-cgi/images/icon-exclamation.png?1376755637100%Avira URL Cloudphishing
      https://www.cloudflare.com/learning/access-management/phishing-attack/0%Avira URL Cloudsafe
      https://a.nel.cloudflare.com/report/v4?s=eM%2BLY7MD5DxS8Q4LGsl2hxq8n1FeuAZ43Kb5DKX6iCMpWhESE2zEaL4rccHh58Z8Q7l5Ln3RMXyGcMph9LJjIk822%2BRzelXJoF8pHoDggYmhCJ4X7PRRg9WgCYXS0%Avira URL Cloudsafe
      https://sclreg.com/favicon.ico100%Avira URL Cloudphishing
      https://sclreg.com/cdn-cgi/styles/cf.errors.css100%Avira URL Cloudphishing
      https://www.cloudflare.com/5xx-error-landing0%Avira URL Cloudsafe
      NameIPActiveMaliciousAntivirus DetectionReputation
      a.nel.cloudflare.com
      35.190.80.1
      truefalse
        unknown
        www.google.com
        142.250.185.132
        truefalse
          unknown
          sclreg.com
          172.67.175.197
          truefalse
            unknown
            fp2e7a.wpc.phicdn.net
            192.229.221.95
            truefalse
              unknown
              NameMaliciousAntivirus DetectionReputation
              https://sclreg.com/favicon.icofalse
              • Avira URL Cloud: phishing
              unknown
              https://sclreg.com/cdn-cgi/styles/cf.errors.cssfalse
              • Avira URL Cloud: phishing
              unknown
              https://sclreg.com/122861d2-a974-4dcc-80de-fc04620cb773/true
                unknown
                https://sclreg.com/cdn-cgi/images/icon-exclamation.png?1376755637false
                • Avira URL Cloud: phishing
                unknown
                https://a.nel.cloudflare.com/report/v4?s=eM%2BLY7MD5DxS8Q4LGsl2hxq8n1FeuAZ43Kb5DKX6iCMpWhESE2zEaL4rccHh58Z8Q7l5Ln3RMXyGcMph9LJjIk822%2BRzelXJoF8pHoDggYmhCJ4X7PRRg9WgCYXSfalse
                • Avira URL Cloud: safe
                unknown
                NameSourceMaliciousAntivirus DetectionReputation
                https://www.cloudflare.com/learning/access-management/phishing-attack/chromecache_44.2.drfalse
                • Avira URL Cloud: safe
                unknown
                https://www.cloudflare.com/5xx-error-landingchromecache_44.2.drfalse
                • Avira URL Cloud: safe
                unknown
                • No. of IPs < 25%
                • 25% < No. of IPs < 50%
                • 50% < No. of IPs < 75%
                • 75% < No. of IPs
                IPDomainCountryFlagASNASN NameMalicious
                239.255.255.250
                unknownReserved
                unknownunknownfalse
                35.190.80.1
                a.nel.cloudflare.comUnited States
                15169GOOGLEUSfalse
                142.250.185.132
                www.google.comUnited States
                15169GOOGLEUSfalse
                172.67.175.197
                sclreg.comUnited States
                13335CLOUDFLARENETUSfalse
                IP
                192.168.2.7
                192.168.2.6
                Joe Sandbox version:40.0.0 Tourmaline
                Analysis ID:1446885
                Start date and time:2024-05-24 00:30:23 +02:00
                Joe Sandbox product:CloudBasic
                Overall analysis duration:0h 3m 10s
                Hypervisor based Inspection enabled:false
                Report type:full
                Cookbook file name:browseurl.jbs
                Sample URL:https://sclreg.com/122861d2-a974-4dcc-80de-fc04620cb773/
                Analysis system description:Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
                Number of analysed new started processes analysed:7
                Number of new started drivers analysed:0
                Number of existing processes analysed:0
                Number of existing drivers analysed:0
                Number of injected processes analysed:0
                Technologies:
                • HCA enabled
                • EGA enabled
                • AMSI enabled
                Analysis Mode:default
                Analysis stop reason:Timeout
                Detection:MAL
                Classification:mal64.phis.win@16/9@8/6
                EGA Information:Failed
                HCA Information:
                • Successful, ratio: 100%
                • Number of executed functions: 0
                • Number of non-executed functions: 0
                • Exclude process from analysis (whitelisted): WMIADAP.exe, SIHClient.exe, svchost.exe
                • Excluded IPs from analysis (whitelisted): 216.58.212.163, 108.177.15.84, 172.217.16.142, 34.104.35.123, 13.85.23.86, 93.184.221.240, 192.229.221.95, 20.3.187.198, 13.95.31.18, 172.217.18.3
                • Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, wu.azureedge.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
                • HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
                • Not all processes where analyzed, report is missing behavior information
                • Report size getting too big, too many NtSetInformationFile calls found.
                • VT rate limit hit for: https://sclreg.com/122861d2-a974-4dcc-80de-fc04620cb773/
                No simulations
                InputOutput
                URL: https://sclreg.com/122861d2-a974-4dcc-80de-fc04620cb773/ Model: Perplexity: mixtral-8x7b-instruct
                {
                "loginform": false,
                "reasons": [
                "The text does not contain any form fields for a user to input data.",
                "There is no mention of a username, password, or any other type of login credentials.",
                "The text is actually a warning about a potential phishing attempt and does not contain a login form."
                ]
                }
                O Warning Suspected Phishing This website has been reported for potential phishing. Phishing is when a site attempts to steal sensitive information by falsely presenting as a safe source. Leam More Ignore & Proceed Cloudflare Ray ID: 88887ebf5a6b7cb2  Your IP: Click to reveal  Performance & security by Claudflare 
                URL: https://sclreg.com/122861d2-a974-4dcc-80de-fc04620cb773/ Model: gpt-4o
                ```json
                {
                  "riskscore": 1,
                  "reasons": "The provided JavaScript code appears to manipulate the DOM to reveal or hide elements related to an IP address in the footer. There are no obvious signs of malicious activity such as data exfiltration, credential stealing, or unauthorized access. The code is relatively simple and does not perform any suspicious actions. However, any code that manipulates the DOM could potentially be used for phishing if combined with other malicious scripts, hence a minimal risk score of 1."
                }
                (function(){function d(){var b=a.getElementById("cf-footer-item-ip"),c=a.getElementById("cf-footer-ip-reveal");b&&"classList"in b&&(b.classList.remove("hidden"),c.addEventListener("click",function(){c.classList.add("hidden");a.getElementById("cf-footer-ip").classList.remove("hidden")}))}var a=document;document.addEventListener&&a.addEventListener("DOMContentLoaded",d)})();
                No context
                No context
                No context
                No context
                No context
                Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                File Type:PNG image data, 54 x 54, 8-bit colormap, non-interlaced
                Category:downloaded
                Size (bytes):452
                Entropy (8bit):7.0936408308765495
                Encrypted:false
                SSDEEP:12:6v/7EljW8E6Cl2SYh8SZM4tf70FSDvMXDxJp6ScFChY9:U8hCl2SIdZBtAFSDUX/ozIhK
                MD5:C33DE66281E933259772399D10A6AFE8
                SHA1:B9F9D500F8814381451011D4DCF59CD2D90AD94F
                SHA-256:F1591A5221136C49438642155691AE6C68E25B7241F3D7EBE975B09A77662016
                SHA-512:5834FB9D66F550E6CECFE484B7B6A14F3FCA795405DECE8E652BD69AD917B94B6BBDCDF7639161B9C07F0D33EABD3E79580446B5867219F72F4FC43FD43B98C3
                Malicious:false
                Reputation:low
                URL:https://sclreg.com/cdn-cgi/images/icon-exclamation.png?1376755637
                Preview:.PNG........IHDR...6...6............3PLTE.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?..".....tRNS.@0.`........ P.p`...../IDATx.....0...l..6....+...~yJ.F"....oE..L.3..[..i2..n.WyJ..z&.....F.......b....p~...|:t5.m...fp.i./e....%.%...n.P...enV.....!...,.......E........t![HW.B.g.R.\^.e..o+........%.&-j..q...f@..o...]... ....u0.x..2K.+C..8.U.L.Y.[=.....y...o.tF..]M..U.,4..........a.>/.)....C3gNI.i...R.=....Q7..K......IEND.B`.
                Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                File Type:PNG image data, 54 x 54, 8-bit colormap, non-interlaced
                Category:dropped
                Size (bytes):452
                Entropy (8bit):7.0936408308765495
                Encrypted:false
                SSDEEP:12:6v/7EljW8E6Cl2SYh8SZM4tf70FSDvMXDxJp6ScFChY9:U8hCl2SIdZBtAFSDUX/ozIhK
                MD5:C33DE66281E933259772399D10A6AFE8
                SHA1:B9F9D500F8814381451011D4DCF59CD2D90AD94F
                SHA-256:F1591A5221136C49438642155691AE6C68E25B7241F3D7EBE975B09A77662016
                SHA-512:5834FB9D66F550E6CECFE484B7B6A14F3FCA795405DECE8E652BD69AD917B94B6BBDCDF7639161B9C07F0D33EABD3E79580446B5867219F72F4FC43FD43B98C3
                Malicious:false
                Reputation:low
                Preview:.PNG........IHDR...6...6............3PLTE.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?..".....tRNS.@0.`........ P.p`...../IDATx.....0...l..6....+...~yJ.F"....oE..L.3..[..i2..n.WyJ..z&.....F.......b....p~...|:t5.m...fp.i./e....%.%...n.P...enV.....!...,.......E........t![HW.B.g.R.\^.e..o+........%.&-j..q...f@..o...]... ....u0.x..2K.+C..8.U.L.Y.[=.....y...o.tF..]M..U.,4..........a.>/.)....C3gNI.i...R.=....Q7..K......IEND.B`.
                Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                File Type:HTML document, ASCII text
                Category:downloaded
                Size (bytes):272
                Entropy (8bit):5.215211155178454
                Encrypted:false
                SSDEEP:6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoIRCw1KBFEcXaoD:J0+oxBeRmR9etdzRxGezHttma+
                MD5:C887869904BCCDBD10124890DC4B75A0
                SHA1:95F448AD0A86DB5F86489A5A6D8338D0CA1DAE99
                SHA-256:031C255C5692EB688D7B5E7F35D6982CF6CC1D44D7F7B3F3BBBABF5AD9522807
                SHA-512:0C6244187B12E9890BEAC5F77FFC0BD4F07F0A291063FA68823970CE96792B05AC3C219DA52392FF3CD1EFE5140C1433C4FD7E6C72BBC16CF4DEF7DA54FAB4D8
                Malicious:false
                Reputation:low
                URL:https://sclreg.com/favicon.ico
                Preview:<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<hr>.<address>Apache/2.4.52 (Ubuntu) Server at sclreg.com Port 80</address>.</body></html>.
                Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                File Type:HTML document, ASCII text, with very long lines (394)
                Category:downloaded
                Size (bytes):4432
                Entropy (8bit):5.1002037549320685
                Encrypted:false
                SSDEEP:96:1j9jwIjYjUDK/D5DMF+BOiso0A2ZLimxrR79PaQxJbGD:1j9jhjYjIK/Vo+tsRZOmxr59ieJGD
                MD5:133250926C5CF49D2C7DBF8BE5F3FA08
                SHA1:31472FE5B9D3D4464DB28003BA75ABC14979ADC6
                SHA-256:1DFBC4CB76B25DAF75C853639D3940DAC7C24E8C82FCCD2D1036C7D9C2141EDD
                SHA-512:FE8F6DB5498421271010EA1115F4098BF80D86F66C14B1FB943FD36BF4ACB10904BE8D23908109FDDE9095328A00B7848136B389E128B8BDDB3F8648D32D1442
                Malicious:false
                Reputation:low
                URL:https://sclreg.com/122861d2-a974-4dcc-80de-fc04620cb773/
                Preview:<!DOCTYPE html>. [if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->. [if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->. [if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->. [if gt IE 8]> > <html class="no-js" lang="en-US"> <![endif]-->.<head>.<title>Suspected phishing site | Cloudflare</title>.<meta charset="UTF-8" />.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />.<meta http-equiv="X-UA-Compatible" content="IE=Edge" />.<meta name="robots" content="noindex, nofollow" />.<meta name="viewport" content="width=device-width,initial-scale=1" />.<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />. [if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->.<style>body{margin:0;padding:0}</style>... [if gte IE 10]> >.<script>. if (!navigator.cookieEnabled) {. window.addEventListener('DOMContentLoaded
                Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                File Type:ASCII text, with very long lines (24050)
                Category:downloaded
                Size (bytes):24051
                Entropy (8bit):4.941039417164537
                Encrypted:false
                SSDEEP:192:VuR/6okgTQwq23gGM8lUR9YRGQ2BwoX6zp+1+nDT1FvxKSI7/UsV7MSE6XZ2dKzk:JwV+oUcoQJpdf1dxKSI7/Ue7ZX2qk
                MD5:5E8C69A459A691B5D1B9BE442332C87D
                SHA1:F24DD1AD7C9080575D92A9A9A2C42620725EF836
                SHA-256:84E3C77025ACE5AF143972B4A40FC834DCDFD4E449D4B36A57E62326F16B3091
                SHA-512:6DB74B262D717916DE0B0B600EEAD2CC6A10E52A9E26D701FAE761FCBC931F35F251553669A92BE3B524F380F32E62AC6AD572BEA23C78965228CE9EFB92ED42
                Malicious:false
                Reputation:low
                URL:https://sclreg.com/cdn-cgi/styles/cf.errors.css
                Preview:#cf-wrapper a,#cf-wrapper abbr,#cf-wrapper article,#cf-wrapper aside,#cf-wrapper b,#cf-wrapper big,#cf-wrapper blockquote,#cf-wrapper body,#cf-wrapper canvas,#cf-wrapper caption,#cf-wrapper center,#cf-wrapper cite,#cf-wrapper code,#cf-wrapper dd,#cf-wrapper del,#cf-wrapper details,#cf-wrapper dfn,#cf-wrapper div,#cf-wrapper dl,#cf-wrapper dt,#cf-wrapper em,#cf-wrapper embed,#cf-wrapper fieldset,#cf-wrapper figcaption,#cf-wrapper figure,#cf-wrapper footer,#cf-wrapper form,#cf-wrapper h1,#cf-wrapper h2,#cf-wrapper h3,#cf-wrapper h4,#cf-wrapper h5,#cf-wrapper h6,#cf-wrapper header,#cf-wrapper hgroup,#cf-wrapper html,#cf-wrapper i,#cf-wrapper iframe,#cf-wrapper img,#cf-wrapper label,#cf-wrapper legend,#cf-wrapper li,#cf-wrapper mark,#cf-wrapper menu,#cf-wrapper nav,#cf-wrapper object,#cf-wrapper ol,#cf-wrapper output,#cf-wrapper p,#cf-wrapper pre,#cf-wrapper s,#cf-wrapper samp,#cf-wrapper section,#cf-wrapper small,#cf-wrapper span,#cf-wrapper strike,#cf-wrapper strong,#cf-wrapper sub,#cf-w
                No static file info
                TimestampSource PortDest PortSource IPDest IP
                May 24, 2024 00:31:07.307964087 CEST49673443192.168.2.6173.222.162.64
                May 24, 2024 00:31:07.307964087 CEST49674443192.168.2.6173.222.162.64
                May 24, 2024 00:31:07.636061907 CEST49672443192.168.2.6173.222.162.64
                May 24, 2024 00:31:14.435419083 CEST49704443192.168.2.6172.67.175.197
                May 24, 2024 00:31:14.435453892 CEST44349704172.67.175.197192.168.2.6
                May 24, 2024 00:31:14.435570955 CEST49704443192.168.2.6172.67.175.197
                May 24, 2024 00:31:14.435949087 CEST49705443192.168.2.6172.67.175.197
                May 24, 2024 00:31:14.435955048 CEST44349705172.67.175.197192.168.2.6
                May 24, 2024 00:31:14.436019897 CEST49705443192.168.2.6172.67.175.197
                May 24, 2024 00:31:14.436167002 CEST49704443192.168.2.6172.67.175.197
                May 24, 2024 00:31:14.436178923 CEST44349704172.67.175.197192.168.2.6
                May 24, 2024 00:31:14.436387062 CEST49705443192.168.2.6172.67.175.197
                May 24, 2024 00:31:14.436398983 CEST44349705172.67.175.197192.168.2.6
                May 24, 2024 00:31:14.985239029 CEST44349704172.67.175.197192.168.2.6
                May 24, 2024 00:31:14.985738039 CEST49704443192.168.2.6172.67.175.197
                May 24, 2024 00:31:14.985752106 CEST44349704172.67.175.197192.168.2.6
                May 24, 2024 00:31:14.986815929 CEST44349704172.67.175.197192.168.2.6
                May 24, 2024 00:31:14.986922026 CEST49704443192.168.2.6172.67.175.197
                May 24, 2024 00:31:14.988289118 CEST49704443192.168.2.6172.67.175.197
                May 24, 2024 00:31:14.988354921 CEST44349704172.67.175.197192.168.2.6
                May 24, 2024 00:31:14.988646030 CEST49704443192.168.2.6172.67.175.197
                May 24, 2024 00:31:15.016608000 CEST44349705172.67.175.197192.168.2.6
                May 24, 2024 00:31:15.016993046 CEST49705443192.168.2.6172.67.175.197
                May 24, 2024 00:31:15.017004967 CEST44349705172.67.175.197192.168.2.6
                May 24, 2024 00:31:15.020567894 CEST44349705172.67.175.197192.168.2.6
                May 24, 2024 00:31:15.020654917 CEST49705443192.168.2.6172.67.175.197
                May 24, 2024 00:31:15.021083117 CEST49705443192.168.2.6172.67.175.197
                May 24, 2024 00:31:15.021145105 CEST44349705172.67.175.197192.168.2.6
                May 24, 2024 00:31:15.029275894 CEST49704443192.168.2.6172.67.175.197
                May 24, 2024 00:31:15.029285908 CEST44349704172.67.175.197192.168.2.6
                May 24, 2024 00:31:15.075917006 CEST49704443192.168.2.6172.67.175.197
                May 24, 2024 00:31:15.075917006 CEST49705443192.168.2.6172.67.175.197
                May 24, 2024 00:31:15.075939894 CEST44349705172.67.175.197192.168.2.6
                May 24, 2024 00:31:15.122113943 CEST49705443192.168.2.6172.67.175.197
                May 24, 2024 00:31:15.143428087 CEST44349704172.67.175.197192.168.2.6
                May 24, 2024 00:31:15.146680117 CEST44349704172.67.175.197192.168.2.6
                May 24, 2024 00:31:15.146759987 CEST44349704172.67.175.197192.168.2.6
                May 24, 2024 00:31:15.146799088 CEST49704443192.168.2.6172.67.175.197
                May 24, 2024 00:31:15.146806002 CEST44349704172.67.175.197192.168.2.6
                May 24, 2024 00:31:15.146869898 CEST49704443192.168.2.6172.67.175.197
                May 24, 2024 00:31:15.149935007 CEST44349704172.67.175.197192.168.2.6
                May 24, 2024 00:31:15.150126934 CEST44349704172.67.175.197192.168.2.6
                May 24, 2024 00:31:15.150197029 CEST49704443192.168.2.6172.67.175.197
                May 24, 2024 00:31:15.157582998 CEST49704443192.168.2.6172.67.175.197
                May 24, 2024 00:31:15.157603025 CEST44349704172.67.175.197192.168.2.6
                May 24, 2024 00:31:15.163219929 CEST49705443192.168.2.6172.67.175.197
                May 24, 2024 00:31:15.206537962 CEST44349705172.67.175.197192.168.2.6
                May 24, 2024 00:31:15.290432930 CEST44349705172.67.175.197192.168.2.6
                May 24, 2024 00:31:15.296936035 CEST44349705172.67.175.197192.168.2.6
                May 24, 2024 00:31:15.297033072 CEST44349705172.67.175.197192.168.2.6
                May 24, 2024 00:31:15.297070980 CEST49705443192.168.2.6172.67.175.197
                May 24, 2024 00:31:15.297091961 CEST44349705172.67.175.197192.168.2.6
                May 24, 2024 00:31:15.297162056 CEST49705443192.168.2.6172.67.175.197
                May 24, 2024 00:31:15.297168970 CEST44349705172.67.175.197192.168.2.6
                May 24, 2024 00:31:15.303656101 CEST44349705172.67.175.197192.168.2.6
                May 24, 2024 00:31:15.303930044 CEST49705443192.168.2.6172.67.175.197
                May 24, 2024 00:31:15.303940058 CEST44349705172.67.175.197192.168.2.6
                May 24, 2024 00:31:15.315474987 CEST44349705172.67.175.197192.168.2.6
                May 24, 2024 00:31:15.315570116 CEST44349705172.67.175.197192.168.2.6
                May 24, 2024 00:31:15.315633059 CEST49705443192.168.2.6172.67.175.197
                May 24, 2024 00:31:15.315649033 CEST44349705172.67.175.197192.168.2.6
                May 24, 2024 00:31:15.316168070 CEST49705443192.168.2.6172.67.175.197
                May 24, 2024 00:31:15.320128918 CEST44349705172.67.175.197192.168.2.6
                May 24, 2024 00:31:15.324755907 CEST44349705172.67.175.197192.168.2.6
                May 24, 2024 00:31:15.324841022 CEST44349705172.67.175.197192.168.2.6
                May 24, 2024 00:31:15.324841976 CEST49705443192.168.2.6172.67.175.197
                May 24, 2024 00:31:15.324872017 CEST44349705172.67.175.197192.168.2.6
                May 24, 2024 00:31:15.325006008 CEST49705443192.168.2.6172.67.175.197
                May 24, 2024 00:31:15.403359890 CEST44349705172.67.175.197192.168.2.6
                May 24, 2024 00:31:15.404920101 CEST44349705172.67.175.197192.168.2.6
                May 24, 2024 00:31:15.405018091 CEST44349705172.67.175.197192.168.2.6
                May 24, 2024 00:31:15.405038118 CEST49705443192.168.2.6172.67.175.197
                May 24, 2024 00:31:15.405056953 CEST44349705172.67.175.197192.168.2.6
                May 24, 2024 00:31:15.405345917 CEST49705443192.168.2.6172.67.175.197
                May 24, 2024 00:31:15.409760952 CEST44349705172.67.175.197192.168.2.6
                May 24, 2024 00:31:15.409934044 CEST44349705172.67.175.197192.168.2.6
                May 24, 2024 00:31:15.410012007 CEST49705443192.168.2.6172.67.175.197
                May 24, 2024 00:31:15.410129070 CEST49705443192.168.2.6172.67.175.197
                May 24, 2024 00:31:15.410156965 CEST44349705172.67.175.197192.168.2.6
                May 24, 2024 00:31:15.410171986 CEST49705443192.168.2.6172.67.175.197
                May 24, 2024 00:31:15.410255909 CEST49705443192.168.2.6172.67.175.197
                May 24, 2024 00:31:15.444670916 CEST49708443192.168.2.6172.67.175.197
                May 24, 2024 00:31:15.444715977 CEST44349708172.67.175.197192.168.2.6
                May 24, 2024 00:31:15.444825888 CEST49708443192.168.2.6172.67.175.197
                May 24, 2024 00:31:15.445564985 CEST49708443192.168.2.6172.67.175.197
                May 24, 2024 00:31:15.445594072 CEST44349708172.67.175.197192.168.2.6
                May 24, 2024 00:31:15.972678900 CEST44349708172.67.175.197192.168.2.6
                May 24, 2024 00:31:16.016434908 CEST49708443192.168.2.6172.67.175.197
                May 24, 2024 00:31:16.016469955 CEST44349708172.67.175.197192.168.2.6
                May 24, 2024 00:31:16.017039061 CEST44349708172.67.175.197192.168.2.6
                May 24, 2024 00:31:16.021445990 CEST49708443192.168.2.6172.67.175.197
                May 24, 2024 00:31:16.021548033 CEST44349708172.67.175.197192.168.2.6
                May 24, 2024 00:31:16.022250891 CEST49708443192.168.2.6172.67.175.197
                May 24, 2024 00:31:16.062500954 CEST44349708172.67.175.197192.168.2.6
                May 24, 2024 00:31:16.154455900 CEST44349708172.67.175.197192.168.2.6
                May 24, 2024 00:31:16.154558897 CEST44349708172.67.175.197192.168.2.6
                May 24, 2024 00:31:16.154616117 CEST49708443192.168.2.6172.67.175.197
                May 24, 2024 00:31:16.162648916 CEST49708443192.168.2.6172.67.175.197
                May 24, 2024 00:31:16.162662029 CEST44349708172.67.175.197192.168.2.6
                May 24, 2024 00:31:16.187968016 CEST49709443192.168.2.6172.67.175.197
                May 24, 2024 00:31:16.187994003 CEST44349709172.67.175.197192.168.2.6
                May 24, 2024 00:31:16.188064098 CEST49709443192.168.2.6172.67.175.197
                May 24, 2024 00:31:16.188682079 CEST49709443192.168.2.6172.67.175.197
                May 24, 2024 00:31:16.188694954 CEST44349709172.67.175.197192.168.2.6
                May 24, 2024 00:31:16.291212082 CEST49710443192.168.2.6172.67.175.197
                May 24, 2024 00:31:16.291245937 CEST44349710172.67.175.197192.168.2.6
                May 24, 2024 00:31:16.291317940 CEST49710443192.168.2.6172.67.175.197
                May 24, 2024 00:31:16.293534994 CEST49710443192.168.2.6172.67.175.197
                May 24, 2024 00:31:16.293570995 CEST44349710172.67.175.197192.168.2.6
                May 24, 2024 00:31:16.691173077 CEST44349709172.67.175.197192.168.2.6
                May 24, 2024 00:31:16.705039024 CEST49709443192.168.2.6172.67.175.197
                May 24, 2024 00:31:16.705115080 CEST44349709172.67.175.197192.168.2.6
                May 24, 2024 00:31:16.706228971 CEST44349709172.67.175.197192.168.2.6
                May 24, 2024 00:31:16.707293987 CEST49709443192.168.2.6172.67.175.197
                May 24, 2024 00:31:16.707449913 CEST44349709172.67.175.197192.168.2.6
                May 24, 2024 00:31:16.707627058 CEST49709443192.168.2.6172.67.175.197
                May 24, 2024 00:31:16.750535965 CEST44349709172.67.175.197192.168.2.6
                May 24, 2024 00:31:16.795200109 CEST44349710172.67.175.197192.168.2.6
                May 24, 2024 00:31:16.795541048 CEST49710443192.168.2.6172.67.175.197
                May 24, 2024 00:31:16.795588017 CEST44349710172.67.175.197192.168.2.6
                May 24, 2024 00:31:16.799705982 CEST44349710172.67.175.197192.168.2.6
                May 24, 2024 00:31:16.799819946 CEST49710443192.168.2.6172.67.175.197
                May 24, 2024 00:31:16.800451040 CEST49710443192.168.2.6172.67.175.197
                May 24, 2024 00:31:16.800617933 CEST44349710172.67.175.197192.168.2.6
                May 24, 2024 00:31:16.800731897 CEST49710443192.168.2.6172.67.175.197
                May 24, 2024 00:31:16.800750017 CEST44349710172.67.175.197192.168.2.6
                May 24, 2024 00:31:16.853363991 CEST49710443192.168.2.6172.67.175.197
                May 24, 2024 00:31:16.915874958 CEST49674443192.168.2.6173.222.162.64
                May 24, 2024 00:31:16.915874958 CEST49673443192.168.2.6173.222.162.64
                May 24, 2024 00:31:16.963819027 CEST44349710172.67.175.197192.168.2.6
                May 24, 2024 00:31:16.964003086 CEST44349710172.67.175.197192.168.2.6
                May 24, 2024 00:31:16.964066029 CEST49710443192.168.2.6172.67.175.197
                May 24, 2024 00:31:16.966006041 CEST49710443192.168.2.6172.67.175.197
                May 24, 2024 00:31:16.966022968 CEST44349710172.67.175.197192.168.2.6
                May 24, 2024 00:31:17.023865938 CEST44349709172.67.175.197192.168.2.6
                May 24, 2024 00:31:17.023997068 CEST44349709172.67.175.197192.168.2.6
                May 24, 2024 00:31:17.024051905 CEST49709443192.168.2.6172.67.175.197
                May 24, 2024 00:31:17.025213003 CEST49709443192.168.2.6172.67.175.197
                May 24, 2024 00:31:17.025222063 CEST44349709172.67.175.197192.168.2.6
                May 24, 2024 00:31:17.239653111 CEST49672443192.168.2.6173.222.162.64
                May 24, 2024 00:31:17.359441042 CEST49713443192.168.2.635.190.80.1
                May 24, 2024 00:31:17.359549046 CEST4434971335.190.80.1192.168.2.6
                May 24, 2024 00:31:17.359688044 CEST49713443192.168.2.635.190.80.1
                May 24, 2024 00:31:17.367557049 CEST49714443192.168.2.6142.250.185.132
                May 24, 2024 00:31:17.367587090 CEST44349714142.250.185.132192.168.2.6
                May 24, 2024 00:31:17.367778063 CEST49714443192.168.2.6142.250.185.132
                May 24, 2024 00:31:17.368949890 CEST49714443192.168.2.6142.250.185.132
                May 24, 2024 00:31:17.368959904 CEST44349714142.250.185.132192.168.2.6
                May 24, 2024 00:31:17.369824886 CEST49713443192.168.2.635.190.80.1
                May 24, 2024 00:31:17.369837999 CEST4434971335.190.80.1192.168.2.6
                May 24, 2024 00:31:17.842082024 CEST49715443192.168.2.62.19.104.72
                May 24, 2024 00:31:17.842135906 CEST443497152.19.104.72192.168.2.6
                May 24, 2024 00:31:17.842206955 CEST49715443192.168.2.62.19.104.72
                May 24, 2024 00:31:17.854794025 CEST49715443192.168.2.62.19.104.72
                May 24, 2024 00:31:17.854814053 CEST443497152.19.104.72192.168.2.6
                May 24, 2024 00:31:17.873934984 CEST4434971335.190.80.1192.168.2.6
                May 24, 2024 00:31:17.874644995 CEST49713443192.168.2.635.190.80.1
                May 24, 2024 00:31:17.874660015 CEST4434971335.190.80.1192.168.2.6
                May 24, 2024 00:31:17.875740051 CEST4434971335.190.80.1192.168.2.6
                May 24, 2024 00:31:17.875818968 CEST49713443192.168.2.635.190.80.1
                May 24, 2024 00:31:17.878261089 CEST49713443192.168.2.635.190.80.1
                May 24, 2024 00:31:17.878489017 CEST49713443192.168.2.635.190.80.1
                May 24, 2024 00:31:17.878494024 CEST4434971335.190.80.1192.168.2.6
                May 24, 2024 00:31:17.878514051 CEST4434971335.190.80.1192.168.2.6
                May 24, 2024 00:31:17.931518078 CEST49713443192.168.2.635.190.80.1
                May 24, 2024 00:31:17.931560040 CEST4434971335.190.80.1192.168.2.6
                May 24, 2024 00:31:17.978393078 CEST49713443192.168.2.635.190.80.1
                May 24, 2024 00:31:18.019541979 CEST4434971335.190.80.1192.168.2.6
                May 24, 2024 00:31:18.027535915 CEST4434971335.190.80.1192.168.2.6
                May 24, 2024 00:31:18.027614117 CEST49713443192.168.2.635.190.80.1
                May 24, 2024 00:31:18.129301071 CEST49713443192.168.2.635.190.80.1
                May 24, 2024 00:31:18.129328966 CEST4434971335.190.80.1192.168.2.6
                May 24, 2024 00:31:18.134452105 CEST49716443192.168.2.635.190.80.1
                May 24, 2024 00:31:18.134500980 CEST4434971635.190.80.1192.168.2.6
                May 24, 2024 00:31:18.134569883 CEST49716443192.168.2.635.190.80.1
                May 24, 2024 00:31:18.159235954 CEST49716443192.168.2.635.190.80.1
                May 24, 2024 00:31:18.159265041 CEST4434971635.190.80.1192.168.2.6
                May 24, 2024 00:31:18.509083986 CEST443497152.19.104.72192.168.2.6
                May 24, 2024 00:31:18.509170055 CEST49715443192.168.2.62.19.104.72
                May 24, 2024 00:31:18.514175892 CEST49715443192.168.2.62.19.104.72
                May 24, 2024 00:31:18.514195919 CEST443497152.19.104.72192.168.2.6
                May 24, 2024 00:31:18.514538050 CEST443497152.19.104.72192.168.2.6
                May 24, 2024 00:31:18.556520939 CEST49715443192.168.2.62.19.104.72
                May 24, 2024 00:31:18.564918995 CEST49715443192.168.2.62.19.104.72
                May 24, 2024 00:31:18.610508919 CEST443497152.19.104.72192.168.2.6
                May 24, 2024 00:31:18.636955023 CEST4434971635.190.80.1192.168.2.6
                May 24, 2024 00:31:18.637473106 CEST49716443192.168.2.635.190.80.1
                May 24, 2024 00:31:18.637502909 CEST4434971635.190.80.1192.168.2.6
                May 24, 2024 00:31:18.637876034 CEST4434971635.190.80.1192.168.2.6
                May 24, 2024 00:31:18.638386011 CEST49716443192.168.2.635.190.80.1
                May 24, 2024 00:31:18.638583899 CEST4434971635.190.80.1192.168.2.6
                May 24, 2024 00:31:18.638772011 CEST49716443192.168.2.635.190.80.1
                May 24, 2024 00:31:18.686501026 CEST4434971635.190.80.1192.168.2.6
                May 24, 2024 00:31:18.822154999 CEST443497152.19.104.72192.168.2.6
                May 24, 2024 00:31:18.822242975 CEST443497152.19.104.72192.168.2.6
                May 24, 2024 00:31:18.822318077 CEST49715443192.168.2.62.19.104.72
                May 24, 2024 00:31:18.822551012 CEST49715443192.168.2.62.19.104.72
                May 24, 2024 00:31:18.822608948 CEST443497152.19.104.72192.168.2.6
                May 24, 2024 00:31:18.822644949 CEST49715443192.168.2.62.19.104.72
                May 24, 2024 00:31:18.822664022 CEST443497152.19.104.72192.168.2.6
                May 24, 2024 00:31:18.862508059 CEST4434971635.190.80.1192.168.2.6
                May 24, 2024 00:31:18.862572908 CEST4434971635.190.80.1192.168.2.6
                May 24, 2024 00:31:18.862648964 CEST49716443192.168.2.635.190.80.1
                May 24, 2024 00:31:18.862974882 CEST49716443192.168.2.635.190.80.1
                May 24, 2024 00:31:18.862992048 CEST4434971635.190.80.1192.168.2.6
                May 24, 2024 00:31:18.876105070 CEST49717443192.168.2.62.19.104.72
                May 24, 2024 00:31:18.876137018 CEST443497172.19.104.72192.168.2.6
                May 24, 2024 00:31:18.876210928 CEST49717443192.168.2.62.19.104.72
                May 24, 2024 00:31:18.877146959 CEST49717443192.168.2.62.19.104.72
                May 24, 2024 00:31:18.877157927 CEST443497172.19.104.72192.168.2.6
                May 24, 2024 00:31:18.941838026 CEST44349698173.222.162.64192.168.2.6
                May 24, 2024 00:31:18.941931963 CEST49698443192.168.2.6173.222.162.64
                May 24, 2024 00:31:19.580207109 CEST443497172.19.104.72192.168.2.6
                May 24, 2024 00:31:19.580419064 CEST49717443192.168.2.62.19.104.72
                May 24, 2024 00:31:19.584815979 CEST49717443192.168.2.62.19.104.72
                May 24, 2024 00:31:19.584830046 CEST443497172.19.104.72192.168.2.6
                May 24, 2024 00:31:19.585055113 CEST443497172.19.104.72192.168.2.6
                May 24, 2024 00:31:19.586610079 CEST49717443192.168.2.62.19.104.72
                May 24, 2024 00:31:19.634502888 CEST443497172.19.104.72192.168.2.6
                May 24, 2024 00:31:19.899806976 CEST443497172.19.104.72192.168.2.6
                May 24, 2024 00:31:19.899964094 CEST443497172.19.104.72192.168.2.6
                May 24, 2024 00:31:19.900213003 CEST49717443192.168.2.62.19.104.72
                May 24, 2024 00:31:19.900940895 CEST49717443192.168.2.62.19.104.72
                May 24, 2024 00:31:19.900990009 CEST443497172.19.104.72192.168.2.6
                May 24, 2024 00:31:19.901022911 CEST49717443192.168.2.62.19.104.72
                May 24, 2024 00:31:19.901038885 CEST443497172.19.104.72192.168.2.6
                May 24, 2024 00:31:47.385413885 CEST49714443192.168.2.6142.250.185.132
                May 24, 2024 00:31:47.430502892 CEST44349714142.250.185.132192.168.2.6
                May 24, 2024 00:31:47.471410990 CEST44349714142.250.185.132192.168.2.6
                May 24, 2024 00:31:47.471934080 CEST49714443192.168.2.6142.250.185.132
                May 24, 2024 00:32:17.327294111 CEST49727443192.168.2.6142.250.185.132
                May 24, 2024 00:32:17.327327013 CEST44349727142.250.185.132192.168.2.6
                May 24, 2024 00:32:17.327398062 CEST49727443192.168.2.6142.250.185.132
                May 24, 2024 00:32:17.327685118 CEST49727443192.168.2.6142.250.185.132
                May 24, 2024 00:32:17.327701092 CEST44349727142.250.185.132192.168.2.6
                May 24, 2024 00:32:17.974335909 CEST44349727142.250.185.132192.168.2.6
                May 24, 2024 00:32:17.974822044 CEST49727443192.168.2.6142.250.185.132
                May 24, 2024 00:32:17.974844933 CEST44349727142.250.185.132192.168.2.6
                May 24, 2024 00:32:17.975864887 CEST44349727142.250.185.132192.168.2.6
                May 24, 2024 00:32:17.975924969 CEST49727443192.168.2.6142.250.185.132
                May 24, 2024 00:32:17.977813959 CEST49727443192.168.2.6142.250.185.132
                May 24, 2024 00:32:17.977884054 CEST44349727142.250.185.132192.168.2.6
                May 24, 2024 00:32:18.026882887 CEST49727443192.168.2.6142.250.185.132
                May 24, 2024 00:32:18.026896954 CEST44349727142.250.185.132192.168.2.6
                May 24, 2024 00:32:18.073745966 CEST49727443192.168.2.6142.250.185.132
                May 24, 2024 00:32:27.894259930 CEST44349727142.250.185.132192.168.2.6
                May 24, 2024 00:32:27.894397974 CEST44349727142.250.185.132192.168.2.6
                May 24, 2024 00:32:27.894470930 CEST49727443192.168.2.6142.250.185.132
                May 24, 2024 00:32:28.997783899 CEST49727443192.168.2.6142.250.185.132
                May 24, 2024 00:32:28.997811079 CEST44349727142.250.185.132192.168.2.6
                TimestampSource PortDest PortSource IPDest IP
                May 24, 2024 00:31:12.772005081 CEST53593661.1.1.1192.168.2.6
                May 24, 2024 00:31:12.785552979 CEST53627731.1.1.1192.168.2.6
                May 24, 2024 00:31:13.837867022 CEST53642881.1.1.1192.168.2.6
                May 24, 2024 00:31:14.401232958 CEST5753953192.168.2.61.1.1.1
                May 24, 2024 00:31:14.403409004 CEST5173253192.168.2.61.1.1.1
                May 24, 2024 00:31:14.421665907 CEST53575391.1.1.1192.168.2.6
                May 24, 2024 00:31:14.435415983 CEST53517321.1.1.1192.168.2.6
                May 24, 2024 00:31:16.257869005 CEST6390853192.168.2.61.1.1.1
                May 24, 2024 00:31:16.258430958 CEST6014053192.168.2.61.1.1.1
                May 24, 2024 00:31:16.271969080 CEST53639081.1.1.1192.168.2.6
                May 24, 2024 00:31:16.286367893 CEST53601401.1.1.1192.168.2.6
                May 24, 2024 00:31:17.266474962 CEST5441153192.168.2.61.1.1.1
                May 24, 2024 00:31:17.266650915 CEST5550153192.168.2.61.1.1.1
                May 24, 2024 00:31:17.267313957 CEST5390053192.168.2.61.1.1.1
                May 24, 2024 00:31:17.267446041 CEST5291653192.168.2.61.1.1.1
                May 24, 2024 00:31:17.306504011 CEST53539001.1.1.1192.168.2.6
                May 24, 2024 00:31:17.306535006 CEST53555011.1.1.1192.168.2.6
                May 24, 2024 00:31:17.306549072 CEST53544111.1.1.1192.168.2.6
                May 24, 2024 00:31:17.306566000 CEST53529161.1.1.1192.168.2.6
                May 24, 2024 00:31:31.061525106 CEST53505031.1.1.1192.168.2.6
                May 24, 2024 00:31:50.099350929 CEST53649441.1.1.1192.168.2.6
                May 24, 2024 00:32:12.345211029 CEST53531321.1.1.1192.168.2.6
                May 24, 2024 00:32:13.069550037 CEST53518581.1.1.1192.168.2.6
                TimestampSource IPDest IPChecksumCodeType
                May 24, 2024 00:31:14.435544968 CEST192.168.2.61.1.1.1c22b(Port unreachable)Destination Unreachable
                TimestampSource IPDest IPTrans IDOP CodeNameTypeClassDNS over HTTPS
                May 24, 2024 00:31:14.401232958 CEST192.168.2.61.1.1.10x1badStandard query (0)sclreg.comA (IP address)IN (0x0001)false
                May 24, 2024 00:31:14.403409004 CEST192.168.2.61.1.1.10xa709Standard query (0)sclreg.com65IN (0x0001)false
                May 24, 2024 00:31:16.257869005 CEST192.168.2.61.1.1.10x3521Standard query (0)sclreg.comA (IP address)IN (0x0001)false
                May 24, 2024 00:31:16.258430958 CEST192.168.2.61.1.1.10x9a80Standard query (0)sclreg.com65IN (0x0001)false
                May 24, 2024 00:31:17.266474962 CEST192.168.2.61.1.1.10x572Standard query (0)a.nel.cloudflare.comA (IP address)IN (0x0001)false
                May 24, 2024 00:31:17.266650915 CEST192.168.2.61.1.1.10x81bfStandard query (0)a.nel.cloudflare.com65IN (0x0001)false
                May 24, 2024 00:31:17.267313957 CEST192.168.2.61.1.1.10x8f40Standard query (0)www.google.comA (IP address)IN (0x0001)false
                May 24, 2024 00:31:17.267446041 CEST192.168.2.61.1.1.10xc29bStandard query (0)www.google.com65IN (0x0001)false
                TimestampSource IPDest IPTrans IDReply CodeNameCNameAddressTypeClassDNS over HTTPS
                May 24, 2024 00:31:14.421665907 CEST1.1.1.1192.168.2.60x1badNo error (0)sclreg.com172.67.175.197A (IP address)IN (0x0001)false
                May 24, 2024 00:31:14.421665907 CEST1.1.1.1192.168.2.60x1badNo error (0)sclreg.com104.21.17.113A (IP address)IN (0x0001)false
                May 24, 2024 00:31:14.435415983 CEST1.1.1.1192.168.2.60xa709No error (0)sclreg.com65IN (0x0001)false
                May 24, 2024 00:31:16.271969080 CEST1.1.1.1192.168.2.60x3521No error (0)sclreg.com172.67.175.197A (IP address)IN (0x0001)false
                May 24, 2024 00:31:16.271969080 CEST1.1.1.1192.168.2.60x3521No error (0)sclreg.com104.21.17.113A (IP address)IN (0x0001)false
                May 24, 2024 00:31:16.286367893 CEST1.1.1.1192.168.2.60x9a80No error (0)sclreg.com65IN (0x0001)false
                May 24, 2024 00:31:17.306504011 CEST1.1.1.1192.168.2.60x8f40No error (0)www.google.com142.250.185.132A (IP address)IN (0x0001)false
                May 24, 2024 00:31:17.306549072 CEST1.1.1.1192.168.2.60x572No error (0)a.nel.cloudflare.com35.190.80.1A (IP address)IN (0x0001)false
                May 24, 2024 00:31:17.306566000 CEST1.1.1.1192.168.2.60xc29bNo error (0)www.google.com65IN (0x0001)false
                May 24, 2024 00:31:29.239487886 CEST1.1.1.1192.168.2.60x2c31No error (0)fp2e7a.wpc.2be4.phicdn.netfp2e7a.wpc.phicdn.netCNAME (Canonical name)IN (0x0001)false
                May 24, 2024 00:31:29.239487886 CEST1.1.1.1192.168.2.60x2c31No error (0)fp2e7a.wpc.phicdn.net192.229.221.95A (IP address)IN (0x0001)false
                May 24, 2024 00:31:43.341581106 CEST1.1.1.1192.168.2.60xe1f2No error (0)fp2e7a.wpc.2be4.phicdn.netfp2e7a.wpc.phicdn.netCNAME (Canonical name)IN (0x0001)false
                May 24, 2024 00:31:43.341581106 CEST1.1.1.1192.168.2.60xe1f2No error (0)fp2e7a.wpc.phicdn.net192.229.221.95A (IP address)IN (0x0001)false
                May 24, 2024 00:32:05.253689051 CEST1.1.1.1192.168.2.60xde64No error (0)fp2e7a.wpc.2be4.phicdn.netfp2e7a.wpc.phicdn.netCNAME (Canonical name)IN (0x0001)false
                May 24, 2024 00:32:05.253689051 CEST1.1.1.1192.168.2.60xde64No error (0)fp2e7a.wpc.phicdn.net192.229.221.95A (IP address)IN (0x0001)false
                May 24, 2024 00:32:25.587352037 CEST1.1.1.1192.168.2.60x529bNo error (0)fp2e7a.wpc.2be4.phicdn.netfp2e7a.wpc.phicdn.netCNAME (Canonical name)IN (0x0001)false
                May 24, 2024 00:32:25.587352037 CEST1.1.1.1192.168.2.60x529bNo error (0)fp2e7a.wpc.phicdn.net192.229.221.95A (IP address)IN (0x0001)false
                • sclreg.com
                • https:
                • a.nel.cloudflare.com
                • fs.microsoft.com
                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                0192.168.2.649704172.67.175.1974435772C:\Program Files\Google\Chrome\Application\chrome.exe
                TimestampBytes transferredDirectionData
                2024-05-23 22:31:14 UTC690OUTGET /122861d2-a974-4dcc-80de-fc04620cb773/ HTTP/1.1
                Host: sclreg.com
                Connection: keep-alive
                sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                sec-ch-ua-mobile: ?0
                sec-ch-ua-platform: "Windows"
                Upgrade-Insecure-Requests: 1
                User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
                Sec-Fetch-Site: none
                Sec-Fetch-Mode: navigate
                Sec-Fetch-User: ?1
                Sec-Fetch-Dest: document
                Accept-Encoding: gzip, deflate, br
                Accept-Language: en-US,en;q=0.9
                2024-05-23 22:31:15 UTC539INHTTP/1.1 200 OK
                Date: Thu, 23 May 2024 22:31:15 GMT
                Content-Type: text/html; charset=UTF-8
                Transfer-Encoding: chunked
                Connection: close
                X-Frame-Options: SAMEORIGIN
                Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8FxjZf05JP5%2FABOnUBk9a6n0e5KIwM6aVu4hDpxOqO%2FLtnzZdufMs%2FhMfuKx%2Fu3dt4mJitao7SX8MjVQvLDvjDmsD8sXC9Z0Go8YHqhSLjkvTOsk7sSHbN5tjcDR"}],"group":"cf-nel","max_age":604800}
                NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                Server: cloudflare
                CF-RAY: 88887ebf5a6b7cb2-EWR
                2024-05-23 22:31:15 UTC830INData Raw: 31 31 35 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20
                Data Ascii: 1150<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
                2024-05-23 22:31:15 UTC1369INData Raw: 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 45 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 6f 6f 6b 69 65 2d 61 6c 65 72 74 27 29 3b 0a
                Data Ascii: .css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEnabled) { window.addEventListener('DOMContentLoaded', function () { var cookieEl = document.getElementById('cookie-alert');
                2024-05-23 22:31:15 UTC1369INData Raw: 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 61 74 6f 6b 22 20 76 61 6c 75 65 3d 22 73 6f 46 33 6a 4d 79 78 49 6a 2e 6d 79 68 7a 45 6c 4e 35 64 47 41 66 37 66 59 73 70 47 50 53 42 31 4d 33 33 5a 34 78 77 4d 77 30 2d 31 37 31 36 35 30 33 34 37 35 2d 30 2e 30 2e 31 2e 31 2d 2f 31 32 32 38 36 31 64 32 2d 61 39 37 34 2d 34 64 63 63 2d 38 30 64 65 2d 66 63 30 34 36 32 30 63 62 37 37 33 2f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 6c 65 61 72 6e 69 6e 67 2f 61 63 63 65 73 73 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 70 68 69 73 68 69 6e 67 2d 61 74 74 61
                Data Ascii: <input type="hidden" name="atok" value="soF3jMyxIj.myhzElN5dGAf7fYspGPSB1M33Z4xwMw0-1716503475-0.0.1.1-/122861d2-a974-4dcc-80de-fc04620cb773/"> <a href="https://www.cloudflare.com/learning/access-management/phishing-atta
                2024-05-23 22:31:15 UTC872INData Raw: 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 3c 73 70 61 6e 3e 50 65 72 66 6f 72 6d 61 6e 63 65 20 26 61 6d 70 3b 20 73 65 63 75 72 69 74 79 20 62 79 3c 2f 73 70 61 6e 3e 20 3c 61 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 35 78 78 2d 65 72 72 6f 72 2d 6c 61 6e 64 69 6e 67 22 20 69 64 3d 22 62 72 61 6e 64 5f 6c 69 6e 6b 22 20 74 61 72 67 65 74
                Data Ascii: ="cf-footer-separator sm:hidden">&bull;</span> </span> <span class="cf-footer-item sm:block sm:mb-1"><span>Performance &amp; security by</span> <a rel="noopener noreferrer" href="https://www.cloudflare.com/5xx-error-landing" id="brand_link" target
                2024-05-23 22:31:15 UTC5INData Raw: 30 0d 0a 0d 0a
                Data Ascii: 0


                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                1192.168.2.649705172.67.175.1974435772C:\Program Files\Google\Chrome\Application\chrome.exe
                TimestampBytes transferredDirectionData
                2024-05-23 22:31:15 UTC584OUTGET /cdn-cgi/styles/cf.errors.css HTTP/1.1
                Host: sclreg.com
                Connection: keep-alive
                sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                sec-ch-ua-mobile: ?0
                User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                sec-ch-ua-platform: "Windows"
                Accept: text/css,*/*;q=0.1
                Sec-Fetch-Site: same-origin
                Sec-Fetch-Mode: no-cors
                Sec-Fetch-Dest: style
                Referer: https://sclreg.com/122861d2-a974-4dcc-80de-fc04620cb773/
                Accept-Encoding: gzip, deflate, br
                Accept-Language: en-US,en;q=0.9
                2024-05-23 22:31:15 UTC411INHTTP/1.1 200 OK
                Date: Thu, 23 May 2024 22:31:15 GMT
                Content-Type: text/css
                Content-Length: 24051
                Connection: close
                Last-Modified: Mon, 20 May 2024 10:28:51 GMT
                ETag: "664b25e3-5df3"
                Server: cloudflare
                CF-RAY: 88887ec04d8d43e2-EWR
                X-Frame-Options: DENY
                X-Content-Type-Options: nosniff
                Expires: Fri, 24 May 2024 00:31:15 GMT
                Cache-Control: max-age=7200
                Cache-Control: public
                Accept-Ranges: bytes
                2024-05-23 22:31:15 UTC958INData Raw: 23 63 66 2d 77 72 61 70 70 65 72 20 61 2c 23 63 66 2d 77 72 61 70 70 65 72 20 61 62 62 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 61 72 74 69 63 6c 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 61 73 69 64 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 69 67 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 6c 6f 63 6b 71 75 6f 74 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 6f 64 79 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 61 6e 76 61 73 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 61 70 74 69 6f 6e 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 65 6e 74 65 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 69 74 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 6f 64 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 64 64 2c 23 63 66 2d 77 72 61 70 70
                Data Ascii: #cf-wrapper a,#cf-wrapper abbr,#cf-wrapper article,#cf-wrapper aside,#cf-wrapper b,#cf-wrapper big,#cf-wrapper blockquote,#cf-wrapper body,#cf-wrapper canvas,#cf-wrapper caption,#cf-wrapper center,#cf-wrapper cite,#cf-wrapper code,#cf-wrapper dd,#cf-wrapp
                2024-05-23 22:31:15 UTC1369INData Raw: 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 74 72 6f 6e 67 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 75 62 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 75 6d 6d 61 72 79 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 75 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 61 62 6c 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 62 6f 64 79 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 66 6f 6f 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 68 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 68 65 61 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 75 2c 23 63 66 2d 77 72 61 70 70 65 72 20 75 6c 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f
                Data Ascii: e,#cf-wrapper strong,#cf-wrapper sub,#cf-wrapper summary,#cf-wrapper sup,#cf-wrapper table,#cf-wrapper tbody,#cf-wrapper td,#cf-wrapper tfoot,#cf-wrapper th,#cf-wrapper thead,#cf-wrapper tr,#cf-wrapper tt,#cf-wrapper u,#cf-wrapper ul{margin:0;padding:0;bo
                2024-05-23 22:31:15 UTC1369INData Raw: 31 2e 35 21 69 6d 70 6f 72 74 61 6e 74 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 6e 6f 72 6d 61 6c 3b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 34 36 2c 31 33 39 2c 33 31 2c 2e 33 29 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 73 65 63 74 69 6f 6e 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 65 63 74 69 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 20 30 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 65 6d
                Data Ascii: 1.5!important;text-decoration:none!important;letter-spacing:normal;-webkit-tap-highlight-color:rgba(246,139,31,.3);-webkit-font-smoothing:antialiased}#cf-wrapper .cf-section,#cf-wrapper section{background:0 0;display:block;margin-bottom:2em;margin-top:2em
                2024-05-23 22:31:15 UTC1369INData Raw: 6c 64 28 32 6e 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 34 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 6e 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 66 6f 75 72 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 6e 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 74 77 6f 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 6e 29 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 32 2e 35 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 32 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69
                Data Ascii: ld(2n),#cf-wrapper .cf-columns.cols-4>.cf-column:nth-child(2n),#cf-wrapper .cf-columns.four>.cf-column:nth-child(2n),#cf-wrapper .cf-columns.two>.cf-column:nth-child(2n){padding-left:22.5px;padding-right:0}#cf-wrapper .cf-columns.cols-2>.cf-column:nth-chi
                2024-05-23 22:31:15 UTC1369INData Raw: 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 66 6f 75 72 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 6f 64 64 29 7b 63 6c 65 61 72 3a 6e 6f 6e 65 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 34 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 34 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 34 6e 2b 31 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 66 6f 75 72 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73
                Data Ascii: ),#cf-wrapper .cf-columns.four>.cf-column:nth-child(odd){clear:none}#cf-wrapper .cf-columns.cols-4>.cf-column:first-child,#cf-wrapper .cf-columns.cols-4>.cf-column:nth-child(4n+1),#cf-wrapper .cf-columns.four>.cf-column:first-child,#cf-wrapper .cf-columns
                2024-05-23 22:31:15 UTC1369INData Raw: 30 3b 70 61 64 64 69 6e 67 3a 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 31 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 34 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 36 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 7d 23 63 66 2d 77 72 61 70 70 65
                Data Ascii: 0;padding:0}#cf-wrapper h1,#cf-wrapper h2,#cf-wrapper h3{font-weight:400}#cf-wrapper h4,#cf-wrapper h5,#cf-wrapper h6,#cf-wrapper strong{font-weight:600}#cf-wrapper h1{font-size:36px;line-height:1.2}#cf-wrapper h2{font-size:30px;line-height:1.3}#cf-wrappe
                2024-05-23 22:31:15 UTC1369INData Raw: 68 32 2b 68 34 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 2b 68 35 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 2b 68 36 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 2b 68 35 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 2b 68 36 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 2b 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 34 2b 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2b 6f 6c 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2b 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2b 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 35 65 6d 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 39 39 39 3b 63 6f 6c
                Data Ascii: h2+h4,#cf-wrapper h2+h5,#cf-wrapper h2+h6,#cf-wrapper h3+h5,#cf-wrapper h3+h6,#cf-wrapper h3+p,#cf-wrapper h4+p,#cf-wrapper h5+ol,#cf-wrapper h5+p,#cf-wrapper h5+ul{margin-top:.5em}#cf-wrapper .cf-btn{background-color:transparent;border:1px solid #999;col
                2024-05-23 22:31:15 UTC1369INData Raw: 3a 23 36 32 61 31 64 38 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 31 36 33 39 35 39 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 64 61 6e 67 65 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 65 72 72 6f 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 69 6d 70 6f 72 74 61 6e 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 62 64 32 34 32 36 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 64 61 6e 67 65 72 3a 68 6f 76 65 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 65 72 72 6f 72 3a 68 6f 76 65 72 2c 23
                Data Ascii: :#62a1d8;border:1px solid #163959;color:#fff}#cf-wrapper .cf-btn-danger,#cf-wrapper .cf-btn-error,#cf-wrapper .cf-btn-important{background-color:#bd2426;border-color:transparent;color:#fff}#cf-wrapper .cf-btn-danger:hover,#cf-wrapper .cf-btn-error:hover,#
                2024-05-23 22:31:15 UTC1369INData Raw: 61 63 65 3a 6e 6f 77 72 61 70 7d 23 63 66 2d 77 72 61 70 70 65 72 20 69 6e 70 75 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 65 6c 65 63 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 65 78 74 61 72 65 61 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 39 39 39 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6f 6c 6f 72 3a 23 34 30 34 30 34 30 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 36 36 36 37 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 34 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 6e
                Data Ascii: ace:nowrap}#cf-wrapper input,#cf-wrapper select,#cf-wrapper textarea{background:#fff!important;border:1px solid #999!important;color:#404040!important;font-size:.86667em!important;line-height:1.24!important;margin:0 0 1em!important;max-width:100%!importan
                2024-05-23 22:31:15 UTC1369INData Raw: 3a 23 34 30 34 30 34 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 70 61 64 64 69 6e 67 3a 37 2e 35 70 78 20 31 35 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 61 6c 65 72 74 3a 65 6d 70 74 79 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 61 6c 65 72 74 20 2e 63 66 2d 63 6c 6f 73 65 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 2e 37 35 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 70 61 64 64 69 6e
                Data Ascii: :#404040;font-size:13px;padding:7.5px 15px;position:relative;vertical-align:middle;border-radius:2px}#cf-wrapper .cf-alert:empty{display:none}#cf-wrapper .cf-alert .cf-close{border:1px solid transparent;color:inherit;font-size:18.75px;line-height:1;paddin


                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                2192.168.2.649708172.67.175.1974435772C:\Program Files\Google\Chrome\Application\chrome.exe
                TimestampBytes transferredDirectionData
                2024-05-23 22:31:16 UTC639OUTGET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1
                Host: sclreg.com
                Connection: keep-alive
                sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                sec-ch-ua-mobile: ?0
                User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                sec-ch-ua-platform: "Windows"
                Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                Sec-Fetch-Site: same-origin
                Sec-Fetch-Mode: no-cors
                Sec-Fetch-Dest: image
                Referer: https://sclreg.com/cdn-cgi/styles/cf.errors.css
                Accept-Encoding: gzip, deflate, br
                Accept-Language: en-US,en;q=0.9
                2024-05-23 22:31:16 UTC409INHTTP/1.1 200 OK
                Date: Thu, 23 May 2024 22:31:16 GMT
                Content-Type: image/png
                Content-Length: 452
                Connection: close
                Last-Modified: Wed, 22 May 2024 09:02:18 GMT
                ETag: "664db49a-1c4"
                Server: cloudflare
                CF-RAY: 88887ec5abda8c4b-EWR
                X-Frame-Options: DENY
                X-Content-Type-Options: nosniff
                Expires: Fri, 24 May 2024 00:31:16 GMT
                Cache-Control: max-age=7200
                Cache-Control: public
                Accept-Ranges: bytes
                2024-05-23 22:31:16 UTC452INData Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 36 00 00 00 36 08 03 00 00 00 bb 9b 9a ef 00 00 00 33 50 4c 54 45 c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f ab b2 22 ed 00 00 00 11 74 52 4e 53 00 40 30 10 60 8f bf ff ef 7f af 9f df 20 50 cf 70 60 82 c8 9b 00 00 01 2f 49 44 41 54 78 01 bd d3 05 d2 b4 30 10 06 e1 8e 6c de c1 36 dc ff b2 9f 2b 95 c9 12 7e 79 4a 91 46 22 b8 c2 8b c8 80 94 6f 45 1f ac 4c 81 33 f2 ac 03 5b 1e 95 69 32 b5 94 6e 98 57 79 4a c4 91 8a 7a 26 9a 82 a9 af a4 46 95 f5 d0 1a fb 95 c7 62 bf b2 f2 e9 70 7e e3 a7 a0 df ee 7c 3a 74 35 f1 6d b3 b3 99 66 70 af 69 f2 2f 65 ef c7 fa 99 25 de 25 1b c9 b4 f0 6e d2 50 a6 ed fb 65
                Data Ascii: PNGIHDR663PLTEE?E?E?E?E?E?E?E?E?E?E?E?E?E?E?E?E?"tRNS@0` Pp`/IDATx0l6+~yJF"oEL3[i2nWyJz&Fbp~|:t5mfpi/e%%nPe


                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                3192.168.2.649709172.67.175.1974435772C:\Program Files\Google\Chrome\Application\chrome.exe
                TimestampBytes transferredDirectionData
                2024-05-23 22:31:16 UTC613OUTGET /favicon.ico HTTP/1.1
                Host: sclreg.com
                Connection: keep-alive
                sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                sec-ch-ua-mobile: ?0
                User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                sec-ch-ua-platform: "Windows"
                Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                Sec-Fetch-Site: same-origin
                Sec-Fetch-Mode: no-cors
                Sec-Fetch-Dest: image
                Referer: https://sclreg.com/122861d2-a974-4dcc-80de-fc04620cb773/
                Accept-Encoding: gzip, deflate, br
                Accept-Language: en-US,en;q=0.9
                2024-05-23 22:31:17 UTC604INHTTP/1.1 404 Not Found
                Date: Thu, 23 May 2024 22:31:16 GMT
                Content-Type: text/html; charset=iso-8859-1
                Transfer-Encoding: chunked
                Connection: close
                Cache-Control: max-age=14400
                CF-Cache-Status: EXPIRED
                Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eM%2BLY7MD5DxS8Q4LGsl2hxq8n1FeuAZ43Kb5DKX6iCMpWhESE2zEaL4rccHh58Z8Q7l5Ln3RMXyGcMph9LJjIk822%2BRzelXJoF8pHoDggYmhCJ4X7PRRg9WgCYXS"}],"group":"cf-nel","max_age":604800}
                NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                Server: cloudflare
                CF-RAY: 88887eca2b6242dc-EWR
                alt-svc: h3=":443"; ma=86400
                2024-05-23 22:31:17 UTC279INData Raw: 31 31 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 73 63 6c 72 65 67 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64
                Data Ascii: 110<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.52 (Ubuntu) Server at sclreg.com Port 80</ad
                2024-05-23 22:31:17 UTC5INData Raw: 30 0d 0a 0d 0a
                Data Ascii: 0


                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                4192.168.2.649710172.67.175.1974435772C:\Program Files\Google\Chrome\Application\chrome.exe
                TimestampBytes transferredDirectionData
                2024-05-23 22:31:16 UTC380OUTGET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1
                Host: sclreg.com
                Connection: keep-alive
                User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                Accept: */*
                Sec-Fetch-Site: none
                Sec-Fetch-Mode: cors
                Sec-Fetch-Dest: empty
                Accept-Encoding: gzip, deflate, br
                Accept-Language: en-US,en;q=0.9
                2024-05-23 22:31:16 UTC409INHTTP/1.1 200 OK
                Date: Thu, 23 May 2024 22:31:16 GMT
                Content-Type: image/png
                Content-Length: 452
                Connection: close
                Last-Modified: Mon, 20 May 2024 10:28:51 GMT
                ETag: "664b25e3-1c4"
                Server: cloudflare
                CF-RAY: 88887ecabea342b7-EWR
                X-Frame-Options: DENY
                X-Content-Type-Options: nosniff
                Expires: Fri, 24 May 2024 00:31:16 GMT
                Cache-Control: max-age=7200
                Cache-Control: public
                Accept-Ranges: bytes
                2024-05-23 22:31:16 UTC452INData Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 36 00 00 00 36 08 03 00 00 00 bb 9b 9a ef 00 00 00 33 50 4c 54 45 c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f ab b2 22 ed 00 00 00 11 74 52 4e 53 00 40 30 10 60 8f bf ff ef 7f af 9f df 20 50 cf 70 60 82 c8 9b 00 00 01 2f 49 44 41 54 78 01 bd d3 05 d2 b4 30 10 06 e1 8e 6c de c1 36 dc ff b2 9f 2b 95 c9 12 7e 79 4a 91 46 22 b8 c2 8b c8 80 94 6f 45 1f ac 4c 81 33 f2 ac 03 5b 1e 95 69 32 b5 94 6e 98 57 79 4a c4 91 8a 7a 26 9a 82 a9 af a4 46 95 f5 d0 1a fb 95 c7 62 bf b2 f2 e9 70 7e e3 a7 a0 df ee 7c 3a 74 35 f1 6d b3 b3 99 66 70 af 69 f2 2f 65 ef c7 fa 99 25 de 25 1b c9 b4 f0 6e d2 50 a6 ed fb 65
                Data Ascii: PNGIHDR663PLTEE?E?E?E?E?E?E?E?E?E?E?E?E?E?E?E?E?"tRNS@0` Pp`/IDATx0l6+~yJF"oEL3[i2nWyJz&Fbp~|:t5mfpi/e%%nPe


                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                5192.168.2.64971335.190.80.14435772C:\Program Files\Google\Chrome\Application\chrome.exe
                TimestampBytes transferredDirectionData
                2024-05-23 22:31:17 UTC519OUTOPTIONS /report/v4?s=eM%2BLY7MD5DxS8Q4LGsl2hxq8n1FeuAZ43Kb5DKX6iCMpWhESE2zEaL4rccHh58Z8Q7l5Ln3RMXyGcMph9LJjIk822%2BRzelXJoF8pHoDggYmhCJ4X7PRRg9WgCYXS HTTP/1.1
                Host: a.nel.cloudflare.com
                Connection: keep-alive
                Origin: https://sclreg.com
                Access-Control-Request-Method: POST
                Access-Control-Request-Headers: content-type
                User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                Accept-Encoding: gzip, deflate, br
                Accept-Language: en-US,en;q=0.9
                2024-05-23 22:31:18 UTC336INHTTP/1.1 200 OK
                content-length: 0
                access-control-max-age: 86400
                access-control-allow-methods: POST, OPTIONS
                access-control-allow-origin: *
                access-control-allow-headers: content-length, content-type
                date: Thu, 23 May 2024 22:31:17 GMT
                Via: 1.1 google
                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
                Connection: close


                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                6192.168.2.6497152.19.104.72443
                TimestampBytes transferredDirectionData
                2024-05-23 22:31:18 UTC161OUTHEAD /fs/windows/config.json HTTP/1.1
                Connection: Keep-Alive
                Accept: */*
                Accept-Encoding: identity
                User-Agent: Microsoft BITS/7.8
                Host: fs.microsoft.com
                2024-05-23 22:31:18 UTC467INHTTP/1.1 200 OK
                Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json
                Content-Type: application/octet-stream
                ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7"
                Last-Modified: Tue, 16 May 2017 22:58:00 GMT
                Server: ECAcc (lpl/EF06)
                X-CID: 11
                X-Ms-ApiVersion: Distribute 1.2
                X-Ms-Region: prod-eus-z1
                Cache-Control: public, max-age=236313
                Date: Thu, 23 May 2024 22:31:18 GMT
                Connection: close
                X-CID: 2


                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                7192.168.2.64971635.190.80.14435772C:\Program Files\Google\Chrome\Application\chrome.exe
                TimestampBytes transferredDirectionData
                2024-05-23 22:31:18 UTC466OUTPOST /report/v4?s=eM%2BLY7MD5DxS8Q4LGsl2hxq8n1FeuAZ43Kb5DKX6iCMpWhESE2zEaL4rccHh58Z8Q7l5Ln3RMXyGcMph9LJjIk822%2BRzelXJoF8pHoDggYmhCJ4X7PRRg9WgCYXS HTTP/1.1
                Host: a.nel.cloudflare.com
                Connection: keep-alive
                Content-Length: 450
                Content-Type: application/reports+json
                User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                Accept-Encoding: gzip, deflate, br
                Accept-Language: en-US,en;q=0.9
                2024-05-23 22:31:18 UTC450OUTData Raw: 5b 7b 22 61 67 65 22 3a 32 34 31 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 38 33 37 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 73 63 6c 72 65 67 2e 63 6f 6d 2f 31 32 32 38 36 31 64 32 2d 61 39 37 34 2d 34 64 63 63 2d 38 30 64 65 2d 66 63 30 34 36 32 30 63 62 37 37 33 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 37 35 2e 31 39 37 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72
                Data Ascii: [{"age":241,"body":{"elapsed_time":837,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://sclreg.com/122861d2-a974-4dcc-80de-fc04620cb773/","sampling_fraction":1.0,"server_ip":"172.67.175.197","status_code":404,"type":"http.err
                2024-05-23 22:31:18 UTC168INHTTP/1.1 200 OK
                content-length: 0
                date: Thu, 23 May 2024 22:31:18 GMT
                Via: 1.1 google
                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
                Connection: close


                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                8192.168.2.6497172.19.104.72443
                TimestampBytes transferredDirectionData
                2024-05-23 22:31:19 UTC239OUTGET /fs/windows/config.json HTTP/1.1
                Connection: Keep-Alive
                Accept: */*
                Accept-Encoding: identity
                If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT
                Range: bytes=0-2147483646
                User-Agent: Microsoft BITS/7.8
                Host: fs.microsoft.com
                2024-05-23 22:31:19 UTC535INHTTP/1.1 200 OK
                Content-Type: application/octet-stream
                Last-Modified: Tue, 16 May 2017 22:58:00 GMT
                ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7"
                ApiVersion: Distribute 1.1
                Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json
                X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y=
                Cache-Control: public, max-age=236234
                Date: Thu, 23 May 2024 22:31:19 GMT
                Content-Length: 55
                Connection: close
                X-CID: 2
                2024-05-23 22:31:19 UTC55INData Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d
                Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}


                Click to jump to process

                Click to jump to process

                Click to jump to process

                Target ID:0
                Start time:18:31:08
                Start date:23/05/2024
                Path:C:\Program Files\Google\Chrome\Application\chrome.exe
                Wow64 process (32bit):false
                Commandline:"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
                Imagebase:0x7ff684c40000
                File size:3'242'272 bytes
                MD5 hash:5BBFA6CBDF4C254EB368D534F9E23C92
                Has elevated privileges:true
                Has administrator privileges:true
                Programmed in:C, C++ or other language
                Reputation:low
                Has exited:false

                Target ID:2
                Start time:18:31:11
                Start date:23/05/2024
                Path:C:\Program Files\Google\Chrome\Application\chrome.exe
                Wow64 process (32bit):false
                Commandline:"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2388 --field-trial-handle=2216,i,16482093608261227541,114962425812962219,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
                Imagebase:0x7ff684c40000
                File size:3'242'272 bytes
                MD5 hash:5BBFA6CBDF4C254EB368D534F9E23C92
                Has elevated privileges:true
                Has administrator privileges:true
                Programmed in:C, C++ or other language
                Reputation:low
                Has exited:false

                Target ID:3
                Start time:18:31:13
                Start date:23/05/2024
                Path:C:\Program Files\Google\Chrome\Application\chrome.exe
                Wow64 process (32bit):false
                Commandline:"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sclreg.com/122861d2-a974-4dcc-80de-fc04620cb773/"
                Imagebase:0x7ff684c40000
                File size:3'242'272 bytes
                MD5 hash:5BBFA6CBDF4C254EB368D534F9E23C92
                Has elevated privileges:true
                Has administrator privileges:true
                Programmed in:C, C++ or other language
                Reputation:low
                Has exited:true

                No disassembly